$ rpki-client -vvf rpki.apnic.net/member_repository/A917ECA2/02827CF8E43711EDA865631AC4F9AE02/Ns9cwKYOC31UYSoS61uYkoRobbA.mft File: Ns9cwKYOC31UYSoS61uYkoRobbA.mft (raw, json) Hash identifier: 21JKxqwf0nYQjf0253JtsXNZAgMHcWfxMT6BUxECkcM= Subject key identifier: 05:E2:2F:85:23:D8:B7:D3:66:A1:0D:EB:AD:64:4B:91:61:21:01:0A Authority key identifier: 36:CF:5C:C0:A6:0E:0B:7D:54:61:2A:12:EB:5B:98:92:84:68:6D:B0 Certificate issuer: /CN=A917ECA2/serialNumber=36CF5CC0A60E0B7D54612A12EB5B989284686DB0 Certificate serial: 01A0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ns9cwKYOC31UYSoS61uYkoRobbA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917ECA2/02827CF8E43711EDA865631AC4F9AE02/Ns9cwKYOC31UYSoS61uYkoRobbA.mft Manifest number: 019B Signing time: Sun 29 Jun 2025 02:31:35 +0000 Manifest this update: Sun 29 Jun 2025 02:31:35 +0000 Manifest next update: Sun 06 Jul 2025 02:31:35 +0000 Files and hashes: 1: Ns9cwKYOC31UYSoS61uYkoRobbA.crl (hash: SUMFv3IfViPYHE0vgJnqLqI1cyNvep3o1RnMhpppPDo=) 2: BE7ACD44FEDF11EDB4C36F29C4F9AE02.roa (hash: TcJPWywxYGP4zNwqCV3RMOeXIr2sCq4he29rvfSHcP0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917ECA2/02827CF8E43711EDA865631AC4F9AE02/Ns9cwKYOC31UYSoS61uYkoRobbA.crl rsync://rpki.apnic.net/member_repository/A917ECA2/02827CF8E43711EDA865631AC4F9AE02/Ns9cwKYOC31UYSoS61uYkoRobbA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ns9cwKYOC31UYSoS61uYkoRobbA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 06 Jul 2025 02:31:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 416 (0x1a0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917ECA2, serialNumber=36CF5CC0A60E0B7D54612A12EB5B989284686DB0 Validity Not Before: Jun 29 02:31:35 2025 GMT Not After : Jul 6 02:31:35 2025 GMT Subject: CN=6860a587-1d41 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:40:6f:4e:1d:07:1c:d3:da:3d:96:b9:60:28: 68:39:56:d6:19:90:ab:84:87:99:d4:b5:8e:50:0f: 61:89:34:e2:9d:dd:2c:bc:db:7f:26:bc:2f:01:1f: 55:54:55:e1:5c:7d:cb:1b:12:b6:cd:8c:84:1b:a1: da:6e:cb:ca:63:c4:3e:b7:ab:6b:7b:18:df:eb:23: c7:06:c7:6e:b4:bf:93:05:7f:e5:b8:10:5c:e5:30: f5:54:1b:ac:88:03:20:bb:59:65:60:d5:83:d2:6d: bf:c4:cc:7b:16:da:45:7c:8d:9d:99:68:b1:b0:72: 8f:dd:d9:81:13:e1:11:8c:44:00:7b:b9:92:ec:a2: 41:3e:5f:2e:a9:c5:90:81:9f:ea:bc:46:b6:85:1b: 81:ff:fb:06:37:39:67:f5:55:6e:d1:96:74:79:56: 0a:f4:a5:02:65:68:be:18:12:c8:f3:96:17:54:cf: bd:e0:be:f4:bd:f1:df:3d:0a:52:73:4d:3e:38:1c: 35:da:37:e6:9f:0f:59:fe:54:b1:d2:9e:0b:78:01: 2d:15:f6:1f:21:89:91:12:2e:c7:b1:21:37:a7:fa: 26:04:3e:d3:ac:97:38:69:c0:46:dd:eb:1d:3e:30: 1a:a5:4e:7c:8d:99:01:76:bc:ce:41:92:6a:3b:41: 7b:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:E2:2F:85:23:D8:B7:D3:66:A1:0D:EB:AD:64:4B:91:61:21:01:0A X509v3 Authority Key Identifier: keyid:36:CF:5C:C0:A6:0E:0B:7D:54:61:2A:12:EB:5B:98:92:84:68:6D:B0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917ECA2/02827CF8E43711EDA865631AC4F9AE02/Ns9cwKYOC31UYSoS61uYkoRobbA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ns9cwKYOC31UYSoS61uYkoRobbA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917ECA2/02827CF8E43711EDA865631AC4F9AE02/Ns9cwKYOC31UYSoS61uYkoRobbA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 44:e0:0e:db:6e:34:ac:f6:28:f0:db:b3:e3:2f:01:3f:09:13: 56:07:a9:1a:14:8c:a2:5a:e9:68:69:d5:8b:db:8f:b9:de:81: 47:13:93:c2:b1:d7:80:1b:fc:bf:21:b1:3b:33:9a:ec:6f:a6: cf:fa:6c:b6:45:09:d9:8e:a3:dd:71:cb:d0:63:e3:98:43:c5: 89:3b:58:e6:c0:b7:76:66:77:a9:4d:74:7d:ac:30:1b:fd:ca: cf:10:32:9f:2c:92:60:dc:6d:1b:95:86:f4:12:bd:b5:54:43: 97:9d:ca:17:0a:9f:bf:d2:b0:45:44:59:67:57:6d:57:5a:78: 2a:b6:27:19:94:cf:f6:1c:12:61:61:c6:8a:51:e1:a6:b3:43: cc:76:3c:11:04:37:88:bd:5d:16:8e:9f:3f:fc:af:37:cc:0b: 19:6d:1c:67:07:b7:c0:0d:2e:7e:94:c4:a0:d1:d4:df:35:b4: 59:73:16:76:bc:55:f2:f9:ae:61:cf:28:6e:0e:e6:4a:92:dc: 3a:2c:40:f5:97:2b:75:ff:b3:71:c0:2c:33:63:52:31:16:1d: 92:3a:cc:da:0b:2a:9c:b0:a6:08:e5:00:44:c1:f5:19:a6:c0: 53:aa:4a:47:80:b5:41:54:49:e9:bd:f5:35:66:e1:a0:5f:5f: 0f:95:ba:90 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAaAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0VDQTIxMTAvBgNVBAUTKDM2Q0Y1Q0MwQTYwRTBCN0Q1NDYxMkExMkVCNUI5ODky ODQ2ODZEQjAwHhcNMjUwNjI5MDIzMTM1WhcNMjUwNzA2MDIzMTM1WjAYMRYwFAYD VQQDEw02ODYwYTU4Ny0xZDQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp0BvTh0HHNPaPZa5YChoOVbWGZCrhIeZ1LWOUA9hiTTind0svNt/JrwvAR9V VFXhXH3LGxK2zYyEG6HabsvKY8Q+t6trexjf6yPHBsdutL+TBX/luBBc5TD1VBus iAMgu1llYNWD0m2/xMx7FtpFfI2dmWixsHKP3dmBE+ERjEQAe7mS7KJBPl8uqcWQ gZ/qvEa2hRuB//sGNzln9VVu0ZZ0eVYK9KUCZWi+GBLI85YXVM+94L70vfHfPQpS c00+OBw12jfmnw9Z/lSx0p4LeAEtFfYfIYmREi7HsSE3p/omBD7TrJc4acBG3esd PjAapU58jZkBdrzOQZJqO0F7fwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAXiL4Uj 2LfTZqEN661kS5FhIQEKMB8GA1UdIwQYMBaAFDbPXMCmDgt9VGEqEutbmJKEaG2w MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RUNBMi8wMjgyN0NGOEU0 MzcxMUVEQTg2NTYzMUFDNEY5QUUwMi9Oczljd0tZT0MzMVVZU29TNjF1WWtvUm9i YkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05zOWN3S1lPQzMxVVlTb1M2MXVZa29Sb2JiQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RUNBMi8wMjgyN0NGOEU0MzcxMUVEQTg2NTYzMUFDNEY5QUUwMi9Oczljd0tZT0Mz MVVZU29TNjF1WWtvUm9iYkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBE4A7bbjSs9ijw27PjLwE/CRNWB6kaFIyiWuloadWL24+53oFHE5PC sdeAG/y/IbE7M5rsb6bP+my2RQnZjqPdccvQY+OYQ8WJO1jmwLd2ZnepTXR9rDAb /crPEDKfLJJg3G0blYb0Er21VEOXncoXCp+/0rBFRFlnV21XWngqticZlM/2HBJh YcaKUeGms0PMdjwRBDeIvV0Wjp8//K83zAsZbRxnB7fADS5+lMSg0dTfNbRZcxZ2 vFXy+a5hzyhuDuZKktw6LED1lyt1/7NxwCwzY1IxFh2SOszaCyqcsKYI5QBEwfUZ psBTqkpHgLVBVEnpvfU1ZuGgX18PlbqQ -----END CERTIFICATE-----Generated at Sun Jun 29 21:03:49 2025 by rpki-client