$ rpki-client -vvf rpki.apnic.net/member_repository/A911E351/5BCF88A6784E11EC8A44450EC4F9AE02/NdqtT3Wuk43GUzSEzejIF93Csig.mft File: NdqtT3Wuk43GUzSEzejIF93Csig.mft (raw, json) Hash identifier: om50pykou/aygn6jTS2lWnm6jSGfo7yx69EUckbZKX8= Subject key identifier: 02:04:09:90:5E:24:68:13:47:E2:11:08:9A:6E:52:EB:3A:D9:46:44 Authority key identifier: 35:DA:AD:4F:75:AE:93:8D:C6:53:34:84:CD:E8:C8:17:DD:C2:B2:28 Certificate issuer: /CN=A911E351/serialNumber=35DAAD4F75AE938DC6533484CDE8C817DDC2B228 Certificate serial: 0401 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NdqtT3Wuk43GUzSEzejIF93Csig.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911E351/5BCF88A6784E11EC8A44450EC4F9AE02/NdqtT3Wuk43GUzSEzejIF93Csig.mft Manifest number: 03FD Signing time: Sun 15 Jun 2025 00:10:37 +0000 Manifest this update: Sun 15 Jun 2025 00:10:36 +0000 Manifest next update: Sun 22 Jun 2025 00:10:36 +0000 Files and hashes: 1: NdqtT3Wuk43GUzSEzejIF93Csig.crl (hash: 4P1aKMBoBp3CUDrS1him4s+oI3XGj28obCTdbiGJRlc=) 2: E9ED080A785011ECBD2B6A10C4F9AE02.roa (hash: iYM80ZUZv11SjTkmdUWv3G7CQp9g2JbkQfuMruAgJ5Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911E351/5BCF88A6784E11EC8A44450EC4F9AE02/NdqtT3Wuk43GUzSEzejIF93Csig.crl rsync://rpki.apnic.net/member_repository/A911E351/5BCF88A6784E11EC8A44450EC4F9AE02/NdqtT3Wuk43GUzSEzejIF93Csig.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NdqtT3Wuk43GUzSEzejIF93Csig.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Jun 2025 00:10:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1025 (0x401) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911E351, serialNumber=35DAAD4F75AE938DC6533484CDE8C817DDC2B228 Validity Not Before: Jun 15 00:10:36 2025 GMT Not After : Jun 22 00:10:36 2025 GMT Subject: CN=684e0f7d-6f95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:e4:31:a1:bf:cb:ca:5f:10:61:43:31:dd:ff: 48:d8:0e:f5:61:da:bd:1c:79:fb:f6:a2:6c:de:e1: 27:7b:4e:f8:a7:0a:fc:67:a0:d8:95:ef:64:47:7b: 69:b6:96:74:53:9f:ca:c5:62:da:8d:ca:ba:31:7d: c9:7b:59:9d:83:5a:34:07:ed:c4:92:d3:81:eb:cd: 9a:e1:b7:e4:80:47:94:c7:46:2a:2f:86:4e:bd:db: 34:23:96:5a:11:cd:d7:cb:76:7b:10:3b:e2:f7:cf: aa:a0:6a:5f:ba:eb:6b:91:27:3d:75:0f:07:be:4f: 2c:9d:d4:01:e5:2a:7f:9c:62:e1:0f:a1:a7:ef:dd: 35:61:cb:a7:13:4a:d5:6b:3a:ad:77:9e:11:e0:01: 40:b2:0a:37:78:cd:26:81:6a:78:30:dd:6c:b3:02: 35:ef:d7:cb:27:e9:2b:5c:63:8b:2a:33:63:58:7b: 1e:58:49:36:a5:94:19:49:1c:3b:a1:b8:ce:7f:76: c4:73:86:7b:a6:06:65:0e:16:79:ed:f4:e4:50:ce: 59:09:69:2f:1a:eb:17:e4:cc:15:8f:fc:74:76:16: 81:7a:d6:f6:48:c4:c0:22:fc:2a:74:1d:f0:e7:e1: 45:20:88:8c:c2:c9:c2:e1:d6:7a:65:1b:80:5d:9d: dc:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:04:09:90:5E:24:68:13:47:E2:11:08:9A:6E:52:EB:3A:D9:46:44 X509v3 Authority Key Identifier: keyid:35:DA:AD:4F:75:AE:93:8D:C6:53:34:84:CD:E8:C8:17:DD:C2:B2:28 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911E351/5BCF88A6784E11EC8A44450EC4F9AE02/NdqtT3Wuk43GUzSEzejIF93Csig.