$ rpki-client -vvf rpki.apnic.net/member_repository/A911ED2C/00373C6C9BBC11EE851ADD50C4F9AE02/nTQUKDsie49RLzBfKs20PN6eTRI.mft File: nTQUKDsie49RLzBfKs20PN6eTRI.mft (raw, json) Hash identifier: sbQhS1F3b+O3RO2ufeGH6onlEygVSzeUarXN7lR3zJk= Subject key identifier: EB:ED:73:F2:87:11:3A:CD:6A:82:44:72:AB:BE:07:E6:43:09:C7:F2 Authority key identifier: 9D:34:14:28:3B:22:7B:8F:51:2F:30:5F:2A:CD:B4:3C:DE:9E:4D:12 Certificate issuer: /CN=A911ED2C/serialNumber=9D3414283B227B8F512F305F2ACDB43CDE9E4D12 Certificate serial: 015F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nTQUKDsie49RLzBfKs20PN6eTRI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911ED2C/00373C6C9BBC11EE851ADD50C4F9AE02/nTQUKDsie49RLzBfKs20PN6eTRI.mft Manifest number: 013B Signing time: Tue 17 Jun 2025 03:51:03 +0000 Manifest this update: Tue 17 Jun 2025 03:51:01 +0000 Manifest next update: Tue 24 Jun 2025 03:51:01 +0000 Files and hashes: 1: nTQUKDsie49RLzBfKs20PN6eTRI.crl (hash: RhourCAH9XKwSxDIegwBVHBL3ycGKlWLU3vJqhiX0ew=) 2: CA364B681A1711F0A1D93523C4F9AE02.roa (hash: H7vVzWCwUc4gHrSDyxvt/Abb/5bSd+LGYG3bv6YBZ6Q=) 3: C75B642268F211EFB7A6A06EC4F9AE02.roa (hash: kOYdujebZuJtzPQYq/KrU4LAvGLUwAviwH7iInIzQIw=) 4: 908E69B20D4311F0B83AB36BC4F9AE02.roa (hash: T3LJotaESWHFF09iX5g1WTlmIxWJcjLGAaC0q00LC9A=) 5: 551036FCF1CA11EFA1495230C4F9AE02.roa (hash: arzezzJwAi/t7BgHje9UcAsQE7JCDVVYoepFJmOQbF8=) 6: EDAA86E4AD6D11EE83DA6253C4F9AE02.roa (hash: lAFnFIzcRDVgDsSYcjZRPgQLtWezbOK+1/I57oP5hYQ=) 7: 3C880EBABEEF11EF9178186BC4F9AE02.roa (hash: iJAvuEQuZJZzuKlMozj/voZPn9Nd6pZK++lpcpudEMw=) 8: EC985F92AD6D11EE83DA6253C4F9AE02.roa (hash: w8uUD+FE/qLP77HxuP2e7CVi5lI4nhNhSCuDldSdTWM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911ED2C/00373C6C9BBC11EE851ADD50C4F9AE02/nTQUKDsie49RLzBfKs20PN6eTRI.crl rsync://rpki.apnic.net/member_repository/A911ED2C/00373C6C9BBC11EE851ADD50C4F9AE02/nTQUKDsie49RLzBfKs20PN6eTRI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nTQUKDsie49RLzBfKs20PN6eTRI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 24 Jun 2025 03:51:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 351 (0x15f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911ED2C, serialNumber=9D3414283B227B8F512F305F2ACDB43CDE9E4D12 Validity Not Before: Jun 17 03:51:01 2025 GMT Not After : Jun 24 03:51:01 2025 GMT Subject: CN=6850e626-7dd0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:7f:42:24:4a:fe:3f:51:64:e8:30:0b:43:03: fd:6e:2a:2c:bc:d8:e9:88:7b:d0:69:92:62:0e:95: 5a:9c:27:09:3b:0b:85:e1:cb:8c:f5:32:ca:22:4b: 8c:8a:d3:d8:30:92:d8:3d:0f:a9:8e:f5:43:e3:a2: c7:3c:b9:c9:14:e4:44:05:58:1c:7c:29:a0:f8:68: cb:a1:6a:6e:22:f0:5e:70:07:5a:ef:6d:06:01:88: f9:77:bc:2b:5a:42:46:16:ac:bd:3c:ce:4b:96:8e: 5b:4d:87:45:3f:ab:b8:2b:90:1d:09:49:c5:a9:2b: a0:bc:db:2a:bc:17:71:db:cf:86:eb:30:49:90:86: a3:64:14:73:0a:73:0b:5d:7a:79:cc:e4:e5:76:ef: 05:5a:b1:e6:67:e5:e6:6c:d5:eb:3c:78:cb:86:af: 74:34:9f:40:04:dc:e7:f3:ba:0e:15:72:e2:c8:0e: b7:a5:6d:ab:a7:6a:f4:d4:02:fb:37:bf:9c:1d:b8: b0:d0:85:18:32:1f:54:ec:1e:82:3f:32:65:e1:3e: 04:b0:45:ca:46:56:95:8c:83:8d:b0:94:64:2c:71: 