$ rpki-client -vvf rpki.apnic.net/member_repository/A9197501/99B58BB013DB11ED9304C582C4F9AE02/nwqvLgr6Pm-NrlpGp-WMz_o0wSc.mft File: nwqvLgr6Pm-NrlpGp-WMz_o0wSc.mft (raw, json) Hash identifier: cCQ1b3G71gwFAo2xHB0ivOpCduNIS8J+ri5/m47/Qwk= Subject key identifier: 6A:0E:8C:4F:0F:B1:5B:6B:7D:A3:33:E3:BD:3C:E3:89:B7:1E:68:20 Authority key identifier: 9F:0A:AF:2E:0A:FA:3E:6F:8D:AE:5A:46:A7:E5:8C:CF:FA:34:C1:27 Certificate issuer: /CN=A9197501/serialNumber=9F0AAF2E0AFA3E6F8DAE5A46A7E58CCFFA34C127 Certificate serial: 0294 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nwqvLgr6Pm-NrlpGp-WMz_o0wSc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9197501/99B58BB013DB11ED9304C582C4F9AE02/nwqvLgr6Pm-NrlpGp-WMz_o0wSc.mft Manifest number: 0281 Signing time: Sun 15 Jun 2025 01:25:35 +0000 Manifest this update: Sun 15 Jun 2025 01:25:34 +0000 Manifest next update: Sun 22 Jun 2025 01:25:34 +0000 Files and hashes: 1: nwqvLgr6Pm-NrlpGp-WMz_o0wSc.crl (hash: cT2gQtChXG+nlBI39UARpi4RYIEP9riLV+y9w1XJuOs=) 2: 0E8725F61E9311F0B6662631C4F9AE02.roa (hash: uGNo0kqNctZXhYZoYXPLnEjuYisLB79lt85EjQOz3BM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9197501/99B58BB013DB11ED9304C582C4F9AE02/nwqvLgr6Pm-NrlpGp-WMz_o0wSc.crl rsync://rpki.apnic.net/member_repository/A9197501/99B58BB013DB11ED9304C582C4F9AE02/nwqvLgr6Pm-NrlpGp-WMz_o0wSc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nwqvLgr6Pm-NrlpGp-WMz_o0wSc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Jun 2025 01:25:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 660 (0x294) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9197501, serialNumber=9F0AAF2E0AFA3E6F8DAE5A46A7E58CCFFA34C127 Validity Not Before: Jun 15 01:25:34 2025 GMT Not After : Jun 22 01:25:34 2025 GMT Subject: CN=684e210e-b3ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:1d:da:b0:ca:f5:f3:76:37:ad:7f:f7:ec:6b: 89:0e:be:fc:2f:c7:a8:9b:6f:5f:19:cd:f4:6e:9f: 1a:26:f8:1b:39:54:41:39:89:aa:8f:d9:c5:30:9f: 6f:e6:4b:c5:12:d7:22:7c:35:f8:86:a2:97:ed:9d: 1f:eb:fe:3b:a7:1a:53:bc:5b:4e:9c:a1:df:49:23: 12:36:a1:4e:9b:05:53:4a:f7:f6:6b:d1:1e:47:bb: 7b:1c:bc:f0:67:a4:56:82:73:a0:89:54:d4:4b:55: f4:fa:8d:8b:86:dc:87:24:ce:63:45:84:ad:c5:f3: db:d1:27:26:ab:24:21:e1:7c:99:5e:ae:46:62:d4: 11:02:bd:19:64:b2:31:3f:9e:a2:36:dc:5a:75:e5: 92:d3:0e:bc:ab:28:47:df:c6:4d:27:8e:a2:f3:03: 79:37:df:79:7a:f1:4b:69:3f:f7:b7:bc:46:fa:c2: 2b:55:4d:9f:13:07:c6:3b:6a:58:71:3b:65:22:1a: 8d:92:35:b2:bd:c6:2d:49:c1:64:6c:6b:b8:a3:a5: 98:12:34:38:20:67:f4:72:21:24:01:27:f9:4b:2b: ee:6f:ec:df:eb:1a:8b:cb:9a:16:d4:c6:8b:65:5f: e4:9d:34:ad:cf:6a:89:0c:6b:3f:b5:ad:e2:f6:90: 67:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:0E:8C:4F:0F:B1:5B:6B:7D:A3:33:E3:BD:3C:E3:89:B7:1E:68:20 X509v3 Authority Key Identifier: keyid:9F:0A:AF:2E:0A:FA:3E:6F:8D:AE:5A:46:A7:E5:8C:CF:FA:34:C1:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9197501/99B58BB013DB11ED9304C582C4F9AE02/nwqvLgr6Pm-NrlpGp-WMz_o0wSc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nwqvLgr6Pm-NrlpGp-WMz_o0wSc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9197501/99B58BB013DB11ED9304C582C4F9AE02/nwqvLgr6Pm-NrlpGp-WMz_o0wSc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 09:d4:5c:78:5b:48:17:25:99:73:5c:6c:38:93:22:5e:33:b3: fe:28:02:b4:8a:ae:3e:23:03:96:99:e9:95:28:43:a6:17:33: a3:f2:57:53:76:54:22:82:80:00:8f:d8:ac:a6:9b:09:12:36: d6:17:dd:ea:b9:d3:a6:0b:c8:37:16:5d:d1:05:89:b4:72:ce: 29:95:74:ec:9c:30:e3:33:74:be:89:66:71:ca:7f:17:94:ab: 99:ca:f4:6f:f0:74:47:31:37:3b:b7:27:86:e6:83:55:d8:5e: b9:16:e5:d4:a0:81:f6:c8:33:76:6b:cb:b8:50:4d:30:0f:85: 52:72:fc:31:21:df:0b:4e:c8:29:cc:87:6c:d0:fe:6b:62:ce: 9d:cc:82:14:36:3e:52:fc:e7:e3:7b:61:11:46:55:e8:48:e1: 72:79:5b:30:49:7d:cd:bf:6c:3c:96:ea:a5:c5:81:ed:b6:bb: dd:73:5d:b2:e2:6e:4c:a6:6f:a4:95:9f:e0:3e:e4:d8:00:94: 10:d3:1a:c1:24:df:b5:e7:83:b1:da:62:6e:7e:07:20:a2:d6: 2e:05:fd:a9:91:42:a6:af:d4:dd:99:db:2c:f7:dc:2e:8a:9a: 67:57:cf:b7:a0:a0:e7:2a:62:70:16:72:92:92:de:23:cd:b2: a0:a5:b7:30 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICApQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTc1MDExMTAvBgNVBAUTKDlGMEFBRjJFMEFGQTNFNkY4REFFNUE0NkE3RTU4Q0NG RkEzNEMxMjcwHhcNMjUwNjE1MDEyNTM0WhcNMjUwNjIyMDEyNTM0WjAYMRYwFAYD VQQDEw02ODRlMjEwZS1iM2VjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqR3asMr183Y3rX/37GuJDr78L8eom29fGc30bp8aJvgbOVRBOYmqj9nFMJ9v 5kvFEtcifDX4hqKX7Z0f6/47pxpTvFtOnKHfSSMSNqFOmwVTSvf2a9EeR7t7HLzw Z6RWgnOgiVTUS1X0+o2LhtyHJM5jRYStxfPb0ScmqyQh4XyZXq5GYtQRAr0ZZLIx P56iNtxadeWS0w68qyhH38ZNJ46i8wN5N995evFLaT/3t7xG+sIrVU2fEwfGO2pY cTtlIhqNkjWyvcYtScFkbGu4o6WYEjQ4IGf0ciEkASf5Syvub+zf6xqLy5oW1MaL ZV/knTStz2qJDGs/ta3i9pBnlQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGoOjE8P sVtrfaMz470844m3HmggMB8GA1UdIwQYMBaAFJ8Kry4K+j5vja5aRqfljM/6NMEn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NzUwMS85OUI1OEJCMDEz REIxMUVEOTMwNEM1ODJDNEY5QUUwMi9ud3F2TGdyNlBtLU5ybHBHcC1XTXpfbzB3 U2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL253cXZMZ3I2UG0tTnJscEdwLVdNel9vMHdTYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NzUwMS85OUI1OEJCMDEzREIxMUVEOTMwNEM1ODJDNEY5QUUwMi9ud3F2TGdyNlBt LU5ybHBHcC1XTXpfbzB3U2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAJ1Fx4W0gXJZlzXGw4kyJeM7P+KAK0iq4+IwOWmemVKEOmFzOj8ldT dlQigoAAj9isppsJEjbWF93qudOmC8g3Fl3RBYm0cs4plXTsnDDjM3S+iWZxyn8X lKuZyvRv8HRHMTc7tyeG5oNV2F65FuXUoIH2yDN2a8u4UE0wD4VScvwxId8LTsgp zIds0P5rYs6dzIIUNj5S/Ofje2ERRlXoSOFyeVswSX3Nv2w8luqlxYHttrvdc12y 4m5Mpm+klZ/gPuTYAJQQ0xrBJN+154Ox2mJufgcgotYuBf2pkUKmr9Tdmdss99wu ippnV8+3oKDnKmJwFnKSkt4jzbKgpbcw -----END CERTIFICATE-----Generated at Sun Jun 15 10:09:18 2025 by rpki-client