$ rpki-client -vvf rpki.apnic.net/member_repository/A913FD96/A624FC44519811EA97225983C4F9AE02/NAQf45nAdllht5_hJGlBcocgc7s.mft File: NAQf45nAdllht5_hJGlBcocgc7s.mft (raw, json) Hash identifier: BxaM84knOJtl6OA1D/V6rUL4WskLWRfdyln3F+PEelM= Subject key identifier: 53:70:3E:A9:16:CE:19:C8:33:E4:92:B0:19:28:FF:4E:36:3D:41:AB Authority key identifier: 34:04:1F:E3:99:C0:76:59:61:B7:9F:E1:24:69:41:72:87:20:73:BB Certificate issuer: /CN=A913FD96/serialNumber=34041FE399C0765961B79FE124694172872073BB Certificate serial: 0ABF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NAQf45nAdllht5_hJGlBcocgc7s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913FD96/A624FC44519811EA97225983C4F9AE02/NAQf45nAdllht5_hJGlBcocgc7s.mft Manifest number: 0AB9 Signing time: Wed 04 Jun 2025 19:24:35 +0000 Manifest this update: Wed 04 Jun 2025 19:24:35 +0000 Manifest next update: Wed 11 Jun 2025 19:24:35 +0000 Files and hashes: 1: NAQf45nAdllht5_hJGlBcocgc7s.crl (hash: J06ZDzD9kGU9EcSkmEXo5QoPYNb70GMEUHsOxyo5dWw=) 2: FC3B44CE519A11EAB1229A87C4F9AE02.roa (hash: mXaDebpxI+8jgolliV5kV+yxtxKp5QcapX21gE2juPA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913FD96/A624FC44519811EA97225983C4F9AE02/NAQf45nAdllht5_hJGlBcocgc7s.crl rsync://rpki.apnic.net/member_repository/A913FD96/A624FC44519811EA97225983C4F9AE02/NAQf45nAdllht5_hJGlBcocgc7s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NAQf45nAdllht5_hJGlBcocgc7s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 11 Jun 2025 19:24:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2751 (0xabf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913FD96, serialNumber=34041FE399C0765961B79FE124694172872073BB Validity Not Before: Jun 4 19:24:35 2025 GMT Not After : Jun 11 19:24:35 2025 GMT Subject: CN=68409d73-0b29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:e9:7e:7a:6f:10:65:70:79:34:be:84:5c:3a: 1d:6b:4b:99:f2:7d:87:51:38:18:2a:7d:da:35:5b: a7:ae:9f:96:2d:6a:0f:bf:86:f1:9f:5a:98:22:36: 93:9a:25:a7:e3:a2:6b:fc:9f:a5:00:e9:10:c1:fe: 9e:7c:c0:12:7c:31:b6:87:6a:fa:55:7f:01:5e:05: c2:cb:dd:fd:e8:52:66:30:49:dc:8f:c0:42:18:be: 5e:22:70:62:37:91:0b:b7:d2:1c:41:17:02:fd:88: c4:66:f2:e9:5b:0a:cd:c3:73:80:7e:e5:9a:61:11: 4a:e2:cf:b8:c5:97:fa:a2:27:f2:8a:ac:ce:a3:c8: 11:c7:9c:e4:53:b3:4b:ce:ad:9c:99:81:44:4d:99: 36:89:0f:52:8d:9e:47:7f:9c:91:b4:3e:32:96:6c: a0:c6:d7:dc:ce:70:31:46:97:46:c4:f2:91:fa:65: 86:fb:82:e6:ba:4b:98:0f:e2:bf:54:b2:b9:ab:f3: 5a:86:58:24:9f:0e:f0:14:74:23:d0:3c:cd:bc:90: d8:ae:11:5e:c4:cc:60:16:29:32:1a:18:71:a5:c2: 10:81:e8:97:0e:c7:b8:43:b1:6b:ff:d7:46:02:80: 56:9b:24:a9:25:be:34:15:6f:a7:fb:81:49:fb:b0: 60:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:70:3E:A9:16:CE:19:C8:33:E4:92:B0:19:28:FF:4E:36:3D:41:AB X509v3 Authority Key Identifier: