$ rpki-client -vvf rpki.apnic.net/member_repository/A911B5B4/709F7A26B82911E993738A09C4F9AE02/nflMM9P2R649kTYeHxcsIGhvWYk.mft File: nflMM9P2R649kTYeHxcsIGhvWYk.mft (raw, json) Hash identifier: LxjhcPACjsrEIG0QsCTlL0rYS0b/R1coNWnveIfCO58= Subject key identifier: 74:53:2F:C2:35:24:92:B9:66:CD:8C:39:C5:04:A9:52:13:3B:17:A0 Authority key identifier: 9D:F9:4C:33:D3:F6:47:AE:3D:91:36:1E:1F:17:2C:20:68:6F:59:89 Certificate issuer: /CN=A911B5B4/serialNumber=9DF94C33D3F647AE3D91361E1F172C20686F5989 Certificate serial: 0DFB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nflMM9P2R649kTYeHxcsIGhvWYk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911B5B4/709F7A26B82911E993738A09C4F9AE02/nflMM9P2R649kTYeHxcsIGhvWYk.mft Manifest number: 0DD8 Signing time: Sat 14 Jun 2025 17:48:07 +0000 Manifest this update: Sat 14 Jun 2025 17:48:06 +0000 Manifest next update: Sat 21 Jun 2025 17:48:06 +0000 Files and hashes: 1: nflMM9P2R649kTYeHxcsIGhvWYk.crl (hash: NK2GjCWoWvJyc43+IKoGs4JL3ruGN+9fCfKuuj1Hl5E=) 2: 46B27CC6B82A11E9843DEE0AC4F9AE02.roa (hash: 8a6WJtEg8FJ5eHnpvgMwqod0UL5e0zTS0SwjCaK0jd4=) 3: 9E78AEC4C78E11EBB4983F5BC4F9AE02.roa (hash: kN9kZZVIv74yYHGXDsanuB3xPPBPu4OVgy2TpSGU+PU=) 4: 47E67066B82A11E9843DEE0AC4F9AE02.roa (hash: YggXfy20kvjf1iFOsIwuuVFkMi74/bpO/23VT4jrnTE=) 5: 9F8B79C2C78E11EBB4983F5BC4F9AE02.roa (hash: n/ZkcBxXbOU1wyzDS48DMJkcfdrM8k6k+BibFqk5ai8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911B5B4/709F7A26B82911E993738A09C4F9AE02/nflMM9P2R649kTYeHxcsIGhvWYk.crl rsync://rpki.apnic.net/member_repository/A911B5B4/709F7A26B82911E993738A09C4F9AE02/nflMM9P2R649kTYeHxcsIGhvWYk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nflMM9P2R649kTYeHxcsIGhvWYk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 17:48:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3579 (0xdfb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911B5B4, serialNumber=9DF94C33D3F647AE3D91361E1F172C20686F5989 Validity Not Before: Jun 14 17:48:06 2025 GMT Not After : Jun 21 17:48:06 2025 GMT Subject: CN=684db5d7-34c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:56:4b:72:fb:20:8f:0c:e3:df:c7:97:5d:89: 7a:3a:e3:13:03:6a:13:af:3e:f2:3f:9a:24:8f:1d: 8d:77:a2:9f:95:3e:77:35:74:42:45:e7:9b:26:5a: 51:66:ec:1c:c7:bd:d7:bb:7d:8f:52:02:5f:db:56: 0f:13:af:d1:97:b3:ab:6c:c9:94:c5:31:89:fd:6e: c8:65:e1:a3:53:6b:48:03:26:50:93:ba:02:42:8f: 8d:f9:04:a7:62:a5:da:14:e7:3b:1c:4c:98:3f:9b: 26:77:bb:02:ee:42:bf:c5:35:24:8d:9c:46:ac:8c: a0:b9:f0:bb:27:78:ce:d7:df:fc:db:49:65:d4:28: 06:30:cd:ac:3e:f5:36:39:81:6c:fc:fe:10:65:a6: 3d:39:14:08:a6:20:3a:a3:5c:8d:59:bc:34:00:7f: fb:44:e3:7b:8a:c6:80:3f:b6:fc:06:42:f9:70:d3: db:8e:af:23:89:f3:df:66:1e:20:f0:55:54:e6:d3: 39:d4:fb:e7:5b:e5:e1:6d:c1:c0:e2:f0:69:aa:06: bc:ca:0a:da:b0:08:6c:64:99:ca:d6:0c:32:45:81: 85:d7:95:dc:3a:80:7b:f2:be:53:4e:90:bb:98:d6: 58:fb:25:55:49:9b:15:c8:57:50:07:6a:60:00:7e: 1b:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:53:2F:C2:35:24:92:B9:66:CD:8C:39:C5:04:A9:52:13:3B:17:A0 