$ rpki-client -vvf rpki.apnic.net/member_repository/A914DC56/CDBCF63A669311EE98CEAA50C4F9AE02/nmoKpDnP40ewT3RoQKbkNMUJsac.mft File: nmoKpDnP40ewT3RoQKbkNMUJsac.mft (raw, json) Hash identifier: zIa+iVtRwZVjEEsBo67qW7/wduo6JyDNNLm2RwHaN9c= Subject key identifier: 0F:AE:7D:49:28:CF:9E:04:C5:CA:55:4C:95:8B:97:37:84:FC:03:CA Authority key identifier: 9E:6A:0A:A4:39:CF:E3:47:B0:4F:74:68:40:A6:E4:34:C5:09:B1:A7 Certificate issuer: /CN=A914DC56/serialNumber=9E6A0AA439CFE347B04F746840A6E434C509B1A7 Certificate serial: 014A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nmoKpDnP40ewT3RoQKbkNMUJsac.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914DC56/CDBCF63A669311EE98CEAA50C4F9AE02/nmoKpDnP40ewT3RoQKbkNMUJsac.mft Manifest number: 0147 Signing time: Thu 03 Jul 2025 04:23:48 +0000 Manifest this update: Thu 03 Jul 2025 04:23:48 +0000 Manifest next update: Thu 10 Jul 2025 04:23:48 +0000 Files and hashes: 1: nmoKpDnP40ewT3RoQKbkNMUJsac.crl (hash: gr/k3UW68OM+5ANRzv8MJH5gM4hzWjtHBhcykU5VS/I=) 2: 11A843B467D811EEA0543B5CC4F9AE02.roa (hash: JGrxdfcTXN7WXmiB33mKDnWSPFdrh+A/TvrelqjBL5s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914DC56/CDBCF63A669311EE98CEAA50C4F9AE02/nmoKpDnP40ewT3RoQKbkNMUJsac.crl rsync://rpki.apnic.net/member_repository/A914DC56/CDBCF63A669311EE98CEAA50C4F9AE02/nmoKpDnP40ewT3RoQKbkNMUJsac.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nmoKpDnP40ewT3RoQKbkNMUJsac.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 330 (0x14a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914DC56, serialNumber=9E6A0AA439CFE347B04F746840A6E434C509B1A7 Validity Not Before: Jul 3 04:23:48 2025 GMT Not After : Jul 10 04:23:48 2025 GMT Subject: CN=686605d4-7215 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:e4:fc:ed:8e:1e:b4:f0:d7:69:0f:54:b5:ba: 0e:67:ac:85:33:b0:dd:9e:e9:0b:2f:a8:c4:24:0a: ec:ca:de:5f:fd:97:37:db:b2:2b:5e:25:79:16:45: 4b:25:44:27:59:3f:b7:67:c4:5d:29:e7:6c:84:6d: c0:27:08:51:f2:09:4c:5b:3b:4c:0f:75:91:6c:da: 32:25:57:2c:a6:b5:10:99:d2:06:4a:1f:7b:e0:89: 99:dc:b9:09:b0:4e:99:11:d4:12:2f:c5:d7:58:7f: 85:7e:c8:4e:a0:fb:1a:9b:b0:af:99:c2:27:9f:f5: e7:95:37:d9:e1:52:2f:29:f8:4c:36:3c:05:9c:f1: e9:b7:c1:d1:c2:41:8a:1c:18:35:fa:b0:a1:2c:ad: ad:f0:6c:5f:cb:cf:02:13:bd:37:4d:bd:d1:3a:ef: 73:f5:0c:52:19:f9:13:32:9b:de:fa:93:54:97:09: 4b:bc:e8:f2:6e:1a:4b:3e:ab:eb:e7:f4:16:dc:3e: ab:b4:4e:4a:5a:55:61:6f:01:53:35:a7:3e:7b:a1: 6a:2a:7f:b8:4d:35:91:45:2a:49:d2:50:36:5c:bb: cd:ca:4f:79:1b:f4:04:e2:f1:21:40:64:05:2c:df: 20:8e:7e:bf:8a:02:a5:1c:71:f1:0c:19:4e:ac:12: a3:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:AE:7D:49:28:CF:9E:04:C5:CA:55:4C:95:8B:97:37:84:FC:03:CA X509v3 Authority Key Identifier: keyid:9E:6A:0A:A4:39:CF:E3:47:B0:4F:74:68:40:A6:E4:34:C5:09:B1:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914DC56/CDBCF63A669311EE98CEAA50C4F9AE02/nmoKpDnP40ewT3RoQKbkNMUJsac.