$ rpki-client -vvf rpki.apnic.net/member_repository/A91C779D/460D1C5AE2AE11EE86F33C1EC4F9AE02/NIDFZSM0jdq6MD4x8i36Nj-Ifo8.mft File: NIDFZSM0jdq6MD4x8i36Nj-Ifo8.mft (raw, json) Hash identifier: YGuvxvWM2H7ivuaMZglkyMZIO+9aL9iPg+OlZzYdoHs= Subject key identifier: 49:F0:A5:EE:AC:3D:17:80:DC:A0:25:CB:69:66:39:05:D9:6C:F7:5D Authority key identifier: 34:80:C5:65:23:34:8D:DA:BA:30:3E:31:F2:2D:FA:36:3F:88:7E:8F Certificate issuer: /CN=A91C779D/serialNumber=3480C56523348DDABA303E31F22DFA363F887E8F Certificate serial: ED Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/NIDFZSM0jdq6MD4x8i36Nj-Ifo8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C779D/460D1C5AE2AE11EE86F33C1EC4F9AE02/NIDFZSM0jdq6MD4x8i36Nj-Ifo8.mft Manifest number: EB Signing time: Thu 19 Jun 2025 04:42:41 +0000 Manifest this update: Thu 19 Jun 2025 04:42:40 +0000 Manifest next update: Thu 26 Jun 2025 04:42:40 +0000 Files and hashes: 1: NIDFZSM0jdq6MD4x8i36Nj-Ifo8.crl (hash: bBrjjpMGiK7d0jPokWxfi8CPkt31CF4u6Uwv0i0AQxA=) 2: 0BBBE2B2E2B211EEACBA3341C4F9AE02.roa (hash: dwiUCjJJt0eG2N+1FVdoqJWTzPaXWWEUJdKiT+scZJI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C779D/460D1C5AE2AE11EE86F33C1EC4F9AE02/NIDFZSM0jdq6MD4x8i36Nj-Ifo8.crl rsync://rpki.apnic.net/member_repository/A91C779D/460D1C5AE2AE11EE86F33C1EC4F9AE02/NIDFZSM0jdq6MD4x8i36Nj-Ifo8.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/NIDFZSM0jdq6MD4x8i36Nj-Ifo8.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 26 Jun 2025 04:42:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 237 (0xed) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C779D, serialNumber=3480C56523348DDABA303E31F22DFA363F887E8F Validity Not Before: Jun 19 04:42:40 2025 GMT Not After : Jun 26 04:42:40 2025 GMT Subject: CN=68539540-39f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:40:67:74:2c:35:f9:cb:61:01:ea:44:a3:13: 0b:b5:95:9e:5b:03:73:17:6a:27:41:26:94:14:b2: 36:a8:f4:24:42:bb:63:cd:d3:df:de:1f:13:88:15: 47:99:a4:d6:11:dd:1f:74:d8:f8:79:ba:fa:42:9b: d9:25:d1:66:dd:0d:6a:7b:53:8c:e5:41:6d:b8:7b: dc:e1:00:a8:e7:05:d5:60:ff:bc:fa:fa:ff:79:08: c3:67:6a:fe:a9:94:c0:4c:1c:2b:69:b0:e2:5e:5b: ff:c3:75:64:c2:ac:41:ad:f9:c9:8d:71:7f:e1:71: 24:d7:89:73:4a:ce:67:79:10:a0:34:2f:4a:ba:9c: 4b:cd:46:48:5a:11:6a:52:49:58:48:1a:e3:bc:e2: 1e:4c:5d:2a:92:f9:40:7c:ce:d2:01:de:db:64:de: 8e:de:41:c0:ef:15:d4:95:57:1b:5f:ab:fa:9d:4f: c8:31:b8:76:a5:4d:49:b5:f2:e1:31:0b:74:6c:af: d5:86:d1:a2:c7:be:43:a8:fd:43:91:a8:33:b4:b8: e7:36:6e:f9:fa:3b:55:df:0e:35:4b:4e:c6:34:40: 35:c3:40:c7:e4:16:24:f2:00:d0:04:18:84:47:6e: 83:df:a3:99:9f:c8:bd:0c:df:a8:63:3c:77:d6:81: 28:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:F0:A5:EE:AC:3D:17:80:DC:A0:25:CB:69:66:39:05:D9:6C:F7:5D X509v3 Authority Key Identifier: keyid:34:80:C5:65:23:34:8D:DA:BA:30:3E:31:F2:2D:FA:36:3F:88:7E:8F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C779D/460D1C5AE2AE11EE86F33C1EC4F9AE02/NIDFZSM0jdq6MD4x8i36Nj-Ifo8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/NIDFZSM0jdq6MD4x8i36Nj-Ifo8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C779D/460D1C5AE2AE11EE86F33C1EC4F9AE02/NIDFZSM0jdq6MD4x8i36Nj-Ifo8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4d:c0:8f:6f:a3:55:ac:48:1d:44:2c:d9:f3:98:e0:41:e3:29: ab:b9:41:f2:a8:2d:f7:1e:7b:13:36:a4:09:e0:1a:81:83:85: bc:0f:c9:49:6e:c1:92:e3:26:7f:10:a8:bd:d8:7f:20:a3:bc: 82:49:d2:01:84:51:5e:4d:b7:07:c0:be:2e:9f:5f:d9:9c:54: da:90:c4:ee:99:3c:4c:82:b6:a5:0d:2c:07:f2:8a:90:91:60: c7:8c:63:ff:47:3b:42:bf:56:b0:52:82:79:2b:98:86:a6:62: 00:a5:64:4c:5a:9d:6f:e2:4f:d3:28:14:06:4e:11:fc:6e:ef: 8d:0d:2c:bf:c8:94:8d:2b:91:63:4d:a6:28:c3:02:6f:1c:b3: 31:e0:37:e0:f3:44:2e:df:ff:42:92:b6:61:12:48:0b:8e:cf: 7f:77:ea:30:78:ba:07:1b:79:bd:b2:45:19:64:e2:91:da:ff: 21:78:84:8d:c5:6d:22:19:23:0b:73:60:c8:32:9c:10:3f:7a: 24:9b:3f:ee:4b:99:67:4f:1b:bc:90:84:50:a0:a4:e1:10:78: 0e:2b:8a:c2:a6:29:31:23:ff:8a:d5:53:b4:ae:b2:5a:cf:31: 20:40:d3:c8:34:a5:d2:10:ab:9e:ac:e3:54:1f:40:85:a0:b6: 51:e5:28:d3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAO0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qzc3OUQxMTAvBgNVBAUTKDM0ODBDNTY1MjMzNDhEREFCQTMwM0UzMUYyMkRGQTM2 M0Y4ODdFOEYwHhcNMjUwNjE5MDQ0MjQwWhcNMjUwNjI2MDQ0MjQwWjAYMRYwFAYD VQQDEw02ODUzOTU0MC0zOWYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzkBndCw1+cthAepEoxMLtZWeWwNzF2onQSaUFLI2qPQkQrtjzdPf3h8TiBVH maTWEd0fdNj4ebr6QpvZJdFm3Q1qe1OM5UFtuHvc4QCo5wXVYP+8+vr/eQjDZ2r+ qZTATBwrabDiXlv/w3VkwqxBrfnJjXF/4XEk14lzSs5neRCgNC9KupxLzUZIWhFq UklYSBrjvOIeTF0qkvlAfM7SAd7bZN6O3kHA7xXUlVcbX6v6nU/IMbh2pU1JtfLh MQt0bK/VhtGix75DqP1DkagztLjnNm75+jtV3w41S07GNEA1w0DH5BYk8gDQBBiE R26D36OZn8i9DN+oYzx31oEoWQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEnwpe6s PReA3KAly2lmOQXZbPddMB8GA1UdIwQYMBaAFDSAxWUjNI3aujA+MfIt+jY/iH6P MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNzc5RC80NjBEMUM1QUUy QUUxMUVFODZGMzNDMUVDNEY5QUUwMi9OSURGWlNNMGpkcTZNRDR4OGkzNk5qLUlm bzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL05JREZaU00wamRxNk1ENHg4aTM2TmotSWZvOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD Nzc5RC80NjBEMUM1QUUyQUUxMUVFODZGMzNDMUVDNEY5QUUwMi9OSURGWlNNMGpk cTZNRDR4OGkzNk5qLUlmbzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBNwI9vo1WsSB1ELNnzmOBB4ymruUHyqC33HnsTNqQJ4BqBg4W8D8lJ bsGS4yZ/EKi92H8go7yCSdIBhFFeTbcHwL4un1/ZnFTakMTumTxMgralDSwH8oqQ kWDHjGP/RztCv1awUoJ5K5iGpmIApWRMWp1v4k/TKBQGThH8bu+NDSy/yJSNK5Fj TaYowwJvHLMx4Dfg80Qu3/9CkrZhEkgLjs9/d+oweLoHG3m9skUZZOKR2v8heISN xW0iGSMLc2DIMpwQP3okmz/uS5lnTxu8kIRQoKThEHgOK4rCpikxI/+K1VO0rrJa zzEgQNPINKXSEKuerONUH0CFoLZR5SjT -----END CERTIFICATE-----Generated at Thu Jun 19 21:32:17 2025 by rpki-client