$ rpki-client -vvf rpki.apnic.net/member_repository/A913F333/DECB65A4239811ED9067226FC4F9AE02/NkCMEcVHK4Ikiv_r7tuyDj4Hps0.mft File: NkCMEcVHK4Ikiv_r7tuyDj4Hps0.mft (raw, json) Hash identifier: 1oHtIOUEQCTM9fS9Zlbg2vGCf/ZAaKGG3xQrKJt4hYk= Subject key identifier: C7:5F:F6:CD:E1:19:96:AF:1F:28:BB:54:92:7F:D4:74:B2:55:62:7C Authority key identifier: 36:40:8C:11:C5:47:2B:82:24:8A:FF:EB:EE:DB:B2:0E:3E:07:A6:CD Certificate issuer: /CN=A913F333/serialNumber=36408C11C5472B82248AFFEBEEDBB20E3E07A6CD Certificate serial: 0259 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NkCMEcVHK4Ikiv_r7tuyDj4Hps0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913F333/DECB65A4239811ED9067226FC4F9AE02/NkCMEcVHK4Ikiv_r7tuyDj4Hps0.mft Manifest number: 024C Signing time: Sat 31 May 2025 02:03:10 +0000 Manifest this update: Sat 31 May 2025 02:03:09 +0000 Manifest next update: Sat 07 Jun 2025 02:03:09 +0000 Files and hashes: 1: NkCMEcVHK4Ikiv_r7tuyDj4Hps0.crl (hash: 1erDarP9CFu9mTqeuAqDOW3M767aZVmHxHvbBjeriO8=) 2: 134B439A91B611ED8BA25C80C4F9AE02.roa (hash: YssH476E2tgxPdw+/0l4VE/a3GZaUyUxDjk4z13BJXU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913F333/DECB65A4239811ED9067226FC4F9AE02/NkCMEcVHK4Ikiv_r7tuyDj4Hps0.crl rsync://rpki.apnic.net/member_repository/A913F333/DECB65A4239811ED9067226FC4F9AE02/NkCMEcVHK4Ikiv_r7tuyDj4Hps0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NkCMEcVHK4Ikiv_r7tuyDj4Hps0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 02:03:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 601 (0x259) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913F333, serialNumber=36408C11C5472B82248AFFEBEEDBB20E3E07A6CD Validity Not Before: May 31 02:03:09 2025 GMT Not After : Jun 7 02:03:09 2025 GMT Subject: CN=683a635e-e716 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:a2:d2:55:b5:2c:cd:ed:6d:58:fc:3d:91:5d: cf:02:cd:06:e6:6c:98:bd:31:d0:70:5c:17:a0:e6: e2:63:7b:78:99:61:2d:30:2b:b1:36:42:6f:02:e1: 7a:af:0c:9c:49:fe:32:eb:ca:ac:64:8d:9e:d4:cc: 84:dd:5e:0f:43:f6:32:e9:48:1b:83:ff:49:ed:d2: d4:71:25:4a:54:ec:fc:66:f3:7a:e6:65:00:da:2d: 02:d4:f7:20:23:2f:12:93:8c:57:3d:5a:7e:57:46: 39:b6:0d:aa:bf:be:b5:e3:c3:02:6c:95:9e:4b:39: 37:04:47:78:a5:97:44:3a:96:73:99:e7:d8:b6:e2: dd:aa:01:d0:f6:ae:01:cd:61:1c:d0:d5:c6:74:19: 40:ba:7a:25:8d:9b:bb:71:36:c9:ec:9a:4f:c4:be: a7:60:af:22:11:f7:fb:00:3b:6a:93:fb:e5:99:66: 58:6b:04:e0:af:de:20:35:96:6c:5b:13:b0:b6:0c: aa:f1:2f:80:68:12:d5:c8:32:78:97:fe:04:88:cb: 2c:07:f5:e9:fa:b6:a7:b9:66:e1:8a:a5:d3:a3:8c: 7c:66:ca:6c:d0:1c:c3:11:11:a9:13:e6:b0:bb:fa: 37:b6:87:18:06:d7:73:75:c9:ec:28:76:5e:c9:26: be:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:5F:F6:CD:E1:19:96:AF:1F:28:BB:54:92:7F:D4:74:B2:55:62:7C X509v3 Authority Key Identifier: