$ rpki-client -vvf rpki.apnic.net/member_repository/A9148B19/11030AF4855611EC9AB82E21C4F9AE02/cNLQaRmVfGqmdxz1Xblvx-_niaA.mft File: cNLQaRmVfGqmdxz1Xblvx-_niaA.mft (raw, json) Hash identifier: wvEmNZxR6vyLH7cF6eXtjPOD4g1DJUWGE7KGNootcwk= Subject key identifier: 2A:01:4E:A0:0F:64:3B:43:18:76:7E:26:31:B1:C3:6E:2D:E1:AF:12 Authority key identifier: 70:D2:D0:69:19:95:7C:6A:A6:77:1C:F5:5D:B9:6F:C7:EF:E7:89:A0 Certificate issuer: /CN=A9148B19/serialNumber=70D2D06919957C6AA6771CF55DB96FC7EFE789A0 Certificate serial: 03F0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cNLQaRmVfGqmdxz1Xblvx-_niaA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9148B19/11030AF4855611EC9AB82E21C4F9AE02/cNLQaRmVfGqmdxz1Xblvx-_niaA.mft Manifest number: 03E4 Signing time: Thu 03 Jul 2025 00:54:11 +0000 Manifest this update: Thu 03 Jul 2025 00:54:11 +0000 Manifest next update: Thu 10 Jul 2025 00:54:11 +0000 Files and hashes: 1: cNLQaRmVfGqmdxz1Xblvx-_niaA.crl (hash: XCAhS/1o8jdwAVVAZ+CHmr/rKmdM8gea1uwwmi3p9l8=) 2: 5E6AFDFC855A11ECA39EB244C4F9AE02.roa (hash: adNJYD8ddR86Y2y0YjrK71PiHKfM9/CpER0jXjblQGI=) 3: 93A5581E549211EFB6D69465C4F9AE02.roa (hash: /XKYDQbxV7RTuAFLQ60S0WHAEqIIW0Ex8kIJdQHSD/g=) 4: 927AA46C549211EFB6D69465C4F9AE02.roa (hash: gGjbQrgM08otmBBevw5wvzpRfB5KnX1ffhZnJEh71ug=) 5: 92F68C4E549211EFB6D69465C4F9AE02.roa (hash: sY83/cQy3tzz5zdxbwkdhze9u62EpJ6EfapgidWQ+QI=) 6: 920D7BD0549211EFB6D69465C4F9AE02.roa (hash: aK64LFa4M0NMRqfKHBnnSKArLKJYhxOJFHjuf4xjW94=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9148B19/11030AF4855611EC9AB82E21C4F9AE02/cNLQaRmVfGqmdxz1Xblvx-_niaA.crl rsync://rpki.apnic.net/member_repository/A9148B19/11030AF4855611EC9AB82E21C4F9AE02/cNLQaRmVfGqmdxz1Xblvx-_niaA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cNLQaRmVfGqmdxz1Xblvx-_niaA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 00:54:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1008 (0x3f0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9148B19, serialNumber=70D2D06919957C6AA6771CF55DB96FC7EFE789A0 Validity Not Before: Jul 3 00:54:11 2025 GMT Not After : Jul 10 00:54:11 2025 GMT Subject: CN=6865d4b3-6dec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:02:83:5e:42:94:e4:1a:50:bf:c9:f2:f7:22: eb:1b:00:f1:b7:72:74:a6:f5:4e:96:18:9b:40:8d: a4:1f:27:3a:60:93:a3:b4:a4:c9:c5:64:1d:03:71: 9c:bc:64:00:1c:a1:9c:15:53:c1:73:8e:00:70:03: 67:f9:b5:bd:35:f3:09:75:ad:5f:33:2c:2c:a9:67: e5:9c:09:da:72:20:26:d0:4f:b0:e3:d9:d3:77:d8: 36:a0:eb:2b:09:38:a9:fa:2a:f2:45:ef:e1:3f:9f: de:c8:f2:6d:a8:63:71:70:43:a6:62:b5:81:a0:0b: dc:aa:d3:be:e9:40:cf:fd:bf:94:0f:38:37:a9:61: ef:35:b0:1f:39:c6:4b:28:80:d0:3b:d2:73:04:c6: 69:38:c0:0a:e8:ae:80:ba:cd:94:ab:35:09:28:6a: b1:c5:21:34:eb:b6:79:e5:31:4f:8b:a7:81:2a:17: 3f:fd:71:08:c9:49:e5:b3:0e:64:24:fa:6d:e3:12: 04:fc:fe:d6:20:6e:a7:25:16:f6:24:c5:f1:9a:a1: d3:5f:86:af:e4:f9:e1:71:6c:a0:76:91:cd:6c:79: 14:71:a9:9f:2a:d5:d2:71:4c:7d:e3:96:de:ff:1c: 0c:93:30:28:1f:92:ea:36:ab:85:ed:19:39:6f:d4: 