$ rpki-client -vvf rpki.apnic.net/member_repository/A911E351/5BCF88A6784E11EC8A44450EC4F9AE02/NdqtT3Wuk43GUzSEzejIF93Csig.mft File: NdqtT3Wuk43GUzSEzejIF93Csig.mft (raw, json) Hash identifier: qFSLVMuPox+Tsn66WgWncuM75Qrby1xPH4eR53tGYLc= Subject key identifier: 75:07:43:3B:1A:81:C2:1D:8B:D2:A7:74:F1:01:49:80:F2:03:C6:BD Authority key identifier: 35:DA:AD:4F:75:AE:93:8D:C6:53:34:84:CD:E8:C8:17:DD:C2:B2:28 Certificate issuer: /CN=A911E351/serialNumber=35DAAD4F75AE938DC6533484CDE8C817DDC2B228 Certificate serial: 03F1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NdqtT3Wuk43GUzSEzejIF93Csig.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911E351/5BCF88A6784E11EC8A44450EC4F9AE02/NdqtT3Wuk43GUzSEzejIF93Csig.mft Manifest number: 03ED Signing time: Tue 13 May 2025 00:18:22 +0000 Manifest this update: Tue 13 May 2025 00:18:21 +0000 Manifest next update: Tue 20 May 2025 00:18:21 +0000 Files and hashes: 1: NdqtT3Wuk43GUzSEzejIF93Csig.crl (hash: MvKAoAK8GOMdapxVHQ+0T1PpaOpem0gD3QXt+i8uD3k=) 2: E9ED080A785011ECBD2B6A10C4F9AE02.roa (hash: iYM80ZUZv11SjTkmdUWv3G7CQp9g2JbkQfuMruAgJ5Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911E351/5BCF88A6784E11EC8A44450EC4F9AE02/NdqtT3Wuk43GUzSEzejIF93Csig.crl rsync://rpki.apnic.net/member_repository/A911E351/5BCF88A6784E11EC8A44450EC4F9AE02/NdqtT3Wuk43GUzSEzejIF93Csig.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NdqtT3Wuk43GUzSEzejIF93Csig.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 00:18:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1009 (0x3f1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911E351, serialNumber=35DAAD4F75AE938DC6533484CDE8C817DDC2B228 Validity Not Before: May 13 00:18:21 2025 GMT Not After : May 20 00:18:21 2025 GMT Subject: CN=68228fce-9208 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:6b:9b:27:f9:81:e3:b1:20:2e:fa:f0:f5:42: 0c:dd:3c:5c:16:d2:05:fa:15:08:da:9b:fc:1e:b3: 50:5e:0f:22:56:b9:ab:4a:53:3d:06:4c:49:7c:37: c9:59:57:87:aa:f1:61:f7:54:f8:b6:d2:1d:af:ab: 62:43:c0:96:25:31:5d:31:3f:54:04:1f:65:2c:93: d7:fa:1b:bf:39:6d:bc:2f:27:13:44:10:1d:d1:6e: 48:13:e8:e4:47:7d:93:f2:7d:c8:59:ba:b7:54:83: 7a:8e:da:47:6d:df:89:d7:36:a6:c3:14:d4:9c:77: 34:71:30:10:10:bd:31:21:a0:a6:c3:14:ed:41:8a: 19:7f:b2:9a:19:1f:e1:4d:6a:80:8e:7b:6b:ca:b3: b4:cb:88:76:6b:5c:3d:4e:67:55:5f:eb:66:39:9a: 1c:29:f3:7e:03:fb:e3:78:88:a1:92:fe:8d:e5:df: 84:b8:04:26:20:ba:11:aa:70:b5:09:0f:67:88:39: f8:41:56:8c:57:62:0d:b1:a3:f8:6a:03:9a:80:12: a0:25:ff:11:62:fd:ac:64:bf:4d:cf:44:53:98:e7: 56:0c:a7:c7:94:91:3a:ac:59:4e:96:56:b5:62:9f: e7:16:f4:4f:5b:91:17:5c:74:67:b6:7d:b9:7b:34: fa:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:07:43:3B:1A:81:C2:1D:8B:D2:A7:74:F1:01:49:80:F2:03:C6:BD X509v3 Authority Key Identifier: keyid:35:DA:AD:4F:75:AE:93:8D:C6:53:34:84:CD:E8:C8:17:DD:C2:B2:28 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911E351/5BCF88A6784E11EC8A44450EC4F9AE02/NdqtT3Wuk43GUzSEzejIF93Csig.