$ rpki-client -vvf rpki.apnic.net/member_repository/A9152D08/F9C333921D8711EAA9C5B170C4F9AE02/NNwgEp6tb0Gnyi2Zyb0-fmAzy4g.mft File: NNwgEp6tb0Gnyi2Zyb0-fmAzy4g.mft (raw, json) Hash identifier: 0kxA0D0+IlG/yAg+8tfSTCw5hMR4ebRvRhkXbXPeeOA= Subject key identifier: 03:D2:01:5E:09:1A:D1:F8:C5:57:B6:3F:EE:E5:68:F7:1A:71:6F:84 Authority key identifier: 34:DC:20:12:9E:AD:6F:41:A7:CA:2D:99:C9:BD:3E:7E:60:33:CB:88 Certificate issuer: /CN=A9152D08/serialNumber=34DC20129EAD6F41A7CA2D99C9BD3E7E6033CB88 Certificate serial: 0C85 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NNwgEp6tb0Gnyi2Zyb0-fmAzy4g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9152D08/F9C333921D8711EAA9C5B170C4F9AE02/NNwgEp6tb0Gnyi2Zyb0-fmAzy4g.mft Manifest number: 0C24 Signing time: Mon 16 Jun 2025 18:46:59 +0000 Manifest this update: Mon 16 Jun 2025 18:46:59 +0000 Manifest next update: Mon 23 Jun 2025 18:46:59 +0000 Files and hashes: 1: NNwgEp6tb0Gnyi2Zyb0-fmAzy4g.crl (hash: DbiD0wf0WLWFdibala4k7X3OMnUxEWThrdITKffxfQg=) 2: D45F1712A8B311EFADA46649C4F9AE02.roa (hash: WVkxMnAPmYEx2pir9yJBj6S9Ri2HeWB84QrUcGBIgX0=) 3: 0592D90E02E111F0BFF53A15C4F9AE02.roa (hash: JKDdsewbmTds8DX8z5n44dixpiguXnj1mkHopckNnnI=) 4: 2F3FBD86F3E511EA871E451AC4F9AE02.roa (hash: yVyxrQ/XexxsyDCtzcGEooxv2C0cJKVEzNUoJUfFCpg=) 5: 30C3D4F81D8A11EA8ECDAA75C4F9AE02.roa (hash: mpanMW6E++IIJhwRfBokQkjYWR4BXeWQNkL+zlkPQk0=) 6: 31554CBC1D8A11EA8ECDAA75C4F9AE02.roa (hash: uM9esMnbJemVTDXSBi0eBdZiTFnt+Mq64Yuw7Vo5ff8=) 7: 9A8603FC93ED11ED931AB73CC4F9AE02.roa (hash: EXrq9SaZzH6ZvSPXc9dAkv/CRi57VwFICygbDK3FbAQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9152D08/F9C333921D8711EAA9C5B170C4F9AE02/NNwgEp6tb0Gnyi2Zyb0-fmAzy4g.crl rsync://rpki.apnic.net/member_repository/A9152D08/F9C333921D8711EAA9C5B170C4F9AE02/NNwgEp6tb0Gnyi2Zyb0-fmAzy4g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NNwgEp6tb0Gnyi2Zyb0-fmAzy4g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 23 Jun 2025 18:46:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3205 (0xc85) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9152D08, serialNumber=34DC20129EAD6F41A7CA2D99C9BD3E7E6033CB88 Validity Not Before: Jun 16 18:46:59 2025 GMT Not After : Jun 23 18:46:59 2025 GMT Subject: CN=685066a3-0d2c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:d7:3b:17:3a:19:52:40:62:6f:27:bb:2a:cd: 13:bb:2d:ae:85:35:11:d4:5e:95:40:ea:39:e3:bd: 15:c7:4a:fe:ff:b2:44:a7:15:81:71:c9:54:26:f9: 58:fc:c4:28:50:45:b9:57:1d:d5:fc:a6:69:d1:d4: 4d:28:d5:97:ba:96:f5:2d:80:61:35:7d:7f:c3:b0: 24:e2:53:af:f0:45:49:e7:04:89:6b:92:63:f1:f7: 54:9c:9a:fc:23:c7:8b:5b:7c:54:1b:54:32:f3:fc: b5:6c:57:da:93:28:2f:b7:fd:44:bf:de:fd:72:49: 01:e6:77:1d:d4:10:5c:00:4f:c4:61:ad:20:68:36: da:0f:40:b2:c0:06:36:87:e9:8f:1e:3b:e1:8b:20: 92:31:40:34:03:83:92:ec:46:56:e3:f3:e9:b6:5f: d6:a9:be:80:3e:47:e9:84:87:19:b0:c6:48:26:12: 7c:05:cc:89:32:28:c3:83:e1:2f:e3:e3:15:74:28: 41:24:53:1f:0f:03:7a:8e:2a:ff:a1:fa:04:e5:18: 6f:0e:e0:a5:f8:39:4e:d9:c2:6b:d8:fb:cd:9a:c7: 21:01:1d:ac:a7:0d:88:7e:ae:56:72:72:38:1f:b3: a3:74:54:f6:b4:49:d2:41:d7:52:6f:f9:03:4e:f5: 19:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:D2:01:5E:09:1A:D1:F8:C5:57:B6:3F:EE:E5:68:F7:1A:71:6F:84 X509v3 Authority Key Identifier: keyid:34:DC:20:12:9E:AD:6F:41:A7:CA:2D:99:C9:BD:3E:7E:60:33:CB:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9152D08/F9C333921D8711EAA9C5B170C4F9AE02/NNwgEp6tb0Gnyi2Zyb0-fmAzy4g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NNwgEp6tb0Gnyi2Zyb0-fmAzy4g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9152D08/F9C333921D8711EAA9C5B170C4F9AE02/NNwgEp6tb0Gnyi2Zyb0-fmAzy4g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3c:a7:93:0f:f5:e3:64:28:85:46:ed:06:01:23:67:f4:2b:01: ab:ba:e0:ba:0d:c9:d3:6a:11:1e:09:54:ca:ce:b7:77:30:00: 52:2b:2b:91:5b:4f:a8:9f:76:f1:ec:6b:ee:0a:0e:b5:38:9f: 71:2c:95:51:c4:c1:1f:21:c8:b9:03:68:a1:bf:5e:89:6b:7a: 1f:94:c0:00:38:1d:27:71:10:18:5e:f7:ed:d5:fb:7a:c9:e0: 55:4d:0c:9f:41:a4:2d:69:e3:39:67:43:a0:9f:fd:f5:33:1c: 98:6f:a9:93:5a:fd:cf:de:60:cc:c4:79:32:8b:0f:e1:1a:2e: ce:0b:0e:82:c1:d3:4b:cd:3e:b1:e7:cf:c5:fc:1b:ff:ac:4d: e3:62:53:64:50:74:dc:88:2f:02:ec:39:27:d8:78:84:30:69: a0:aa:00:f9:66:79:d8:a9:b8:17:6c:7c:01:86:6f:d3:41:2a: c4:09:d4:2d:50:b0:33:82:4d:54:4b:4d:21:9a:28:2c:f9:6f: d0:31:e5:d8:22:55:a0:8d:b2:e8:ea:92:76:a8:fc:0d:3a:92: 16:43:84:20:85:48:72:a9:4f:c4:b8:ff:86:5b:eb:31:97:75: 4a:12:e7:84:b1:00:ff:05:3f:b0:bf:ad:45:06:de:2e:2e:ca: e4:21:0f:2c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDIUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTJEMDgxMTAvBgNVBAUTKDM0REMyMDEyOUVBRDZGNDFBN0NBMkQ5OUM5QkQzRTdF NjAzM0NCODgwHhcNMjUwNjE2MTg0NjU5WhcNMjUwNjIzMTg0NjU5WjAYMRYwFAYD VQQDEw02ODUwNjZhMy0wZDJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy9c7FzoZUkBibye7Ks0Tuy2uhTUR1F6VQOo5470Vx0r+/7JEpxWBcclUJvlY /MQoUEW5Vx3V/KZp0dRNKNWXupb1LYBhNX1/w7Ak4lOv8EVJ5wSJa5Jj8fdUnJr8 I8eLW3xUG1Qy8/y1bFfakygvt/1Ev979ckkB5ncd1BBcAE/EYa0gaDbaD0CywAY2 h+mPHjvhiyCSMUA0A4OS7EZW4/Pptl/Wqb6APkfphIcZsMZIJhJ8BcyJMijDg+Ev 4+MVdChBJFMfDwN6jir/ofoE5RhvDuCl+DlO2cJr2PvNmschAR2spw2Ifq5WcnI4 H7OjdFT2tEnSQddSb/kDTvUZiwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAPSAV4J GtH4xVe2P+7laPcacW+EMB8GA1UdIwQYMBaAFDTcIBKerW9Bp8otmcm9Pn5gM8uI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MkQwOC9GOUMzMzM5MjFE ODcxMUVBQTlDNUIxNzBDNEY5QUUwMi9OTndnRXA2dGIwR255aTJaeWIwLWZtQXp5 NGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05Od2dFcDZ0YjBHbnlpMlp5YjAtZm1Benk0Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MkQwOC9GOUMzMzM5MjFEODcxMUVBQTlDNUIxNzBDNEY5QUUwMi9OTndnRXA2dGIw R255aTJaeWIwLWZtQXp5NGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA8p5MP9eNkKIVG7QYBI2f0KwGruuC6DcnTahEeCVTKzrd3MABSKyuR W0+on3bx7GvuCg61OJ9xLJVRxMEfIci5A2ihv16Ja3oflMAAOB0ncRAYXvft1ft6 yeBVTQyfQaQtaeM5Z0Ogn/31MxyYb6mTWv3P3mDMxHkyiw/hGi7OCw6CwdNLzT6x 58/F/Bv/rE3jYlNkUHTciC8C7Dkn2HiEMGmgqgD5ZnnYqbgXbHwBhm/TQSrECdQt ULAzgk1US00hmigs+W/QMeXYIlWgjbLo6pJ2qPwNOpIWQ4QghUhyqU/EuP+GW+sx l3VKEueEsQD/BT+wv61FBt4uLsrkIQ8s -----END CERTIFICATE-----Generated at Wed Jun 18 06:35:27 2025 by rpki-client