$ rpki-client -vvf rpki.apnic.net/member_repository/A917FFBF/ED52F030C5F411EC8E80D886C4F9AE02/nPqGncMGNX16wwkuT__QTKUCd14.mft File: nPqGncMGNX16wwkuT__QTKUCd14.mft (raw, json) Hash identifier: xCOp+IIsgjrp0Q5xWoqzXbbq6quz556d/v3A7fgLMtE= Subject key identifier: 1F:4D:9C:2F:B7:FB:8B:B4:16:B5:E6:D5:05:12:E3:86:35:C5:FA:07 Authority key identifier: 9C:FA:86:9D:C3:06:35:7D:7A:C3:09:2E:4F:FF:D0:4C:A5:02:77:5E Certificate issuer: /CN=A917FFBF/serialNumber=9CFA869DC306357D7AC3092E4FFFD04CA502775E Certificate serial: 0356 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nPqGncMGNX16wwkuT__QTKUCd14.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917FFBF/ED52F030C5F411EC8E80D886C4F9AE02/nPqGncMGNX16wwkuT__QTKUCd14.mft Manifest number: 0352 Signing time: Sat 09 Aug 2025 01:30:34 +0000 Manifest this update: Sat 09 Aug 2025 01:30:33 +0000 Manifest next update: Sat 16 Aug 2025 01:30:33 +0000 Files and hashes: 1: nPqGncMGNX16wwkuT__QTKUCd14.crl (hash: HjjTQDb7r+/ia0DwYWHpLj0jfU5uuMukqL8CS1uCgR0=) 2: 6AE91888C5FC11EC9127557EC4F9AE02.roa (hash: Upjs7verB9kHZN2eaB1a6dX0s9sFshQhi4VCB4ap3GQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917FFBF/ED52F030C5F411EC8E80D886C4F9AE02/nPqGncMGNX16wwkuT__QTKUCd14.crl rsync://rpki.apnic.net/member_repository/A917FFBF/ED52F030C5F411EC8E80D886C4F9AE02/nPqGncMGNX16wwkuT__QTKUCd14.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nPqGncMGNX16wwkuT__QTKUCd14.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 854 (0x356) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917FFBF, serialNumber=9CFA869DC306357D7AC3092E4FFFD04CA502775E Validity Not Before: Aug 9 01:30:33 2025 GMT Not After : Aug 16 01:30:33 2025 GMT Subject: CN=6896a4b9-01c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:65:1e:49:72:0b:2a:1a:b5:48:78:11:ca:b8: de:eb:d4:f0:c6:8e:ee:e6:33:86:0f:a5:c4:c9:91: 82:b4:d1:c3:bb:6b:1f:31:ee:da:1e:48:50:7f:50: 68:0a:ed:43:d9:6b:09:65:51:a0:1f:91:f1:c9:d5: 58:bf:e0:88:04:88:7c:38:05:80:e3:7a:e5:4e:bd: 13:5d:e4:bb:20:1c:45:ad:19:93:85:e8:ac:2c:03: db:65:58:8a:c3:0b:aa:2d:98:d1:b7:02:62:a2:4c: 84:50:94:ae:7a:71:82:fc:6e:b7:66:6e:c6:a9:f8: b6:87:1d:5b:9e:20:8f:d3:be:24:28:ef:f1:d8:8d: bc:1b:e5:a8:57:06:24:81:73:26:bb:85:ba:d4:10: 3f:02:8b:ec:63:bd:5d:86:73:74:9b:af:01:47:2e: a3:c1:5d:e1:7c:ac:81:e5:51:6b:a0:9b:79:78:b8: e6:74:c2:8a:26:15:7b:c9:5e:63:f6:f8:e5:f9:2f: cd:6f:68:86:5e:15:26:d1:1c:cd:46:e0:a2:d9:c8: fe:2e:3b:2a:f5:16:df:75:d6:f1:3e:eb:5f:ca:1a: 63:d4:6a:ac:5c:e7:9f:92:ab:38:1e:9e:b8:d4:0d: 7c:e1:86:44:d4:85:b3:d7:c0:8a:85:d7:df:c9:a8: 4a:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:4D:9C:2F:B7:FB:8B:B4:16:B5:E6:D5:05:12:E3:86:35:C5:FA:07 X509v3 Authority Key Identifier: keyid:9C:FA:86:9D:C3:06:35:7D:7A:C3:09:2E:4F:FF:D0:4C:A5:02:77:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917FFBF/ED52F030C5F411EC8E80D886C4F9AE02/nPqGncMGNX16wwkuT__QTKUCd14.