3c:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:01:4E:A0:0F:64:3B:43:18:76:7E:26:31:B1:C3:6E:2D:E1:AF:12 X509v3 Authority Key Identifier: keyid:70:D2:D0:69:19:95:7C:6A:A6:77:1C:F5:5D:B9:6F:C7:EF:E7:89:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9148B19/11030AF4855611EC9AB82E21C4F9AE02/cNLQaRmVfGqmdxz1Xblvx-_niaA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cNLQaRmVfGqmdxz1Xblvx-_niaA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148B19/11030AF4855611EC9AB82E21C4F9AE02/cNLQaRmVfGqmdxz1Xblvx-_niaA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7f:f5:91:43:76:90:9e:72:60:7d:54:f2:b6:07:ed:8e:51:df: 1a:1b:ef:c3:05:63:83:b9:d1:82:fb:7f:f5:72:00:89:2b:2c: 63:47:65:e9:bf:8e:de:ab:71:df:79:b6:48:92:b9:05:cd:fd: 7c:56:d5:2f:b2:26:92:60:c6:31:7b:ac:03:e0:7f:a8:ce:0b: 37:83:81:02:91:7f:fd:d4:33:c7:04:32:05:b4:b8:61:5a:35: 74:89:27:b7:17:b2:1c:2c:57:64:f1:f0:dd:d2:15:eb:31:80: ad:cc:9c:2e:a4:c7:e5:40:ad:9a:a9:c4:87:c1:d6:4f:16:2a: f3:4b:91:f4:cc:e3:3c:b2:09:21:73:8a:c7:e8:58:e0:25:ed: 4f:0c:dd:6e:52:e3:bc:66:4f:c6:d5:9f:7b:4b:cb:d1:f8:87: 9f:62:20:91:c1:73:4e:6a:47:a7:29:bb:22:0a:a9:65:1f:78: 64:ec:4f:03:c0:8f:1b:22:55:42:62:2f:51:3d:c8:a8:ea:52: b4:70:6d:9d:e7:c3:46:31:28:e0:ad:40:f2:a8:e0:c6:5e:6a: 53:07:90:b7:ed:8f:aa:47:7b:23:1e:57:0f:df:b8:8c:57:7e: 41:3f:00:3e:39:e5:04:d9:db:f2:27:54:5e:e2:72:7f:fa:8b: 3f:35:60:47 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA/AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDhCMTkxMTAvBgNVBAUTKDcwRDJEMDY5MTk5NTdDNkFBNjc3MUNGNTVEQjk2RkM3 RUZFNzg5QTAwHhcNMjUwNzAzMDA1NDExWhcNMjUwNzEwMDA1NDExWjAYMRYwFAYD VQQDEw02ODY1ZDRiMy02ZGVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3QKDXkKU5BpQv8ny9yLrGwDxt3J0pvVOlhibQI2kHyc6YJOjtKTJxWQdA3Gc vGQAHKGcFVPBc44AcANn+bW9NfMJda1fMywsqWflnAnaciAm0E+w49nTd9g2oOsr CTip+iryRe/hP5/eyPJtqGNxcEOmYrWBoAvcqtO+6UDP/b+UDzg3qWHvNbAfOcZL KIDQO9JzBMZpOMAK6K6Aus2UqzUJKGqxxSE067Z55TFPi6eBKhc//XEIyUnlsw5k JPpt4xIE/P7WIG6nJRb2JMXxmqHTX4av5PnhcWygdpHNbHkUcamfKtXScUx945be /xwMkzAoH5LqNquF7Rk5b9Q8BQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCoBTqAP ZDtDGHZ+JjGxw24t4a8SMB8GA1UdIwQYMBaAFHDS0GkZlXxqpncc9V25b8fv54mg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OEIxOS8xMTAzMEFGNDg1 NTYxMUVDOUFCODJFMjFDNEY5QUUwMi9jTkxRYVJtVmZHcW1keHoxWGJsdngtX25p YUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NOTFFhUm1WZkdxbWR4ejFYYmx2eC1fbmlhQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OEIxOS8xMTAzMEFGNDg1NTYxMUVDOUFCODJFMjFDNEY5QUUwMi9jTkxRYVJtVmZH cW1keHoxWGJsdngtX25pYUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB/9ZFDdpCecmB9VPK2B+2OUd8aG+/DBWODudGC+3/1cgCJKyxjR2Xp v47eq3HfebZIkrkFzf18VtUvsiaSYMYxe6wD4H+ozgs3g4ECkX/91DPHBDIFtLhh WjV0iSe3F7IcLFdk8fDd0hXrMYCtzJwupMflQK2aqcSHwdZPFirzS5H0zOM8sgkh c4rH6FjgJe1PDN1uUuO8Zk/G1Z97S8vR+IefYiCRwXNOakenKbsiCqllH3hk7E8D wI8bIlVCYi9RPcio6lK0cG2d58NGMSjgrUDyqODGXmpTB5C37Y+qR3sjHlcP37iM V35BPwA+OeUE2dvyJ1Re4nJ/+os/NWBH -----END CERTIFICATE-----Generated at Thu Jul 3 12:15:34 2025 by rpki-client