$ rpki-client -vvf rpki.apnic.net/member_repository/A91B624E/BD95C38EE03E11E9B2B9DA11C4F9AE02/VCRPZF3qDVCWaFgNE46CUnn7Vng.mft File: VCRPZF3qDVCWaFgNE46CUnn7Vng.mft (raw, json) Hash identifier: /HDjMSIBxPgkR13R/fVz6aK+ywVXyrs6qHaJudc8pxw= Subject key identifier: 2B:CB:59:84:DB:44:B2:41:0B:37:99:34:E1:28:EA:B0:29:68:EC:B9 Authority key identifier: 54:24:4F:64:5D:EA:0D:50:96:68:58:0D:13:8E:82:52:79:FB:56:78 Certificate issuer: /CN=A91B624E/serialNumber=54244F645DEA0D509668580D138E825279FB5678 Certificate serial: 0D15 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VCRPZF3qDVCWaFgNE46CUnn7Vng.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B624E/BD95C38EE03E11E9B2B9DA11C4F9AE02/VCRPZF3qDVCWaFgNE46CUnn7Vng.mft Manifest number: 0D0B Signing time: Mon 16 Jun 2025 18:02:22 +0000 Manifest this update: Mon 16 Jun 2025 18:02:22 +0000 Manifest next update: Mon 23 Jun 2025 18:02:22 +0000 Files and hashes: 1: VCRPZF3qDVCWaFgNE46CUnn7Vng.crl (hash: EjAM3VaqF0sSEgxEmF9+PgPUGKYUszytPZllgEsF32k=) 2: 690390E80FAA11EB8B893F1EC4F9AE02.roa (hash: 9FxIJk5By9GC/1mM3LBBThqiUIJi3J3T7y2yMdVI55E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B624E/BD95C38EE03E11E9B2B9DA11C4F9AE02/VCRPZF3qDVCWaFgNE46CUnn7Vng.crl rsync://rpki.apnic.net/member_repository/A91B624E/BD95C38EE03E11E9B2B9DA11C4F9AE02/VCRPZF3qDVCWaFgNE46CUnn7Vng.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VCRPZF3qDVCWaFgNE46CUnn7Vng.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 23 Jun 2025 18:02:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3349 (0xd15) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B624E, serialNumber=54244F645DEA0D509668580D138E825279FB5678 Validity Not Before: Jun 16 18:02:22 2025 GMT Not After : Jun 23 18:02:22 2025 GMT Subject: CN=68505c2e-ac8c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:2a:ba:3b:af:50:06:f8:aa:60:46:67:3d:86: ec:d9:da:34:99:e3:72:47:1a:5f:b6:e4:95:38:61: a5:ba:b1:71:07:9f:fc:f0:ed:ca:3f:c3:79:92:2d: 5b:ae:c7:88:57:af:93:1e:ad:85:c7:4f:c0:b9:ab: 67:ac:81:76:7b:db:9f:09:69:07:3c:85:24:b9:0b: df:22:12:29:e7:3f:e6:cc:ec:b1:28:f8:13:34:f5: e9:0c:d2:e5:c3:57:61:f8:56:3d:9d:15:90:06:82: 9f:f1:4c:02:80:2d:b2:28:06:6e:ee:b5:50:54:cb: cd:64:73:0f:76:47:a0:d5:69:67:18:b4:ea:16:b2: 0d:23:c0:12:03:2e:da:10:79:07:05:d3:44:a9:6d: 0b:16:6d:6e:38:0b:d5:c2:8b:85:75:e0:56:a0:23: 1b:17:5a:bf:fd:16:8c:b9:61:79:ae:c2:2b:af:7a: 62:45:c6:bc:0f:bb:9e:d3:e3:68:9d:31:92:ea:96: c9:af:84:5b:7a:22:da:4c:17:d1:45:80:14:b1:8a: 70:02:dd:c3:f4:bb:77:ed:86:56:3a:0e:24:c4:4e: ca:d1:e7:da:a8:0e:66:68:ba:60:c1:08:10:3b:c7: b2:ab:2e:c9:1b:c2:31:5d:61:96:7e:7c:1a:65:1f: 12:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:CB:59:84:DB:44:B2:41:0B:37:99:34:E1:28:EA:B0:29:68:EC:B9 X509v3 Authority Key Identifier: keyid:54:24:4F:64:5D:EA:0D:50:96:68:58:0D:13:8E:82:52:79:FB:56:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B624E/BD95C38EE03E11E9B2B9DA11C4F9AE02/VCRPZF3qDVCWaFgNE46CUnn7Vng.