keyid:34:04:1F:E3:99:C0:76:59:61:B7:9F:E1:24:69:41:72:87:20:73:BB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913FD96/A624FC44519811EA97225983C4F9AE02/NAQf45nAdllht5_hJGlBcocgc7s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NAQf45nAdllht5_hJGlBcocgc7s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913FD96/A624FC44519811EA97225983C4F9AE02/NAQf45nAdllht5_hJGlBcocgc7s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 40:30:1b:4a:d4:bb:71:64:f2:33:ad:75:1b:7e:c1:5f:5c:c7: 50:1f:04:26:52:db:a2:9b:9c:c4:5a:11:95:91:90:96:49:29: b8:33:84:61:5d:ac:2b:92:ab:5d:37:21:23:33:d7:44:dc:21: 27:4a:21:71:97:49:16:1f:40:d4:e3:30:37:e7:c6:ff:e9:55: 8f:52:06:30:18:3c:5c:12:0a:9a:2c:0d:98:41:62:d0:5e:d9: b3:a8:f6:01:fc:2a:ba:3a:55:58:09:94:d4:7e:c4:a9:a8:13: cc:6b:d3:83:d7:2b:96:9e:d7:cc:7f:19:cd:53:9e:e1:d3:ce: 84:04:e9:1c:e4:a1:cd:c1:12:4b:33:3d:1b:28:33:38:95:ba: b5:87:e4:d0:5f:4a:1e:70:28:ba:f3:22:d7:4d:e4:15:3f:1b: 3a:91:4f:43:84:98:dd:4b:a1:3c:58:f5:11:d7:6d:9e:5b:ed: cc:ca:62:3d:1f:4b:49:f4:ab:d8:cc:60:7c:18:11:36:8e:a4: f3:43:45:c3:ee:07:8f:74:b6:74:7d:20:cd:2f:ff:ff:53:ad: 39:70:e2:e9:1e:d1:73:9f:3b:00:6c:56:b7:1d:ce:81:3f:c9: d1:39:d0:7f:37:f7:76:9a:91:22:64:84:4f:31:8f:90:02:dd: 58:59:06:b6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCr8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0ZEOTYxMTAvBgNVBAUTKDM0MDQxRkUzOTlDMDc2NTk2MUI3OUZFMTI0Njk0MTcy ODcyMDczQkIwHhcNMjUwNjA0MTkyNDM1WhcNMjUwNjExMTkyNDM1WjAYMRYwFAYD VQQDEw02ODQwOWQ3My0wYjI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3+l+em8QZXB5NL6EXDoda0uZ8n2HUTgYKn3aNVunrp+WLWoPv4bxn1qYIjaT miWn46Jr/J+lAOkQwf6efMASfDG2h2r6VX8BXgXCy9396FJmMEncj8BCGL5eInBi N5ELt9IcQRcC/YjEZvLpWwrNw3OAfuWaYRFK4s+4xZf6oifyiqzOo8gRx5zkU7NL zq2cmYFETZk2iQ9SjZ5Hf5yRtD4ylmygxtfcznAxRpdGxPKR+mWG+4LmukuYD+K/ VLK5q/Nahlgknw7wFHQj0DzNvJDYrhFexMxgFikyGhhxpcIQgeiXDse4Q7Fr/9dG AoBWmySpJb40FW+n+4FJ+7BgAQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFNwPqkW zhnIM+SSsBko/042PUGrMB8GA1UdIwQYMBaAFDQEH+OZwHZZYbef4SRpQXKHIHO7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRkQ5Ni9BNjI0RkM0NDUx OTgxMUVBOTcyMjU5ODNDNEY5QUUwMi9OQVFmNDVuQWRsbGh0NV9oSkdsQmNvY2dj N3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05BUWY0NW5BZGxsaHQ1X2hKR2xCY29jZ2M3cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RkQ5Ni9BNjI0RkM0NDUxOTgxMUVBOTcyMjU5ODNDNEY5QUUwMi9OQVFmNDVuQWRs bGh0NV9oSkdsQmNvY2djN3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBAMBtK1LtxZPIzrXUbfsFfXMdQHwQmUtuim5zEWhGVkZCWSSm4M4Rh XawrkqtdNyEjM9dE3CEnSiFxl0kWH0DU4zA358b/6VWPUgYwGDxcEgqaLA2YQWLQ XtmzqPYB/Cq6OlVYCZTUfsSpqBPMa9OD1yuWntfMfxnNU57h086EBOkc5KHNwRJL Mz0bKDM4lbq1h+TQX0oecCi68yLXTeQVPxs6kU9DhJjdS6E8WPUR122eW+3MymI9 H0tJ9KvYzGB8GBE2jqTzQ0XD7gePdLZ0fSDNL///U605cOLpHtFznzsAbFa3Hc6B P8nROdB/N/d2mpEiZIRPMY+QAt1YWQa2 -----END CERTIFICATE-----Generated at Thu Jun 5 19:13:03 2025 by rpki-client