$ rpki-client -vvf rpki.apnic.net/member_repository/A917FFBF/ED52F030C5F411EC8E80D886C4F9AE02/nPqGncMGNX16wwkuT__QTKUCd14.mft File: nPqGncMGNX16wwkuT__QTKUCd14.mft (raw, json) Hash identifier: Gmg+n/NCP2i0G/kojzbOIVspbq1HEj7eIiDgFGdJjok= Subject key identifier: F5:15:30:2D:DF:B2:54:E1:49:45:9E:06:3F:A3:7B:F1:F8:3F:4D:95 Authority key identifier: 9C:FA:86:9D:C3:06:35:7D:7A:C3:09:2E:4F:FF:D0:4C:A5:02:77:5E Certificate issuer: /CN=A917FFBF/serialNumber=9CFA869DC306357D7AC3092E4FFFD04CA502775E Certificate serial: 0343 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nPqGncMGNX16wwkuT__QTKUCd14.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917FFBF/ED52F030C5F411EC8E80D886C4F9AE02/nPqGncMGNX16wwkuT__QTKUCd14.mft Manifest number: 033F Signing time: Thu 03 Jul 2025 01:23:32 +0000 Manifest this update: Thu 03 Jul 2025 01:23:32 +0000 Manifest next update: Thu 10 Jul 2025 01:23:31 +0000 Files and hashes: 1: nPqGncMGNX16wwkuT__QTKUCd14.crl (hash: LTviKIMHLETAq7nZ0I2DdH5YQ4Jm36Cm2vaF/SECMQc=) 2: 6AE91888C5FC11EC9127557EC4F9AE02.roa (hash: Upjs7verB9kHZN2eaB1a6dX0s9sFshQhi4VCB4ap3GQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917FFBF/ED52F030C5F411EC8E80D886C4F9AE02/nPqGncMGNX16wwkuT__QTKUCd14.crl rsync://rpki.apnic.net/member_repository/A917FFBF/ED52F030C5F411EC8E80D886C4F9AE02/nPqGncMGNX16wwkuT__QTKUCd14.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nPqGncMGNX16wwkuT__QTKUCd14.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 01:23:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 835 (0x343) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917FFBF, serialNumber=9CFA869DC306357D7AC3092E4FFFD04CA502775E Validity Not Before: Jul 3 01:23:32 2025 GMT Not After : Jul 10 01:23:31 2025 GMT Subject: CN=6865db94-282e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:25:df:b2:01:c3:20:2d:40:cd:02:b2:a4:57: b9:6c:a5:b3:c0:de:1e:c0:c6:11:e6:36:31:35:1f: 3d:a6:d5:de:0c:fd:84:fc:c5:7b:e4:d8:1e:8b:0c: be:45:5f:0d:f9:13:c8:9e:55:ea:6c:79:a7:ca:4c: b2:5b:4a:a2:07:ec:d7:70:40:f2:41:18:90:24:54: 82:bc:c6:23:b8:b8:dc:9e:78:7f:ee:cf:4d:44:58: eb:68:77:b5:f1:37:df:55:a1:ca:a9:c1:45:49:bc: 13:3a:7c:97:e3:20:b5:38:84:42:c9:d6:a7:57:55: 6f:08:09:b9:2e:2d:d3:08:27:58:23:dc:f4:2a:37: 83:67:36:a1:5b:b1:5d:ac:f8:52:50:fe:e8:42:40: 09:af:5d:a8:ec:17:d1:84:52:60:32:f7:3c:dd:a1: fe:c2:95:cf:5a:84:4a:9c:ff:5d:5e:d3:0c:e4:6b: 4a:b3:15:d3:d4:d4:09:c3:84:d0:68:ff:eb:e2:9c: 34:1f:cd:c2:32:84:de:0d:ec:ae:e8:2c:76:ea:00: e7:4d:ff:fe:6b:5f:1c:b5:38:1c:66:c8:68:75:cb: d8:91:82:8a:d8:9d:e2:6f:8b:5f:e8:15:35:80:48: fd:7c:25:a5:b3:3d:81:1e:13:e1:a3:6b:6a:35:94: 4e:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:15:30:2D:DF:B2:54:E1:49:45:9E:06:3F:A3:7B:F1:F8:3F:4D:95 X509v3 Authority Key Identifier: keyid:9C:FA:86:9D:C3:06:35:7D:7A:C3:09:2E:4F:FF:D0:4C:A5:02:77:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917FFBF/ED52F030C5F411EC8E80D886C4F9AE02/nPqGncMGNX16wwkuT__QTKUCd14.