$ rpki-client -vvf rpki.apnic.net/member_repository/A915517D/3D7A6286CF5611E7BF695510C4F9AE02/NEp3XiRcztCAx5UhWW4yyPBtiMg.mft File: NEp3XiRcztCAx5UhWW4yyPBtiMg.mft (raw, json) Hash identifier: ysYjkTp+iicO4u5dsFiutaH6Maa2U8HfAMtjN7TzzYE= Subject key identifier: 11:E7:5B:69:7E:9F:FD:3A:6D:9A:CC:BD:56:ED:8A:EB:02:DA:03:7B Authority key identifier: 34:4A:77:5E:24:5C:CE:D0:80:C7:95:21:59:6E:32:C8:F0:6D:88:C8 Certificate issuer: /CN=A915517D/serialNumber=344A775E245CCED080C79521596E32C8F06D88C8 Certificate serial: 17B4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NEp3XiRcztCAx5UhWW4yyPBtiMg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915517D/3D7A6286CF5611E7BF695510C4F9AE02/NEp3XiRcztCAx5UhWW4yyPBtiMg.mft Manifest number: 179F Signing time: Wed 02 Jul 2025 16:42:41 +0000 Manifest this update: Wed 02 Jul 2025 16:42:41 +0000 Manifest next update: Wed 09 Jul 2025 16:42:41 +0000 Files and hashes: 1: NEp3XiRcztCAx5UhWW4yyPBtiMg.crl (hash: scUsa+EdxOZ7y1J9O+kFuEkSbD+ASdqpCo3l9hq9rlg=) 2: 2F840DD2740911EDA7146F2DC4F9AE02.roa (hash: PKyy2enQZwJAPAGB65CItDAb1Yve/y7L5I1YK7Ph1yU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915517D/3D7A6286CF5611E7BF695510C4F9AE02/NEp3XiRcztCAx5UhWW4yyPBtiMg.crl rsync://rpki.apnic.net/member_repository/A915517D/3D7A6286CF5611E7BF695510C4F9AE02/NEp3XiRcztCAx5UhWW4yyPBtiMg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NEp3XiRcztCAx5UhWW4yyPBtiMg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 16:42:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6068 (0x17b4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915517D, serialNumber=344A775E245CCED080C79521596E32C8F06D88C8 Validity Not Before: Jul 2 16:42:41 2025 GMT Not After : Jul 9 16:42:41 2025 GMT Subject: CN=68656181-2939 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:60:06:19:a6:6e:9f:d2:60:53:40:01:83:9e: 92:da:60:28:db:a8:bd:b7:22:26:9e:77:e0:04:9c: 4a:1d:57:1a:e7:d2:73:5d:19:52:11:1e:e0:20:0f: 8a:83:f9:e6:0e:f4:78:e6:6e:0f:7f:e8:ab:24:28: d2:5c:0f:6d:4e:7a:ea:99:c8:42:2e:5f:8a:55:d4: 61:12:e7:e5:b2:f2:a3:50:df:e2:8f:ad:d2:0d:2e: e9:67:fc:82:b5:b1:43:ce:50:9d:db:d7:8e:5b:99: a4:5b:e5:51:1c:73:63:42:84:c8:3f:5c:5a:86:dd: 5d:9b:4e:11:d0:69:d7:cd:75:96:86:4a:39:d8:4f: 3e:c7:8c:69:a9:0c:06:64:44:26:24:a3:9d:d6:f8: 5e:89:07:5e:a8:6f:6f:3f:7b:2c:aa:4b:e0:5e:99: f9:de:5b:4d:f4:65:3b:06:34:94:8d:34:3d:24:a5: de:6d:b2:6f:a0:0c:d7:fb:af:1c:9f:76:94:c2:4d: 65:85:4a:4c:58:51:95:8c:3e:90:6c:db:72:11:44: eb:6e:91:9e:ff:9e:3d:b1:a8:ae:cb:73:57:39:81: 3f:3c:f8:ed:64:c7:a4:4c:a1:2b:ea:67:74:6f:33: 3a:05:9d:ed:6c:a3:2f:01:4f:a8:35:ff:8e:4a:ce: cb:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:E7:5B:69:7E:9F:FD:3A:6D:9A:CC:BD:56:ED:8A:EB:02:DA:03:7B X509v3 Authority Key Identifier: keyid:34:4A:77:5E:24:5C:CE:D0:80:C7:95:21:59:6E:32:C8:F0:6D:88:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915517D/3D7A6286CF5611E7BF695510C4F9AE02/NEp3XiRcztCAx5UhWW4yyPBtiMg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NEp3XiRcztCAx5UhWW4yyPBtiMg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915517D/3D7A6286CF5611E7BF695510C4F9AE02/NEp3XiRcztCAx5UhWW4yyPBtiMg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 17:cf:38:91:1f:25:d7:e2:d9:df:e4:39:38:80:ac:e8:9d:c5: 2b:a2:28:ed:f1:d1:25:8d:46:a1:20:1a:46:b4:79:7a:e3:87: 74:5a:69:c6:a6:e0:89:a5:1d:6a:99:f2:b3:26:56:a4:6f:1d: 5b:66:7c:ee:5f:76:c3:c5:80:ae:97:6f:ef:d1:15:fc:50:84: 52:b1:c1:b0:5f:86:4f:c4:fe:9b:05:e6:da:cb:dc:85:16:23: df:f8:03:13:a8:5e:b1:c2:bb:5e:5b:5f:c8:40:63:9b:b3:2b: 2a:19:48:2f:5e:35:22:5f:7c:22:9e:a9:ab:98:ff:e2:a5:16: 95:b8:da:a0:c0:ad:58:00:02:58:d7:d3:03:84:eb:1b:e5:7d: 81:05:8d:ae:8f:4e:26:1a:4f:5c:d4:43:8f:fb:df:fb:03:0e: 79:36:d8:fe:db:c5:46:22:57:65:26:65:ac:0d:2e:c8:c2:25: 90:6b:24:2d:03:0d:5f:d3:f0:c7:33:ba:9f:af:26:fb:f0:a0: e0:75:91:01:b7:fa:cf:cc:7b:79:0d:22:b4:0d:21:e0:d4:25: 14:5d:e2:b5:aa:3b:ab:6c:03:62:35:4c:94:53:0d:8f:9e:8a: 37:a4:9a:82:26:da:a9:5d:52:0f:76:87:74:35:a1:48:ff:19: f7:d1:07:08 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICF7QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTUxN0QxMTAvBgNVBAUTKDM0NEE3NzVFMjQ1Q0NFRDA4MEM3OTUyMTU5NkUzMkM4 RjA2RDg4QzgwHhcNMjUwNzAyMTY0MjQxWhcNMjUwNzA5MTY0MjQxWjAYMRYwFAYD VQQDEw02ODY1NjE4MS0yOTM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp2AGGaZun9JgU0ABg56S2mAo26i9tyImnnfgBJxKHVca59JzXRlSER7gIA+K g/nmDvR45m4Pf+irJCjSXA9tTnrqmchCLl+KVdRhEuflsvKjUN/ij63SDS7pZ/yC tbFDzlCd29eOW5mkW+VRHHNjQoTIP1xaht1dm04R0GnXzXWWhko52E8+x4xpqQwG ZEQmJKOd1vheiQdeqG9vP3ssqkvgXpn53ltN9GU7BjSUjTQ9JKXebbJvoAzX+68c n3aUwk1lhUpMWFGVjD6QbNtyEUTrbpGe/549saiuy3NXOYE/PPjtZMekTKEr6md0 bzM6BZ3tbKMvAU+oNf+OSs7LUQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBHnW2l+ n/06bZrMvVbtiusC2gN7MB8GA1UdIwQYMBaAFDRKd14kXM7QgMeVIVluMsjwbYjI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NTE3RC8zRDdBNjI4NkNG NTYxMUU3QkY2OTU1MTBDNEY5QUUwMi9ORXAzWGlSY3p0Q0F4NVVoV1c0eXlQQnRp TWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05FcDNYaVJjenRDQXg1VWhXVzR5eVBCdGlNZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NTE3RC8zRDdBNjI4NkNGNTYxMUU3QkY2OTU1MTBDNEY5QUUwMi9ORXAzWGlSY3p0 Q0F4NVVoV1c0eXlQQnRpTWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAXzziRHyXX4tnf5Dk4gKzoncUroijt8dEljUahIBpGtHl644d0WmnG puCJpR1qmfKzJlakbx1bZnzuX3bDxYCul2/v0RX8UIRSscGwX4ZPxP6bBebay9yF FiPf+AMTqF6xwrteW1/IQGObsysqGUgvXjUiX3winqmrmP/ipRaVuNqgwK1YAAJY 19MDhOsb5X2BBY2uj04mGk9c1EOP+9/7Aw55Ntj+28VGIldlJmWsDS7IwiWQayQt Aw1f0/DHM7qfryb78KDgdZEBt/rPzHt5DSK0DSHg1CUUXeK1qjurbANiNUyUUw2P noo3pJqCJtqpXVIPdod0NaFI/xn30QcI -----END CERTIFICATE-----Generated at Thu Jul 3 10:52:06 2025 by rpki-client