$ rpki-client -vvf rpki.apnic.net/member_repository/A913F0DF/E5083648992811EEBBCAE87AC4F9AE02/nQi_OKDTi4yrfP2I9djE7WZ3jME.mft File: nQi_OKDTi4yrfP2I9djE7WZ3jME.mft (raw, json) Hash identifier: UhMyTf7Kg3WiEmnSAUc+F5hQ6l2hnUbawmiZYYnKfts= Subject key identifier: 47:30:16:53:FC:9E:C4:A9:C9:98:EB:04:C0:41:37:52:8F:E0:50:2D Authority key identifier: 9D:08:BF:38:A0:D3:8B:8C:AB:7C:FD:88:F5:D8:C4:ED:66:77:8C:C1 Certificate issuer: /CN=A913F0DF/serialNumber=9D08BF38A0D38B8CAB7CFD88F5D8C4ED66778CC1 Certificate serial: 011F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nQi_OKDTi4yrfP2I9djE7WZ3jME.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913F0DF/E5083648992811EEBBCAE87AC4F9AE02/nQi_OKDTi4yrfP2I9djE7WZ3jME.mft Manifest number: 011C Signing time: Sun 15 Jun 2025 03:59:36 +0000 Manifest this update: Sun 15 Jun 2025 03:59:36 +0000 Manifest next update: Sun 22 Jun 2025 03:59:36 +0000 Files and hashes: 1: nQi_OKDTi4yrfP2I9djE7WZ3jME.crl (hash: acW6yYd5ooPoRiVhiSycQzFX/XlWj1P9v7UWLMpiqVk=) 2: 7C7AF8E6E67011EEB76DCB76C4F9AE02.roa (hash: tBwNVvJX12RI1rw1ArvMyaYybwsSqQmw1mHttd1wbm0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913F0DF/E5083648992811EEBBCAE87AC4F9AE02/nQi_OKDTi4yrfP2I9djE7WZ3jME.crl rsync://rpki.apnic.net/member_repository/A913F0DF/E5083648992811EEBBCAE87AC4F9AE02/nQi_OKDTi4yrfP2I9djE7WZ3jME.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nQi_OKDTi4yrfP2I9djE7WZ3jME.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Jun 2025 03:59:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 287 (0x11f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913F0DF, serialNumber=9D08BF38A0D38B8CAB7CFD88F5D8C4ED66778CC1 Validity Not Before: Jun 15 03:59:36 2025 GMT Not After : Jun 22 03:59:36 2025 GMT Subject: CN=684e4528-7c34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:0e:40:1e:f0:78:3e:86:5c:1a:6b:98:cc:25: d7:6b:1e:96:07:9a:b1:ab:ba:82:d1:b0:62:6b:d1: b5:d4:28:84:b4:86:39:58:5e:88:82:e7:dd:70:f3: a9:39:3d:89:00:3d:8e:12:44:35:26:ef:df:af:dc: 64:d4:3d:0b:07:47:1f:6b:55:20:3e:b3:66:04:30: cf:a3:db:49:1e:e7:6a:e1:69:a4:8c:aa:6f:2f:c8: 20:b4:86:ea:04:8b:24:33:bc:d4:d1:99:ea:ad:ea: 03:e8:13:74:2c:b1:be:e9:cb:78:43:2c:52:1d:4c: bc:41:10:c3:00:b3:be:e0:3b:19:e1:a5:65:84:14: 55:61:30:71:62:88:5a:54:61:86:30:59:7f:0a:e4: 17:4b:0c:c3:0e:45:5a:e5:ce:33:5e:25:ce:45:60: 51:a9:64:af:3a:c8:4d:5a:4e:23:be:38:e1:49:5b: 9b:c8:73:6a:a4:98:30:dc:ff:d6:60:63:0f:3e:c1: 71:d1:23:f8:9e:41:95:da:e3:6c:78:fa:f9:55:0b: 26:e2:d4:24:0a:aa:69:0e:59:4f:91:de:88:12:73: ea:c8:7e:79:98:e0:17:46:bd:74:ef:b6:73:93:c0: ea:ac:d0:74:ae:57:b6:88:ff:a0:0a:62:b2:ad:c5: 6f:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:30:16:53:FC:9E:C4:A9:C9:98:EB:04:C0:41:37:52:8F:E0:50:2D X509v3 Authority Key Identifier: keyid:9D:08:BF:38:A0:D3:8B:8C:AB:7C:FD:88:F5:D8:C4:ED:66:77:8C:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913F0DF/E5083648992811EEBBCAE87AC4F9AE02/nQi_OKDTi4yrfP2I9djE7WZ3jME.