$ rpki-client -vvf rpki.apnic.net/member_repository/A914E01E/C5C6F05E9EA611EC8FB03654C4F9AE02/nlcX9fFLsp9ntXrX2dXweRWunEM.mft File: nlcX9fFLsp9ntXrX2dXweRWunEM.mft (raw, json) Hash identifier: KNvvSaiR5myHx1ND8nA6TacUeQA2leHKfJd2DR50eoE= Subject key identifier: 10:7D:C2:E9:9D:C4:DA:71:14:51:49:1C:FF:5E:BF:74:27:01:B3:3C Authority key identifier: 9E:57:17:F5:F1:4B:B2:9F:67:B5:7A:D7:D9:D5:F0:79:15:AE:9C:43 Certificate issuer: /CN=A914E01E/serialNumber=9E5717F5F14BB29F67B57AD7D9D5F07915AE9C43 Certificate serial: 039D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nlcX9fFLsp9ntXrX2dXweRWunEM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914E01E/C5C6F05E9EA611EC8FB03654C4F9AE02/nlcX9fFLsp9ntXrX2dXweRWunEM.mft Manifest number: 0399 Signing time: Sun 15 Jun 2025 00:29:33 +0000 Manifest this update: Sun 15 Jun 2025 00:29:33 +0000 Manifest next update: Sun 22 Jun 2025 00:29:33 +0000 Files and hashes: 1: nlcX9fFLsp9ntXrX2dXweRWunEM.crl (hash: c3jHCoPUKqKHKnJWmSIFVPLWGV1NvMtl9UmvHThtCBE=) 2: B775BD7A9EA911EC95EBD87CC4F9AE02.roa (hash: 92HIEbj2G47MSTH5iEgpWYXExI9zDOC82XtCwVyLKgU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914E01E/C5C6F05E9EA611EC8FB03654C4F9AE02/nlcX9fFLsp9ntXrX2dXweRWunEM.crl rsync://rpki.apnic.net/member_repository/A914E01E/C5C6F05E9EA611EC8FB03654C4F9AE02/nlcX9fFLsp9ntXrX2dXweRWunEM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nlcX9fFLsp9ntXrX2dXweRWunEM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Jun 2025 00:29:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 925 (0x39d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914E01E, serialNumber=9E5717F5F14BB29F67B57AD7D9D5F07915AE9C43 Validity Not Before: Jun 15 00:29:33 2025 GMT Not After : Jun 22 00:29:33 2025 GMT Subject: CN=684e13ed-c6f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:05:d9:2e:7a:81:79:41:16:f9:34:87:44:1d: 39:96:55:29:60:4f:f8:b4:c8:b7:8e:97:db:df:1a: 37:7a:5a:11:e6:87:f1:e2:18:30:22:ad:01:2f:9e: 3d:b5:47:38:05:44:63:31:8b:cd:68:8e:7b:04:7b: 11:57:65:7d:25:12:f8:40:87:ae:86:3e:ea:fc:ba: 33:46:bc:0b:51:df:4c:00:28:c7:13:7a:2f:f9:9e: 96:38:80:10:03:43:2f:e7:7e:b4:01:7c:23:fb:82: 52:1f:ca:5e:af:85:9c:de:ba:81:08:01:30:af:2a: 2f:35:eb:86:8f:00:7f:ec:c5:5b:b1:7a:5a:e8:fb: 60:34:b2:39:8f:8f:d9:36:a2:08:04:e2:8d:b4:7e: 65:f8:eb:71:ed:dd:44:22:1c:ac:d5:09:6c:36:20: 5a:cd:d1:96:2a:77:53:81:ef:66:e8:54:41:ea:36: a6:eb:05:46:5e:3f:05:c2:2f:c7:24:b7:88:60:0b: d9:a5:d7:78:fd:81:92:a2:15:17:ed:64:c8:7b:1a: 12:97:4c:fa:e9:02:5c:41:d4:41:d8:fa:8d:5c:cd: e2:21:32:cb:7b:8f:12:9e:0c:df:28:06:74:a1:64: 97:90:af:c8:7a:b9:1b:15:9a:c5:13:2b:f5:c7:75: a3:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:7D:C2:E9:9D:C4:DA:71:14:51:49:1C:FF:5E:BF:74:27:01:B3:3C X509v3 Authority Key Identifier: keyid:9E:57:17:F5:F1:4B:B2:9F:67:B5:7A:D7:D9:D5:F0:79:15:AE:9C:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914E01E/C5C6F05E9EA611EC8FB03654C4F9AE02/nlcX9fFLsp9ntXrX2dXweRWunEM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nlcX9fFLsp9ntXrX2dXweRWunEM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E01E/C5C6F05E9EA611EC8FB03654C4F9AE02/nlcX9fFLsp9ntXrX2dXweRWunEM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 22:37:72:2f:cd:2b:1c:f0:f2:88:62:1f:1b:44:4f:a3:21:5d: 72:c3:92:7a:9d:b3:ac:f0:ae:4e:48:39:79:82:9a:05:8f:54: e4:75:c2:56:06:8a:d7:cc:a7:a7:91:dc:6c:3f:68:c0:f5:12: ef:9a:ad:9d:a2:69:d8:67:87:d2:fd:61:a4:2d:c6:57:fc:06: 98:d4:fd:86:49:4a:55:bd:34:71:a0:df:32:5b:ff:00:8c:9b: 5c:29:92:7a:0e:57:f7:89:3b:a7:50:99:0a:92:42:51:01:0c: 1f:a4:3f:16:2f:be:de:86:5d:a9:75:34:05:f8:11:90:cb:bf: e7:ca:25:c8:f4:ca:27:94:db:79:e3:6d:57:9b:ae:66:15:83: 0e:a0:3d:34:93:4a:11:15:9e:63:99:69:60:91:c6:34:36:69: b7:23:a7:c8:b3:1f:cf:34:8e:7b:85:94:86:2b:e8:4f:d7:4a: 81:17:5b:1a:7b:bf:24:d8:d1:ce:6f:75:16:cd:13:0d:6f:5e: 2b:aa:6a:e2:32:ba:5a:65:d7:c9:57:5c:ef:2d:70:58:d9:fb: 29:d2:4d:3c:1b:41:82:3e:67:6a:8b:34:48:73:4c:0b:df:65: 46:2d:ba:8e:b3:88:a7:fb:97:f9:76:64:db:32:99:d0:6e:f0: 99:43:95:c0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA50wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEUwMUUxMTAvBgNVBAUTKDlFNTcxN0Y1RjE0QkIyOUY2N0I1N0FEN0Q5RDVGMDc5 MTVBRTlDNDMwHhcNMjUwNjE1MDAyOTMzWhcNMjUwNjIyMDAyOTMzWjAYMRYwFAYD VQQDEw02ODRlMTNlZC1jNmYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwwXZLnqBeUEW+TSHRB05llUpYE/4tMi3jpfb3xo3eloR5ofx4hgwIq0BL549 tUc4BURjMYvNaI57BHsRV2V9JRL4QIeuhj7q/LozRrwLUd9MACjHE3ov+Z6WOIAQ A0Mv5360AXwj+4JSH8per4Wc3rqBCAEwryovNeuGjwB/7MVbsXpa6PtgNLI5j4/Z NqIIBOKNtH5l+Otx7d1EIhys1QlsNiBazdGWKndTge9m6FRB6jam6wVGXj8Fwi/H JLeIYAvZpdd4/YGSohUX7WTIexoSl0z66QJcQdRB2PqNXM3iITLLe48SngzfKAZ0 oWSXkK/IerkbFZrFEyv1x3WjFwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBB9wumd xNpxFFFJHP9ev3QnAbM8MB8GA1UdIwQYMBaAFJ5XF/XxS7KfZ7V619nV8HkVrpxD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RTAxRS9DNUM2RjA1RTlF QTYxMUVDOEZCMDM2NTRDNEY5QUUwMi9ubGNYOWZGTHNwOW50WHJYMmRYd2VSV3Vu RU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25sY1g5ZkZMc3A5bnRYclgyZFh3ZVJXdW5FTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RTAxRS9DNUM2RjA1RTlFQTYxMUVDOEZCMDM2NTRDNEY5QUUwMi9ubGNYOWZGTHNw OW50WHJYMmRYd2VSV3VuRU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAiN3IvzSsc8PKIYh8bRE+jIV1yw5J6nbOs8K5OSDl5gpoFj1TkdcJW BorXzKenkdxsP2jA9RLvmq2domnYZ4fS/WGkLcZX/AaY1P2GSUpVvTRxoN8yW/8A jJtcKZJ6Dlf3iTunUJkKkkJRAQwfpD8WL77ehl2pdTQF+BGQy7/nyiXI9MonlNt5 421Xm65mFYMOoD00k0oRFZ5jmWlgkcY0Nmm3I6fIsx/PNI57hZSGK+hP10qBF1sa e78k2NHOb3UWzRMNb14rqmriMrpaZdfJV1zvLXBY2fsp0k08G0GCPmdqizRIc0wL 32VGLbqOs4in+5f5dmTbMpnQbvCZQ5XA -----END CERTIFICATE-----Generated at Sun Jun 15 09:29:34 2025 by rpki-client