$ rpki-client -vvf rpki.apnic.net/member_repository/A918404E/BC030C76F1DA11EAAFC6C70AC4F9AE02/nHx3b2v2ADKD8Mq0Pi3GFJSZcWI.mft File: nHx3b2v2ADKD8Mq0Pi3GFJSZcWI.mft (raw, json) Hash identifier: Fr75BniBFJsDf84Lih0znEVVcbgvUeI7+DFXqKHQA6E= Subject key identifier: 3E:B6:83:30:0E:EE:26:8F:EB:7C:94:8E:B9:67:CE:00:84:2D:9B:62 Authority key identifier: 9C:7C:77:6F:6B:F6:00:32:83:F0:CA:B4:3E:2D:C6:14:94:99:71:62 Certificate issuer: /CN=A918404E/serialNumber=9C7C776F6BF6003283F0CAB43E2DC61494997162 Certificate serial: 0921 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nHx3b2v2ADKD8Mq0Pi3GFJSZcWI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918404E/BC030C76F1DA11EAAFC6C70AC4F9AE02/nHx3b2v2ADKD8Mq0Pi3GFJSZcWI.mft Manifest number: 088B Signing time: Thu 12 Jun 2025 20:45:47 +0000 Manifest this update: Thu 12 Jun 2025 20:45:46 +0000 Manifest next update: Thu 19 Jun 2025 20:45:46 +0000 Files and hashes: 1: nHx3b2v2ADKD8Mq0Pi3GFJSZcWI.crl (hash: d5wrvd3vU+Zvf5/0UcngCy9ITSTOVKYi1PwbTzVQJ1w=) 2: 8C2F4DBA8D3111EFA61E9282C4F9AE02.roa (hash: rGSaf9r5NHWNkGd2dlgWyn72IpJZOpkzcKbp3O1O8bg=) 3: 287F42E4018011EF92ADDC7FC4F9AE02.roa (hash: FEK8EzXCQ/8MiufhcQyCAnkfxapHFXjscSrsdrF8TfA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918404E/BC030C76F1DA11EAAFC6C70AC4F9AE02/nHx3b2v2ADKD8Mq0Pi3GFJSZcWI.crl rsync://rpki.apnic.net/member_repository/A918404E/BC030C76F1DA11EAAFC6C70AC4F9AE02/nHx3b2v2ADKD8Mq0Pi3GFJSZcWI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nHx3b2v2ADKD8Mq0Pi3GFJSZcWI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 20:45:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2337 (0x921) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918404E, serialNumber=9C7C776F6BF6003283F0CAB43E2DC61494997162 Validity Not Before: Jun 12 20:45:46 2025 GMT Not After : Jun 19 20:45:46 2025 GMT Subject: CN=684b3c7b-b220 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:49:a9:1e:ac:e9:02:3b:eb:22:3b:80:f4:d0: e1:89:8b:6d:41:51:bd:d0:53:96:c4:a2:16:ec:36: 0b:72:5c:f8:fc:0c:a1:0f:7c:12:4a:69:6a:a3:13: 29:8c:64:9c:30:95:55:52:d2:2a:08:62:5a:be:61: 28:99:c1:e9:04:c0:75:f6:61:de:a1:23:74:7e:11: 99:11:63:95:ef:50:3b:72:3c:95:c2:0e:b8:26:f4: d5:15:52:19:31:34:22:d1:d3:0a:0e:52:4f:1e:80: cb:77:dd:20:a2:c5:07:e3:b1:da:89:6b:bd:45:6c: 4a:08:58:8c:75:09:dd:3c:a5:b9:7a:15:13:cd:f6: 95:db:bc:fb:da:fb:df:70:bb:ca:fb:67:1c:58:a4: 4f:c7:57:ce:35:a9:bf:19:a0:e5:ce:f8:1e:80:cc: fd:f0:6f:67:2f:54:40:ae:c9:7b:82:3a:ec:34:a5: af:da:93:3d:b4:f4:6a:53:f9:f0:23:96:d7:df:a1: a4:19:e4:20:66:5e:af:64:0c:16:df:48:f5:c7:28: f5:e2:13:6c:b3:be:00:17:91:d6:d8:16:a5:91:a9: d8:c1:d5:cb:fa:5e:64:4f:d9:fa:d4:40:12:58:ba: 74:e0:71:e8:5e:55:a1:61:41:28:b2:25:78:6e:e6: 29:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:B6:83:30:0E:EE:26:8F:EB:7C:94:8E:B9:67:CE:00:84:2D:9B:62 X509v3 Authority Key Identifier: keyid:9C:7C:77:6F:6B:F6:00:32:83:F0:CA:B4:3E:2D:C6:14:94:99:71:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918404E/BC030C76F1DA11EAAFC6C70AC4F9AE02/nHx3b2v2ADKD8Mq0Pi3GFJSZcWI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nHx3b2v2ADKD8Mq0Pi3GFJSZcWI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918404E/BC030C76F1DA11EAAFC6C70AC4F9AE02/nHx3b2v2ADKD8Mq0Pi3GFJSZcWI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 73:50:58:90:5d:8b:ff:df:5b:ac:c9:38:44:12:23:bf:ab:2c: 96:a5:3b:47:2c:9b:32:52:10:8e:6f:c0:34:32:e5:11:ff:a7: f0:f0:8d:9e:6c:30:9d:b7:b0:1a:b3:20:99:ff:34:8f:1e:00: 5b:75:70:09:c6:ba:b3:02:ac:c3:75:44:27:16:eb:68:ac:2f: d5:2e:97:3d:19:f1:d4:15:79:8e:22:a3:34:c9:ff:2f:42:13: e6:df:19:bd:87:d9:aa:74:e2:65:9c:95:57:f5:a5:2f:f8:f6: 27:d9:6d:0d:c6:89:90:10:21:ad:d0:9a:ae:5c:a1:1e:cf:b9: 86:55:b2:0b:0d:d6:1e:f7:d8:17:81:12:0a:4a:fc:8a:3a:c1: 9f:7e:dd:1d:e0:29:75:06:16:62:d4:cb:c4:b2:f5:f3:3d:58: 82:cc:63:03:bb:0c:be:75:82:61:9a:03:4d:25:f2:8d:47:f1: ac:75:c0:58:71:77:7c:99:dc:32:5f:cb:a6:45:41:8f:a0:69: 96:74:40:5d:d5:69:48:72:39:c9:aa:ba:f8:56:32:db:92:84: 67:e2:d1:74:a1:46:59:ee:9c:c6:69:ad:e6:f9:68:47:be:2b: 3c:2b:da:29:5b:95:e7:c7:4f:b3:7e:ff:4b:51:22:20:5e:f3: 64:4a:a7:a9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCSEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODQwNEUxMTAvBgNVBAUTKDlDN0M3NzZGNkJGNjAwMzI4M0YwQ0FCNDNFMkRDNjE0 OTQ5OTcxNjIwHhcNMjUwNjEyMjA0NTQ2WhcNMjUwNjE5MjA0NTQ2WjAYMRYwFAYD VQQDEw02ODRiM2M3Yi1iMjIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvUmpHqzpAjvrIjuA9NDhiYttQVG90FOWxKIW7DYLclz4/AyhD3wSSmlqoxMp jGScMJVVUtIqCGJavmEomcHpBMB19mHeoSN0fhGZEWOV71A7cjyVwg64JvTVFVIZ MTQi0dMKDlJPHoDLd90gosUH47HaiWu9RWxKCFiMdQndPKW5ehUTzfaV27z72vvf cLvK+2ccWKRPx1fONam/GaDlzvgegMz98G9nL1RArsl7gjrsNKWv2pM9tPRqU/nw I5bX36GkGeQgZl6vZAwW30j1xyj14hNss74AF5HW2BalkanYwdXL+l5kT9n61EAS WLp04HHoXlWhYUEosiV4buYpGQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD62gzAO 7iaP63yUjrlnzgCELZtiMB8GA1UdIwQYMBaAFJx8d29r9gAyg/DKtD4txhSUmXFi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NDA0RS9CQzAzMEM3NkYx REExMUVBQUZDNkM3MEFDNEY5QUUwMi9uSHgzYjJ2MkFES0Q4TXEwUGkzR0ZKU1pj V0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25IeDNiMnYyQURLRDhNcTBQaTNHRkpTWmNXSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NDA0RS9CQzAzMEM3NkYxREExMUVBQUZDNkM3MEFDNEY5QUUwMi9uSHgzYjJ2MkFE S0Q4TXEwUGkzR0ZKU1pjV0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBzUFiQXYv/31usyThEEiO/qyyWpTtHLJsyUhCOb8A0MuUR/6fw8I2e bDCdt7AasyCZ/zSPHgBbdXAJxrqzAqzDdUQnFutorC/VLpc9GfHUFXmOIqM0yf8v QhPm3xm9h9mqdOJlnJVX9aUv+PYn2W0NxomQECGt0JquXKEez7mGVbILDdYe99gX gRIKSvyKOsGfft0d4Cl1BhZi1MvEsvXzPViCzGMDuwy+dYJhmgNNJfKNR/GsdcBY cXd8mdwyX8umRUGPoGmWdEBd1WlIcjnJqrr4VjLbkoRn4tF0oUZZ7pzGaa3m+WhH vis8K9opW5Xnx0+zfv9LUSIgXvNkSqep -----END CERTIFICATE-----Generated at Sat Jun 14 18:38:19 2025 by rpki-client