$ rpki-client -vvf rpki.apnic.net/member_repository/A911894F/963CF0CEEC5E11E48E7D0119C4F9AE02/NhKQaSiZCCzeI_UEU6QVXgqreXg.mft File: NhKQaSiZCCzeI_UEU6QVXgqreXg.mft (raw, json) Hash identifier: zINb/8lusPJIyOFQ08Z+dQ41ww8TvRtDkOAYLAj+6QI= Subject key identifier: C0:3E:7A:FA:41:36:B2:E8:21:05:08:01:93:21:E2:1F:B8:EB:2F:07 Authority key identifier: 36:12:90:69:28:99:08:2C:DE:23:F5:04:53:A4:15:5E:0A:AB:79:78 Certificate issuer: /CN=A911894F/serialNumber=361290692899082CDE23F50453A4155E0AAB7978 Certificate serial: 2664 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NhKQaSiZCCzeI_UEU6QVXgqreXg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911894F/963CF0CEEC5E11E48E7D0119C4F9AE02/NhKQaSiZCCzeI_UEU6QVXgqreXg.mft Manifest number: 2652 Signing time: Sat 14 Jun 2025 15:39:57 +0000 Manifest this update: Sat 14 Jun 2025 15:39:56 +0000 Manifest next update: Sat 21 Jun 2025 15:39:56 +0000 Files and hashes: 1: NhKQaSiZCCzeI_UEU6QVXgqreXg.crl (hash: YEgQuCfjjrgt8TkoLfAV7WPjAWldUqS62DxR5B7PQWg=) 2: 802FBE707FEB11EB8B5E2817C4F9AE02.roa (hash: 9/RiaD7uB0sOA1UktuQmdvYmR8W/ohMuly3N0jCGO/k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911894F/963CF0CEEC5E11E48E7D0119C4F9AE02/NhKQaSiZCCzeI_UEU6QVXgqreXg.crl rsync://rpki.apnic.net/member_repository/A911894F/963CF0CEEC5E11E48E7D0119C4F9AE02/NhKQaSiZCCzeI_UEU6QVXgqreXg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NhKQaSiZCCzeI_UEU6QVXgqreXg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 15:39:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9828 (0x2664) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911894F, serialNumber=361290692899082CDE23F50453A4155E0AAB7978 Validity Not Before: Jun 14 15:39:56 2025 GMT Not After : Jun 21 15:39:56 2025 GMT Subject: CN=684d97cc-756e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:7d:c4:19:97:d6:6d:7f:8c:8f:a4:4b:1f:78: b9:d9:42:ef:05:ef:65:36:c7:1d:c4:77:fa:ca:95: 47:fb:a4:1c:2b:9d:0d:46:08:75:51:87:f7:31:44: 7a:58:14:48:f6:f0:30:7d:54:8b:39:76:c0:2c:83: bd:65:52:4f:f7:48:77:19:e4:c9:35:fd:9e:c0:65: d4:92:76:5c:ba:0a:06:de:cd:8f:8d:fc:5c:e6:6c: 2a:3e:a3:a3:54:b1:d7:3f:83:8a:0b:05:e5:b4:18: c6:2f:90:cd:87:ff:9c:60:98:f0:e5:a4:f7:ec:03: 5c:12:5f:f2:f0:3a:fa:38:af:49:c2:44:cb:68:03: bf:da:e2:3a:de:de:fe:05:ef:8f:92:86:3a:92:98: 2b:19:71:74:8b:f4:37:af:e1:32:8b:2c:79:ed:0b: b4:eb:16:5d:de:01:f0:4f:07:62:2b:66:e7:e1:60: e1:56:f3:68:ce:69:c5:74:0b:fd:cc:d9:88:c7:81: 09:29:4a:9b:b0:28:82:c6:73:4a:fc:e5:5c:50:5a: 03:fd:73:3c:a0:e7:bd:ca:28:e9:70:5a:7c:56:3f: 1b:35:61:50:3b:87:6e:02:98:f7:36:33:56:da:fd: 7f:ee:e2:0b:ad:27:f1:e0:f8:a3:46:9c:ce:0c:4f: 96:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:3E:7A:FA:41:36:B2:E8:21:05:08:01:93:21:E2:1F:B8:EB:2F:07 X509v3 Authority Key Identifier: keyid:36:12:90:69:28:99:08:2C:DE:23:F5:04:53:A4:15:5E:0A:AB:79:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911894F/963CF0CEEC5E11E48E7D0119C4F9AE02/NhKQaSiZCCzeI_UEU6QVXgqreXg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NhKQaSiZCCzeI_UEU6QVXgqreXg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911894F/963CF0CEEC5E11E48E7D0119C4F9AE02/NhKQaSiZCCzeI_UEU6QVXgqreXg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 39:51:ac:a3:76:f6:eb:53:5a:b0:fb:75:cc:ca:05:b3:51:60: 2b:3c:95:95:67:69:4f:1f:bb:3c:a9:4e:dc:dd:33:3c:11:cd: a3:d9:1e:11:87:6c:5c:71:44:a0:5d:15:21:3a:ae:ed:d0:79: 43:ae:5e:c8:03:04:60:30:43:8b:15:d8:85:ab:e6:5c:e4:c8: fc:d3:7f:0b:3f:3c:f4:d0:1f:f6:e0:00:42:9a:ef:e3:5f:74: 52:1a:53:15:b6:8d:87:f8:b8:a7:02:0f:5e:e2:23:61:98:7f: c3:45:f6:bf:18:af:40:28:2a:dd:17:fe:0d:0a:c2:e4:8c:55: fd:6e:f2:25:bf:97:a9:18:d6:b7:5c:99:67:04:18:82:bb:64: ad:82:b4:38:43:82:65:21:06:ec:bc:ae:26:12:27:1b:cb:96: 1a:17:d1:bb:13:72:0d:23:01:c8:3d:36:f7:e1:7e:d2:be:0e: ae:91:36:0b:24:c2:18:2f:30:d4:2d:d1:d8:16:0c:55:7e:96: aa:d6:0a:8e:b5:b3:3d:63:4a:08:7f:21:bb:4f:3c:a9:90:90: c4:75:a6:90:10:c8:12:42:de:47:73:1e:7e:f8:c4:d4:11:d5: 23:9b:da:44:6a:20:ee:cb:70:60:a7:53:f4:49:65:83:29:29: 23:70:89:37 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJmQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTg5NEYxMTAvBgNVBAUTKDM2MTI5MDY5Mjg5OTA4MkNERTIzRjUwNDUzQTQxNTVF MEFBQjc5NzgwHhcNMjUwNjE0MTUzOTU2WhcNMjUwNjIxMTUzOTU2WjAYMRYwFAYD VQQDEw02ODRkOTdjYy03NTZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw33EGZfWbX+Mj6RLH3i52ULvBe9lNscdxHf6ypVH+6QcK50NRgh1UYf3MUR6 WBRI9vAwfVSLOXbALIO9ZVJP90h3GeTJNf2ewGXUknZcugoG3s2Pjfxc5mwqPqOj VLHXP4OKCwXltBjGL5DNh/+cYJjw5aT37ANcEl/y8Dr6OK9JwkTLaAO/2uI63t7+ Be+PkoY6kpgrGXF0i/Q3r+Eyiyx57Qu06xZd3gHwTwdiK2bn4WDhVvNozmnFdAv9 zNmIx4EJKUqbsCiCxnNK/OVcUFoD/XM8oOe9yijpcFp8Vj8bNWFQO4duApj3NjNW 2v1/7uILrSfx4PijRpzODE+WhQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMA+evpB NrLoIQUIAZMh4h+46y8HMB8GA1UdIwQYMBaAFDYSkGkomQgs3iP1BFOkFV4Kq3l4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExODk0Ri85NjNDRjBDRUVD NUUxMUU0OEU3RDAxMTlDNEY5QUUwMi9OaEtRYVNpWkNDemVJX1VFVTZRVlhncXJl WGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05oS1FhU2laQ0N6ZUlfVUVVNlFWWGdxcmVYZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx ODk0Ri85NjNDRjBDRUVDNUUxMUU0OEU3RDAxMTlDNEY5QUUwMi9OaEtRYVNpWkND emVJX1VFVTZRVlhncXJlWGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA5UayjdvbrU1qw+3XMygWzUWArPJWVZ2lPH7s8qU7c3TM8Ec2j2R4R h2xccUSgXRUhOq7t0HlDrl7IAwRgMEOLFdiFq+Zc5Mj8038LPzz00B/24ABCmu/j X3RSGlMVto2H+LinAg9e4iNhmH/DRfa/GK9AKCrdF/4NCsLkjFX9bvIlv5epGNa3 XJlnBBiCu2StgrQ4Q4JlIQbsvK4mEicby5YaF9G7E3INIwHIPTb34X7Svg6ukTYL JMIYLzDULdHYFgxVfpaq1gqOtbM9Y0oIfyG7TzypkJDEdaaQEMgSQt5Hcx5++MTU EdUjm9pEaiDuy3Bgp1P0SWWDKSkjcIk3 -----END CERTIFICATE-----Generated at Sun Jun 15 08:05:58 2025 by rpki-client