X509v3 Authority Key Identifier: keyid:9D:F9:4C:33:D3:F6:47:AE:3D:91:36:1E:1F:17:2C:20:68:6F:59:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911B5B4/709F7A26B82911E993738A09C4F9AE02/nflMM9P2R649kTYeHxcsIGhvWYk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nflMM9P2R649kTYeHxcsIGhvWYk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911B5B4/709F7A26B82911E993738A09C4F9AE02/nflMM9P2R649kTYeHxcsIGhvWYk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 26:a6:31:2e:08:35:9e:7e:89:c6:54:d5:b6:7f:1b:23:ff:4c: 95:49:73:a9:25:ff:bc:9d:8d:17:c8:bc:51:d1:4f:b0:6f:92: bd:a2:b6:c6:5b:5b:32:4b:7d:87:1e:8d:ed:35:c2:8b:5d:91: 8d:0a:81:3f:3d:e1:f7:7c:c7:00:0a:3b:f8:f7:f1:40:50:0e: b3:97:73:bc:5f:dc:80:5d:01:f4:d5:78:7e:26:03:ff:7f:6d: 9b:f3:1f:58:37:fd:8d:60:cc:67:f5:1d:6c:7c:9b:86:c1:ff: 48:22:a9:d1:bb:ce:4a:07:53:c3:d9:2e:d3:e2:3a:03:61:fa: bb:49:c1:70:ff:1f:c7:5e:82:db:b0:7c:77:2c:c6:d7:94:d1: 49:2c:2c:0c:45:ed:34:d5:f0:a7:1c:56:c5:68:45:5a:70:8a: ee:f7:2b:40:e8:f5:65:b3:f8:68:3d:29:72:1d:63:5f:cd:8b: e3:e0:11:68:af:99:99:29:e1:80:d9:bb:3a:d6:06:25:9b:f3: d1:cc:7a:3e:ed:80:33:1e:07:d7:05:ce:f2:bd:8f:e0:56:04: 26:9b:31:5f:50:e3:b5:43:bd:67:29:92:a8:82:8e:b1:9d:a2: b0:c4:27:6d:a7:a2:5b:67:c8:85:de:ae:0f:86:34:9d:33:6d: 9f:10:af:d7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDfswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUI1QjQxMTAvBgNVBAUTKDlERjk0QzMzRDNGNjQ3QUUzRDkxMzYxRTFGMTcyQzIw Njg2RjU5ODkwHhcNMjUwNjE0MTc0ODA2WhcNMjUwNjIxMTc0ODA2WjAYMRYwFAYD VQQDEw02ODRkYjVkNy0zNGM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyFZLcvsgjwzj38eXXYl6OuMTA2oTrz7yP5okjx2Nd6KflT53NXRCReebJlpR Zuwcx73Xu32PUgJf21YPE6/Rl7OrbMmUxTGJ/W7IZeGjU2tIAyZQk7oCQo+N+QSn YqXaFOc7HEyYP5smd7sC7kK/xTUkjZxGrIygufC7J3jO19/820ll1CgGMM2sPvU2 OYFs/P4QZaY9ORQIpiA6o1yNWbw0AH/7RON7isaAP7b8BkL5cNPbjq8jifPfZh4g 8FVU5tM51PvnW+XhbcHA4vBpqga8ygrasAhsZJnK1gwyRYGF15XcOoB78r5TTpC7 mNZY+yVVSZsVyFdQB2pgAH4b1QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHRTL8I1 JJK5Zs2MOcUEqVITOxegMB8GA1UdIwQYMBaAFJ35TDPT9keuPZE2Hh8XLCBob1mJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQjVCNC83MDlGN0EyNkI4 MjkxMUU5OTM3MzhBMDlDNEY5QUUwMi9uZmxNTTlQMlI2NDlrVFllSHhjc0lHaHZX WWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25mbE1NOVAyUjY0OWtUWWVIeGNzSUdodldZay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QjVCNC83MDlGN0EyNkI4MjkxMUU5OTM3MzhBMDlDNEY5QUUwMi9uZmxNTTlQMlI2 NDlrVFllSHhjc0lHaHZXWWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAmpjEuCDWefonGVNW2fxsj/0yVSXOpJf+8nY0XyLxR0U+wb5K9orbG W1syS32HHo3tNcKLXZGNCoE/PeH3fMcACjv49/FAUA6zl3O8X9yAXQH01Xh+JgP/ f22b8x9YN/2NYMxn9R1sfJuGwf9IIqnRu85KB1PD2S7T4joDYfq7ScFw/x/HXoLb sHx3LMbXlNFJLCwMRe001fCnHFbFaEVacIru9ytA6PVls/hoPSlyHWNfzYvj4BFo r5mZKeGA2bs61gYlm/PRzHo+7YAzHgfXBc7yvY/gVgQmmzFfUOO1Q71nKZKogo6x naKwxCdtp6JbZ8iF3q4PhjSdM22fEK/X -----END CERTIFICATE-----Generated at Sun Jun 15 09:53:15 2025 by rpki-client