$ rpki-client -vvf rpki.apnic.net/member_repository/A912442A/55EBB8584E3B11F09C125547C4F9AE02/NU4yud4OVpoZUal7kyAZ9oijUKw.mft File: NU4yud4OVpoZUal7kyAZ9oijUKw.mft (raw, json) Hash identifier: d9inVS9Gyxzq90LhCLykfOU24E23utr1z3LWIdY1rkg= Subject key identifier: 47:16:57:99:51:32:FB:A0:D9:AE:D3:76:7C:0F:E5:A6:6B:85:09:13 Authority key identifier: 35:4E:32:B9:DE:0E:56:9A:19:51:A9:7B:93:20:19:F6:88:A3:50:AC Certificate issuer: /CN=A912442A/serialNumber=354E32B9DE0E569A1951A97B932019F688A350AC Certificate serial: 09 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/NU4yud4OVpoZUal7kyAZ9oijUKw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912442A/55EBB8584E3B11F09C125547C4F9AE02/NU4yud4OVpoZUal7kyAZ9oijUKw.mft Manifest number: 08 Signing time: Thu 03 Jul 2025 01:42:14 +0000 Manifest this update: Thu 03 Jul 2025 01:42:14 +0000 Manifest next update: Thu 10 Jul 2025 01:42:13 +0000 Files and hashes: 1: NU4yud4OVpoZUal7kyAZ9oijUKw.crl (hash: IdJnffl08JsKZbweC5EXn5AMHKjlDGRck2C1GO39GNg=) 2: 19D89DB656F311F083F53B5DC4F9AE02.roa (hash: Krc4hrUxizB7HZBQVnd3e8NynO1iw8BpxC+SzV7uUy0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912442A/55EBB8584E3B11F09C125547C4F9AE02/NU4yud4OVpoZUal7kyAZ9oijUKw.crl rsync://rpki.apnic.net/member_repository/A912442A/55EBB8584E3B11F09C125547C4F9AE02/NU4yud4OVpoZUal7kyAZ9oijUKw.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/NU4yud4OVpoZUal7kyAZ9oijUKw.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 01:42:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9 (0x9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912442A, serialNumber=354E32B9DE0E569A1951A97B932019F688A350AC Validity Not Before: Jul 3 01:42:14 2025 GMT Not After : Jul 10 01:42:13 2025 GMT Subject: CN=6865dff6-a1ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:ac:55:48:3f:66:05:4c:a6:7d:6f:3e:ee:1c: a0:e2:44:c9:a0:4c:6e:be:4e:5e:40:c0:47:fc:35: 2b:8d:59:21:95:46:c0:0e:a5:d3:62:02:1d:6c:11: e6:5f:21:15:97:87:40:14:1c:17:70:4e:d7:55:85: 82:c4:b6:67:e3:bc:3a:ae:f3:88:b1:94:16:d9:26: 72:7b:5b:65:51:24:99:93:f3:41:0b:bc:c3:54:75: 06:94:eb:dc:61:a0:03:0c:82:e8:f4:ef:2a:08:60: 47:1c:66:cb:c2:5c:4c:d0:ed:f0:08:25:34:45:8f: bb:c9:b6:e1:51:08:ff:55:6a:48:db:3f:e2:0d:ee: 0e:1a:41:ae:22:95:0d:17:f2:83:c8:6b:a2:f0:b6: cb:a0:9a:a9:bf:52:e4:76:07:1e:e4:d2:65:96:a6: 70:66:fe:33:6d:4e:43:24:0e:95:0b:a3:81:2a:e6: b9:0f:b7:6d:66:71:74:8d:1e:8a:ba:97:29:93:cf: a4:5e:6c:7c:61:eb:5b:a7:17:42:31:c9:44:2a:d4: e5:d4:57:d6:9b:f2:0f:e1:87:70:10:67:ba:ad:bd: be:01:0a:b5:c6:b0:74:81:3a:35:62:e3:9a:e0:f1: 5f:f2:25:b4:d4:2e:bd:1c:25:39:06:78:5c:15:70: 1c:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:16:57:99:51:32:FB:A0:D9:AE:D3:76:7C:0F:E5:A6:6B:85:09:13 X509v3 Authority Key Identifier: keyid:35:4E:32:B9:DE:0E:56:9A:19:51:A9:7B:93:20:19:F6:88:A3:50:AC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912442A/55EBB8584E3B11F09C125547C4F9AE02/NU4yud4OVpoZUal7kyAZ9oijUKw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/NU4yud4OVpoZUal7kyAZ9oijUKw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912442A/55EBB8584E3B11F09C125547C4F9AE02/NU4yud4OVpoZUal7kyAZ9oijUKw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 30:07:69:28:41:64:7b:08:6d:77:a0:59:77:55:40:ce:b2:1d: 2c:e7:93:51:d0:7b:55:65:ba:47:de:35:08:77:64:56:c3:e0: bc:74:6d:d2:42:66:10:08:83:df:88:d4:99:66:57:01:6e:fc: 83:78:8e:37:08:64:83:c3:ff:d4:0e:01:e2:dc:1a:db:2d:ce: f6:76:b9:6b:20:df:99:c6:30:53:01:48:5d:58:74:19:c8:59: 0a:e5:81:fa:a5:d4:8c:66:68:83:c1:43:d9:e4:a0:65:f7:5b: cc:91:c5:25:8e:f7:c7:1e:ac:67:4f:3b:0e:76:a4:6d:85:e8: 31:d6:f4:3b:24:54:f6:f5:1d:6a:fc:fe:e1:25:9c:f8:a6:63: a6:de:c6:ba:03:b3:85:b2:01:5f:06:f2:ca:90:8d:98:b4:c0: 52:80:fb:3d:6f:45:04:59:9b:e3:c8:e4:53:e1:a5:eb:aa:37: 45:6f:3f:36:f0:c9:a7:c4:6c:a6:c7:1e:fc:d3:66:79:26:9d: 5c:f8:d6:10:23:aa:88:39:06:96:d1:d6:f3:98:a6:48:cd:5b: f4:3c:63:df:fc:a0:82:ee:5f:64:ad:be:9e:3a:60:5f:89:85: dd:85:d7:aa:be:19:44:d2:ef:5c:f9:77:a6:ce:b2:e9:08:89: 20:fb:23:7a -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBCTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy NDQyQTExMC8GA1UEBRMoMzU0RTMyQjlERTBFNTY5QTE5NTFBOTdCOTMyMDE5RjY4 OEEzNTBBQzAeFw0yNTA3MDMwMTQyMTRaFw0yNTA3MTAwMTQyMTNaMBgxFjAUBgNV BAMTDTY4NjVkZmY2LWExYmEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDzrFVIP2YFTKZ9bz7uHKDiRMmgTG6+Tl5AwEf8NSuNWSGVRsAOpdNiAh1sEeZf IRWXh0AUHBdwTtdVhYLEtmfjvDqu84ixlBbZJnJ7W2VRJJmT80ELvMNUdQaU69xh oAMMguj07yoIYEccZsvCXEzQ7fAIJTRFj7vJtuFRCP9VakjbP+IN7g4aQa4ilQ0X 8oPIa6Lwtsugmqm/UuR2Bx7k0mWWpnBm/jNtTkMkDpULo4Eq5rkPt21mcXSNHoq6 lymTz6RebHxh61unF0IxyUQq1OXUV9ab8g/hh3AQZ7qtvb4BCrXGsHSBOjVi45rg 8V/yJbTULr0cJTkGeFwVcBxNAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQURxZXmVEy +6DZrtN2fA/lpmuFCRMwHwYDVR0jBBgwFoAUNU4yud4OVpoZUal7kyAZ9oijUKww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI0NDJBLzU1RUJCODU4NEUz QjExRjA5QzEyNTU0N0M0RjlBRTAyL05VNHl1ZDRPVnBvWlVhbDdreUFaOW9palVL dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvTlU0eXVkNE9WcG9aVWFsN2t5QVo5b2lqVUt3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI0 NDJBLzU1RUJCODU4NEUzQjExRjA5QzEyNTU0N0M0RjlBRTAyL05VNHl1ZDRPVnBv WlVhbDdreUFaOW9palVLdy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBADAHaShBZHsIbXegWXdVQM6yHSznk1HQe1VlukfeNQh3ZFbD4Lx0bdJC ZhAIg9+I1JlmVwFu/IN4jjcIZIPD/9QOAeLcGtstzvZ2uWsg35nGMFMBSF1YdBnI WQrlgfql1IxmaIPBQ9nkoGX3W8yRxSWO98cerGdPOw52pG2F6DHW9DskVPb1HWr8 /uElnPimY6bexroDs4WyAV8G8sqQjZi0wFKA+z1vRQRZm+PI5FPhpeuqN0VvPzbw yafEbKbHHvzTZnkmnVz41hAjqog5BpbR1vOYpkjNW/Q8Y9/8oILuX2Stvp46YF+J hd2F16q+GUTS71z5d6bOsukIiSD7I3o= -----END CERTIFICATE-----Generated at Thu Jul 3 21:43:19 2025 by rpki-client