$ rpki-client -vvf rpki.apnic.net/member_repository/A918233C/E6491FE2621411ECB006712CC4F9AE02/_NTfjrSqZK9Wt9DHMm4pEEVDzFU.mft File: _NTfjrSqZK9Wt9DHMm4pEEVDzFU.mft (raw, json) Hash identifier: G7lhZ/cbTWR2m8a/pBte0WMMWfzwreASLI+Zk0syYP4= Subject key identifier: AC:3E:98:A5:94:F4:0A:87:9A:95:D4:1A:52:6C:C1:5A:CB:D6:80:BA Authority key identifier: FC:D4:DF:8E:B4:AA:64:AF:56:B7:D0:C7:32:6E:29:10:45:43:CC:55 Certificate issuer: /CN=A918233C/serialNumber=FCD4DF8EB4AA64AF56B7D0C7326E29104543CC55 Certificate serial: 25 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_NTfjrSqZK9Wt9DHMm4pEEVDzFU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918233C/E6491FE2621411ECB006712CC4F9AE02/_NTfjrSqZK9Wt9DHMm4pEEVDzFU.mft Manifest number: 045C Signing time: Sun 15 Jun 2025 00:03:02 +0000 Manifest this update: Sun 15 Jun 2025 00:03:02 +0000 Manifest next update: Sun 22 Jun 2025 00:03:02 +0000 Files and hashes: 1: _NTfjrSqZK9Wt9DHMm4pEEVDzFU.crl (hash: idhfz/ip9Oy4yD3xPsxl0FRU6/9jSueEheyg6O/0hPk=) 2: 34E594A215C511F09562D30FC4F9AE02.roa (hash: hO8cBpPkkXeK8WAFYmWHFGS1BpcqmFyN9GM5+DFTdqE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918233C/E6491FE2621411ECB006712CC4F9AE02/_NTfjrSqZK9Wt9DHMm4pEEVDzFU.crl rsync://rpki.apnic.net/member_repository/A918233C/E6491FE2621411ECB006712CC4F9AE02/_NTfjrSqZK9Wt9DHMm4pEEVDzFU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_NTfjrSqZK9Wt9DHMm4pEEVDzFU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Jun 2025 00:03:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37 (0x25) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918233C, serialNumber=FCD4DF8EB4AA64AF56B7D0C7326E29104543CC55 Validity Not Before: Jun 15 00:03:02 2025 GMT Not After : Jun 22 00:03:02 2025 GMT Subject: CN=684e0db6-d06c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:af:a6:6e:c7:c4:68:d9:68:71:8c:5a:98:a1: a4:a2:40:91:c2:09:48:90:62:ea:9e:87:ad:89:be: d8:07:a3:90:e1:5b:1c:5b:30:30:22:b5:0f:e3:64: 1c:88:3a:70:75:98:3c:a8:88:75:8d:40:62:32:d4: 2a:f0:07:05:3b:63:d4:bf:79:a5:22:e5:22:ed:07: 00:6d:56:f8:de:5c:7a:33:e1:d1:e0:b1:ba:62:0d: 50:ba:70:12:3b:73:50:19:5d:d1:ad:bc:d5:ca:6f: e7:f9:d3:e9:58:18:ab:94:f6:ac:21:25:fa:55:46: a2:9a:11:07:b5:e8:fb:75:57:af:d1:1b:18:e3:57: 52:05:bf:41:95:2f:f0:6d:b1:94:55:58:90:77:ab: fc:ac:8b:47:21:63:29:0a:97:74:9a:85:e1:dd:08: 79:28:38:d9:ac:e1:c3:57:89:1b:91:24:4b:92:b0: ae:6b:06:00:f8:9d:d4:38:0d:45:a5:0f:67:aa:2c: f8:bc:53:e8:ae:e0:ea:a9:9e:cb:1f:56:0d:4f:9a: 0b:f4:fe:75:f3:1e:e2:f8:0a:49:f3:05:29:c7:1e: 4f:7e:9a:44:bc:b7:35:5d:45:a8:d2:38:ab:ef:49: 43:44:b5:06:ba:c4:37:6a:4a:99:a6:9e:2f:bc:90: f9:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:3E:98:A5:94:F4:0A:87:9A:95:D4:1A:52:6C:C1:5A:CB:D6:80:BA X509v3 Authority Key Identifier: keyid:FC:D4:DF:8E:B4:AA:64:AF:56:B7:D0:C7:32:6E:29:10:45:43:CC:55 