$ rpki-client -vvf rpki.apnic.net/member_repository/A9142769/46BD55C24B8D11F0A3F4FF3FC4F9AE02/ntVkKdGun2AE-2-2eI6T-vYiV1k.mft File: ntVkKdGun2AE-2-2eI6T-vYiV1k.mft (raw, json) Hash identifier: GMwIJdLlWPkB1LKwA3rFapn46azO8HKfcBdFaA25z1s= Subject key identifier: 68:81:E2:CA:72:36:6C:D9:E7:59:7F:90:BD:8B:58:D4:62:F4:85:FA Authority key identifier: 9E:D5:64:29:D1:AE:9F:60:04:FB:6F:B6:78:8E:93:FA:F6:22:57:59 Certificate issuer: /CN=A9142769/serialNumber=9ED56429D1AE9F6004FB6FB6788E93FAF6225759 Certificate serial: 0B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ntVkKdGun2AE-2-2eI6T-vYiV1k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9142769/46BD55C24B8D11F0A3F4FF3FC4F9AE02/ntVkKdGun2AE-2-2eI6T-vYiV1k.mft Manifest number: 09 Signing time: Tue 01 Jul 2025 08:57:30 +0000 Manifest this update: Tue 01 Jul 2025 08:57:29 +0000 Manifest next update: Tue 08 Jul 2025 08:57:29 +0000 Files and hashes: 1: ntVkKdGun2AE-2-2eI6T-vYiV1k.crl (hash: 14Ism/0Qu/Ug7YNUUWBc9qAHUqDnJWRCGtnpFIpnZco=) 2: C8B7607C4B8D11F0B198C040C4F9AE02.roa (hash: i2BhMqJuRPJPw6EpQmAJmu0/MkHReXEBSLa+rZeCZ6I=) 3: C96601404B8D11F0B198C040C4F9AE02.roa (hash: T0dKTs8EMdDl2Inh3fwBdZE3Wa4Vfq9Mg4rvNVagedw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9142769/46BD55C24B8D11F0A3F4FF3FC4F9AE02/ntVkKdGun2AE-2-2eI6T-vYiV1k.crl rsync://rpki.apnic.net/member_repository/A9142769/46BD55C24B8D11F0A3F4FF3FC4F9AE02/ntVkKdGun2AE-2-2eI6T-vYiV1k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ntVkKdGun2AE-2-2eI6T-vYiV1k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 08:57:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11 (0xb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9142769, serialNumber=9ED56429D1AE9F6004FB6FB6788E93FAF6225759 Validity Not Before: Jul 1 08:57:29 2025 GMT Not After : Jul 8 08:57:29 2025 GMT Subject: CN=6863a2fa-b8c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:fa:f0:98:41:d7:bc:35:8c:33:d3:0b:17:5b: 08:5a:40:4f:f4:18:e2:b0:3c:e8:c8:89:a8:19:cc: cf:bb:8a:c7:a4:2c:1a:01:a4:5c:83:9c:0c:c2:6f: 78:1a:47:1c:07:cc:17:5b:fc:af:c4:3c:6e:b7:7b: 9b:8c:1b:e8:0c:ae:db:2f:65:1a:88:d8:8b:4b:61: de:de:37:1c:89:39:fe:35:19:f5:53:2b:ce:43:69: a2:94:69:ca:9b:b3:cf:92:42:aa:f7:38:7e:1f:29: 75:b3:89:66:24:9c:7d:13:38:39:94:bc:c7:1d:21: c7:56:93:75:f2:a2:62:45:97:df:fd:67:ff:a1:bd: d0:b9:42:e6:7d:23:45:7f:a2:6e:01:43:1c:2c:20: 0e:b4:07:5b:23:ae:9b:16:63:f5:29:75:0f:70:43: 7d:de:42:6f:48:e8:db:d2:02:f0:51:f2:1a:64:29: 31:c3:4c:18:8b:c5:9c:9d:b4:9e:6b:58:6a:f1:5c: 49:b3:b1:e7:78:1e:e5:51:7d:dc:7c:8c:6c:2a:3e: ac:75:21:36:e6:96:9e:4d:64:81:6a:e1:b5:ec:92: 6d:08:7b:43:85:a2:91:48:3f:27:40:ad:94:59:10: b3:c0:96:60:7c:2b:2e:6d:47:24:7f:81:2f:6f:a9: 05:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:81:E2:CA:72:36:6C:D9:E7:59:7F:90:BD:8B:58:D4:62:F4:85:FA X509v3 Authority Key Identifier: keyid:9E:D5:64:29:D1:AE:9F:60:04:FB:6F:B6:78:8E:93:FA:F6:22:57:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9142769/46BD55C24B8D11F0A3F4FF3FC4F9AE02/ntVkKdGun2AE-2-2eI6T-vYiV1k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ntVkKdGun2AE-2-2eI6T-vYiV1k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142769/46BD55C24B8D11F0A3F4FF3FC4F9AE02/ntVkKdGun2AE-2-2eI6T-vYiV1k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 86:85:c3:a7:1a:ac:87:71:03:ae:08:ac:2e:c8:46:8a:07:78: a4:86:4b:2c:c1:11:42:18:fb:35:63:8b:c8:3d:e3:1c:54:ec: 52:2a:55:f4:d1:75:67:8d:b8:a8:6e:b4:29:26:35:c0:5d:30: f2:bf:ef:1f:67:75:66:4d:9c:f1:ad:2d:cb:a5:75:58:c2:92: e0:03:13:d9:94:c1:7e:47:25:a4:7d:60:0f:4e:4e:dc:b3:68: fb:be:01:23:6f:53:01:9f:98:07:d1:61:b9:25:71:cf:d3:c7: e0:72:c6:16:d8:43:21:f5:e6:44:f4:0c:e1:a7:af:08:47:03: 99:82:1b:9e:f8:80:bd:46:2b:c4:7a:05:0d:74:e5:28:13:11: 28:79:aa:0a:8c:16:c0:b2:d3:51:15:f4:38:a3:a0:1c:7a:d5: 8a:df:11:bb:da:f6:0a:ab:dc:e5:0a:cf:0e:c4:13:06:69:45: f7:0d:48:f9:74:6d:12:ce:2e:d0:81:0f:9a:b9:2d:fc:23:2a: ff:42:06:35:80:d1:71:75:05:4b:2f:ea:c4:0c:00:d2:6b:42: d4:40:46:f6:cf:94:17:e1:56:72:92:77:fb:2d:10:47:aa:47: bc:c8:2a:d4:7b:fd:bb:30:ec:a6:7e:89:0e:bc:af:62:99:b9: f7:e0:2b:50 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBCzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 Mjc2OTExMC8GA1UEBRMoOUVENTY0MjlEMUFFOUY2MDA0RkI2RkI2Nzg4RTkzRkFG NjIyNTc1OTAeFw0yNTA3MDEwODU3MjlaFw0yNTA3MDgwODU3MjlaMBgxFjAUBgNV BAMTDTY4NjNhMmZhLWI4YzIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDV+vCYQde8NYwz0wsXWwhaQE/0GOKwPOjIiagZzM+7isekLBoBpFyDnAzCb3ga RxwHzBdb/K/EPG63e5uMG+gMrtsvZRqI2ItLYd7eNxyJOf41GfVTK85DaaKUacqb s8+SQqr3OH4fKXWziWYknH0TODmUvMcdIcdWk3XyomJFl9/9Z/+hvdC5QuZ9I0V/ om4BQxwsIA60B1sjrpsWY/UpdQ9wQ33eQm9I6NvSAvBR8hpkKTHDTBiLxZydtJ5r WGrxXEmzsed4HuVRfdx8jGwqPqx1ITbmlp5NZIFq4bXskm0Ie0OFopFIPydArZRZ ELPAlmB8Ky5tRyR/gS9vqQUlAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUaIHiynI2 bNnnWX+QvYtY1GL0hfowHwYDVR0jBBgwFoAUntVkKdGun2AE+2+2eI6T+vYiV1kw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQyNzY5LzQ2QkQ1NUMyNEI4 RDExRjBBM0Y0RkYzRkM0RjlBRTAyL250VmtLZEd1bjJBRS0yLTJlSTZULXZZaVYx ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvbnRWa0tkR3VuMkFFLTItMmVJNlQtdllpVjFrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQy NzY5LzQ2QkQ1NUMyNEI4RDExRjBBM0Y0RkYzRkM0RjlBRTAyL250VmtLZEd1bjJB RS0yLTJlSTZULXZZaVYxay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAIaFw6carIdxA64IrC7IRooHeKSGSyzBEUIY+zVji8g94xxU7FIqVfTR dWeNuKhutCkmNcBdMPK/7x9ndWZNnPGtLculdVjCkuADE9mUwX5HJaR9YA9OTtyz aPu+ASNvUwGfmAfRYbklcc/Tx+ByxhbYQyH15kT0DOGnrwhHA5mCG574gL1GK8R6 BQ105SgTESh5qgqMFsCy01EV9DijoBx61YrfEbva9gqr3OUKzw7EEwZpRfcNSPl0 bRLOLtCBD5q5LfwjKv9CBjWA0XF1BUsv6sQMANJrQtRARvbPlBfhVnKSd/stEEeq R7zIKtR7/bsw7KZ+iQ68r2KZuffgK1A= -----END CERTIFICATE-----Generated at Tue Jul 1 19:39:50 2025 by rpki-client