$ rpki-client -vvf rpki.apnic.net/member_repository/A911B5B4/709F7A26B82911E993738A09C4F9AE02/nflMM9P2R649kTYeHxcsIGhvWYk.mft File: nflMM9P2R649kTYeHxcsIGhvWYk.mft (raw, json) Hash identifier: CHGvVsbZ11tmal3YMH1JSN2KPLlopuhMuT3Kl87ndgo= Subject key identifier: 2F:DD:47:EC:C1:2E:6E:F9:DE:AD:75:86:0A:F6:5D:34:DF:23:E1:48 Authority key identifier: 9D:F9:4C:33:D3:F6:47:AE:3D:91:36:1E:1F:17:2C:20:68:6F:59:89 Certificate issuer: /CN=A911B5B4/serialNumber=9DF94C33D3F647AE3D91361E1F172C20686F5989 Certificate serial: 0E04 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nflMM9P2R649kTYeHxcsIGhvWYk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911B5B4/709F7A26B82911E993738A09C4F9AE02/nflMM9P2R649kTYeHxcsIGhvWYk.mft Manifest number: 0DE1 Signing time: Wed 02 Jul 2025 18:06:08 +0000 Manifest this update: Wed 02 Jul 2025 18:06:07 +0000 Manifest next update: Wed 09 Jul 2025 18:06:07 +0000 Files and hashes: 1: nflMM9P2R649kTYeHxcsIGhvWYk.crl (hash: uzG91M4II5sKh5fSl9U38uBuyziXg55qFKCPNK80L1k=) 2: 46B27CC6B82A11E9843DEE0AC4F9AE02.roa (hash: 8a6WJtEg8FJ5eHnpvgMwqod0UL5e0zTS0SwjCaK0jd4=) 3: 9E78AEC4C78E11EBB4983F5BC4F9AE02.roa (hash: kN9kZZVIv74yYHGXDsanuB3xPPBPu4OVgy2TpSGU+PU=) 4: 47E67066B82A11E9843DEE0AC4F9AE02.roa (hash: YggXfy20kvjf1iFOsIwuuVFkMi74/bpO/23VT4jrnTE=) 5: 9F8B79C2C78E11EBB4983F5BC4F9AE02.roa (hash: n/ZkcBxXbOU1wyzDS48DMJkcfdrM8k6k+BibFqk5ai8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911B5B4/709F7A26B82911E993738A09C4F9AE02/nflMM9P2R649kTYeHxcsIGhvWYk.crl rsync://rpki.apnic.net/member_repository/A911B5B4/709F7A26B82911E993738A09C4F9AE02/nflMM9P2R649kTYeHxcsIGhvWYk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nflMM9P2R649kTYeHxcsIGhvWYk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 18:06:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3588 (0xe04) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911B5B4, serialNumber=9DF94C33D3F647AE3D91361E1F172C20686F5989 Validity Not Before: Jul 2 18:06:07 2025 GMT Not After : Jul 9 18:06:07 2025 GMT Subject: CN=6865750f-b34e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:c0:d1:1c:e1:4a:9a:37:ba:0c:24:d4:5b:45: 73:db:f4:84:ed:b8:3e:f0:92:bd:81:24:2b:e0:23: a4:e0:98:b7:f0:32:75:1d:2d:50:60:38:98:98:21: 42:ce:a3:e0:ef:d0:a6:98:b6:a7:8f:39:c5:30:ad: 18:35:10:3c:6b:87:65:4a:9c:96:f6:ed:45:8a:0a: 15:d0:59:84:e1:d8:ac:8e:9b:a7:26:d6:a7:b2:03: a4:35:35:7f:32:38:5d:b0:78:c8:d8:bc:6e:cc:2f: f4:25:6b:ff:6d:61:8e:52:a1:17:41:2f:81:1f:66: 94:41:2d:d2:ad:c4:f6:55:cf:e7:71:15:c2:6e:48: 4f:5d:81:55:81:d4:2e:9e:ec:eb:e1:76:a2:1d:99: 32:f7:77:b4:34:73:5c:f5:33:10:ee:89:08:43:f4: c4:a9:ae:20:8c:b4:3e:a2:97:25:86:b9:32:1a:66: 5f:ee:89:a8:da:5b:a4:63:a8:42:82:00:dc:3d:14: 0f:f9:64:60:c8:90:24:5d:45:8e:fd:5f:d0:f9:89: 7f:b6:fd:cb:99:bb:03:22:88:ba:9a:70:8e:5f:c7: b7:29:03:7b:01:e5:ea:b1:14:e2:ae:91:b4:e7:9d: 98:5d:9d:0f:0a:99:ea:9c:1a:e9:f6:44:63:93:ae: 0b:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:DD:47:EC:C1:2E:6E:F9:DE:AD:75:86:0A:F6:5D:34:DF:23:E1:48 