07:35:c1:7a:c8:1b:53:a1:b5:3a:18:b6:da:4d:3e: d7:cf:16:14:43:31:73:28:c5:b5:3f:45:03:9b:72: 83:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:ED:73:F2:87:11:3A:CD:6A:82:44:72:AB:BE:07:E6:43:09:C7:F2 X509v3 Authority Key Identifier: keyid:9D:34:14:28:3B:22:7B:8F:51:2F:30:5F:2A:CD:B4:3C:DE:9E:4D:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911ED2C/00373C6C9BBC11EE851ADD50C4F9AE02/nTQUKDsie49RLzBfKs20PN6eTRI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nTQUKDsie49RLzBfKs20PN6eTRI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911ED2C/00373C6C9BBC11EE851ADD50C4F9AE02/nTQUKDsie49RLzBfKs20PN6eTRI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 31:22:6a:20:db:c3:e8:80:39:18:b6:83:fa:2c:be:c6:ae:ca: da:c8:d4:3c:24:65:62:6e:9f:ea:23:00:51:b8:e8:09:b4:80: f8:d7:07:14:f0:ba:33:f6:60:a6:55:ff:53:9b:36:cd:87:91: cc:0e:8b:95:78:16:4d:52:7e:71:dd:6b:56:33:28:41:d5:2d: 58:d1:78:6f:c4:bc:49:c9:b5:0d:c8:a8:05:62:f1:ff:46:86: 16:ac:a5:55:01:b6:46:bf:31:f5:03:58:7f:e6:5e:a1:ea:75: c9:34:13:3c:a0:da:6e:4a:8d:ca:bf:8b:f2:a6:e2:03:56:67: ab:93:d7:d1:04:51:06:27:1c:ec:e8:6c:4e:d2:18:e5:5d:3f: 6a:2d:7c:e4:7b:d0:75:67:5f:fa:f9:8e:ce:65:f7:e5:e6:a2: a4:43:ba:15:d3:75:f3:fe:07:b2:64:ea:8f:f1:79:4b:09:f4: cd:cf:24:2a:42:c8:ea:84:1f:0c:62:74:44:95:eb:6a:54:1b: ca:28:18:18:85:fc:06:42:c0:cf:51:8b:28:84:f0:06:12:ce: 27:f6:55:d8:ce:de:a0:41:ca:a4:ff:3f:79:69:96:c7:3b:f1: c9:66:d7:c7:7c:be:5e:fc:d0:b0:60:fe:5c:8a:90:18:d1:47: 98:37:8e:12 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAV8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUVEMkMxMTAvBgNVBAUTKDlEMzQxNDI4M0IyMjdCOEY1MTJGMzA1RjJBQ0RCNDND REU5RTREMTIwHhcNMjUwNjE3MDM1MTAxWhcNMjUwNjI0MDM1MTAxWjAYMRYwFAYD VQQDEw02ODUwZTYyNi03ZGQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6H9CJEr+P1Fk6DALQwP9biosvNjpiHvQaZJiDpVanCcJOwuF4cuM9TLKIkuM itPYMJLYPQ+pjvVD46LHPLnJFOREBVgcfCmg+GjLoWpuIvBecAda720GAYj5d7wr WkJGFqy9PM5Llo5bTYdFP6u4K5AdCUnFqSugvNsqvBdx28+G6zBJkIajZBRzCnML XXp5zOTldu8FWrHmZ+XmbNXrPHjLhq90NJ9ABNzn87oOFXLiyA63pW2rp2r01AL7 N7+cHbiw0IUYMh9U7B6CPzJl4T4EsEXKRlaVjIONsJRkLHEHNcF6yBtTobU6GLba TT7XzxYUQzFzKMW1P0UDm3KDOwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOvtc/KH ETrNaoJEcqu+B+ZDCcfyMB8GA1UdIwQYMBaAFJ00FCg7InuPUS8wXyrNtDzenk0S MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRUQyQy8wMDM3M0M2QzlC QkMxMUVFODUxQURENTBDNEY5QUUwMi9uVFFVS0RzaWU0OVJMekJmS3MyMFBONmVU UkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25UUVVLRHNpZTQ5Ukx6QmZLczIwUE42ZVRSSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RUQyQy8wMDM3M0M2QzlCQkMxMUVFODUxQURENTBDNEY5QUUwMi9uVFFVS0RzaWU0 OVJMekJmS3MyMFBONmVUUkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAxImog28PogDkYtoP6LL7GrsrayNQ8JGVibp/qIwBRuOgJtID41wcU 8Loz9mCmVf9TmzbNh5HMDouVeBZNUn5x3WtWMyhB1S1Y0XhvxLxJybUNyKgFYvH/ RoYWrKVVAbZGvzH1A1h/5l6h6nXJNBM8oNpuSo3Kv4vypuIDVmerk9fRBFEGJxzs 6GxO0hjlXT9qLXzke9B1Z1/6+Y7OZffl5qKkQ7oV03Xz/geyZOqP8XlLCfTNzyQq QsjqhB8MYnREletqVBvKKBgYhfwGQsDPUYsohPAGEs4n9lXYzt6gQcqk/z95aZbH O/HJZtfHfL5e/NCwYP5cipAY0UeYN44S -----END CERTIFICATE-----Generated at Tue Jun 17 15:33:10 2025 by rpki-client