keyid:36:40:8C:11:C5:47:2B:82:24:8A:FF:EB:EE:DB:B2:0E:3E:07:A6:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913F333/DECB65A4239811ED9067226FC4F9AE02/NkCMEcVHK4Ikiv_r7tuyDj4Hps0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NkCMEcVHK4Ikiv_r7tuyDj4Hps0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913F333/DECB65A4239811ED9067226FC4F9AE02/NkCMEcVHK4Ikiv_r7tuyDj4Hps0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 98:34:07:e9:3d:f2:32:e7:3b:28:39:86:de:17:ed:2d:ff:85: 71:37:50:4d:43:5a:12:29:bd:9e:09:f1:5c:2e:1b:cc:14:1f: 34:e1:87:c4:51:52:b4:a9:df:df:dd:0c:8b:9e:aa:5d:9c:6e: 79:d8:a6:dc:08:31:05:68:0b:78:d7:0a:c7:43:cf:97:39:b8: 1c:d0:3e:8c:34:14:6e:fa:25:a8:55:dc:a0:ae:f2:41:89:25: da:09:c7:9f:64:10:16:fe:3e:86:ef:3b:9e:f6:e5:59:4f:34: 33:41:60:c6:3c:21:12:ca:21:50:53:40:07:41:14:2b:01:7f: e3:ff:d7:28:15:54:9b:20:64:15:a7:5a:fe:5a:59:f4:6a:68: c6:07:73:ab:80:e8:20:9f:03:f9:f8:15:5f:6d:ae:5e:2e:b9: fd:be:56:72:61:ea:40:58:c1:e6:31:0d:66:f3:2d:b0:b8:67: a8:40:ff:4b:5b:8e:46:71:7c:3b:5a:cd:a6:4b:2d:25:94:29: 46:e2:3b:65:aa:0c:47:2e:fa:84:c7:ac:33:89:4b:f8:97:11: 43:09:f8:d5:1b:a7:67:15:7b:9e:47:0c:38:48:ef:66:51:af: 73:27:89:a0:de:f2:47:f6:84:e5:da:82:12:bc:91:2a:85:c7: 18:4e:31:aa -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAlkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0YzMzMxMTAvBgNVBAUTKDM2NDA4QzExQzU0NzJCODIyNDhBRkZFQkVFREJCMjBF M0UwN0E2Q0QwHhcNMjUwNTMxMDIwMzA5WhcNMjUwNjA3MDIwMzA5WjAYMRYwFAYD VQQDEw02ODNhNjM1ZS1lNzE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtaLSVbUsze1tWPw9kV3PAs0G5myYvTHQcFwXoObiY3t4mWEtMCuxNkJvAuF6 rwycSf4y68qsZI2e1MyE3V4PQ/Yy6Ugbg/9J7dLUcSVKVOz8ZvN65mUA2i0C1Pcg Iy8Sk4xXPVp+V0Y5tg2qv76148MCbJWeSzk3BEd4pZdEOpZzmefYtuLdqgHQ9q4B zWEc0NXGdBlAunoljZu7cTbJ7JpPxL6nYK8iEff7ADtqk/vlmWZYawTgr94gNZZs WxOwtgyq8S+AaBLVyDJ4l/4EiMssB/Xp+ranuWbhiqXTo4x8Zsps0BzDERGpE+aw u/o3tocYBtdzdcnsKHZeySa+8QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMdf9s3h GZavHyi7VJJ/1HSyVWJ8MB8GA1UdIwQYMBaAFDZAjBHFRyuCJIr/6+7bsg4+B6bN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRjMzMy9ERUNCNjVBNDIz OTgxMUVEOTA2NzIyNkZDNEY5QUUwMi9Oa0NNRWNWSEs0SWtpdl9yN3R1eURqNEhw czAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05rQ01FY1ZISzRJa2l2X3I3dHV5RGo0SHBzMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RjMzMy9ERUNCNjVBNDIzOTgxMUVEOTA2NzIyNkZDNEY5QUUwMi9Oa0NNRWNWSEs0 SWtpdl9yN3R1eURqNEhwczAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCYNAfpPfIy5zsoOYbeF+0t/4VxN1BNQ1oSKb2eCfFcLhvMFB804YfE UVK0qd/f3QyLnqpdnG552KbcCDEFaAt41wrHQ8+XObgc0D6MNBRu+iWoVdygrvJB iSXaCcefZBAW/j6G7zue9uVZTzQzQWDGPCESyiFQU0AHQRQrAX/j/9coFVSbIGQV p1r+Wln0amjGB3OrgOggnwP5+BVfba5eLrn9vlZyYepAWMHmMQ1m8y2wuGeoQP9L W45GcXw7Ws2mSy0llClG4jtlqgxHLvqEx6wziUv4lxFDCfjVG6dnFXueRww4SO9m Ua9zJ4mg3vJH9oTl2oISvJEqhccYTjGq -----END CERTIFICATE-----Generated at Sat May 31 16:43:06 2025 by rpki-client