$ rpki-client -vvf rpki.apnic.net/member_repository/A917190F/B3CA76C0FA3111EABD249E7AC4F9AE02/nQdEbvmfPFfCnFgta3rKRzX05HA.mft File: nQdEbvmfPFfCnFgta3rKRzX05HA.mft (raw, json) Hash identifier: hr2aVZu2T/kk3+BpLw1C+S5biSXpnHJ0iGJVRLpAVNs= Subject key identifier: C3:84:84:07:BD:72:9D:83:5B:99:43:A4:44:C7:B9:17:1A:98:C7:06 Authority key identifier: 9D:07:44:6E:F9:9F:3C:57:C2:9C:58:2D:6B:7A:CA:47:35:F4:E4:70 Certificate issuer: /CN=A917190F/serialNumber=9D07446EF99F3C57C29C582D6B7ACA4735F4E470 Certificate serial: 083B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nQdEbvmfPFfCnFgta3rKRzX05HA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917190F/B3CA76C0FA3111EABD249E7AC4F9AE02/nQdEbvmfPFfCnFgta3rKRzX05HA.mft Manifest number: 0804 Signing time: Wed 18 Jun 2025 20:58:21 +0000 Manifest this update: Wed 18 Jun 2025 20:58:20 +0000 Manifest next update: Wed 25 Jun 2025 20:58:20 +0000 Files and hashes: 1: nQdEbvmfPFfCnFgta3rKRzX05HA.crl (hash: fPs/TnmW0xNvAsVOIEgiNTYKboH2d1FIGbZnTkijCYo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917190F/B3CA76C0FA3111EABD249E7AC4F9AE02/nQdEbvmfPFfCnFgta3rKRzX05HA.crl rsync://rpki.apnic.net/member_repository/A917190F/B3CA76C0FA3111EABD249E7AC4F9AE02/nQdEbvmfPFfCnFgta3rKRzX05HA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nQdEbvmfPFfCnFgta3rKRzX05HA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 25 Jun 2025 20:58:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2107 (0x83b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917190F, serialNumber=9D07446EF99F3C57C29C582D6B7ACA4735F4E470 Validity Not Before: Jun 18 20:58:20 2025 GMT Not After : Jun 25 20:58:20 2025 GMT Subject: CN=6853286d-51f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:bc:3c:3f:ad:79:d5:c3:6d:7b:29:7b:f1:0a: 5e:08:10:ff:63:2c:62:e6:11:fb:0c:b3:96:57:7a: 6d:17:37:ce:6a:c7:ec:c3:a4:4f:09:a2:85:1d:59: 7e:b9:a3:c3:e5:d9:a9:60:a4:4a:f2:8d:38:13:35: b4:ed:2b:d1:e1:e2:67:66:ff:cc:ce:50:0e:73:9c: 02:bc:32:4c:1e:80:34:12:aa:b4:fd:f9:7d:d8:73: 1a:77:f2:aa:e7:7e:f0:8a:26:9a:dc:83:12:10:16: 01:7d:c2:cd:8d:ad:ce:67:04:be:ca:96:56:75:8c: 42:70:f7:71:d9:3c:e1:ff:85:cd:3e:9a:4c:cd:57: f2:d9:39:17:ae:f4:20:3c:92:ce:78:49:61:c4:d5: 41:ca:1f:fd:de:b3:f3:eb:15:1d:3f:65:08:f5:51: 4e:cd:f4:e6:62:6e:6a:93:90:50:be:15:16:da:f0: 67:4e:7a:f3:9a:0e:a5:74:83:08:a0:15:c0:5a:1b: 46:8d:12:aa:4d:74:62:11:a2:9a:ac:81:51:b7:1d: 1c:3d:c4:df:b1:b2:1c:16:e0:3b:c3:1a:13:8a:46: 60:35:f1:b4:35:2f:d8:47:3a:36:fc:75:a4:69:63: 6d:be:ef:72:3d:03:68:ee:b9:29:59:6a:73:39:f1: b4:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:84:84:07:BD:72:9D:83:5B:99:43:A4:44:C7:B9:17:1A:98:C7:06 X509v3 Authority Key Identifier: