$ rpki-client -vvf rpki.apnic.net/member_repository/A9118A69/C62011D60CE811EF9EFDA31BC4F9AE02/NQcxtmBE00o9LadYm9gzHRRf5Jg.mft File: NQcxtmBE00o9LadYm9gzHRRf5Jg.mft (raw, json) Hash identifier: jnhJzCSZIf+dhmM1HhczCquvS7CSikExD6utGccW+14= Subject key identifier: 8D:12:5D:44:10:6C:31:07:37:F9:47:A6:38:92:CB:26:F0:33:88:D6 Authority key identifier: 35:07:31:B6:60:44:D3:4A:3D:2D:A7:58:9B:D8:33:1D:14:5F:E4:98 Certificate issuer: /CN=A9118A69/serialNumber=350731B66044D34A3D2DA7589BD8331D145FE498 Certificate serial: C8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NQcxtmBE00o9LadYm9gzHRRf5Jg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9118A69/C62011D60CE811EF9EFDA31BC4F9AE02/NQcxtmBE00o9LadYm9gzHRRf5Jg.mft Manifest number: C6 Signing time: Sat 31 May 2025 05:21:19 +0000 Manifest this update: Sat 31 May 2025 05:21:19 +0000 Manifest next update: Sat 07 Jun 2025 05:21:19 +0000 Files and hashes: 1: NQcxtmBE00o9LadYm9gzHRRf5Jg.crl (hash: N44OD/zWNJFjXcHYp+OubJs0RzgFay3ReI+rhfjv3Fk=) 2: 7036FFF00E9611EF8B4CB827C4F9AE02.roa (hash: Bv5PsAPlsXup053SqORErIKD7VS3IvYR+Xy+2uhjxJk=) 3: 6FC4A52C0E9611EF8B4CB827C4F9AE02.roa (hash: nHcMgveoHAwIifxJIS7PevVsDeef3KJmiIvXrtXar+Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9118A69/C62011D60CE811EF9EFDA31BC4F9AE02/NQcxtmBE00o9LadYm9gzHRRf5Jg.crl rsync://rpki.apnic.net/member_repository/A9118A69/C62011D60CE811EF9EFDA31BC4F9AE02/NQcxtmBE00o9LadYm9gzHRRf5Jg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NQcxtmBE00o9LadYm9gzHRRf5Jg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 05:21:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 200 (0xc8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9118A69, serialNumber=350731B66044D34A3D2DA7589BD8331D145FE498 Validity Not Before: May 31 05:21:19 2025 GMT Not After : Jun 7 05:21:19 2025 GMT Subject: CN=683a91cf-91a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:07:50:6e:86:08:8b:80:77:8b:c5:99:d1:35: ed:1a:0f:f6:b3:c5:4b:0d:c7:1f:a8:b1:a4:78:45: 25:91:a7:11:0f:01:74:2f:f0:3f:a9:d2:d5:e1:31: 61:82:5a:f6:56:89:c4:b7:71:2b:fb:61:6d:34:59: 63:db:b4:46:0f:ae:9d:ca:3b:93:e9:79:d9:85:eb: 46:ab:b2:da:d2:92:66:ec:38:57:3c:ed:57:d1:56: 1e:bd:b1:d4:68:57:92:61:e1:12:4d:64:da:21:f7: 5a:4d:ce:cc:90:29:21:54:be:73:35:43:20:b6:ea: 74:16:a5:cb:87:6f:78:a7:e6:06:19:ba:5f:78:94: 02:4a:f9:95:5f:b6:ac:c4:6b:58:bd:8e:bd:56:54: c4:83:a3:6e:5f:5b:aa:e0:85:22:1c:3d:f5:b2:92: 2f:f9:78:dd:90:00:7b:f3:f8:a2:87:77:06:15:f4: dc:6e:ff:4e:63:51:cc:45:0d:c3:85:f3:0d:95:6c: e4:d8:fe:57:56:33:29:aa:e7:b3:7f:ee:e5:70:dd: 9a:86:5f:f7:e2:05:8a:f3:68:36:a3:43:1c:c4:46: 4f:71:f2:33:6f:d9:ed:88:f4:66:9c:12:aa:fb:ff: 07:8f:d2:c9:6f:67:d3:7b:e1:94:99:47:fe:75:cb: f2:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:12:5D:44:10:6C:31:07:37:F9:47:A6:38:92:CB:26:F0:33:88:D6 X509v3 Authority Key