$ rpki-client -vvf rpki.apnic.net/member_repository/A911BCDD/348AD8AC861311EEA8C95042C4F9AE02/nkKx9pFGDihG-nHwbcib8sdB25o.mft File: nkKx9pFGDihG-nHwbcib8sdB25o.mft (raw, json) Hash identifier: O4O/lnFLE4xa1X2+Q2bG15KwsUHDS/FZHjwqz4OhyPc= Subject key identifier: 7A:67:DC:72:69:47:93:D9:AA:2F:3F:1E:CB:B8:78:14:E2:E3:0B:AC Authority key identifier: 9E:42:B1:F6:91:46:0E:28:46:FA:71:F0:6D:C8:9B:F2:C7:41:DB:9A Certificate issuer: /CN=A911BCDD/serialNumber=9E42B1F691460E2846FA71F06DC89BF2C741DB9A Certificate serial: 012A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nkKx9pFGDihG-nHwbcib8sdB25o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911BCDD/348AD8AC861311EEA8C95042C4F9AE02/nkKx9pFGDihG-nHwbcib8sdB25o.mft Manifest number: 0127 Signing time: Fri 13 Jun 2025 03:37:21 +0000 Manifest this update: Fri 13 Jun 2025 03:37:21 +0000 Manifest next update: Fri 20 Jun 2025 03:37:20 +0000 Files and hashes: 1: nkKx9pFGDihG-nHwbcib8sdB25o.crl (hash: ubweWTPGzwY+Ih02w0Ghok36DrL2bVxeqhu5MkILGqc=) 2: 5ED417AE869011EEA9011A36C4F9AE02.roa (hash: secqQJuczQrOBoLhJh1bWX70I59NSlP/4Mk301elvvU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911BCDD/348AD8AC861311EEA8C95042C4F9AE02/nkKx9pFGDihG-nHwbcib8sdB25o.crl rsync://rpki.apnic.net/member_repository/A911BCDD/348AD8AC861311EEA8C95042C4F9AE02/nkKx9pFGDihG-nHwbcib8sdB25o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nkKx9pFGDihG-nHwbcib8sdB25o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 03:37:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 298 (0x12a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911BCDD, serialNumber=9E42B1F691460E2846FA71F06DC89BF2C741DB9A Validity Not Before: Jun 13 03:37:21 2025 GMT Not After : Jun 20 03:37:20 2025 GMT Subject: CN=684b9cf1-7476 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:8a:6c:38:07:7a:e7:d7:54:a1:53:fd:56:00: cf:9c:81:e9:19:bb:c6:66:06:8c:45:ba:bb:32:ad: 5d:b9:32:5f:fa:da:c6:84:b4:ac:ea:c7:25:85:8c: de:a9:e4:6c:06:95:26:5b:08:58:91:9c:b3:7d:56: f4:fc:ae:0e:84:53:7f:a2:76:78:d6:14:02:b7:2d: 6f:91:5d:fd:66:cf:3c:56:ab:b2:14:c7:d3:dc:4c: ca:b3:cb:fb:22:f8:e4:20:d2:2f:28:10:2f:21:34: e7:f3:24:41:28:59:79:9c:02:f0:77:e2:c7:80:3c: f5:8e:e9:b6:0b:50:f2:3f:dd:b5:fb:09:f4:b3:51: c6:bf:a6:61:48:42:ed:60:13:cd:9d:b8:dc:29:88: b5:b0:93:56:04:b5:15:4c:ee:fa:a0:69:f5:70:dc: 3a:86:26:fb:0c:00:f2:29:ed:28:94:7c:64:2d:0e: 96:42:f5:f9:89:91:68:cc:0c:f1:3e:2e:b4:a8:72: 3a:ea:cc:64:80:e3:c2:fb:b7:2f:3f:40:b0:32:d0: db:c1:16:5c:b4:0b:1b:cf:0c:65:b1:61:ec:48:71: 01:1a:ad:c4:97:b5:46:3f:d4:c4:1a:40:98:47:7a: ec:77:14:f8:52:32:2d:58:e6:94:db:d5:60:79:92: 94:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:67:DC:72:69:47:93:D9:AA:2F:3F:1E:CB:B8:78:14:E2:E3:0B:AC X509v3 Authority Key Identifier: keyid:9E:42:B1:F6:91:46:0E:28:46:FA:71:F0:6D:C8:9B:F2:C7:41:DB:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911BCDD/348AD8AC861311EEA8C95042C4F9AE02/nkKx9pFGDihG-nHwbcib8sdB25o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nkKx9pFGDihG-nHwbcib8sdB25o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911BCDD/348AD8AC861311EEA8C95042C4F9AE02/nkKx9pFGDihG-nHwbcib8sdB25o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 58:63:6f:53:6c:b3:5d:a3:9f:68:c3:f3:96:e9:b5:cb:50:ea: 8c:bc:22:b0:e3:bc:8f:11:78:7a:29:27:5c:2a:33:bb:45:5a: 11:28:07:da:35:58:a5:f6:10:b5:2a:e8:85:47:d3:d5:4d:0d: 11:62:ed:69:b1:7c:53:a2:e0:50:ad:17:89:ad:37:ef:19:06: 6a:af:47:81:5d:9d:82:60:a4:31:df:53:bf:40:63:e4:e4:34: 10:f9:84:db:0f:5e:ba:7b:08:56:ee:87:d5:2b:70:7a:cf:87: d8:93:27:0b:25:33:f8:fc:32:93:d3:9e:17:d0:c7:00:52:c2: 7b:d7:bb:6b:e0:c5:7f:79:62:51:29:e8:d4:29:e6:ac:e8:40: f1:c8:9d:2e:61:4b:ca:10:4d:91:77:19:e0:b9:bf:3e:85:68: 5a:22:5b:da:60:08:05:d0:b7:3f:26:1b:2e:68:97:6f:55:22: 95:00:8b:6f:a4:75:a4:05:45:17:a3:84:8b:4d:27:a3:73:2d: 3d:5c:39:81:17:6f:90:c4:57:56:fd:c6:ee:7d:a5:8e:4b:79: d3:63:5c:93:ad:78:9a:07:59:e4:d9:54:b8:8c:01:1e:d1:35: 5a:41:96:12:42:44:9d:27:5a:47:92:e3:b3:9f:e8:10:50:53: 33:e3:c4:75 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUJDREQxMTAvBgNVBAUTKDlFNDJCMUY2OTE0NjBFMjg0NkZBNzFGMDZEQzg5QkYy Qzc0MURCOUEwHhcNMjUwNjEzMDMzNzIxWhcNMjUwNjIwMDMzNzIwWjAYMRYwFAYD VQQDEw02ODRiOWNmMS03NDc2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtYpsOAd659dUoVP9VgDPnIHpGbvGZgaMRbq7Mq1duTJf+trGhLSs6sclhYze qeRsBpUmWwhYkZyzfVb0/K4OhFN/onZ41hQCty1vkV39Zs88VquyFMfT3EzKs8v7 IvjkINIvKBAvITTn8yRBKFl5nALwd+LHgDz1jum2C1DyP921+wn0s1HGv6ZhSELt YBPNnbjcKYi1sJNWBLUVTO76oGn1cNw6hib7DADyKe0olHxkLQ6WQvX5iZFozAzx Pi60qHI66sxkgOPC+7cvP0CwMtDbwRZctAsbzwxlsWHsSHEBGq3El7VGP9TEGkCY R3rsdxT4UjItWOaU29VgeZKU6QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHpn3HJp R5PZqi8/Hsu4eBTi4wusMB8GA1UdIwQYMBaAFJ5CsfaRRg4oRvpx8G3Im/LHQdua MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQkNERC8zNDhBRDhBQzg2 MTMxMUVFQThDOTUwNDJDNEY5QUUwMi9ua0t4OXBGR0RpaEctbkh3YmNpYjhzZEIy NW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25rS3g5cEZHRGloRy1uSHdiY2liOHNkQjI1by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QkNERC8zNDhBRDhBQzg2MTMxMUVFQThDOTUwNDJDNEY5QUUwMi9ua0t4OXBGR0Rp aEctbkh3YmNpYjhzZEIyNW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBYY29TbLNdo59ow/OW6bXLUOqMvCKw47yPEXh6KSdcKjO7RVoRKAfa NVil9hC1KuiFR9PVTQ0RYu1psXxTouBQrReJrTfvGQZqr0eBXZ2CYKQx31O/QGPk 5DQQ+YTbD166ewhW7ofVK3B6z4fYkycLJTP4/DKT054X0McAUsJ717tr4MV/eWJR KejUKeas6EDxyJ0uYUvKEE2Rdxngub8+hWhaIlvaYAgF0Lc/JhsuaJdvVSKVAItv pHWkBUUXo4SLTSejcy09XDmBF2+QxFdW/cbufaWOS3nTY1yTrXiaB1nk2VS4jAEe 0TVaQZYSQkSdJ1pHkuOzn+gQUFMz48R1 -----END CERTIFICATE-----Generated at Sat Jun 14 18:52:56 2025 by rpki-client