$ rpki-client -vvf rpki.apnic.net/member_repository/A911408F/AA604D4A08A011EA9C4AED5DC4F9AE02/NAiQ-iAnxUadoMX9g3SPZqiJLrc.mft File: NAiQ-iAnxUadoMX9g3SPZqiJLrc.mft (raw, json) Hash identifier: v7qiX66GnUn/4++cMzxD8nnPlnTBZDJ7iu0prq70sWE= Subject key identifier: 81:65:FC:85:D6:D4:FF:4C:97:7B:82:E0:58:BA:47:F6:AF:DA:18:E3 Authority key identifier: 34:08:90:FA:20:27:C5:46:9D:A0:C5:FD:83:74:8F:66:A8:89:2E:B7 Certificate issuer: /CN=A911408F/serialNumber=340890FA2027C5469DA0C5FD83748F66A8892EB7 Certificate serial: 0C60 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NAiQ-iAnxUadoMX9g3SPZqiJLrc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911408F/AA604D4A08A011EA9C4AED5DC4F9AE02/NAiQ-iAnxUadoMX9g3SPZqiJLrc.mft Manifest number: 0C43 Signing time: Sat 10 May 2025 18:21:15 +0000 Manifest this update: Sat 10 May 2025 18:21:15 +0000 Manifest next update: Sat 17 May 2025 18:21:15 +0000 Files and hashes: 1: NAiQ-iAnxUadoMX9g3SPZqiJLrc.crl (hash: KuQ8Hqg1XTcgZ/FDEj6xtL9a6vsOi0/DTbUZGingAuU=) 2: 8186EA3008A211EA83441161C4F9AE02.roa (hash: EaF6+NcOizXvwczdPzpRgDNyRvgLSS+QrNc16c+K0fk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911408F/AA604D4A08A011EA9C4AED5DC4F9AE02/NAiQ-iAnxUadoMX9g3SPZqiJLrc.crl rsync://rpki.apnic.net/member_repository/A911408F/AA604D4A08A011EA9C4AED5DC4F9AE02/NAiQ-iAnxUadoMX9g3SPZqiJLrc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NAiQ-iAnxUadoMX9g3SPZqiJLrc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 18:21:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3168 (0xc60) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911408F, serialNumber=340890FA2027C5469DA0C5FD83748F66A8892EB7 Validity Not Before: May 10 18:21:15 2025 GMT Not After : May 17 18:21:15 2025 GMT Subject: CN=681f991b-209a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:fd:ec:df:97:43:3b:9e:84:fd:93:12:04:af: b8:8b:f7:05:c6:cf:a7:c5:cc:e8:be:1e:44:c9:52: 4d:a4:49:19:32:fc:3b:01:34:ec:b3:f3:55:ba:df: 87:21:26:1e:0a:fc:e5:42:46:b2:cd:be:c7:a6:70: a3:ce:2f:2e:d8:0f:77:92:81:30:a2:66:c4:8f:26: 87:ff:31:35:32:1e:c9:a4:49:dc:9c:61:7a:75:ed: d5:bb:a4:49:eb:e5:fb:07:80:28:72:99:af:81:d2: 20:f5:f2:90:45:14:29:95:0b:31:2f:be:28:81:07: 5d:5b:5f:21:de:6f:4a:23:b3:6c:dd:74:83:78:57: fc:6f:eb:6e:7c:83:6d:94:b5:d5:cd:a7:9a:50:76: 8e:f2:c2:94:d9:2a:37:0b:91:4b:6d:a3:08:a8:db: 3e:35:a1:9e:58:91:16:f4:58:6a:24:1f:6b:32:6b: 5b:0a:1b:44:9a:27:99:26:77:09:f1:97:c1:a8:8f: d2:e4:e7:03:06:be:68:f6:d2:21:85:18:c1:37:4b: b9:71:45:c6:b1:46:f0:da:7b:d1:df:e7:9c:df:1e: 0b:76:e0:d6:e0:0b:98:ed:e2:ec:48:2f:92:0b:15: f8:8e:35:7a:4b:88:4d:b3:a5:dc:fe:63:62:d3:cf: ea:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:65:FC:85:D6:D4:FF:4C:97:7B:82:E0:58:BA:47:F6:AF:DA:18:E3 X509v3 Authority Key Identifier: keyid:34:08:90:FA:20:27:C5:46:9D:A0:C5:FD:83:74:8F:66:A8:89:2E:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911408F/AA604D4A08A011EA9C4AED5DC4F9AE02/NAiQ-iAnxUadoMX9g3SPZqiJLrc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NAiQ-iAnxUadoMX9g3SPZqiJLrc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911408F/AA604D4A08A011EA9C4AED5DC4F9AE02/NAiQ-iAnxUadoMX9g3SPZqiJLrc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 46:aa:16:d9:71:cd:94:d8:17:c0:8c:be:53:6f:41:3a:94:cc: f8:00:23:92:2c:67:2a:21:fb:37:0a:38:63:27:36:37:0d:f0: f8:c6:62:ff:7c:6d:1a:03:7e:df:88:76:d6:87:2f:4e:1f:b8: 87:ea:15:06:d7:16:56:b0:46:4e:14:83:df:60:99:b3:71:7e: f6:91:6b:92:8a:01:e0:11:77:f1:f0:b1:23:43:e4:71:76:2a: 57:38:92:83:5a:aa:ee:9f:af:12:f3:33:51:1c:05:8b:72:b8: 92:e5:fa:ae:e9:22:4e:48:5b:e1:f5:7e:49:6d:5b:50:c5:54: b5:f2:dd:a3:dc:14:32:b5:aa:ac:f3:f3:d0:7d:98:5e:62:ae: 1f:b7:47:cc:39:89:45:0b:d5:75:96:3a:8f:6c:e8:89:59:f3: 93:a4:e9:c0:9a:dd:d8:37:d1:1e:4a:63:43:b9:cd:d3:3f:58: 7a:f8:ca:ce:88:a6:e8:a0:00:3b:05:e4:54:1b:4c:ac:18:42: d0:4d:ff:1a:4e:d1:ab:4c:4b:4f:d9:2d:16:11:53:d7:3b:4c: 5d:7e:ad:84:ff:cd:f1:7a:b4:b7:7c:8e:49:26:51:53:fe:b4: 9f:fa:81:22:1d:89:f5:0a:31:06:7a:71:e6:32:59:55:84:a3: 08:01:da:c1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDGAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTQwOEYxMTAvBgNVBAUTKDM0MDg5MEZBMjAyN0M1NDY5REEwQzVGRDgzNzQ4RjY2 QTg4OTJFQjcwHhcNMjUwNTEwMTgyMTE1WhcNMjUwNTE3MTgyMTE1WjAYMRYwFAYD VQQDEw02ODFmOTkxYi0yMDlhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnv3s35dDO56E/ZMSBK+4i/cFxs+nxczovh5EyVJNpEkZMvw7ATTss/NVut+H ISYeCvzlQkayzb7HpnCjzi8u2A93koEwombEjyaH/zE1Mh7JpEncnGF6de3Vu6RJ 6+X7B4AocpmvgdIg9fKQRRQplQsxL74ogQddW18h3m9KI7Ns3XSDeFf8b+tufINt lLXVzaeaUHaO8sKU2So3C5FLbaMIqNs+NaGeWJEW9FhqJB9rMmtbChtEmieZJncJ 8ZfBqI/S5OcDBr5o9tIhhRjBN0u5cUXGsUbw2nvR3+ec3x4LduDW4AuY7eLsSC+S CxX4jjV6S4hNs6Xc/mNi08/q0wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIFl/IXW 1P9Ml3uC4Fi6R/av2hjjMB8GA1UdIwQYMBaAFDQIkPogJ8VGnaDF/YN0j2aoiS63 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNDA4Ri9BQTYwNEQ0QTA4 QTAxMUVBOUM0QUVENURDNEY5QUUwMi9OQWlRLWlBbnhVYWRvTVg5ZzNTUFpxaUpM cmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05BaVEtaUFueFVhZG9NWDlnM1NQWnFpSkxyYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NDA4Ri9BQTYwNEQ0QTA4QTAxMUVBOUM0QUVENURDNEY5QUUwMi9OQWlRLWlBbnhV YWRvTVg5ZzNTUFpxaUpMcmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBGqhbZcc2U2BfAjL5Tb0E6lMz4ACOSLGcqIfs3CjhjJzY3DfD4xmL/ fG0aA37fiHbWhy9OH7iH6hUG1xZWsEZOFIPfYJmzcX72kWuSigHgEXfx8LEjQ+Rx dipXOJKDWqrun68S8zNRHAWLcriS5fqu6SJOSFvh9X5JbVtQxVS18t2j3BQytaqs 8/PQfZheYq4ft0fMOYlFC9V1ljqPbOiJWfOTpOnAmt3YN9EeSmNDuc3TP1h6+MrO iKbooAA7BeRUG0ysGELQTf8aTtGrTEtP2S0WEVPXO0xdfq2E/83xerS3fI5JJlFT /rSf+oEiHYn1CjEGenHmMllVhKMIAdrB -----END CERTIFICATE-----Generated at Mon May 12 19:39:17 2025 by rpki-client