$ rpki-client -vvf rpki.apnic.net/member_repository/A917FFBF/ED52F030C5F411EC8E80D886C4F9AE02/nPqGncMGNX16wwkuT__QTKUCd14.mft File: nPqGncMGNX16wwkuT__QTKUCd14.mft (raw, json) Hash identifier: nkaAJMJ5B/j5rxi8oi9E3JiFYBZbIqbWmeZx0BhGEgs= Subject key identifier: 95:7A:E2:C8:81:58:17:B5:ED:72:1C:0E:86:AD:79:7E:7E:9A:8F:B9 Authority key identifier: 9C:FA:86:9D:C3:06:35:7D:7A:C3:09:2E:4F:FF:D0:4C:A5:02:77:5E Certificate issuer: /CN=A917FFBF/serialNumber=9CFA869DC306357D7AC3092E4FFFD04CA502775E Certificate serial: 033C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nPqGncMGNX16wwkuT__QTKUCd14.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917FFBF/ED52F030C5F411EC8E80D886C4F9AE02/nPqGncMGNX16wwkuT__QTKUCd14.mft Manifest number: 0338 Signing time: Thu 19 Jun 2025 00:53:22 +0000 Manifest this update: Thu 19 Jun 2025 00:53:22 +0000 Manifest next update: Thu 26 Jun 2025 00:53:22 +0000 Files and hashes: 1: nPqGncMGNX16wwkuT__QTKUCd14.crl (hash: suHQvz31G647kSxl7DhPo18w+e5hBpJw+OEV+0sCTko=) 2: 6AE91888C5FC11EC9127557EC4F9AE02.roa (hash: Upjs7verB9kHZN2eaB1a6dX0s9sFshQhi4VCB4ap3GQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917FFBF/ED52F030C5F411EC8E80D886C4F9AE02/nPqGncMGNX16wwkuT__QTKUCd14.crl rsync://rpki.apnic.net/member_repository/A917FFBF/ED52F030C5F411EC8E80D886C4F9AE02/nPqGncMGNX16wwkuT__QTKUCd14.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nPqGncMGNX16wwkuT__QTKUCd14.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 26 Jun 2025 00:53:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 828 (0x33c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917FFBF, serialNumber=9CFA869DC306357D7AC3092E4FFFD04CA502775E Validity Not Before: Jun 19 00:53:22 2025 GMT Not After : Jun 26 00:53:22 2025 GMT Subject: CN=68535f82-17ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:ab:d3:67:4e:55:d6:4a:85:a8:f1:08:32:cc: b8:d5:23:44:a3:1e:d5:04:dc:c5:66:ab:cd:19:f6: 9e:52:53:4e:5b:d2:10:aa:b3:86:8c:1a:81:6c:16: c5:55:e5:06:91:34:63:e4:3b:32:65:6d:a2:6d:02: a1:c8:5c:70:5f:e1:b9:6a:c9:8f:33:c1:c5:32:76: 24:56:f4:0f:4d:b7:3f:e4:7e:1f:12:49:25:6c:50: f8:21:e9:81:1a:66:46:ab:d1:3e:a3:87:27:02:bf: ba:3f:17:50:74:61:19:2b:b0:94:f8:43:99:30:2f: 27:5f:f5:83:bf:ab:8d:99:61:69:de:d8:5d:16:63: 96:13:77:73:d7:2e:6a:ba:67:9d:e2:79:a6:ac:db: f5:b7:86:ae:30:f0:2b:61:90:29:a1:e5:11:3b:e9: f2:9b:e2:6f:f4:99:8d:31:b7:af:b1:ba:37:02:0b: 10:d7:07:b6:d9:41:31:4b:86:44:04:3c:f3:7e:29: f0:33:7c:c4:2f:04:62:40:3e:1c:b8:9e:0c:86:fb: 16:2e:a8:7b:c5:45:d1:ff:59:18:7c:bb:5a:a0:3a: 20:12:ae:e0:70:9b:f8:81:cd:ea:4b:4f:57:10:74: 0b:ae:d8:f9:11:ca:37:bd:43:77:02:3b:1f:2c:18: de:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:7A:E2:C8:81:58:17:B5:ED:72:1C:0E:86:AD:79:7E:7E:9A:8F:B9 X509v3 Authority Key Identifier: keyid:9C:FA:86:9D:C3:06:35:7D:7A:C3:09:2E:4F:FF:D0:4C:A5:02:77:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917FFBF/ED52F030C5F411EC8E80D886C4F9AE02/nPqGncMGNX16wwkuT__QTKUCd14.