keyid:9D:07:44:6E:F9:9F:3C:57:C2:9C:58:2D:6B:7A:CA:47:35:F4:E4:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917190F/B3CA76C0FA3111EABD249E7AC4F9AE02/nQdEbvmfPFfCnFgta3rKRzX05HA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nQdEbvmfPFfCnFgta3rKRzX05HA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917190F/B3CA76C0FA3111EABD249E7AC4F9AE02/nQdEbvmfPFfCnFgta3rKRzX05HA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d0:2b:da:f7:81:1d:b1:30:0b:85:d6:0a:7c:61:80:bd:83:67: b4:bc:27:92:9c:5e:56:60:46:67:86:2c:28:81:21:ee:24:b0: 72:cc:83:e6:71:15:b4:47:f4:46:44:3d:0f:00:75:bc:d5:02: be:ed:b1:72:4f:44:ca:f6:7a:3a:bc:1c:cf:27:a1:76:90:d9: 16:d2:b2:0f:f8:6c:3a:f8:35:ca:2a:4f:3e:3f:cd:8b:ec:51: 14:8f:e0:dd:55:e7:58:68:36:71:d6:5a:03:86:24:ca:cc:24: bd:29:02:61:09:63:a4:76:27:0d:0e:a3:9d:67:6f:65:2c:06: 27:94:1a:9c:c3:24:f5:f1:cb:31:6a:82:51:29:62:43:fc:2b: f2:2b:98:cb:d4:0b:9e:72:17:20:9a:3a:5d:9c:6c:5c:45:45: 2d:85:2f:fa:9a:cf:22:3e:15:81:b5:c2:14:d9:0e:1b:62:81: 02:58:d4:47:4f:26:b0:a1:66:1a:05:ed:b0:77:6c:01:dc:c3: 9c:4a:5a:6d:c2:c8:07:b7:7d:d1:e5:5c:54:9d:71:69:77:01: 57:f3:51:d4:26:94:80:b1:05:a4:34:76:30:53:9a:d8:f8:eb: 2e:56:68:fc:70:4e:bf:46:45:d6:0d:07:e4:f7:b1:c0:c7:97: 0a:32:8c:0b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCDswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzE5MEYxMTAvBgNVBAUTKDlEMDc0NDZFRjk5RjNDNTdDMjlDNTgyRDZCN0FDQTQ3 MzVGNEU0NzAwHhcNMjUwNjE4MjA1ODIwWhcNMjUwNjI1MjA1ODIwWjAYMRYwFAYD VQQDEw02ODUzMjg2ZC01MWY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA87w8P6151cNteyl78QpeCBD/Yyxi5hH7DLOWV3ptFzfOasfsw6RPCaKFHVl+ uaPD5dmpYKRK8o04EzW07SvR4eJnZv/MzlAOc5wCvDJMHoA0Eqq0/fl92HMad/Kq 537wiiaa3IMSEBYBfcLNja3OZwS+ypZWdYxCcPdx2Tzh/4XNPppMzVfy2TkXrvQg PJLOeElhxNVByh/93rPz6xUdP2UI9VFOzfTmYm5qk5BQvhUW2vBnTnrzmg6ldIMI oBXAWhtGjRKqTXRiEaKarIFRtx0cPcTfsbIcFuA7wxoTikZgNfG0NS/YRzo2/HWk aWNtvu9yPQNo7rkpWWpzOfG0qQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMOEhAe9 cp2DW5lDpETHuRcamMcGMB8GA1UdIwQYMBaAFJ0HRG75nzxXwpxYLWt6ykc19ORw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MTkwRi9CM0NBNzZDMEZB MzExMUVBQkQyNDlFN0FDNEY5QUUwMi9uUWRFYnZtZlBGZkNuRmd0YTNyS1J6WDA1 SEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25RZEVidm1mUEZmQ25GZ3RhM3JLUnpYMDVIQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MTkwRi9CM0NBNzZDMEZBMzExMUVBQkQyNDlFN0FDNEY5QUUwMi9uUWRFYnZtZlBG ZkNuRmd0YTNyS1J6WDA1SEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDQK9r3gR2xMAuF1gp8YYC9g2e0vCeSnF5WYEZnhiwogSHuJLByzIPm cRW0R/RGRD0PAHW81QK+7bFyT0TK9no6vBzPJ6F2kNkW0rIP+Gw6+DXKKk8+P82L 7FEUj+DdVedYaDZx1loDhiTKzCS9KQJhCWOkdicNDqOdZ29lLAYnlBqcwyT18csx aoJRKWJD/CvyK5jL1AuechcgmjpdnGxcRUUthS/6ms8iPhWBtcIU2Q4bYoECWNRH TyawoWYaBe2wd2wB3MOcSlptwsgHt33R5VxUnXFpdwFX81HUJpSAsQWkNHYwU5rY +OsuVmj8cE6/RkXWDQfk97HAx5cKMowL -----END CERTIFICATE-----Generated at Fri Jun 20 08:23:24 2025 by rpki-client