$ rpki-client -vvf rpki.apnic.net/member_repository/A9113E79/11154DDC13E011EC977E4178C4F9AE02/nPMspRGaIvijMFkQ1ANfaLP8IUw.mft File: nPMspRGaIvijMFkQ1ANfaLP8IUw.mft (raw, json) Hash identifier: Fhnn1sWXYX+hD7eKtuwqyVpcACcTXRFazmVjO9+L3/U= Subject key identifier: 50:92:8C:A5:A8:7F:C6:9E:1F:04:3F:45:E2:E7:D3:FB:D3:63:B5:45 Authority key identifier: 9C:F3:2C:A5:11:9A:22:F8:A3:30:59:10:D4:03:5F:68:B3:FC:21:4C Certificate issuer: /CN=A9113E79/serialNumber=9CF32CA5119A22F8A3305910D4035F68B3FC214C Certificate serial: 0503 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nPMspRGaIvijMFkQ1ANfaLP8IUw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9113E79/11154DDC13E011EC977E4178C4F9AE02/nPMspRGaIvijMFkQ1ANfaLP8IUw.mft Manifest number: 04FF Signing time: Tue 01 Jul 2025 00:05:16 +0000 Manifest this update: Tue 01 Jul 2025 00:05:16 +0000 Manifest next update: Tue 08 Jul 2025 00:05:16 +0000 Files and hashes: 1: nPMspRGaIvijMFkQ1ANfaLP8IUw.crl (hash: uKtKXc7X6pdsnyqqBzxKEAJJXu1UgjQbXkAlFcS7R+I=) 2: 55D5848813E411EC9BE4C87FC4F9AE02.roa (hash: IhuzHy2i1HilFEQnpW2ccDVOUFu06otCgruwg3LwU+w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9113E79/11154DDC13E011EC977E4178C4F9AE02/nPMspRGaIvijMFkQ1ANfaLP8IUw.crl rsync://rpki.apnic.net/member_repository/A9113E79/11154DDC13E011EC977E4178C4F9AE02/nPMspRGaIvijMFkQ1ANfaLP8IUw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nPMspRGaIvijMFkQ1ANfaLP8IUw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 00:05:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1283 (0x503) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9113E79, serialNumber=9CF32CA5119A22F8A3305910D4035F68B3FC214C Validity Not Before: Jul 1 00:05:16 2025 GMT Not After : Jul 8 00:05:16 2025 GMT Subject: CN=6863263c-d37a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:dd:90:08:76:cf:b0:2d:fa:aa:c1:11:d8:94: f9:51:5f:87:b2:ad:ef:08:1c:3b:e5:e4:08:69:8c: 06:57:c4:ad:5d:d1:d1:91:c7:84:1b:9b:0e:86:14: 78:e7:fe:c5:95:b3:e2:a8:69:21:9b:6c:d5:28:74: 7e:5e:00:f6:4a:00:a7:b0:57:db:6b:2e:3e:3e:eb: 19:d4:e7:d9:26:d1:1d:ca:4d:8f:25:88:9e:59:51: ee:15:08:7b:f1:cf:0c:d4:75:e7:86:fd:34:00:79: 2d:df:12:c6:30:0e:bb:b5:57:2b:2f:b4:58:41:01: 6f:76:69:1f:1c:ac:10:24:aa:b8:c4:14:7f:67:6e: f4:f3:95:a5:b2:20:28:d2:76:2d:b3:ca:7e:74:88: f9:07:6e:4e:37:b1:2a:f2:0e:52:7f:7f:f9:89:2b: 9d:03:59:20:1c:49:c1:6c:58:58:eb:89:fc:b5:df: ba:04:d1:a7:4b:fe:e2:ba:c7:b5:15:73:7a:d3:4e: e5:e7:bf:95:45:47:f9:b5:cd:91:5c:9d:04:54:97: f8:89:d2:05:aa:00:6a:f7:e1:5a:d4:f5:57:b0:3c: 1f:c7:8d:71:b0:0c:b1:c7:c4:fe:0d:ee:8d:f2:5c: 3c:71:86:4e:2f:97:76:93:95:63:a2:5b:6f:47:b7: 2e:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:92:8C:A5:A8:7F:C6:9E:1F:04:3F:45:E2:E7:D3:FB:D3:63:B5:45 X509v3 Authority Key Identifier: keyid:9C:F3:2C:A5:11:9A:22:F8:A3:30:59:10:D4:03:5F:68:B3:FC:21:4C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9113E79/11154DDC13E011EC977E4178C4F9AE02/nPMspRGaIvijMFkQ1ANfaLP8IUw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nPMspRGaIvijMFkQ1ANfaLP8IUw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9113E79/11154DDC13E011EC977E4178C4F9AE02/nPMspRGaIvijMFkQ1ANfaLP8IUw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8d:24:d2:16:bb:1c:d3:c9:54:26:ab:51:3b:8a:40:fa:df:08: 36:74:b0:7e:cf:c7:39:fe:d3:e2:66:d3:9e:c9:88:fd:be:cd: 1d:73:1c:76:7c:71:f8:f9:9c:be:2d:21:3d:c0:6d:58:9a:0f: 5b:30:46:d6:d1:88:69:a2:d1:b5:88:1a:97:dc:ad:22:d7:7e: 38:cd:2e:64:d7:19:9f:89:df:4b:a8:77:5f:c4:16:58:51:37: 17:6f:f9:44:a7:e5:c7:1b:66:7f:66:ce:cc:0f:7f:bd:52:48: 5b:ec:e3:72:4a:1d:b6:b8:88:2c:d3:b1:df:6b:ef:7c:16:8f: 07:c6:52:e3:76:f0:bc:d7:47:99:0c:2e:5e:7f:1a:e1:23:f2: 9b:15:f8:ad:2b:01:46:b1:64:0a:21:11:88:ea:bb:86:3b:fc: 86:30:3d:fc:53:02:e6:73:08:d6:b9:75:34:0a:83:89:d7:17: f0:1d:56:93:6b:cf:99:dd:52:15:ac:18:46:6b:53:18:66:5d: 7e:47:a4:ad:97:98:53:e4:b6:c5:4b:25:20:01:8f:e2:0a:48: d3:89:d3:90:4a:f5:88:a8:09:68:a4:eb:75:c5:b5:dc:69:a0: 28:9b:c3:44:45:51:0b:df:91:c2:d2:62:76:74:16:42:cf:ef: 7b:f7:3a:0f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBQMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTNFNzkxMTAvBgNVBAUTKDlDRjMyQ0E1MTE5QTIyRjhBMzMwNTkxMEQ0MDM1RjY4 QjNGQzIxNEMwHhcNMjUwNzAxMDAwNTE2WhcNMjUwNzA4MDAwNTE2WjAYMRYwFAYD VQQDEw02ODYzMjYzYy1kMzdhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5t2QCHbPsC36qsER2JT5UV+Hsq3vCBw75eQIaYwGV8StXdHRkceEG5sOhhR4 5/7FlbPiqGkhm2zVKHR+XgD2SgCnsFfbay4+PusZ1OfZJtEdyk2PJYieWVHuFQh7 8c8M1HXnhv00AHkt3xLGMA67tVcrL7RYQQFvdmkfHKwQJKq4xBR/Z27085WlsiAo 0nYts8p+dIj5B25ON7Eq8g5Sf3/5iSudA1kgHEnBbFhY64n8td+6BNGnS/7iuse1 FXN6007l57+VRUf5tc2RXJ0EVJf4idIFqgBq9+Fa1PVXsDwfx41xsAyxx8T+De6N 8lw8cYZOL5d2k5VjoltvR7cu4QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFCSjKWo f8aeHwQ/ReLn0/vTY7VFMB8GA1UdIwQYMBaAFJzzLKURmiL4ozBZENQDX2iz/CFM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExM0U3OS8xMTE1NEREQzEz RTAxMUVDOTc3RTQxNzhDNEY5QUUwMi9uUE1zcFJHYUl2aWpNRmtRMUFOZmFMUDhJ VXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25QTXNwUkdhSXZpak1Ga1ExQU5mYUxQOElVdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx M0U3OS8xMTE1NEREQzEzRTAxMUVDOTc3RTQxNzhDNEY5QUUwMi9uUE1zcFJHYUl2 aWpNRmtRMUFOZmFMUDhJVXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCNJNIWuxzTyVQmq1E7ikD63wg2dLB+z8c5/tPiZtOeyYj9vs0dcxx2 fHH4+Zy+LSE9wG1Ymg9bMEbW0YhpotG1iBqX3K0i1344zS5k1xmfid9LqHdfxBZY UTcXb/lEp+XHG2Z/Zs7MD3+9Ukhb7ONySh22uIgs07Hfa+98Fo8HxlLjdvC810eZ DC5efxrhI/KbFfitKwFGsWQKIRGI6ruGO/yGMD38UwLmcwjWuXU0CoOJ1xfwHVaT a8+Z3VIVrBhGa1MYZl1+R6Stl5hT5LbFSyUgAY/iCkjTidOQSvWIqAlopOt1xbXc aaAom8NERVEL35HC0mJ2dBZCz+979zoP -----END CERTIFICATE-----Generated at Wed Jul 2 01:27:33 2025 by rpki-client