$ rpki-client -vvf rpki.apnic.net/member_repository/A913F0DF/E5083648992811EEBBCAE87AC4F9AE02/nQi_OKDTi4yrfP2I9djE7WZ3jME.mft File: nQi_OKDTi4yrfP2I9djE7WZ3jME.mft (raw, json) Hash identifier: IJXz73CLY8DRHY2mBh+MQ1PYvP7jtkY3ByNeL2YFHE4= Subject key identifier: A0:56:D8:01:07:06:47:09:90:7F:19:12:26:81:1E:5F:9E:BB:DC:4A Authority key identifier: 9D:08:BF:38:A0:D3:8B:8C:AB:7C:FD:88:F5:D8:C4:ED:66:77:8C:C1 Certificate issuer: /CN=A913F0DF/serialNumber=9D08BF38A0D38B8CAB7CFD88F5D8C4ED66778CC1 Certificate serial: 0117 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nQi_OKDTi4yrfP2I9djE7WZ3jME.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913F0DF/E5083648992811EEBBCAE87AC4F9AE02/nQi_OKDTi4yrfP2I9djE7WZ3jME.mft Manifest number: 0114 Signing time: Sat 31 May 2025 04:32:46 +0000 Manifest this update: Sat 31 May 2025 04:32:46 +0000 Manifest next update: Sat 07 Jun 2025 04:32:46 +0000 Files and hashes: 1: nQi_OKDTi4yrfP2I9djE7WZ3jME.crl (hash: GV0itzVlY98HbNfZ0+L62Rf+4FWqarftyl0JFXqLme4=) 2: 7C7AF8E6E67011EEB76DCB76C4F9AE02.roa (hash: tBwNVvJX12RI1rw1ArvMyaYybwsSqQmw1mHttd1wbm0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913F0DF/E5083648992811EEBBCAE87AC4F9AE02/nQi_OKDTi4yrfP2I9djE7WZ3jME.crl rsync://rpki.apnic.net/member_repository/A913F0DF/E5083648992811EEBBCAE87AC4F9AE02/nQi_OKDTi4yrfP2I9djE7WZ3jME.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nQi_OKDTi4yrfP2I9djE7WZ3jME.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 04:32:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 279 (0x117) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913F0DF, serialNumber=9D08BF38A0D38B8CAB7CFD88F5D8C4ED66778CC1 Validity Not Before: May 31 04:32:46 2025 GMT Not After : Jun 7 04:32:46 2025 GMT Subject: CN=683a866e-0fdf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:2e:dd:60:2e:fd:ee:bb:04:79:62:09:19:96: 40:0e:a6:dd:2a:ab:73:2b:c2:75:db:a7:4c:20:e0: 73:6a:12:c6:04:1e:1c:50:b0:02:d7:5e:1b:72:fa: 7a:5f:ee:62:11:1f:d3:bb:f5:b8:ca:11:14:1f:47: f7:0f:4a:04:78:94:30:88:40:30:19:db:80:f1:76: 06:f8:7e:a7:98:5a:06:84:96:05:96:9c:c4:11:e4: 06:e5:fd:37:c8:0c:f3:c2:74:6d:3b:97:d4:b9:86: b6:34:2d:18:2e:c6:4e:05:9d:07:44:f0:98:6e:6c: 0a:ad:9c:6d:e2:e5:9e:45:7f:6d:96:44:4d:84:7f: bc:69:73:28:bd:bd:03:11:ae:a1:b3:fb:0d:62:e1: db:96:36:15:82:dc:9d:b2:8d:f9:68:a5:fd:d6:59: b5:c3:a0:59:a4:de:01:21:57:a1:55:40:1e:fa:73: 78:a2:9c:3f:3b:73:33:d8:2f:5c:9e:32:3b:bc:6a: 7c:41:71:7f:6f:af:81:0c:e8:e6:68:2f:7a:4b:d4: d4:c0:04:57:be:ed:f1:fb:e2:10:10:3e:87:93:00: 6a:aa:62:68:57:c4:92:d5:05:cd:db:59:5e:07:d0: 17:5b:8b:31:55:4c:c2:39:d5:da:d9:19:b9:5a:f7: f3:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:56:D8:01:07:06:47:09:90:7F:19:12:26:81:1E:5F:9E:BB:DC:4A X509v3 Authority Key Identifier: keyid:9D:08:BF:38:A0:D3:8B:8C:AB:7C:FD:88:F5:D8:C4:ED:66:77:8C:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913F0DF/E5083648992811EEBBCAE87AC4F9AE02/nQi_OKDTi4yrfP2I9djE7WZ3jME.