$ rpki-client -vvf rpki.apnic.net/member_repository/A91FF74B/094489FE32CE11EB9C143F7EC4F9AE02/VA3axmjYtQyWYFcSGVqYihytnj8.mft File: VA3axmjYtQyWYFcSGVqYihytnj8.mft (raw, json) Hash identifier: ufH3wnzrt66w0x8YvktGL7v1pYEz+SwHRr6tgj23Pgw= Subject key identifier: BC:F3:65:B7:6D:4B:2E:93:C2:E2:B0:64:CA:D5:70:FF:F8:03:02:CB Authority key identifier: 54:0D:DA:C6:68:D8:B5:0C:96:60:57:12:19:5A:98:8A:1C:AD:9E:3F Certificate issuer: /CN=A91FF74B/serialNumber=540DDAC668D8B50C96605712195A988A1CAD9E3F Certificate serial: 076A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VA3axmjYtQyWYFcSGVqYihytnj8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FF74B/094489FE32CE11EB9C143F7EC4F9AE02/VA3axmjYtQyWYFcSGVqYihytnj8.mft Manifest number: 0757 Signing time: Thu 12 Jun 2025 21:26:50 +0000 Manifest this update: Thu 12 Jun 2025 21:26:49 +0000 Manifest next update: Thu 19 Jun 2025 21:26:49 +0000 Files and hashes: 1: VA3axmjYtQyWYFcSGVqYihytnj8.crl (hash: HChJOeFUizeKJxNQpN0TvfhH1/s/J5IayDX6GIJ50O8=) 2: 4CA8BBE232CF11EBADB5497FC4F9AE02.roa (hash: 9R9QsXFUMXvz//+w7pzMdn8juESdiZRyTDAnvcDwnQU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FF74B/094489FE32CE11EB9C143F7EC4F9AE02/VA3axmjYtQyWYFcSGVqYihytnj8.crl rsync://rpki.apnic.net/member_repository/A91FF74B/094489FE32CE11EB9C143F7EC4F9AE02/VA3axmjYtQyWYFcSGVqYihytnj8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VA3axmjYtQyWYFcSGVqYihytnj8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 21:26:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1898 (0x76a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FF74B, serialNumber=540DDAC668D8B50C96605712195A988A1CAD9E3F Validity Not Before: Jun 12 21:26:49 2025 GMT Not After : Jun 19 21:26:49 2025 GMT Subject: CN=684b4619-cddf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:9f:f3:fc:2d:39:b2:27:d0:be:4a:d5:f7:f0: 0a:38:68:9e:57:95:5d:c9:d4:6f:94:6c:79:e5:cd: 7c:83:f8:98:25:4d:68:93:1f:ae:37:20:f4:f8:00: e4:18:5e:17:34:f0:e7:cb:93:68:f2:f2:9c:4d:ee: 30:92:71:fc:02:ec:81:07:17:9f:64:6f:16:6d:f5: 0a:ca:26:cf:c4:2b:dd:d8:24:87:86:e3:8a:8b:4f: db:38:86:38:0e:a5:98:c1:b5:31:61:57:1c:ad:a2: b7:31:b5:5f:70:4f:b2:b1:66:9f:c4:17:22:cb:89: ff:ba:1c:f6:b0:69:c3:4f:54:a4:20:18:f2:c9:42: 03:24:6d:ca:aa:4c:8e:28:2b:66:1d:9d:10:69:27: 93:63:e7:d1:1c:ef:5e:7c:b7:7f:cc:70:8e:a1:87: 92:a1:60:2c:c9:5f:22:2a:ee:64:87:89:7b:26:c2: 81:7e:6a:4f:dd:b5:02:6f:21:37:ea:0c:bc:2f:e3: fa:94:c2:39:78:d8:ba:c9:11:d7:10:2b:34:84:7f: 40:23:e4:d1:1e:75:d1:da:3f:c6:59:06:89:bf:e2: f1:01:af:8a:48:56:bb:31:cd:0a:46:4d:5e:f2:1d: 7b:1c:6a:76:95:c3:26:b5:9d:84:2c:0e:2a:d8:76: 82:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:F3:65:B7:6D:4B:2E:93:C2:E2:B0:64:CA:D5:70:FF:F8:03:02:CB X509v3 Authority Key Identifier: keyid:54:0D:DA:C6:68:D8:B5:0C:96:60:57:12:19:5A:98:8A:1C:AD:9E:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FF74B/094489FE32CE11EB9C143F7EC4F9AE02/VA3axmjYtQyWYFcSGVqYihytnj8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VA3axmjYtQyWYFcSGVqYihytnj8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FF74B/094489FE32CE11EB9C143F7EC4F9AE02/VA3axmjYtQyWYFcSGVqYihytnj8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2f:20:63:ba:1f:84:58:93:7f:83:32:10:9f:96:80:36:68:01: 6b:89:6e:a6:19:ef:7b:9e:71:4e:31:70:95:e8:b1:a6:4b:d4: 95:0e:dd:54:c0:ba:9c:e1:2f:6c:1f:9f:4b:f6:99:f1:ec:8d: c0:72:f7:b5:3a:2d:91:15:57:f9:b0:75:c7:f4:52:7a:c8:84: 50:cc:ff:d0:4b:66:b3:f9:a0:53:a6:37:bb:b2:11:f2:10:fe: 6b:99:90:54:68:7a:07:bf:9b:c6:bc:40:86:1e:f7:cf:da:a0: c1:ad:67:f3:89:35:8d:af:91:86:e3:94:c7:fd:10:e7:91:28: ce:96:e5:f6:b1:01:dd:34:0b:35:ca:b3:3b:66:07:cc:8a:ce: 84:7b:92:a3:31:0b:90:c6:e7:78:51:45:12:51:d8:56:70:e5: e0:03:31:27:31:dd:bb:fb:86:f4:90:fe:67:66:b2:9d:66:20: e5:9f:29:77:34:ca:83:67:bc:66:13:68:3d:14:94:95:cf:08: f8:ca:96:7d:ec:2f:8d:99:52:d7:65:23:ac:00:9a:d8:0a:29: 86:b3:dd:6d:41:47:f0:c7:40:ca:0b:08:6a:21:eb:fe:bd:97: 7f:3e:eb:93:fc:8a:2b:72:10:83:26:eb:ea:0f:7e:ef:3b:5c: cc:7f:b9:40 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB2owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkY3NEIxMTAvBgNVBAUTKDU0MEREQUM2NjhEOEI1MEM5NjYwNTcxMjE5NUE5ODhB MUNBRDlFM0YwHhcNMjUwNjEyMjEyNjQ5WhcNMjUwNjE5MjEyNjQ5WjAYMRYwFAYD VQQDEw02ODRiNDYxOS1jZGRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlZ/z/C05sifQvkrV9/AKOGieV5VdydRvlGx55c18g/iYJU1okx+uNyD0+ADk GF4XNPDny5No8vKcTe4wknH8AuyBBxefZG8WbfUKyibPxCvd2CSHhuOKi0/bOIY4 DqWYwbUxYVccraK3MbVfcE+ysWafxBciy4n/uhz2sGnDT1SkIBjyyUIDJG3KqkyO KCtmHZ0QaSeTY+fRHO9efLd/zHCOoYeSoWAsyV8iKu5kh4l7JsKBfmpP3bUCbyE3 6gy8L+P6lMI5eNi6yRHXECs0hH9AI+TRHnXR2j/GWQaJv+LxAa+KSFa7Mc0KRk1e 8h17HGp2lcMmtZ2ELA4q2HaCGwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLzzZbdt Sy6TwuKwZMrVcP/4AwLLMB8GA1UdIwQYMBaAFFQN2sZo2LUMlmBXEhlamIocrZ4/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRjc0Qi8wOTQ0ODlGRTMy Q0UxMUVCOUMxNDNGN0VDNEY5QUUwMi9WQTNheG1qWXRReVdZRmNTR1ZxWWloeXRu ajguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZBM2F4bWpZdFF5V1lGY1NHVnFZaWh5dG5qOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG Rjc0Qi8wOTQ0ODlGRTMyQ0UxMUVCOUMxNDNGN0VDNEY5QUUwMi9WQTNheG1qWXRR eVdZRmNTR1ZxWWloeXRuajgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAvIGO6H4RYk3+DMhCfloA2aAFriW6mGe97nnFOMXCV6LGmS9SVDt1U wLqc4S9sH59L9pnx7I3Acve1Oi2RFVf5sHXH9FJ6yIRQzP/QS2az+aBTpje7shHy EP5rmZBUaHoHv5vGvECGHvfP2qDBrWfziTWNr5GG45TH/RDnkSjOluX2sQHdNAs1 yrM7ZgfMis6Ee5KjMQuQxud4UUUSUdhWcOXgAzEnMd27+4b0kP5nZrKdZiDlnyl3 NMqDZ7xmE2g9FJSVzwj4ypZ97C+NmVLXZSOsAJrYCimGs91tQUfwx0DKCwhqIev+ vZd/PuuT/IorchCDJuvqD37vO1zMf7lA -----END CERTIFICATE-----Generated at Sat Jun 14 18:54:08 2025 by rpki-client