$ rpki-client -vvf rpki.apnic.net/member_repository/A914C33A/1D2BD03E2DDB11E49AF61530C4F9AE02/nIFHHxiq7s35RafJF_2KiYXXw6w.mft File: nIFHHxiq7s35RafJF_2KiYXXw6w.mft (raw, json) Hash identifier: IX/QUZyH/L7QKCEAufgfrcFGGcW+jXAjrIZeMqg0lEI= Subject key identifier: 1E:E8:BA:B6:F5:32:E7:16:9C:C8:A1:F6:25:40:C3:33:EA:78:F6:11 Authority key identifier: 9C:81:47:1F:18:AA:EE:CD:F9:45:A7:C9:17:FD:8A:89:85:D7:C3:AC Certificate issuer: /CN=A914C33A/serialNumber=9C81471F18AAEECDF945A7C917FD8A8985D7C3AC Certificate serial: 2A94 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nIFHHxiq7s35RafJF_2KiYXXw6w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914C33A/1D2BD03E2DDB11E49AF61530C4F9AE02/nIFHHxiq7s35RafJF_2KiYXXw6w.mft Manifest number: 2A56 Signing time: Sat 14 Jun 2025 15:33:09 +0000 Manifest this update: Sat 14 Jun 2025 15:33:08 +0000 Manifest next update: Sat 21 Jun 2025 15:33:08 +0000 Files and hashes: 1: nIFHHxiq7s35RafJF_2KiYXXw6w.crl (hash: PSdQ5ngUCGBbrkSnrEvgLiV/hY6VQH42b5qetUCNmCU=) 2: FB405D86900E11EAA43BB21FC4F9AE02.roa (hash: xBHGq+I+gC6mBEO7iAqcoK3D8WpSvv5eSxXQn/j0Q60=) 3: 3118E43E966B11EAAA23047CC4F9AE02.roa (hash: gq6V0/TIcAAKvh2pY9bQTg3IwnYpN56MDdlGTWJZ3cM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914C33A/1D2BD03E2DDB11E49AF61530C4F9AE02/nIFHHxiq7s35RafJF_2KiYXXw6w.crl rsync://rpki.apnic.net/member_repository/A914C33A/1D2BD03E2DDB11E49AF61530C4F9AE02/nIFHHxiq7s35RafJF_2KiYXXw6w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nIFHHxiq7s35RafJF_2KiYXXw6w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 15:33:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10900 (0x2a94) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914C33A, serialNumber=9C81471F18AAEECDF945A7C917FD8A8985D7C3AC Validity Not Before: Jun 14 15:33:08 2025 GMT Not After : Jun 21 15:33:08 2025 GMT Subject: CN=684d9635-8d9b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:48:96:d1:a9:c1:6a:51:24:3d:27:54:f6:05: e0:17:bf:80:95:1e:12:2c:57:7d:51:62:48:0f:0f: b3:d7:c3:13:4b:a9:13:22:e0:00:55:da:44:46:76: be:32:a5:27:e0:b5:3f:0c:d7:81:3c:7c:88:39:24: 82:2a:86:13:1c:b5:8d:64:cd:65:62:90:4d:33:2d: 87:8d:35:48:eb:f2:83:c6:e8:cf:b6:22:fc:26:36: 6c:be:02:1a:aa:d2:a3:79:99:f3:47:65:b9:c0:f9: de:4e:da:08:69:72:74:c7:ae:20:66:cd:e6:30:66: 3c:15:85:7c:b5:04:e1:71:09:e4:b4:5c:74:11:13: af:bc:09:7d:7c:04:6a:8e:68:ca:c1:f4:1a:48:6f: 24:e8:c9:e2:bb:86:93:41:09:f0:3a:94:6c:0c:1a: 7d:77:34:a0:e2:7e:8b:2a:fc:e4:60:a0:d2:76:71: da:81:51:0c:b3:e4:d7:9a:d5:3d:05:05:0f:94:33: c6:ac:e9:fb:13:fe:fd:38:67:ea:62:82:97:e9:89: e3:7c:18:d2:a5:45:29:5d:31:8f:a5:09:96:cf:4e: 9c:05:3e:c6:39:59:57:3f:44:36:03:88:35:67:56: 73:86:b1:45:ef:d9:f1:63:3d:e5:4c:03:44:ea:dc: 8c:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:E8:BA:B6:F5:32:E7:16:9C:C8:A1:F6:25:40:C3:33:EA:78:F6:11 X509v3 Authority Key Identifier: