$ rpki-client -vvf rpki.apnic.net/member_repository/A912FAB9/938A70E495CD11E6BF4A8232C4F9AE02/NJwJ6ZyoBuM1kVc1z5cqG_hkpsM.mft File: NJwJ6ZyoBuM1kVc1z5cqG_hkpsM.mft (raw, json) Hash identifier: lzIimM/slK2o8iLAf7B3W0EvG+pwzXXcY7I17uBbGAo= Subject key identifier: 75:B4:0F:28:23:B2:6A:C0:5E:11:90:ED:D3:4E:EF:82:DD:1B:1A:EF Authority key identifier: 34:9C:09:E9:9C:A8:06:E3:35:91:57:35:CF:97:2A:1B:F8:64:A6:C3 Certificate issuer: /CN=A912FAB9/serialNumber=349C09E99CA806E335915735CF972A1BF864A6C3 Certificate serial: 1DE5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NJwJ6ZyoBuM1kVc1z5cqG_hkpsM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912FAB9/938A70E495CD11E6BF4A8232C4F9AE02/NJwJ6ZyoBuM1kVc1z5cqG_hkpsM.mft Manifest number: 1DD7 Signing time: Wed 02 Jul 2025 16:14:14 +0000 Manifest this update: Wed 02 Jul 2025 16:14:13 +0000 Manifest next update: Wed 09 Jul 2025 16:14:13 +0000 Files and hashes: 1: NJwJ6ZyoBuM1kVc1z5cqG_hkpsM.crl (hash: XlR12s4rYVqojBddtjVAfN/LouWCyxyG9H6dqr8ft+A=) 2: AE5C97A8AFB711E79FACFF11C4F9AE02.roa (hash: UCPIk7PqTNU3ro9Psv5YDODZfhBpvATekxfIDIhqyNU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912FAB9/938A70E495CD11E6BF4A8232C4F9AE02/NJwJ6ZyoBuM1kVc1z5cqG_hkpsM.crl rsync://rpki.apnic.net/member_repository/A912FAB9/938A70E495CD11E6BF4A8232C4F9AE02/NJwJ6ZyoBuM1kVc1z5cqG_hkpsM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NJwJ6ZyoBuM1kVc1z5cqG_hkpsM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 16:14:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7653 (0x1de5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912FAB9, serialNumber=349C09E99CA806E335915735CF972A1BF864A6C3 Validity Not Before: Jul 2 16:14:13 2025 GMT Not After : Jul 9 16:14:13 2025 GMT Subject: CN=68655ad5-77c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:9e:03:66:4b:15:55:64:76:5d:93:9c:08:ac: 27:de:0e:4e:69:37:ad:2c:9b:ba:c0:5b:1c:e9:94: 45:cd:f3:36:76:25:00:84:3d:ab:7f:9e:36:c4:78: e3:8f:cf:9f:8b:d5:06:38:77:b6:1c:9e:2d:ed:f8: e8:33:1d:1c:c3:f6:0f:b0:f9:a2:d1:01:cf:9f:ee: 67:0a:c7:58:e6:15:1b:cb:04:f2:e7:54:02:b8:b4: 2b:58:ec:9f:c2:fe:c2:ef:08:52:c6:00:ec:95:07: 18:0c:60:d6:cd:12:02:33:ae:db:f9:c0:bd:14:d3: 04:d7:a5:15:71:14:6e:d6:30:7a:fe:ca:4f:e9:b9: ac:e3:7c:94:a3:f3:50:65:c4:46:76:b7:7f:76:77: f4:13:2c:e8:af:fb:52:f6:58:35:07:93:63:b5:63: 56:7d:20:19:8f:1e:bc:5d:87:ad:97:20:e2:0c:4e: 06:7d:82:0a:29:f8:88:f9:55:35:19:3b:ec:66:51: 0f:98:9f:c0:5a:67:2e:3b:e2:80:7a:d6:4d:99:18: 22:30:2f:f4:00:d9:94:c0:b1:97:15:e7:b1:a1:68: 2d:69:d8:79:6f:00:1c:d0:aa:d6:df:e9:4a:ec:72: 84:73:09:24:b2:25:5e:37:73:1e:f4:eb:5b:d3:a0: 25:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:B4:0F:28:23:B2:6A:C0:5E:11:90:ED:D3:4E:EF:82:DD:1B:1A:EF X509v3 Authority Key Identifier: keyid:34:9C:09:E9:9C:A8:06:E3:35:91:57:35:CF:97:2A:1B:F8:64:A6:C3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912FAB9/938A70E495CD11E6BF4A8232C4F9AE02/NJwJ6ZyoBuM1kVc1z5cqG_hkpsM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NJwJ6ZyoBuM1kVc1z5cqG_hkpsM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912FAB9/938A70E495CD11E6BF4A8232C4F9AE02/NJwJ6ZyoBuM1kVc1z5cqG_hkpsM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b9:5f:ee:5b:8a:9f:aa:4c:44:9c:0a:da:89:b0:e2:e2:c2:c8: 6e:07:f7:41:b0:3c:59:b3:30:ed:1b:d1:7d:41:e4:05:97:ee: 53:35:b8:62:12:07:a6:0e:9d:96:d9:c9:a1:94:2d:87:00:d8: ae:2c:d7:14:e2:68:c1:7a:d7:68:4a:2f:b5:aa:11:37:30:cb: ec:e1:be:78:53:9a:f9:6f:01:96:51:86:64:07:c5:48:1d:97: 34:c4:f6:cf:6c:14:4d:63:89:d8:03:52:39:fe:12:ec:08:0c: 38:9b:ce:b9:26:4f:d2:a8:bd:78:a2:a3:65:0d:e8:8f:9f:42: d6:57:44:4e:30:60:d7:ce:84:1c:c9:51:a3:7c:38:aa:3e:68: e3:2c:14:cf:01:d8:4d:6e:4d:65:a2:af:6f:b3:cd:9c:c8:da: 56:bf:15:20:6e:fc:37:be:23:26:c7:84:66:6d:78:70:d8:c8: a5:e9:16:43:42:11:3e:53:e7:00:1b:74:74:41:9e:b1:9b:9c: 27:4f:c8:31:83:79:6b:34:b0:01:b9:d6:37:fa:7e:fd:17:0f: 13:cc:ec:ff:c2:08:f3:de:fb:60:05:49:e9:03:24:a3:c4:e1: 6e:76:68:80:83:f4:1d:ec:06:4a:b5:d9:ff:ee:26:ba:28:4a: ba:29:13:2e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHeUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkZBQjkxMTAvBgNVBAUTKDM0OUMwOUU5OUNBODA2RTMzNTkxNTczNUNGOTcyQTFC Rjg2NEE2QzMwHhcNMjUwNzAyMTYxNDEzWhcNMjUwNzA5MTYxNDEzWjAYMRYwFAYD VQQDEw02ODY1NWFkNS03N2M0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA754DZksVVWR2XZOcCKwn3g5OaTetLJu6wFsc6ZRFzfM2diUAhD2rf542xHjj j8+fi9UGOHe2HJ4t7fjoMx0cw/YPsPmi0QHPn+5nCsdY5hUbywTy51QCuLQrWOyf wv7C7whSxgDslQcYDGDWzRICM67b+cC9FNME16UVcRRu1jB6/spP6bms43yUo/NQ ZcRGdrd/dnf0Eyzor/tS9lg1B5NjtWNWfSAZjx68XYetlyDiDE4GfYIKKfiI+VU1 GTvsZlEPmJ/AWmcuO+KAetZNmRgiMC/0ANmUwLGXFeexoWgtadh5bwAc0KrW3+lK 7HKEcwkksiVeN3Me9Otb06AlMQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHW0Dygj smrAXhGQ7dNO74LdGxrvMB8GA1UdIwQYMBaAFDScCemcqAbjNZFXNc+XKhv4ZKbD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRkFCOS85MzhBNzBFNDk1 Q0QxMUU2QkY0QTgyMzJDNEY5QUUwMi9OSndKNlp5b0J1TTFrVmMxejVjcUdfaGtw c00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05Kd0o2WnlvQnVNMWtWYzF6NWNxR19oa3BzTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RkFCOS85MzhBNzBFNDk1Q0QxMUU2QkY0QTgyMzJDNEY5QUUwMi9OSndKNlp5b0J1 TTFrVmMxejVjcUdfaGtwc00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC5X+5bip+qTEScCtqJsOLiwshuB/dBsDxZszDtG9F9QeQFl+5TNbhi EgemDp2W2cmhlC2HANiuLNcU4mjBetdoSi+1qhE3MMvs4b54U5r5bwGWUYZkB8VI HZc0xPbPbBRNY4nYA1I5/hLsCAw4m865Jk/SqL14oqNlDeiPn0LWV0ROMGDXzoQc yVGjfDiqPmjjLBTPAdhNbk1loq9vs82cyNpWvxUgbvw3viMmx4RmbXhw2Mil6RZD QhE+U+cAG3R0QZ6xm5wnT8gxg3lrNLABudY3+n79Fw8TzOz/wgjz3vtgBUnpAySj xOFudmiAg/Qd7AZKtdn/7ia6KEq6KRMu -----END CERTIFICATE-----Generated at Thu Jul 3 07:08:05 2025 by rpki-client