$ rpki-client -vvf rpki.apnic.net/member_repository/A9152696/725CA1D406CD11EAAE5E7934C4F9AE02/nL-xN0vpMpetwbIdvTeY0VvSdN8.mft File: nL-xN0vpMpetwbIdvTeY0VvSdN8.mft (raw, json) Hash identifier: rtJCv4dDljTW+c4EHInQ3YCuqgodU0A94GFlar7qb8Y= Subject key identifier: D5:15:84:9B:29:86:34:86:9A:EF:C1:7D:81:73:97:F9:AD:E5:75:E7 Authority key identifier: 9C:BF:B1:37:4B:E9:32:97:AD:C1:B2:1D:BD:37:98:D1:5B:D2:74:DF Certificate issuer: /CN=A9152696/serialNumber=9CBFB1374BE93297ADC1B21DBD3798D15BD274DF Certificate serial: 0C49 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nL-xN0vpMpetwbIdvTeY0VvSdN8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9152696/725CA1D406CD11EAAE5E7934C4F9AE02/nL-xN0vpMpetwbIdvTeY0VvSdN8.mft Manifest number: 0C42 Signing time: Sat 14 Jun 2025 18:21:33 +0000 Manifest this update: Sat 14 Jun 2025 18:21:33 +0000 Manifest next update: Sat 21 Jun 2025 18:21:33 +0000 Files and hashes: 1: nL-xN0vpMpetwbIdvTeY0VvSdN8.crl (hash: /S3FVs1cxD819c/joYx1xXw4h06HRjFUqQo7yQTGPMk=) 2: E905CD5808F111EA8E4F1D51C4F9AE02.roa (hash: Ykh/ajdiEQ6UqJC1nIow2mRMlvxbjVdtujI4Th0ysiU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9152696/725CA1D406CD11EAAE5E7934C4F9AE02/nL-xN0vpMpetwbIdvTeY0VvSdN8.crl rsync://rpki.apnic.net/member_repository/A9152696/725CA1D406CD11EAAE5E7934C4F9AE02/nL-xN0vpMpetwbIdvTeY0VvSdN8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nL-xN0vpMpetwbIdvTeY0VvSdN8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 18:21:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3145 (0xc49) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9152696, serialNumber=9CBFB1374BE93297ADC1B21DBD3798D15BD274DF Validity Not Before: Jun 14 18:21:33 2025 GMT Not After : Jun 21 18:21:33 2025 GMT Subject: CN=684dbdad-4d7d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:fe:cb:35:ae:43:5f:b2:5a:a5:ee:08:69:d6: 1a:d2:41:35:b9:91:26:56:9d:43:69:39:c0:e6:49: d1:83:fe:8a:3a:ee:aa:97:99:1f:ea:f9:f1:13:a2: 75:bd:f5:99:e7:eb:5d:f6:31:85:58:5a:f8:93:05: 2e:d5:ce:c3:a4:eb:29:7b:99:1b:04:8a:65:c8:81: 7e:cc:1b:59:28:3a:e7:09:37:3f:6d:23:e0:bc:99: e0:db:1b:a2:8c:db:ce:90:d7:a4:83:4d:29:6a:22: 62:07:5e:c4:fe:d1:c9:76:cd:cb:2e:04:e2:9f:a2: 74:20:86:25:36:e5:57:49:b9:b7:44:29:e4:1b:3d: 39:ee:b7:8b:d8:6f:b1:35:a2:3d:e3:95:db:50:7d: 82:a2:d9:7a:bd:ee:75:ad:95:51:7e:4e:c0:60:1c: 65:cf:28:36:67:8a:8c:84:a8:0c:e2:af:41:a0:d3: 76:51:f3:7e:84:77:1e:66:44:3d:70:b5:2b:a9:66: 83:08:76:c6:45:dd:14:cf:4b:a5:fd:ce:7a:58:d0: db:16:64:2a:04:8e:6e:91:26:e7:47:88:10:7d:33: 66:1c:45:6c:30:33:7b:c0:df:20:64:c6:d7:71:2a: 55:34:5c:d1:76:d4:a5:0f:3f:bc:13:ed:88:04:02: d9:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:15:84:9B:29:86:34:86:9A:EF:C1:7D:81:73:97:F9:AD:E5:75:E7 X509v3 Authority Key Identifier: