$ rpki-client -vvf rpki.apnic.net/member_repository/A917C422/3E745368ED5511E38072C57E5911EA32/NUOeC_NciIu4TRsk7N5wYM90TpE.mft File: NUOeC_NciIu4TRsk7N5wYM90TpE.mft (raw, json) Hash identifier: HqXm8OiXI0HIlmx9LKkX6GvhKRBkR32l5uxFZPbzdv0= Subject key identifier: 5D:78:8B:BA:FB:B1:3D:CB:87:45:01:34:A9:C4:71:AB:64:F0:11:28 Authority key identifier: 35:43:9E:0B:F3:5C:88:8B:B8:4D:1B:24:EC:DE:70:60:CF:74:4E:91 Certificate issuer: /CN=A917C422/serialNumber=35439E0BF35C888BB84D1B24ECDE7060CF744E91 Certificate serial: 2B79 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/NUOeC_NciIu4TRsk7N5wYM90TpE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917C422/3E745368ED5511E38072C57E5911EA32/NUOeC_NciIu4TRsk7N5wYM90TpE.mft Manifest number: 2B65 Signing time: Fri 20 Jun 2025 14:25:21 +0000 Manifest this update: Fri 20 Jun 2025 14:25:20 +0000 Manifest next update: Fri 27 Jun 2025 14:25:20 +0000 Files and hashes: 1: NUOeC_NciIu4TRsk7N5wYM90TpE.crl (hash: SuqXGk6sDP2znJU/Ju82O+rqNrg6jA1AUQX8gNd1qvw=) 2: F645F318500C11EBA2295426C4F9AE02.roa (hash: cs/JN2roMF9559frpHSU57kLMdZZdt/kq/+fgPXNaTg=) 3: 6313DADA500011EBB74A2C2AC4F9AE02.roa (hash: kOKMH7bC+n+8o1xcllbA3RXGetoc8aW0IIWJBu8P/uI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917C422/3E745368ED5511E38072C57E5911EA32/NUOeC_NciIu4TRsk7N5wYM90TpE.crl rsync://rpki.apnic.net/member_repository/A917C422/3E745368ED5511E38072C57E5911EA32/NUOeC_NciIu4TRsk7N5wYM90TpE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/NUOeC_NciIu4TRsk7N5wYM90TpE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Jun 2025 14:25:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11129 (0x2b79) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917C422, serialNumber=35439E0BF35C888BB84D1B24ECDE7060CF744E91 Validity Not Before: Jun 20 14:25:20 2025 GMT Not After : Jun 27 14:25:20 2025 GMT Subject: CN=68556f51-f98c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:c6:be:a7:d0:64:08:47:24:f7:a3:0f:d4:72: 82:64:c8:97:a0:41:48:0d:8f:56:dd:de:59:cb:0f: 46:74:0a:87:4f:5f:fc:a2:b3:61:29:77:49:6a:0c: 65:12:47:54:b5:5f:7d:2e:5f:a2:5d:ef:2e:bb:f8: d5:50:a9:5b:b8:44:05:0d:f4:d7:92:3c:e0:ba:e6: 42:36:b3:55:81:8b:ea:6b:0b:c7:11:de:ba:ed:8b: 54:f8:27:bd:cc:d1:f7:01:71:e4:bc:49:45:3b:08: 87:07:49:3e:25:3d:58:e7:0f:a7:ce:b0:5e:72:80: 53:6a:05:d7:62:96:c9:fc:ef:1c:e2:18:e6:b6:e5: 20:d0:dd:b1:20:c4:3e:a2:92:00:18:83:11:03:b1: 12:49:01:ae:11:ff:6a:55:49:22:ea:b0:b4:20:cf: 20:5b:67:0a:10:b5:6d:17:02:d9:b4:55:42:2a:9a: b5:52:00:5a:9b:3e:0f:83:d6:b5:73:91:7a:f6:53: 13:ae:20:8f:94:1f:23:62:c5:c6:ba:3a:53:74:96: 6d:5d:93:ae:47:fa:b6:5d:cd:e2:d2:91:87:a3:f8: ba:44:9b:76:d5:b4:c5:6c:cf:6f:7a:02:b0:3f:b0: 41:01:5b:c5:5b:1c:f6:dc:fa:32:41:f0:a0:30:a4: 53:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:78:8B:BA:FB:B1:3D:CB:87:45:01:34:A9:C4:71:AB:64:F0:11:28 X509v3 Authority Key Identifier: keyid:35:43:9E:0B:F3:5C:88:8B:B8:4D:1B:24:EC:DE:70:60:CF:74:4E:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917C422/3E745368ED5511E38072C57E5911EA32/NUOeC_NciIu4TRsk7N5wYM90TpE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/NUOeC_NciIu4TRsk7N5wYM90TpE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C422/3E745368ED5511E38072C57E5911EA32/NUOeC_NciIu4TRsk7N5wYM90TpE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8f:56:fd:c8:93:ed:f3:f6:26:e4:4b:14:fc:68:9d:4f:e1:5f: ce:9b:1c:24:8e:3a:07:a1:d3:1a:15:eb:c9:06:72:de:82:f0: bb:2d:48:09:e4:68:14:05:13:44:8a:f2:8f:e4:69:de:a3:9d: ac:a6:4f:d4:42:22:17:4e:93:e5:15:85:af:e5:7a:55:a8:d2: d5:87:a6:2d:60:2a:e5:97:07:6c:cb:70:6c:ce:26:bc:e3:4a: 29:81:7e:1b:e2:ce:8a:3c:43:2d:03:02:8a:e0:e5:45:de:d2: 7e:0f:df:42:18:ca:22:0f:88:05:17:21:5a:ec:88:e9:a5:13: 0d:f7:c4:3d:d2:b2:35:a5:e8:13:a9:48:44:8b:57:b7:18:d8: c0:33:0d:f1:70:f3:27:19:c0:84:49:ac:16:51:ef:9e:4d:82: 82:4e:4e:1b:61:d9:03:d8:06:50:56:64:c6:99:5c:2a:a5:fa: 1b:c5:ef:16:b7:ba:c3:18:f7:76:41:6f:2c:c4:aa:c3:71:da: 80:80:e6:80:25:cb:b7:0f:7c:4d:98:a5:7e:4b:84:ce:a8:7b: 91:7b:ba:10:4d:07:39:ba:b3:7c:47:df:55:6e:d1:f9:37:07: be:94:93:03:dc:75:7e:fb:5a:0d:51:c7:c0:14:92:c6:bc:f1: 81:42:47:bc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICK3kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0M0MjIxMTAvBgNVBAUTKDM1NDM5RTBCRjM1Qzg4OEJCODREMUIyNEVDREU3MDYw Q0Y3NDRFOTEwHhcNMjUwNjIwMTQyNTIwWhcNMjUwNjI3MTQyNTIwWjAYMRYwFAYD VQQDEw02ODU1NmY1MS1mOThjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzsa+p9BkCEck96MP1HKCZMiXoEFIDY9W3d5Zyw9GdAqHT1/8orNhKXdJagxl EkdUtV99Ll+iXe8uu/jVUKlbuEQFDfTXkjzguuZCNrNVgYvqawvHEd667YtU+Ce9 zNH3AXHkvElFOwiHB0k+JT1Y5w+nzrBecoBTagXXYpbJ/O8c4hjmtuUg0N2xIMQ+ opIAGIMRA7ESSQGuEf9qVUki6rC0IM8gW2cKELVtFwLZtFVCKpq1UgBamz4Pg9a1 c5F69lMTriCPlB8jYsXGujpTdJZtXZOuR/q2Xc3i0pGHo/i6RJt21bTFbM9vegKw P7BBAVvFWxz23PoyQfCgMKRTAwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF14i7r7 sT3Lh0UBNKnEcatk8BEoMB8GA1UdIwQYMBaAFDVDngvzXIiLuE0bJOzecGDPdE6R MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QzQyMi8zRTc0NTM2OEVE NTUxMUUzODA3MkM1N0U1OTExRUEzMi9OVU9lQ19OY2lJdTRUUnNrN041d1lNOTBU cEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL05VT2VDX05jaUl1NFRSc2s3TjV3WU05MFRwRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QzQyMi8zRTc0NTM2OEVENTUxMUUzODA3MkM1N0U1OTExRUEzMi9OVU9lQ19OY2lJ dTRUUnNrN041d1lNOTBUcEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCPVv3Ik+3z9ibkSxT8aJ1P4V/OmxwkjjoHodMaFevJBnLegvC7LUgJ 5GgUBRNEivKP5Gneo52spk/UQiIXTpPlFYWv5XpVqNLVh6YtYCrllwdsy3Bszia8 40opgX4b4s6KPEMtAwKK4OVF3tJ+D99CGMoiD4gFFyFa7IjppRMN98Q90rI1pegT qUhEi1e3GNjAMw3xcPMnGcCESawWUe+eTYKCTk4bYdkD2AZQVmTGmVwqpfobxe8W t7rDGPd2QW8sxKrDcdqAgOaAJcu3D3xNmKV+S4TOqHuRe7oQTQc5urN8R99VbtH5 Nwe+lJMD3HV++1oNUcfAFJLGvPGBQke8 -----END CERTIFICATE-----Generated at Sat Jun 21 03:26:01 2025 by rpki-client