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nQi_OKDTi4yrfP2I9djE7WZ3jME.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913F0DF/E5083648992811EEBBCAE87AC4F9AE02/nQi_OKDTi4yrfP2I9djE7WZ3jME.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0e:bf:63:2f:eb:6e:6d:e6:0a:30:eb:81:99:6a:db:33:d2:23: 20:ff:44:5e:93:83:62:2b:65:b9:04:20:54:5e:69:93:69:89: 1d:56:05:1f:71:6f:44:7e:e5:c5:5f:f6:04:fe:ed:b3:08:e0: 4e:88:c5:16:37:18:ef:25:ef:66:8a:32:23:d4:b4:40:9e:de: d4:5d:4a:3e:ca:92:11:fe:dc:c7:84:7e:d8:03:fe:f8:66:d2: cc:27:aa:ed:0a:38:69:84:07:2b:2c:46:06:8f:39:23:19:3b: 1e:a8:71:ae:cf:ac:06:2f:75:83:02:22:cd:9f:2d:38:5d:d3: 50:cd:39:28:51:45:90:8a:4e:9a:15:ab:c1:b9:42:c1:6e:c9: 4e:52:94:ef:ac:4b:eb:b4:ad:ab:1d:19:e9:83:54:03:f0:10: ee:cb:62:b8:ca:09:e0:45:c0:bb:56:c7:db:91:6d:7a:f6:6a: 94:81:a1:33:7d:0c:53:01:e8:44:e9:10:6d:04:a4:dd:cb:c3: 7b:b4:3a:e6:df:60:13:5a:37:42:74:71:f7:c1:31:38:94:65: 8d:c9:f5:08:0e:06:d4:14:4d:b3:67:af:c6:64:a8:71:ad:94: 48:08:25:5d:57:22:9d:2f:af:29:ea:92:49:84:e2:0a:3a:69: 55:9a:f9:74 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICARcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0YwREYxMTAvBgNVBAUTKDlEMDhCRjM4QTBEMzhCOENBQjdDRkQ4OEY1RDhDNEVE NjY3NzhDQzEwHhcNMjUwNTMxMDQzMjQ2WhcNMjUwNjA3MDQzMjQ2WjAYMRYwFAYD VQQDEw02ODNhODY2ZS0wZmRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2C7dYC797rsEeWIJGZZADqbdKqtzK8J126dMIOBzahLGBB4cULAC114bcvp6 X+5iER/Tu/W4yhEUH0f3D0oEeJQwiEAwGduA8XYG+H6nmFoGhJYFlpzEEeQG5f03 yAzzwnRtO5fUuYa2NC0YLsZOBZ0HRPCYbmwKrZxt4uWeRX9tlkRNhH+8aXMovb0D Ea6hs/sNYuHbljYVgtydso35aKX91lm1w6BZpN4BIVehVUAe+nN4opw/O3Mz2C9c njI7vGp8QXF/b6+BDOjmaC96S9TUwARXvu3x++IQED6HkwBqqmJoV8SS1QXN21le B9AXW4sxVUzCOdXa2Rm5Wvfz3wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKBW2AEH BkcJkH8ZEiaBHl+eu9xKMB8GA1UdIwQYMBaAFJ0Ivzig04uMq3z9iPXYxO1md4zB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRjBERi9FNTA4MzY0ODk5 MjgxMUVFQkJDQUU4N0FDNEY5QUUwMi9uUWlfT0tEVGk0eXJmUDJJOWRqRTdXWjNq TUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25RaV9PS0RUaTR5cmZQMkk5ZGpFN1daM2pNRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RjBERi9FNTA4MzY0ODk5MjgxMUVFQkJDQUU4N0FDNEY5QUUwMi9uUWlfT0tEVGk0 eXJmUDJJOWRqRTdXWjNqTUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAOv2Mv625t5gow64GZatsz0iMg/0Rek4NiK2W5BCBUXmmTaYkdVgUf cW9EfuXFX/YE/u2zCOBOiMUWNxjvJe9mijIj1LRAnt7UXUo+ypIR/tzHhH7YA/74 ZtLMJ6rtCjhphAcrLEYGjzkjGTseqHGuz6wGL3WDAiLNny04XdNQzTkoUUWQik6a FavBuULBbslOUpTvrEvrtK2rHRnpg1QD8BDuy2K4ygngRcC7VsfbkW169mqUgaEz fQxTAehE6RBtBKTdy8N7tDrm32ATWjdCdHH3wTE4lGWNyfUIDgbUFE2zZ6/GZKhx rZRICCVdVyKdL68p6pJJhOIKOmlVmvl0 -----END CERTIFICATE-----Generated at Sat May 31 16:35:53 2025 by rpki-client