$ rpki-client -vvf rpki.apnic.net/member_repository/A912F281/12DE8A5EC66E11EFA787F865C4F9AE02/vNWr2ckcoefyxFVXBbKUBPUFvcU.mft File: vNWr2ckcoefyxFVXBbKUBPUFvcU.mft (raw, json) Hash identifier: J2LozeKgQM+cbD9ak9hNSp/zW2rvNzBCusBzWqCRYK8= Subject key identifier: 0D:1B:46:3E:06:56:B5:27:FD:8D:A0:04:07:E3:E0:D4:48:0C:65:33 Authority key identifier: BC:D5:AB:D9:C9:1C:A1:E7:F2:C4:55:57:05:B2:94:04:F5:05:BD:C5 Certificate issuer: /CN=A912F281/serialNumber=BCD5ABD9C91CA1E7F2C4555705B29404F505BDC5 Certificate serial: 3F Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vNWr2ckcoefyxFVXBbKUBPUFvcU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912F281/12DE8A5EC66E11EFA787F865C4F9AE02/vNWr2ckcoefyxFVXBbKUBPUFvcU.mft Manifest number: 3E Signing time: Fri 25 Apr 2025 06:27:45 +0000 Manifest this update: Fri 25 Apr 2025 06:27:45 +0000 Manifest next update: Fri 02 May 2025 06:27:45 +0000 Files and hashes: 1: vNWr2ckcoefyxFVXBbKUBPUFvcU.crl (hash: Uk13QQtJ6khVtf5QNU9U89FEDx9nj10S/9kZ2FE0V/4=) 2: 89EA22F0C67011EFAE929D0DC4F9AE02.roa (hash: u5vjYU67JaqqsoNZI0S6g4tD4PgUnrgAcxaVH+69TsM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912F281/12DE8A5EC66E11EFA787F865C4F9AE02/vNWr2ckcoefyxFVXBbKUBPUFvcU.crl rsync://rpki.apnic.net/member_repository/A912F281/12DE8A5EC66E11EFA787F865C4F9AE02/vNWr2ckcoefyxFVXBbKUBPUFvcU.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vNWr2ckcoefyxFVXBbKUBPUFvcU.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 06:27:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63 (0x3f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912F281, serialNumber=BCD5ABD9C91CA1E7F2C4555705B29404F505BDC5 Validity Not Before: Apr 25 06:27:45 2025 GMT Not After : May 2 06:27:45 2025 GMT Subject: CN=680b2b61-6399 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:e5:07:97:a9:5a:2b:d8:cc:94:aa:b3:ee:e7: c3:de:b9:69:aa:9c:6e:2c:2e:2c:39:73:ff:57:0f: 00:42:1d:64:2b:2e:12:1a:17:31:b2:2e:24:15:8c: 2e:31:4c:f8:cb:2a:c9:7c:10:35:01:51:66:ef:60: 50:90:1f:62:ee:1d:81:a6:64:38:df:7c:51:6e:9b: a1:e5:f3:0e:c8:78:63:ab:e5:70:52:53:3a:7e:bb: 13:e6:d5:74:3f:65:f2:49:8e:48:2f:ba:ec:ef:6b: b5:d2:48:13:ed:00:78:18:a1:87:7d:f9:6b:e3:47: 40:00:3d:b0:a9:d0:b3:01:dc:f9:5b:42:01:22:00: cb:d8:31:98:0a:34:a2:0b:1a:5c:46:3d:18:e7:ca: ff:d6:97:cf:d5:66:b0:2f:52:8e:86:fd:0e:6a:ab: 4e:61:ac:36:7f:89:32:56:63:7b:95:43:98:5c:ac: 96:c3:32:c3:41:2c:af:ac:eb:8e:0d:71:9e:22:7b: 50:dd:42:7b:84:a7:92:a8:4d:80:7c:72:88:bc:f3: 96:8c:06:80:b4:21:84:7b:85:a5:81:71:37:ee:19: 1c:b6:2b:ff:4e:97:2d:cb:0a:2f:9f:91:bf:0e:bf: 76:e3:43:a9:2b:e1:4a:50:af:7a:5a:28:c4:f8:d2: 5c:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:1B:46:3E:06:56:B5:27:FD:8D:A0:04:07:E3:E0:D4:48:0C:65:33 X509v3 Authority Key Identifier: keyid:BC:D5:AB:D9:C9:1C:A1:E7:F2:C4:55:57:05:B2:94:04:F5:05:BD:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912F281/12DE8A5EC66E11EFA787F865C4F9AE02/vNWr2ckcoefyxFVXBbKUBPUFvcU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vNWr2ckcoefyxFVXBbKUBPUFvcU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912F281/12DE8A5EC66E11EFA787F865C4F9AE02/vNWr2ckcoefyxFVXBbKUBPUFvcU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 93:65:8c:30:06:a0:4b:d6:06:30:9f:99:5b:0f:8b:2e:1b:3f: 7c:a3:4c:ce:da:42:6d:3b:68:bf:08:8c:1e:63:49:00:51:18: be:36:56:56:a9:98:b2:f0:48:4f:56:72:bc:3b:f5:52:03:a5: 4a:26:56:29:82:8e:e9:a3:60:e2:77:45:65:11:ef:43:97:55: 1d:e8:b0:51:8e:4b:d7:a5:76:f7:81:a6:ff:b5:87:3e:a5:29: 63:b2:59:5e:fa:05:74:c7:e2:01:65:6e:24:b1:3d:0b:bd:d5: 87:57:a9:fe:92:6e:8f:44:14:eb:1c:ea:01:11:bc:18:8f:7d: da:79:36:41:b6:5e:ad:ef:43:e4:ed:64:2f:35:f8:fc:4e:54: 98:0d:ce:b6:6e:7a:e4:9f:50:c3:35:3c:30:8c:f2:42:c4:36: e6:e2:62:48:d2:4c:44:f6:48:cb:4b:21:e4:bd:e5:8c:24:38: 84:d4:9c:18:58:c2:37:80:33:17:dd:1b:50:b7:ad:e3:2a:c7: 08:5c:37:66:b3:d1:60:ab:1d:b6:05:64:38:9e:32:d8:4d:b7: 46:5c:4d:eb:19:cb:8e:19:aa:26:22:68:26:7e:93:4b:20:2a: 42:16:74:eb:51:4b:83:09:51:c7:3e:b4:17:15:45:d6:14:7f: 9d:fb:eb:fe -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBPzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy RjI4MTExMC8GA1UEBRMoQkNENUFCRDlDOTFDQTFFN0YyQzQ1NTU3MDVCMjk0MDRG NTA1QkRDNTAeFw0yNTA0MjUwNjI3NDVaFw0yNTA1MDIwNjI3NDVaMBgxFjAUBgNV BAMTDTY4MGIyYjYxLTYzOTkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC65QeXqVor2MyUqrPu58PeuWmqnG4sLiw5c/9XDwBCHWQrLhIaFzGyLiQVjC4x TPjLKsl8EDUBUWbvYFCQH2LuHYGmZDjffFFum6Hl8w7IeGOr5XBSUzp+uxPm1XQ/ ZfJJjkgvuuzva7XSSBPtAHgYoYd9+WvjR0AAPbCp0LMB3PlbQgEiAMvYMZgKNKIL GlxGPRjnyv/Wl8/VZrAvUo6G/Q5qq05hrDZ/iTJWY3uVQ5hcrJbDMsNBLK+s644N cZ4ie1DdQnuEp5KoTYB8coi885aMBoC0IYR7haWBcTfuGRy2K/9Oly3LCi+fkb8O v3bjQ6kr4UpQr3paKMT40lwlAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUDRtGPgZW tSf9jaAEB+Pg1EgMZTMwHwYDVR0jBBgwFoAUvNWr2ckcoefyxFVXBbKUBPUFvcUw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTJGMjgxLzEyREU4QTVFQzY2 RTExRUZBNzg3Rjg2NUM0RjlBRTAyL3ZOV3IyY2tjb2VmeXhGVlhCYktVQlBVRnZj VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvdk5XcjJja2NvZWZ5eEZWWEJiS1VCUFVGdmNVLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTJG MjgxLzEyREU4QTVFQzY2RTExRUZBNzg3Rjg2NUM0RjlBRTAyL3ZOV3IyY2tjb2Vm eXhGVlhCYktVQlBVRnZjVS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJNljDAGoEvWBjCfmVsPiy4bP3yjTM7aQm07aL8IjB5jSQBRGL42Vlap mLLwSE9Wcrw79VIDpUomVimCjumjYOJ3RWUR70OXVR3osFGOS9eldveBpv+1hz6l KWOyWV76BXTH4gFlbiSxPQu91YdXqf6Sbo9EFOsc6gERvBiPfdp5NkG2Xq3vQ+Tt ZC81+PxOVJgNzrZueuSfUMM1PDCM8kLENubiYkjSTET2SMtLIeS95YwkOITUnBhY wjeAMxfdG1C3reMqxwhcN2az0WCrHbYFZDieMthNt0ZcTesZy44ZqiYiaCZ+k0sg KkIWdOtRS4MJUcc+tBcVRdYUf5376/4= -----END CERTIFICATE-----Generated at Sat Apr 26 17:18:38 2025 by rpki-client