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nPqGncMGNX16wwkuT__QTKUCd14.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917FFBF/ED52F030C5F411EC8E80D886C4F9AE02/nPqGncMGNX16wwkuT__QTKUCd14.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c7:9f:4a:b6:89:2c:47:bb:4b:a6:29:e6:b8:b2:d3:07:95:ce: 94:41:3d:d6:78:29:c7:c7:1f:72:2b:94:24:31:7a:7a:4a:ca: fb:71:b4:5f:b7:a9:8a:cf:d6:97:fe:f4:16:43:5b:46:86:db: 4e:9c:9b:70:ff:19:ee:57:ff:66:66:f0:c3:83:d0:94:36:ed: b9:4e:68:03:da:4e:51:46:5c:86:c9:69:a2:a8:59:b5:68:2c: 3a:58:f2:5d:9b:5b:81:24:82:1c:3c:6e:08:11:79:44:d7:7f: bc:4b:01:12:e8:e8:79:54:68:61:e8:9c:8a:31:07:50:07:ea: 8a:e2:96:c9:3a:9b:17:03:6e:ba:04:ef:96:75:7f:b0:de:85: f7:38:c6:cf:e6:20:d2:ab:ad:44:74:a3:04:a3:a7:9c:9c:42: 0e:6d:1a:f6:82:1c:dc:f6:17:5b:d4:7b:6b:10:83:f1:c9:b8: 52:34:10:c9:a3:48:6e:e0:6d:7e:a6:1e:85:55:96:92:f6:0e: b8:67:d0:60:39:ca:46:6f:cc:b8:13:cd:c2:53:db:9a:57:e9: df:89:d2:42:a7:3d:66:2c:4f:a2:6f:8e:b2:cf:5f:fd:23:44: d1:28:aa:1b:17:0f:e4:4e:bd:4f:ec:ad:33:b2:76:df:3a:94: 43:e3:9a:2a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA1YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0ZGQkYxMTAvBgNVBAUTKDlDRkE4NjlEQzMwNjM1N0Q3QUMzMDkyRTRGRkZEMDRD QTUwMjc3NUUwHhcNMjUwODA5MDEzMDMzWhcNMjUwODE2MDEzMDMzWjAYMRYwFAYD VQQDEw02ODk2YTRiOS0wMWM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyGUeSXILKhq1SHgRyrje69Twxo7u5jOGD6XEyZGCtNHDu2sfMe7aHkhQf1Bo Cu1D2WsJZVGgH5HxydVYv+CIBIh8OAWA43rlTr0TXeS7IBxFrRmTheisLAPbZViK wwuqLZjRtwJiokyEUJSuenGC/G63Zm7Gqfi2hx1bniCP074kKO/x2I28G+WoVwYk gXMmu4W61BA/AovsY71dhnN0m68BRy6jwV3hfKyB5VFroJt5eLjmdMKKJhV7yV5j 9vjl+S/Nb2iGXhUm0RzNRuCi2cj+Ljsq9RbfddbxPutfyhpj1GqsXOefkqs4Hp64 1A184YZE1IWz18CKhdffyahKoQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB9NnC+3 +4u0FrXm1QUS44Y1xfoHMB8GA1UdIwQYMBaAFJz6hp3DBjV9esMJLk//0EylAnde MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RkZCRi9FRDUyRjAzMEM1 RjQxMUVDOEU4MEQ4ODZDNEY5QUUwMi9uUHFHbmNNR05YMTZ3d2t1VF9fUVRLVUNk MTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25QcUduY01HTlgxNnd3a3VUX19RVEtVQ2QxNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RkZCRi9FRDUyRjAzMEM1RjQxMUVDOEU4MEQ4ODZDNEY5QUUwMi9uUHFHbmNNR05Y MTZ3d2t1VF9fUVRLVUNkMTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDHn0q2iSxHu0umKea4stMHlc6UQT3WeCnHxx9yK5QkMXp6Ssr7cbRf t6mKz9aX/vQWQ1tGhttOnJtw/xnuV/9mZvDDg9CUNu25TmgD2k5RRlyGyWmiqFm1 aCw6WPJdm1uBJIIcPG4IEXlE13+8SwES6Oh5VGhh6JyKMQdQB+qK4pbJOpsXA266 BO+WdX+w3oX3OMbP5iDSq61EdKMEo6ecnEIObRr2ghzc9hdb1HtrEIPxybhSNBDJ o0hu4G1+ph6FVZaS9g64Z9BgOcpGb8y4E83CU9uaV+nfidJCpz1mLE+ib46yz1/9 I0TRKKobFw/kTr1P7K0zsnbfOpRD45oq -----END CERTIFICATE-----Generated at Sun Aug 10 05:46:34 2025 by rpki-client