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NdqtT3Wuk43GUzSEzejIF93Csig.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911E351/5BCF88A6784E11EC8A44450EC4F9AE02/NdqtT3Wuk43GUzSEzejIF93Csig.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 81:86:b9:77:01:49:2d:5e:30:25:c3:60:68:ab:c5:46:3b:aa: 30:9a:c9:87:03:82:bf:06:39:88:09:c8:82:83:b6:b7:b3:d7: bb:dd:a9:6a:ba:1a:21:57:ab:30:a7:da:c6:40:24:8b:7b:75: 63:6e:db:a6:8f:8c:03:b6:a4:d1:e6:de:25:09:4b:5b:c3:f7: 9c:92:33:9f:bb:83:b4:7d:04:c6:48:ab:a8:ad:55:db:05:62: 6a:25:d8:94:94:18:b2:ca:e1:b3:9f:c5:08:19:4a:ed:36:5c: 4d:97:d5:af:7c:aa:86:7d:76:93:cb:3e:9c:55:3d:38:f2:38: a1:82:3b:d2:06:df:ae:4f:8a:0b:2f:2b:c3:c7:b8:04:ca:f2: 04:e9:14:60:4b:aa:d1:6f:3d:fb:60:2d:af:aa:c0:f3:6e:0a: 05:98:b5:0d:01:cf:1a:23:d4:cd:07:8d:64:5a:05:5b:24:57: 86:c7:63:c3:7e:3c:77:1e:c4:81:30:93:4d:46:f8:40:da:c0: eb:7c:41:b2:88:f1:ed:30:6a:af:0d:f2:c7:6a:b0:db:9a:8b: ca:34:b3:1e:24:bb:ee:46:47:df:b9:af:26:b8:ea:95:bb:2e: 88:99:ef:fe:eb:ca:0e:48:31:1a:a3:0b:0d:5e:1d:9e:de:15: 51:4a:34:75 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA/EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUUzNTExMTAvBgNVBAUTKDM1REFBRDRGNzVBRTkzOERDNjUzMzQ4NENERThDODE3 RERDMkIyMjgwHhcNMjUwNTEzMDAxODIxWhcNMjUwNTIwMDAxODIxWjAYMRYwFAYD VQQDEw02ODIyOGZjZS05MjA4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAymubJ/mB47EgLvrw9UIM3TxcFtIF+hUI2pv8HrNQXg8iVrmrSlM9BkxJfDfJ WVeHqvFh91T4ttIdr6tiQ8CWJTFdMT9UBB9lLJPX+hu/OW28LycTRBAd0W5IE+jk R32T8n3IWbq3VIN6jtpHbd+J1zamwxTUnHc0cTAQEL0xIaCmwxTtQYoZf7KaGR/h TWqAjntryrO0y4h2a1w9TmdVX+tmOZocKfN+A/vjeIihkv6N5d+EuAQmILoRqnC1 CQ9niDn4QVaMV2INsaP4agOagBKgJf8RYv2sZL9Nz0RTmOdWDKfHlJE6rFlOlla1 Yp/nFvRPW5EXXHRntn25ezT6gwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHUHQzsa gcIdi9KndPEBSYDyA8a9MB8GA1UdIwQYMBaAFDXarU91rpONxlM0hM3oyBfdwrIo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRTM1MS81QkNGODhBNjc4 NEUxMUVDOEE0NDQ1MEVDNEY5QUUwMi9OZHF0VDNXdWs0M0dVelNFemVqSUY5M0Nz aWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05kcXRUM1d1azQzR1V6U0V6ZWpJRjkzQ3NpZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RTM1MS81QkNGODhBNjc4NEUxMUVDOEE0NDQ1MEVDNEY5QUUwMi9OZHF0VDNXdWs0 M0dVelNFemVqSUY5M0NzaWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCBhrl3AUktXjAlw2Boq8VGO6owmsmHA4K/BjmICciCg7a3s9e73alq uhohV6swp9rGQCSLe3Vjbtumj4wDtqTR5t4lCUtbw/eckjOfu4O0fQTGSKuorVXb BWJqJdiUlBiyyuGzn8UIGUrtNlxNl9WvfKqGfXaTyz6cVT048jihgjvSBt+uT4oL LyvDx7gEyvIE6RRgS6rRbz37YC2vqsDzbgoFmLUNAc8aI9TNB41kWgVbJFeGx2PD fjx3HsSBMJNNRvhA2sDrfEGyiPHtMGqvDfLHarDbmovKNLMeJLvuRkffua8muOqV uy6Ime/+68oOSDEaowsNXh2e3hVRSjR1 -----END CERTIFICATE-----Generated at Tue May 13 19:40:03 2025 by rpki-client