$ rpki-client -vvf rpki.apnic.net/member_repository/A912F281/12DE8A5EC66E11EFA787F865C4F9AE02/vNWr2ckcoefyxFVXBbKUBPUFvcU.mft File: vNWr2ckcoefyxFVXBbKUBPUFvcU.mft (raw, json) Hash identifier: PPB+net9Unnsjf1XBrHREa5jTfas++MpNLwAGJ4Hi50= Subject key identifier: 5E:61:1B:3E:4E:A9:11:08:CD:4A:90:BE:5E:67:17:D3:78:D4:71:80 Authority key identifier: BC:D5:AB:D9:C9:1C:A1:E7:F2:C4:55:57:05:B2:94:04:F5:05:BD:C5 Certificate issuer: /CN=A912F281/serialNumber=BCD5ABD9C91CA1E7F2C4555705B29404F505BDC5 Certificate serial: 51 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vNWr2ckcoefyxFVXBbKUBPUFvcU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912F281/12DE8A5EC66E11EFA787F865C4F9AE02/vNWr2ckcoefyxFVXBbKUBPUFvcU.mft Manifest number: 50 Signing time: Sun 01 Jun 2025 06:58:30 +0000 Manifest this update: Sun 01 Jun 2025 06:58:29 +0000 Manifest next update: Sun 08 Jun 2025 06:58:29 +0000 Files and hashes: 1: vNWr2ckcoefyxFVXBbKUBPUFvcU.crl (hash: ajTaUtXMRM+5b/1s0qgViz+h8elwOj4VEp01xqmEgiw=) 2: 89EA22F0C67011EFAE929D0DC4F9AE02.roa (hash: u5vjYU67JaqqsoNZI0S6g4tD4PgUnrgAcxaVH+69TsM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912F281/12DE8A5EC66E11EFA787F865C4F9AE02/vNWr2ckcoefyxFVXBbKUBPUFvcU.crl rsync://rpki.apnic.net/member_repository/A912F281/12DE8A5EC66E11EFA787F865C4F9AE02/vNWr2ckcoefyxFVXBbKUBPUFvcU.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vNWr2ckcoefyxFVXBbKUBPUFvcU.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Jun 2025 06:58:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 81 (0x51) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912F281, serialNumber=BCD5ABD9C91CA1E7F2C4555705B29404F505BDC5 Validity Not Before: Jun 1 06:58:29 2025 GMT Not After : Jun 8 06:58:29 2025 GMT Subject: CN=683bfa15-97a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:db:f3:56:06:80:5d:f4:34:ec:f5:8a:51:4b: d8:36:06:a7:1e:89:fa:8d:a9:27:30:b2:d1:1a:43: b0:75:26:02:dd:68:80:4c:d6:54:7f:14:9f:95:4e: fb:93:2e:ec:fd:80:35:26:e1:58:06:9d:8e:ab:96: 3f:f6:ce:5c:c8:c1:fe:d1:48:ea:a0:72:de:e4:63: e1:4b:47:3c:87:cb:45:8f:48:33:5e:8d:8f:f0:88: 20:ee:fc:40:69:f0:df:e3:ff:51:f1:8d:dc:8d:5f: 38:e1:d0:69:e2:bd:f8:36:3e:03:3b:46:70:af:76: f7:17:ff:5b:73:2b:72:76:13:65:60:ce:5f:8d:01: 49:2b:76:20:38:6d:2a:77:05:a9:52:b0:1e:8e:68: a2:ad:86:1d:8b:9c:aa:e6:2c:76:2d:7d:55:54:4c: 71:d2:4d:6c:cf:62:dc:4d:d4:be:bb:d7:19:1f:b2: a9:e2:ae:69:fe:76:fe:d1:97:5d:f0:3e:2f:35:13: 3e:2c:ea:27:01:e1:2b:2d:c0:c5:53:03:04:d0:37: 80:68:0f:6f:66:de:41:33:f9:f2:3c:21:e3:94:54: 5e:a7:74:a2:8f:b5:3b:d6:6f:73:80:ab:4f:b9:20: af:93:64:fb:53:c4:7d:f4:16:dd:22:64:1d:b1:21: 2c:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:61:1B:3E:4E:A9:11:08:CD:4A:90:BE:5E:67:17:D3:78:D4:71:80 X509v3 Authority Key Identifier: keyid:BC:D5:AB:D9:C9:1C:A1:E7:F2:C4:55:57:05:B2:94:04:F5:05:BD:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912F281/12DE8A5EC66E11EFA787F865C4F9AE02/vNWr2ckcoefyxFVXBbKUBPUFvcU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vNWr2ckcoefyxFVXBbKUBPUFvcU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912F281/12DE8A5EC66E11EFA787F865C4F9AE02/vNWr2ckcoefyxFVXBbKUBPUFvcU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 83:08:51:aa:67:fb:dc:de:a7:98:4c:e0:5f:28:10:e8:93:fc: a9:47:b3:45:3b:e5:5d:55:d3:49:83:38:d4:80:fa:7a:f3:e1: 7e:39:d5:1a:66:b5:32:ba:89:96:e4:22:0a:1a:1c:f7:b6:3d: 8a:0a:c8:13:ab:c9:9d:70:53:eb:37:91:c8:1b:67:a7:56:56: ad:eb:2e:b5:50:d8:32:a8:b6:b7:21:1a:4d:2c:71:c2:e8:81: 76:96:75:eb:d0:f6:03:43:09:58:1c:93:b3:22:09:28:c1:bc: f2:f2:a3:66:b2:31:eb:61:e6:a4:31:59:70:a0:2e:e0:30:59: 18:59:e5:61:55:cf:96:22:81:7e:49:7f:ea:e3:6c:d6:bb:de: 0a:95:1f:cd:04:aa:b2:fa:ab:6b:9b:12:f5:a5:e5:fa:62:c4: eb:30:b3:fb:d6:67:c8:cf:c4:f5:0a:ca:44:4e:40:e1:0a:70: 3b:02:d2:90:67:3b:fe:02:98:ae:3b:84:9a:eb:48:d3:8b:7f: 97:81:30:47:00:1c:32:5f:57:31:40:f0:e6:95:a8:bd:49:dd: fb:f8:ee:73:46:7d:07:dd:fa:16:3e:08:d8:52:d7:b7:08:e5: da:83:17:7c:59:ed:36:aa:a7:06:ca:99:08:2c:74:e9:88:11: 3a:55:63:9a -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBUTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy RjI4MTExMC8GA1UEBRMoQkNENUFCRDlDOTFDQTFFN0YyQzQ1NTU3MDVCMjk0MDRG NTA1QkRDNTAeFw0yNTA2MDEwNjU4MjlaFw0yNTA2MDgwNjU4MjlaMBgxFjAUBgNV BAMTDTY4M2JmYTE1LTk3YTMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQD32/NWBoBd9DTs9YpRS9g2BqceifqNqScwstEaQ7B1JgLdaIBM1lR/FJ+VTvuT Luz9gDUm4VgGnY6rlj/2zlzIwf7RSOqgct7kY+FLRzyHy0WPSDNejY/wiCDu/EBp 8N/j/1HxjdyNXzjh0Gnivfg2PgM7RnCvdvcX/1tzK3J2E2Vgzl+NAUkrdiA4bSp3 BalSsB6OaKKthh2LnKrmLHYtfVVUTHHSTWzPYtxN1L671xkfsqnirmn+dv7Rl13w Pi81Ez4s6icB4SstwMVTAwTQN4BoD29m3kEz+fI8IeOUVF6ndKKPtTvWb3OAq0+5 IK+TZPtTxH30Ft0iZB2xISxXAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUXmEbPk6p EQjNSpC+XmcX03jUcYAwHwYDVR0jBBgwFoAUvNWr2ckcoefyxFVXBbKUBPUFvcUw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTJGMjgxLzEyREU4QTVFQzY2 RTExRUZBNzg3Rjg2NUM0RjlBRTAyL3ZOV3IyY2tjb2VmeXhGVlhCYktVQlBVRnZj VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvdk5XcjJja2NvZWZ5eEZWWEJiS1VCUFVGdmNVLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTJG MjgxLzEyREU4QTVFQzY2RTExRUZBNzg3Rjg2NUM0RjlBRTAyL3ZOV3IyY2tjb2Vm eXhGVlhCYktVQlBVRnZjVS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAIMIUapn+9zep5hM4F8oEOiT/KlHs0U75V1V00mDONSA+nrz4X451Rpm tTK6iZbkIgoaHPe2PYoKyBOryZ1wU+s3kcgbZ6dWVq3rLrVQ2DKotrchGk0sccLo gXaWdevQ9gNDCVgck7MiCSjBvPLyo2ayMeth5qQxWXCgLuAwWRhZ5WFVz5YigX5J f+rjbNa73gqVH80EqrL6q2ubEvWl5fpixOsws/vWZ8jPxPUKykROQOEKcDsC0pBn O/4CmK47hJrrSNOLf5eBMEcAHDJfVzFA8OaVqL1J3fv47nNGfQfd+hY+CNhS17cI 5dqDF3xZ7TaqpwbKmQgsdOmIETpVY5o= -----END CERTIFICATE-----Generated at Mon Jun 2 21:09:24 2025 by rpki-client