$ rpki-client -vvf rpki.apnic.net/member_repository/A91B624E/BD95C38EE03E11E9B2B9DA11C4F9AE02/VCRPZF3qDVCWaFgNE46CUnn7Vng.mft File: VCRPZF3qDVCWaFgNE46CUnn7Vng.mft (raw, json) Hash identifier: HQvozA7m4zBCC205h3uNncdXuyIqDRk9b0JbzsIWWqk= Subject key identifier: 41:3F:4D:84:95:16:D9:6C:4D:86:B3:2E:DC:AF:3D:D1:CE:CB:BD:F2 Authority key identifier: 54:24:4F:64:5D:EA:0D:50:96:68:58:0D:13:8E:82:52:79:FB:56:78 Certificate issuer: /CN=A91B624E/serialNumber=54244F645DEA0D509668580D138E825279FB5678 Certificate serial: 0CF7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VCRPZF3qDVCWaFgNE46CUnn7Vng.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B624E/BD95C38EE03E11E9B2B9DA11C4F9AE02/VCRPZF3qDVCWaFgNE46CUnn7Vng.mft Manifest number: 0CEE Signing time: Thu 24 Apr 2025 18:04:24 +0000 Manifest this update: Thu 24 Apr 2025 18:04:24 +0000 Manifest next update: Thu 01 May 2025 18:04:24 +0000 Files and hashes: 1: VCRPZF3qDVCWaFgNE46CUnn7Vng.crl (hash: xTTSAGdH7INUmv/WW6KvKFPYmkpZaV+DnXw7nXfVqdw=) 2: 690390E80FAA11EB8B893F1EC4F9AE02.roa (hash: 50X2YknGPNQ7f3oYcKge6hlv5pd3PV5tqtttq6Hz8zE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B624E/BD95C38EE03E11E9B2B9DA11C4F9AE02/VCRPZF3qDVCWaFgNE46CUnn7Vng.crl rsync://rpki.apnic.net/member_repository/A91B624E/BD95C38EE03E11E9B2B9DA11C4F9AE02/VCRPZF3qDVCWaFgNE46CUnn7Vng.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VCRPZF3qDVCWaFgNE46CUnn7Vng.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 18:04:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3319 (0xcf7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B624E, serialNumber=54244F645DEA0D509668580D138E825279FB5678 Validity Not Before: Apr 24 18:04:24 2025 GMT Not After : May 1 18:04:24 2025 GMT Subject: CN=680a7d28-5756 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:86:cc:43:f2:05:3e:c5:f5:b4:be:3f:2d:bf: 5b:22:ba:36:37:4c:98:9f:f8:74:ff:cd:0d:95:72: b4:a8:e1:99:15:1b:d1:95:30:db:37:54:ec:bd:f7: 68:62:d4:c6:45:45:61:da:9f:4b:e5:2b:f5:75:b0: 76:e5:a8:c9:8a:d0:20:ae:27:65:5b:b7:97:4b:13: 1c:98:be:60:9f:45:b8:2e:f8:7b:ee:7e:c8:d8:ad: 91:e7:2c:9f:9c:61:d9:da:01:bf:cb:52:8b:e5:8a: a4:c1:f1:8a:47:69:58:36:16:67:6f:56:3a:91:f3: 5c:c2:3c:8a:d5:4a:ee:0c:7f:c1:a3:0f:4d:75:01: 8a:ce:5f:fb:cd:38:c1:2d:5e:ca:4d:d7:9b:46:43: a5:f2:46:a3:28:89:5d:53:b3:1d:8a:0a:2f:d3:eb: 41:5e:48:c8:ec:61:a3:a3:8e:24:f0:e9:07:08:bd: 66:e3:e7:24:51:4d:b5:52:5e:88:0e:34:8b:ed:e1: 2e:0b:94:9d:3c:68:0f:cc:be:c5:72:e9:0f:63:4f: 6e:ec:f1:fa:d5:ea:2f:7f:d5:25:5b:11:e6:5e:9a: 9c:73:b2:f1:68:d0:a4:b3:d5:0a:41:8a:b4:4e:15: ac:d5:05:5e:d8:f7:db:db:29:d6:ac:fb:12:30:d6: 02:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:3F:4D:84:95:16:D9:6C:4D:86:B3:2E:DC:AF:3D:D1:CE:CB:BD:F2 X509v3 Authority Key Identifier: keyid:54:24:4F:64:5D:EA:0D:50:96:68:58:0D:13:8E:82:52:79:FB:56:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B624E/BD95C38EE03E11E9B2B9DA11C4F9AE02/VCRPZF3qDVCWaFgNE46CUnn7Vng.