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nPqGncMGNX16wwkuT__QTKUCd14.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917FFBF/ED52F030C5F411EC8E80D886C4F9AE02/nPqGncMGNX16wwkuT__QTKUCd14.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b1:a3:b2:01:2a:21:9f:df:f5:3f:58:46:5f:1f:c8:d8:1a:d9: b9:ea:8e:21:29:37:c6:75:eb:54:23:dc:72:27:de:f8:dc:e6: da:af:06:63:ba:22:11:3b:15:c2:d9:1b:d6:66:e9:0f:34:53: 3e:e8:d1:61:90:6b:20:1d:8f:46:93:b9:54:56:82:4e:a3:ac: c8:b9:04:59:df:8d:2e:b0:7c:f5:c4:5a:77:c9:3c:9b:51:1d: be:cd:bf:2b:59:68:4f:75:76:a3:3b:88:6b:45:37:6d:6a:8b: 3f:85:35:20:92:0c:02:38:09:6e:da:b6:bd:85:8e:a2:fe:2e: 9a:57:2f:99:b0:ae:a4:0c:d4:ad:d8:36:6a:a6:d1:4b:a1:56: 74:3e:ae:94:35:53:f7:a6:3c:23:b1:93:00:72:ed:46:da:3d: fa:3b:28:e5:e5:a2:b3:fe:27:47:6b:d2:11:66:43:65:f8:30: d6:3a:31:9f:b5:94:27:40:55:98:69:67:90:de:a7:87:f6:3f: 37:4b:2c:27:ff:a4:2d:b5:a3:00:a0:90:22:c4:fb:b1:d8:0e: 14:74:00:8b:64:9b:98:5a:8f:76:3f:22:25:d9:9c:ab:63:e5: 25:d6:33:08:f3:66:39:77:75:a5:41:e1:8f:27:b6:55:cf:ce: f7:0a:d5:94 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAzwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0ZGQkYxMTAvBgNVBAUTKDlDRkE4NjlEQzMwNjM1N0Q3QUMzMDkyRTRGRkZEMDRD QTUwMjc3NUUwHhcNMjUwNjE5MDA1MzIyWhcNMjUwNjI2MDA1MzIyWjAYMRYwFAYD VQQDEw02ODUzNWY4Mi0xN2VmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4KvTZ05V1kqFqPEIMsy41SNEox7VBNzFZqvNGfaeUlNOW9IQqrOGjBqBbBbF VeUGkTRj5DsyZW2ibQKhyFxwX+G5asmPM8HFMnYkVvQPTbc/5H4fEkklbFD4IemB GmZGq9E+o4cnAr+6PxdQdGEZK7CU+EOZMC8nX/WDv6uNmWFp3thdFmOWE3dz1y5q umed4nmmrNv1t4auMPArYZApoeURO+nym+Jv9JmNMbevsbo3AgsQ1we22UExS4ZE BDzzfinwM3zELwRiQD4cuJ4MhvsWLqh7xUXR/1kYfLtaoDogEq7gcJv4gc3qS09X EHQLrtj5Eco3vUN3AjsfLBje4wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJV64siB WBe17XIcDoateX5+mo+5MB8GA1UdIwQYMBaAFJz6hp3DBjV9esMJLk//0EylAnde MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RkZCRi9FRDUyRjAzMEM1 RjQxMUVDOEU4MEQ4ODZDNEY5QUUwMi9uUHFHbmNNR05YMTZ3d2t1VF9fUVRLVUNk MTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25QcUduY01HTlgxNnd3a3VUX19RVEtVQ2QxNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RkZCRi9FRDUyRjAzMEM1RjQxMUVDOEU4MEQ4ODZDNEY5QUUwMi9uUHFHbmNNR05Y MTZ3d2t1VF9fUVRLVUNkMTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCxo7IBKiGf3/U/WEZfH8jYGtm56o4hKTfGdetUI9xyJ9743ObarwZj uiIROxXC2RvWZukPNFM+6NFhkGsgHY9Gk7lUVoJOo6zIuQRZ340usHz1xFp3yTyb UR2+zb8rWWhPdXajO4hrRTdtaos/hTUgkgwCOAlu2ra9hY6i/i6aVy+ZsK6kDNSt 2DZqptFLoVZ0Pq6UNVP3pjwjsZMAcu1G2j36Oyjl5aKz/idHa9IRZkNl+DDWOjGf tZQnQFWYaWeQ3qeH9j83Sywn/6QttaMAoJAixPux2A4UdACLZJuYWo92PyIl2Zyr Y+Ul1jMI82Y5d3WlQeGPJ7ZVz873CtWU -----END CERTIFICATE-----Generated at Fri Jun 20 01:23:07 2025 by rpki-client