$ rpki-client -vvf rpki.apnic.net/member_repository/A911403B/4AA74B7462DA11ECB371C767C4F9AE02/nzVmCVwLDAIx0LuWkl4DidHCbFc.mft File: nzVmCVwLDAIx0LuWkl4DidHCbFc.mft (raw, json) Hash identifier: spOtB5oF2XHqVelyh3w/EM8hizsybwhu69tczuR8Wds= Subject key identifier: DA:CB:BA:48:E9:31:B8:C7:BD:8D:43:42:20:1E:A0:90:34:0A:C7:D0 Authority key identifier: 9F:35:66:09:5C:0B:0C:02:31:D0:BB:96:92:5E:03:89:D1:C2:6C:57 Certificate issuer: /CN=A911403B/serialNumber=9F3566095C0B0C0231D0BB96925E0389D1C26C57 Certificate serial: 043F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nzVmCVwLDAIx0LuWkl4DidHCbFc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911403B/4AA74B7462DA11ECB371C767C4F9AE02/nzVmCVwLDAIx0LuWkl4DidHCbFc.mft Manifest number: 043A Signing time: Sat 28 Jun 2025 23:53:07 +0000 Manifest this update: Sat 28 Jun 2025 23:53:07 +0000 Manifest next update: Sat 05 Jul 2025 23:53:07 +0000 Files and hashes: 1: nzVmCVwLDAIx0LuWkl4DidHCbFc.crl (hash: Sdcu56tVzlwYijELYMCzPIJv153BPKvR7EEQmK3Krs8=) 2: 2D8428C662F511ECA1FC5A6CC4F9AE02.roa (hash: eK751E7R4LxxFW4h/LYCAzYwLSV3p/y1kJ/HUZuDz6s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911403B/4AA74B7462DA11ECB371C767C4F9AE02/nzVmCVwLDAIx0LuWkl4DidHCbFc.crl rsync://rpki.apnic.net/member_repository/A911403B/4AA74B7462DA11ECB371C767C4F9AE02/nzVmCVwLDAIx0LuWkl4DidHCbFc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nzVmCVwLDAIx0LuWkl4DidHCbFc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Jul 2025 23:53:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1087 (0x43f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911403B, serialNumber=9F3566095C0B0C0231D0BB96925E0389D1C26C57 Validity Not Before: Jun 28 23:53:07 2025 GMT Not After : Jul 5 23:53:07 2025 GMT Subject: CN=68608063-adea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:cd:6f:e8:35:29:e4:40:bb:92:cc:b0:37:38: d1:ee:b1:31:69:40:bd:db:73:d9:93:ff:73:a9:ec: 94:55:29:2e:6c:14:ce:d7:b9:9c:75:d3:c8:24:22: f4:ee:85:2d:60:e2:b6:0a:82:34:7b:a4:3b:6e:ea: 39:c7:cb:34:5d:03:a3:63:74:21:76:83:04:45:da: ea:3d:cf:9f:3a:6d:11:e3:e0:44:e2:9a:48:ee:64: e6:d7:c6:65:8d:3c:fe:66:9c:52:fc:5b:db:e8:da: ff:8b:70:7b:26:17:d8:c2:1b:8e:12:fc:ae:b5:80: d7:fe:da:29:0a:63:db:30:f0:dc:ca:d6:01:14:b5: 0a:5c:01:7b:e8:7c:ea:05:4d:5c:52:71:10:41:97: f1:ef:bc:f1:0e:c5:81:1b:5b:cf:2b:82:14:55:1e: 95:35:ab:5f:51:3a:4e:7f:77:4c:7c:3f:0d:2b:5c: 47:a3:5a:6c:b6:eb:f0:01:87:02:d8:8f:6e:5e:40: af:25:e1:a8:19:b7:be:61:68:eb:50:26:ce:49:95: 49:18:4b:3c:49:56:17:be:17:dc:78:d0:1f:ae:fe: 57:a6:2b:35:6a:a9:96:97:99:79:42:2e:0f:a4:88: 43:41:76:b4:e5:97:8e:0c:8a:84:15:30:87:9d:21: 14:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:CB:BA:48:E9:31:B8:C7:BD:8D:43:42:20:1E:A0:90:34:0A:C7:D0 X509v3 Authority Key Identifier: keyid:9F:35:66:09:5C:0B:0C:02:31:D0:BB:96:92:5E:03:89:D1:C2:6C:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911403B/4AA74B7462DA11ECB371C767C4F9AE02/nzVmCVwLDAIx0LuWkl4DidHCbFc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nzVmCVwLDAIx0LuWkl4DidHCbFc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911403B/4AA74B7462DA11ECB371C767C4F9AE02/nzVmCVwLDAIx0LuWkl4DidHCbFc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2e:a4:8d:5e:23:bf:2e:04:19:1a:93:be:04:24:fd:7e:f3:43: fc:1d:a9:f5:36:40:a5:67:ca:78:f6:31:36:17:c7:b3:53:73: 8a:b2:74:10:68:6d:fc:33:fb:58:c8:c0:a9:03:fa:18:9d:99: e1:18:ae:34:a1:56:3d:96:dd:0d:6e:f0:4d:ad:e6:4a:b1:32: 10:e6:4e:c4:db:a8:c3:eb:17:03:3d:13:2b:4d:b3:ef:2f:f2: 02:b1:0c:a3:1e:dc:70:3a:99:d2:c3:00:cb:7f:14:d0:1e:45: 13:59:7a:08:e7:5d:19:50:5d:4f:ca:fd:c0:dd:42:6c:09:66: 7f:ae:dc:bc:0c:fd:0d:77:62:c4:ae:ce:7b:6b:2b:a2:af:61: 80:3b:7f:c4:4a:e9:10:99:c6:78:c5:1e:22:8c:5b:b7:61:ab: 56:fa:12:6a:8c:08:82:e4:e8:88:0a:0e:a7:99:88:e9:2e:b4: e2:78:ac:b8:8a:c2:dd:f1:04:e8:0c:5e:21:81:7e:0e:43:b2: fd:d3:54:71:06:2d:8b:7a:a6:96:7f:8a:92:79:1c:eb:32:11: 39:0d:aa:56:17:95:33:56:e5:4e:c8:a5:46:6b:ae:68:b2:73: d9:6d:d1:a8:d2:71:2e:93:35:a7:a2:bc:5e:0f:d1:55:97:5f: 59:06:9f:03 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBD8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTQwM0IxMTAvBgNVBAUTKDlGMzU2NjA5NUMwQjBDMDIzMUQwQkI5NjkyNUUwMzg5 RDFDMjZDNTcwHhcNMjUwNjI4MjM1MzA3WhcNMjUwNzA1MjM1MzA3WjAYMRYwFAYD VQQDEw02ODYwODA2My1hZGVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwc1v6DUp5EC7ksywNzjR7rExaUC923PZk/9zqeyUVSkubBTO17mcddPIJCL0 7oUtYOK2CoI0e6Q7buo5x8s0XQOjY3QhdoMERdrqPc+fOm0R4+BE4ppI7mTm18Zl jTz+ZpxS/Fvb6Nr/i3B7JhfYwhuOEvyutYDX/topCmPbMPDcytYBFLUKXAF76Hzq BU1cUnEQQZfx77zxDsWBG1vPK4IUVR6VNatfUTpOf3dMfD8NK1xHo1pstuvwAYcC 2I9uXkCvJeGoGbe+YWjrUCbOSZVJGEs8SVYXvhfceNAfrv5Xpis1aqmWl5l5Qi4P pIhDQXa05ZeODIqEFTCHnSEUVwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNrLukjp MbjHvY1DQiAeoJA0CsfQMB8GA1UdIwQYMBaAFJ81ZglcCwwCMdC7lpJeA4nRwmxX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNDAzQi80QUE3NEI3NDYy REExMUVDQjM3MUM3NjdDNEY5QUUwMi9uelZtQ1Z3TERBSXgwTHVXa2w0RGlkSENi RmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL256Vm1DVndMREFJeDBMdVdrbDREaWRIQ2JGYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NDAzQi80QUE3NEI3NDYyREExMUVDQjM3MUM3NjdDNEY5QUUwMi9uelZtQ1Z3TERB SXgwTHVXa2w0RGlkSENiRmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAupI1eI78uBBkak74EJP1+80P8Han1NkClZ8p49jE2F8ezU3OKsnQQ aG38M/tYyMCpA/oYnZnhGK40oVY9lt0NbvBNreZKsTIQ5k7E26jD6xcDPRMrTbPv L/ICsQyjHtxwOpnSwwDLfxTQHkUTWXoI510ZUF1Pyv3A3UJsCWZ/rty8DP0Nd2LE rs57ayuir2GAO3/ESukQmcZ4xR4ijFu3YatW+hJqjAiC5OiICg6nmYjpLrTieKy4 isLd8QToDF4hgX4OQ7L901RxBi2LeqaWf4qSeRzrMhE5DapWF5UzVuVOyKVGa65o snPZbdGo0nEukzWnorxeD9FVl19ZBp8D -----END CERTIFICATE-----Generated at Sun Jun 29 17:51:05 2025 by rpki-client