$ rpki-client -vvf rpki.apnic.net/member_repository/A91577A2/8BC15C407B0411EA9DAAD432C4F9AE02/NtqOcqrHflUzc5DvTGHJVAtFldc.mft File: NtqOcqrHflUzc5DvTGHJVAtFldc.mft (raw, json) Hash identifier: KARjq3jHCWsR4sqXUbkqVfYlgK6hrXIVkQpDytvhWBc= Subject key identifier: 32:C1:EF:03:82:42:45:68:50:18:14:4F:56:C0:E4:B3:9A:12:B5:1A Authority key identifier: 36:DA:8E:72:AA:C7:7E:55:33:73:90:EF:4C:61:C9:54:0B:45:95:D7 Certificate issuer: /CN=A91577A2/serialNumber=36DA8E72AAC77E55337390EF4C61C9540B4595D7 Certificate serial: 0A25 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NtqOcqrHflUzc5DvTGHJVAtFldc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91577A2/8BC15C407B0411EA9DAAD432C4F9AE02/NtqOcqrHflUzc5DvTGHJVAtFldc.mft Manifest number: 0A0F Signing time: Mon 30 Jun 2025 20:00:25 +0000 Manifest this update: Mon 30 Jun 2025 20:00:24 +0000 Manifest next update: Mon 07 Jul 2025 20:00:24 +0000 Files and hashes: 1: NtqOcqrHflUzc5DvTGHJVAtFldc.crl (hash: R+B6TbZSXRo91gvAKgKGuEgLCJ72/zQ56RhL5rANPKs=) 2: 6A23E166499211ED879F2D11C4F9AE02.roa (hash: MzXzYE5MrqHvRoe17AJmK7I+zMsNRRFLd5oWGTmAVM0=) 3: 6B5765BC499211ED879F2D11C4F9AE02.roa (hash: 9GaBS9IbS88to+9kkQ6jxibXk5BWsO+3f5H1a6SCfEE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91577A2/8BC15C407B0411EA9DAAD432C4F9AE02/NtqOcqrHflUzc5DvTGHJVAtFldc.crl rsync://rpki.apnic.net/member_repository/A91577A2/8BC15C407B0411EA9DAAD432C4F9AE02/NtqOcqrHflUzc5DvTGHJVAtFldc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NtqOcqrHflUzc5DvTGHJVAtFldc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Jul 2025 20:00:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2597 (0xa25) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91577A2, serialNumber=36DA8E72AAC77E55337390EF4C61C9540B4595D7 Validity Not Before: Jun 30 20:00:24 2025 GMT Not After : Jul 7 20:00:24 2025 GMT Subject: CN=6862ecd9-968d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:23:e4:92:ed:19:de:05:7f:a4:b2:a3:b4:cf: 4c:f6:b3:5f:b1:7a:ca:be:8b:28:85:51:54:ed:6b: 25:0a:f1:9b:48:0f:f2:f5:4c:4f:15:71:fa:35:85: 21:54:e5:a6:21:99:af:99:a3:36:4b:b7:cc:c5:89: 69:3f:a4:f6:ef:04:dc:7e:cd:a3:9d:23:db:b1:06: 51:3e:0d:bd:0f:e9:db:64:7f:30:e4:9f:8c:94:90: b1:1f:ed:76:b4:e0:72:80:e2:c6:64:5d:46:1b:0d: 5a:c3:14:78:3d:af:89:63:e0:72:73:30:db:53:ba: 65:8a:e5:43:9a:9e:5c:1c:9f:15:5a:28:e8:b2:fb: 19:95:2c:85:e4:fb:a2:f2:b1:e2:95:1c:fc:c6:26: e3:90:1f:bd:5f:68:ec:11:2c:1e:26:92:45:92:60: 74:a6:87:00:b2:f1:f2:06:fb:ff:a0:96:3b:32:c7: b6:6f:3a:85:73:ed:57:36:a9:06:d2:95:9a:9b:6b: ac:e1:44:37:c0:05:cf:b9:54:24:97:cf:38:2f:cf: d1:19:21:34:88:7a:1e:01:01:ac:93:75:5e:89:5e: 76:c7:8f:45:9e:da:95:2f:a8:bc:cc:f8:ad:ad:15: ed:92:9f:90:46:80:34:84:81:45:3c:e4:0f:17:bd: 83:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:C1:EF:03:82:42:45:68:50:18:14:4F:56:C0:E4:B3:9A:12:B5:1A X509v3 Authority Key Identifier: keyid:36:DA:8E:72:AA:C7:7E:55:33:73:90:EF:4C:61:C9:54:0B:45:95:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91577A2/8BC15C407B0411EA9DAAD432C4F9AE02/NtqOcqrHflUzc5DvTGHJVAtFldc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NtqOcqrHflUzc5DvTGHJVAtFldc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91577A2/8BC15C407B0411EA9DAAD432C4F9AE02/NtqOcqrHflUzc5DvTGHJVAtFldc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ad:d4:90:48:df:d3:f8:1a:f6:54:c1:e5:a4:a5:fa:09:1c:8a: cf:8c:53:79:4d:8d:ef:3a:22:ff:4e:13:a9:bc:9e:ed:45:ce: 56:c7:97:d4:c9:9b:a3:6e:02:91:a4:b9:e6:07:3b:63:c1:df: 27:0a:59:61:80:d4:2c:2a:08:66:43:69:96:13:15:1f:65:af: 81:93:d6:cc:fa:a8:18:86:f9:2c:ba:6d:3e:85:5b:a2:de:58: 01:04:6a:12:74:19:4b:1b:fb:88:49:37:d0:e0:b1:39:8f:dd: 71:64:e0:c3:41:bd:e5:8a:cb:58:9a:37:02:57:43:3c:78:d7: a1:5b:16:a5:b2:e3:4b:a4:a0:97:67:0b:0a:42:3b:18:35:07: c8:98:88:00:3e:4a:9b:88:9e:fe:18:2b:ee:01:7c:9a:be:2e: 54:4e:44:10:3e:ac:e5:17:14:f2:3c:e5:4e:65:00:f5:26:7a: 98:e1:2a:da:09:70:b6:37:e0:1e:3c:92:4a:a1:cc:34:68:20: 63:cf:8b:ba:52:fe:d4:2b:9c:11:7f:2a:90:2f:c2:ee:b7:1a: 67:9b:fe:48:c0:4b:73:be:6e:4a:f9:d9:2a:ba:67:1c:e3:f9: af:7b:18:1f:d6:89:b2:91:91:2f:38:c0:1b:6f:d5:61:ec:e6: 8b:c4:01:35 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCiUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTc3QTIxMTAvBgNVBAUTKDM2REE4RTcyQUFDNzdFNTUzMzczOTBFRjRDNjFDOTU0 MEI0NTk1RDcwHhcNMjUwNjMwMjAwMDI0WhcNMjUwNzA3MjAwMDI0WjAYMRYwFAYD VQQDEw02ODYyZWNkOS05NjhkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwyPkku0Z3gV/pLKjtM9M9rNfsXrKvosohVFU7WslCvGbSA/y9UxPFXH6NYUh VOWmIZmvmaM2S7fMxYlpP6T27wTcfs2jnSPbsQZRPg29D+nbZH8w5J+MlJCxH+12 tOBygOLGZF1GGw1awxR4Pa+JY+ByczDbU7pliuVDmp5cHJ8VWijosvsZlSyF5Pui 8rHilRz8xibjkB+9X2jsESweJpJFkmB0pocAsvHyBvv/oJY7Mse2bzqFc+1XNqkG 0pWam2us4UQ3wAXPuVQkl884L8/RGSE0iHoeAQGsk3VeiV52x49FntqVL6i8zPit rRXtkp+QRoA0hIFFPOQPF72DZwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDLB7wOC QkVoUBgUT1bA5LOaErUaMB8GA1UdIwQYMBaAFDbajnKqx35VM3OQ70xhyVQLRZXX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NzdBMi84QkMxNUM0MDdC MDQxMUVBOURBQUQ0MzJDNEY5QUUwMi9OdHFPY3FySGZsVXpjNUR2VEdISlZBdEZs ZGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL050cU9jcXJIZmxVemM1RHZUR0hKVkF0RmxkYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NzdBMi84QkMxNUM0MDdCMDQxMUVBOURBQUQ0MzJDNEY5QUUwMi9OdHFPY3FySGZs VXpjNUR2VEdISlZBdEZsZGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCt1JBI39P4GvZUweWkpfoJHIrPjFN5TY3vOiL/ThOpvJ7tRc5Wx5fU yZujbgKRpLnmBztjwd8nCllhgNQsKghmQ2mWExUfZa+Bk9bM+qgYhvksum0+hVui 3lgBBGoSdBlLG/uISTfQ4LE5j91xZODDQb3listYmjcCV0M8eNehWxalsuNLpKCX ZwsKQjsYNQfImIgAPkqbiJ7+GCvuAXyavi5UTkQQPqzlFxTyPOVOZQD1JnqY4Sra CXC2N+AePJJKocw0aCBjz4u6Uv7UK5wRfyqQL8Lutxpnm/5IwEtzvm5K+dkqumcc 4/mvexgf1omykZEvOMAbb9Vh7OaLxAE1 -----END CERTIFICATE-----Generated at Tue Jul 1 13:22:48 2025 by rpki-client