$ rpki-client -vvf rpki.apnic.net/member_repository/A911ED2C/00373C6C9BBC11EE851ADD50C4F9AE02/nTQUKDsie49RLzBfKs20PN6eTRI.mft File: nTQUKDsie49RLzBfKs20PN6eTRI.mft (raw, json) Hash identifier: XrIM7D93n2IQThbDRKPAuvazFzckbeHFbLD+Kkn18Gk= Subject key identifier: 75:31:BB:13:05:CC:37:29:17:33:32:39:9A:3F:78:73:A5:B5:25:B9 Authority key identifier: 9D:34:14:28:3B:22:7B:8F:51:2F:30:5F:2A:CD:B4:3C:DE:9E:4D:12 Certificate issuer: /CN=A911ED2C/serialNumber=9D3414283B227B8F512F305F2ACDB43CDE9E4D12 Certificate serial: 016E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nTQUKDsie49RLzBfKs20PN6eTRI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911ED2C/00373C6C9BBC11EE851ADD50C4F9AE02/nTQUKDsie49RLzBfKs20PN6eTRI.mft Manifest number: 014A Signing time: Thu 17 Jul 2025 04:51:54 +0000 Manifest this update: Thu 17 Jul 2025 04:51:53 +0000 Manifest next update: Thu 24 Jul 2025 04:51:53 +0000 Files and hashes: 1: nTQUKDsie49RLzBfKs20PN6eTRI.crl (hash: owFMorGTPllxW0UDrbl/A/5muULa2HSO+OWE330hTac=) 2: CA364B681A1711F0A1D93523C4F9AE02.roa (hash: H7vVzWCwUc4gHrSDyxvt/Abb/5bSd+LGYG3bv6YBZ6Q=) 3: C75B642268F211EFB7A6A06EC4F9AE02.roa (hash: kOYdujebZuJtzPQYq/KrU4LAvGLUwAviwH7iInIzQIw=) 4: 908E69B20D4311F0B83AB36BC4F9AE02.roa (hash: T3LJotaESWHFF09iX5g1WTlmIxWJcjLGAaC0q00LC9A=) 5: 551036FCF1CA11EFA1495230C4F9AE02.roa (hash: arzezzJwAi/t7BgHje9UcAsQE7JCDVVYoepFJmOQbF8=) 6: EDAA86E4AD6D11EE83DA6253C4F9AE02.roa (hash: lAFnFIzcRDVgDsSYcjZRPgQLtWezbOK+1/I57oP5hYQ=) 7: 3C880EBABEEF11EF9178186BC4F9AE02.roa (hash: iJAvuEQuZJZzuKlMozj/voZPn9Nd6pZK++lpcpudEMw=) 8: EC985F92AD6D11EE83DA6253C4F9AE02.roa (hash: w8uUD+FE/qLP77HxuP2e7CVi5lI4nhNhSCuDldSdTWM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911ED2C/00373C6C9BBC11EE851ADD50C4F9AE02/nTQUKDsie49RLzBfKs20PN6eTRI.crl rsync://rpki.apnic.net/member_repository/A911ED2C/00373C6C9BBC11EE851ADD50C4F9AE02/nTQUKDsie49RLzBfKs20PN6eTRI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nTQUKDsie49RLzBfKs20PN6eTRI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Jul 2025 04:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 366 (0x16e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911ED2C, serialNumber=9D3414283B227B8F512F305F2ACDB43CDE9E4D12 Validity Not Before: Jul 17 04:51:53 2025 GMT Not After : Jul 24 04:51:53 2025 GMT Subject: CN=68788169-4c88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:79:c1:c4:3d:7b:ad:92:ea:bd:78:b1:94:90: 2a:13:5e:74:a7:1e:0f:ec:0d:1c:9c:4e:d1:96:02: fd:b6:4f:d8:57:ef:92:75:b9:f4:4e:c6:08:e3:1d: b6:ef:d6:2e:fd:ee:99:7c:44:4c:0e:fe:bd:c4:d4: f0:6d:a7:35:d7:56:d8:8a:d7:09:17:50:7b:a0:b2: 9f:b5:fe:64:81:84:7a:01:cf:09:28:e2:b1:77:dd: a1:e7:f0:5d:47:14:9e:dd:34:f9:81:d4:ab:21:1b: 2a:3d:b9:a5:60:82:1b:fa:09:9a:c5:70:c4:9e:4d: 38:43:ba:52:81:b9:b7:04:06:b5:9b:28:dc:8b:6e: bd:73:d6:0f:08:2e:42:86:4d:92:a9:c1:61:e6:e5: b2:a0:75:71:02:fe:b9:da:d3:06:98:69:47:6f:3f: ca:46:f9:f8:71:64:0d:ab:ee:22:e8:79:d1:c2:d3: cb:ad:55:da:ca:84:b2:1e:da:8b:25:ca:89:68:44: 90:af:6d:bc:4c:40:52:0b:81:5e:eb:89:91:3f:1e: b9:69:44:c2:4f:7a:7b:dc:dd:bd:da:50:16:48:f7: 