$ rpki-client -vvf rpki.apnic.net/member_repository/A9161F3E/339EDE6810E411F0B75B8166C4F9AE02/nOkX3Drgxboud8t3WjrZnGhcQGs.mft File: nOkX3Drgxboud8t3WjrZnGhcQGs.mft (raw, json) Hash identifier: Xo2gwJyplGnrldUpHUOe0TyATqZ6BZSyrsrrX+qEGcQ= Subject key identifier: 99:89:2F:F2:89:D9:8F:AA:27:6F:B8:96:66:7D:43:3E:D1:35:B9:7B Authority key identifier: 9C:E9:17:DC:3A:E0:C5:BA:2E:77:CB:77:5A:3A:D9:9C:68:5C:40:6B Certificate issuer: /CN=A9161F3E/serialNumber=9CE917DC3AE0C5BA2E77CB775A3AD99C685C406B Certificate serial: 31 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nOkX3Drgxboud8t3WjrZnGhcQGs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9161F3E/339EDE6810E411F0B75B8166C4F9AE02/nOkX3Drgxboud8t3WjrZnGhcQGs.mft Manifest number: 2F Signing time: Thu 03 Jul 2025 07:56:35 +0000 Manifest this update: Thu 03 Jul 2025 07:56:34 +0000 Manifest next update: Thu 10 Jul 2025 07:56:34 +0000 Files and hashes: 1: nOkX3Drgxboud8t3WjrZnGhcQGs.crl (hash: Q9HsTDcX15MamJh8y2OZIeqFaRBv/qIWbxGa26eABVg=) 2: 49DEAEDC12A711F099020A73C4F9AE02.roa (hash: ZDuunhoBLIFxkgffUJp6fhz6W2Ysr7yM0HyGKDGLaSU=) 3: 4A3C802012A711F099020A73C4F9AE02.roa (hash: EvMFCkIZLxU/4T9yDv4rTrnplB41rjMOAziWwMgP5hQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9161F3E/339EDE6810E411F0B75B8166C4F9AE02/nOkX3Drgxboud8t3WjrZnGhcQGs.crl rsync://rpki.apnic.net/member_repository/A9161F3E/339EDE6810E411F0B75B8166C4F9AE02/nOkX3Drgxboud8t3WjrZnGhcQGs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nOkX3Drgxboud8t3WjrZnGhcQGs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49 (0x31) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9161F3E, serialNumber=9CE917DC3AE0C5BA2E77CB775A3AD99C685C406B Validity Not Before: Jul 3 07:56:34 2025 GMT Not After : Jul 10 07:56:34 2025 GMT Subject: CN=686637b3-1bb2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:d5:84:a8:f3:03:e3:af:5b:77:75:f1:8f:26: ea:98:71:28:1a:55:e4:27:12:6b:0d:9f:4a:cc:7a: 6e:43:1d:57:af:92:c9:95:c2:ed:bc:8d:fd:09:c6: 91:7b:8d:b7:12:73:24:00:18:9d:4a:60:ff:1c:72: a2:e5:0b:35:ef:d1:94:8e:a4:5f:32:5f:10:bf:f0: 41:8c:84:31:6c:b5:fd:bc:cc:ae:26:57:07:41:38: f4:c3:f6:f3:0a:a7:65:be:ec:48:2a:62:7b:25:79: 93:cc:82:b8:fd:f8:82:95:2c:31:27:7f:5c:54:3d: 1c:55:79:40:cf:c9:8f:dc:b2:ab:8b:de:d2:3d:02: a2:62:f4:f3:0f:d0:4a:9f:e9:04:47:b7:25:54:71: 82:e1:f2:80:bb:79:55:ac:da:04:b2:08:57:11:69: ca:22:ec:f7:a2:7b:f6:d2:8a:40:5d:40:42:40:df: 94:41:78:35:cf:32:f6:b6:8e:7a:08:ea:08:5d:4b: 07:4a:8c:d0:53:e2:55:6d:79:a5:71:ae:27:5e:92: d3:20:e7:26:17:80:4c:10:e6:6a:b7:19:b4:3f:f8: 3d:3e:ec:41:62:d1:c3:25:89:99:38:91:f4:90:29: d2:79:af:e3:b9:ab:98:67:fa:e8:b1:9a:69:f6:60: 48:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:89:2F:F2:89:D9:8F:AA:27:6F:B8:96:66:7D:43:3E:D1:35:B9:7B X509v3 Authority Key Identifier: keyid:9C:E9:17:DC:3A:E0:C5:BA:2E:77:CB:77:5A:3A:D9:9C:68:5C:40:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9161F3E/339EDE6810E411F0B75B8166C4F9AE02/nOkX3Drgxboud8t3WjrZnGhcQGs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nOkX3Drgxboud8t3WjrZnGhcQGs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9161F3E/339EDE6810E411F0B75B8166C4F9AE02/nOkX3Drgxboud8t3WjrZnGhcQGs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 80:3c:8b:c6:49:1c:b3:15:f3:ad:e2:25:21:a3:85:ff:3c:48: 53:83:48:d1:6d:ec:86:9d:f4:ee:de:5b:10:53:fb:09:67:27: 99:8f:84:34:f3:75:cb:9c:30:f5:1c:aa:cb:87:ec:18:45:95: 5e:6d:c3:96:50:2a:f5:3c:67:98:31:eb:d2:d9:b0:94:c5:33: 74:4e:89:ef:a6:c4:c8:15:a4:49:e4:1c:a1:89:a1:9d:42:1c: 78:4b:e4:d8:77:63:ef:d7:ee:99:20:a0:d7:df:af:6f:52:3b: b9:a9:d1:01:07:38:ad:6b:13:b5:91:ad:8c:c7:6e:f6:04:76: 2e:1c:09:f4:93:09:4f:7a:04:cd:3f:0c:34:b7:7c:e4:51:f0: ae:1e:cb:56:55:07:05:e8:a2:48:16:b5:7b:fe:82:c6:97:24: f2:5f:66:a4:15:df:a5:72:a0:c2:be:04:7e:d6:fe:e9:cc:e8: e5:d5:a7:5c:b7:aa:76:0a:34:ae:15:4d:59:15:32:4b:5d:1b: db:3e:ef:9a:47:65:be:99:ec:b7:a3:b6:14:f7:79:a2:17:70: 88:93:9b:d7:f2:8e:b6:81:ec:9a:1d:77:0b:44:3d:f9:db:bd: c5:7c:01:80:b8:a3:2f:40:c1:cf:cd:35:4a:ff:ba:32:e3:54: 48:c1:a9:a7 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBMTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 MUYzRTExMC8GA1UEBRMoOUNFOTE3REMzQUUwQzVCQTJFNzdDQjc3NUEzQUQ5OUM2 ODVDNDA2QjAeFw0yNTA3MDMwNzU2MzRaFw0yNTA3MTAwNzU2MzRaMBgxFjAUBgNV BAMTDTY4NjYzN2IzLTFiYjIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDa1YSo8wPjr1t3dfGPJuqYcSgaVeQnEmsNn0rMem5DHVevksmVwu28jf0JxpF7 jbcScyQAGJ1KYP8ccqLlCzXv0ZSOpF8yXxC/8EGMhDFstf28zK4mVwdBOPTD9vMK p2W+7EgqYnsleZPMgrj9+IKVLDEnf1xUPRxVeUDPyY/csquL3tI9AqJi9PMP0Eqf 6QRHtyVUcYLh8oC7eVWs2gSyCFcRacoi7Peie/bSikBdQEJA35RBeDXPMva2jnoI 6ghdSwdKjNBT4lVteaVxridektMg5yYXgEwQ5mq3GbQ/+D0+7EFi0cMliZk4kfSQ KdJ5r+O5q5hn+uixmmn2YEipAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUmYkv8onZ j6onb7iWZn1DPtE1uXswHwYDVR0jBBgwFoAUnOkX3Drgxboud8t3WjrZnGhcQGsw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTYxRjNFLzMzOUVERTY4MTBF NDExRjBCNzVCODE2NkM0RjlBRTAyL25Pa1gzRHJneGJvdWQ4dDNXanJabkdoY1FH cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvbk9rWDNEcmd4Ym91ZDh0M1dqclpuR2hjUUdzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTYx RjNFLzMzOUVERTY4MTBFNDExRjBCNzVCODE2NkM0RjlBRTAyL25Pa1gzRHJneGJv dWQ4dDNXanJabkdoY1FHcy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAIA8i8ZJHLMV863iJSGjhf88SFODSNFt7Iad9O7eWxBT+wlnJ5mPhDTz dcucMPUcqsuH7BhFlV5tw5ZQKvU8Z5gx69LZsJTFM3ROie+mxMgVpEnkHKGJoZ1C HHhL5Nh3Y+/X7pkgoNffr29SO7mp0QEHOK1rE7WRrYzHbvYEdi4cCfSTCU96BM0/ DDS3fORR8K4ey1ZVBwXookgWtXv+gsaXJPJfZqQV36VyoMK+BH7W/unM6OXVp1y3 qnYKNK4VTVkVMktdG9s+75pHZb6Z7LejthT3eaIXcIiTm9fyjraB7JoddwtEPfnb vcV8AYC4oy9Awc/NNUr/ujLjVEjBqac= -----END CERTIFICATE-----Generated at Thu Jul 3 15:24:23 2025 by rpki-client