$ rpki-client -vvf rpki.apnic.net/member_repository/A9143684/712FC2C21DA611E2B529A99D08B02CD2/VV50iV-5CWGfKZw_nQuwhV_YFug.mft File: VV50iV-5CWGfKZw_nQuwhV_YFug.mft (raw, json) Hash identifier: 4p0jFJqs2lPSMzMQPmuEuUIgwGdHL1toHgRXcaDU0/w= Subject key identifier: 27:8B:9A:C3:9E:B5:74:86:7F:76:FF:EF:7A:CF:BC:E8:A0:3A:FA:E2 Authority key identifier: 55:5E:74:89:5F:B9:09:61:9F:29:9C:3F:9D:0B:B0:85:5F:D8:16:E8 Certificate issuer: /CN=A9143684/serialNumber=555E74895FB909619F299C3F9D0BB0855FD816E8 Certificate serial: 349B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VV50iV-5CWGfKZw_nQuwhV_YFug.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9143684/712FC2C21DA611E2B529A99D08B02CD2/VV50iV-5CWGfKZw_nQuwhV_YFug.mft Manifest number: 349B Signing time: Mon 30 Jun 2025 15:14:28 +0000 Manifest this update: Mon 30 Jun 2025 15:14:27 +0000 Manifest next update: Mon 07 Jul 2025 15:14:27 +0000 Files and hashes: 1: VV50iV-5CWGfKZw_nQuwhV_YFug.crl (hash: j743fRKlEAdi58Vwu3B3mfOt11AtI54yXgfPNJlafbg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9143684/712FC2C21DA611E2B529A99D08B02CD2/VV50iV-5CWGfKZw_nQuwhV_YFug.crl rsync://rpki.apnic.net/member_repository/A9143684/712FC2C21DA611E2B529A99D08B02CD2/VV50iV-5CWGfKZw_nQuwhV_YFug.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VV50iV-5CWGfKZw_nQuwhV_YFug.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Jul 2025 15:14:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13467 (0x349b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9143684, serialNumber=555E74895FB909619F299C3F9D0BB0855FD816E8 Validity Not Before: Jun 30 15:14:27 2025 GMT Not After : Jul 7 15:14:27 2025 GMT Subject: CN=6862a9d3-be07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:98:89:64:9b:3d:5b:44:5f:57:9f:2b:bc:77: 06:5d:12:9a:ef:e1:fd:ba:61:9d:eb:90:53:45:b7: ab:05:f7:76:97:56:c1:12:09:0e:bd:29:f1:e3:4f: ae:b8:da:d1:87:49:25:62:67:2d:07:77:b2:21:0e: f0:79:3a:ff:fa:21:1b:9d:66:4f:9e:97:e9:16:66: 9d:01:4c:8a:80:b1:f7:cc:4b:77:27:96:04:65:b8: 1f:25:e7:ac:46:30:14:36:55:8a:23:bc:54:60:1b: 1d:ba:80:ba:0a:f4:fd:96:06:52:3a:9d:77:52:f7: e3:3c:99:33:ec:be:2d:8c:ea:b9:0d:43:7f:f2:03: 91:bd:dd:5a:40:dd:dd:92:6b:3d:03:1b:f4:da:f6: 4b:ee:fe:a5:41:be:a8:fc:27:e2:eb:72:c0:a4:60: 9a:e7:78:a2:c2:fd:3c:2f:6a:ea:49:41:12:32:ee: ff:f6:8c:bd:b4:6e:37:cf:c5:71:94:e2:68:65:63: 15:fd:27:79:9a:fa:33:2b:c8:12:c8:24:d5:24:a6: 18:a9:be:36:79:5c:0b:48:61:7e:06:9d:ba:b3:9c: 4f:a5:10:72:f1:ad:be:7c:97:c6:90:03:aa:cf:90: 5f:cb:77:b6:cf:30:cb:70:2a:d5:11:f9:0f:3a:c3: 8c:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:8B:9A:C3:9E:B5:74:86:7F:76:FF:EF:7A:CF:BC:E8:A0:3A:FA:E2 X509v3 Authority Key Identifier: keyid:55:5E:74:89:5F:B9:09:61:9F:29:9C:3F:9D:0B:B0:85:5F:D8:16:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9143684/712FC2C21DA611E2B529A99D08B02CD2/VV50iV-5CWGfKZw_nQuwhV_YFug.