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VCRPZF3qDVCWaFgNE46CUnn7Vng.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B624E/BD95C38EE03E11E9B2B9DA11C4F9AE02/VCRPZF3qDVCWaFgNE46CUnn7Vng.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 49:21:34:a4:ce:3d:7c:d2:bf:ba:64:29:91:e5:c6:9d:88:7c: ee:7b:08:9b:66:49:fa:4d:0c:cb:e1:6e:59:54:d8:41:ea:59: 33:cc:52:2b:9e:c4:03:56:4e:ac:69:b6:28:ac:86:30:33:5c: c5:db:09:be:e4:bd:1c:0c:18:58:3a:49:f3:02:57:75:9c:fa: 13:cd:bf:06:13:e2:85:4a:e8:7d:b7:61:ee:4f:58:a5:e4:4a: 3c:42:26:69:46:28:0d:0e:e9:0d:a4:4b:75:d4:83:b5:ae:42: 06:0d:1a:35:53:d0:66:2d:0a:09:c3:1e:f3:95:23:53:c5:b1: 42:26:15:21:98:5c:29:d1:b2:26:7c:f5:7d:90:f1:26:eb:10: c9:87:7e:f5:ea:02:5f:ee:0c:fb:3a:cb:2e:f5:55:9c:cb:2f: d1:01:c6:3a:6a:6d:2d:63:97:38:c6:4c:47:9d:78:86:3e:d8: 1a:d9:fe:37:63:ff:2c:ba:91:88:56:12:27:d3:5a:c9:8a:f8: d5:6f:eb:ee:40:ac:aa:ea:4a:ca:b3:74:d1:86:9e:c6:8c:f1: bb:ba:24:d0:cb:a6:85:f6:84:66:3b:6c:4e:83:b5:a0:b0:0a: d8:e3:81:df:4b:06:83:24:53:5d:8f:22:5a:0f:c3:25:d9:7b: d5:44:25:53 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDPcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjYyNEUxMTAvBgNVBAUTKDU0MjQ0RjY0NURFQTBENTA5NjY4NTgwRDEzOEU4MjUy NzlGQjU2NzgwHhcNMjUwNDI0MTgwNDI0WhcNMjUwNTAxMTgwNDI0WjAYMRYwFAYD VQQDEw02ODBhN2QyOC01NzU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp4bMQ/IFPsX1tL4/Lb9bIro2N0yYn/h0/80NlXK0qOGZFRvRlTDbN1Tsvfdo YtTGRUVh2p9L5Sv1dbB25ajJitAgridlW7eXSxMcmL5gn0W4Lvh77n7I2K2R5yyf nGHZ2gG/y1KL5YqkwfGKR2lYNhZnb1Y6kfNcwjyK1UruDH/Bow9NdQGKzl/7zTjB LV7KTdebRkOl8kajKIldU7Mdigov0+tBXkjI7GGjo44k8OkHCL1m4+ckUU21Ul6I DjSL7eEuC5SdPGgPzL7FcukPY09u7PH61eovf9UlWxHmXpqcc7LxaNCks9UKQYq0 ThWs1QVe2Pfb2ynWrPsSMNYCjwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEE/TYSV FtlsTYazLtyvPdHOy73yMB8GA1UdIwQYMBaAFFQkT2Rd6g1QlmhYDROOglJ5+1Z4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNjI0RS9CRDk1QzM4RUUw M0UxMUU5QjJCOURBMTFDNEY5QUUwMi9WQ1JQWkYzcURWQ1dhRmdORTQ2Q1VubjdW bmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZDUlBaRjNxRFZDV2FGZ05FNDZDVW5uN1ZuZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NjI0RS9CRDk1QzM4RUUwM0UxMUU5QjJCOURBMTFDNEY5QUUwMi9WQ1JQWkYzcURW Q1dhRmdORTQ2Q1VubjdWbmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBJITSkzj180r+6ZCmR5cadiHzuewibZkn6TQzL4W5ZVNhB6lkzzFIr nsQDVk6sabYorIYwM1zF2wm+5L0cDBhYOknzAld1nPoTzb8GE+KFSuh9t2HuT1il 5Eo8QiZpRigNDukNpEt11IO1rkIGDRo1U9BmLQoJwx7zlSNTxbFCJhUhmFwp0bIm fPV9kPEm6xDJh3716gJf7gz7Ossu9VWcyy/RAcY6am0tY5c4xkxHnXiGPtga2f43 Y/8supGIVhIn01rJivjVb+vuQKyq6krKs3TRhp7GjPG7uiTQy6aF9oRmO2xOg7Wg sArY44HfSwaDJFNdjyJaD8Ml2XvVRCVT -----END CERTIFICATE-----Generated at Sat Apr 26 12:25:42 2025 by rpki-client