keyid:9C:BF:B1:37:4B:E9:32:97:AD:C1:B2:1D:BD:37:98:D1:5B:D2:74:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9152696/725CA1D406CD11EAAE5E7934C4F9AE02/nL-xN0vpMpetwbIdvTeY0VvSdN8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nL-xN0vpMpetwbIdvTeY0VvSdN8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9152696/725CA1D406CD11EAAE5E7934C4F9AE02/nL-xN0vpMpetwbIdvTeY0VvSdN8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 26:8c:73:42:8b:bf:bc:6a:54:ac:62:94:2c:8d:03:7f:82:42: b4:dd:fd:7e:19:f6:60:7f:3b:50:e0:de:f0:cd:60:41:c2:a7: 89:a2:0f:53:86:d1:84:a1:a1:ec:b7:35:08:91:60:e2:1f:a1: 52:12:de:be:fd:d3:28:ab:2c:75:0a:d6:25:76:ea:f3:ba:e7: 9a:d8:00:62:1b:e8:2a:42:a1:82:ba:db:50:fb:97:93:6c:fc: dc:f0:0d:1a:88:42:fb:5b:1a:c4:64:8d:2b:f2:81:39:c7:d6: fc:b6:48:51:bc:06:3e:2a:2c:04:9d:9a:52:ec:47:76:39:ee: 3d:b3:10:19:30:ee:da:3e:e1:2d:21:86:0d:1f:05:50:6a:6e: f5:03:f0:ab:9c:9f:89:5f:22:df:61:cd:d2:8f:c4:49:d3:94: 5e:c4:a4:a7:1a:0b:82:1a:e3:6e:16:9b:2e:a8:7c:f5:1e:4b: 19:e3:5a:d7:67:6e:b7:3b:43:d7:be:f7:d4:06:99:40:52:6e: 86:31:b9:76:df:9b:b8:38:6d:63:dd:3d:71:c1:5b:51:82:15: 2a:47:01:6f:b2:eb:4a:1d:fb:6e:f8:69:1b:f2:d8:bd:85:7b: 47:84:2a:39:fc:4c:c2:59:1d:6f:c1:e9:15:17:bc:26:c8:ed: 48:cc:bd:91 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDEkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTI2OTYxMTAvBgNVBAUTKDlDQkZCMTM3NEJFOTMyOTdBREMxQjIxREJEMzc5OEQx NUJEMjc0REYwHhcNMjUwNjE0MTgyMTMzWhcNMjUwNjIxMTgyMTMzWjAYMRYwFAYD VQQDEw02ODRkYmRhZC00ZDdkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtP7LNa5DX7Jape4IadYa0kE1uZEmVp1DaTnA5knRg/6KOu6ql5kf6vnxE6J1 vfWZ5+td9jGFWFr4kwUu1c7DpOspe5kbBIplyIF+zBtZKDrnCTc/bSPgvJng2xui jNvOkNekg00paiJiB17E/tHJds3LLgTin6J0IIYlNuVXSbm3RCnkGz057reL2G+x NaI945XbUH2Cotl6ve51rZVRfk7AYBxlzyg2Z4qMhKgM4q9BoNN2UfN+hHceZkQ9 cLUrqWaDCHbGRd0Uz0ul/c56WNDbFmQqBI5ukSbnR4gQfTNmHEVsMDN7wN8gZMbX cSpVNFzRdtSlDz+8E+2IBALZoQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNUVhJsp hjSGmu/BfYFzl/mt5XXnMB8GA1UdIwQYMBaAFJy/sTdL6TKXrcGyHb03mNFb0nTf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MjY5Ni83MjVDQTFENDA2 Q0QxMUVBQUU1RTc5MzRDNEY5QUUwMi9uTC14TjB2cE1wZXR3YklkdlRlWTBWdlNk TjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25MLXhOMHZwTXBldHdiSWR2VGVZMFZ2U2ROOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MjY5Ni83MjVDQTFENDA2Q0QxMUVBQUU1RTc5MzRDNEY5QUUwMi9uTC14TjB2cE1w ZXR3YklkdlRlWTBWdlNkTjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAmjHNCi7+8alSsYpQsjQN/gkK03f1+GfZgfztQ4N7wzWBBwqeJog9T htGEoaHstzUIkWDiH6FSEt6+/dMoqyx1CtYldurzuuea2ABiG+gqQqGCuttQ+5eT bPzc8A0aiEL7WxrEZI0r8oE5x9b8tkhRvAY+KiwEnZpS7Ed2Oe49sxAZMO7aPuEt IYYNHwVQam71A/CrnJ+JXyLfYc3Sj8RJ05RexKSnGguCGuNuFpsuqHz1HksZ41rX Z263O0PXvvfUBplAUm6GMbl235u4OG1j3T1xwVtRghUqRwFvsutKHftu+Gkb8ti9 hXtHhCo5/EzCWR1vwekVF7wmyO1IzL2R -----END CERTIFICATE-----Generated at Sun Jun 15 08:43:54 2025 by rpki-client