$ rpki-client -vvf rpki.apnic.net/member_repository/A91FF74B/094489FE32CE11EB9C143F7EC4F9AE02/VA3axmjYtQyWYFcSGVqYihytnj8.mft File: VA3axmjYtQyWYFcSGVqYihytnj8.mft (raw, json) Hash identifier: JQ++KF8lBflsFZenMW3i3NJ2iT1DzZLOlwQ/rRKhc5c= Subject key identifier: E4:D4:6A:4C:50:52:11:03:BA:18:46:8C:1E:12:88:0E:1D:45:8E:7B Authority key identifier: 54:0D:DA:C6:68:D8:B5:0C:96:60:57:12:19:5A:98:8A:1C:AD:9E:3F Certificate issuer: /CN=A91FF74B/serialNumber=540DDAC668D8B50C96605712195A988A1CAD9E3F Certificate serial: 074F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VA3axmjYtQyWYFcSGVqYihytnj8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FF74B/094489FE32CE11EB9C143F7EC4F9AE02/VA3axmjYtQyWYFcSGVqYihytnj8.mft Manifest number: 073D Signing time: Thu 24 Apr 2025 21:38:51 +0000 Manifest this update: Thu 24 Apr 2025 21:38:50 +0000 Manifest next update: Thu 01 May 2025 21:38:50 +0000 Files and hashes: 1: VA3axmjYtQyWYFcSGVqYihytnj8.crl (hash: HBPzD7J19ENuY7UwUL4XNe0spCdocafY6EZrTpdKJVE=) 2: 4CA8BBE232CF11EBADB5497FC4F9AE02.roa (hash: 2uqYafN88TfsD3Ygt/Nku6GJ6HpfQm/lbxRdxC+igQo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FF74B/094489FE32CE11EB9C143F7EC4F9AE02/VA3axmjYtQyWYFcSGVqYihytnj8.crl rsync://rpki.apnic.net/member_repository/A91FF74B/094489FE32CE11EB9C143F7EC4F9AE02/VA3axmjYtQyWYFcSGVqYihytnj8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VA3axmjYtQyWYFcSGVqYihytnj8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 21:38:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1871 (0x74f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FF74B, serialNumber=540DDAC668D8B50C96605712195A988A1CAD9E3F Validity Not Before: Apr 24 21:38:50 2025 GMT Not After : May 1 21:38:50 2025 GMT Subject: CN=680aaf6b-b32a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:f3:93:1e:cf:bb:ac:28:2b:b4:97:d6:00:6b: 6c:3f:f1:cc:b0:7c:8a:65:d2:e2:73:f1:3d:0b:83: 11:18:75:a6:f2:5b:d1:1d:40:2b:6a:d2:28:ce:fe: d4:49:f9:c9:77:fb:30:e6:e4:7c:2d:4b:6a:78:c4: 20:cb:8d:ba:34:94:cc:cd:d3:24:8c:a7:86:78:ea: 59:8a:26:df:05:0f:c0:31:b9:86:5d:55:70:72:41: 45:b9:95:a3:53:37:44:cb:b9:53:da:55:a4:a6:af: d6:04:2d:b6:84:d5:ac:1a:c3:4e:93:82:63:f5:8a: e3:8d:6a:81:f8:98:66:1d:3b:6a:b9:6e:61:7a:e6: c0:16:75:84:85:73:68:9b:7f:f8:44:aa:63:8d:06: 8b:fd:d7:a1:9e:fe:c7:62:e1:57:37:63:a5:2a:11: 6b:68:e3:03:bb:ec:2f:a0:ca:0a:06:eb:61:5f:7f: f2:26:a8:8a:4b:d1:40:4f:13:67:51:58:ef:c3:d8: 88:05:d3:84:0b:dd:52:1e:9f:4f:b2:eb:98:f2:ef: ef:65:32:ce:4c:33:d3:04:68:76:a7:23:ad:11:01: e0:d3:74:e8:86:1e:b0:63:80:e2:b5:db:a4:c5:a5: 47:26:1b:12:c4:ae:c2:ad:eb:44:82:71:6b:7b:36: a4:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:D4:6A:4C:50:52:11:03:BA:18:46:8C:1E:12:88:0E:1D:45:8E:7B X509v3 Authority Key Identifier: keyid:54:0D:DA:C6:68:D8:B5:0C:96:60:57:12:19:5A:98:8A:1C:AD:9E:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FF74B/094489FE32CE11EB9C143F7EC4F9AE02/VA3axmjYtQyWYFcSGVqYihytnj8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VA3axmjYtQyWYFcSGVqYihytnj8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FF74B/094489FE32CE11EB9C143F7EC4F9AE02/VA3axmjYtQyWYFcSGVqYihytnj8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 26:d2:3f:8c:b7:d3:d7:b9:0f:70:66:a9:75:13:b7:bc:31:31: 71:39:25:01:0a:57:95:d4:af:a0:58:80:e9:24:14:75:0f:31: 47:63:71:6f:3d:72:c8:e9:72:ce:67:35:1a:b9:76:c0:bf:72: 3f:e2:c6:86:0f:eb:b4:f2:c6:4f:a7:b1:17:4f:8b:af:15:17: 73:db:86:b8:27:16:f4:32:94:49:d3:93:6e:6f:a8:49:78:64: 0b:07:7f:40:1e:80:f4:47:31:af:f4:ba:86:4d:4e:6d:04:26: 6c:be:1a:bb:d9:2b:8d:d2:34:7e:d8:a4:32:54:6f:c3:34:e8: 23:40:03:db:8e:eb:27:b1:2d:7a:1c:e5:4f:72:47:17:29:89: c7:74:04:1c:36:89:67:a5:07:47:aa:43:f0:22:5f:8a:7b:04: 77:bf:b0:05:41:28:04:ae:20:d0:a5:94:2e:83:a0:43:b1:26: 36:0e:33:fb:1a:c1:99:aa:1a:57:88:91:c0:bd:7c:82:c4:02: f6:03:87:17:ff:5f:f0:ce:59:91:d3:5d:1e:ae:97:fb:01:00: b2:2d:75:21:fc:2c:85:46:d0:66:52:4c:e1:c5:6e:74:61:3c: 35:94:16:20:10:48:c2:f3:42:f5:ff:15:89:47:53:d8:0a:b3: f8:eb:83:c1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB08wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkY3NEIxMTAvBgNVBAUTKDU0MEREQUM2NjhEOEI1MEM5NjYwNTcxMjE5NUE5ODhB MUNBRDlFM0YwHhcNMjUwNDI0MjEzODUwWhcNMjUwNTAxMjEzODUwWjAYMRYwFAYD VQQDEw02ODBhYWY2Yi1iMzJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnfOTHs+7rCgrtJfWAGtsP/HMsHyKZdLic/E9C4MRGHWm8lvRHUAratIozv7U SfnJd/sw5uR8LUtqeMQgy426NJTMzdMkjKeGeOpZiibfBQ/AMbmGXVVwckFFuZWj UzdEy7lT2lWkpq/WBC22hNWsGsNOk4Jj9YrjjWqB+JhmHTtquW5heubAFnWEhXNo m3/4RKpjjQaL/dehnv7HYuFXN2OlKhFraOMDu+wvoMoKButhX3/yJqiKS9FATxNn UVjvw9iIBdOEC91SHp9PsuuY8u/vZTLOTDPTBGh2pyOtEQHg03Tohh6wY4Ditduk xaVHJhsSxK7CretEgnFrezakVwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOTUakxQ UhEDuhhGjB4SiA4dRY57MB8GA1UdIwQYMBaAFFQN2sZo2LUMlmBXEhlamIocrZ4/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRjc0Qi8wOTQ0ODlGRTMy Q0UxMUVCOUMxNDNGN0VDNEY5QUUwMi9WQTNheG1qWXRReVdZRmNTR1ZxWWloeXRu ajguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZBM2F4bWpZdFF5V1lGY1NHVnFZaWh5dG5qOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG Rjc0Qi8wOTQ0ODlGRTMyQ0UxMUVCOUMxNDNGN0VDNEY5QUUwMi9WQTNheG1qWXRR eVdZRmNTR1ZxWWloeXRuajgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAm0j+Mt9PXuQ9wZql1E7e8MTFxOSUBCleV1K+gWIDpJBR1DzFHY3Fv PXLI6XLOZzUauXbAv3I/4saGD+u08sZPp7EXT4uvFRdz24a4Jxb0MpRJ05Nub6hJ eGQLB39AHoD0RzGv9LqGTU5tBCZsvhq72SuN0jR+2KQyVG/DNOgjQAPbjusnsS16 HOVPckcXKYnHdAQcNolnpQdHqkPwIl+KewR3v7AFQSgEriDQpZQug6BDsSY2DjP7 GsGZqhpXiJHAvXyCxAL2A4cX/1/wzlmR010erpf7AQCyLXUh/CyFRtBmUkzhxW50 YTw1lBYgEEjC80L1/xWJR1PYCrP464PB -----END CERTIFICATE-----Generated at Sat Apr 26 16:34:59 2025 by rpki-client