$ rpki-client -vvf rpki.apnic.net/member_repository/A9196780/EF17C3D6525B11F0A8362240C4F9AE02/m0_NHtBqHkuhxL6fHRCylF6SjBk.mft File: m0_NHtBqHkuhxL6fHRCylF6SjBk.mft (raw, json) Hash identifier: Q8VgTbo3pj1BaeIXbSkUE/aRTydqn0fgoIaRc612z94= Subject key identifier: 81:80:54:2C:79:2E:FA:3C:EB:05:04:8A:D4:F7:44:42:15:38:2C:AE Authority key identifier: 9B:4F:CD:1E:D0:6A:1E:4B:A1:C4:BE:9F:1D:10:B2:94:5E:92:8C:19 Certificate issuer: /CN=A9196780/serialNumber=9B4FCD1ED06A1E4BA1C4BE9F1D10B2945E928C19 Certificate serial: 05 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m0_NHtBqHkuhxL6fHRCylF6SjBk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9196780/EF17C3D6525B11F0A8362240C4F9AE02/m0_NHtBqHkuhxL6fHRCylF6SjBk.mft Manifest number: 05 Signing time: Tue 01 Jul 2025 08:59:32 +0000 Manifest this update: Tue 01 Jul 2025 08:59:31 +0000 Manifest next update: Tue 08 Jul 2025 08:59:31 +0000 Files and hashes: 1: m0_NHtBqHkuhxL6fHRCylF6SjBk.crl (hash: 6XkG74dHjE6Dz7u+wJCD1FaMsI1oS6srl3LWP8HBFQI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9196780/EF17C3D6525B11F0A8362240C4F9AE02/m0_NHtBqHkuhxL6fHRCylF6SjBk.crl rsync://rpki.apnic.net/member_repository/A9196780/EF17C3D6525B11F0A8362240C4F9AE02/m0_NHtBqHkuhxL6fHRCylF6SjBk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m0_NHtBqHkuhxL6fHRCylF6SjBk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 08:59:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5 (0x5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9196780, serialNumber=9B4FCD1ED06A1E4BA1C4BE9F1D10B2945E928C19 Validity Not Before: Jul 1 08:59:31 2025 GMT Not After : Jul 8 08:59:31 2025 GMT Subject: CN=6863a374-d6b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:c3:58:6c:6a:75:b1:f5:9b:e1:ec:42:4c:a3: 84:a7:35:46:f6:5f:13:47:ac:85:93:69:4b:75:68: 77:1e:b8:bc:4e:77:61:3b:7b:08:6d:bb:a0:2b:60: 26:80:f4:e7:db:92:bf:8e:b3:11:d1:67:b0:3c:c1: 4f:3c:e7:b7:10:9f:38:b9:d9:08:12:e4:82:43:cf: cd:06:8d:14:d6:71:6f:76:69:53:0e:c6:28:89:4a: d4:8f:07:17:84:fe:71:94:4b:ca:4c:d0:58:5e:10: bd:ab:bb:7a:c4:1a:3f:cc:f0:03:2c:b7:53:41:9c: 62:85:8a:02:7a:22:de:46:cd:cb:73:1a:32:1e:b6: 7e:a5:44:0c:4e:19:26:a8:d0:e8:76:96:ac:b3:50: 87:51:0f:31:49:16:95:ce:46:9c:a2:9c:91:e6:f4: b9:bd:cf:b4:90:48:50:d0:aa:7a:30:97:5f:57:54: 40:52:97:c2:db:c9:ec:84:45:1b:5b:b0:0b:90:ad: b2:80:19:c8:39:6f:d6:1b:1e:81:f2:3b:06:01:07: aa:5c:ce:7d:5a:b0:42:e4:21:87:22:04:ae:ae:92: 13:c0:8c:71:9a:63:87:2c:92:3b:b3:b5:5a:18:ce: 5a:82:94:a9:d9:96:73:52:2f:de:bd:24:16:91:5f: 5a:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:80:54:2C:79:2E:FA:3C:EB:05:04:8A:D4:F7:44:42:15:38:2C:AE X509v3 Authority Key Identifier: keyid:9B:4F:CD:1E:D0:6A:1E:4B:A1:C4:BE:9F:1D:10:B2:94:5E:92:8C:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9196780/EF17C3D6525B11F0A8362240C4F9AE02/m0_NHtBqHkuhxL6fHRCylF6SjBk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m0_NHtBqHkuhxL6fHRCylF6SjBk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9196780/EF17C3D6525B11F0A8362240C4F9AE02/m0_NHtBqHkuhxL6fHRCylF6SjBk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a5:61:67:73:be:1e:5f:31:37:aa:0d:ce:21:7d:25:24:e0:b7: 77:db:38:6e:38:c1:e9:fa:55:06:7b:8e:b4:db:26:93:5e:53: de:6d:bd:d0:da:ec:f6:31:cc:da:72:b6:56:e9:66:4e:3d:59: 01:2b:d9:1c:41:1d:3f:25:ba:25:7f:3b:70:dc:11:b6:86:7a: c0:51:ec:1d:62:16:be:16:0d:4f:15:1b:9a:dc:b6:fe:6c:9a: 94:c2:b7:b1:e4:92:48:0d:c6:fe:32:4e:f3:bb:fb:a8:2a:f4: 36:7c:3b:50:aa:8e:11:fa:bc:a7:8c:1a:76:37:75:ad:b3:47: 25:db:e2:86:82:2d:59:18:0c:6f:5f:cd:d2:d3:ba:45:bc:92: 23:47:29:6a:ae:4c:25:c5:11:fd:3f:20:06:2b:56:9e:50:12: 82:a0:35:49:f3:f1:6e:05:48:df:54:4d:c0:0c:d1:cf:92:5d: dd:eb:df:cc:f7:a8:3e:9f:02:ae:0f:eb:ad:c2:6c:59:93:cc: e0:7f:97:5a:71:21:a6:f0:7e:f6:0b:67:fe:00:79:82:ea:ba: 25:7e:1d:a8:81:94:84:f9:9d:8a:fb:6e:84:fa:5d:f4:6c:fd: c3:da:f0:2b:14:57:2c:35:5e:c6:c4:78:f0:5b:c1:21:5c:59: 00:66:92:ac -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBBTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 Njc4MDExMC8GA1UEBRMoOUI0RkNEMUVEMDZBMUU0QkExQzRCRTlGMUQxMEIyOTQ1 RTkyOEMxOTAeFw0yNTA3MDEwODU5MzFaFw0yNTA3MDgwODU5MzFaMBgxFjAUBgNV BAMTDTY4NjNhMzc0LWQ2YjgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC6w1hsanWx9Zvh7EJMo4SnNUb2XxNHrIWTaUt1aHceuLxOd2E7ewhtu6ArYCaA 9Ofbkr+OsxHRZ7A8wU8857cQnzi52QgS5IJDz80GjRTWcW92aVMOxiiJStSPBxeE /nGUS8pM0FheEL2ru3rEGj/M8AMst1NBnGKFigJ6It5GzctzGjIetn6lRAxOGSao 0Oh2lqyzUIdRDzFJFpXORpyinJHm9Lm9z7SQSFDQqnowl19XVEBSl8LbyeyERRtb sAuQrbKAGcg5b9YbHoHyOwYBB6pczn1asELkIYciBK6ukhPAjHGaY4cskjuztVoY zlqClKnZlnNSL969JBaRX1pbAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUgYBULHku +jzrBQSK1PdEQhU4LK4wHwYDVR0jBBgwFoAUm0/NHtBqHkuhxL6fHRCylF6SjBkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk2NzgwL0VGMTdDM0Q2NTI1 QjExRjBBODM2MjI0MEM0RjlBRTAyL20wX05IdEJxSGt1aHhMNmZIUkN5bEY2U2pC ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvbTBfTkh0QnFIa3VoeEw2ZkhSQ3lsRjZTakJrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk2 NzgwL0VGMTdDM0Q2NTI1QjExRjBBODM2MjI0MEM0RjlBRTAyL20wX05IdEJxSGt1 aHhMNmZIUkN5bEY2U2pCay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAKVhZ3O+Hl8xN6oNziF9JSTgt3fbOG44wen6VQZ7jrTbJpNeU95tvdDa 7PYxzNpytlbpZk49WQEr2RxBHT8luiV/O3DcEbaGesBR7B1iFr4WDU8VG5rctv5s mpTCt7HkkkgNxv4yTvO7+6gq9DZ8O1CqjhH6vKeMGnY3da2zRyXb4oaCLVkYDG9f zdLTukW8kiNHKWquTCXFEf0/IAYrVp5QEoKgNUnz8W4FSN9UTcAM0c+SXd3r38z3 qD6fAq4P663CbFmTzOB/l1pxIabwfvYLZ/4AeYLquiV+HaiBlIT5nYr7boT6XfRs /cPa8CsUVyw1XsbEePBbwSFcWQBmkqw= -----END CERTIFICATE-----Generated at Thu Jul 3 06:04:25 2025 by rpki-client