X509v3 Authority Key Identifier: keyid:9D:F9:4C:33:D3:F6:47:AE:3D:91:36:1E:1F:17:2C:20:68:6F:59:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911B5B4/709F7A26B82911E993738A09C4F9AE02/nflMM9P2R649kTYeHxcsIGhvWYk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nflMM9P2R649kTYeHxcsIGhvWYk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911B5B4/709F7A26B82911E993738A09C4F9AE02/nflMM9P2R649kTYeHxcsIGhvWYk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2a:a9:46:3f:e9:06:37:e9:b4:01:23:9e:2d:25:f0:ec:fd:f9: d8:c5:07:6b:3b:81:d5:17:37:a1:4e:e5:e2:2b:1a:22:b4:10: d8:fc:5c:b4:b6:49:42:6f:5c:72:ba:a7:b2:ac:00:91:43:31: 72:34:f7:c3:bf:b4:44:21:38:0e:40:08:e4:a4:1e:10:bf:0d: 3c:d1:6c:67:a0:24:aa:6a:a3:dd:be:9f:cc:48:38:53:ac:83: 47:d9:76:d5:fb:06:d4:04:32:f0:82:93:41:d6:0a:f8:27:3d: 68:ed:71:f1:02:f6:8a:c8:e8:b6:d0:f8:38:db:95:ce:42:3d: b0:35:b6:87:67:ee:3d:9e:ee:22:fd:d1:61:dd:bb:86:b1:10: 18:d6:6e:87:3a:92:65:c5:ea:e4:fe:70:cc:d5:47:c5:f1:b5: 64:f3:4f:9b:08:39:39:20:7e:31:c8:2a:74:eb:fc:e6:4c:a7: aa:ad:aa:b4:85:7c:36:1a:98:3c:c6:ba:b3:72:6e:52:dd:da: a6:28:3e:a6:66:30:bc:5b:53:99:c9:70:0c:24:f2:d6:58:1f: 17:11:7a:49:30:ac:f9:95:c3:dd:7b:29:db:b0:fc:d3:ea:b4: 1b:4c:45:d3:7d:43:f0:5c:ae:c6:6d:eb:e7:d1:a1:0a:8f:fd: 48:88:13:d8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDgQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUI1QjQxMTAvBgNVBAUTKDlERjk0QzMzRDNGNjQ3QUUzRDkxMzYxRTFGMTcyQzIw Njg2RjU5ODkwHhcNMjUwNzAyMTgwNjA3WhcNMjUwNzA5MTgwNjA3WjAYMRYwFAYD VQQDEw02ODY1NzUwZi1iMzRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA58DRHOFKmje6DCTUW0Vz2/SE7bg+8JK9gSQr4COk4Ji38DJ1HS1QYDiYmCFC zqPg79CmmLanjznFMK0YNRA8a4dlSpyW9u1FigoV0FmE4disjpunJtansgOkNTV/ MjhdsHjI2LxuzC/0JWv/bWGOUqEXQS+BH2aUQS3SrcT2Vc/ncRXCbkhPXYFVgdQu nuzr4XaiHZky93e0NHNc9TMQ7okIQ/TEqa4gjLQ+opclhrkyGmZf7omo2lukY6hC ggDcPRQP+WRgyJAkXUWO/V/Q+Yl/tv3LmbsDIoi6mnCOX8e3KQN7AeXqsRTirpG0 552YXZ0PCpnqnBrp9kRjk64L6QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC/dR+zB Lm753q11hgr2XTTfI+FIMB8GA1UdIwQYMBaAFJ35TDPT9keuPZE2Hh8XLCBob1mJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQjVCNC83MDlGN0EyNkI4 MjkxMUU5OTM3MzhBMDlDNEY5QUUwMi9uZmxNTTlQMlI2NDlrVFllSHhjc0lHaHZX WWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25mbE1NOVAyUjY0OWtUWWVIeGNzSUdodldZay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QjVCNC83MDlGN0EyNkI4MjkxMUU5OTM3MzhBMDlDNEY5QUUwMi9uZmxNTTlQMlI2 NDlrVFllSHhjc0lHaHZXWWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAqqUY/6QY36bQBI54tJfDs/fnYxQdrO4HVFzehTuXiKxoitBDY/Fy0 tklCb1xyuqeyrACRQzFyNPfDv7REITgOQAjkpB4Qvw080WxnoCSqaqPdvp/MSDhT rINH2XbV+wbUBDLwgpNB1gr4Jz1o7XHxAvaKyOi20Pg425XOQj2wNbaHZ+49nu4i /dFh3buGsRAY1m6HOpJlxerk/nDM1UfF8bVk80+bCDk5IH4xyCp06/zmTKeqraq0 hXw2Gpg8xrqzcm5S3dqmKD6mZjC8W1OZyXAMJPLWWB8XEXpJMKz5lcPdeynbsPzT 6rQbTEXTfUPwXK7Gbevn0aEKj/1IiBPY -----END CERTIFICATE-----Generated at Thu Jul 3 01:18:51 2025 by rpki-client