$ rpki-client -vvf rpki.apnic.net/member_repository/A9138478/6B8AD84E433011EBA6E0221EC4F9AE02/NOjGYqqdzVGVDfX6xAWs8WyNMKA.mft File: NOjGYqqdzVGVDfX6xAWs8WyNMKA.mft (raw, json) Hash identifier: IU/aW4Zyp/qlf7w3oARbDIJeXkuEFyYtyGMtVdvcZYM= Subject key identifier: 6B:4E:E7:77:60:29:47:80:81:73:F5:14:D1:2B:0D:E0:E9:D5:F3:3A Authority key identifier: 34:E8:C6:62:AA:9D:CD:51:95:0D:F5:FA:C4:05:AC:F1:6C:8D:30:A0 Certificate issuer: /CN=A9138478/serialNumber=34E8C662AA9DCD51950DF5FAC405ACF16C8D30A0 Certificate serial: 0713 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NOjGYqqdzVGVDfX6xAWs8WyNMKA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9138478/6B8AD84E433011EBA6E0221EC4F9AE02/NOjGYqqdzVGVDfX6xAWs8WyNMKA.mft Manifest number: 070B Signing time: Sat 14 Jun 2025 21:39:08 +0000 Manifest this update: Sat 14 Jun 2025 21:39:07 +0000 Manifest next update: Sat 21 Jun 2025 21:39:07 +0000 Files and hashes: 1: NOjGYqqdzVGVDfX6xAWs8WyNMKA.crl (hash: vMpohSeGx5acjVCabWWeoUHEApumnNNbR7KYsCt2J1k=) 2: 6AC2B9AA187B11ED92148716C4F9AE02.roa (hash: bd6xDrsI8VNBf0/b6lDTgdvsxuTBwH6yXjfUiwvhRpg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9138478/6B8AD84E433011EBA6E0221EC4F9AE02/NOjGYqqdzVGVDfX6xAWs8WyNMKA.crl rsync://rpki.apnic.net/member_repository/A9138478/6B8AD84E433011EBA6E0221EC4F9AE02/NOjGYqqdzVGVDfX6xAWs8WyNMKA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NOjGYqqdzVGVDfX6xAWs8WyNMKA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 21:39:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1811 (0x713) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9138478, serialNumber=34E8C662AA9DCD51950DF5FAC405ACF16C8D30A0 Validity Not Before: Jun 14 21:39:07 2025 GMT Not After : Jun 21 21:39:07 2025 GMT Subject: CN=684debfc-4fc6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:56:5a:9e:60:80:88:62:af:f2:7b:64:78:95: 85:4e:85:28:60:be:ed:78:f0:48:ce:42:2d:6d:29: c9:7e:a2:5f:a7:5f:22:5a:59:26:b2:e7:db:29:04: c5:60:f1:d2:57:d3:06:a7:e7:07:4e:98:0f:6b:31: b2:76:ee:b6:f3:8f:73:20:a6:b3:7a:c9:9b:c0:ff: 39:09:de:f9:b1:6e:30:06:4c:ab:e1:b8:f4:00:37: b2:0a:78:e2:c3:ae:38:e0:0d:0e:93:fc:a9:03:ba: 8d:e3:a0:6b:49:b1:18:8c:b8:8e:43:19:83:12:9b: a7:28:ac:73:79:83:7a:72:f5:16:00:b4:c1:0d:2b: 24:c9:b2:c1:8e:dd:1a:70:55:35:19:05:1a:51:28: e6:61:15:a4:9d:f2:45:99:29:1e:0f:17:6a:63:cb: fd:b7:6e:79:67:a6:01:0f:70:eb:10:bd:d7:67:4d: df:10:ea:55:b8:92:a4:6e:8d:e4:a7:01:25:96:2e: 39:05:90:be:51:d3:0e:6e:3d:3e:07:61:2a:7a:f8: b1:c8:12:22:8b:f7:ab:e5:a7:46:9e:2f:d5:ef:c7: 7e:cf:60:61:1a:e7:3e:75:1a:5b:6d:c2:6e:d3:f0: 00:67:cf:f3:bc:8d:36:ad:a7:45:ad:b1:45:16:cd: 0b:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:4E:E7:77:60:29:47:80:81:73:F5:14:D1:2B:0D:E0:E9:D5:F3:3A X509v3 Authority Key Identifier: