$ rpki-client -vvf rpki.apnic.net/member_repository/A917D958/672DB048B39B11EF80F6435EC4F9AE02/n0kGwNTMlkXZv9kzZKI6WjPvWNs.mft File: n0kGwNTMlkXZv9kzZKI6WjPvWNs.mft (raw, json) Hash identifier: 4IpzTfkpsJ3UwqI4lHnnqTGDcROd14ZRMwP5uPEHjeM= Subject key identifier: 42:E4:00:3B:67:D2:20:54:A7:03:D2:C7:E7:B9:57:93:54:96:45:F5 Authority key identifier: 9F:49:06:C0:D4:CC:96:45:D9:BF:D9:33:64:A2:3A:5A:33:EF:58:DB Certificate issuer: /CN=A917D958/serialNumber=9F4906C0D4CC9645D9BFD93364A23A5A33EF58DB Certificate serial: 6B Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/n0kGwNTMlkXZv9kzZKI6WjPvWNs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917D958/672DB048B39B11EF80F6435EC4F9AE02/n0kGwNTMlkXZv9kzZKI6WjPvWNs.mft Manifest number: 68 Signing time: Thu 19 Jun 2025 06:24:28 +0000 Manifest this update: Thu 19 Jun 2025 06:24:27 +0000 Manifest next update: Thu 26 Jun 2025 06:24:27 +0000 Files and hashes: 1: n0kGwNTMlkXZv9kzZKI6WjPvWNs.crl (hash: kEARuddjJPYJ4/sQfuCjbpiqAusHa5bii0cagWLW404=) 2: 0AC8BB74B5E211EFBEF4BC5AC4F9AE02.roa (hash: oV9dv3enUEk5QI7ZEWYNcHlwdjoeFV6bdPfVFfihoSE=) 3: 0A581522B5E211EFBEF4BC5AC4F9AE02.roa (hash: PxzOBVWe5yWGLa4iNAyNqYyPaQ/eMXGqSREN7aFVLso=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917D958/672DB048B39B11EF80F6435EC4F9AE02/n0kGwNTMlkXZv9kzZKI6WjPvWNs.crl rsync://rpki.apnic.net/member_repository/A917D958/672DB048B39B11EF80F6435EC4F9AE02/n0kGwNTMlkXZv9kzZKI6WjPvWNs.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/n0kGwNTMlkXZv9kzZKI6WjPvWNs.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 26 Jun 2025 06:24:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 107 (0x6b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917D958, serialNumber=9F4906C0D4CC9645D9BFD93364A23A5A33EF58DB Validity Not Before: Jun 19 06:24:27 2025 GMT Not After : Jun 26 06:24:27 2025 GMT Subject: CN=6853ad1c-4dfc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:6f:8a:c9:d6:84:80:e1:71:65:6f:df:f1:8c: 0e:27:9b:00:dd:d3:e6:1f:b1:8c:d1:47:2b:97:f1: 21:3f:5a:1d:10:9c:c7:9a:7f:da:a5:98:22:93:3e: b7:39:e8:37:c1:36:a1:bf:8d:33:70:38:ce:e7:0d: 80:44:b5:c3:8e:bb:d0:e2:d6:89:19:14:7d:88:4e: 65:2b:c8:3a:52:ad:31:31:ae:9a:d5:ca:4b:6e:ba: 29:87:15:34:7f:51:92:0a:21:95:e6:fa:89:34:47: a7:a9:9b:96:4c:82:ac:59:fe:c4:20:3e:19:c3:8b: 39:bc:d9:74:8e:0c:36:92:b5:32:8f:fe:3b:db:5d: 98:57:6d:55:a1:f9:58:25:3a:c1:71:9c:d1:7e:8b: 9e:00:82:af:7d:65:f4:b3:dd:60:4b:b1:08:85:54: fd:02:89:15:aa:1d:6b:31:41:db:2f:ec:8c:8a:ba: 83:fa:07:08:21:ed:dd:e5:bb:c3:31:42:12:73:b3: 4a:54:d7:1d:94:94:ec:8c:30:52:68:dc:a6:bc:50: b1:f5:1c:26:6b:6b:7e:28:98:7e:f4:fd:c0:9b:9f: 35:33:e3:c0:db:e0:e4:82:78:08:9f:88:b2:bd:3c: 61:fa:d7:8b:7e:70:f9:21:29:07:c0:e7:f4:a1:b0: 34:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:E4:00:3B:67:D2:20:54:A7:03:D2:C7:E7:B9:57:93:54:96:45:F5 X509v3 Authority Key Identifier: keyid:9F:49:06:C0:D4:CC:96:45:D9:BF:D9:33:64:A2:3A:5A:33:EF:58:DB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917D958/672DB048B39B11EF80F6435EC4F9AE02/n0kGwNTMlkXZv9kzZKI6WjPvWNs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/n0kGwNTMlkXZv9kzZKI6WjPvWNs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917D958/672DB048B39B11EF80F6435EC4F9AE02/n0kGwNTMlkXZv9kzZKI6WjPvWNs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 24:c2:fd:cf:86:ac:c4:4a:42:c7:7b:a6:66:92:40:66:3f:a0: e4:7e:4d:f5:46:99:79:85:ca:1d:97:96:32:40:9a:44:3c:98: b5:c4:c8:5e:3c:0e:7e:8f:17:e0:e7:13:f6:ad:12:ff:92:82: 15:fa:aa:27:93:28:05:86:81:91:7a:35:8a:af:c4:d5:40:56: e5:b9:5c:2a:75:f9:ac:51:d3:db:3f:6e:cf:3d:07:b8:34:a1: b3:02:e0:92:1b:38:52:be:e0:6d:fa:a5:d7:a0:3e:6f:49:59: 80:37:bf:21:67:b2:f7:62:fa:09:f9:8f:4f:14:52:b6:24:b1: f4:11:11:b5:65:5a:19:af:93:6f:0d:62:4d:3f:bd:91:c5:07: 1d:27:e8:27:50:bd:29:cc:3c:ff:66:9a:60:ce:9b:01:7a:ac: 21:57:7b:05:7a:ee:b8:b4:18:e8:de:2a:a7:71:6f:2d:33:7e: f4:b9:37:0e:3f:b5:8e:b1:bc:c7:23:cf:4d:7a:d7:42:f3:ae: bf:94:8b:8e:3a:2f:6e:0a:83:cb:c1:c1:1a:47:85:d6:cc:c4: 32:9c:22:4c:fe:72:64:05:88:92:b7:41:19:bd:ad:aa:6f:22: 7e:e8:3a:1f:4f:0e:09:94:e8:69:ef:d1:bd:bb:ab:3b:4c:f1: e6:61:a8:9f -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBazANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 RDk1ODExMC8GA1UEBRMoOUY0OTA2QzBENENDOTY0NUQ5QkZEOTMzNjRBMjNBNUEz M0VGNThEQjAeFw0yNTA2MTkwNjI0MjdaFw0yNTA2MjYwNjI0MjdaMBgxFjAUBgNV BAMTDTY4NTNhZDFjLTRkZmMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDPb4rJ1oSA4XFlb9/xjA4nmwDd0+YfsYzRRyuX8SE/Wh0QnMeaf9qlmCKTPrc5 6DfBNqG/jTNwOM7nDYBEtcOOu9Di1okZFH2ITmUryDpSrTExrprVyktuuimHFTR/ UZIKIZXm+ok0R6epm5ZMgqxZ/sQgPhnDizm82XSODDaStTKP/jvbXZhXbVWh+Vgl OsFxnNF+i54Agq99ZfSz3WBLsQiFVP0CiRWqHWsxQdsv7IyKuoP6Bwgh7d3lu8Mx QhJzs0pU1x2UlOyMMFJo3Ka8ULH1HCZra34omH70/cCbnzUz48Db4OSCeAifiLK9 PGH614t+cPkhKQfA5/ShsDTZAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUQuQAO2fS IFSnA9LH57lXk1SWRfUwHwYDVR0jBBgwFoAUn0kGwNTMlkXZv9kzZKI6WjPvWNsw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdEOTU4LzY3MkRCMDQ4QjM5 QjExRUY4MEY2NDM1RUM0RjlBRTAyL24wa0d3TlRNbGtYWnY5a3paS0k2V2pQdldO cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvbjBrR3dOVE1sa1hadjlrelpLSTZXalB2V05zLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdE OTU4LzY3MkRCMDQ4QjM5QjExRUY4MEY2NDM1RUM0RjlBRTAyL24wa0d3TlRNbGtY WnY5a3paS0k2V2pQdldOcy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBACTC/c+GrMRKQsd7pmaSQGY/oOR+TfVGmXmFyh2XljJAmkQ8mLXEyF48 Dn6PF+DnE/atEv+SghX6qieTKAWGgZF6NYqvxNVAVuW5XCp1+axR09s/bs89B7g0 obMC4JIbOFK+4G36pdegPm9JWYA3vyFnsvdi+gn5j08UUrYksfQREbVlWhmvk28N Yk0/vZHFBx0n6CdQvSnMPP9mmmDOmwF6rCFXewV67ri0GOjeKqdxby0zfvS5Nw4/ tY6xvMcjz01610Lzrr+Ui446L24Kg8vBwRpHhdbMxDKcIkz+cmQFiJK3QRm9rapv In7oOh9PDgmU6Gnv0b27qztM8eZhqJ8= -----END CERTIFICATE-----Generated at Fri Jun 20 12:36:21 2025 by rpki-client