$ rpki-client -vvf rpki.apnic.net/member_repository/A9152329/D086D55EA26811EF9D914118C4F9AE02/NsqppHOp6nOCn3NWgJvBYQOtA64.mft File: NsqppHOp6nOCn3NWgJvBYQOtA64.mft (raw, json) Hash identifier: S/94Cju8RfuPg9IZQAu+OOyOqkIfieVEFQA+j1OKolA= Subject key identifier: 6C:D1:3E:91:C3:0E:7F:EA:17:E5:4F:7F:7E:60:4A:12:F6:D3:9A:DF Authority key identifier: 36:CA:A9:A4:73:A9:EA:73:82:9F:73:56:80:9B:C1:61:03:AD:03:AE Certificate issuer: /CN=A9152329/serialNumber=36CAA9A473A9EA73829F7356809BC16103AD03AE Certificate serial: 77 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NsqppHOp6nOCn3NWgJvBYQOtA64.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9152329/D086D55EA26811EF9D914118C4F9AE02/NsqppHOp6nOCn3NWgJvBYQOtA64.mft Manifest number: 77 Signing time: Thu 03 Jul 2025 07:01:10 +0000 Manifest this update: Thu 03 Jul 2025 07:01:09 +0000 Manifest next update: Thu 10 Jul 2025 07:01:09 +0000 Files and hashes: 1: NsqppHOp6nOCn3NWgJvBYQOtA64.crl (hash: aha8+0Fvrm1C5Ox47fVQMlDL6ENNd1At+oNXgAQvId0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9152329/D086D55EA26811EF9D914118C4F9AE02/NsqppHOp6nOCn3NWgJvBYQOtA64.crl rsync://rpki.apnic.net/member_repository/A9152329/D086D55EA26811EF9D914118C4F9AE02/NsqppHOp6nOCn3NWgJvBYQOtA64.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NsqppHOp6nOCn3NWgJvBYQOtA64.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 119 (0x77) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9152329, serialNumber=36CAA9A473A9EA73829F7356809BC16103AD03AE Validity Not Before: Jul 3 07:01:09 2025 GMT Not After : Jul 10 07:01:09 2025 GMT Subject: CN=68662ab6-2756 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:a8:56:3b:3b:10:e0:d5:e8:92:59:b6:64:04: 3b:23:b8:0c:a4:f7:d9:c7:a9:ce:b0:26:c2:e0:09: 4c:4a:35:0b:e6:16:80:69:aa:ca:b0:f6:79:3f:e5: de:cb:3e:33:ba:a8:f1:88:ef:19:96:04:d7:65:a5: 11:ca:39:5f:3d:59:43:cb:2e:41:a7:8e:1f:35:f3: ba:07:0d:b3:49:b2:69:d8:85:a4:7a:13:a6:0a:10: 1f:33:dc:6a:46:08:c6:a2:24:aa:47:7f:03:39:b5: a8:42:6f:68:b9:e3:70:1e:8d:bb:ef:9d:f9:ab:85: 7d:b6:b1:78:55:6f:71:f6:9f:d1:8b:8c:9c:b2:03: 2e:5c:14:f9:00:b6:2e:21:3b:9b:05:f3:73:65:d9: 1f:3e:88:00:eb:24:cf:ac:b2:6b:bd:67:e2:d6:a3: c9:2b:40:cb:86:04:c6:04:2b:a6:98:bf:e6:4e:c7: 54:dc:91:98:05:20:47:08:99:c5:76:f1:2e:b6:a9: 15:cd:51:b8:15:50:96:35:dc:08:43:e5:8c:d9:07: ca:92:0a:8f:7a:08:e2:6f:0b:1c:35:41:63:63:1f: 06:78:85:55:69:f9:97:0b:44:93:3b:1e:ac:cb:a9: 5e:bb:fb:fe:46:fa:f6:41:13:4c:3e:93:3a:d6:7c: 88:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:D1:3E:91:C3:0E:7F:EA:17:E5:4F:7F:7E:60:4A:12:F6:D3:9A:DF X509v3 Authority Key Identifier: keyid:36:CA:A9:A4:73:A9:EA:73:82:9F:73:56:80:9B:C1:61:03:AD:03:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9152329/D086D55EA26811EF9D914118C4F9AE02/NsqppHOp6nOCn3NWgJvBYQOtA64.