$ rpki-client -vvf rpki.apnic.net/member_repository/A911894F/963CF0CEEC5E11E48E7D0119C4F9AE02/NhKQaSiZCCzeI_UEU6QVXgqreXg.mft File: NhKQaSiZCCzeI_UEU6QVXgqreXg.mft (raw, json) Hash identifier: 41FUGidc5K/q64vw2TnwVvfEOsH/Vv+jTC78mIGemEw= Subject key identifier: 81:1C:04:A3:0E:22:13:32:6E:B3:3F:43:32:07:F2:6F:FC:38:8D:2F Authority key identifier: 36:12:90:69:28:99:08:2C:DE:23:F5:04:53:A4:15:5E:0A:AB:79:78 Certificate issuer: /CN=A911894F/serialNumber=361290692899082CDE23F50453A4155E0AAB7978 Certificate serial: 2661 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NhKQaSiZCCzeI_UEU6QVXgqreXg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911894F/963CF0CEEC5E11E48E7D0119C4F9AE02/NhKQaSiZCCzeI_UEU6QVXgqreXg.mft Manifest number: 264F Signing time: Sun 08 Jun 2025 15:38:22 +0000 Manifest this update: Sun 08 Jun 2025 15:38:22 +0000 Manifest next update: Sun 15 Jun 2025 15:38:22 +0000 Files and hashes: 1: NhKQaSiZCCzeI_UEU6QVXgqreXg.crl (hash: nIitd/Zo4cL+VkZzD8ILHoypnlpz11Vhpjmoif2pf9A=) 2: 802FBE707FEB11EB8B5E2817C4F9AE02.roa (hash: 9/RiaD7uB0sOA1UktuQmdvYmR8W/ohMuly3N0jCGO/k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911894F/963CF0CEEC5E11E48E7D0119C4F9AE02/NhKQaSiZCCzeI_UEU6QVXgqreXg.crl rsync://rpki.apnic.net/member_repository/A911894F/963CF0CEEC5E11E48E7D0119C4F9AE02/NhKQaSiZCCzeI_UEU6QVXgqreXg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NhKQaSiZCCzeI_UEU6QVXgqreXg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 15 Jun 2025 15:38:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9825 (0x2661) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911894F, serialNumber=361290692899082CDE23F50453A4155E0AAB7978 Validity Not Before: Jun 8 15:38:22 2025 GMT Not After : Jun 15 15:38:22 2025 GMT Subject: CN=6845ae6e-2750 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:19:cf:42:43:99:71:3f:0c:76:4d:27:6d:04: a1:21:7b:4d:34:0f:b8:72:73:cd:87:73:ce:28:b8: 79:54:9f:40:25:f8:59:a5:e5:bf:60:65:1a:0d:a0: 83:87:cd:c7:d8:b2:8f:dc:df:2c:99:50:d4:18:df: c4:ad:9f:69:d9:5a:08:b5:48:ce:8b:a4:db:0e:65: 78:b3:a3:64:06:ca:16:e9:1b:e4:ab:e0:f5:28:c0: df:aa:6b:ec:19:6f:02:58:af:37:48:13:c9:e3:75: 7c:e6:6a:84:87:37:8b:2c:69:59:9b:e6:6d:ed:ad: 8c:81:e1:71:d0:66:12:e4:07:3c:51:86:c2:b0:b8: b1:6b:44:01:f9:4b:5e:cc:b8:e2:c6:7e:f3:1b:76: 4b:84:01:57:20:22:f0:aa:fb:5f:34:0e:db:90:15: db:c6:fe:93:f5:3c:b6:d8:ee:77:ab:3a:ed:da:57: 89:0c:8c:bc:e0:82:17:ef:a4:bd:c0:ba:79:2b:c2: e2:b1:af:ed:9f:25:72:26:4a:50:a9:14:0b:21:55: 3e:4d:0e:da:33:ed:c5:9a:08:8d:61:49:2c:20:91: 80:d9:38:83:50:d8:1d:6f:74:b0:e8:cf:37:09:84: 68:6a:1c:8d:77:76:9b:71:d7:3f:86:dc:ae:e9:5e: bf:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:1C:04:A3:0E:22:13:32:6E:B3:3F:43:32:07:F2:6F:FC:38:8D:2F X509v3 Authority Key Identifier: keyid:36:12:90:69:28:99:08:2C:DE:23:F5:04:53:A4:15:5E:0A:AB:79:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911894F/963CF0CEEC5E11E48E7D0119C4F9AE02/NhKQaSiZCCzeI_UEU6QVXgqreXg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NhKQaSiZCCzeI_UEU6QVXgqreXg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911894F/963CF0CEEC5E11E48E7D0119C4F9AE02/NhKQaSiZCCzeI_UEU6QVXgqreXg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 93:cb:47:23:9c:61:e3:ba:9c:53:68:e9:e5:31:dc:51:1d:08: 2b:da:e8:1c:08:c3:14:df:6c:6d:bb:ca:ef:02:0b:ea:b5:94: 61:37:9f:77:db:e1:8e:4e:63:df:96:7b:fc:f2:07:58:32:e8: 6d:8e:fd:65:bb:63:31:e2:be:64:1d:a2:5e:05:6e:2b:7b:f3: 8a:be:08:da:53:2f:de:ad:f9:89:9c:6b:1e:b8:8b:e4:4b:66: 7b:dc:25:3f:94:61:b6:49:d1:d1:c7:1d:56:00:86:1a:7d:96: 5c:d1:9f:b0:50:4b:65:a1:9f:42:19:db:1f:a0:4d:eb:ed:50: 70:3a:b9:b5:98:88:2c:3e:a4:10:4d:3c:4c:1f:43:4b:bd:f3: 0d:7c:f3:21:e2:36:c1:f3:7e:17:f4:78:2d:9a:5d:81:8a:2b: 6c:df:cb:4f:34:c1:51:de:0c:da:6f:84:5d:f3:b8:c2:f2:b5: 04:4c:23:eb:73:b1:78:0d:d4:fe:69:b5:33:8f:07:6f:9d:1c: f6:fa:64:65:93:45:74:84:38:7f:16:64:c5:8a:d3:e2:1b:49: a6:59:93:fb:50:18:e6:5d:e3:a6:65:1f:87:f3:4d:a7:7d:d8: 2e:44:31:ba:83:19:21:76:ee:be:c3:8e:d3:32:7f:56:f6:ce: 5a:8d:f3:61 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJmEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTg5NEYxMTAvBgNVBAUTKDM2MTI5MDY5Mjg5OTA4MkNERTIzRjUwNDUzQTQxNTVF MEFBQjc5NzgwHhcNMjUwNjA4MTUzODIyWhcNMjUwNjE1MTUzODIyWjAYMRYwFAYD VQQDEw02ODQ1YWU2ZS0yNzUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvxnPQkOZcT8Mdk0nbQShIXtNNA+4cnPNh3POKLh5VJ9AJfhZpeW/YGUaDaCD h83H2LKP3N8smVDUGN/ErZ9p2VoItUjOi6TbDmV4s6NkBsoW6Rvkq+D1KMDfqmvs GW8CWK83SBPJ43V85mqEhzeLLGlZm+Zt7a2MgeFx0GYS5Ac8UYbCsLixa0QB+Ute zLjixn7zG3ZLhAFXICLwqvtfNA7bkBXbxv6T9Ty22O53qzrt2leJDIy84IIX76S9 wLp5K8Lisa/tnyVyJkpQqRQLIVU+TQ7aM+3FmgiNYUksIJGA2TiDUNgdb3Sw6M83 CYRoahyNd3abcdc/htyu6V6/awIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIEcBKMO IhMybrM/QzIH8m/8OI0vMB8GA1UdIwQYMBaAFDYSkGkomQgs3iP1BFOkFV4Kq3l4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExODk0Ri85NjNDRjBDRUVD NUUxMUU0OEU3RDAxMTlDNEY5QUUwMi9OaEtRYVNpWkNDemVJX1VFVTZRVlhncXJl WGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05oS1FhU2laQ0N6ZUlfVUVVNlFWWGdxcmVYZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx ODk0Ri85NjNDRjBDRUVDNUUxMUU0OEU3RDAxMTlDNEY5QUUwMi9OaEtRYVNpWkND emVJX1VFVTZRVlhncXJlWGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCTy0cjnGHjupxTaOnlMdxRHQgr2ugcCMMU32xtu8rvAgvqtZRhN593 2+GOTmPflnv88gdYMuhtjv1lu2Mx4r5kHaJeBW4re/OKvgjaUy/erfmJnGseuIvk S2Z73CU/lGG2SdHRxx1WAIYafZZc0Z+wUEtloZ9CGdsfoE3r7VBwOrm1mIgsPqQQ TTxMH0NLvfMNfPMh4jbB834X9Hgtml2Biits38tPNMFR3gzab4Rd87jC8rUETCPr c7F4DdT+abUzjwdvnRz2+mRlk0V0hDh/FmTFitPiG0mmWZP7UBjmXeOmZR+H802n fdguRDG6gxkhdu6+w47TMn9W9s5ajfNh -----END CERTIFICATE-----Generated at Mon Jun 9 04:57:59 2025 by rpki-client