$ rpki-client -vvf rpki.apnic.net/member_repository/A913F333/DECB65A4239811ED9067226FC4F9AE02/NkCMEcVHK4Ikiv_r7tuyDj4Hps0.mft File: NkCMEcVHK4Ikiv_r7tuyDj4Hps0.mft (raw, json) Hash identifier: 5yRZ9oPtHiiv2oxEs3/CoHX+fRExbwYKbw9Js1IaNoI= Subject key identifier: A8:4F:03:F5:85:B3:CD:02:8F:A4:70:52:D0:0C:F8:64:D2:A4:9B:14 Authority key identifier: 36:40:8C:11:C5:47:2B:82:24:8A:FF:EB:EE:DB:B2:0E:3E:07:A6:CD Certificate issuer: /CN=A913F333/serialNumber=36408C11C5472B82248AFFEBEEDBB20E3E07A6CD Certificate serial: 0269 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NkCMEcVHK4Ikiv_r7tuyDj4Hps0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913F333/DECB65A4239811ED9067226FC4F9AE02/NkCMEcVHK4Ikiv_r7tuyDj4Hps0.mft Manifest number: 025C Signing time: Tue 01 Jul 2025 02:31:17 +0000 Manifest this update: Tue 01 Jul 2025 02:31:16 +0000 Manifest next update: Tue 08 Jul 2025 02:31:16 +0000 Files and hashes: 1: NkCMEcVHK4Ikiv_r7tuyDj4Hps0.crl (hash: RcTZ8TgfQguwqwVeO/KWLYp5aftK50J6S5DjQ8lWr/0=) 2: 134B439A91B611ED8BA25C80C4F9AE02.roa (hash: YssH476E2tgxPdw+/0l4VE/a3GZaUyUxDjk4z13BJXU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913F333/DECB65A4239811ED9067226FC4F9AE02/NkCMEcVHK4Ikiv_r7tuyDj4Hps0.crl rsync://rpki.apnic.net/member_repository/A913F333/DECB65A4239811ED9067226FC4F9AE02/NkCMEcVHK4Ikiv_r7tuyDj4Hps0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NkCMEcVHK4Ikiv_r7tuyDj4Hps0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 02:31:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 617 (0x269) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913F333, serialNumber=36408C11C5472B82248AFFEBEEDBB20E3E07A6CD Validity Not Before: Jul 1 02:31:16 2025 GMT Not After : Jul 8 02:31:16 2025 GMT Subject: CN=68634875-72aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:18:bf:f2:87:9c:5b:73:17:9c:f3:ed:fc:9c: a1:76:89:59:f3:ae:98:78:79:4c:6f:ba:ba:7b:0a: 2d:6b:03:51:a6:ac:88:25:5f:27:32:aa:1c:8e:47: 71:9e:19:9c:fa:9f:22:65:78:95:b0:d5:af:8d:73: b0:03:5e:45:cb:e1:4b:33:36:f4:0a:87:5e:2c:c0: 14:7f:1c:1c:e7:a7:d6:53:c4:88:52:f3:59:1f:5a: fd:02:11:e5:2b:dd:99:b4:3f:cd:d2:95:8b:11:5c: 81:79:09:02:d7:01:ff:23:d7:fd:29:a8:56:67:98: 0c:6f:3e:38:6e:79:e3:6d:0d:ae:a6:ba:d7:00:c2: a9:d7:ba:c7:30:2b:9e:ca:6b:65:ef:3b:3b:06:2a: e0:a6:4f:d3:ac:52:b7:b6:12:5e:6d:ec:33:38:43: fc:02:47:20:ca:9a:88:91:7c:0c:b7:59:01:21:65: b5:0d:bb:63:5d:ca:96:92:e8:d9:33:e1:e8:41:27: c7:29:76:f5:5d:7a:5f:4b:f4:9d:d0:2c:e0:6d:22: 0a:8a:6d:bc:5f:78:0d:54:37:6d:b1:a7:3e:d0:35: a4:88:b6:0d:42:35:1c:18:1b:be:1c:18:75:65:90: e8:48:cd:d8:c0:a7:93:df:6d:38:f1:38:83:7c:82: 6c:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:4F:03:F5:85:B3:CD:02:8F:A4:70:52:D0:0C:F8:64:D2:A4:9B:14 X509v3 Authority Key Identifier: