$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE392/6D6A2A286CD811E9B99FE329C4F9AE02/VzWraqwyeVRCT5_oyoUzQpnde8I.mft File: VzWraqwyeVRCT5_oyoUzQpnde8I.mft (raw, json) Hash identifier: EyUmyeKx+vAfQArKoVLpPB0eCrWMsD0cqNU11OH7B9c= Subject key identifier: B1:9B:A5:C8:DF:4E:51:DB:8A:73:EB:DD:43:48:F1:26:7D:D9:54:3A Authority key identifier: 57:35:AB:6A:AC:32:79:54:42:4F:9F:E8:CA:85:33:42:99:DD:7B:C2 Certificate issuer: /CN=A91CE392/serialNumber=5735AB6AAC327954424F9FE8CA85334299DD7BC2 Certificate serial: 0F62 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VzWraqwyeVRCT5_oyoUzQpnde8I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CE392/6D6A2A286CD811E9B99FE329C4F9AE02/VzWraqwyeVRCT5_oyoUzQpnde8I.mft Manifest number: 0F57 Signing time: Mon 16 Jun 2025 17:35:08 +0000 Manifest this update: Mon 16 Jun 2025 17:35:08 +0000 Manifest next update: Mon 23 Jun 2025 17:35:08 +0000 Files and hashes: 1: VzWraqwyeVRCT5_oyoUzQpnde8I.crl (hash: 7qMZKBTF+LeRhixfVZ5Th6EUDeF6UNnRrXCAhdhtmDg=) 2: F27C04B8779E11E997C0204AC4F9AE02.roa (hash: DZGyjsonfYGjBw4hHPzT7rTakbn4N6VzJZPth34e8Gc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CE392/6D6A2A286CD811E9B99FE329C4F9AE02/VzWraqwyeVRCT5_oyoUzQpnde8I.crl rsync://rpki.apnic.net/member_repository/A91CE392/6D6A2A286CD811E9B99FE329C4F9AE02/VzWraqwyeVRCT5_oyoUzQpnde8I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VzWraqwyeVRCT5_oyoUzQpnde8I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 23 Jun 2025 17:35:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3938 (0xf62) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CE392, serialNumber=5735AB6AAC327954424F9FE8CA85334299DD7BC2 Validity Not Before: Jun 16 17:35:08 2025 GMT Not After : Jun 23 17:35:08 2025 GMT Subject: CN=685055cc-776d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:ee:40:db:e4:0c:74:ee:75:a8:5f:87:69:57: 53:5e:dd:06:22:0b:73:ad:0c:ab:9e:fa:2a:9c:fb: 57:07:c4:e4:80:47:98:4d:d5:eb:bd:39:b7:4a:3f: 1b:aa:06:3d:ba:a0:26:dd:bf:f7:d4:f3:1e:f4:05: 5b:dc:d0:51:51:89:76:ec:97:df:1c:a6:20:d1:66: 0d:b1:a1:51:60:4f:d4:f3:16:58:dd:e7:94:e8:f0: ee:4a:0c:1a:d5:ad:cc:04:89:5b:74:fb:7d:a9:61: 7e:88:4b:85:a2:71:19:5f:bf:38:be:b7:1d:07:4b: e0:d3:a3:65:7c:87:09:62:3d:b4:23:90:31:4d:f5: 0c:ad:b2:fc:00:4a:7d:b6:46:a7:21:15:d6:17:eb: 84:43:9d:fa:64:c8:7d:d7:c8:f2:2f:ba:ae:56:67: 70:e6:5e:a9:2b:cd:ca:b7:01:15:cd:8c:47:6a:45: ec:fd:53:22:56:db:22:16:a3:c0:be:5e:bf:48:d2: d7:3a:b2:d5:98:49:be:9c:a2:b0:50:f0:11:e3:8b: 99:cd:ad:b2:19:e5:ec:d3:6e:64:02:1d:be:eb:a1: 48:c1:ca:f8:24:6a:ec:3b:67:bc:4e:00:0e:26:f5: 52:4f:85:bb:7c:ac:2c:9f:e0:39:46:77:78:f0:07: e2:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:9B:A5:C8:DF:4E:51:DB:8A:73:EB:DD:43:48:F1:26:7D:D9:54:3A X509v3 Authority Key Identifier: keyid:57:35:AB:6A:AC:32:79:54:42:4F:9F:E8:CA:85:33:42:99:DD:7B:C2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CE392/6D6A2A286CD811E9B99FE329C4F9AE02/VzWraqwyeVRCT5_oyoUzQpnde8I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VzWraqwyeVRCT5_oyoUzQpnde8I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE392/6D6A2A286CD811E9B99FE329C4F9AE02/VzWraqwyeVRCT5_oyoUzQpnde8I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7c:32:4b:55:d1:6d:be:e6:2c:4b:4b:d2:66:2d:fb:17:da:65: fc:96:18:50:dd:93:38:27:a4:13:02:d8:3f:a7:c0:9f:8a:20: 0d:87:ca:dc:83:0a:60:d4:d1:c3:11:cf:de:0e:52:91:f6:64: f8:63:dc:6b:ab:09:d8:98:d7:b3:a4:6e:8b:85:6b:ba:91:a4: 13:4b:03:50:ec:d7:dd:24:f6:30:55:73:a0:19:ad:66:8d:94: 02:5e:78:63:98:78:03:5e:17:1c:e3:9f:12:57:67:e7:82:2a: 11:b3:47:0a:55:8b:0f:e8:98:6d:e9:c4:e1:b8:b4:1d:da:d1: b2:27:78:1b:9e:2b:ca:ae:da:35:5a:b6:5d:ec:69:4f:ed:5d: 7d:e7:41:a4:01:a9:e4:bc:ee:d2:7c:e8:a6:ac:a6:91:e3:2c: 71:70:fb:a9:a2:f9:3b:5d:a5:5d:4d:ea:d1:f2:42:02:58:8d: e8:dd:e0:89:a6:ba:84:37:64:3c:aa:39:23:1c:62:4b:73:a9: e3:42:90:c2:04:86:a4:e5:d5:1b:e4:9c:d9:de:59:3d:96:93: bd:f1:d0:96:af:2f:4f:45:68:b7:78:6b:80:43:99:4f:5a:10: da:0b:c9:50:ef:b0:09:61:4c:1e:21:53:01:b4:b3:d7:73:f8: 1c:d4:bf:64 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICD2IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0UzOTIxMTAvBgNVBAUTKDU3MzVBQjZBQUMzMjc5NTQ0MjRGOUZFOENBODUzMzQy OTlERDdCQzIwHhcNMjUwNjE2MTczNTA4WhcNMjUwNjIzMTczNTA4WjAYMRYwFAYD VQQDEw02ODUwNTVjYy03NzZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtO5A2+QMdO51qF+HaVdTXt0GIgtzrQyrnvoqnPtXB8TkgEeYTdXrvTm3Sj8b qgY9uqAm3b/31PMe9AVb3NBRUYl27JffHKYg0WYNsaFRYE/U8xZY3eeU6PDuSgwa 1a3MBIlbdPt9qWF+iEuFonEZX784vrcdB0vg06NlfIcJYj20I5AxTfUMrbL8AEp9 tkanIRXWF+uEQ536ZMh918jyL7quVmdw5l6pK83KtwEVzYxHakXs/VMiVtsiFqPA vl6/SNLXOrLVmEm+nKKwUPAR44uZza2yGeXs025kAh2+66FIwcr4JGrsO2e8TgAO JvVST4W7fKwsn+A5Rnd48AfiiQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLGbpcjf TlHbinPr3UNI8SZ92VQ6MB8GA1UdIwQYMBaAFFc1q2qsMnlUQk+f6MqFM0KZ3XvC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRTM5Mi82RDZBMkEyODZD RDgxMUU5Qjk5RkUzMjlDNEY5QUUwMi9WeldyYXF3eWVWUkNUNV9veW9VelFwbmRl OEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1Z6V3JhcXd5ZVZSQ1Q1X295b1V6UXBuZGU4SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RTM5Mi82RDZBMkEyODZDRDgxMUU5Qjk5RkUzMjlDNEY5QUUwMi9WeldyYXF3eWVW UkNUNV9veW9VelFwbmRlOEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB8MktV0W2+5ixLS9JmLfsX2mX8lhhQ3ZM4J6QTAtg/p8CfiiANh8rc gwpg1NHDEc/eDlKR9mT4Y9xrqwnYmNezpG6LhWu6kaQTSwNQ7NfdJPYwVXOgGa1m jZQCXnhjmHgDXhcc458SV2fngioRs0cKVYsP6Jht6cThuLQd2tGyJ3gbnivKrto1 WrZd7GlP7V1950GkAankvO7SfOimrKaR4yxxcPupovk7XaVdTerR8kICWI3o3eCJ prqEN2Q8qjkjHGJLc6njQpDCBIak5dUb5JzZ3lk9lpO98dCWry9PRWi3eGuAQ5lP WhDaC8lQ77AJYUweIVMBtLPXc/gc1L9k -----END CERTIFICATE-----Generated at Tue Jun 17 17:06:38 2025 by rpki-client