$ rpki-client -vvf rpki.apnic.net/member_repository/A916DA1F/81A04448362711E8A2108F74C4F9AE02/N-Z4kuvCt8JBAuhSfpB8_q71yVA.mft File: N-Z4kuvCt8JBAuhSfpB8_q71yVA.mft (raw, json) Hash identifier: vUqkuCF71Sjqw76HBLO3Azce8k8V0J1CoTuDjt0/0t8= Subject key identifier: 03:86:AE:7D:B2:DD:E3:E8:B9:A6:B3:A0:A2:E5:27:01:D5:8F:B0:70 Authority key identifier: 37:E6:78:92:EB:C2:B7:C2:41:02:E8:52:7E:90:7C:FE:AE:F5:C9:50 Certificate issuer: /CN=A916DA1F/serialNumber=37E67892EBC2B7C24102E8527E907CFEAEF5C950 Certificate serial: 1587 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N-Z4kuvCt8JBAuhSfpB8_q71yVA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916DA1F/81A04448362711E8A2108F74C4F9AE02/N-Z4kuvCt8JBAuhSfpB8_q71yVA.mft Manifest number: 157F Signing time: Sat 14 Jun 2025 16:44:34 +0000 Manifest this update: Sat 14 Jun 2025 16:44:33 +0000 Manifest next update: Sat 21 Jun 2025 16:44:33 +0000 Files and hashes: 1: N-Z4kuvCt8JBAuhSfpB8_q71yVA.crl (hash: xn3fA7kxwP4+K2mEWfFN8d/LdTsiyBwD8ij9EXTrxvQ=) 2: 2036C856362911E8B6C37C78C4F9AE02.roa (hash: VjPDMCTDAl0F+kUlLL83qcuxLts9GNlg09c0jF2guQg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916DA1F/81A04448362711E8A2108F74C4F9AE02/N-Z4kuvCt8JBAuhSfpB8_q71yVA.crl rsync://rpki.apnic.net/member_repository/A916DA1F/81A04448362711E8A2108F74C4F9AE02/N-Z4kuvCt8JBAuhSfpB8_q71yVA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N-Z4kuvCt8JBAuhSfpB8_q71yVA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 16:44:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5511 (0x1587) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916DA1F, serialNumber=37E67892EBC2B7C24102E8527E907CFEAEF5C950 Validity Not Before: Jun 14 16:44:33 2025 GMT Not After : Jun 21 16:44:33 2025 GMT Subject: CN=684da6f2-aa6f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:89:bb:b7:d7:a1:94:f0:9c:04:f3:82:b2:ba: 49:b3:50:5b:92:c0:89:5a:e4:d0:40:01:0f:ce:00: 63:96:f2:3d:a8:ff:a2:bf:d6:99:bd:06:2a:de:b1: 31:71:0a:6c:a0:66:64:da:22:46:03:29:eb:9b:ae: 59:6b:0f:c7:8e:98:a7:5a:a1:44:f6:c5:80:b7:ee: b6:2a:7a:65:92:3d:26:9c:3f:c5:8a:89:ca:6e:d7: 01:38:2b:c6:40:61:78:5d:76:55:ad:20:4e:21:77: fd:eb:8e:59:65:83:26:67:cf:91:9a:99:2d:8d:9c: aa:bf:c5:42:6f:43:fc:22:e6:7f:af:3a:46:f4:2d: c8:09:f0:11:d7:24:6c:16:a7:89:a8:58:dc:04:e1: e0:2b:18:49:dc:83:55:13:fd:46:a6:59:4f:56:c0: 81:59:da:47:19:67:a0:a3:b9:dc:da:60:d0:47:a3: 97:6b:b1:09:73:84:ab:60:2f:3f:03:79:20:5d:ff: da:86:4b:d5:e7:2c:0b:91:ef:8f:05:4a:8e:ac:c1: 8c:0f:05:22:a5:19:5d:f9:18:23:b1:e9:a7:40:fd: e2:3e:fc:8f:35:00:88:f6:3c:b6:84:fb:99:3e:ec: 6f:ab:a8:56:00:79:dd:94:b8:a6:64:d1:a8:72:ab: 2e:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:86:AE:7D:B2:DD:E3:E8:B9:A6:B3:A0:A2:E5:27:01:D5:8F:B0:70 X509v3 Authority Key Identifier: keyid:37:E6:78:92:EB:C2:B7:C2:41:02:E8:52:7E:90:7C:FE:AE:F5:C9:50 