keyid:34:E8:C6:62:AA:9D:CD:51:95:0D:F5:FA:C4:05:AC:F1:6C:8D:30:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9138478/6B8AD84E433011EBA6E0221EC4F9AE02/NOjGYqqdzVGVDfX6xAWs8WyNMKA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NOjGYqqdzVGVDfX6xAWs8WyNMKA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9138478/6B8AD84E433011EBA6E0221EC4F9AE02/NOjGYqqdzVGVDfX6xAWs8WyNMKA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 23:19:ba:3d:b5:ca:f6:e4:7b:c1:dd:63:27:7b:c3:78:23:54: f8:dd:e3:3b:7f:fe:46:d3:88:8c:40:3a:00:e6:21:12:ed:92: 3f:73:bb:30:20:22:0e:2f:bf:f9:b0:69:14:31:7e:f7:0f:bc: 2d:35:97:c4:30:dd:ce:b2:45:53:55:0b:fe:04:fe:7a:7b:87: 5f:4b:24:c3:0b:73:76:b6:4b:ca:e7:e2:0d:78:33:ae:a9:cd: 0b:fc:29:19:57:5c:ef:d9:e2:9f:87:e6:70:ed:5c:2b:27:d5: df:2f:05:9d:78:f6:00:74:f7:c0:59:a2:90:61:c1:57:8d:33: aa:67:a6:6f:33:3f:2e:2a:55:66:98:bf:91:08:3c:2d:4d:2c: ad:42:7a:53:0f:36:69:72:67:da:0c:8b:24:49:7f:9c:90:66: 32:13:35:d6:58:26:60:7c:4a:fd:df:63:37:82:db:28:7f:e1: 8f:6e:a8:98:61:f2:ff:90:13:83:41:21:d4:90:68:f5:80:f3: 25:76:18:16:f8:61:43:69:a9:c2:95:ec:40:ea:a0:d5:38:87: 19:7a:19:f2:c0:16:4f:dc:4f:5a:3c:27:aa:d2:0c:b1:d3:13: b6:76:42:50:60:76:3b:5b:3c:e8:a7:b2:3d:68:2e:77:3d:ed: 15:4a:b4:61 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBxMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mzg0NzgxMTAvBgNVBAUTKDM0RThDNjYyQUE5RENENTE5NTBERjVGQUM0MDVBQ0Yx NkM4RDMwQTAwHhcNMjUwNjE0MjEzOTA3WhcNMjUwNjIxMjEzOTA3WjAYMRYwFAYD VQQDEw02ODRkZWJmYy00ZmM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv1ZanmCAiGKv8ntkeJWFToUoYL7tePBIzkItbSnJfqJfp18iWlkmsufbKQTF YPHSV9MGp+cHTpgPazGydu62849zIKazesmbwP85Cd75sW4wBkyr4bj0ADeyCnji w6444A0Ok/ypA7qN46BrSbEYjLiOQxmDEpunKKxzeYN6cvUWALTBDSskybLBjt0a cFU1GQUaUSjmYRWknfJFmSkeDxdqY8v9t255Z6YBD3DrEL3XZ03fEOpVuJKkbo3k pwElli45BZC+UdMObj0+B2EqevixyBIii/er5adGni/V78d+z2BhGuc+dRpbbcJu 0/AAZ8/zvI02radFrbFFFs0LJwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGtO53dg KUeAgXP1FNErDeDp1fM6MB8GA1UdIwQYMBaAFDToxmKqnc1RlQ31+sQFrPFsjTCg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzODQ3OC82QjhBRDg0RTQz MzAxMUVCQTZFMDIyMUVDNEY5QUUwMi9OT2pHWXFxZHpWR1ZEZlg2eEFXczhXeU5N S0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05PakdZcXFkelZHVkRmWDZ4QVdzOFd5Tk1LQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz ODQ3OC82QjhBRDg0RTQzMzAxMUVCQTZFMDIyMUVDNEY5QUUwMi9OT2pHWXFxZHpW R1ZEZlg2eEFXczhXeU5NS0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAjGbo9tcr25HvB3WMne8N4I1T43eM7f/5G04iMQDoA5iES7ZI/c7sw ICIOL7/5sGkUMX73D7wtNZfEMN3OskVTVQv+BP56e4dfSyTDC3N2tkvK5+INeDOu qc0L/CkZV1zv2eKfh+Zw7VwrJ9XfLwWdePYAdPfAWaKQYcFXjTOqZ6ZvMz8uKlVm mL+RCDwtTSytQnpTDzZpcmfaDIskSX+ckGYyEzXWWCZgfEr932M3gtsof+GPbqiY YfL/kBODQSHUkGj1gPMldhgW+GFDaanClexA6qDVOIcZehnywBZP3E9aPCeq0gyx 0xO2dkJQYHY7Wzzop7I9aC53Pe0VSrRh -----END CERTIFICATE-----Generated at Sun Jun 15 10:00:36 2025 by rpki-client