$ rpki-client -vvf rpki.apnic.net/member_repository/A911ED2C/00373C6C9BBC11EE851ADD50C4F9AE02/nTQUKDsie49RLzBfKs20PN6eTRI.mft File: nTQUKDsie49RLzBfKs20PN6eTRI.mft (raw, json) Hash identifier: JWYnzJb3EeNxkMYNdNFScqBdeav0OQJi3gLVz18SbAI= Subject key identifier: 16:65:78:E2:33:B6:CC:BC:C4:C3:99:08:BD:3F:16:A1:71:72:FF:06 Authority key identifier: 9D:34:14:28:3B:22:7B:8F:51:2F:30:5F:2A:CD:B4:3C:DE:9E:4D:12 Certificate issuer: /CN=A911ED2C/serialNumber=9D3414283B227B8F512F305F2ACDB43CDE9E4D12 Certificate serial: 017E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nTQUKDsie49RLzBfKs20PN6eTRI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911ED2C/00373C6C9BBC11EE851ADD50C4F9AE02/nTQUKDsie49RLzBfKs20PN6eTRI.mft Manifest number: 0158 Signing time: Thu 07 Aug 2025 05:01:08 +0000 Manifest this update: Thu 07 Aug 2025 05:01:08 +0000 Manifest next update: Thu 14 Aug 2025 05:01:08 +0000 Files and hashes: 1: nTQUKDsie49RLzBfKs20PN6eTRI.crl (hash: HsGfiS+kDDfD/tHNSr7hRQPYJ89VRsrr3H0jw14wXdY=) 2: 31C9441E68ED11F0BA447B41C4F9AE02.roa (hash: KOUKQ6BoYe+OZvts9QDaZtXw/6SYWRIeerxskHjMAvw=) 3: CA364B681A1711F0A1D93523C4F9AE02.roa (hash: H7vVzWCwUc4gHrSDyxvt/Abb/5bSd+LGYG3bv6YBZ6Q=) 4: 908E69B20D4311F0B83AB36BC4F9AE02.roa (hash: T3LJotaESWHFF09iX5g1WTlmIxWJcjLGAaC0q00LC9A=) 5: EDAA86E4AD6D11EE83DA6253C4F9AE02.roa (hash: lAFnFIzcRDVgDsSYcjZRPgQLtWezbOK+1/I57oP5hYQ=) 6: 3C880EBABEEF11EF9178186BC4F9AE02.roa (hash: iJAvuEQuZJZzuKlMozj/voZPn9Nd6pZK++lpcpudEMw=) 7: C75B642268F211EFB7A6A06EC4F9AE02.roa (hash: kOYdujebZuJtzPQYq/KrU4LAvGLUwAviwH7iInIzQIw=) 8: 551036FCF1CA11EFA1495230C4F9AE02.roa (hash: g1HOTpLTf3sk5gSzo54dPs52/QkaTA4XgGi9Wow0trs=) 9: EC985F92AD6D11EE83DA6253C4F9AE02.roa (hash: w8uUD+FE/qLP77HxuP2e7CVi5lI4nhNhSCuDldSdTWM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911ED2C/00373C6C9BBC11EE851ADD50C4F9AE02/nTQUKDsie49RLzBfKs20PN6eTRI.crl rsync://rpki.apnic.net/member_repository/A911ED2C/00373C6C9BBC11EE851ADD50C4F9AE02/nTQUKDsie49RLzBfKs20PN6eTRI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nTQUKDsie49RLzBfKs20PN6eTRI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 382 (0x17e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911ED2C, serialNumber=9D3414283B227B8F512F305F2ACDB43CDE9E4D12 Validity Not Before: Aug 7 05:01:08 2025 GMT Not After : Aug 14 05:01:08 2025 GMT Subject: CN=68943314-cccf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:bd:ac:28:e1:2b:29:ec:17:97:26:d2:b0:cf: 4a:93:ee:52:ed:a2:57:f4:ba:e6:b5:29:23:fa:cb: 70:f4:46:93:a5:d7:1e:54:08:6a:bb:0f:d9:13:c9: 6a:7f:97:fd:13:29:20:1b:59:0d:db:4e:6e:21:bd: 05:e9:c4:b5:00:f5:f3:d7:20:bd:ac:b6:79:17:e1: a8:14:96:ee:9a:2c:df:da:67:d2:1c:3d:37:75:de: 7a:ff:11:7a:79:bf:24:4c:77:1f:4f:7a:bd:90:e4: 00:d8:4f:a5:a4:20:5a:68:52:7e:ba:6c:7a:72:45: 4c:7a:c6:e3:3a:25:3d:79:f4:34:18:84:c6:f9:04: b8:08:88:51:84:9c:9a:d5:b0:04:c2:ed:8d:4a:6f: 60:24:df:b6:6c:b4:22:ac:31:25:0e:46:9f:fd:e9: 38:14:33:0f:f9:a4:eb:75:84:13:cb:2f:bb:4b:ff: ea:b1:6f:2a:b2:e2:8e:c7:6b:73:8a:63:ef:af:56: e3:4e:9e:a2:e0:cc:04:cc:74:d3:3e:da:ed:d8:b7: bf:64:b9:5f:06:8b:ef:69:78:a7:49:e0:13:07:25: 