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916DA1F/81A04448362711E8A2108F74C4F9AE02/N-Z4kuvCt8JBAuhSfpB8_q71yVA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N-Z4kuvCt8JBAuhSfpB8_q71yVA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916DA1F/81A04448362711E8A2108F74C4F9AE02/N-Z4kuvCt8JBAuhSfpB8_q71yVA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 66:58:5c:3d:49:70:48:da:3d:05:ab:e9:ff:5f:99:b2:f0:a3: 7f:54:80:80:50:26:44:78:58:1a:11:c7:4e:8e:66:b2:e4:02: d4:ca:e0:ba:04:5b:63:d7:f4:d9:7f:33:a3:58:3c:41:01:1c: 35:13:23:46:ad:52:ea:95:39:25:40:4a:64:0d:f5:2c:43:52: 34:50:fd:c7:92:0c:47:63:3b:9f:2d:4a:fd:d3:0a:f1:69:19: 2d:61:f4:ca:ea:4c:71:8a:1f:4b:1a:4f:f2:11:40:1c:4f:71: 11:a0:61:c1:6e:31:60:77:56:15:fd:69:ca:1e:4a:e7:aa:44: 01:4c:a9:45:99:ae:80:eb:28:61:60:f7:ee:64:46:58:3a:94: 09:e9:51:90:c1:1e:fd:a4:e6:8b:39:c7:58:8e:37:62:99:6b: ba:8e:65:90:5e:e0:61:51:b9:f9:88:8e:68:e4:56:83:75:31: e6:95:95:a9:bb:a1:27:c5:14:6f:c2:45:c8:10:5b:23:e3:5e: 1d:29:e0:a8:8e:c8:72:a5:2c:61:97:45:9a:68:b1:f4:52:e9: a7:af:60:43:65:7d:d7:96:58:6e:52:ba:ea:93:a9:69:c4:43: b8:b3:6c:3b:3e:aa:57:37:d1:d6:a1:69:8f:14:7a:2c:42:35: 19:c1:16:54 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFYcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkRBMUYxMTAvBgNVBAUTKDM3RTY3ODkyRUJDMkI3QzI0MTAyRTg1MjdFOTA3Q0ZF QUVGNUM5NTAwHhcNMjUwNjE0MTY0NDMzWhcNMjUwNjIxMTY0NDMzWjAYMRYwFAYD VQQDEw02ODRkYTZmMi1hYTZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA34m7t9ehlPCcBPOCsrpJs1BbksCJWuTQQAEPzgBjlvI9qP+iv9aZvQYq3rEx cQpsoGZk2iJGAynrm65Zaw/HjpinWqFE9sWAt+62Knplkj0mnD/FionKbtcBOCvG QGF4XXZVrSBOIXf9645ZZYMmZ8+RmpktjZyqv8VCb0P8IuZ/rzpG9C3ICfAR1yRs FqeJqFjcBOHgKxhJ3INVE/1GpllPVsCBWdpHGWego7nc2mDQR6OXa7EJc4SrYC8/ A3kgXf/ahkvV5ywLke+PBUqOrMGMDwUipRld+RgjsemnQP3iPvyPNQCI9jy2hPuZ Puxvq6hWAHndlLimZNGocqsuywIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAOGrn2y 3ePouaazoKLlJwHVj7BwMB8GA1UdIwQYMBaAFDfmeJLrwrfCQQLoUn6QfP6u9clQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2REExRi84MUEwNDQ0ODM2 MjcxMUU4QTIxMDhGNzRDNEY5QUUwMi9OLVo0a3V2Q3Q4SkJBdWhTZnBCOF9xNzF5 VkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL04tWjRrdXZDdDhKQkF1aFNmcEI4X3E3MXlWQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 REExRi84MUEwNDQ0ODM2MjcxMUU4QTIxMDhGNzRDNEY5QUUwMi9OLVo0a3V2Q3Q4 SkJBdWhTZnBCOF9xNzF5VkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBmWFw9SXBI2j0Fq+n/X5my8KN/VICAUCZEeFgaEcdOjmay5ALUyuC6 BFtj1/TZfzOjWDxBARw1EyNGrVLqlTklQEpkDfUsQ1I0UP3HkgxHYzufLUr90wrx aRktYfTK6kxxih9LGk/yEUAcT3ERoGHBbjFgd1YV/WnKHkrnqkQBTKlFma6A6yhh YPfuZEZYOpQJ6VGQwR79pOaLOcdYjjdimWu6jmWQXuBhUbn5iI5o5FaDdTHmlZWp u6EnxRRvwkXIEFsj414dKeCojshypSxhl0WaaLH0Uumnr2BDZX3XllhuUrrqk6lp xEO4s2w7PqpXN9HWoWmPFHosQjUZwRZU -----END CERTIFICATE-----Generated at Sun Jun 15 09:35:09 2025 by rpki-client