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nmoKpDnP40ewT3RoQKbkNMUJsac.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914DC56/CDBCF63A669311EE98CEAA50C4F9AE02/nmoKpDnP40ewT3RoQKbkNMUJsac.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption af:8b:76:ee:45:be:ac:df:ac:28:f5:f4:65:a1:a2:5f:db:14: 7c:b2:1f:c5:4c:19:71:6d:e2:5f:3d:f6:c1:2b:20:29:4b:7f: 66:fe:a8:a2:bf:79:fc:97:50:af:95:5d:28:da:68:c1:ad:d0: 19:a4:ee:13:37:84:ef:df:7b:d3:ed:cb:1b:2e:60:ad:9f:1e: 78:69:b8:27:18:d2:6e:48:3b:1a:7a:03:73:7a:1a:97:75:6d: 24:03:98:16:0f:a6:7b:a4:63:d3:1a:4f:8d:23:b4:bc:68:54: b5:e6:41:b4:52:89:9d:b5:52:69:dd:36:61:e3:98:4b:19:ff: b7:7f:98:d9:66:23:05:14:62:d9:ec:e3:a5:e9:7e:0c:a3:d8: 6c:e9:73:ef:96:c9:be:1d:99:f4:56:d6:e5:6d:71:8b:cd:98: 4a:41:73:ec:a5:46:23:62:c0:c2:06:6c:5d:d1:0d:e9:28:09: 2e:a1:89:56:32:1c:de:f8:1b:36:88:1a:a2:ab:0e:57:8b:70: 61:f0:d2:5c:e8:ee:4b:e6:3c:ad:95:12:f4:8e:01:dd:ac:fe: 86:51:de:88:44:5a:7b:1c:cb:28:28:d0:27:c4:0b:96:8f:94: d4:e0:0f:4c:5a:f1:14:cc:c3:99:33:3a:1a:35:44:e8:83:27: c1:7c:37:3c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAUowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NERDNTYxMTAvBgNVBAUTKDlFNkEwQUE0MzlDRkUzNDdCMDRGNzQ2ODQwQTZFNDM0 QzUwOUIxQTcwHhcNMjUwNzAzMDQyMzQ4WhcNMjUwNzEwMDQyMzQ4WjAYMRYwFAYD VQQDEw02ODY2MDVkNC03MjE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAn+T87Y4etPDXaQ9UtboOZ6yFM7DdnukLL6jEJArsyt5f/Zc327IrXiV5FkVL JUQnWT+3Z8RdKedshG3AJwhR8glMWztMD3WRbNoyJVcsprUQmdIGSh974ImZ3LkJ sE6ZEdQSL8XXWH+FfshOoPsam7CvmcInn/XnlTfZ4VIvKfhMNjwFnPHpt8HRwkGK HBg1+rChLK2t8Gxfy88CE703Tb3ROu9z9QxSGfkTMpve+pNUlwlLvOjybhpLPqvr 5/QW3D6rtE5KWlVhbwFTNac+e6FqKn+4TTWRRSpJ0lA2XLvNyk95G/QE4vEhQGQF LN8gjn6/igKlHHHxDBlOrBKjTQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA+ufUko z54ExcpVTJWLlzeE/APKMB8GA1UdIwQYMBaAFJ5qCqQ5z+NHsE90aECm5DTFCbGn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0REM1Ni9DREJDRjYzQTY2 OTMxMUVFOThDRUFBNTBDNEY5QUUwMi9ubW9LcERuUDQwZXdUM1JvUUtia05NVUpz YWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25tb0twRG5QNDBld1QzUm9RS2JrTk1VSnNhYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 REM1Ni9DREJDRjYzQTY2OTMxMUVFOThDRUFBNTBDNEY5QUUwMi9ubW9LcERuUDQw ZXdUM1JvUUtia05NVUpzYWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCvi3buRb6s36wo9fRloaJf2xR8sh/FTBlxbeJfPfbBKyApS39m/qii v3n8l1CvlV0o2mjBrdAZpO4TN4Tv33vT7csbLmCtnx54abgnGNJuSDsaegNzehqX dW0kA5gWD6Z7pGPTGk+NI7S8aFS15kG0UomdtVJp3TZh45hLGf+3f5jZZiMFFGLZ 7OOl6X4Mo9hs6XPvlsm+HZn0VtblbXGLzZhKQXPspUYjYsDCBmxd0Q3pKAkuoYlW Mhze+Bs2iBqiqw5Xi3Bh8NJc6O5L5jytlRL0jgHdrP6GUd6IRFp7HMsoKNAnxAuW j5TU4A9MWvEUzMOZMzoaNUTogyfBfDc8 -----END CERTIFICATE-----Generated at Thu Jul 3 23:31:05 2025 by rpki-client