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nQi_OKDTi4yrfP2I9djE7WZ3jME.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913F0DF/E5083648992811EEBBCAE87AC4F9AE02/nQi_OKDTi4yrfP2I9djE7WZ3jME.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 40:07:e2:36:84:56:85:27:61:b4:50:6d:df:17:91:19:59:03: ca:6a:6f:4a:68:cf:1b:74:29:6d:0b:b9:47:ea:66:53:70:1b: 32:ef:ae:69:03:73:81:82:bd:3e:9f:b4:05:52:bc:95:01:3b: 45:ad:54:f1:0f:2e:9b:9e:dc:60:30:8e:e1:4f:5a:19:60:8f: be:e0:11:f6:68:b0:d8:26:93:91:c5:ba:5d:30:e0:20:5e:17: 40:98:ff:98:64:39:98:74:2b:d7:05:98:cb:c9:74:d1:7f:b8: 8e:a7:cb:d0:47:82:ff:85:37:30:a5:48:8b:af:88:99:e7:0b: 77:71:29:fc:51:d1:cd:15:19:42:b3:08:05:7b:35:b2:29:99: 20:f1:e8:f2:0a:bc:2b:10:6f:1f:e3:dc:6f:c2:5f:f7:95:e1: c0:65:22:2e:a1:b6:18:d9:1c:55:17:ff:4d:c5:26:3b:b1:3a: af:d9:da:91:08:97:87:1b:6e:2a:b2:ed:ce:a5:ac:60:9b:9a: 27:5c:c1:63:dd:c4:a9:d2:04:b2:3d:95:08:9d:7f:b9:17:43: e1:5b:20:b7:a1:9f:ae:c7:84:a1:29:7d:0c:1e:0b:9b:9a:96: 4d:b0:95:aa:21:d7:ba:6e:70:64:a5:ff:ca:c8:90:ff:13:e3: 25:63:86:42 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAR8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0YwREYxMTAvBgNVBAUTKDlEMDhCRjM4QTBEMzhCOENBQjdDRkQ4OEY1RDhDNEVE NjY3NzhDQzEwHhcNMjUwNjE1MDM1OTM2WhcNMjUwNjIyMDM1OTM2WjAYMRYwFAYD VQQDEw02ODRlNDUyOC03YzM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyQ5AHvB4PoZcGmuYzCXXax6WB5qxq7qC0bBia9G11CiEtIY5WF6IgufdcPOp OT2JAD2OEkQ1Ju/fr9xk1D0LB0cfa1UgPrNmBDDPo9tJHudq4WmkjKpvL8ggtIbq BIskM7zU0ZnqreoD6BN0LLG+6ct4QyxSHUy8QRDDALO+4DsZ4aVlhBRVYTBxYoha VGGGMFl/CuQXSwzDDkVa5c4zXiXORWBRqWSvOshNWk4jvjjhSVubyHNqpJgw3P/W YGMPPsFx0SP4nkGV2uNsePr5VQsm4tQkCqppDllPkd6IEnPqyH55mOAXRr1077Zz k8DqrNB0rle2iP+gCmKyrcVvdQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEcwFlP8 nsSpyZjrBMBBN1KP4FAtMB8GA1UdIwQYMBaAFJ0Ivzig04uMq3z9iPXYxO1md4zB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRjBERi9FNTA4MzY0ODk5 MjgxMUVFQkJDQUU4N0FDNEY5QUUwMi9uUWlfT0tEVGk0eXJmUDJJOWRqRTdXWjNq TUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25RaV9PS0RUaTR5cmZQMkk5ZGpFN1daM2pNRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RjBERi9FNTA4MzY0ODk5MjgxMUVFQkJDQUU4N0FDNEY5QUUwMi9uUWlfT0tEVGk0 eXJmUDJJOWRqRTdXWjNqTUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBAB+I2hFaFJ2G0UG3fF5EZWQPKam9KaM8bdCltC7lH6mZTcBsy765p A3OBgr0+n7QFUryVATtFrVTxDy6bntxgMI7hT1oZYI++4BH2aLDYJpORxbpdMOAg XhdAmP+YZDmYdCvXBZjLyXTRf7iOp8vQR4L/hTcwpUiLr4iZ5wt3cSn8UdHNFRlC swgFezWyKZkg8ejyCrwrEG8f49xvwl/3leHAZSIuobYY2RxVF/9NxSY7sTqv2dqR CJeHG24qsu3Opaxgm5onXMFj3cSp0gSyPZUInX+5F0PhWyC3oZ+ux4ShKX0MHgub mpZNsJWqIde6bnBkpf/KyJD/E+MlY4ZC -----END CERTIFICATE-----Generated at Tue Jun 17 00:42:00 2025 by rpki-client