$ rpki-client -vvf rpki.apnic.net/member_repository/A9186684/36B86ADCD89F11EBAB98C55AC4F9AE02/NKEjLqcYRp6tt628TNngDfaoUgY.mft File: NKEjLqcYRp6tt628TNngDfaoUgY.mft (raw, json) Hash identifier: aU1CL8l2mqWyYaqgBGnWYmfDw00zeM4UKyEw0YqZZ9c= Subject key identifier: 91:FE:88:36:E8:83:20:DA:83:53:86:C6:5E:53:6A:27:70:32:D1:63 Authority key identifier: 34:A1:23:2E:A7:18:46:9E:AD:B7:AD:BC:4C:D9:E0:0D:F6:A8:52:06 Certificate issuer: /CN=A9186684/serialNumber=34A1232EA718469EADB7ADBC4CD9E00DF6A85206 Certificate serial: 05A6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NKEjLqcYRp6tt628TNngDfaoUgY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9186684/36B86ADCD89F11EBAB98C55AC4F9AE02/NKEjLqcYRp6tt628TNngDfaoUgY.mft Manifest number: 059B Signing time: Wed 02 Jul 2025 23:30:03 +0000 Manifest this update: Wed 02 Jul 2025 23:30:01 +0000 Manifest next update: Wed 09 Jul 2025 23:30:01 +0000 Files and hashes: 1: NKEjLqcYRp6tt628TNngDfaoUgY.crl (hash: D3YCeYLeaY0ibSaUR7b4//TBsuV57SsX0M66NTeJeJo=) 2: D737BB744B4111ECACAF3B6FC4F9AE02.roa (hash: 78UGN0+7orQTcucSGGqLKKQdBZ/eBwdHdIbrun6HmgE=) 3: 80D77ED8D8A811EB85D5E456C4F9AE02.roa (hash: 5vdLLR7SsjyoWbJEWGx2u6gT4judyFxezvmtzE9hlfI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9186684/36B86ADCD89F11EBAB98C55AC4F9AE02/NKEjLqcYRp6tt628TNngDfaoUgY.crl rsync://rpki.apnic.net/member_repository/A9186684/36B86ADCD89F11EBAB98C55AC4F9AE02/NKEjLqcYRp6tt628TNngDfaoUgY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NKEjLqcYRp6tt628TNngDfaoUgY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 23:30:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1446 (0x5a6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9186684, serialNumber=34A1232EA718469EADB7ADBC4CD9E00DF6A85206 Validity Not Before: Jul 2 23:30:01 2025 GMT Not After : Jul 9 23:30:01 2025 GMT Subject: CN=6865c0fb-fd75 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:b0:28:ed:f7:fc:08:ed:04:29:67:34:ba:21: 62:3c:08:35:49:8a:54:ae:f1:fe:19:17:e7:64:2f: dd:28:9a:44:4b:01:6c:4f:42:1e:51:38:99:94:57: 91:3d:0c:36:67:d3:f9:9d:f5:b9:5a:f9:bc:24:13: 81:04:53:63:64:47:f7:34:a9:f0:c5:fd:bd:40:1f: da:65:91:d7:3b:51:8b:f2:ea:ae:0e:88:27:b2:fe: f8:f5:31:74:46:ad:ad:f4:d7:d7:06:c8:ef:8d:b9: 10:35:e4:9b:ef:6c:cd:c5:c1:e1:3c:2f:dc:ac:4b: 46:11:f7:3f:a0:9d:19:fe:64:46:79:40:a7:74:9e: c6:53:d6:be:a3:48:08:7d:d6:e2:fe:e0:5a:da:e2: 38:f3:8b:b0:b8:0c:71:15:11:75:46:f4:02:77:0c: 1d:bc:14:fa:fe:7d:c0:03:f7:34:f2:79:cf:45:3f: c3:eb:66:29:43:d3:9f:48:40:27:89:20:c0:59:50: 8c:b2:8f:dc:df:49:52:d2:cb:9e:1a:33:08:63:71: fe:98:92:6c:06:f9:5f:6e:7b:83:ca:49:09:f7:7e: 21:a7:33:6e:86:ac:44:38:fe:d5:ba:e6:95:90:65: b8:f6:57:33:38:78:1c:0d:ab:c8:9f:fb:63:38:b8: b7:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:FE:88:36:E8:83:20:DA:83:53:86:C6:5E:53:6A:27:70:32:D1:63 X509v3 Authority Key Identifier: keyid:34:A1:23:2E:A7:18:46:9E:AD:B7:AD:BC:4C:D9:E0:0D:F6:A8:52:06 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9186684/36B86ADCD89F11EBAB98C55AC4F9AE02/NKEjLqcYRp6tt628TNngDfaoUgY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NKEjLqcYRp6tt628TNngDfaoUgY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186684/36B86ADCD89F11EBAB98C55AC4F9AE02/NKEjLqcYRp6tt628TNngDfaoUgY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 25:4d:1b:46:11:a3:aa:5e:4c:0b:b8:da:39:e2:cc:92:23:82: 52:d3:a8:91:a3:6c:4a:21:87:fc:8e:c6:07:2e:38:bc:67:c8: fd:99:ca:a2:b8:fa:27:f3:fe:ba:38:1e:0f:1b:7b:a4:48:af: 21:2b:1c:4c:81:9a:13:be:90:7a:a6:b1:2b:41:7c:8c:d1:52: d8:c2:7e:df:41:86:57:fd:e6:d3:22:17:67:95:90:32:a7:70: 98:14:56:50:95:3b:9b:c4:26:86:59:b6:90:f9:cf:e9:64:76: f5:f7:57:b2:77:4a:02:d2:d1:16:b3:d6:90:eb:58:6b:8d:f7: 20:5e:5a:40:2d:4d:66:e0:3d:88:23:2d:d5:f3:a9:88:b9:0b: 86:0d:1d:5d:23:ae:b3:47:f3:89:d2:a2:41:3c:4c:d1:e8:ea: a2:93:c0:4b:8f:c8:7e:97:b9:15:81:43:46:b2:31:d8:97:24: cc:ad:17:85:48:a2:27:43:10:e6:49:32:13:70:99:8b:c4:03: 57:ea:68:ac:f5:bd:cf:82:be:97:22:e8:97:92:12:84:76:40: 32:2a:0d:64:1e:ab:30:19:f4:95:cc:88:8d:06:ac:93:fe:12: 5a:27:8a:a2:6f:46:13:2b:32:d8:ab:e5:6a:48:d0:0c:a5:75: 42:ce:0b:44 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBaYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODY2ODQxMTAvBgNVBAUTKDM0QTEyMzJFQTcxODQ2OUVBREI3QURCQzRDRDlFMDBE RjZBODUyMDYwHhcNMjUwNzAyMjMzMDAxWhcNMjUwNzA5MjMzMDAxWjAYMRYwFAYD VQQDEw02ODY1YzBmYi1mZDc1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtbAo7ff8CO0EKWc0uiFiPAg1SYpUrvH+GRfnZC/dKJpESwFsT0IeUTiZlFeR PQw2Z9P5nfW5Wvm8JBOBBFNjZEf3NKnwxf29QB/aZZHXO1GL8uquDognsv749TF0 Rq2t9NfXBsjvjbkQNeSb72zNxcHhPC/crEtGEfc/oJ0Z/mRGeUCndJ7GU9a+o0gI fdbi/uBa2uI484uwuAxxFRF1RvQCdwwdvBT6/n3AA/c08nnPRT/D62YpQ9OfSEAn iSDAWVCMso/c30lS0sueGjMIY3H+mJJsBvlfbnuDykkJ934hpzNuhqxEOP7VuuaV kGW49lczOHgcDavIn/tjOLi3cQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJH+iDbo gyDag1OGxl5TaidwMtFjMB8GA1UdIwQYMBaAFDShIy6nGEaerbetvEzZ4A32qFIG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NjY4NC8zNkI4NkFEQ0Q4 OUYxMUVCQUI5OEM1NUFDNEY5QUUwMi9OS0VqTHFjWVJwNnR0NjI4VE5uZ0RmYW9V Z1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05LRWpMcWNZUnA2dHQ2MjhUTm5nRGZhb1VnWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NjY4NC8zNkI4NkFEQ0Q4OUYxMUVCQUI5OEM1NUFDNEY5QUUwMi9OS0VqTHFjWVJw NnR0NjI4VE5uZ0RmYW9VZ1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAlTRtGEaOqXkwLuNo54sySI4JS06iRo2xKIYf8jsYHLji8Z8j9mcqi uPon8/66OB4PG3ukSK8hKxxMgZoTvpB6prErQXyM0VLYwn7fQYZX/ebTIhdnlZAy p3CYFFZQlTubxCaGWbaQ+c/pZHb191eyd0oC0tEWs9aQ61hrjfcgXlpALU1m4D2I Iy3V86mIuQuGDR1dI66zR/OJ0qJBPEzR6Oqik8BLj8h+l7kVgUNGsjHYlyTMrReF SKInQxDmSTITcJmLxANX6mis9b3Pgr6XIuiXkhKEdkAyKg1kHqswGfSVzIiNBqyT /hJaJ4qib0YTKzLYq+VqSNAMpXVCzgtE -----END CERTIFICATE-----Generated at Thu Jul 3 09:44:40 2025 by rpki-client