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VCRPZF3qDVCWaFgNE46CUnn7Vng.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B624E/BD95C38EE03E11E9B2B9DA11C4F9AE02/VCRPZF3qDVCWaFgNE46CUnn7Vng.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 09:55:b0:4e:ed:78:48:e9:02:8e:c8:66:6b:04:89:7b:71:71: 6d:9d:45:85:80:9f:5a:2b:ef:c1:c1:57:83:f5:b8:18:00:9d: 1c:79:bf:65:38:bc:8c:4f:a1:71:aa:2e:b7:7d:f7:47:f4:a9: 34:17:c3:da:17:1a:50:f0:6b:7e:89:a7:b5:31:75:1c:63:14: 83:d4:65:0e:3d:f7:28:c2:5a:71:58:87:da:04:99:b6:3c:b4: 2f:ff:81:20:b9:d9:2b:71:63:09:b4:a2:fb:c7:0e:71:c6:07: a4:67:c7:af:e7:32:c5:92:86:62:76:2a:1f:74:a2:e2:b8:c0: 84:4f:7e:83:08:98:c7:0b:f2:ea:18:b4:c1:d2:7d:06:9b:fc: 34:d3:a2:6b:3a:23:22:7e:89:a6:70:09:91:15:b1:92:31:d6: 61:82:ce:3d:78:49:26:da:e7:79:78:de:75:fe:b5:cb:01:d5: 7b:3e:f2:47:d2:0e:80:b6:a6:6a:98:eb:50:37:fd:0d:cf:5e: b2:89:c5:61:d6:51:9f:a4:47:ad:57:ba:15:8d:aa:ad:60:80: 6c:91:69:c9:a7:05:09:db:01:a3:14:c4:33:e9:d9:55:12:4d: 7a:cc:da:e3:4b:0e:e5:49:0e:76:a0:d3:a3:ac:41:74:7d:f2: be:b7:0a:78 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDRUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjYyNEUxMTAvBgNVBAUTKDU0MjQ0RjY0NURFQTBENTA5NjY4NTgwRDEzOEU4MjUy NzlGQjU2NzgwHhcNMjUwNjE2MTgwMjIyWhcNMjUwNjIzMTgwMjIyWjAYMRYwFAYD VQQDEw02ODUwNWMyZS1hYzhjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8iq6O69QBviqYEZnPYbs2do0meNyRxpftuSVOGGlurFxB5/88O3KP8N5ki1b rseIV6+THq2Fx0/AuatnrIF2e9ufCWkHPIUkuQvfIhIp5z/mzOyxKPgTNPXpDNLl w1dh+FY9nRWQBoKf8UwCgC2yKAZu7rVQVMvNZHMPdkeg1WlnGLTqFrINI8ASAy7a EHkHBdNEqW0LFm1uOAvVwouFdeBWoCMbF1q//RaMuWF5rsIrr3piRca8D7ue0+No nTGS6pbJr4RbeiLaTBfRRYAUsYpwAt3D9Lt37YZWOg4kxE7K0efaqA5maLpgwQgQ O8eyqy7JG8IxXWGWfnwaZR8S3QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCvLWYTb RLJBCzeZNOEo6rApaOy5MB8GA1UdIwQYMBaAFFQkT2Rd6g1QlmhYDROOglJ5+1Z4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNjI0RS9CRDk1QzM4RUUw M0UxMUU5QjJCOURBMTFDNEY5QUUwMi9WQ1JQWkYzcURWQ1dhRmdORTQ2Q1VubjdW bmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZDUlBaRjNxRFZDV2FGZ05FNDZDVW5uN1ZuZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NjI0RS9CRDk1QzM4RUUwM0UxMUU5QjJCOURBMTFDNEY5QUUwMi9WQ1JQWkYzcURW Q1dhRmdORTQ2Q1VubjdWbmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAJVbBO7XhI6QKOyGZrBIl7cXFtnUWFgJ9aK+/BwVeD9bgYAJ0ceb9l OLyMT6Fxqi63ffdH9Kk0F8PaFxpQ8Gt+iae1MXUcYxSD1GUOPfcowlpxWIfaBJm2 PLQv/4EgudkrcWMJtKL7xw5xxgekZ8ev5zLFkoZidiofdKLiuMCET36DCJjHC/Lq GLTB0n0Gm/w006JrOiMifommcAmRFbGSMdZhgs49eEkm2ud5eN51/rXLAdV7PvJH 0g6AtqZqmOtQN/0Nz16yicVh1lGfpEetV7oVjaqtYIBskWnJpwUJ2wGjFMQz6dlV Ek16zNrjSw7lSQ52oNOjrEF0ffK+twp4 -----END CERTIFICATE-----Generated at Wed Jun 18 03:00:08 2025 by rpki-client