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NdqtT3Wuk43GUzSEzejIF93Csig.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911E351/5BCF88A6784E11EC8A44450EC4F9AE02/NdqtT3Wuk43GUzSEzejIF93Csig.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 72:43:6f:7a:5e:b5:5c:e2:5c:7c:92:1d:17:2e:af:6c:99:f0: 61:2b:ac:b7:af:ec:2e:4d:18:1e:d9:c8:fa:81:6f:10:af:2c: 6d:c1:d5:2c:23:79:37:f5:4b:09:92:30:63:51:48:73:a4:ec: 9f:71:83:4d:72:fe:91:ba:0c:4b:2b:62:58:b6:be:76:a5:f6: f2:53:48:c8:79:b9:26:d8:48:52:bd:49:19:1e:50:2a:ea:c2: f3:0f:fe:3c:bf:f7:c7:31:b7:ef:3a:5f:11:b4:ac:1e:46:e5: fa:68:8a:96:50:dd:5d:71:cb:00:45:cd:d5:a3:a8:1b:f9:c3: 31:09:7d:02:53:34:9c:72:a2:c0:4e:9c:67:ba:33:10:e3:8c: ad:9f:a5:ca:46:b8:0f:93:ac:a1:82:38:3d:44:b5:64:36:64: 75:e3:13:37:51:b7:d6:b6:ad:f4:ca:d9:3e:73:19:43:fd:3b: 2a:ed:51:ad:86:bb:08:a9:4f:58:74:c8:74:96:38:cf:d9:c8: 5e:fc:ad:23:bb:c0:8c:c2:ab:b7:3e:d9:48:eb:03:40:1a:f4: c2:71:1b:3b:4a:a2:9a:1a:9f:c0:f4:19:8d:bb:f2:32:43:c0: 76:47:5d:53:f2:ed:1e:22:7d:dc:7d:b2:a6:52:a9:b6:b3:7f: 07:05:d3:bc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBAEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUUzNTExMTAvBgNVBAUTKDM1REFBRDRGNzVBRTkzOERDNjUzMzQ4NENERThDODE3 RERDMkIyMjgwHhcNMjUwNjE1MDAxMDM2WhcNMjUwNjIyMDAxMDM2WjAYMRYwFAYD VQQDEw02ODRlMGY3ZC02Zjk1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr+Qxob/Lyl8QYUMx3f9I2A71Ydq9HHn79qJs3uEne074pwr8Z6DYle9kR3tp tpZ0U5/KxWLajcq6MX3Je1mdg1o0B+3EktOB682a4bfkgEeUx0YqL4ZOvds0I5Za Ec3Xy3Z7EDvi98+qoGpfuutrkSc9dQ8Hvk8sndQB5Sp/nGLhD6Gn7901YcunE0rV azqtd54R4AFAsgo3eM0mgWp4MN1sswI179fLJ+krXGOLKjNjWHseWEk2pZQZSRw7 objOf3bEc4Z7pgZlDhZ57fTkUM5ZCWkvGusX5MwVj/x0dhaBetb2SMTAIvwqdB3w 5+FFIIiMwsnC4dZ6ZRuAXZ3cBwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAIECZBe JGgTR+IRCJpuUus62UZEMB8GA1UdIwQYMBaAFDXarU91rpONxlM0hM3oyBfdwrIo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRTM1MS81QkNGODhBNjc4 NEUxMUVDOEE0NDQ1MEVDNEY5QUUwMi9OZHF0VDNXdWs0M0dVelNFemVqSUY5M0Nz aWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05kcXRUM1d1azQzR1V6U0V6ZWpJRjkzQ3NpZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RTM1MS81QkNGODhBNjc4NEUxMUVDOEE0NDQ1MEVDNEY5QUUwMi9OZHF0VDNXdWs0 M0dVelNFemVqSUY5M0NzaWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQByQ296XrVc4lx8kh0XLq9smfBhK6y3r+wuTRge2cj6gW8QryxtwdUs I3k39UsJkjBjUUhzpOyfcYNNcv6RugxLK2JYtr52pfbyU0jIebkm2EhSvUkZHlAq 6sLzD/48v/fHMbfvOl8RtKweRuX6aIqWUN1dccsARc3Vo6gb+cMxCX0CUzSccqLA TpxnujMQ44ytn6XKRrgPk6yhgjg9RLVkNmR14xM3UbfWtq30ytk+cxlD/Tsq7VGt hrsIqU9YdMh0ljjP2che/K0ju8CMwqu3PtlI6wNAGvTCcRs7SqKaGp/A9BmNu/Iy Q8B2R11T8u0eIn3cfbKmUqm2s38HBdO8 -----END CERTIFICATE-----Generated at Sun Jun 15 08:52:24 2025 by rpki-client