55:26:d3:b5:72:63:ec:94:3c:90:ec:cc:66:3b:20: 93:1f:11:7d:08:bf:6f:56:fa:b0:87:d9:96:a8:5a: 45:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:65:78:E2:33:B6:CC:BC:C4:C3:99:08:BD:3F:16:A1:71:72:FF:06 X509v3 Authority Key Identifier: keyid:9D:34:14:28:3B:22:7B:8F:51:2F:30:5F:2A:CD:B4:3C:DE:9E:4D:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911ED2C/00373C6C9BBC11EE851ADD50C4F9AE02/nTQUKDsie49RLzBfKs20PN6eTRI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nTQUKDsie49RLzBfKs20PN6eTRI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911ED2C/00373C6C9BBC11EE851ADD50C4F9AE02/nTQUKDsie49RLzBfKs20PN6eTRI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4e:5a:23:23:6b:4e:62:f6:9b:39:3b:8d:12:f4:85:e2:75:35: 5a:ab:21:ff:79:27:19:db:23:05:bf:1a:94:4d:72:a5:73:dd: 6b:3f:55:0e:0f:c8:e2:c9:68:73:a5:17:fd:32:1f:a2:4b:ae: f6:0b:03:06:2c:48:3b:93:76:ec:ef:2f:17:1b:83:8a:f7:d4: 25:98:60:ed:44:9c:97:8d:04:7e:c1:3c:9a:d3:c1:9c:d1:91: f2:d4:77:be:59:48:a9:02:9f:b6:82:cb:21:6a:32:50:a2:22: 5b:79:d3:8d:6d:70:78:21:23:81:46:ea:aa:0b:27:5a:22:45: a8:38:b6:53:48:0d:15:24:ae:71:40:1d:2e:a3:51:87:6d:c7: ae:bc:77:ca:44:d8:7f:5e:ef:9c:04:3f:45:dd:78:0a:8e:83: 39:de:2e:c4:74:74:03:21:4e:db:ad:55:58:a4:26:95:62:55: 1f:af:74:d4:0c:cd:84:cc:85:a1:32:8b:d8:70:67:f8:2e:f2: 08:44:be:03:49:7d:4c:53:51:01:e8:71:41:33:8f:5f:b3:38: fd:63:48:65:fa:f5:59:36:68:38:a2:f5:4e:f4:9d:1e:cb:a4: 63:1c:5a:50:eb:ff:49:5f:b1:93:73:84:6d:f4:65:e0:06:14: 37:7f:a6:0b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAX4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUVEMkMxMTAvBgNVBAUTKDlEMzQxNDI4M0IyMjdCOEY1MTJGMzA1RjJBQ0RCNDND REU5RTREMTIwHhcNMjUwODA3MDUwMTA4WhcNMjUwODE0MDUwMTA4WjAYMRYwFAYD VQQDEw02ODk0MzMxNC1jY2NmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr72sKOErKewXlybSsM9Kk+5S7aJX9LrmtSkj+stw9EaTpdceVAhquw/ZE8lq f5f9EykgG1kN205uIb0F6cS1APXz1yC9rLZ5F+GoFJbumizf2mfSHD03dd56/xF6 eb8kTHcfT3q9kOQA2E+lpCBaaFJ+umx6ckVMesbjOiU9efQ0GITG+QS4CIhRhJya 1bAEwu2NSm9gJN+2bLQirDElDkaf/ek4FDMP+aTrdYQTyy+7S//qsW8qsuKOx2tz imPvr1bjTp6i4MwEzHTTPtrt2Le/ZLlfBovvaXinSeATByVVJtO1cmPslDyQ7Mxm OyCTHxF9CL9vVvqwh9mWqFpFVwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBZleOIz tsy8xMOZCL0/FqFxcv8GMB8GA1UdIwQYMBaAFJ00FCg7InuPUS8wXyrNtDzenk0S MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRUQyQy8wMDM3M0M2QzlC QkMxMUVFODUxQURENTBDNEY5QUUwMi9uVFFVS0RzaWU0OVJMekJmS3MyMFBONmVU UkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25UUVVLRHNpZTQ5Ukx6QmZLczIwUE42ZVRSSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RUQyQy8wMDM3M0M2QzlCQkMxMUVFODUxQURENTBDNEY5QUUwMi9uVFFVS0RzaWU0 OVJMekJmS3MyMFBONmVUUkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBOWiMja05i9ps5O40S9IXidTVaqyH/eScZ2yMFvxqUTXKlc91rP1UO D8jiyWhzpRf9Mh+iS672CwMGLEg7k3bs7y8XG4OK99QlmGDtRJyXjQR+wTya08Gc 0ZHy1He+WUipAp+2gsshajJQoiJbedONbXB4ISOBRuqqCydaIkWoOLZTSA0VJK5x QB0uo1GHbceuvHfKRNh/Xu+cBD9F3XgKjoM53i7EdHQDIU7brVVYpCaVYlUfr3TU DM2EzIWhMovYcGf4LvIIRL4DSX1MU1EB6HFBM49fszj9Y0hl+vVZNmg4ovVO9J0e y6RjHFpQ6/9JX7GTc4Rt9GXgBhQ3f6YL -----END CERTIFICATE-----Generated at Fri Aug 8 19:24:02 2025 by rpki-client