$ rpki-client -vvf rpki.apnic.net/member_repository/A91E5832/26E58254D0BA11EF896CD026C4F9AE02/vpuQTrdssFxgw-LDeeL6SJoOF3I.mft File: vpuQTrdssFxgw-LDeeL6SJoOF3I.mft (raw, json) Hash identifier: QZix3s2JDwPayJdKwM4s0fvsDHQwe1GzOCqYr9PIaQw= Subject key identifier: C8:00:32:D6:BE:64:C7:8F:CD:5B:05:20:4A:FD:D9:49:2F:45:4E:9A Authority key identifier: BE:9B:90:4E:B7:6C:B0:5C:60:C3:E2:C3:79:E2:FA:48:9A:0E:17:72 Certificate issuer: /CN=A91E5832/serialNumber=BE9B904EB76CB05C60C3E2C379E2FA489A0E1772 Certificate serial: 38 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vpuQTrdssFxgw-LDeeL6SJoOF3I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E5832/26E58254D0BA11EF896CD026C4F9AE02/vpuQTrdssFxgw-LDeeL6SJoOF3I.mft Manifest number: 37 Signing time: Fri 25 Apr 2025 06:33:56 +0000 Manifest this update: Fri 25 Apr 2025 06:33:56 +0000 Manifest next update: Fri 02 May 2025 06:33:56 +0000 Files and hashes: 1: vpuQTrdssFxgw-LDeeL6SJoOF3I.crl (hash: kxyTHcuiafjMqRV9OsqKVRwVlG1pC/EGe6S0BN8+xiM=) 2: A9C0AECED0BA11EFB7A6B027C4F9AE02.roa (hash: vwuRFoQ8j2nxDneRxv7aNdc+Cd7umBY/3NvhL9KJqC0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E5832/26E58254D0BA11EF896CD026C4F9AE02/vpuQTrdssFxgw-LDeeL6SJoOF3I.crl rsync://rpki.apnic.net/member_repository/A91E5832/26E58254D0BA11EF896CD026C4F9AE02/vpuQTrdssFxgw-LDeeL6SJoOF3I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vpuQTrdssFxgw-LDeeL6SJoOF3I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 06:33:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56 (0x38) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5832, serialNumber=BE9B904EB76CB05C60C3E2C379E2FA489A0E1772 Validity Not Before: Apr 25 06:33:56 2025 GMT Not After : May 2 06:33:56 2025 GMT Subject: CN=680b2cd4-8968 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:f9:91:f0:b4:42:9a:1e:c2:8c:12:02:1f:8c: 2b:06:37:77:6d:ab:27:1a:c3:53:fc:7f:6c:c6:d4: c2:9a:72:49:ff:bb:51:48:aa:24:c0:8f:f0:93:cb: 96:e5:54:bc:57:3c:ca:9c:e3:58:f6:50:c2:23:91: 64:df:80:c5:96:96:f6:62:1c:04:6a:89:30:51:e8: 52:28:88:77:d6:2a:3c:da:6f:5f:2d:7a:2e:59:32: 27:e4:4d:d1:6d:de:e9:f9:61:28:0d:16:1d:b5:95: 1b:26:11:33:5d:e7:a5:19:ed:0b:fa:c7:59:1e:cc: dc:4d:91:05:f4:8e:5d:a6:a6:1d:f5:73:6a:a7:4d: ab:1c:fd:de:8f:84:cc:73:47:d4:b5:d9:4a:81:28: 0b:d3:03:2b:de:56:87:9a:fc:4a:52:c5:9a:d5:dc: 4f:8d:08:b2:0d:93:7b:54:27:84:a2:c2:9d:dc:f1: ff:7a:b4:4c:1e:c2:d8:80:2c:97:08:e6:1b:93:01: ca:5a:64:6e:20:4d:4f:fb:df:40:77:58:c9:4f:b5: 0a:a0:9b:1f:2b:1c:65:11:8c:d3:a9:f1:eb:2f:08: f4:23:5f:a3:74:7b:50:bc:cb:24:6f:67:d6:3f:12: 63:f9:81:70:44:e1:b1:1e:80:ef:45:4e:c2:68:c0: 85:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:00:32:D6:BE:64:C7:8F:CD:5B:05:20:4A:FD:D9:49:2F:45:4E:9A X509v3 Authority Key Identifier: keyid:BE:9B:90:4E:B7:6C:B0:5C:60:C3:E2:C3:79:E2:FA:48:9A:0E:17:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E5832/26E58254D0BA11EF896CD026C4F9AE02/vpuQTrdssFxgw-LDeeL6SJoOF3I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vpuQTrdssFxgw-LDeeL6SJoOF3I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E5832/26E58254D0BA11EF896CD026C4F9AE02/vpuQTrdssFxgw-LDeeL6SJoOF3I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 14:2c:18:99:5f:cf:a5:a3:90:42:52:72:1c:53:2c:d3:88:f2: d5:47:76:49:65:69:b8:8b:cb:bc:0c:79:b3:a8:0f:22:84:f4: 57:20:b5:8c:55:f4:91:d4:14:f9:47:f9:50:03:85:d6:01:9a: 01:ac:83:24:89:fd:e0:01:4e:d6:78:49:ab:82:95:1d:a1:24: 8c:15:42:a9:b5:9c:19:ed:b2:49:39:66:a6:7f:53:aa:5a:5d: cd:19:e7:f1:ac:59:48:ae:72:bf:30:c1:a9:43:51:42:e5:a4: 79:05:07:a8:98:c1:47:4e:96:06:f9:5f:c1:22:7d:4a:83:f9: f2:86:aa:bd:a4:68:5d:9c:8e:5e:e6:cf:51:7e:c3:f0:da:c7: 99:3e:86:d6:14:a0:3e:79:15:1b:24:38:23:68:e8:24:10:1a: 9b:12:35:c8:06:d2:5a:94:9b:f0:f6:8e:d0:46:04:7b:44:80: e8:83:16:06:d9:29:09:cc:87:0f:f2:6e:5b:38:7d:f4:26:d6: 77:c8:62:70:bd:ea:80:79:23:e0:48:4c:bb:89:96:a4:cd:9f: b9:d1:11:47:24:ff:5b:33:d7:2f:58:ed:ef:10:4d:3f:3e:a9: 0e:f9:65:67:06:27:18:2d:5a:2c:a8:07:8b:34:41:ce:ed:4f: 49:15:03:16 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBODANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF NTgzMjExMC8GA1UEBRMoQkU5QjkwNEVCNzZDQjA1QzYwQzNFMkMzNzlFMkZBNDg5 QTBFMTc3MjAeFw0yNTA0MjUwNjMzNTZaFw0yNTA1MDIwNjMzNTZaMBgxFjAUBgNV BAMTDTY4MGIyY2Q0LTg5NjgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCx+ZHwtEKaHsKMEgIfjCsGN3dtqycaw1P8f2zG1MKackn/u1FIqiTAj/CTy5bl VLxXPMqc41j2UMIjkWTfgMWWlvZiHARqiTBR6FIoiHfWKjzab18tei5ZMifkTdFt 3un5YSgNFh21lRsmETNd56UZ7Qv6x1kezNxNkQX0jl2mph31c2qnTasc/d6PhMxz R9S12UqBKAvTAyveVoea/EpSxZrV3E+NCLINk3tUJ4Siwp3c8f96tEwewtiALJcI 5huTAcpaZG4gTU/730B3WMlPtQqgmx8rHGURjNOp8esvCPQjX6N0e1C8yyRvZ9Y/ EmP5gXBE4bEegO9FTsJowIU9AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUyAAy1r5k x4/NWwUgSv3ZSS9FTpowHwYDVR0jBBgwFoAUvpuQTrdssFxgw+LDeeL6SJoOF3Iw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU1ODMyLzI2RTU4MjU0RDBC QTExRUY4OTZDRDAyNkM0RjlBRTAyL3ZwdVFUcmRzc0Z4Z3ctTERlZUw2U0pvT0Yz SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvdnB1UVRyZHNzRnhndy1MRGVlTDZTSm9PRjNJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU1 ODMyLzI2RTU4MjU0RDBCQTExRUY4OTZDRDAyNkM0RjlBRTAyL3ZwdVFUcmRzc0Z4 Z3ctTERlZUw2U0pvT0YzSS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBABQsGJlfz6WjkEJSchxTLNOI8tVHdkllabiLy7wMebOoDyKE9FcgtYxV 9JHUFPlH+VADhdYBmgGsgySJ/eABTtZ4SauClR2hJIwVQqm1nBntskk5ZqZ/U6pa Xc0Z5/GsWUiucr8wwalDUULlpHkFB6iYwUdOlgb5X8EifUqD+fKGqr2kaF2cjl7m z1F+w/Dax5k+htYUoD55FRskOCNo6CQQGpsSNcgG0lqUm/D2jtBGBHtEgOiDFgbZ KQnMhw/ybls4ffQm1nfIYnC96oB5I+BITLuJlqTNn7nREUck/1sz1y9Y7e8QTT8+ qQ75ZWcGJxgtWiyoB4s0Qc7tT0kVAxY= -----END CERTIFICATE-----Generated at Sat Apr 26 04:20:55 2025 by rpki-client