$ rpki-client -vvf rpki.apnic.net/member_repository/A9150A9C/2A29484CABA811EA95CE2C16C4F9AE02/Nn4fr3UsYx_EPYcgmCQOgDIVdcc.mft File: Nn4fr3UsYx_EPYcgmCQOgDIVdcc.mft (raw, json) Hash identifier: AB2mqqGGH+sQXTXvJi8N+4i7RmnlCtBljMgrz6A//kM= Subject key identifier: EC:1C:A0:58:89:51:66:E3:2E:5D:84:E3:06:CC:9E:E9:1A:03:BE:3E Authority key identifier: 36:7E:1F:AF:75:2C:63:1F:C4:3D:87:20:98:24:0E:80:32:15:75:C7 Certificate issuer: /CN=A9150A9C/serialNumber=367E1FAF752C631FC43D872098240E80321575C7 Certificate serial: 0906 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nn4fr3UsYx_EPYcgmCQOgDIVdcc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9150A9C/2A29484CABA811EA95CE2C16C4F9AE02/Nn4fr3UsYx_EPYcgmCQOgDIVdcc.mft Manifest number: 08FE Signing time: Mon 30 Jun 2025 20:31:39 +0000 Manifest this update: Mon 30 Jun 2025 20:31:39 +0000 Manifest next update: Mon 07 Jul 2025 20:31:39 +0000 Files and hashes: 1: Nn4fr3UsYx_EPYcgmCQOgDIVdcc.crl (hash: dAS4m02zm7/GFsJTJ0khjV1BEHr41OaKae9NAhuj1og=) 2: E04ADD7CB2E511EAA94E5634C4F9AE02.roa (hash: SDDF+daD6uA45d2pVbzA/cw/2JyMm9s9TzTDlHyfXN0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9150A9C/2A29484CABA811EA95CE2C16C4F9AE02/Nn4fr3UsYx_EPYcgmCQOgDIVdcc.crl rsync://rpki.apnic.net/member_repository/A9150A9C/2A29484CABA811EA95CE2C16C4F9AE02/Nn4fr3UsYx_EPYcgmCQOgDIVdcc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nn4fr3UsYx_EPYcgmCQOgDIVdcc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Jul 2025 20:31:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2310 (0x906) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9150A9C, serialNumber=367E1FAF752C631FC43D872098240E80321575C7 Validity Not Before: Jun 30 20:31:39 2025 GMT Not After : Jul 7 20:31:39 2025 GMT Subject: CN=6862f42b-021b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:fb:52:4d:ea:93:98:43:75:ff:af:47:e5:81: f4:8b:a0:d1:9b:dd:ae:6f:9b:45:59:d2:42:24:c8: ea:53:4b:6a:35:07:c3:6d:60:aa:dd:24:39:0f:37: c2:a3:5a:20:d4:fb:66:51:46:ff:31:b5:49:2e:b7: b0:19:19:d2:0b:0f:6e:8e:11:6f:bc:26:f0:64:3a: c3:c3:24:fe:50:59:56:b0:54:7d:d7:67:e6:7d:5c: c9:d2:45:87:f4:c1:35:fa:4c:c4:8c:69:e2:7c:2e: c9:cf:7c:84:d9:52:61:0c:aa:11:d1:de:fc:8e:4f: d5:71:99:f5:4f:80:75:87:18:08:a8:43:11:c3:4e: 3d:59:c2:c5:0d:56:29:c9:c8:82:98:77:d8:4d:d2: de:9b:4c:0d:d1:a8:81:67:8a:4e:29:43:ac:04:13: ca:28:a6:75:e6:f4:16:26:fd:52:68:24:d8:49:4d: 2d:55:d8:2f:48:5e:4f:a1:05:6c:4f:57:3c:c7:7d: bc:e4:1e:a3:89:c0:1d:ee:b8:97:1d:4c:4f:d2:0b: b7:2d:80:fe:cf:2b:90:57:d2:e6:18:5d:23:63:c6: 87:3e:b3:5a:7a:fe:db:f4:6a:77:85:53:3e:fe:e3: 18:ec:fd:89:d9:d8:4e:2a:c7:ae:15:dc:47:19:19: 2a:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:1C:A0:58:89:51:66:E3:2E:5D:84:E3:06:CC:9E:E9:1A:03:BE:3E X509v3 Authority Key Identifier: keyid:36:7E:1F:AF:75:2C:63:1F:C4:3D:87:20:98:24:0E:80:32:15:75:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9150A9C/2A29484CABA811EA95CE2C16C4F9AE02/Nn4fr3UsYx_EPYcgmCQOgDIVdcc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nn4fr3UsYx_EPYcgmCQOgDIVdcc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9150A9C/2A29484CABA811EA95CE2C16C4F9AE02/Nn4fr3UsYx_EPYcgmCQOgDIVdcc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b1:0a:0d:1f:54:2f:49:ad:69:d8:05:b1:20:dd:a1:54:d5:a9: 34:16:12:00:d7:4b:8c:17:f4:d6:50:15:45:e5:4e:d7:29:35: 21:fc:04:20:44:53:89:50:f1:51:f2:86:b6:54:f6:8d:b3:a3: 51:c0:cc:4c:6c:c6:dc:3f:c7:13:4c:9d:04:e2:7d:47:d2:fe: 77:0f:4a:15:60:72:50:01:29:11:33:d1:0e:26:79:3e:7b:bf: 9c:fc:b0:c5:c1:40:36:5f:7e:15:93:85:9d:68:cd:88:46:ed: 7e:2b:7b:bb:c3:01:f1:84:8c:00:1a:3d:f9:e7:9a:38:7f:42: bd:4b:f3:68:88:92:14:59:ec:14:84:85:cf:f7:d2:6f:d3:2b: c8:dc:1e:c3:b1:a5:03:1b:5e:3b:07:86:50:b1:2c:c0:2a:96: 38:91:50:e8:b4:ae:eb:64:88:20:18:6b:3e:7a:4a:61:bb:57: ab:75:21:14:5b:0a:82:f7:a9:66:ce:2a:9f:24:01:d0:49:d6: af:57:d9:3e:e0:7a:a1:36:fd:74:67:36:53:f5:40:a8:d5:fa: b5:2f:0d:17:7c:57:a4:ae:50:36:27:ea:e7:b8:33:05:3c:86: 73:a3:e8:b0:be:70:e2:45:7b:b9:88:61:d3:2e:f1:d8:34:0e: 78:a4:6b:5c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCQYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTBBOUMxMTAvBgNVBAUTKDM2N0UxRkFGNzUyQzYzMUZDNDNEODcyMDk4MjQwRTgw MzIxNTc1QzcwHhcNMjUwNjMwMjAzMTM5WhcNMjUwNzA3MjAzMTM5WjAYMRYwFAYD VQQDEw02ODYyZjQyYi0wMjFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5ftSTeqTmEN1/69H5YH0i6DRm92ub5tFWdJCJMjqU0tqNQfDbWCq3SQ5DzfC o1og1PtmUUb/MbVJLrewGRnSCw9ujhFvvCbwZDrDwyT+UFlWsFR912fmfVzJ0kWH 9ME1+kzEjGnifC7Jz3yE2VJhDKoR0d78jk/VcZn1T4B1hxgIqEMRw049WcLFDVYp yciCmHfYTdLem0wN0aiBZ4pOKUOsBBPKKKZ15vQWJv1SaCTYSU0tVdgvSF5PoQVs T1c8x3285B6jicAd7riXHUxP0gu3LYD+zyuQV9LmGF0jY8aHPrNaev7b9Gp3hVM+ /uMY7P2J2dhOKseuFdxHGRkqMQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOwcoFiJ UWbjLl2E4wbMnukaA74+MB8GA1UdIwQYMBaAFDZ+H691LGMfxD2HIJgkDoAyFXXH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MEE5Qy8yQTI5NDg0Q0FC QTgxMUVBOTVDRTJDMTZDNEY5QUUwMi9ObjRmcjNVc1l4X0VQWWNnbUNRT2dESVZk Y2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05uNGZyM1VzWXhfRVBZY2dtQ1FPZ0RJVmRjYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MEE5Qy8yQTI5NDg0Q0FCQTgxMUVBOTVDRTJDMTZDNEY5QUUwMi9ObjRmcjNVc1l4 X0VQWWNnbUNRT2dESVZkY2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCxCg0fVC9JrWnYBbEg3aFU1ak0FhIA10uMF/TWUBVF5U7XKTUh/AQg RFOJUPFR8oa2VPaNs6NRwMxMbMbcP8cTTJ0E4n1H0v53D0oVYHJQASkRM9EOJnk+ e7+c/LDFwUA2X34Vk4WdaM2IRu1+K3u7wwHxhIwAGj3555o4f0K9S/NoiJIUWewU hIXP99Jv0yvI3B7DsaUDG147B4ZQsSzAKpY4kVDotK7rZIggGGs+ekphu1erdSEU WwqC96lmziqfJAHQSdavV9k+4HqhNv10ZzZT9UCo1fq1Lw0XfFekrlA2J+rnuDMF PIZzo+iwvnDiRXu5iGHTLvHYNA54pGtc -----END CERTIFICATE-----Generated at Wed Jul 2 12:38:08 2025 by rpki-client