$ rpki-client -vvf rpki.apnic.net/member_repository/A911ED2C/00373C6C9BBC11EE851ADD50C4F9AE02/nTQUKDsie49RLzBfKs20PN6eTRI.mft File: nTQUKDsie49RLzBfKs20PN6eTRI.mft (raw, json) Hash identifier: xGLmJM6TzeXCoKmHuKAHMgEAfHjd5IIudH8FYv7Qio4= Subject key identifier: 99:52:BF:83:C1:B8:29:51:75:54:86:DC:7D:4C:98:8D:60:9B:02:8A Authority key identifier: 9D:34:14:28:3B:22:7B:8F:51:2F:30:5F:2A:CD:B4:3C:DE:9E:4D:12 Certificate issuer: /CN=A911ED2C/serialNumber=9D3414283B227B8F512F305F2ACDB43CDE9E4D12 Certificate serial: 0156 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nTQUKDsie49RLzBfKs20PN6eTRI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911ED2C/00373C6C9BBC11EE851ADD50C4F9AE02/nTQUKDsie49RLzBfKs20PN6eTRI.mft Manifest number: 0132 Signing time: Sat 31 May 2025 04:33:46 +0000 Manifest this update: Sat 31 May 2025 04:33:45 +0000 Manifest next update: Sat 07 Jun 2025 04:33:45 +0000 Files and hashes: 1: nTQUKDsie49RLzBfKs20PN6eTRI.crl (hash: 6km/NYu/vCETtZANOt3Xh7qie2czVsD4u8Odwr12Uf8=) 2: CA364B681A1711F0A1D93523C4F9AE02.roa (hash: H7vVzWCwUc4gHrSDyxvt/Abb/5bSd+LGYG3bv6YBZ6Q=) 3: C75B642268F211EFB7A6A06EC4F9AE02.roa (hash: kOYdujebZuJtzPQYq/KrU4LAvGLUwAviwH7iInIzQIw=) 4: 908E69B20D4311F0B83AB36BC4F9AE02.roa (hash: T3LJotaESWHFF09iX5g1WTlmIxWJcjLGAaC0q00LC9A=) 5: 551036FCF1CA11EFA1495230C4F9AE02.roa (hash: arzezzJwAi/t7BgHje9UcAsQE7JCDVVYoepFJmOQbF8=) 6: EDAA86E4AD6D11EE83DA6253C4F9AE02.roa (hash: lAFnFIzcRDVgDsSYcjZRPgQLtWezbOK+1/I57oP5hYQ=) 7: 3C880EBABEEF11EF9178186BC4F9AE02.roa (hash: iJAvuEQuZJZzuKlMozj/voZPn9Nd6pZK++lpcpudEMw=) 8: EC985F92AD6D11EE83DA6253C4F9AE02.roa (hash: w8uUD+FE/qLP77HxuP2e7CVi5lI4nhNhSCuDldSdTWM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911ED2C/00373C6C9BBC11EE851ADD50C4F9AE02/nTQUKDsie49RLzBfKs20PN6eTRI.crl rsync://rpki.apnic.net/member_repository/A911ED2C/00373C6C9BBC11EE851ADD50C4F9AE02/nTQUKDsie49RLzBfKs20PN6eTRI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nTQUKDsie49RLzBfKs20PN6eTRI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 04:33:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 342 (0x156) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911ED2C, serialNumber=9D3414283B227B8F512F305F2ACDB43CDE9E4D12 Validity Not Before: May 31 04:33:45 2025 GMT Not After : Jun 7 04:33:45 2025 GMT Subject: CN=683a86aa-7284 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:cf:79:2e:20:a9:44:bb:ee:9e:f7:18:18:da: 4d:b3:cd:68:60:28:71:45:55:64:05:ce:62:cd:20: 78:c6:50:11:7e:e7:67:43:5a:55:be:9b:c8:40:85: bf:fa:24:33:0f:85:05:d3:df:f0:f3:60:21:78:2f: 6a:d6:46:f2:87:38:20:0b:fe:c8:98:11:93:91:a3: c2:b4:51:54:68:be:e1:96:ed:9e:7b:03:b7:1b:46: 3c:1c:32:8c:e1:3f:a0:0e:b4:9f:24:d8:62:e9:96: 69:08:c4:8a:6f:a2:d8:fd:9c:27:f8:69:69:93:f8: b6:22:8d:21:cc:c6:eb:f8:f4:f0:71:e7:4b:4c:c2: 1b:6e:c6:f6:3b:11:4e:ea:21:db:d6:0c:d2:3a:94: cf:8f:70:eb:c0:b7:0a:0b:98:09:91:88:2e:d3:fe: ce:f6:c9:e1:6c:0c:60:9d:0d:10:45:cb:38:32:ff: fa:51:07:71:27:7a:88:e5:81:72:04:d8:69:4c:5e: 1a:47:51:9c:22:e2:a6:59:24:ef:17:43:74:b4:fc: 83:75:28:36:00:34:5d:e3:6b:ee:e2:fc:4e:dd:d9: 