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nPqGncMGNX16wwkuT__QTKUCd14.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917FFBF/ED52F030C5F411EC8E80D886C4F9AE02/nPqGncMGNX16wwkuT__QTKUCd14.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 56:e0:f3:d8:49:24:29:6c:e1:a8:e4:f4:43:91:a4:df:d6:93: 18:3f:19:ee:ef:5a:fa:28:7c:03:bb:59:06:f6:2b:af:e8:69: 63:eb:d4:08:8b:29:e3:92:76:b5:dc:88:d6:05:82:2f:31:a2: ca:46:41:eb:21:e6:b2:de:31:83:db:e9:5f:b9:a7:66:01:3b: a6:a2:aa:69:77:7d:fd:ac:b1:fd:35:2a:1c:9d:5b:26:2d:a4: aa:b9:49:45:27:86:4b:6c:01:13:d3:37:a7:96:34:9a:fb:fd: 59:af:df:07:ce:34:70:b5:80:ae:fd:13:d7:58:93:e6:2f:5f: 51:c4:1e:bf:01:e3:d2:33:67:64:3b:df:49:6e:16:6e:df:4f: 1e:c1:a8:96:d2:1b:d0:ee:fd:d4:80:47:fb:52:62:11:7a:e7: 33:d1:c5:89:13:af:19:33:56:16:7b:4d:64:84:f0:d7:6c:94: 0a:22:05:70:5a:32:e2:8e:26:12:0d:5a:db:fd:67:30:43:44: e9:e7:39:50:ca:c6:26:16:5c:ee:40:cd:36:24:a4:bf:d1:f3: ab:be:b3:78:6f:01:19:0f:81:bf:70:31:cd:a8:8c:0d:d8:aa: 22:02:2c:99:e4:6f:ac:50:43:50:aa:1e:e0:a5:8f:bf:d0:46: a8:e6:59:90 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA0MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0ZGQkYxMTAvBgNVBAUTKDlDRkE4NjlEQzMwNjM1N0Q3QUMzMDkyRTRGRkZEMDRD QTUwMjc3NUUwHhcNMjUwNzAzMDEyMzMyWhcNMjUwNzEwMDEyMzMxWjAYMRYwFAYD VQQDEw02ODY1ZGI5NC0yODJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuyXfsgHDIC1AzQKypFe5bKWzwN4ewMYR5jYxNR89ptXeDP2E/MV75Ngeiwy+ RV8N+RPInlXqbHmnykyyW0qiB+zXcEDyQRiQJFSCvMYjuLjcnnh/7s9NRFjraHe1 8TffVaHKqcFFSbwTOnyX4yC1OIRCydanV1VvCAm5Li3TCCdYI9z0KjeDZzahW7Fd rPhSUP7oQkAJr12o7BfRhFJgMvc83aH+wpXPWoRKnP9dXtMM5GtKsxXT1NQJw4TQ aP/r4pw0H83CMoTeDeyu6Cx26gDnTf/+a18ctTgcZshodcvYkYKK2J3ib4tf6BU1 gEj9fCWlsz2BHhPho2tqNZROvwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPUVMC3f slThSUWeBj+je/H4P02VMB8GA1UdIwQYMBaAFJz6hp3DBjV9esMJLk//0EylAnde MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RkZCRi9FRDUyRjAzMEM1 RjQxMUVDOEU4MEQ4ODZDNEY5QUUwMi9uUHFHbmNNR05YMTZ3d2t1VF9fUVRLVUNk MTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25QcUduY01HTlgxNnd3a3VUX19RVEtVQ2QxNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RkZCRi9FRDUyRjAzMEM1RjQxMUVDOEU4MEQ4ODZDNEY5QUUwMi9uUHFHbmNNR05Y MTZ3d2t1VF9fUVRLVUNkMTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBW4PPYSSQpbOGo5PRDkaTf1pMYPxnu71r6KHwDu1kG9iuv6Glj69QI iynjkna13IjWBYIvMaLKRkHrIeay3jGD2+lfuadmATumoqppd339rLH9NSocnVsm LaSquUlFJ4ZLbAET0zenljSa+/1Zr98HzjRwtYCu/RPXWJPmL19RxB6/AePSM2dk O99JbhZu308ewaiW0hvQ7v3UgEf7UmIReucz0cWJE68ZM1YWe01khPDXbJQKIgVw WjLijiYSDVrb/WcwQ0Tp5zlQysYmFlzuQM02JKS/0fOrvrN4bwEZD4G/cDHNqIwN 2KoiAiyZ5G+sUENQqh7gpY+/0Eao5lmQ -----END CERTIFICATE-----Generated at Thu Jul 3 17:30:51 2025 by rpki-client