$ rpki-client -vvf rpki.apnic.net/member_repository/A918ACDD/2A2CFC464DCF11EDBF05FA53C4F9AE02/NpFTMwCsweAQXuAxcGNQf4e0AS0.mft File: NpFTMwCsweAQXuAxcGNQf4e0AS0.mft (raw, json) Hash identifier: EEG5/d229OxQgw++9j8HbkjN90gRMILlXhzmqnuIWfs= Subject key identifier: 2A:B3:80:EA:BD:1B:29:67:A8:3F:FC:F1:CB:F2:E6:54:F4:8C:E4:78 Authority key identifier: 36:91:53:33:00:AC:C1:E0:10:5E:E0:31:70:63:50:7F:87:B4:01:2D Certificate issuer: /CN=A918ACDD/serialNumber=3691533300ACC1E0105EE0317063507F87B4012D Certificate serial: 01FB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NpFTMwCsweAQXuAxcGNQf4e0AS0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918ACDD/2A2CFC464DCF11EDBF05FA53C4F9AE02/NpFTMwCsweAQXuAxcGNQf4e0AS0.mft Manifest number: 01F7 Signing time: Tue 17 Jun 2025 01:38:37 +0000 Manifest this update: Tue 17 Jun 2025 01:38:37 +0000 Manifest next update: Tue 24 Jun 2025 01:38:37 +0000 Files and hashes: 1: NpFTMwCsweAQXuAxcGNQf4e0AS0.crl (hash: +xNt9bCyRfxeNjSTzcL8okRKguCDvjKsZNyD5YPM7N8=) 2: 397504CA4DD211ED8314A659C4F9AE02.roa (hash: IA7ndlMtzlimkIY6svrVtb7hYj1DKuX/Dcj54QQRijI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918ACDD/2A2CFC464DCF11EDBF05FA53C4F9AE02/NpFTMwCsweAQXuAxcGNQf4e0AS0.crl rsync://rpki.apnic.net/member_repository/A918ACDD/2A2CFC464DCF11EDBF05FA53C4F9AE02/NpFTMwCsweAQXuAxcGNQf4e0AS0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NpFTMwCsweAQXuAxcGNQf4e0AS0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 24 Jun 2025 01:38:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 507 (0x1fb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918ACDD, serialNumber=3691533300ACC1E0105EE0317063507F87B4012D Validity Not Before: Jun 17 01:38:37 2025 GMT Not After : Jun 24 01:38:37 2025 GMT Subject: CN=6850c71d-ed73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:7e:4e:1f:70:78:82:c1:ea:2c:8d:95:3e:09: 8b:d6:a2:cd:bf:6c:b6:7e:d0:56:f8:26:9f:5b:81: 16:e3:57:d8:9a:e9:34:b6:bc:3f:19:30:2d:80:29: 03:25:c7:a9:aa:7a:3d:8c:53:f4:21:fd:33:e5:c3: ad:63:fe:49:13:c1:30:8e:f0:22:9f:5f:5e:38:ae: 65:34:ab:35:6b:30:7b:2a:ba:84:c9:36:53:5b:c4: 79:4e:23:af:86:13:d8:78:36:25:d0:30:d5:5d:e1: 9d:a3:00:84:da:9d:0d:0f:f0:4b:9d:a8:d1:24:aa: 3a:c7:73:50:b3:75:7f:33:91:78:4a:9a:0e:fd:4c: 84:de:75:9d:84:85:fc:15:c2:16:35:e5:f9:31:bc: 65:87:4f:04:d0:eb:b2:29:43:0c:8d:fa:26:63:ec: 9a:7d:50:ca:1e:58:16:7f:c1:ba:81:ea:60:98:a2: 2c:20:db:e6:82:a2:fa:ff:07:2d:7d:7e:1a:7c:32: c2:59:9c:3d:f2:65:17:18:c7:86:1e:9a:f7:98:5f: e8:02:b0:be:9d:8a:06:d8:3f:4a:05:05:3c:bd:39: 76:fd:a2:fe:e7:44:91:62:cc:c8:2b:32:00:d8:42: 5d:bf:22:8d:fe:39:1f:28:0c:bf:bf:67:71:e5:a7: 88:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:B3:80:EA:BD:1B:29:67:A8:3F:FC:F1:CB:F2:E6:54:F4:8C:E4:78 X509v3 Authority Key Identifier: keyid:36:91:53:33:00:AC:C1:E0:10:5E:E0:31:70:63:50:7F:87:B4:01:2D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918ACDD/2A2CFC464DCF11EDBF05FA53C4F9AE02/NpFTMwCsweAQXuAxcGNQf4e0AS0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NpFTMwCsweAQXuAxcGNQf4e0AS0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918ACDD/2A2CFC464DCF11EDBF05FA53C4F9AE02/NpFTMwCsweAQXuAxcGNQf4e0AS0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1b:06:b7:9e:94:18:94:74:57:94:37:5b:e7:79:5b:72:e6:70: 2a:fa:a1:d9:6f:fc:ea:40:5e:e5:ac:07:36:6e:18:55:c8:30: 75:e3:47:34:19:05:2c:4d:f4:79:78:5b:fb:52:72:cc:ae:11: 84:51:54:5a:28:c9:ca:7f:63:93:d4:41:ca:fc:ed:07:bf:3b: 64:09:9e:71:1f:be:38:e2:f8:8f:9c:3b:9e:fb:d2:ba:b1:67: b2:d0:9e:1c:f1:1c:56:b0:9d:d4:a0:32:cd:ee:e0:f6:79:7d: 5f:90:de:22:a4:f2:2b:65:9b:e2:ba:4f:d0:15:4c:e0:bd:91: d8:6f:2f:18:5d:a4:89:52:18:49:1c:e7:c1:23:73:b8:41:c0: fb:e0:48:11:67:a3:c4:8d:f8:4c:46:b0:bb:24:e5:71:c4:69: c9:b7:77:79:83:0f:1d:5e:3d:07:3d:6c:3c:4d:b0:84:d1:dd: 79:33:9c:77:64:de:e5:35:b2:53:7d:43:9d:b4:75:3e:9f:2d: 1f:79:00:e1:5c:cd:67:cf:78:b9:0b:f0:c7:9b:96:d7:b1:ea: 1c:ce:36:7e:ea:d5:be:45:dd:77:69:9c:9d:46:6c:62:f3:87: 01:e5:d7:2e:31:4c:2d:ed:c2:08:ad:ce:7c:08:91:43:38:48: c1:c6:96:84 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAfswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEFDREQxMTAvBgNVBAUTKDM2OTE1MzMzMDBBQ0MxRTAxMDVFRTAzMTcwNjM1MDdG ODdCNDAxMkQwHhcNMjUwNjE3MDEzODM3WhcNMjUwNjI0MDEzODM3WjAYMRYwFAYD VQQDEw02ODUwYzcxZC1lZDczMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5X5OH3B4gsHqLI2VPgmL1qLNv2y2ftBW+CafW4EW41fYmuk0trw/GTAtgCkD Jcepqno9jFP0If0z5cOtY/5JE8EwjvAin19eOK5lNKs1azB7KrqEyTZTW8R5TiOv hhPYeDYl0DDVXeGdowCE2p0ND/BLnajRJKo6x3NQs3V/M5F4SpoO/UyE3nWdhIX8 FcIWNeX5Mbxlh08E0OuyKUMMjfomY+yafVDKHlgWf8G6gepgmKIsINvmgqL6/wct fX4afDLCWZw98mUXGMeGHpr3mF/oArC+nYoG2D9KBQU8vTl2/aL+50SRYszIKzIA 2EJdvyKN/jkfKAy/v2dx5aeIkQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCqzgOq9 GylnqD/88cvy5lT0jOR4MB8GA1UdIwQYMBaAFDaRUzMArMHgEF7gMXBjUH+HtAEt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QUNERC8yQTJDRkM0NjRE Q0YxMUVEQkYwNUZBNTNDNEY5QUUwMi9OcEZUTXdDc3dlQVFYdUF4Y0dOUWY0ZTBB UzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05wRlRNd0Nzd2VBUVh1QXhjR05RZjRlMEFTMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QUNERC8yQTJDRkM0NjREQ0YxMUVEQkYwNUZBNTNDNEY5QUUwMi9OcEZUTXdDc3dl QVFYdUF4Y0dOUWY0ZTBBUzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAbBreelBiUdFeUN1vneVty5nAq+qHZb/zqQF7lrAc2bhhVyDB140c0 GQUsTfR5eFv7UnLMrhGEUVRaKMnKf2OT1EHK/O0HvztkCZ5xH7444viPnDue+9K6 sWey0J4c8RxWsJ3UoDLN7uD2eX1fkN4ipPIrZZviuk/QFUzgvZHYby8YXaSJUhhJ HOfBI3O4QcD74EgRZ6PEjfhMRrC7JOVxxGnJt3d5gw8dXj0HPWw8TbCE0d15M5x3 ZN7lNbJTfUOdtHU+ny0feQDhXM1nz3i5C/DHm5bXseoczjZ+6tW+Rd13aZydRmxi 84cB5dcuMUwt7cIIrc58CJFDOEjBxpaE -----END CERTIFICATE-----Generated at Wed Jun 18 13:41:13 2025 by rpki-client