$ rpki-client -vvf rpki.apnic.net/member_repository/A9118A69/C62011D60CE811EF9EFDA31BC4F9AE02/NQcxtmBE00o9LadYm9gzHRRf5Jg.mft File: NQcxtmBE00o9LadYm9gzHRRf5Jg.mft (raw, json) Hash identifier: UVhYpmG9rt9da2rmxq1mOeovyGezkh/6NWXZykdpuzs= Subject key identifier: 33:8F:CB:03:F7:B4:02:D2:25:07:E4:64:FB:78:59:C9:27:07:41:01 Authority key identifier: 35:07:31:B6:60:44:D3:4A:3D:2D:A7:58:9B:D8:33:1D:14:5F:E4:98 Certificate issuer: /CN=A9118A69/serialNumber=350731B66044D34A3D2DA7589BD8331D145FE498 Certificate serial: CF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NQcxtmBE00o9LadYm9gzHRRf5Jg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9118A69/C62011D60CE811EF9EFDA31BC4F9AE02/NQcxtmBE00o9LadYm9gzHRRf5Jg.mft Manifest number: CD Signing time: Fri 13 Jun 2025 04:37:58 +0000 Manifest this update: Fri 13 Jun 2025 04:37:58 +0000 Manifest next update: Fri 20 Jun 2025 04:37:58 +0000 Files and hashes: 1: NQcxtmBE00o9LadYm9gzHRRf5Jg.crl (hash: 8SPk7dK2K2WOR/Kaj1nZmK+2dPrsjaaEc/uVuqJJDcw=) 2: 7036FFF00E9611EF8B4CB827C4F9AE02.roa (hash: Bv5PsAPlsXup053SqORErIKD7VS3IvYR+Xy+2uhjxJk=) 3: 6FC4A52C0E9611EF8B4CB827C4F9AE02.roa (hash: nHcMgveoHAwIifxJIS7PevVsDeef3KJmiIvXrtXar+Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9118A69/C62011D60CE811EF9EFDA31BC4F9AE02/NQcxtmBE00o9LadYm9gzHRRf5Jg.crl rsync://rpki.apnic.net/member_repository/A9118A69/C62011D60CE811EF9EFDA31BC4F9AE02/NQcxtmBE00o9LadYm9gzHRRf5Jg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NQcxtmBE00o9LadYm9gzHRRf5Jg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 04:37:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 207 (0xcf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9118A69, serialNumber=350731B66044D34A3D2DA7589BD8331D145FE498 Validity Not Before: Jun 13 04:37:58 2025 GMT Not After : Jun 20 04:37:58 2025 GMT Subject: CN=684bab26-5b2b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:bb:fc:6d:6f:d0:ab:bb:1f:7a:b8:96:1d:26: 18:f5:12:bf:ee:7a:fd:79:8d:f5:78:83:41:c6:62: 2b:06:39:8e:12:81:cd:bc:2a:65:65:70:86:b0:47: d3:66:d8:d8:93:4b:9c:11:56:2b:b9:c8:30:1e:bd: 02:d6:4a:48:eb:dd:f3:04:b2:c4:69:c9:51:59:62: 1a:d8:95:c6:52:94:f0:93:01:14:42:d7:4c:d5:99: d9:03:9a:10:e6:e5:f4:b0:ef:f4:f6:d1:58:45:59: 68:ce:e7:eb:f7:8e:6b:7a:fe:49:b5:5b:dd:cb:a6: e0:7e:9a:bf:d7:2a:58:fb:4a:8e:99:dc:c2:59:7f: 72:73:7e:c4:aa:6c:1e:97:c8:ab:ca:70:e7:88:07: e0:aa:36:d4:52:97:d1:81:72:29:92:22:8f:09:61: a8:cd:b9:3e:88:a1:e3:cf:61:8a:45:69:f4:75:f2: 4b:72:d8:43:37:a1:44:aa:fe:85:2f:36:01:d8:2b: 0d:0c:65:bc:d5:90:36:4c:08:fb:77:8e:cd:26:12: 65:1f:81:17:23:d7:d2:23:76:81:90:e8:39:0a:49: 8b:6e:ab:47:02:55:f4:fe:a9:7b:e5:2e:d2:30:c8: 25:88:ac:58:57:7e:46:87:89:74:b9:a4:2a:e2:6f: c8:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:8F:CB:03:F7:B4:02:D2:25:07:E4:64:FB:78:59:C9:27:07:41:01 X509v3 Authority Key Identifier: keyid:35:07:31:B6:60:44:D3:4A:3D:2D:A7:58:9B:D8:33:1D:14:5F:E4:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9118A69/C62011D60CE811EF9EFDA31BC4F9AE02/NQcxtmBE00o9LadYm9gzHRRf5Jg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NQcxtmBE00o9LadYm9gzHRRf5Jg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9118A69/C62011D60CE811EF9EFDA31BC4F9AE02/NQcxtmBE00o9LadYm9gzHRRf5Jg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3a:e5:b6:7e:b5:48:a9:99:e3:24:3d:5b:36:83:6d:4c:6d:23: fc:98:e0:fb:d6:d0:bf:47:13:e9:af:1a:e3:c2:51:98:b1:b2: 9e:46:a1:9b:61:f3:ab:2b:4d:b6:25:b6:60:6b:a3:89:08:70: 3b:8a:33:e7:e3:8c:11:f4:67:08:95:9c:01:79:0f:f4:14:a2: bc:67:ff:f9:f4:36:57:6f:84:bd:b3:78:8b:9e:9c:92:69:6f: 47:5b:b5:15:b5:22:90:ba:e9:30:cd:c7:2d:87:f8:0b:b5:37: f3:9a:24:3d:ba:32:a5:c3:c2:9d:f1:19:14:75:9a:f7:8c:2b: 40:84:30:8f:93:16:d9:42:ae:74:dd:98:d7:5a:d0:39:a1:25: 63:24:63:43:4f:36:fc:3d:da:57:84:0e:67:2f:f5:56:39:cd: 14:8a:83:ad:58:c8:85:27:f2:91:47:fe:f2:18:0c:ef:f6:bd: 67:55:77:ac:b5:14:ba:9a:aa:43:e1:4f:90:12:88:2a:9f:f3: f0:0c:88:fc:aa:48:81:a0:91:b2:fc:1f:39:ef:aa:09:3e:35: 6f:58:c8:76:a3:65:bf:f9:bd:70:4d:2d:cc:d6:95:29:9b:42: 75:71:11:b1:11:00:6f:8d:e7:07:fa:da:9c:4a:16:d4:78:87: dc:83:3f:27 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAM8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MThBNjkxMTAvBgNVBAUTKDM1MDczMUI2NjA0NEQzNEEzRDJEQTc1ODlCRDgzMzFE MTQ1RkU0OTgwHhcNMjUwNjEzMDQzNzU4WhcNMjUwNjIwMDQzNzU4WjAYMRYwFAYD VQQDEw02ODRiYWIyNi01YjJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAubv8bW/Qq7sferiWHSYY9RK/7nr9eY31eINBxmIrBjmOEoHNvCplZXCGsEfT ZtjYk0ucEVYrucgwHr0C1kpI693zBLLEaclRWWIa2JXGUpTwkwEUQtdM1ZnZA5oQ 5uX0sO/09tFYRVlozufr945rev5JtVvdy6bgfpq/1ypY+0qOmdzCWX9yc37Eqmwe l8irynDniAfgqjbUUpfRgXIpkiKPCWGozbk+iKHjz2GKRWn0dfJLcthDN6FEqv6F LzYB2CsNDGW81ZA2TAj7d47NJhJlH4EXI9fSI3aBkOg5CkmLbqtHAlX0/ql75S7S MMgliKxYV35Gh4l0uaQq4m/IVwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDOPywP3 tALSJQfkZPt4WcknB0EBMB8GA1UdIwQYMBaAFDUHMbZgRNNKPS2nWJvYMx0UX+SY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOEE2OS9DNjIwMTFENjBD RTgxMUVGOUVGREEzMUJDNEY5QUUwMi9OUWN4dG1CRTAwbzlMYWRZbTlnekhSUmY1 SmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05RY3h0bUJFMDBvOUxhZFltOWd6SFJSZjVKZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx OEE2OS9DNjIwMTFENjBDRTgxMUVGOUVGREEzMUJDNEY5QUUwMi9OUWN4dG1CRTAw bzlMYWRZbTlnekhSUmY1SmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA65bZ+tUipmeMkPVs2g21MbSP8mOD71tC/RxPprxrjwlGYsbKeRqGb YfOrK022JbZga6OJCHA7ijPn44wR9GcIlZwBeQ/0FKK8Z//59DZXb4S9s3iLnpyS aW9HW7UVtSKQuukwzccth/gLtTfzmiQ9ujKlw8Kd8RkUdZr3jCtAhDCPkxbZQq50 3ZjXWtA5oSVjJGNDTzb8PdpXhA5nL/VWOc0UioOtWMiFJ/KRR/7yGAzv9r1nVXes tRS6mqpD4U+QEogqn/PwDIj8qkiBoJGy/B8576oJPjVvWMh2o2W/+b1wTS3M1pUp m0J1cRGxEQBvjecH+tqcShbUeIfcgz8n -----END CERTIFICATE-----Generated at Sat Jun 14 19:38:38 2025 by rpki-client