89:a8:66:77:e1:00:a1:38:4f:65:8e:22:4d:4c:4b: 6c:f1:67:ca:46:eb:ee:36:68:9a:b6:ff:a0:d0:d1: c0:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:31:BB:13:05:CC:37:29:17:33:32:39:9A:3F:78:73:A5:B5:25:B9 X509v3 Authority Key Identifier: keyid:9D:34:14:28:3B:22:7B:8F:51:2F:30:5F:2A:CD:B4:3C:DE:9E:4D:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911ED2C/00373C6C9BBC11EE851ADD50C4F9AE02/nTQUKDsie49RLzBfKs20PN6eTRI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nTQUKDsie49RLzBfKs20PN6eTRI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911ED2C/00373C6C9BBC11EE851ADD50C4F9AE02/nTQUKDsie49RLzBfKs20PN6eTRI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a2:eb:24:9f:fd:f7:0c:ff:1b:a8:68:a2:4e:c0:62:fc:e6:d1: 00:6d:eb:c2:02:a3:8a:b6:58:d5:11:a0:1a:b2:7c:94:e5:75: f2:c2:af:16:df:86:26:ea:8b:1d:ae:e8:e4:e3:f5:1d:ce:a2: a0:78:b4:27:66:d1:44:34:d0:d2:a5:44:2c:64:e4:78:cc:74: 2b:98:9e:6a:0f:41:0c:60:65:b0:04:d7:5e:33:7d:45:81:fb: 9c:0e:ae:71:59:e8:e6:33:31:aa:06:d2:df:b9:2b:31:d7:13: 91:08:38:df:8f:3f:ad:ff:93:5e:e0:73:4e:f3:6f:93:93:fe: a5:73:d0:20:8b:ee:e1:5e:9c:a2:db:1a:80:1c:4c:ca:2d:80: b2:dd:43:2d:d5:19:43:f1:97:3b:71:ac:0f:ab:cd:bc:86:6e: 19:01:94:55:40:d6:8b:07:4e:48:f6:d0:47:b5:07:b4:8e:11: 5c:4b:00:48:2d:2b:11:c6:9d:f3:b0:a9:3d:8c:16:31:a5:d5: 64:51:ac:b9:70:39:15:9a:e3:68:47:05:e0:57:d5:a6:62:26: 08:da:38:01:76:54:b2:6c:ff:52:a9:5d:57:79:bb:06:68:f2: 1a:48:ee:b5:1d:6c:b1:59:9e:26:7f:0a:ba:d5:12:b5:03:29: 9b:b8:0d:7b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAW4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUVEMkMxMTAvBgNVBAUTKDlEMzQxNDI4M0IyMjdCOEY1MTJGMzA1RjJBQ0RCNDND REU5RTREMTIwHhcNMjUwNzE3MDQ1MTUzWhcNMjUwNzI0MDQ1MTUzWjAYMRYwFAYD VQQDEw02ODc4ODE2OS00Yzg4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvnnBxD17rZLqvXixlJAqE150px4P7A0cnE7RlgL9tk/YV++Sdbn0TsYI4x22 79Yu/e6ZfERMDv69xNTwbac111bYitcJF1B7oLKftf5kgYR6Ac8JKOKxd92h5/Bd RxSe3TT5gdSrIRsqPbmlYIIb+gmaxXDEnk04Q7pSgbm3BAa1myjci269c9YPCC5C hk2SqcFh5uWyoHVxAv652tMGmGlHbz/KRvn4cWQNq+4i6HnRwtPLrVXayoSyHtqL JcqJaESQr228TEBSC4Fe64mRPx65aUTCT3p73N292lAWSPeJqGZ34QChOE9ljiJN TEts8WfKRuvuNmiatv+g0NHANQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHUxuxMF zDcpFzMyOZo/eHOltSW5MB8GA1UdIwQYMBaAFJ00FCg7InuPUS8wXyrNtDzenk0S MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRUQyQy8wMDM3M0M2QzlC QkMxMUVFODUxQURENTBDNEY5QUUwMi9uVFFVS0RzaWU0OVJMekJmS3MyMFBONmVU UkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25UUVVLRHNpZTQ5Ukx6QmZLczIwUE42ZVRSSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RUQyQy8wMDM3M0M2QzlCQkMxMUVFODUxQURENTBDNEY5QUUwMi9uVFFVS0RzaWU0 OVJMekJmS3MyMFBONmVUUkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCi6ySf/fcM/xuoaKJOwGL85tEAbevCAqOKtljVEaAasnyU5XXywq8W 34Ym6osdrujk4/UdzqKgeLQnZtFENNDSpUQsZOR4zHQrmJ5qD0EMYGWwBNdeM31F gfucDq5xWejmMzGqBtLfuSsx1xORCDjfjz+t/5Ne4HNO82+Tk/6lc9Agi+7hXpyi 2xqAHEzKLYCy3UMt1RlD8Zc7cawPq828hm4ZAZRVQNaLB05I9tBHtQe0jhFcSwBI LSsRxp3zsKk9jBYxpdVkUay5cDkVmuNoRwXgV9WmYiYI2jgBdlSybP9SqV1XebsG aPIaSO61HWyxWZ4mfwq61RK1AymbuA17 -----END CERTIFICATE-----Generated at Thu Jul 17 13:29:14 2025 by rpki-client