$ rpki-client -vvf rpki.apnic.net/member_repository/A911E351/5BCF88A6784E11EC8A44450EC4F9AE02/NdqtT3Wuk43GUzSEzejIF93Csig.mft File: NdqtT3Wuk43GUzSEzejIF93Csig.mft (raw, json) Hash identifier: GlPXfhJU6mxiZwwcAuGYtsR+Lx4MR3+G5W6KU/dyXnI= Subject key identifier: E8:D2:D5:72:12:5E:2D:77:17:4E:E0:BB:43:46:6B:B0:21:B4:1E:70 Authority key identifier: 35:DA:AD:4F:75:AE:93:8D:C6:53:34:84:CD:E8:C8:17:DD:C2:B2:28 Certificate issuer: /CN=A911E351/serialNumber=35DAAD4F75AE938DC6533484CDE8C817DDC2B228 Certificate serial: 040A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NdqtT3Wuk43GUzSEzejIF93Csig.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911E351/5BCF88A6784E11EC8A44450EC4F9AE02/NdqtT3Wuk43GUzSEzejIF93Csig.mft Manifest number: 0406 Signing time: Thu 03 Jul 2025 00:45:27 +0000 Manifest this update: Thu 03 Jul 2025 00:45:26 +0000 Manifest next update: Thu 10 Jul 2025 00:45:26 +0000 Files and hashes: 1: NdqtT3Wuk43GUzSEzejIF93Csig.crl (hash: HIFPk6bwxpOI2ejQou8GAUVZQcGx3WHL8V78NQ4Yx+g=) 2: E9ED080A785011ECBD2B6A10C4F9AE02.roa (hash: iYM80ZUZv11SjTkmdUWv3G7CQp9g2JbkQfuMruAgJ5Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911E351/5BCF88A6784E11EC8A44450EC4F9AE02/NdqtT3Wuk43GUzSEzejIF93Csig.crl rsync://rpki.apnic.net/member_repository/A911E351/5BCF88A6784E11EC8A44450EC4F9AE02/NdqtT3Wuk43GUzSEzejIF93Csig.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NdqtT3Wuk43GUzSEzejIF93Csig.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 00:45:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1034 (0x40a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911E351, serialNumber=35DAAD4F75AE938DC6533484CDE8C817DDC2B228 Validity Not Before: Jul 3 00:45:26 2025 GMT Not After : Jul 10 00:45:26 2025 GMT Subject: CN=6865d2a7-e175 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:91:2b:65:f7:c9:7c:6a:f9:ff:59:16:b1:47: f7:c6:10:f6:d9:21:df:54:26:d4:59:ea:e2:79:e4: e8:27:e1:99:9c:6c:f6:3f:b7:34:57:e1:e6:c2:e4: ad:d6:30:66:2f:c4:ec:ff:ae:42:b1:41:97:c1:3b: 23:20:63:79:14:f6:23:6b:ca:7d:1d:d5:94:5e:b9: 5f:a5:aa:ba:b7:28:6d:e0:e7:d3:39:f7:af:b0:77: b6:71:ca:c7:fd:9b:0a:50:72:b0:1e:4f:7a:4d:1e: 90:53:24:2d:91:a8:d9:b2:bb:6c:57:37:81:3c:48: 31:13:91:59:d8:62:74:52:16:22:f7:c0:db:3a:7a: 77:f8:8c:44:6c:c1:25:16:bf:b4:4c:2d:08:b4:84: 82:86:83:90:a8:30:96:55:e7:9c:bf:1b:d0:92:99: cf:2c:59:63:be:04:d9:f0:c2:6e:45:6a:a4:53:29: da:fe:89:cf:50:e9:cf:e9:da:1f:fa:0c:bb:fb:19: 67:33:fe:91:da:0c:3e:ce:90:b0:b6:23:17:a7:01: c2:4f:fd:e2:e2:5c:e2:f4:5e:17:b3:2b:36:33:ae: 40:bb:e5:58:d5:33:7f:3c:11:2f:9f:81:f4:14:ab: 5d:5a:80:2f:37:4c:cf:06:a1:67:89:d0:a0:92:1f: e9:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:D2:D5:72:12:5E:2D:77:17:4E:E0:BB:43:46:6B:B0:21:B4:1E:70 X509v3 Authority Key Identifier: keyid:35:DA:AD:4F:75:AE:93:8D:C6:53:34:84:CD:E8:C8:17:DD:C2:B2:28 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911E351/5BCF88A6784E11EC8A44450EC4F9AE02/NdqtT3Wuk43GUzSEzejIF93Csig.