keyid:36:40:8C:11:C5:47:2B:82:24:8A:FF:EB:EE:DB:B2:0E:3E:07:A6:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913F333/DECB65A4239811ED9067226FC4F9AE02/NkCMEcVHK4Ikiv_r7tuyDj4Hps0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NkCMEcVHK4Ikiv_r7tuyDj4Hps0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913F333/DECB65A4239811ED9067226FC4F9AE02/NkCMEcVHK4Ikiv_r7tuyDj4Hps0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 42:59:c5:f2:2f:32:b1:61:2f:63:ef:c9:9d:ff:8b:e4:d1:b9: 4a:cd:3a:9b:9a:d3:af:0c:1a:dc:09:31:8d:42:c8:47:4d:37: 80:13:34:6d:9c:ef:0e:cd:49:85:fe:6d:b2:86:b7:a2:7d:91: 9b:78:98:de:28:06:0c:97:49:24:96:1f:2a:02:05:69:95:49: 25:77:77:ac:03:13:dc:d0:72:aa:86:55:0b:9b:c3:20:c7:fd: d7:d2:6d:ba:72:1c:4d:f6:69:2e:93:ba:99:81:96:90:52:67: 52:aa:2d:cb:ba:df:8c:22:4e:be:bb:67:85:fe:a0:fb:62:e3: af:d1:8f:31:70:06:6c:f9:7e:3b:98:2d:e2:7f:56:b7:9a:dd: 96:f4:0a:91:48:c5:79:12:6f:c4:a0:d4:2a:76:40:6e:23:23: 85:31:7b:50:a3:05:1a:25:98:27:72:f1:d3:05:47:64:aa:b9: 0c:c8:5a:bf:5c:85:d8:89:6a:27:50:e7:a1:83:9f:b0:55:da: f9:56:31:4e:32:b7:ff:bc:1f:50:ad:42:89:8e:b9:95:c9:a6: c8:df:50:18:34:7e:82:d2:11:bb:c1:49:d8:6d:c7:c0:e2:66: 80:8a:ea:aa:18:64:d0:9c:89:7c:94:b3:3b:74:93:90:ad:cb: 93:96:cb:0f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAmkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0YzMzMxMTAvBgNVBAUTKDM2NDA4QzExQzU0NzJCODIyNDhBRkZFQkVFREJCMjBF M0UwN0E2Q0QwHhcNMjUwNzAxMDIzMTE2WhcNMjUwNzA4MDIzMTE2WjAYMRYwFAYD VQQDEw02ODYzNDg3NS03MmFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2hi/8oecW3MXnPPt/JyhdolZ866YeHlMb7q6ewotawNRpqyIJV8nMqocjkdx nhmc+p8iZXiVsNWvjXOwA15Fy+FLMzb0CodeLMAUfxwc56fWU8SIUvNZH1r9AhHl K92ZtD/N0pWLEVyBeQkC1wH/I9f9KahWZ5gMbz44bnnjbQ2uprrXAMKp17rHMCue ymtl7zs7Birgpk/TrFK3thJebewzOEP8AkcgypqIkXwMt1kBIWW1DbtjXcqWkujZ M+HoQSfHKXb1XXpfS/Sd0CzgbSIKim28X3gNVDdtsac+0DWkiLYNQjUcGBu+HBh1 ZZDoSM3YwKeT32048TiDfIJspwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKhPA/WF s80Cj6RwUtAM+GTSpJsUMB8GA1UdIwQYMBaAFDZAjBHFRyuCJIr/6+7bsg4+B6bN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRjMzMy9ERUNCNjVBNDIz OTgxMUVEOTA2NzIyNkZDNEY5QUUwMi9Oa0NNRWNWSEs0SWtpdl9yN3R1eURqNEhw czAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05rQ01FY1ZISzRJa2l2X3I3dHV5RGo0SHBzMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RjMzMy9ERUNCNjVBNDIzOTgxMUVEOTA2NzIyNkZDNEY5QUUwMi9Oa0NNRWNWSEs0 SWtpdl9yN3R1eURqNEhwczAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBCWcXyLzKxYS9j78md/4vk0blKzTqbmtOvDBrcCTGNQshHTTeAEzRt nO8OzUmF/m2yhreifZGbeJjeKAYMl0kklh8qAgVplUkld3esAxPc0HKqhlULm8Mg x/3X0m26chxN9mkuk7qZgZaQUmdSqi3Lut+MIk6+u2eF/qD7YuOv0Y8xcAZs+X47 mC3if1a3mt2W9AqRSMV5Em/EoNQqdkBuIyOFMXtQowUaJZgncvHTBUdkqrkMyFq/ XIXYiWonUOehg5+wVdr5VjFOMrf/vB9QrUKJjrmVyabI31AYNH6C0hG7wUnYbcfA 4maAiuqqGGTQnIl8lLM7dJOQrcuTlssP -----END CERTIFICATE-----Generated at Wed Jul 2 06:10:42 2025 by rpki-client