$ rpki-client -vvf rpki.apnic.net/member_repository/A913647F/C21C7CF686DB11EFBA4D5F26C4F9AE02/Nnh5oLhd2Dc2N4g3k_Ve6zsiHc8.mft File: Nnh5oLhd2Dc2N4g3k_Ve6zsiHc8.mft (raw, json) Hash identifier: fr2ZZqct7Did81UMGxQjoeVJnFovNo6PlYHWBTwL9oM= Subject key identifier: 39:52:98:F3:09:9A:37:D7:07:A6:C7:84:23:10:CF:EC:13:F9:C5:5D Authority key identifier: 36:78:79:A0:B8:5D:D8:37:36:37:88:37:93:F5:5E:EB:3B:22:1D:CF Certificate issuer: /CN=A913647F/serialNumber=367879A0B85DD8373637883793F55EEB3B221DCF Certificate serial: 7D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nnh5oLhd2Dc2N4g3k_Ve6zsiHc8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913647F/C21C7CF686DB11EFBA4D5F26C4F9AE02/Nnh5oLhd2Dc2N4g3k_Ve6zsiHc8.mft Manifest number: 7B Signing time: Sat 31 May 2025 06:58:28 +0000 Manifest this update: Sat 31 May 2025 06:58:27 +0000 Manifest next update: Sat 07 Jun 2025 06:58:27 +0000 Files and hashes: 1: Nnh5oLhd2Dc2N4g3k_Ve6zsiHc8.crl (hash: Q8mBP8TYfWPfUK14vNkai7oN5j/MEUkdJUyx/GpIasI=) 2: FD3934BC86E211EF8CF27626C4F9AE02.roa (hash: 6re4BPBhdZPlBhJ6P0bUdH0mQEDnXmK+Ed0vP4MQWeU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913647F/C21C7CF686DB11EFBA4D5F26C4F9AE02/Nnh5oLhd2Dc2N4g3k_Ve6zsiHc8.crl rsync://rpki.apnic.net/member_repository/A913647F/C21C7CF686DB11EFBA4D5F26C4F9AE02/Nnh5oLhd2Dc2N4g3k_Ve6zsiHc8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nnh5oLhd2Dc2N4g3k_Ve6zsiHc8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 06:58:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 125 (0x7d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913647F, serialNumber=367879A0B85DD8373637883793F55EEB3B221DCF Validity Not Before: May 31 06:58:27 2025 GMT Not After : Jun 7 06:58:27 2025 GMT Subject: CN=683aa894-d880 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:a5:37:4c:0b:8d:86:68:3e:cf:ff:c9:40:db: c3:69:58:a2:6f:64:b0:58:c6:a8:9c:3a:dd:89:5e: e7:75:e1:0c:71:b1:86:96:e4:e7:27:68:44:1a:26: 26:b7:70:34:67:a3:ef:29:79:e6:f3:98:07:c0:8b: b0:a1:3f:3e:a5:2b:8c:85:8a:4a:2a:0b:94:4e:b3: 59:96:f3:ef:81:d3:fa:37:5f:be:5f:35:98:4d:57: 06:e7:26:bc:5d:31:15:16:19:a9:34:68:d2:29:72: d9:32:85:2d:35:01:49:c5:36:38:1b:a7:e5:be:c2: bc:f6:bd:bb:ee:ae:18:d0:ca:ff:0b:d8:b7:8a:d7: be:27:ad:c6:aa:50:3e:2d:8d:e8:da:d8:11:2e:2f: 2c:cd:d4:ff:82:85:9c:75:5b:c2:86:13:d2:6c:d8: 89:ef:17:f8:48:a7:17:ad:3c:9c:dd:a6:ea:db:77: 61:ee:62:14:89:e6:19:7c:16:f7:a0:18:ec:ed:d8: 12:e4:38:37:6e:12:0b:d1:f5:b1:a3:b2:4d:c7:d4: b0:3f:59:c9:b7:94:48:99:fb:9a:db:24:77:10:76: f0:76:f2:9b:29:6e:fa:ae:18:06:5a:7f:b5:c7:72: c1:15:9f:80:ef:fd:b8:3f:03:d7:60:0e:60:5c:a1: 78:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:52:98:F3:09:9A:37:D7:07:A6:C7:84:23:10:CF:EC:13:F9:C5:5D X509v3 Authority Key Identifier: keyid:36:78:79:A0:B8:5D:D8:37:36:37:88:37:93:F5:5E:EB:3B:22:1D:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913647F/C21C7CF686DB11EFBA4D5F26C4F9AE02/Nnh5oLhd2Dc2N4g3k_Ve6zsiHc8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nnh5oLhd2Dc2N4g3k_Ve6zsiHc8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913647F/C21C7CF686DB11EFBA4D5F26C4F9AE02/Nnh5oLhd2Dc2N4g3k_Ve6zsiHc8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 64:ed:8d:df:30:4b:8c:34:54:b0:22:a2:41:0d:1d:93:cb:0e: 03:37:d9:c9:2f:15:1e:5a:d7:35:f8:f4:ac:5c:c0:b5:10:42: 96:87:33:27:06:d3:a4:be:83:42:ee:97:ad:92:79:05:a8:79: e6:68:1e:b6:ff:b0:c4:61:be:50:bd:4c:49:5b:4c:e0:f6:30: 9a:28:85:cb:9a:cf:96:f0:c1:5b:bc:50:0c:97:ef:30:92:f9: bb:28:91:b8:cf:cb:75:2d:5a:bd:30:99:d3:3d:6e:d8:83:b4: 27:ac:16:9c:c7:a4:f3:7e:20:29:a4:47:01:fe:29:88:22:0c: c4:0a:ab:63:ba:16:4a:9a:09:20:71:d5:af:8e:7f:8d:2f:d1: 57:55:03:cf:95:6e:88:31:1e:55:d3:25:4a:1a:a7:8f:6c:27: 66:9b:be:fe:d8:be:41:ba:21:ef:7d:47:13:3e:0e:b7:06:d1: a9:b2:6c:b4:ac:65:93:08:7a:fd:8e:bf:4d:3a:ba:82:3a:41: 66:f3:a0:04:4a:ac:31:78:81:da:46:b2:b9:54:6f:48:6a:59: 2b:7e:ec:25:a0:13:0b:86:29:09:ea:af:f3:21:9d:86:c1:23: 55:df:3b:65:89:67:ed:63:fc:24:8c:26:81:6f:22:7b:b3:8c: cc:d3:ca:11 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBfTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz NjQ3RjExMC8GA1UEBRMoMzY3ODc5QTBCODVERDgzNzM2Mzc4ODM3OTNGNTVFRUIz QjIyMURDRjAeFw0yNTA1MzEwNjU4MjdaFw0yNTA2MDcwNjU4MjdaMBgxFjAUBgNV BAMTDTY4M2FhODk0LWQ4ODAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDXpTdMC42GaD7P/8lA28NpWKJvZLBYxqicOt2JXud14QxxsYaW5OcnaEQaJia3 cDRno+8peebzmAfAi7ChPz6lK4yFikoqC5ROs1mW8++B0/o3X75fNZhNVwbnJrxd MRUWGak0aNIpctkyhS01AUnFNjgbp+W+wrz2vbvurhjQyv8L2LeK174nrcaqUD4t jeja2BEuLyzN1P+ChZx1W8KGE9Js2InvF/hIpxetPJzdpurbd2HuYhSJ5hl8Fveg GOzt2BLkODduEgvR9bGjsk3H1LA/Wcm3lEiZ+5rbJHcQdvB28pspbvquGAZaf7XH csEVn4Dv/bg/A9dgDmBcoXjzAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUOVKY8wma N9cHpseEIxDP7BP5xV0wHwYDVR0jBBgwFoAUNnh5oLhd2Dc2N4g3k/Ve6zsiHc8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM2NDdGL0MyMUM3Q0Y2ODZE QjExRUZCQTRENUYyNkM0RjlBRTAyL05uaDVvTGhkMkRjMk40ZzNrX1ZlNnpzaUhj OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvTm5oNW9MaGQyRGMyTjRnM2tfVmU2enNpSGM4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM2 NDdGL0MyMUM3Q0Y2ODZEQjExRUZCQTRENUYyNkM0RjlBRTAyL05uaDVvTGhkMkRj Mk40ZzNrX1ZlNnpzaUhjOC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAGTtjd8wS4w0VLAiokENHZPLDgM32ckvFR5a1zX49KxcwLUQQpaHMycG 06S+g0Lul62SeQWoeeZoHrb/sMRhvlC9TElbTOD2MJoohcuaz5bwwVu8UAyX7zCS +bsokbjPy3UtWr0wmdM9btiDtCesFpzHpPN+ICmkRwH+KYgiDMQKq2O6FkqaCSBx 1a+Of40v0VdVA8+VbogxHlXTJUoap49sJ2abvv7YvkG6Ie99RxM+DrcG0amybLSs ZZMIev2Ov006uoI6QWbzoARKrDF4gdpGsrlUb0hqWSt+7CWgEwuGKQnqr/MhnYbB I1XfO2WJZ+1j/CSMJoFvInuzjMzTyhE= -----END CERTIFICATE-----Generated at Sat May 31 14:49:41 2025 by rpki-client