55:fc:63:7b:76:44:3c:de:41:a0:51:26:e7:60:51: d0:92:c3:fc:70:2c:dc:ca:87:3c:f7:d9:f7:59:09: 4f:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:52:BF:83:C1:B8:29:51:75:54:86:DC:7D:4C:98:8D:60:9B:02:8A X509v3 Authority Key Identifier: keyid:9D:34:14:28:3B:22:7B:8F:51:2F:30:5F:2A:CD:B4:3C:DE:9E:4D:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911ED2C/00373C6C9BBC11EE851ADD50C4F9AE02/nTQUKDsie49RLzBfKs20PN6eTRI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nTQUKDsie49RLzBfKs20PN6eTRI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911ED2C/00373C6C9BBC11EE851ADD50C4F9AE02/nTQUKDsie49RLzBfKs20PN6eTRI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a6:02:24:30:1e:38:4d:75:59:4b:28:af:67:54:ec:a9:7d:fc: 6d:88:8a:d4:28:8e:2c:06:9b:d4:5b:97:18:94:51:24:d2:68: 49:e4:69:a9:bf:39:38:51:bb:0a:aa:60:9f:27:c8:98:f4:65: 74:2a:1a:b7:4e:3a:80:e1:41:be:67:72:e1:81:4c:ef:ce:23: 74:7f:69:29:23:c5:f1:ba:f4:a3:d7:c6:53:75:87:bd:85:65: 40:b0:a8:78:cb:24:9d:cb:b5:ef:8b:4a:9f:d0:86:37:7f:64: fd:29:a5:be:29:76:d8:40:af:57:9e:e9:be:00:0e:08:03:b8: c5:4e:9b:cb:33:9c:f7:ac:8a:a1:94:4e:03:61:e3:38:d1:67: 6e:6b:ba:c9:87:89:4e:5f:96:ee:f6:13:55:fe:b1:66:4e:59: b0:5c:3f:44:5e:59:c2:84:de:31:1c:43:60:7e:53:09:86:81: 3c:21:05:e0:c2:d9:ac:00:44:07:76:d6:fb:df:bc:a7:62:ad: 62:f5:02:d0:82:8a:c3:6d:e5:99:21:e7:95:11:a9:cd:84:5a: 7a:f5:53:55:59:2d:2e:82:4a:1c:2e:a4:a8:c9:8e:0a:bf:2c: 68:f7:7a:f9:fe:5d:7c:8d:9f:a0:98:2b:c3:bc:e9:08:d9:27: 29:e8:b1:5a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAVYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUVEMkMxMTAvBgNVBAUTKDlEMzQxNDI4M0IyMjdCOEY1MTJGMzA1RjJBQ0RCNDND REU5RTREMTIwHhcNMjUwNTMxMDQzMzQ1WhcNMjUwNjA3MDQzMzQ1WjAYMRYwFAYD VQQDEw02ODNhODZhYS03Mjg0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoc95LiCpRLvunvcYGNpNs81oYChxRVVkBc5izSB4xlARfudnQ1pVvpvIQIW/ +iQzD4UF09/w82AheC9q1kbyhzggC/7ImBGTkaPCtFFUaL7hlu2eewO3G0Y8HDKM 4T+gDrSfJNhi6ZZpCMSKb6LY/Zwn+Glpk/i2Io0hzMbr+PTwcedLTMIbbsb2OxFO 6iHb1gzSOpTPj3DrwLcKC5gJkYgu0/7O9snhbAxgnQ0QRcs4Mv/6UQdxJ3qI5YFy BNhpTF4aR1GcIuKmWSTvF0N0tPyDdSg2ADRd42vu4vxO3dlV/GN7dkQ83kGgUSbn YFHQksP8cCzcyoc899n3WQlPnwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJlSv4PB uClRdVSG3H1MmI1gmwKKMB8GA1UdIwQYMBaAFJ00FCg7InuPUS8wXyrNtDzenk0S MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRUQyQy8wMDM3M0M2QzlC QkMxMUVFODUxQURENTBDNEY5QUUwMi9uVFFVS0RzaWU0OVJMekJmS3MyMFBONmVU UkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25UUVVLRHNpZTQ5Ukx6QmZLczIwUE42ZVRSSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RUQyQy8wMDM3M0M2QzlCQkMxMUVFODUxQURENTBDNEY5QUUwMi9uVFFVS0RzaWU0 OVJMekJmS3MyMFBONmVUUkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCmAiQwHjhNdVlLKK9nVOypffxtiIrUKI4sBpvUW5cYlFEk0mhJ5Gmp vzk4UbsKqmCfJ8iY9GV0Khq3TjqA4UG+Z3LhgUzvziN0f2kpI8XxuvSj18ZTdYe9 hWVAsKh4yySdy7Xvi0qf0IY3f2T9KaW+KXbYQK9Xnum+AA4IA7jFTpvLM5z3rIqh lE4DYeM40Wdua7rJh4lOX5bu9hNV/rFmTlmwXD9EXlnChN4xHENgflMJhoE8IQXg wtmsAEQHdtb737ynYq1i9QLQgorDbeWZIeeVEanNhFp69VNVWS0ugkocLqSoyY4K vyxo93r5/l18jZ+gmCvDvOkI2Scp6LFa -----END CERTIFICATE-----Generated at Sat May 31 16:44:47 2025 by rpki-client