$ rpki-client -vvf rpki.apnic.net/member_repository/A91E5832/26E58254D0BA11EF896CD026C4F9AE02/vpuQTrdssFxgw-LDeeL6SJoOF3I.mft File: vpuQTrdssFxgw-LDeeL6SJoOF3I.mft (raw, json) Hash identifier: 0RsbIxg/ovN5+BSebod3gfPhRIVJMCoonxT+s+KbGn0= Subject key identifier: 65:C6:11:5D:7D:30:4D:B4:4B:0B:F6:E3:DD:96:B4:A8:44:2F:56:FD Authority key identifier: BE:9B:90:4E:B7:6C:B0:5C:60:C3:E2:C3:79:E2:FA:48:9A:0E:17:72 Certificate issuer: /CN=A91E5832/serialNumber=BE9B904EB76CB05C60C3E2C379E2FA489A0E1772 Certificate serial: 50 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vpuQTrdssFxgw-LDeeL6SJoOF3I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E5832/26E58254D0BA11EF896CD026C4F9AE02/vpuQTrdssFxgw-LDeeL6SJoOF3I.mft Manifest number: 4F Signing time: Fri 13 Jun 2025 06:10:51 +0000 Manifest this update: Fri 13 Jun 2025 06:10:51 +0000 Manifest next update: Fri 20 Jun 2025 06:10:51 +0000 Files and hashes: 1: vpuQTrdssFxgw-LDeeL6SJoOF3I.crl (hash: CMeDXNFO1lp2ttZvGoAjlpwSpeshHVy5+zG6d23jHwg=) 2: A9C0AECED0BA11EFB7A6B027C4F9AE02.roa (hash: vwuRFoQ8j2nxDneRxv7aNdc+Cd7umBY/3NvhL9KJqC0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E5832/26E58254D0BA11EF896CD026C4F9AE02/vpuQTrdssFxgw-LDeeL6SJoOF3I.crl rsync://rpki.apnic.net/member_repository/A91E5832/26E58254D0BA11EF896CD026C4F9AE02/vpuQTrdssFxgw-LDeeL6SJoOF3I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vpuQTrdssFxgw-LDeeL6SJoOF3I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 06:10:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 80 (0x50) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5832, serialNumber=BE9B904EB76CB05C60C3E2C379E2FA489A0E1772 Validity Not Before: Jun 13 06:10:51 2025 GMT Not After : Jun 20 06:10:51 2025 GMT Subject: CN=684bc0eb-7ffb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:27:7e:b2:39:35:50:62:23:dc:78:84:e8:52: 21:5d:09:91:1d:0b:8f:02:66:e2:37:49:bf:ab:09: 75:37:d7:89:c2:0d:da:c5:51:d1:f0:43:25:25:ff: 36:34:52:aa:bc:70:0e:19:64:25:b6:42:6c:03:bc: 29:ae:a8:f1:a6:31:97:1d:22:56:0f:2c:f6:61:c7: 62:96:3d:2d:e0:ea:05:41:1b:5b:71:9f:bd:2f:36: 89:af:09:f2:d8:bd:66:8b:0a:6a:cd:03:80:8d:48: 07:64:da:af:e7:22:36:dc:41:b9:55:f9:c9:f3:23: 82:34:a7:b2:23:6f:a1:cf:69:00:fd:eb:b9:2a:91: b0:f9:2b:b2:1a:14:a8:1c:f0:a2:d6:62:92:3b:62: 23:b5:98:97:0a:64:72:da:8a:7a:39:f4:91:c4:1b: 49:e8:f7:63:2b:62:90:d8:77:37:92:18:b8:11:ac: 9c:12:68:ba:f2:07:c2:d5:6b:5c:d5:db:25:d3:47: 99:5a:11:c3:a9:53:03:a0:8b:12:ed:e6:a1:22:fc: c9:01:fa:84:2b:d7:84:0c:d2:0a:c0:0e:31:0b:00: 3d:0a:1e:31:92:c5:64:50:d0:03:a2:2d:ae:83:a2: 09:0f:e6:e4:bf:30:17:4b:16:ce:fd:61:b5:b1:bf: a6:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:C6:11:5D:7D:30:4D:B4:4B:0B:F6:E3:DD:96:B4:A8:44:2F:56:FD X509v3 Authority Key Identifier: keyid:BE:9B:90:4E:B7:6C:B0:5C:60:C3:E2:C3:79:E2:FA:48:9A:0E:17:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E5832/26E58254D0BA11EF896CD026C4F9AE02/vpuQTrdssFxgw-LDeeL6SJoOF3I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vpuQTrdssFxgw-LDeeL6SJoOF3I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E5832/26E58254D0BA11EF896CD026C4F9AE02/vpuQTrdssFxgw-LDeeL6SJoOF3I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7f:0f:bc:38:f2:dd:93:1a:db:03:26:93:cd:bb:82:86:8c:30: fe:70:38:f8:86:82:87:dc:9a:81:31:b7:05:3f:99:c2:41:b7: 94:be:b4:00:58:ed:66:91:74:42:88:3d:46:e1:1a:66:61:f3: 70:0e:1d:e6:7d:30:9a:d8:d6:a6:db:95:03:9b:e7:83:a8:b9: 50:06:6f:7c:5b:5e:11:1e:43:7c:83:49:98:90:eb:37:98:0d: cf:c7:64:c8:e7:f1:86:de:f9:19:1e:da:40:9f:61:a6:3a:d8: 5c:b9:9f:22:92:78:97:65:fd:96:16:ad:ab:48:76:d4:71:14: e4:ad:39:9d:3e:64:66:45:05:41:e5:08:80:61:06:c9:30:c9: c7:c1:4c:b6:05:71:89:25:cb:aa:6b:43:a1:79:8d:87:67:0b: a0:b9:35:5b:07:61:73:5c:35:67:60:9f:8e:c9:56:2f:fb:61: 71:0d:ab:e0:60:a0:30:c4:ed:8c:9c:ec:d3:aa:e9:ab:1b:8e: 4a:07:aa:5b:4b:77:70:db:c0:31:67:a2:02:a6:e3:06:7b:55: 56:97:4a:07:e5:d7:9f:10:1a:ff:05:c4:a2:1f:46:ab:42:3d: 96:11:15:34:7c:02:33:e0:12:74:21:21:91:f9:1f:e9:aa:f3: cf:0a:44:4a -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBUDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF NTgzMjExMC8GA1UEBRMoQkU5QjkwNEVCNzZDQjA1QzYwQzNFMkMzNzlFMkZBNDg5 QTBFMTc3MjAeFw0yNTA2MTMwNjEwNTFaFw0yNTA2MjAwNjEwNTFaMBgxFjAUBgNV BAMTDTY4NGJjMGViLTdmZmIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC7J36yOTVQYiPceIToUiFdCZEdC48CZuI3Sb+rCXU314nCDdrFUdHwQyUl/zY0 Uqq8cA4ZZCW2QmwDvCmuqPGmMZcdIlYPLPZhx2KWPS3g6gVBG1txn70vNomvCfLY vWaLCmrNA4CNSAdk2q/nIjbcQblV+cnzI4I0p7Ijb6HPaQD967kqkbD5K7IaFKgc 8KLWYpI7YiO1mJcKZHLaino59JHEG0no92MrYpDYdzeSGLgRrJwSaLryB8LVa1zV 2yXTR5laEcOpUwOgixLt5qEi/MkB+oQr14QM0grADjELAD0KHjGSxWRQ0AOiLa6D ogkP5uS/MBdLFs79YbWxv6aJAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUZcYRXX0w TbRLC/bj3Za0qEQvVv0wHwYDVR0jBBgwFoAUvpuQTrdssFxgw+LDeeL6SJoOF3Iw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU1ODMyLzI2RTU4MjU0RDBC QTExRUY4OTZDRDAyNkM0RjlBRTAyL3ZwdVFUcmRzc0Z4Z3ctTERlZUw2U0pvT0Yz SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvdnB1UVRyZHNzRnhndy1MRGVlTDZTSm9PRjNJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU1 ODMyLzI2RTU4MjU0RDBCQTExRUY4OTZDRDAyNkM0RjlBRTAyL3ZwdVFUcmRzc0Z4 Z3ctTERlZUw2U0pvT0YzSS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAH8PvDjy3ZMa2wMmk827goaMMP5wOPiGgofcmoExtwU/mcJBt5S+tABY 7WaRdEKIPUbhGmZh83AOHeZ9MJrY1qbblQOb54OouVAGb3xbXhEeQ3yDSZiQ6zeY Dc/HZMjn8Ybe+Rke2kCfYaY62Fy5nyKSeJdl/ZYWratIdtRxFOStOZ0+ZGZFBUHl CIBhBskwycfBTLYFcYkly6prQ6F5jYdnC6C5NVsHYXNcNWdgn47JVi/7YXENq+Bg oDDE7Yyc7NOq6asbjkoHqltLd3DbwDFnogKm4wZ7VVaXSgfl158QGv8FxKIfRqtC PZYRFTR8AjPgEnQhIZH5H+mq888KREo= -----END CERTIFICATE-----Generated at Sat Jun 14 18:48:07 2025 by rpki-client