$ rpki-client -vvf rpki.apnic.net/member_repository/A912F281/12DE8A5EC66E11EFA787F865C4F9AE02/vNWr2ckcoefyxFVXBbKUBPUFvcU.mft File: vNWr2ckcoefyxFVXBbKUBPUFvcU.mft (raw, json) Hash identifier: ze/RqXMQ3WO4Zzgk6mtJWFMeZJFT+MXC1hJ52PVvyXc= Subject key identifier: 13:B7:B1:AF:56:71:5D:85:9B:9B:28:07:36:09:93:14:7E:D1:F4:51 Authority key identifier: BC:D5:AB:D9:C9:1C:A1:E7:F2:C4:55:57:05:B2:94:04:F5:05:BD:C5 Certificate issuer: /CN=A912F281/serialNumber=BCD5ABD9C91CA1E7F2C4555705B29404F505BDC5 Certificate serial: 7B Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vNWr2ckcoefyxFVXBbKUBPUFvcU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912F281/12DE8A5EC66E11EFA787F865C4F9AE02/vNWr2ckcoefyxFVXBbKUBPUFvcU.mft Manifest number: 7A Signing time: Sat 23 Aug 2025 06:58:12 +0000 Manifest this update: Sat 23 Aug 2025 06:58:12 +0000 Manifest next update: Sat 30 Aug 2025 06:58:12 +0000 Files and hashes: 1: vNWr2ckcoefyxFVXBbKUBPUFvcU.crl (hash: cSbMg9St06ck49C7OPba39XvmWJoR+f/rRpvkq/btW4=) 2: 89EA22F0C67011EFAE929D0DC4F9AE02.roa (hash: u5vjYU67JaqqsoNZI0S6g4tD4PgUnrgAcxaVH+69TsM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912F281/12DE8A5EC66E11EFA787F865C4F9AE02/vNWr2ckcoefyxFVXBbKUBPUFvcU.crl rsync://rpki.apnic.net/member_repository/A912F281/12DE8A5EC66E11EFA787F865C4F9AE02/vNWr2ckcoefyxFVXBbKUBPUFvcU.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vNWr2ckcoefyxFVXBbKUBPUFvcU.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 06:58:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 123 (0x7b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912F281, serialNumber=BCD5ABD9C91CA1E7F2C4555705B29404F505BDC5 Validity Not Before: Aug 23 06:58:12 2025 GMT Not After : Aug 30 06:58:12 2025 GMT Subject: CN=68a96684-a438 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:f0:7f:51:8d:36:98:95:06:c2:50:f0:bc:8d: 04:ce:be:6e:c0:ca:49:4c:79:7d:2b:f9:c7:43:f1: ac:1a:bc:4b:31:35:cd:5b:31:1f:a6:b0:31:73:0a: a8:a2:b8:a3:08:06:9a:fe:41:8c:3b:0e:b7:5d:23: 6d:a8:40:57:e7:bc:30:55:06:32:5a:aa:bd:34:7f: b4:23:a9:59:1f:7f:c8:8e:6e:dc:f2:fd:57:a0:8e: b7:37:b7:54:d0:ca:19:07:1a:2a:27:ee:b1:c2:28: 10:33:f6:75:16:ae:bc:42:ef:cd:29:e9:8a:86:e6: e4:f0:44:d2:f4:13:14:fb:f2:af:93:6d:4a:66:79: 85:69:23:43:ef:23:8a:e9:ea:f2:24:65:cf:5c:62: 36:7e:60:be:86:ef:6f:f2:48:18:05:ce:41:42:c6: 13:f8:0f:36:6c:12:a7:f7:53:ac:ea:9d:49:c4:bc: 99:82:bc:73:5d:70:80:04:9a:1c:86:68:6c:bd:b6: 29:66:78:0e:aa:80:42:fd:61:3a:79:0b:62:40:3e: 16:6d:da:90:53:b7:6d:a1:e4:bd:e1:27:56:a7:26: 69:aa:30:be:d2:5d:c0:75:98:2c:79:b4:90:8f:ea: 16:14:21:97:4a:32:55:68:1f:64:57:5a:01:d2:7e: e2:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:B7:B1:AF:56:71:5D:85:9B:9B:28:07:36:09:93:14:7E:D1:F4:51 X509v3 Authority Key Identifier: keyid:BC:D5:AB:D9:C9:1C:A1:E7:F2:C4:55:57:05:B2:94:04:F5:05:BD:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912F281/12DE8A5EC66E11EFA787F865C4F9AE02/vNWr2ckcoefyxFVXBbKUBPUFvcU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vNWr2ckcoefyxFVXBbKUBPUFvcU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912F281/12DE8A5EC66E11EFA787F865C4F9AE02/vNWr2ckcoefyxFVXBbKUBPUFvcU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 00:b0:13:92:dc:67:f0:e5:91:ce:1f:0f:c8:b0:62:f1:2d:eb: 9a:e7:98:4e:79:0d:fb:df:6d:00:98:67:39:df:22:f2:45:2a: 94:83:3e:d4:a2:0c:c7:18:99:7e:94:ca:84:1b:34:5f:dd:e5: c4:3d:ce:73:e3:6f:9b:7e:41:c0:c9:10:05:c4:76:3d:70:5b: 34:1d:81:a0:fc:64:b4:b5:bc:49:9a:ce:48:5a:07:f1:c8:1e: c0:52:5c:79:dd:94:ff:01:9c:34:fb:61:c7:5e:50:fe:40:08: 71:36:82:08:25:91:cf:3b:d5:29:8b:eb:0b:6c:51:f1:a0:59: 68:35:6c:ae:b1:17:ca:19:c5:bd:a4:4e:0d:06:4f:2c:68:17: a7:7c:80:e0:8b:fb:11:72:16:c7:22:d9:33:25:2b:64:0e:a5: 48:fe:02:dd:b7:a8:bc:2c:69:5f:7f:4c:39:61:76:e0:f1:f0: 72:d9:f7:9d:d2:a3:b2:3f:73:84:57:75:76:73:cf:10:de:88: 4d:1e:81:3d:34:b7:a7:5c:8e:17:50:fc:67:fb:de:2b:0b:7d: f8:1f:fd:4b:85:08:ab:6b:18:16:f6:07:e4:eb:e2:38:76:da: 8f:17:16:9a:c2:75:11:8f:d2:3d:09:55:11:f8:94:78:98:2b: 61:ad:44:b8 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBezANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy RjI4MTExMC8GA1UEBRMoQkNENUFCRDlDOTFDQTFFN0YyQzQ1NTU3MDVCMjk0MDRG NTA1QkRDNTAeFw0yNTA4MjMwNjU4MTJaFw0yNTA4MzAwNjU4MTJaMBgxFjAUBgNV BAMTDTY4YTk2Njg0LWE0MzgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDA8H9RjTaYlQbCUPC8jQTOvm7AyklMeX0r+cdD8awavEsxNc1bMR+msDFzCqii uKMIBpr+QYw7DrddI22oQFfnvDBVBjJaqr00f7QjqVkff8iObtzy/Vegjrc3t1TQ yhkHGion7rHCKBAz9nUWrrxC780p6YqG5uTwRNL0ExT78q+TbUpmeYVpI0PvI4rp 6vIkZc9cYjZ+YL6G72/ySBgFzkFCxhP4DzZsEqf3U6zqnUnEvJmCvHNdcIAEmhyG aGy9tilmeA6qgEL9YTp5C2JAPhZt2pBTt22h5L3hJ1anJmmqML7SXcB1mCx5tJCP 6hYUIZdKMlVoH2RXWgHSfuKpAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUE7exr1Zx XYWbmygHNgmTFH7R9FEwHwYDVR0jBBgwFoAUvNWr2ckcoefyxFVXBbKUBPUFvcUw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTJGMjgxLzEyREU4QTVFQzY2 RTExRUZBNzg3Rjg2NUM0RjlBRTAyL3ZOV3IyY2tjb2VmeXhGVlhCYktVQlBVRnZj VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvdk5XcjJja2NvZWZ5eEZWWEJiS1VCUFVGdmNVLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTJG MjgxLzEyREU4QTVFQzY2RTExRUZBNzg3Rjg2NUM0RjlBRTAyL3ZOV3IyY2tjb2Vm eXhGVlhCYktVQlBVRnZjVS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAACwE5LcZ/Dlkc4fD8iwYvEt65rnmE55DfvfbQCYZznfIvJFKpSDPtSi DMcYmX6UyoQbNF/d5cQ9znPjb5t+QcDJEAXEdj1wWzQdgaD8ZLS1vEmazkhaB/HI HsBSXHndlP8BnDT7YcdeUP5ACHE2ggglkc871SmL6wtsUfGgWWg1bK6xF8oZxb2k Tg0GTyxoF6d8gOCL+xFyFsci2TMlK2QOpUj+At23qLwsaV9/TDlhduDx8HLZ953S o7I/c4RXdXZzzxDeiE0egT00t6dcjhdQ/Gf73isLffgf/UuFCKtrGBb2B+Tr4jh2 2o8XFprCdRGP0j0JVRH4lHiYK2GtRLg= -----END CERTIFICATE-----Generated at Sat Aug 23 12:49:35 2025 by rpki-client