$ rpki-client -vvf rpki.apnic.net/member_repository/A917190F/B3CA76C0FA3111EABD249E7AC4F9AE02/nQdEbvmfPFfCnFgta3rKRzX05HA.mft File: nQdEbvmfPFfCnFgta3rKRzX05HA.mft (raw, json) Hash identifier: GDSfSN9JbOzV4mGTweM22WV2cD/ppxFb6BzMaftjz9Q= Subject key identifier: 9A:4E:93:5D:E4:ED:86:9C:78:19:9B:C8:A4:BA:2D:04:CC:01:35:EA Authority key identifier: 9D:07:44:6E:F9:9F:3C:57:C2:9C:58:2D:6B:7A:CA:47:35:F4:E4:70 Certificate issuer: /CN=A917190F/serialNumber=9D07446EF99F3C57C29C582D6B7ACA4735F4E470 Certificate serial: 0842 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nQdEbvmfPFfCnFgta3rKRzX05HA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917190F/B3CA76C0FA3111EABD249E7AC4F9AE02/nQdEbvmfPFfCnFgta3rKRzX05HA.mft Manifest number: 080B Signing time: Wed 02 Jul 2025 21:22:01 +0000 Manifest this update: Wed 02 Jul 2025 21:22:00 +0000 Manifest next update: Wed 09 Jul 2025 21:22:00 +0000 Files and hashes: 1: nQdEbvmfPFfCnFgta3rKRzX05HA.crl (hash: FeG5X3zZi+ubNeYaq1eHOhshXFOnvorthZW/n4BeH6I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917190F/B3CA76C0FA3111EABD249E7AC4F9AE02/nQdEbvmfPFfCnFgta3rKRzX05HA.crl rsync://rpki.apnic.net/member_repository/A917190F/B3CA76C0FA3111EABD249E7AC4F9AE02/nQdEbvmfPFfCnFgta3rKRzX05HA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nQdEbvmfPFfCnFgta3rKRzX05HA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 21:22:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2114 (0x842) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917190F, serialNumber=9D07446EF99F3C57C29C582D6B7ACA4735F4E470 Validity Not Before: Jul 2 21:22:00 2025 GMT Not After : Jul 9 21:22:00 2025 GMT Subject: CN=6865a2f9-735d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:c0:6f:2f:f4:23:c9:10:bc:19:1e:92:51:7b: c3:9f:92:d1:66:f3:8f:77:e3:8e:4f:74:ca:76:07: 28:f0:6f:5f:e2:d0:f8:b4:41:76:9d:f4:42:3c:89: 61:73:5d:e0:3c:b2:3b:b7:bb:ee:7b:01:00:fa:38: 87:8c:78:59:79:88:f6:81:63:25:e6:59:e2:eb:0f: 56:d9:46:f9:c6:06:41:19:8a:d6:b3:f2:b2:9e:83: 74:91:a9:c3:18:bf:db:dd:b0:ac:a9:91:05:26:15: 9b:b8:42:78:76:fb:a7:11:ed:d7:63:fa:57:4c:fd: ea:d5:e3:02:dc:0f:75:86:f7:b4:4b:b1:95:32:f6: 92:4d:f1:3a:39:02:81:23:82:8c:be:74:43:ad:d3: 71:0a:22:30:de:76:2c:b6:fd:0e:ef:9a:55:2b:a8: 80:ba:a3:f0:71:b0:2f:5c:c3:c8:d0:7b:05:99:4d: f2:78:05:b4:90:c2:a4:1a:31:2f:0c:06:98:c8:c3: 3f:15:82:55:6e:87:f5:69:72:1a:d4:9c:2d:02:69: ba:74:14:d8:0a:6e:d0:0e:58:45:c5:f0:ca:1a:b0: a0:77:c2:19:0b:b8:bb:24:fb:10:d1:81:b2:01:ea: aa:fa:9a:36:36:59:4f:18:a8:1b:be:59:64:56:26: 22:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:4E:93:5D:E4:ED:86:9C:78:19:9B:C8:A4:BA:2D:04:CC:01:35:EA X509v3 Authority Key Identifier: keyid:9D:07:44:6E:F9:9F:3C:57:C2:9C:58:2D:6B:7A:CA:47:35:F4:E4:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917190F/B3CA76C0FA3111EABD249E7AC4F9AE02/nQdEbvmfPFfCnFgta3rKRzX05HA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nQdEbvmfPFfCnFgta3rKRzX05HA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917190F/B3CA76C0FA3111EABD249E7AC4F9AE02/nQdEbvmfPFfCnFgta3rKRzX05HA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5c:cb:49:3e:0c:a1:8f:7b:66:89:a3:4d:0c:f1:bb:e7:fb:7f: b6:64:96:70:72:40:6d:12:0a:41:44:3b:f8:c5:ee:36:45:50: c3:6e:73:43:44:4a:59:ac:11:6f:6d:bb:7f:0b:3f:c9:d3:5e: f6:cb:82:42:67:6e:bf:3e:26:6c:42:0c:0b:6d:e0:91:6b:64: 45:d6:52:de:38:2e:3a:38:84:24:d5:9d:32:8b:39:a8:a5:cd: eb:d3:ca:18:86:d5:f3:e7:ab:16:5a:f6:48:f6:5f:fa:2b:a5: 8e:c7:53:64:da:c4:e1:8f:5e:e6:91:1e:27:9d:0a:fb:78:26: 5b:e9:73:8b:cf:bd:c7:23:dd:28:19:4d:93:f9:a3:aa:3d:b9: a2:ff:df:8a:86:f9:fd:7f:ae:7d:a2:a5:fa:cd:23:5f:35:20: 9c:c0:d4:35:8f:05:d7:3e:9b:e7:80:ff:98:96:99:ee:e0:41: d2:21:f0:de:b2:8a:11:ea:84:67:f8:3d:aa:5b:cc:7d:32:72: c6:90:37:e4:7d:3b:89:67:c0:70:b1:a5:11:73:63:ee:cc:42: 2a:d6:87:cb:ee:b6:3a:34:1f:88:23:3e:0b:69:8c:43:53:86: 14:19:60:32:15:73:70:9a:79:aa:1e:97:03:3a:0c:a6:ae:24: 95:da:27:bc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCEIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzE5MEYxMTAvBgNVBAUTKDlEMDc0NDZFRjk5RjNDNTdDMjlDNTgyRDZCN0FDQTQ3 MzVGNEU0NzAwHhcNMjUwNzAyMjEyMjAwWhcNMjUwNzA5MjEyMjAwWjAYMRYwFAYD VQQDEw02ODY1YTJmOS03MzVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1cBvL/QjyRC8GR6SUXvDn5LRZvOPd+OOT3TKdgco8G9f4tD4tEF2nfRCPIlh c13gPLI7t7vuewEA+jiHjHhZeYj2gWMl5lni6w9W2Ub5xgZBGYrWs/KynoN0kanD GL/b3bCsqZEFJhWbuEJ4dvunEe3XY/pXTP3q1eMC3A91hve0S7GVMvaSTfE6OQKB I4KMvnRDrdNxCiIw3nYstv0O75pVK6iAuqPwcbAvXMPI0HsFmU3yeAW0kMKkGjEv DAaYyMM/FYJVbof1aXIa1JwtAmm6dBTYCm7QDlhFxfDKGrCgd8IZC7i7JPsQ0YGy Aeqq+po2NllPGKgbvllkViYiKwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJpOk13k 7YaceBmbyKS6LQTMATXqMB8GA1UdIwQYMBaAFJ0HRG75nzxXwpxYLWt6ykc19ORw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MTkwRi9CM0NBNzZDMEZB MzExMUVBQkQyNDlFN0FDNEY5QUUwMi9uUWRFYnZtZlBGZkNuRmd0YTNyS1J6WDA1 SEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25RZEVidm1mUEZmQ25GZ3RhM3JLUnpYMDVIQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MTkwRi9CM0NBNzZDMEZBMzExMUVBQkQyNDlFN0FDNEY5QUUwMi9uUWRFYnZtZlBG ZkNuRmd0YTNyS1J6WDA1SEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBcy0k+DKGPe2aJo00M8bvn+3+2ZJZwckBtEgpBRDv4xe42RVDDbnND REpZrBFvbbt/Cz/J0172y4JCZ26/PiZsQgwLbeCRa2RF1lLeOC46OIQk1Z0yizmo pc3r08oYhtXz56sWWvZI9l/6K6WOx1Nk2sThj17mkR4nnQr7eCZb6XOLz73HI90o GU2T+aOqPbmi/9+Khvn9f659oqX6zSNfNSCcwNQ1jwXXPpvngP+Ylpnu4EHSIfDe sooR6oRn+D2qW8x9MnLGkDfkfTuJZ8BwsaURc2PuzEIq1ofL7rY6NB+IIz4LaYxD U4YUGWAyFXNwmnmqHpcDOgymriSV2ie8 -----END CERTIFICATE-----Generated at Thu Jul 3 15:05:06 2025 by rpki-client