$ rpki-client -vvf rpki.apnic.net/member_repository/A912F281/12DE8A5EC66E11EFA787F865C4F9AE02/vNWr2ckcoefyxFVXBbKUBPUFvcU.mft File: vNWr2ckcoefyxFVXBbKUBPUFvcU.mft (raw, json) Hash identifier: C1kk1wGNS8AiVqg+VIJWRXjTbEKZV8F2UMRPRiv4Z1c= Subject key identifier: B5:17:68:0E:F0:DD:23:0E:83:82:B5:ED:EC:24:76:D0:31:EC:89:FD Authority key identifier: BC:D5:AB:D9:C9:1C:A1:E7:F2:C4:55:57:05:B2:94:04:F5:05:BD:C5 Certificate issuer: /CN=A912F281/serialNumber=BCD5ABD9C91CA1E7F2C4555705B29404F505BDC5 Certificate serial: 61 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vNWr2ckcoefyxFVXBbKUBPUFvcU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912F281/12DE8A5EC66E11EFA787F865C4F9AE02/vNWr2ckcoefyxFVXBbKUBPUFvcU.mft Manifest number: 60 Signing time: Thu 03 Jul 2025 07:16:56 +0000 Manifest this update: Thu 03 Jul 2025 07:16:56 +0000 Manifest next update: Thu 10 Jul 2025 07:16:55 +0000 Files and hashes: 1: vNWr2ckcoefyxFVXBbKUBPUFvcU.crl (hash: Tbx+rPoUYQGbi5juViteKR8QoAYEUJP/A8xeZXcU2kw=) 2: 89EA22F0C67011EFAE929D0DC4F9AE02.roa (hash: u5vjYU67JaqqsoNZI0S6g4tD4PgUnrgAcxaVH+69TsM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912F281/12DE8A5EC66E11EFA787F865C4F9AE02/vNWr2ckcoefyxFVXBbKUBPUFvcU.crl rsync://rpki.apnic.net/member_repository/A912F281/12DE8A5EC66E11EFA787F865C4F9AE02/vNWr2ckcoefyxFVXBbKUBPUFvcU.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vNWr2ckcoefyxFVXBbKUBPUFvcU.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 97 (0x61) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912F281, serialNumber=BCD5ABD9C91CA1E7F2C4555705B29404F505BDC5 Validity Not Before: Jul 3 07:16:56 2025 GMT Not After : Jul 10 07:16:55 2025 GMT Subject: CN=68662e68-6f5b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:c5:9d:ee:b6:cb:63:fd:79:10:f4:14:f6:3c: 5b:ad:8d:54:b9:a6:78:c3:16:be:49:9a:18:aa:c7: 89:ba:6b:a2:83:49:86:c1:bc:26:23:7a:64:54:8a: 44:0a:4d:b9:e0:f0:df:2d:d2:82:9d:ef:e8:b1:6a: 34:23:c5:d4:1e:c0:79:89:66:80:c3:37:0f:47:a4: 13:a2:ad:c8:84:aa:df:a1:9e:cb:79:fc:e6:ca:3a: fe:4c:7e:51:d0:4a:90:8c:2b:56:85:8c:45:ff:16: b3:65:ba:f0:5f:93:0d:25:86:24:3a:9c:73:60:24: 99:a3:13:82:04:8f:3f:1d:5d:3c:75:e7:8c:99:ef: 75:03:2d:fb:7d:67:e6:60:65:d4:01:65:68:66:cf: cd:09:d6:ef:28:a3:9a:34:5c:72:f2:1c:f9:ea:48: c5:e5:a9:e2:27:20:17:63:83:1b:09:64:aa:f1:f5: 37:53:6b:b9:db:8e:9b:58:3f:e7:72:11:2a:66:ff: 55:7f:0a:c7:2d:25:3a:3c:8f:d0:8d:21:2e:fd:79: 5e:f0:10:e4:65:b6:74:1e:bb:97:c2:89:c9:c9:da: 69:ca:9d:b7:ca:9e:60:62:25:70:86:f6:f6:21:61: 24:67:c2:66:26:98:27:03:f9:b4:d1:de:3a:c3:73: f7:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:17:68:0E:F0:DD:23:0E:83:82:B5:ED:EC:24:76:D0:31:EC:89:FD X509v3 Authority Key Identifier: keyid:BC:D5:AB:D9:C9:1C:A1:E7:F2:C4:55:57:05:B2:94:04:F5:05:BD:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912F281/12DE8A5EC66E11EFA787F865C4F9AE02/vNWr2ckcoefyxFVXBbKUBPUFvcU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vNWr2ckcoefyxFVXBbKUBPUFvcU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912F281/12DE8A5EC66E11EFA787F865C4F9AE02/vNWr2ckcoefyxFVXBbKUBPUFvcU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5d:9e:56:73:3b:02:16:f3:18:f2:23:1d:d4:c3:c5:b9:da:4d: a8:e3:03:f7:20:18:f0:15:dd:4c:71:7c:c5:34:be:f5:07:a1: 13:95:3c:b1:c1:3e:eb:5e:fd:ce:20:07:9b:05:7e:98:08:06: 23:34:80:fe:58:52:66:4c:bf:be:f6:4b:05:9b:98:b0:41:b8: 77:5d:f8:e8:b3:e0:7c:2e:61:25:a1:28:5f:69:f1:a1:ee:23: 6c:8d:be:56:34:e1:fd:85:e3:5f:19:05:b1:23:c2:3e:91:96: 19:3e:67:f3:05:8c:fe:20:0b:e1:f8:5c:42:a2:7f:d3:e5:0b: c5:ce:bc:ca:d4:60:31:34:f5:95:86:75:15:d0:ae:72:21:6e: 92:27:cb:8e:42:1e:ec:6b:59:f6:53:b8:0f:fd:0f:53:c5:d6: 8e:12:d4:76:08:cf:64:3d:ed:b9:47:f3:28:ec:38:fa:2f:e4: 56:c0:5d:05:e7:61:a9:4b:52:51:ce:3c:50:da:2d:12:d1:29: 31:d4:6d:21:d6:72:ce:92:dc:4e:a6:c4:0f:30:aa:c1:ad:28: 6a:da:15:f4:77:6c:ce:ee:92:2a:71:7f:4b:b4:79:4b:55:50: 4f:dd:27:69:6d:53:0f:eb:67:ec:cf:b3:57:cb:a7:a5:55:0c: 49:2a:af:00 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBYTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy RjI4MTExMC8GA1UEBRMoQkNENUFCRDlDOTFDQTFFN0YyQzQ1NTU3MDVCMjk0MDRG NTA1QkRDNTAeFw0yNTA3MDMwNzE2NTZaFw0yNTA3MTAwNzE2NTVaMBgxFjAUBgNV BAMTDTY4NjYyZTY4LTZmNWIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDVxZ3utstj/XkQ9BT2PFutjVS5pnjDFr5Jmhiqx4m6a6KDSYbBvCYjemRUikQK Tbng8N8t0oKd7+ixajQjxdQewHmJZoDDNw9HpBOirciEqt+hnst5/ObKOv5MflHQ SpCMK1aFjEX/FrNluvBfkw0lhiQ6nHNgJJmjE4IEjz8dXTx154yZ73UDLft9Z+Zg ZdQBZWhmz80J1u8oo5o0XHLyHPnqSMXlqeInIBdjgxsJZKrx9TdTa7nbjptYP+dy ESpm/1V/CsctJTo8j9CNIS79eV7wEORltnQeu5fCicnJ2mnKnbfKnmBiJXCG9vYh YSRnwmYmmCcD+bTR3jrDc/etAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUtRdoDvDd Iw6DgrXt7CR20DHsif0wHwYDVR0jBBgwFoAUvNWr2ckcoefyxFVXBbKUBPUFvcUw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTJGMjgxLzEyREU4QTVFQzY2 RTExRUZBNzg3Rjg2NUM0RjlBRTAyL3ZOV3IyY2tjb2VmeXhGVlhCYktVQlBVRnZj VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvdk5XcjJja2NvZWZ5eEZWWEJiS1VCUFVGdmNVLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTJG MjgxLzEyREU4QTVFQzY2RTExRUZBNzg3Rjg2NUM0RjlBRTAyL3ZOV3IyY2tjb2Vm eXhGVlhCYktVQlBVRnZjVS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAF2eVnM7AhbzGPIjHdTDxbnaTajjA/cgGPAV3UxxfMU0vvUHoROVPLHB Pute/c4gB5sFfpgIBiM0gP5YUmZMv772SwWbmLBBuHdd+Oiz4HwuYSWhKF9p8aHu I2yNvlY04f2F418ZBbEjwj6Rlhk+Z/MFjP4gC+H4XEKif9PlC8XOvMrUYDE09ZWG dRXQrnIhbpIny45CHuxrWfZTuA/9D1PF1o4S1HYIz2Q97blH8yjsOPov5FbAXQXn YalLUlHOPFDaLRLRKTHUbSHWcs6S3E6mxA8wqsGtKGraFfR3bM7ukipxf0u0eUtV UE/dJ2ltUw/rZ+zPs1fLp6VVDEkqrwA= -----END CERTIFICATE-----Generated at Fri Jul 4 11:50:53 2025 by rpki-client