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VV50iV-5CWGfKZw_nQuwhV_YFug.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9143684/712FC2C21DA611E2B529A99D08B02CD2/VV50iV-5CWGfKZw_nQuwhV_YFug.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 76:49:ba:62:4a:dc:a2:bd:02:59:be:0f:ae:b5:8e:33:7f:ab: 9e:3f:70:71:0e:e6:c6:23:7d:8f:cc:15:fd:68:f4:3b:c1:90: ab:73:09:3a:45:18:58:88:3c:3d:88:8f:0a:23:0e:59:ba:6e: ab:c0:9f:b6:ed:0e:46:3c:22:8b:49:b0:be:e7:17:9e:36:97: 78:f2:05:b0:37:84:29:39:5c:ff:39:b1:9a:15:7d:fc:25:b2: 3d:20:aa:bc:39:c1:56:2a:32:23:e8:6b:22:fd:a8:93:04:37: 76:a4:09:c2:e1:56:94:b4:49:8a:ce:c4:ed:13:47:29:d2:7f: 19:3f:fb:01:73:f8:01:88:a7:97:a7:73:2b:d2:36:5f:05:06: 4c:32:7b:67:e8:7d:cc:17:a3:3c:21:31:d4:e8:56:60:c0:7b: 5d:8d:27:59:c1:fa:a0:52:5d:db:86:4a:f3:18:11:dd:94:aa: 95:41:2d:22:f1:bb:0f:d5:f3:06:4e:8e:78:77:45:aa:53:a3: 71:f5:fc:8c:bd:96:6f:51:cd:c2:c1:7b:3d:63:97:4d:17:41: d4:70:03:d9:65:57:e0:68:5f:62:a5:f4:ca:74:ed:27:c3:ec: 4f:78:6d:1e:61:a6:28:5a:37:15:dc:7c:bc:62:f1:da:2b:27: d7:36:36:0d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNJswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDM2ODQxMTAvBgNVBAUTKDU1NUU3NDg5NUZCOTA5NjE5RjI5OUMzRjlEMEJCMDg1 NUZEODE2RTgwHhcNMjUwNjMwMTUxNDI3WhcNMjUwNzA3MTUxNDI3WjAYMRYwFAYD VQQDEw02ODYyYTlkMy1iZTA3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6piJZJs9W0RfV58rvHcGXRKa7+H9umGd65BTRberBfd2l1bBEgkOvSnx40+u uNrRh0klYmctB3eyIQ7weTr/+iEbnWZPnpfpFmadAUyKgLH3zEt3J5YEZbgfJees RjAUNlWKI7xUYBsduoC6CvT9lgZSOp13UvfjPJkz7L4tjOq5DUN/8gORvd1aQN3d kms9Axv02vZL7v6lQb6o/Cfi63LApGCa53iiwv08L2rqSUESMu7/9oy9tG43z8Vx lOJoZWMV/Sd5mvozK8gSyCTVJKYYqb42eVwLSGF+Bp26s5xPpRBy8a2+fJfGkAOq z5Bfy3e2zzDLcCrVEfkPOsOMQwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCeLmsOe tXSGf3b/73rPvOigOvriMB8GA1UdIwQYMBaAFFVedIlfuQlhnymcP50LsIVf2Bbo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MzY4NC83MTJGQzJDMjFE QTYxMUUyQjUyOUE5OUQwOEIwMkNEMi9WVjUwaVYtNUNXR2ZLWndfblF1d2hWX1lG dWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZWNTBpVi01Q1dHZktad19uUXV3aFZfWUZ1Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MzY4NC83MTJGQzJDMjFEQTYxMUUyQjUyOUE5OUQwOEIwMkNEMi9WVjUwaVYtNUNX R2ZLWndfblF1d2hWX1lGdWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB2SbpiStyivQJZvg+utY4zf6ueP3BxDubGI32PzBX9aPQ7wZCrcwk6 RRhYiDw9iI8KIw5Zum6rwJ+27Q5GPCKLSbC+5xeeNpd48gWwN4QpOVz/ObGaFX38 JbI9IKq8OcFWKjIj6Gsi/aiTBDd2pAnC4VaUtEmKzsTtE0cp0n8ZP/sBc/gBiKeX p3Mr0jZfBQZMMntn6H3MF6M8ITHU6FZgwHtdjSdZwfqgUl3bhkrzGBHdlKqVQS0i 8bsP1fMGTo54d0WqU6Nx9fyMvZZvUc3CwXs9Y5dNF0HUcAPZZVfgaF9ipfTKdO0n w+xPeG0eYaYoWjcV3Hy8YvHaKyfXNjYN -----END CERTIFICATE-----Generated at Tue Jul 1 19:05:45 2025 by rpki-client