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918233C/E6491FE2621411ECB006712CC4F9AE02/_NTfjrSqZK9Wt9DHMm4pEEVDzFU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_NTfjrSqZK9Wt9DHMm4pEEVDzFU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918233C/E6491FE2621411ECB006712CC4F9AE02/_NTfjrSqZK9Wt9DHMm4pEEVDzFU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 52:22:33:32:23:9a:20:56:f5:da:2f:a6:d9:fd:ef:22:ef:7e: 2e:bc:33:d4:a7:9c:a7:d1:7e:24:fa:5c:1e:1f:99:2d:6a:ae: 31:3b:b4:cf:9e:e2:df:81:00:a3:8a:1a:b1:f7:f2:92:d7:d8: 37:ef:b1:78:3a:b3:b8:66:9b:93:61:52:91:76:e7:fe:93:b3: b6:03:ae:8f:d4:37:ff:52:28:99:ba:97:a4:35:aa:b6:ba:f8: 39:19:60:0e:e3:5f:5f:57:5e:4e:00:10:a1:d6:69:3b:75:c4: 51:dc:e9:64:3f:25:55:10:5a:a2:d2:1f:4a:63:8e:ed:71:06: b5:48:14:0b:51:e8:8c:a4:5c:26:87:ef:6c:b7:6a:d5:0e:88: b9:8c:9a:df:78:d7:99:ef:8d:ee:c9:bf:d4:d4:89:a2:61:00: 47:89:13:96:2a:b2:df:7c:43:d4:7d:b1:25:52:9c:44:b0:c4: bb:47:eb:14:32:9d:c5:75:9b:b3:a5:0f:bd:1b:31:11:a6:dd: 97:42:eb:5e:2c:6f:5b:34:10:a7:f3:cc:da:98:68:2e:9b:df: c7:51:53:59:43:37:af:6c:c0:31:50:45:13:5f:dc:56:19:2e: eb:13:04:e9:93:34:1e:de:a6:98:dc:33:b2:85:f3:5b:be:3c: 25:cc:3c:ee -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBJTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 MjMzQzExMC8GA1UEBRMoRkNENERGOEVCNEFBNjRBRjU2QjdEMEM3MzI2RTI5MTA0 NTQzQ0M1NTAeFw0yNTA2MTUwMDAzMDJaFw0yNTA2MjIwMDAzMDJaMBgxFjAUBgNV BAMTDTY4NGUwZGI2LWQwNmMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDDr6Zux8Ro2WhxjFqYoaSiQJHCCUiQYuqeh62JvtgHo5DhWxxbMDAitQ/jZByI OnB1mDyoiHWNQGIy1CrwBwU7Y9S/eaUi5SLtBwBtVvjeXHoz4dHgsbpiDVC6cBI7 c1AZXdGtvNXKb+f50+lYGKuU9qwhJfpVRqKaEQe16Pt1V6/RGxjjV1IFv0GVL/Bt sZRVWJB3q/ysi0chYykKl3SaheHdCHkoONms4cNXiRuRJEuSsK5rBgD4ndQ4DUWl D2eqLPi8U+iu4OqpnssfVg1Pmgv0/nXzHuL4CknzBSnHHk9+mkS8tzVdRajSOKvv SUNEtQa6xDdqSpmmni+8kPmpAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUrD6YpZT0 CoealdQaUmzBWsvWgLowHwYDVR0jBBgwFoAU/NTfjrSqZK9Wt9DHMm4pEEVDzFUw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTgyMzNDL0U2NDkxRkUyNjIx NDExRUNCMDA2NzEyQ0M0RjlBRTAyL19OVGZqclNxWks5V3Q5REhNbTRwRUVWRHpG VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvX05UZmpyU3FaSzlXdDlESE1tNHBFRVZEekZVLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTgy MzNDL0U2NDkxRkUyNjIxNDExRUNCMDA2NzEyQ0M0RjlBRTAyL19OVGZqclNxWks5 V3Q5REhNbTRwRUVWRHpGVS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAFIiMzIjmiBW9dovptn97yLvfi68M9SnnKfRfiT6XB4fmS1qrjE7tM+e 4t+BAKOKGrH38pLX2DfvsXg6s7hmm5NhUpF25/6Ts7YDro/UN/9SKJm6l6Q1qra6 +DkZYA7jX19XXk4AEKHWaTt1xFHc6WQ/JVUQWqLSH0pjju1xBrVIFAtR6IykXCaH 72y3atUOiLmMmt9415nvje7Jv9TUiaJhAEeJE5Yqst98Q9R9sSVSnESwxLtH6xQy ncV1m7OlD70bMRGm3ZdC614sb1s0EKfzzNqYaC6b38dRU1lDN69swDFQRRNf3FYZ LusTBOmTNB7eppjcM7KF81u+PCXMPO4= -----END CERTIFICATE-----Generated at Sun Jun 15 10:09:28 2025 by rpki-client