$ rpki-client -vvf rpki.apnic.net/member_repository/A9113E79/11154DDC13E011EC977E4178C4F9AE02/nPMspRGaIvijMFkQ1ANfaLP8IUw.mft File: nPMspRGaIvijMFkQ1ANfaLP8IUw.mft (raw, json) Hash identifier: NUIcAfH4HaQMEopp8WJjVf78+OxY1FrwPP/YF00x7oM= Subject key identifier: 80:D6:5E:C9:81:DE:C5:4C:17:54:FF:35:B0:76:8E:41:0C:53:36:87 Authority key identifier: 9C:F3:2C:A5:11:9A:22:F8:A3:30:59:10:D4:03:5F:68:B3:FC:21:4C Certificate issuer: /CN=A9113E79/serialNumber=9CF32CA5119A22F8A3305910D4035F68B3FC214C Certificate serial: 04F3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nPMspRGaIvijMFkQ1ANfaLP8IUw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9113E79/11154DDC13E011EC977E4178C4F9AE02/nPMspRGaIvijMFkQ1ANfaLP8IUw.mft Manifest number: 04EF Signing time: Fri 30 May 2025 23:54:28 +0000 Manifest this update: Fri 30 May 2025 23:54:28 +0000 Manifest next update: Fri 06 Jun 2025 23:54:28 +0000 Files and hashes: 1: nPMspRGaIvijMFkQ1ANfaLP8IUw.crl (hash: DvwIg3gCQlYoAWhYtmJHHVnng0m3Z/bTogxv5HQW8Z8=) 2: 55D5848813E411EC9BE4C87FC4F9AE02.roa (hash: IhuzHy2i1HilFEQnpW2ccDVOUFu06otCgruwg3LwU+w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9113E79/11154DDC13E011EC977E4178C4F9AE02/nPMspRGaIvijMFkQ1ANfaLP8IUw.crl rsync://rpki.apnic.net/member_repository/A9113E79/11154DDC13E011EC977E4178C4F9AE02/nPMspRGaIvijMFkQ1ANfaLP8IUw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nPMspRGaIvijMFkQ1ANfaLP8IUw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 23:54:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1267 (0x4f3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9113E79, serialNumber=9CF32CA5119A22F8A3305910D4035F68B3FC214C Validity Not Before: May 30 23:54:28 2025 GMT Not After : Jun 6 23:54:28 2025 GMT Subject: CN=683a4534-e532 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:1b:69:bb:da:4b:a3:fe:cd:56:43:a6:d4:77: 0f:21:25:46:eb:56:4b:7e:96:11:a4:94:f7:27:cd: 0b:8f:d4:85:65:44:93:ca:f7:5a:49:46:6d:55:c1: da:0d:1a:7b:5a:6c:f3:61:47:04:8f:77:f7:e8:c8: e8:6f:86:44:f3:a1:60:99:ca:70:03:54:4a:e2:47: 79:d7:b6:f3:37:00:05:fe:79:5a:14:25:2e:23:bb: c2:30:43:18:17:15:74:ed:f3:1e:ef:86:f2:77:e2: df:e2:e6:11:89:d3:13:bf:75:73:bf:fc:81:88:06: c6:9b:00:e5:92:c4:b3:61:82:3a:dc:d5:fb:f5:60: 1f:a9:4a:f8:27:6f:e6:d5:8f:c4:59:23:0c:94:bf: 27:b5:d2:56:cc:7a:ab:55:e3:33:ca:98:0a:f4:7d: 68:8b:38:40:5a:58:a7:5b:19:a0:75:7b:fe:97:c6: 4c:9c:7e:68:57:4d:f4:ae:96:72:44:21:19:35:b9: 56:9e:88:85:6e:18:4b:09:55:c0:70:1c:dd:89:d9: 6c:22:47:59:85:57:54:72:ea:8a:cd:2e:c6:91:d6: 43:ae:df:a9:21:3f:31:fd:a4:9a:c5:4a:19:73:a6: 9a:fa:51:92:83:e5:7e:cf:fd:35:1c:00:c0:e3:1f: 9f:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:D6:5E:C9:81:DE:C5:4C:17:54:FF:35:B0:76:8E:41:0C:53:36:87 X509v3 Authority Key Identifier: keyid:9C:F3:2C:A5:11:9A:22:F8:A3:30:59:10:D4:03:5F:68:B3:FC:21:4C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9113E79/11154DDC13E011EC977E4178C4F9AE02/nPMspRGaIvijMFkQ1ANfaLP8IUw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nPMspRGaIvijMFkQ1ANfaLP8IUw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9113E79/11154DDC13E011EC977E4178C4F9AE02/nPMspRGaIvijMFkQ1ANfaLP8IUw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 76:1e:e8:ff:2e:b1:09:7d:c1:4e:95:22:d9:52:2f:80:14:00: a1:f4:22:1c:0a:36:e0:24:28:b8:43:ce:40:73:b9:d7:0b:dc: 7c:da:00:4f:2a:b1:cf:70:3b:4f:4b:ff:96:e9:bd:f3:ec:f1: c6:e9:f5:c1:ff:24:01:ff:4b:a4:05:e9:85:90:c9:15:2c:e4: 81:ed:25:29:4f:5a:f3:f9:75:01:c4:b2:21:74:69:0c:69:85: 94:e9:9c:8d:25:8c:bf:f1:ae:ef:be:e0:a2:34:9b:9f:ea:fa: 31:61:c5:03:85:a1:b1:70:6c:9b:6e:5d:94:8f:c9:44:57:96: 10:0e:5d:11:4a:35:4f:b3:7f:95:ef:dd:ec:47:19:c1:ae:d6: 79:c9:6a:90:4c:05:e0:b0:6a:7f:c7:0f:8e:61:6a:1e:72:cd: 80:e5:67:34:92:c1:34:cb:d9:21:7b:ef:94:d7:19:d7:54:e8: 21:17:42:45:2f:89:f8:18:99:6d:eb:ac:fa:b9:c0:d0:f0:7a: 9a:9f:f9:31:65:4b:8f:64:c0:72:64:62:0d:55:b1:ee:5f:b5: 57:77:48:36:c0:f9:a3:3c:52:fe:14:d7:20:b7:b9:63:f5:8d: f5:6d:5b:01:36:d9:90:62:0b:01:54:26:bc:8f:0c:8f:7d:65: 8b:8d:7d:b7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBPMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTNFNzkxMTAvBgNVBAUTKDlDRjMyQ0E1MTE5QTIyRjhBMzMwNTkxMEQ0MDM1RjY4 QjNGQzIxNEMwHhcNMjUwNTMwMjM1NDI4WhcNMjUwNjA2MjM1NDI4WjAYMRYwFAYD VQQDEw02ODNhNDUzNC1lNTMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3Rtpu9pLo/7NVkOm1HcPISVG61ZLfpYRpJT3J80Lj9SFZUSTyvdaSUZtVcHa DRp7WmzzYUcEj3f36Mjob4ZE86FgmcpwA1RK4kd517bzNwAF/nlaFCUuI7vCMEMY FxV07fMe74byd+Lf4uYRidMTv3Vzv/yBiAbGmwDlksSzYYI63NX79WAfqUr4J2/m 1Y/EWSMMlL8ntdJWzHqrVeMzypgK9H1oizhAWlinWxmgdXv+l8ZMnH5oV030rpZy RCEZNblWnoiFbhhLCVXAcBzdidlsIkdZhVdUcuqKzS7GkdZDrt+pIT8x/aSaxUoZ c6aa+lGSg+V+z/01HADA4x+f7wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIDWXsmB 3sVMF1T/NbB2jkEMUzaHMB8GA1UdIwQYMBaAFJzzLKURmiL4ozBZENQDX2iz/CFM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExM0U3OS8xMTE1NEREQzEz RTAxMUVDOTc3RTQxNzhDNEY5QUUwMi9uUE1zcFJHYUl2aWpNRmtRMUFOZmFMUDhJ VXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25QTXNwUkdhSXZpak1Ga1ExQU5mYUxQOElVdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx M0U3OS8xMTE1NEREQzEzRTAxMUVDOTc3RTQxNzhDNEY5QUUwMi9uUE1zcFJHYUl2 aWpNRmtRMUFOZmFMUDhJVXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB2Huj/LrEJfcFOlSLZUi+AFACh9CIcCjbgJCi4Q85Ac7nXC9x82gBP KrHPcDtPS/+W6b3z7PHG6fXB/yQB/0ukBemFkMkVLOSB7SUpT1rz+XUBxLIhdGkM aYWU6ZyNJYy/8a7vvuCiNJuf6voxYcUDhaGxcGybbl2Uj8lEV5YQDl0RSjVPs3+V 793sRxnBrtZ5yWqQTAXgsGp/xw+OYWoecs2A5Wc0ksE0y9khe++U1xnXVOghF0JF L4n4GJlt66z6ucDQ8Hqan/kxZUuPZMByZGINVbHuX7VXd0g2wPmjPFL+FNcgt7lj 9Y31bVsBNtmQYgsBVCa8jwyPfWWLjX23 -----END CERTIFICATE-----Generated at Sat May 31 16:44:57 2025 by rpki-client