$ rpki-client -vvf rpki.apnic.net/member_repository/A911894F/963CF0CEEC5E11E48E7D0119C4F9AE02/NhKQaSiZCCzeI_UEU6QVXgqreXg.mft File: NhKQaSiZCCzeI_UEU6QVXgqreXg.mft (raw, json) Hash identifier: rZYKhIBKYqZyQ5Tyr45JeQ54PRPBkXb6ZIIjeFY2N94= Subject key identifier: 14:D9:73:F8:43:88:48:24:4B:13:4B:96:FA:87:BA:E0:92:E0:0F:82 Authority key identifier: 36:12:90:69:28:99:08:2C:DE:23:F5:04:53:A4:15:5E:0A:AB:79:78 Certificate issuer: /CN=A911894F/serialNumber=361290692899082CDE23F50453A4155E0AAB7978 Certificate serial: 266D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NhKQaSiZCCzeI_UEU6QVXgqreXg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911894F/963CF0CEEC5E11E48E7D0119C4F9AE02/NhKQaSiZCCzeI_UEU6QVXgqreXg.mft Manifest number: 265B Signing time: Wed 02 Jul 2025 15:48:17 +0000 Manifest this update: Wed 02 Jul 2025 15:48:16 +0000 Manifest next update: Wed 09 Jul 2025 15:48:16 +0000 Files and hashes: 1: NhKQaSiZCCzeI_UEU6QVXgqreXg.crl (hash: 4b5+KDQ0ruoB+TZNS+v2J8rcKpNDzS1NBhB/5m7/sac=) 2: 802FBE707FEB11EB8B5E2817C4F9AE02.roa (hash: 9/RiaD7uB0sOA1UktuQmdvYmR8W/ohMuly3N0jCGO/k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911894F/963CF0CEEC5E11E48E7D0119C4F9AE02/NhKQaSiZCCzeI_UEU6QVXgqreXg.crl rsync://rpki.apnic.net/member_repository/A911894F/963CF0CEEC5E11E48E7D0119C4F9AE02/NhKQaSiZCCzeI_UEU6QVXgqreXg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NhKQaSiZCCzeI_UEU6QVXgqreXg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 15:48:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9837 (0x266d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911894F, serialNumber=361290692899082CDE23F50453A4155E0AAB7978 Validity Not Before: Jul 2 15:48:16 2025 GMT Not After : Jul 9 15:48:16 2025 GMT Subject: CN=686554c1-0d1f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:5f:3c:5e:14:82:f6:91:d9:97:e0:8a:8e:fb: f6:05:04:10:73:57:b8:ef:58:6e:ba:cc:bf:53:de: a2:b7:c7:27:f5:82:ac:0f:e3:5d:5e:27:ae:0c:1e: 0d:db:ee:1b:b8:14:09:aa:06:cd:f0:57:2e:0a:a2: 91:a8:4f:5e:65:97:96:c3:1a:a2:b9:f1:f5:0e:64: df:0f:c5:17:dd:f3:ee:dd:dc:84:b3:a4:d1:76:b4: 9d:1e:d0:a7:42:ea:d6:be:22:03:c6:43:38:de:91: e8:5f:4f:07:48:36:ac:f4:cc:d5:35:a7:06:7d:38: 5c:f9:33:f0:70:19:20:8e:31:1a:3f:eb:e2:41:91: 18:64:d7:aa:d1:68:b3:b6:81:85:e3:2e:e5:17:a5: 52:6b:ea:27:78:3d:2d:71:e8:1b:f6:0e:ff:cc:df: 8f:12:a5:89:f3:88:3c:a2:b6:8e:93:51:45:5b:81: 6f:c9:01:b0:d1:c7:09:06:50:3c:20:1c:e3:92:82: f0:82:da:c7:21:20:f8:c1:c6:36:d0:43:a3:36:9d: a1:fc:88:34:77:77:b8:af:a7:e7:b8:2a:a5:d1:95: 41:10:13:73:e9:3d:e5:27:81:4b:a4:40:c0:6e:0e: 48:5a:42:24:63:9a:c5:8f:bb:34:34:45:84:9f:59: 35:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:D9:73:F8:43:88:48:24:4B:13:4B:96:FA:87:BA:E0:92:E0:0F:82 X509v3 Authority Key Identifier: keyid:36:12:90:69:28:99:08:2C:DE:23:F5:04:53:A4:15:5E:0A:AB:79:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911894F/963CF0CEEC5E11E48E7D0119C4F9AE02/NhKQaSiZCCzeI_UEU6QVXgqreXg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NhKQaSiZCCzeI_UEU6QVXgqreXg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911894F/963CF0CEEC5E11E48E7D0119C4F9AE02/NhKQaSiZCCzeI_UEU6QVXgqreXg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 25:37:7d:48:ce:9f:d5:1b:d7:9b:dc:d5:32:83:3a:8a:ce:8c: 6f:62:2c:d9:64:5a:92:3c:be:cf:33:33:48:15:60:cc:16:2f: e2:5c:9b:43:52:b0:d7:30:c9:38:2d:2c:17:01:31:7c:e7:aa: 87:e6:48:06:34:2a:fe:09:9a:7e:49:8f:bf:c4:df:bb:cd:96: 8c:ad:f7:3a:b6:a1:76:6a:de:6b:34:a9:fe:ec:3f:16:ad:21: 8f:80:dd:53:e3:27:2b:f0:f7:7b:62:29:d1:b2:46:7b:b4:c4: 4a:69:1c:3f:d2:f8:68:af:85:bf:82:13:18:2e:20:8f:77:1f: 44:2f:01:74:47:38:b8:5f:d0:bd:da:ff:26:b6:a5:f7:c8:39: 0d:f5:f4:63:c4:50:8d:4d:0c:18:c5:a7:a9:7a:1a:db:1c:ea: 89:7f:f1:f6:e0:b9:60:2b:ed:82:34:01:22:74:ad:b4:37:dd: 90:7d:10:c6:a6:44:06:59:7c:87:78:8e:1c:5d:82:89:84:36: 4c:5f:89:73:55:09:4d:e4:68:f8:83:f2:22:8a:b6:d3:bd:70: 26:27:5d:3e:6e:f3:af:fa:ab:d2:ba:20:ca:a5:68:60:a3:46: e1:00:6a:5e:e6:86:f4:d8:e9:2b:c9:15:67:eb:73:21:40:61: da:41:c2:11 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJm0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTg5NEYxMTAvBgNVBAUTKDM2MTI5MDY5Mjg5OTA4MkNERTIzRjUwNDUzQTQxNTVF MEFBQjc5NzgwHhcNMjUwNzAyMTU0ODE2WhcNMjUwNzA5MTU0ODE2WjAYMRYwFAYD VQQDEw02ODY1NTRjMS0wZDFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv188XhSC9pHZl+CKjvv2BQQQc1e471huusy/U96it8cn9YKsD+NdXieuDB4N 2+4buBQJqgbN8FcuCqKRqE9eZZeWwxqiufH1DmTfD8UX3fPu3dyEs6TRdrSdHtCn QurWviIDxkM43pHoX08HSDas9MzVNacGfThc+TPwcBkgjjEaP+viQZEYZNeq0Wiz toGF4y7lF6VSa+oneD0tcegb9g7/zN+PEqWJ84g8oraOk1FFW4FvyQGw0ccJBlA8 IBzjkoLwgtrHISD4wcY20EOjNp2h/Ig0d3e4r6fnuCql0ZVBEBNz6T3lJ4FLpEDA bg5IWkIkY5rFj7s0NEWEn1k1WwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBTZc/hD iEgkSxNLlvqHuuCS4A+CMB8GA1UdIwQYMBaAFDYSkGkomQgs3iP1BFOkFV4Kq3l4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExODk0Ri85NjNDRjBDRUVD NUUxMUU0OEU3RDAxMTlDNEY5QUUwMi9OaEtRYVNpWkNDemVJX1VFVTZRVlhncXJl WGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05oS1FhU2laQ0N6ZUlfVUVVNlFWWGdxcmVYZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx ODk0Ri85NjNDRjBDRUVDNUUxMUU0OEU3RDAxMTlDNEY5QUUwMi9OaEtRYVNpWkND emVJX1VFVTZRVlhncXJlWGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAlN31Izp/VG9eb3NUygzqKzoxvYizZZFqSPL7PMzNIFWDMFi/iXJtD UrDXMMk4LSwXATF856qH5kgGNCr+CZp+SY+/xN+7zZaMrfc6tqF2at5rNKn+7D8W rSGPgN1T4ycr8Pd7YinRskZ7tMRKaRw/0vhor4W/ghMYLiCPdx9ELwF0Rzi4X9C9 2v8mtqX3yDkN9fRjxFCNTQwYxaepehrbHOqJf/H24LlgK+2CNAEidK20N92QfRDG pkQGWXyHeI4cXYKJhDZMX4lzVQlN5Gj4g/IiirbTvXAmJ10+bvOv+qvSuiDKpWhg o0bhAGpe5ob02OkryRVn63MhQGHaQcIR -----END CERTIFICATE-----Generated at Thu Jul 3 03:52:47 2025 by rpki-client