Identifier: keyid:35:07:31:B6:60:44:D3:4A:3D:2D:A7:58:9B:D8:33:1D:14:5F:E4:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9118A69/C62011D60CE811EF9EFDA31BC4F9AE02/NQcxtmBE00o9LadYm9gzHRRf5Jg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NQcxtmBE00o9LadYm9gzHRRf5Jg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9118A69/C62011D60CE811EF9EFDA31BC4F9AE02/NQcxtmBE00o9LadYm9gzHRRf5Jg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a4:01:bd:f4:0c:f3:58:61:d8:db:37:39:39:e2:ed:d2:45:36: 36:c5:86:3d:3c:59:22:87:25:c3:7d:29:d1:14:32:3d:55:5a: 70:03:18:b9:dc:dd:b1:54:3d:57:f3:d5:5c:27:26:cf:80:e3: 1a:b3:5c:ea:18:b9:54:39:c9:29:f0:6c:fc:aa:9e:32:02:67: 8a:74:42:03:cd:6a:c6:19:7c:b4:60:c0:54:74:00:dd:b5:a9: 8e:1d:5c:6c:65:d8:ab:eb:c1:69:32:1a:3a:23:60:04:a9:68: 7b:a0:c7:67:d1:7b:24:41:d7:fb:7f:3c:43:78:ff:dd:b7:0c: 3e:ef:40:a7:a4:17:c9:f0:01:b9:c5:fb:95:c2:10:ee:35:ff: b4:8e:73:60:4c:68:ce:7a:36:3a:a7:91:67:f6:a3:84:b8:ab: cd:1f:93:c6:8b:57:b6:5b:ae:ca:57:59:4f:f4:8f:6a:ae:4c: fb:74:16:22:35:16:e7:80:4d:fe:36:a5:29:04:3f:0f:a8:50: 3f:03:94:b3:2c:ea:a7:56:3c:db:7c:f3:34:a8:ea:9e:69:6a: 09:17:d7:eb:0b:de:6b:ee:59:7e:64:4e:ed:63:62:33:e2:88: b3:57:e4:0d:7a:b4:91:f6:8d:6c:1b:2e:e8:2f:19:b2:b3:35: 9f:bb:77:91 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MThBNjkxMTAvBgNVBAUTKDM1MDczMUI2NjA0NEQzNEEzRDJEQTc1ODlCRDgzMzFE MTQ1RkU0OTgwHhcNMjUwNTMxMDUyMTE5WhcNMjUwNjA3MDUyMTE5WjAYMRYwFAYD VQQDEw02ODNhOTFjZi05MWE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvQdQboYIi4B3i8WZ0TXtGg/2s8VLDccfqLGkeEUlkacRDwF0L/A/qdLV4TFh glr2VonEt3Er+2FtNFlj27RGD66dyjuT6XnZhetGq7La0pJm7DhXPO1X0VYevbHU aFeSYeESTWTaIfdaTc7MkCkhVL5zNUMgtup0FqXLh294p+YGGbpfeJQCSvmVX7as xGtYvY69VlTEg6NuX1uq4IUiHD31spIv+XjdkAB78/iih3cGFfTcbv9OY1HMRQ3D hfMNlWzk2P5XVjMpquezf+7lcN2ahl/34gWK82g2o0McxEZPcfIzb9ntiPRmnBKq +/8Hj9LJb2fTe+GUmUf+dcvy/QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI0SXUQQ bDEHN/lHpjiSyybwM4jWMB8GA1UdIwQYMBaAFDUHMbZgRNNKPS2nWJvYMx0UX+SY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOEE2OS9DNjIwMTFENjBD RTgxMUVGOUVGREEzMUJDNEY5QUUwMi9OUWN4dG1CRTAwbzlMYWRZbTlnekhSUmY1 SmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05RY3h0bUJFMDBvOUxhZFltOWd6SFJSZjVKZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx OEE2OS9DNjIwMTFENjBDRTgxMUVGOUVGREEzMUJDNEY5QUUwMi9OUWN4dG1CRTAw bzlMYWRZbTlnekhSUmY1SmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCkAb30DPNYYdjbNzk54u3SRTY2xYY9PFkihyXDfSnRFDI9VVpwAxi5 3N2xVD1X89VcJybPgOMas1zqGLlUOckp8Gz8qp4yAmeKdEIDzWrGGXy0YMBUdADd tamOHVxsZdir68FpMho6I2AEqWh7oMdn0XskQdf7fzxDeP/dtww+70CnpBfJ8AG5 xfuVwhDuNf+0jnNgTGjOejY6p5Fn9qOEuKvNH5PGi1e2W67KV1lP9I9qrkz7dBYi NRbngE3+NqUpBD8PqFA/A5SzLOqnVjzbfPM0qOqeaWoJF9frC95r7ll+ZE7tY2Iz 4oizV+QNerSR9o1sGy7oLxmyszWfu3eR -----END CERTIFICATE-----Generated at Sat May 31 17:54:52 2025 by rpki-client