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NsqppHOp6nOCn3NWgJvBYQOtA64.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9152329/D086D55EA26811EF9D914118C4F9AE02/NsqppHOp6nOCn3NWgJvBYQOtA64.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 74:5c:b7:dc:ec:d5:7e:34:90:10:62:dd:82:49:b8:ed:7c:f0: 47:35:ac:a7:0f:77:10:01:d7:3c:4a:71:c0:3e:85:18:2c:39: 5a:c8:39:f1:55:eb:73:4e:fd:7b:d0:d4:b9:06:dd:65:8a:8b: 24:d9:4a:05:28:df:30:44:ab:f9:27:42:c5:2e:3f:8c:c6:6c: d5:b0:68:d8:6c:9d:c4:23:93:cb:a8:8a:fb:4a:88:41:09:84: cf:86:d9:79:ee:a9:57:32:24:98:77:6c:fd:23:e1:d8:6a:79: 52:40:09:9c:a5:a4:c8:5c:14:a1:9e:32:5b:bb:be:da:51:62: fa:44:45:93:ec:7d:d7:18:a8:2e:23:f8:3a:4b:4a:cf:02:73: b1:ba:95:1b:cd:73:ad:cf:4f:b6:19:af:ae:67:2b:24:04:6f: 65:89:c8:96:dc:c4:0e:67:98:f9:4c:f5:b6:0b:12:bb:64:b7: 60:68:94:a7:3f:08:36:6e:56:07:e3:15:30:bc:c6:43:68:1c: 4f:4f:28:46:08:7d:82:b4:1d:b8:c6:40:11:1a:c2:97:b8:7e: db:ee:fc:36:45:c0:e3:b2:bd:51:5e:ac:f5:55:ff:f4:05:d2: 91:eb:8b:57:c4:1c:7e:a2:df:e5:6b:78:62:27:4e:a5:13:9b: 66:d0:47:cb -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBdzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 MjMyOTExMC8GA1UEBRMoMzZDQUE5QTQ3M0E5RUE3MzgyOUY3MzU2ODA5QkMxNjEw M0FEMDNBRTAeFw0yNTA3MDMwNzAxMDlaFw0yNTA3MTAwNzAxMDlaMBgxFjAUBgNV BAMTDTY4NjYyYWI2LTI3NTYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCaqFY7OxDg1eiSWbZkBDsjuAyk99nHqc6wJsLgCUxKNQvmFoBpqsqw9nk/5d7L PjO6qPGI7xmWBNdlpRHKOV89WUPLLkGnjh8187oHDbNJsmnYhaR6E6YKEB8z3GpG CMaiJKpHfwM5tahCb2i543AejbvvnfmrhX22sXhVb3H2n9GLjJyyAy5cFPkAti4h O5sF83Nl2R8+iADrJM+ssmu9Z+LWo8krQMuGBMYEK6aYv+ZOx1TckZgFIEcImcV2 8S62qRXNUbgVUJY13AhD5YzZB8qSCo96COJvCxw1QWNjHwZ4hVVp+ZcLRJM7HqzL qV67+/5G+vZBE0w+kzrWfIhfAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUbNE+kcMO f+oX5U9/fmBKEvbTmt8wHwYDVR0jBBgwFoAUNsqppHOp6nOCn3NWgJvBYQOtA64w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTUyMzI5L0QwODZENTVFQTI2 ODExRUY5RDkxNDExOEM0RjlBRTAyL05zcXBwSE9wNm5PQ24zTldnSnZCWVFPdEE2 NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvTnNxcHBIT3A2bk9DbjNOV2dKdkJZUU90QTY0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTUy MzI5L0QwODZENTVFQTI2ODExRUY5RDkxNDExOEM0RjlBRTAyL05zcXBwSE9wNm5P Q24zTldnSnZCWVFPdEE2NC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAHRct9zs1X40kBBi3YJJuO188Ec1rKcPdxAB1zxKccA+hRgsOVrIOfFV 63NO/XvQ1LkG3WWKiyTZSgUo3zBEq/knQsUuP4zGbNWwaNhsncQjk8uoivtKiEEJ hM+G2XnuqVcyJJh3bP0j4dhqeVJACZylpMhcFKGeMlu7vtpRYvpERZPsfdcYqC4j +DpLSs8Cc7G6lRvNc63PT7YZr65nKyQEb2WJyJbcxA5nmPlM9bYLErtkt2BolKc/ CDZuVgfjFTC8xkNoHE9PKEYIfYK0HbjGQBEawpe4ftvu/DZFwOOyvVFerPVV//QF 0pHri1fEHH6i3+VreGInTqUTm2bQR8s= -----END CERTIFICATE-----Generated at Fri Jul 4 19:05:35 2025 by rpki-client