keyid:9C:81:47:1F:18:AA:EE:CD:F9:45:A7:C9:17:FD:8A:89:85:D7:C3:AC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914C33A/1D2BD03E2DDB11E49AF61530C4F9AE02/nIFHHxiq7s35RafJF_2KiYXXw6w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nIFHHxiq7s35RafJF_2KiYXXw6w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914C33A/1D2BD03E2DDB11E49AF61530C4F9AE02/nIFHHxiq7s35RafJF_2KiYXXw6w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 52:ee:b4:59:35:76:e9:fb:a2:87:e5:a4:53:61:e3:2d:a8:f6: e4:8f:23:a1:83:f1:67:cb:1f:f4:79:2a:15:c6:8b:87:fe:f5: 3b:df:61:b0:d9:62:2d:b9:c7:8d:2d:70:d6:3a:e6:62:af:40: 4f:1f:ce:69:23:9b:a9:31:53:9a:c5:4c:fe:c0:c6:ce:61:be: 22:6e:82:18:f7:91:d9:e4:9f:2a:f4:21:27:1d:a4:39:c3:1d: ed:52:1a:8f:2d:23:40:7e:ed:8f:a1:74:6e:8c:6b:78:2e:34: d5:64:4b:5d:2b:46:82:ae:e8:c6:59:f6:8f:a2:9b:ac:36:ed: 68:7f:90:38:56:6a:38:ed:8d:ef:e2:91:75:7d:b9:99:54:51: fb:b2:d3:41:a6:4b:a7:31:0e:73:35:8b:ea:63:8e:2d:ea:51: 63:ec:ac:43:8d:b1:c8:56:43:01:73:e5:21:62:0d:86:07:3f: ad:02:1f:96:6f:ed:0c:6d:d5:fd:3a:d0:f5:e9:7b:f0:a7:c3: 32:76:55:15:20:22:96:3c:62:78:9c:dd:74:bb:b5:9f:27:fe: e5:f5:e8:2d:1e:11:80:3e:a7:6a:c0:1b:31:e2:44:7c:b6:24: dd:8b:94:9f:f3:54:38:2b:82:3f:54:86:60:b6:25:b8:e0:8c: fa:ba:14:8d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICKpQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEMzM0ExMTAvBgNVBAUTKDlDODE0NzFGMThBQUVFQ0RGOTQ1QTdDOTE3RkQ4QTg5 ODVEN0MzQUMwHhcNMjUwNjE0MTUzMzA4WhcNMjUwNjIxMTUzMzA4WjAYMRYwFAYD VQQDEw02ODRkOTYzNS04ZDliMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwUiW0anBalEkPSdU9gXgF7+AlR4SLFd9UWJIDw+z18MTS6kTIuAAVdpERna+ MqUn4LU/DNeBPHyIOSSCKoYTHLWNZM1lYpBNMy2HjTVI6/KDxujPtiL8JjZsvgIa qtKjeZnzR2W5wPneTtoIaXJ0x64gZs3mMGY8FYV8tQThcQnktFx0EROvvAl9fARq jmjKwfQaSG8k6Mniu4aTQQnwOpRsDBp9dzSg4n6LKvzkYKDSdnHagVEMs+TXmtU9 BQUPlDPGrOn7E/79OGfqYoKX6YnjfBjSpUUpXTGPpQmWz06cBT7GOVlXP0Q2A4g1 Z1ZzhrFF79nxYz3lTANE6tyMKwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB7ourb1 MucWnMih9iVAwzPqePYRMB8GA1UdIwQYMBaAFJyBRx8Yqu7N+UWnyRf9iomF18Os MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QzMzQS8xRDJCRDAzRTJE REIxMUU0OUFGNjE1MzBDNEY5QUUwMi9uSUZISHhpcTdzMzVSYWZKRl8yS2lZWFh3 NncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25JRkhIeGlxN3MzNVJhZkpGXzJLaVlYWHc2dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QzMzQS8xRDJCRDAzRTJEREIxMUU0OUFGNjE1MzBDNEY5QUUwMi9uSUZISHhpcTdz MzVSYWZKRl8yS2lZWFh3NncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBS7rRZNXbp+6KH5aRTYeMtqPbkjyOhg/Fnyx/0eSoVxouH/vU732Gw 2WItuceNLXDWOuZir0BPH85pI5upMVOaxUz+wMbOYb4iboIY95HZ5J8q9CEnHaQ5 wx3tUhqPLSNAfu2PoXRujGt4LjTVZEtdK0aCrujGWfaPopusNu1of5A4Vmo47Y3v 4pF1fbmZVFH7stNBpkunMQ5zNYvqY44t6lFj7KxDjbHIVkMBc+UhYg2GBz+tAh+W b+0MbdX9OtD16Xvwp8MydlUVICKWPGJ4nN10u7WfJ/7l9egtHhGAPqdqwBsx4kR8 tiTdi5Sf81Q4K4I/VIZgtiW44Iz6uhSN -----END CERTIFICATE-----Generated at Sat Jun 14 19:28:55 2025 by rpki-client