$ rpki-client -vvf rpki.apnic.net/member_repository/A91E2EFF/AB975BCE484911F0BF070370C4F9AE02/NUM8nsQICZ9wGLxRRB0ixMEfw4U.mft File: NUM8nsQICZ9wGLxRRB0ixMEfw4U.mft (raw, json) Hash identifier: IzY+MwLkGqq9rQAv0kxeOK4Ez9w+MdAfvfyPAFRq/6Q= Subject key identifier: A5:12:FB:83:15:45:A7:14:9E:A9:8C:2F:60:7D:96:D8:B2:87:63:A1 Authority key identifier: 35:43:3C:9E:C4:08:09:9F:70:18:BC:51:44:1D:22:C4:C1:1F:C3:85 Certificate issuer: /CN=A91E2EFF/serialNumber=35433C9EC408099F7018BC51441D22C4C11FC385 Certificate serial: 0C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NUM8nsQICZ9wGLxRRB0ixMEfw4U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E2EFF/AB975BCE484911F0BF070370C4F9AE02/NUM8nsQICZ9wGLxRRB0ixMEfw4U.mft Manifest number: 0B Signing time: Tue 01 Jul 2025 08:55:40 +0000 Manifest this update: Tue 01 Jul 2025 08:55:40 +0000 Manifest next update: Tue 08 Jul 2025 08:55:40 +0000 Files and hashes: 1: NUM8nsQICZ9wGLxRRB0ixMEfw4U.crl (hash: 4n5Zwv3tqO1KJVHsI41F+lgNmmFuXGo74YVp1OWJrM4=) 2: 370DA046484A11F0B96B9D10C4F9AE02.roa (hash: 2Lm246NHiIIsj3yU5G9cofOj46hOe93SJKM95sww3VY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E2EFF/AB975BCE484911F0BF070370C4F9AE02/NUM8nsQICZ9wGLxRRB0ixMEfw4U.crl rsync://rpki.apnic.net/member_repository/A91E2EFF/AB975BCE484911F0BF070370C4F9AE02/NUM8nsQICZ9wGLxRRB0ixMEfw4U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NUM8nsQICZ9wGLxRRB0ixMEfw4U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 08:55:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12 (0xc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E2EFF, serialNumber=35433C9EC408099F7018BC51441D22C4C11FC385 Validity Not Before: Jul 1 08:55:40 2025 GMT Not After : Jul 8 08:55:40 2025 GMT Subject: CN=6863a28c-ba54 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:43:5c:e1:50:8d:53:6d:b7:3f:1d:18:24:69: 2d:a9:f5:e0:67:6e:7f:2c:9e:dc:19:e7:25:2f:6a: f1:f5:ef:32:ee:2c:74:a9:4c:08:c8:26:b9:30:5e: df:cb:e9:3e:0b:af:56:2b:e4:d5:a6:a4:a5:b2:74: 19:96:f1:41:2e:4d:27:33:8e:78:41:72:45:56:e6: 4c:e5:bd:5f:3c:9e:92:cc:51:88:99:c7:96:76:35: 28:06:9e:e5:fb:4c:35:4a:78:21:69:30:07:6f:e1: 67:cd:20:c7:d0:21:8c:ca:e4:9d:2e:99:eb:78:9b: a8:bc:71:07:f5:e3:a3:23:56:9a:3a:c9:ec:fe:0e: d8:83:ac:ec:9c:09:f4:89:70:a8:bf:05:6e:f6:c7: 9f:33:71:14:25:7e:36:56:40:56:91:cb:1f:64:7b: a8:54:4c:3f:53:d4:a9:02:9a:bd:aa:31:4f:42:a6: 8c:df:6c:42:38:83:3b:ed:87:eb:a0:16:d6:b5:0b: 6d:66:34:09:44:74:db:dd:fc:2e:15:75:11:75:5b: 4c:57:66:ac:aa:85:d0:1f:97:a6:2d:6e:e6:38:d8: 6d:da:a7:f7:9a:e7:a8:15:48:e6:92:82:c4:ab:af: 15:60:07:a2:43:b0:71:03:34:db:e1:28:af:69:e0: 45:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:12:FB:83:15:45:A7:14:9E:A9:8C:2F:60:7D:96:D8:B2:87:63:A1 X509v3 Authority Key Identifier: keyid:35:43:3C:9E:C4:08:09:9F:70:18:BC:51:44:1D:22:C4:C1:1F:C3:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E2EFF/AB975BCE484911F0BF070370C4F9AE02/NUM8nsQICZ9wGLxRRB0ixMEfw4U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NUM8nsQICZ9wGLxRRB0ixMEfw4U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E2EFF/AB975BCE484911F0BF070370C4F9AE02/NUM8nsQICZ9wGLxRRB0ixMEfw4U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0d:6a:6f:1f:11:46:2a:f5:ba:c9:22:f9:ea:f5:dd:bf:97:1c: ef:62:e4:6d:a2:e5:fc:02:69:3d:2d:cb:1f:37:49:c1:87:28: 88:1a:f4:26:96:01:bf:53:fa:c1:07:70:f4:db:75:99:cf:73: c3:c2:d8:e9:51:c5:54:8a:6c:23:e1:ba:87:86:bc:08:2b:8c: 6e:37:c5:18:4e:b2:ed:8c:ca:6c:ed:35:38:47:17:6e:8a:a8: 39:e9:07:94:09:eb:68:ba:e0:22:b1:0f:bc:bc:94:60:06:e5: 35:7b:65:d6:34:1c:a9:f3:b7:92:4c:6d:6f:71:77:09:9b:bf: f2:8d:f8:87:5d:22:b5:d5:32:70:d6:50:7d:7e:b1:82:59:63: 55:97:76:9e:0e:dd:d6:97:75:b9:90:b7:ca:7c:ce:e4:74:85: df:7f:f5:50:e3:aa:61:52:1d:9e:a9:be:b4:7b:e9:ed:0b:e6: 55:45:5d:71:d7:63:46:14:3b:eb:8d:68:2d:67:c2:7a:29:90: fc:f2:a7:9c:38:cb:1d:79:41:b5:b1:32:56:e3:5d:aa:53:7c: e6:37:15:2b:83:78:15:1d:ad:8d:7e:29:0f:6d:57:62:e3:ad: cc:57:4a:fb:2c:0e:34:77:67:33:fd:1f:0e:1b:f9:15:58:c5: b2:f6:51:ca -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBDDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF MkVGRjExMC8GA1UEBRMoMzU0MzNDOUVDNDA4MDk5RjcwMThCQzUxNDQxRDIyQzRD MTFGQzM4NTAeFw0yNTA3MDEwODU1NDBaFw0yNTA3MDgwODU1NDBaMBgxFjAUBgNV BAMTDTY4NjNhMjhjLWJhNTQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCfQ1zhUI1Tbbc/HRgkaS2p9eBnbn8sntwZ5yUvavH17zLuLHSpTAjIJrkwXt/L 6T4Lr1Yr5NWmpKWydBmW8UEuTSczjnhBckVW5kzlvV88npLMUYiZx5Z2NSgGnuX7 TDVKeCFpMAdv4WfNIMfQIYzK5J0umet4m6i8cQf146MjVpo6yez+DtiDrOycCfSJ cKi/BW72x58zcRQlfjZWQFaRyx9ke6hUTD9T1KkCmr2qMU9CpozfbEI4gzvth+ug Fta1C21mNAlEdNvd/C4VdRF1W0xXZqyqhdAfl6YtbuY42G3ap/ea56gVSOaSgsSr rxVgB6JDsHEDNNvhKK9p4EXtAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUpRL7gxVF pxSeqYwvYH2W2LKHY6EwHwYDVR0jBBgwFoAUNUM8nsQICZ9wGLxRRB0ixMEfw4Uw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUUyRUZGL0FCOTc1QkNFNDg0 OTExRjBCRjA3MDM3MEM0RjlBRTAyL05VTThuc1FJQ1o5d0dMeFJSQjBpeE1FZnc0 VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvTlVNOG5zUUlDWjl3R0x4UlJCMGl4TUVmdzRVLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUUy RUZGL0FCOTc1QkNFNDg0OTExRjBCRjA3MDM3MEM0RjlBRTAyL05VTThuc1FJQ1o5 d0dMeFJSQjBpeE1FZnc0VS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAA1qbx8RRir1uski+er13b+XHO9i5G2i5fwCaT0tyx83ScGHKIga9CaW Ab9T+sEHcPTbdZnPc8PC2OlRxVSKbCPhuoeGvAgrjG43xRhOsu2MymztNThHF26K qDnpB5QJ62i64CKxD7y8lGAG5TV7ZdY0HKnzt5JMbW9xdwmbv/KN+IddIrXVMnDW UH1+sYJZY1WXdp4O3daXdbmQt8p8zuR0hd9/9VDjqmFSHZ6pvrR76e0L5lVFXXHX Y0YUO+uNaC1nwnopkPzyp5w4yx15QbWxMlbjXapTfOY3FSuDeBUdrY1+KQ9tV2Lj rcxXSvssDjR3ZzP9Hw4b+RVYxbL2Uco= -----END CERTIFICATE-----Generated at Wed Jul 2 05:05:53 2025 by rpki-client