$ rpki-client -vvf rpki.apnic.net/member_repository/A9148B19/11030AF4855611EC9AB82E21C4F9AE02/cNLQaRmVfGqmdxz1Xblvx-_niaA.mft File: cNLQaRmVfGqmdxz1Xblvx-_niaA.mft (raw, json) Hash identifier: /5XYGR1EjpYFdf+wFcYI7CXovaTmY73rc7BEtW8cMsk= Subject key identifier: 3B:0D:82:C4:69:A2:03:72:FD:20:9C:B8:7F:AA:83:AA:64:43:A0:53 Authority key identifier: 70:D2:D0:69:19:95:7C:6A:A6:77:1C:F5:5D:B9:6F:C7:EF:E7:89:A0 Certificate issuer: /CN=A9148B19/serialNumber=70D2D06919957C6AA6771CF55DB96FC7EFE789A0 Certificate serial: 03DF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cNLQaRmVfGqmdxz1Xblvx-_niaA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9148B19/11030AF4855611EC9AB82E21C4F9AE02/cNLQaRmVfGqmdxz1Xblvx-_niaA.mft Manifest number: 03D3 Signing time: Sat 31 May 2025 00:47:50 +0000 Manifest this update: Sat 31 May 2025 00:47:50 +0000 Manifest next update: Sat 07 Jun 2025 00:47:50 +0000 Files and hashes: 1: cNLQaRmVfGqmdxz1Xblvx-_niaA.crl (hash: 8vUA44gKTpEWsWYpKUnmVAuinjmydSnu+MOOB6On/Jc=) 2: 5E6AFDFC855A11ECA39EB244C4F9AE02.roa (hash: adNJYD8ddR86Y2y0YjrK71PiHKfM9/CpER0jXjblQGI=) 3: 93A5581E549211EFB6D69465C4F9AE02.roa (hash: /XKYDQbxV7RTuAFLQ60S0WHAEqIIW0Ex8kIJdQHSD/g=) 4: 927AA46C549211EFB6D69465C4F9AE02.roa (hash: gGjbQrgM08otmBBevw5wvzpRfB5KnX1ffhZnJEh71ug=) 5: 92F68C4E549211EFB6D69465C4F9AE02.roa (hash: sY83/cQy3tzz5zdxbwkdhze9u62EpJ6EfapgidWQ+QI=) 6: 920D7BD0549211EFB6D69465C4F9AE02.roa (hash: aK64LFa4M0NMRqfKHBnnSKArLKJYhxOJFHjuf4xjW94=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9148B19/11030AF4855611EC9AB82E21C4F9AE02/cNLQaRmVfGqmdxz1Xblvx-_niaA.crl rsync://rpki.apnic.net/member_repository/A9148B19/11030AF4855611EC9AB82E21C4F9AE02/cNLQaRmVfGqmdxz1Xblvx-_niaA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cNLQaRmVfGqmdxz1Xblvx-_niaA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 00:47:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 991 (0x3df) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9148B19, serialNumber=70D2D06919957C6AA6771CF55DB96FC7EFE789A0 Validity Not Before: May 31 00:47:50 2025 GMT Not After : Jun 7 00:47:50 2025 GMT Subject: CN=683a51b6-80d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:16:df:fe:51:df:a4:03:92:02:bc:8f:be:65: 11:ea:dc:99:0c:0d:de:92:72:8c:37:e0:bd:4a:5d: ae:f3:ff:89:ff:d7:0f:1d:1e:f7:35:09:c1:77:cf: 67:65:90:d7:cc:e8:1f:47:76:ef:07:cd:19:8c:27: c4:63:c1:7c:dd:00:e8:e6:5c:42:63:77:6a:58:33: ad:11:49:43:68:90:64:e3:73:17:68:28:d9:3c:cf: 51:08:80:5e:ff:1b:af:0a:c1:1c:45:ec:79:15:43: 0a:3b:7a:f9:de:c4:f2:9d:81:72:ad:ba:a2:b8:98: 23:e1:1c:cf:b3:0a:8e:b6:3a:ed:07:06:ad:c5:f3: 4b:46:aa:ef:6e:06:55:29:5c:68:a1:35:24:69:f4: 85:74:13:89:95:d1:15:0c:dc:85:11:0e:cf:68:84: 28:26:9b:04:f3:07:29:da:14:07:a6:3f:aa:d1:20: 9f:b1:0a:16:0a:be:28:8a:0d:ed:27:25:95:01:0e: 48:0a:46:a1:99:07:8b:47:84:dc:aa:14:74:8b:07: 8b:76:6f:d2:37:73:f6:99:aa:41:90:e3:84:bf:6f: 6b:bc:42:2e:69:85:94:1c:23:98:81:ad:d2:ee:79: b0:27:cc:7e:2b:ca:6d:04:99:48:a0:32:b1:b2:8f: 22:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:0D:82:C4:69:A2:03:72:FD:20:9C:B8:7F:AA:83:AA:64:43:A0:53 X509v3 Authority Key Identifier: keyid:70:D2:D0:69:19:95:7C:6A:A6:77:1C:F5:5D:B9:6F:C7:EF:E7:89:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9148B19/11030AF4855611EC9AB82E21C4F9AE02/cNLQaRmVfGqmdxz1Xblvx-_niaA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cNLQaRmVfGqmdxz1Xblvx-_niaA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148B19/11030AF4855611EC9AB82E21C4F9AE02/cNLQaRmVfGqmdxz1Xblvx-_niaA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 12:19:8f:37:6f:d4:cc:aa:07:30:e1:20:46:59:71:db:61:e9: 8d:64:d1:79:93:47:a0:c7:38:fc:09:7d:75:62:c4:6c:5f:8b: 18:bb:6e:46:5c:80:30:51:dd:f9:a4:30:63:ed:93:fd:f2:50: 78:6e:53:e2:ba:57:7b:17:f1:26:52:ff:5b:3d:3e:4a:b8:23: dc:4a:57:6a:2a:7f:4b:2a:6c:b0:d8:72:fd:d0:d6:38:1c:6f: 11:12:a3:79:c8:f0:a5:5c:eb:8f:5d:a8:63:d5:8f:62:51:17: 56:ab:ed:d9:4c:84:f8:4b:f1:36:23:54:1c:18:0e:c7:a8:0a: 46:0f:93:66:20:58:7b:9a:93:eb:a8:91:31:b5:68:90:89:b4: 64:45:35:7d:e1:34:c9:94:d4:60:0f:8e:34:de:ba:29:6c:ab: 96:45:d6:99:89:45:4e:e2:b9:62:b6:79:73:dd:b7:08:8f:20: 97:d7:c0:f8:c6:51:33:80:9f:b5:45:ad:5a:18:57:14:d8:9c: d5:62:b5:24:d9:ec:b8:c7:a9:2f:ff:f2:34:b7:2a:83:f2:97: 99:02:b1:4b:2b:ed:5b:f8:cf:49:14:db:33:55:ce:32:2e:b6: d6:81:e2:e6:f3:e9:b0:c1:69:01:0d:44:29:29:16:7c:19:61: b1:42:76:f3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA98wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDhCMTkxMTAvBgNVBAUTKDcwRDJEMDY5MTk5NTdDNkFBNjc3MUNGNTVEQjk2RkM3 RUZFNzg5QTAwHhcNMjUwNTMxMDA0NzUwWhcNMjUwNjA3MDA0NzUwWjAYMRYwFAYD VQQDEw02ODNhNTFiNi04MGQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzhbf/lHfpAOSAryPvmUR6tyZDA3eknKMN+C9Sl2u8/+J/9cPHR73NQnBd89n ZZDXzOgfR3bvB80ZjCfEY8F83QDo5lxCY3dqWDOtEUlDaJBk43MXaCjZPM9RCIBe /xuvCsEcRex5FUMKO3r53sTynYFyrbqiuJgj4RzPswqOtjrtBwatxfNLRqrvbgZV KVxooTUkafSFdBOJldEVDNyFEQ7PaIQoJpsE8wcp2hQHpj+q0SCfsQoWCr4oig3t JyWVAQ5ICkahmQeLR4TcqhR0iweLdm/SN3P2mapBkOOEv29rvEIuaYWUHCOYga3S 7nmwJ8x+K8ptBJlIoDKxso8iwQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDsNgsRp ogNy/SCcuH+qg6pkQ6BTMB8GA1UdIwQYMBaAFHDS0GkZlXxqpncc9V25b8fv54mg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OEIxOS8xMTAzMEFGNDg1 NTYxMUVDOUFCODJFMjFDNEY5QUUwMi9jTkxRYVJtVmZHcW1keHoxWGJsdngtX25p YUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NOTFFhUm1WZkdxbWR4ejFYYmx2eC1fbmlhQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OEIxOS8xMTAzMEFGNDg1NTYxMUVDOUFCODJFMjFDNEY5QUUwMi9jTkxRYVJtVmZH cW1keHoxWGJsdngtX25pYUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQASGY83b9TMqgcw4SBGWXHbYemNZNF5k0egxzj8CX11YsRsX4sYu25G XIAwUd35pDBj7ZP98lB4blPiuld7F/EmUv9bPT5KuCPcSldqKn9LKmyw2HL90NY4 HG8REqN5yPClXOuPXahj1Y9iURdWq+3ZTIT4S/E2I1QcGA7HqApGD5NmIFh7mpPr qJExtWiQibRkRTV94TTJlNRgD4403ropbKuWRdaZiUVO4rlitnlz3bcIjyCX18D4 xlEzgJ+1Ra1aGFcU2JzVYrUk2ey4x6kv//I0tyqD8peZArFLK+1b+M9JFNszVc4y LrbWgeLm8+mwwWkBDUQpKRZ8GWGxQnbz -----END CERTIFICATE-----Generated at Sat May 31 17:56:21 2025 by rpki-client