$ rpki-client -vvf rpki.apnic.net/member_repository/A912BCAC/0152258E82F411EE9ED1F611C4F9AE02/nL4Q18HdRLflkLUHi_xPhs-Nslo.mft File: nL4Q18HdRLflkLUHi_xPhs-Nslo.mft (raw, json) Hash identifier: Sb1Sq7/eyKOnRD9DCoFbnriDKcGMyQioyYwOySU+i3I= Subject key identifier: 65:D9:3C:26:89:31:41:A2:5B:B3:B4:5D:38:01:45:F7:AA:89:7E:F6 Authority key identifier: 9C:BE:10:D7:C1:DD:44:B7:E5:90:B5:07:8B:FC:4F:86:CF:8D:B2:5A Certificate issuer: /CN=A912BCAC/serialNumber=9CBE10D7C1DD44B7E590B5078BFC4F86CF8DB25A Certificate serial: 0139 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nL4Q18HdRLflkLUHi_xPhs-Nslo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912BCAC/0152258E82F411EE9ED1F611C4F9AE02/nL4Q18HdRLflkLUHi_xPhs-Nslo.mft Manifest number: 0135 Signing time: Tue 01 Jul 2025 05:00:09 +0000 Manifest this update: Tue 01 Jul 2025 05:00:08 +0000 Manifest next update: Tue 08 Jul 2025 05:00:08 +0000 Files and hashes: 1: nL4Q18HdRLflkLUHi_xPhs-Nslo.crl (hash: ColrJtjchNwzdJ3AcAqn17t9eC1dvoawtpYpu4VWEJQ=) 2: 43C5BAA282F411EE99AAAB12C4F9AE02.roa (hash: rYwGjsQBpShXvyi5oxowpgOp3gdk00xJnm3EoG1TD+c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912BCAC/0152258E82F411EE9ED1F611C4F9AE02/nL4Q18HdRLflkLUHi_xPhs-Nslo.crl rsync://rpki.apnic.net/member_repository/A912BCAC/0152258E82F411EE9ED1F611C4F9AE02/nL4Q18HdRLflkLUHi_xPhs-Nslo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nL4Q18HdRLflkLUHi_xPhs-Nslo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 05:00:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 313 (0x139) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912BCAC, serialNumber=9CBE10D7C1DD44B7E590B5078BFC4F86CF8DB25A Validity Not Before: Jul 1 05:00:08 2025 GMT Not After : Jul 8 05:00:08 2025 GMT Subject: CN=68636b59-3547 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:d4:4e:4f:1d:59:85:ac:86:1e:10:27:2e:17: 79:39:2a:c9:6e:a9:5d:c2:26:96:cc:c0:bc:6b:1e: 51:d8:3e:3c:92:75:92:aa:19:76:84:64:35:96:7f: a2:56:43:44:d0:0a:4d:d3:55:f1:9c:1b:61:5a:c0: 1c:2c:66:af:7a:6e:5a:4a:13:04:94:f5:11:03:68: 5c:c8:96:06:ba:60:3d:ca:05:c0:46:93:44:1a:3f: 65:1d:52:a0:ea:95:d5:37:da:fd:e0:8e:13:88:1b: ba:26:1b:48:db:6a:fe:7e:8a:53:4d:3c:02:85:4e: a5:9f:0e:1d:08:8c:83:23:03:52:3d:07:11:d5:02: 41:00:b2:f3:e0:c2:70:a5:19:36:0f:14:e0:1a:43: 9b:77:15:c2:ff:90:4c:cc:81:03:3a:03:c1:83:98: 1d:ef:92:91:e5:9a:ce:d9:28:6d:b6:e3:f9:79:de: b6:96:0a:35:a6:fd:40:7f:c8:2d:ff:aa:ca:34:23: ef:4c:60:d0:1b:ee:c0:85:4b:1e:37:bd:dd:98:54: 88:c6:a5:1e:20:db:af:81:a9:d5:ec:1b:74:e5:eb: 3a:8d:61:f7:92:4a:4d:67:db:00:d5:de:b9:98:8b: 61:26:76:9c:5b:10:b8:7a:b7:d7:26:35:d6:22:36: b4:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:D9:3C:26:89:31:41:A2:5B:B3:B4:5D:38:01:45:F7:AA:89:7E:F6 X509v3 Authority Key Identifier: keyid:9C:BE:10:D7:C1:DD:44:B7:E5:90:B5:07:8B:FC:4F:86:CF:8D:B2:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912BCAC/0152258E82F411EE9ED1F611C4F9AE02/nL4Q18HdRLflkLUHi_xPhs-Nslo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nL4Q18HdRLflkLUHi_xPhs-Nslo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912BCAC/0152258E82F411EE9ED1F611C4F9AE02/nL4Q18HdRLflkLUHi_xPhs-Nslo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 58:05:d5:10:58:51:0d:77:e3:64:99:34:2f:e0:31:42:7f:3b: b8:bc:49:ff:97:6c:99:ef:63:08:4d:80:d6:d6:1c:cc:93:b3: 58:04:32:02:4c:2d:34:29:80:82:bf:1a:ee:0e:af:e9:c2:96: 94:fa:58:fc:38:ee:44:01:c6:7d:08:c2:04:48:78:44:d5:47: d6:36:03:a7:e2:86:da:10:01:c0:8b:d9:fc:74:ce:d3:dc:9a: 96:b3:3c:1e:43:51:d3:86:14:3e:92:67:b7:c1:12:d0:f8:e2: 61:58:5f:c1:26:22:37:a8:56:4b:7e:98:8d:b0:1e:f2:72:37: f7:c7:54:bf:ad:7e:14:01:12:32:b2:67:94:ca:7f:b1:ee:9a: 08:a4:af:24:44:19:5f:b6:fc:b2:b0:29:87:b6:b1:f6:ff:ff: 3c:27:ca:f4:05:cc:c2:86:53:98:8e:f2:94:d6:82:8f:96:17: 76:de:95:7f:bb:41:2e:e7:06:03:2f:41:e7:ed:ec:4a:fd:20: 2c:33:c0:52:b3:73:d5:77:f8:d4:99:21:39:47:25:5a:9b:53: 09:62:48:37:de:0d:fe:b7:91:5b:b8:04:98:bf:51:78:b3:f4: 0a:4d:1e:72:61:52:40:ef:e6:ec:13:b1:02:f7:b2:2f:81:27: 36:e5:ad:2b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICATkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkJDQUMxMTAvBgNVBAUTKDlDQkUxMEQ3QzFERDQ0QjdFNTkwQjUwNzhCRkM0Rjg2 Q0Y4REIyNUEwHhcNMjUwNzAxMDUwMDA4WhcNMjUwNzA4MDUwMDA4WjAYMRYwFAYD VQQDEw02ODYzNmI1OS0zNTQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxNROTx1ZhayGHhAnLhd5OSrJbqldwiaWzMC8ax5R2D48knWSqhl2hGQ1ln+i VkNE0ApN01XxnBthWsAcLGavem5aShMElPURA2hcyJYGumA9ygXARpNEGj9lHVKg 6pXVN9r94I4TiBu6JhtI22r+fopTTTwChU6lnw4dCIyDIwNSPQcR1QJBALLz4MJw pRk2DxTgGkObdxXC/5BMzIEDOgPBg5gd75KR5ZrO2ShttuP5ed62lgo1pv1Af8gt /6rKNCPvTGDQG+7AhUseN73dmFSIxqUeINuvganV7Bt05es6jWH3kkpNZ9sA1d65 mIthJnacWxC4erfXJjXWIja0vwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGXZPCaJ MUGiW7O0XTgBRfeqiX72MB8GA1UdIwQYMBaAFJy+ENfB3US35ZC1B4v8T4bPjbJa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQkNBQy8wMTUyMjU4RTgy RjQxMUVFOUVEMUY2MTFDNEY5QUUwMi9uTDRRMThIZFJMZmxrTFVIaV94UGhzLU5z bG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25MNFExOEhkUkxmbGtMVUhpX3hQaHMtTnNsby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QkNBQy8wMTUyMjU4RTgyRjQxMUVFOUVEMUY2MTFDNEY5QUUwMi9uTDRRMThIZFJM ZmxrTFVIaV94UGhzLU5zbG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBYBdUQWFENd+NkmTQv4DFCfzu4vEn/l2yZ72MITYDW1hzMk7NYBDIC TC00KYCCvxruDq/pwpaU+lj8OO5EAcZ9CMIESHhE1UfWNgOn4obaEAHAi9n8dM7T 3JqWszweQ1HThhQ+kme3wRLQ+OJhWF/BJiI3qFZLfpiNsB7ycjf3x1S/rX4UARIy smeUyn+x7poIpK8kRBlftvyysCmHtrH2//88J8r0BczChlOYjvKU1oKPlhd23pV/ u0Eu5wYDL0Hn7exK/SAsM8BSs3PVd/jUmSE5RyVam1MJYkg33g3+t5FbuASYv1F4 s/QKTR5yYVJA7+bsE7EC97IvgSc25a0r -----END CERTIFICATE-----Generated at Wed Jul 2 21:21:44 2025 by rpki-client