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NdqtT3Wuk43GUzSEzejIF93Csig.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911E351/5BCF88A6784E11EC8A44450EC4F9AE02/NdqtT3Wuk43GUzSEzejIF93Csig.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9d:14:fb:04:7d:c0:b0:4a:c9:fd:0a:b7:ca:6f:7d:e1:ef:a6: 42:a2:16:eb:1e:a6:a8:f4:05:3c:63:a8:ef:95:6e:a1:0f:d8: 0b:3f:bc:2c:88:e5:5c:8a:6f:c3:92:0e:bc:82:12:f4:b6:12: 73:ad:cb:60:af:3a:39:05:bb:78:c0:43:65:30:04:2a:98:d0: 18:cd:1d:77:55:f4:d0:74:f1:cc:fd:9d:11:5e:fa:e7:4e:aa: d5:45:3d:6f:cc:7a:1b:81:26:9c:1f:0e:07:8e:a0:62:4e:f9: 54:4b:5f:7f:d5:1a:c3:a1:45:58:a2:b2:96:5f:49:03:53:46: f6:4f:ce:47:38:b4:24:03:bc:a2:24:f4:c8:8d:03:2f:f9:0d: cf:73:0f:2e:fe:20:08:6e:35:b9:4a:f2:aa:85:4b:8a:41:4b: c1:13:27:a5:eb:cd:be:ac:a1:de:98:66:ea:52:c6:3e:b7:0c: e3:79:6e:7c:67:8c:f3:53:d1:40:2b:d1:65:2c:44:e9:4e:0b: b1:4f:21:db:55:43:12:16:96:5b:8d:64:c8:66:c6:5a:ff:3c: e2:c4:a4:45:c5:72:62:c6:86:2d:ed:b7:a1:8e:c3:68:ed:6f: 12:9d:85:f7:17:14:24:b5:c9:99:07:ea:b7:2f:02:b5:3b:6a: 77:4b:cf:ab -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBAowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUUzNTExMTAvBgNVBAUTKDM1REFBRDRGNzVBRTkzOERDNjUzMzQ4NENERThDODE3 RERDMkIyMjgwHhcNMjUwNzAzMDA0NTI2WhcNMjUwNzEwMDA0NTI2WjAYMRYwFAYD VQQDEw02ODY1ZDJhNy1lMTc1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA65ErZffJfGr5/1kWsUf3xhD22SHfVCbUWerieeToJ+GZnGz2P7c0V+HmwuSt 1jBmL8Ts/65CsUGXwTsjIGN5FPYja8p9HdWUXrlfpaq6tyht4OfTOfevsHe2ccrH /ZsKUHKwHk96TR6QUyQtkajZsrtsVzeBPEgxE5FZ2GJ0UhYi98DbOnp3+IxEbMEl Fr+0TC0ItISChoOQqDCWVeecvxvQkpnPLFljvgTZ8MJuRWqkUyna/onPUOnP6dof +gy7+xlnM/6R2gw+zpCwtiMXpwHCT/3i4lzi9F4Xsys2M65Au+VY1TN/PBEvn4H0 FKtdWoAvN0zPBqFnidCgkh/p3QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOjS1XIS Xi13F07gu0NGa7AhtB5wMB8GA1UdIwQYMBaAFDXarU91rpONxlM0hM3oyBfdwrIo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRTM1MS81QkNGODhBNjc4 NEUxMUVDOEE0NDQ1MEVDNEY5QUUwMi9OZHF0VDNXdWs0M0dVelNFemVqSUY5M0Nz aWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05kcXRUM1d1azQzR1V6U0V6ZWpJRjkzQ3NpZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RTM1MS81QkNGODhBNjc4NEUxMUVDOEE0NDQ1MEVDNEY5QUUwMi9OZHF0VDNXdWs0 M0dVelNFemVqSUY5M0NzaWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCdFPsEfcCwSsn9CrfKb33h76ZCohbrHqao9AU8Y6jvlW6hD9gLP7ws iOVcim/Dkg68ghL0thJzrctgrzo5Bbt4wENlMAQqmNAYzR13VfTQdPHM/Z0RXvrn TqrVRT1vzHobgSacHw4HjqBiTvlUS19/1RrDoUVYorKWX0kDU0b2T85HOLQkA7yi JPTIjQMv+Q3Pcw8u/iAIbjW5SvKqhUuKQUvBEyel682+rKHemGbqUsY+twzjeW58 Z4zzU9FAK9FlLETpTguxTyHbVUMSFpZbjWTIZsZa/zzixKRFxXJixoYt7behjsNo 7W8SnYX3FxQktcmZB+q3LwK1O2p3S8+r -----END CERTIFICATE-----Generated at Thu Jul 3 07:55:34 2025 by rpki-client