$ rpki-client -vvf rpki.apnic.net/member_repository/A912F281/12DE8A5EC66E11EFA787F865C4F9AE02/vNWr2ckcoefyxFVXBbKUBPUFvcU.mft File: vNWr2ckcoefyxFVXBbKUBPUFvcU.mft (raw, json) Hash identifier: 9/+hdaSPQQtRzNo2+aYQXNpF4sXoXhI+Nk4kj3aYiZs= Subject key identifier: 43:8E:07:2C:71:F1:BD:BB:46:A7:70:A2:24:36:5C:62:22:BB:25:24 Authority key identifier: BC:D5:AB:D9:C9:1C:A1:E7:F2:C4:55:57:05:B2:94:04:F5:05:BD:C5 Certificate issuer: /CN=A912F281/serialNumber=BCD5ABD9C91CA1E7F2C4555705B29404F505BDC5 Certificate serial: 4A Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vNWr2ckcoefyxFVXBbKUBPUFvcU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912F281/12DE8A5EC66E11EFA787F865C4F9AE02/vNWr2ckcoefyxFVXBbKUBPUFvcU.mft Manifest number: 49 Signing time: Sat 17 May 2025 06:49:06 +0000 Manifest this update: Sat 17 May 2025 06:49:05 +0000 Manifest next update: Sat 24 May 2025 06:49:05 +0000 Files and hashes: 1: vNWr2ckcoefyxFVXBbKUBPUFvcU.crl (hash: oWHkTErNucUh377NU73qA+pOarkoWazZRgirKgn1QEE=) 2: 89EA22F0C67011EFAE929D0DC4F9AE02.roa (hash: u5vjYU67JaqqsoNZI0S6g4tD4PgUnrgAcxaVH+69TsM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912F281/12DE8A5EC66E11EFA787F865C4F9AE02/vNWr2ckcoefyxFVXBbKUBPUFvcU.crl rsync://rpki.apnic.net/member_repository/A912F281/12DE8A5EC66E11EFA787F865C4F9AE02/vNWr2ckcoefyxFVXBbKUBPUFvcU.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vNWr2ckcoefyxFVXBbKUBPUFvcU.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 24 May 2025 06:49:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74 (0x4a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912F281, serialNumber=BCD5ABD9C91CA1E7F2C4555705B29404F505BDC5 Validity Not Before: May 17 06:49:05 2025 GMT Not After : May 24 06:49:05 2025 GMT Subject: CN=68283162-2d2d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:38:f4:41:ef:21:7a:bc:1a:12:5a:63:11:17: 81:b9:d1:7c:d9:d2:25:7a:f9:82:d6:30:7a:11:38: 8b:eb:47:17:41:f2:e4:4f:d6:f4:16:db:41:c0:c9: a4:17:4f:db:dc:5d:a1:ed:9d:3a:00:54:82:eb:bf: 4b:ec:2c:8b:5c:9c:39:0c:04:67:94:c9:e9:e6:cd: f6:c5:77:04:dd:47:cb:cc:ea:b2:40:79:c0:82:30: f1:19:b5:15:a4:8b:8e:1a:52:fb:17:cf:a4:88:8b: 17:23:17:3d:e5:a1:37:e2:95:c3:b0:09:67:39:80: 89:b9:cb:92:7c:4b:8e:19:0a:36:4c:d9:bf:fc:f8: 4b:0b:86:52:92:4b:67:b6:4c:75:4c:d8:2d:17:56: 46:30:17:fa:23:64:a7:9a:76:63:91:1d:34:23:1b: da:7e:12:54:9d:24:f0:48:93:fb:17:a1:cf:61:ce: bf:6d:90:1b:ae:92:2a:e6:f3:9a:25:d8:c9:c6:91: fb:72:12:43:02:fa:09:0b:49:79:fd:5b:a9:17:17: b5:24:2b:90:07:55:6a:9d:55:f5:89:10:31:cc:4f: cd:08:3b:bf:85:8f:99:b5:58:53:ea:84:eb:ec:f3: 3d:0e:dd:a6:0e:21:7a:b9:a2:cd:ea:67:46:ef:5a: f5:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:8E:07:2C:71:F1:BD:BB:46:A7:70:A2:24:36:5C:62:22:BB:25:24 X509v3 Authority Key Identifier: keyid:BC:D5:AB:D9:C9:1C:A1:E7:F2:C4:55:57:05:B2:94:04:F5:05:BD:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912F281/12DE8A5EC66E11EFA787F865C4F9AE02/vNWr2ckcoefyxFVXBbKUBPUFvcU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vNWr2ckcoefyxFVXBbKUBPUFvcU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912F281/12DE8A5EC66E11EFA787F865C4F9AE02/vNWr2ckcoefyxFVXBbKUBPUFvcU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 67:aa:b8:a7:3d:6c:96:f7:3a:26:10:2a:38:32:3a:3d:01:a0: 88:82:d1:d0:dd:9a:e4:b6:dc:0d:bb:0b:04:75:e2:66:fd:8a: ec:6f:f5:39:04:fe:7f:8b:78:d5:6b:47:54:8e:be:a8:1c:c4: d3:0c:81:84:3f:df:ae:5f:07:7c:8f:b7:c7:8f:34:8e:67:5e: 44:be:d6:19:8b:29:dc:5b:08:59:b6:c2:be:0d:90:c2:42:72: 39:7a:c6:e0:01:d8:1d:bd:9f:8c:23:37:4c:d6:d9:98:bd:ef: 54:5f:cb:be:fb:37:54:28:90:e1:ea:7f:39:bb:a3:8f:20:0a: 06:a9:f7:91:29:39:e4:b7:81:ef:43:8a:fe:36:df:98:92:3d: 09:0d:58:8e:f9:56:f4:fa:0d:1f:d0:24:e2:18:e7:2c:68:76: 7e:cf:d2:0a:87:5c:6a:ff:47:54:c8:96:b0:fe:ea:08:ee:ce: e0:8e:f5:ef:25:7d:3b:b2:46:cc:85:54:ee:c8:77:a3:17:ec: 35:a1:ca:50:87:f0:0c:68:63:76:c9:dc:14:54:7a:0b:38:47: af:4b:75:41:7e:33:63:ca:da:34:bb:c6:c6:34:d1:8d:9f:86: d1:55:06:cf:7f:23:e1:75:99:b3:cb:ec:fd:bf:c7:c2:92:66: 3f:99:ae:25 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBSjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy RjI4MTExMC8GA1UEBRMoQkNENUFCRDlDOTFDQTFFN0YyQzQ1NTU3MDVCMjk0MDRG NTA1QkRDNTAeFw0yNTA1MTcwNjQ5MDVaFw0yNTA1MjQwNjQ5MDVaMBgxFjAUBgNV BAMTDTY4MjgzMTYyLTJkMmQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDeOPRB7yF6vBoSWmMRF4G50XzZ0iV6+YLWMHoROIvrRxdB8uRP1vQW20HAyaQX T9vcXaHtnToAVILrv0vsLItcnDkMBGeUyenmzfbFdwTdR8vM6rJAecCCMPEZtRWk i44aUvsXz6SIixcjFz3loTfilcOwCWc5gIm5y5J8S44ZCjZM2b/8+EsLhlKSS2e2 THVM2C0XVkYwF/ojZKeadmORHTQjG9p+ElSdJPBIk/sXoc9hzr9tkBuukirm85ol 2MnGkftyEkMC+gkLSXn9W6kXF7UkK5AHVWqdVfWJEDHMT80IO7+Fj5m1WFPqhOvs 8z0O3aYOIXq5os3qZ0bvWvWrAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUQ44HLHHx vbtGp3CiJDZcYiK7JSQwHwYDVR0jBBgwFoAUvNWr2ckcoefyxFVXBbKUBPUFvcUw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTJGMjgxLzEyREU4QTVFQzY2 RTExRUZBNzg3Rjg2NUM0RjlBRTAyL3ZOV3IyY2tjb2VmeXhGVlhCYktVQlBVRnZj VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvdk5XcjJja2NvZWZ5eEZWWEJiS1VCUFVGdmNVLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTJG MjgxLzEyREU4QTVFQzY2RTExRUZBNzg3Rjg2NUM0RjlBRTAyL3ZOV3IyY2tjb2Vm eXhGVlhCYktVQlBVRnZjVS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAGequKc9bJb3OiYQKjgyOj0BoIiC0dDdmuS23A27CwR14mb9iuxv9TkE /n+LeNVrR1SOvqgcxNMMgYQ/365fB3yPt8ePNI5nXkS+1hmLKdxbCFm2wr4NkMJC cjl6xuAB2B29n4wjN0zW2Zi971Rfy777N1QokOHqfzm7o48gCgap95EpOeS3ge9D iv4235iSPQkNWI75VvT6DR/QJOIY5yxodn7P0gqHXGr/R1TIlrD+6gjuzuCO9e8l fTuyRsyFVO7Id6MX7DWhylCH8AxoY3bJ3BRUegs4R69LdUF+M2PK2jS7xsY00Y2f htFVBs9/I+F1mbPL7P2/x8KSZj+ZriU= -----END CERTIFICATE-----Generated at Sun May 18 02:01:37 2025 by rpki-client