$ rpki-client -vvf rpki.apnic.net/member_repository/A914C33A/1D2BD03E2DDB11E49AF61530C4F9AE02/nIFHHxiq7s35RafJF_2KiYXXw6w.mft File: nIFHHxiq7s35RafJF_2KiYXXw6w.mft (raw, json) Hash identifier: P+eJ6c167jAaCKXSWeWXlRNumVJxc8mwRC+Am5A1AQU= Subject key identifier: AC:90:22:46:3F:62:61:95:E7:06:61:D4:EA:D1:E2:56:8A:2E:F5:A9 Authority key identifier: 9C:81:47:1F:18:AA:EE:CD:F9:45:A7:C9:17:FD:8A:89:85:D7:C3:AC Certificate issuer: /CN=A914C33A/serialNumber=9C81471F18AAEECDF945A7C917FD8A8985D7C3AC Certificate serial: 2A8D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nIFHHxiq7s35RafJF_2KiYXXw6w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914C33A/1D2BD03E2DDB11E49AF61530C4F9AE02/nIFHHxiq7s35RafJF_2KiYXXw6w.mft Manifest number: 2A4F Signing time: Sat 31 May 2025 15:32:59 +0000 Manifest this update: Sat 31 May 2025 15:32:58 +0000 Manifest next update: Sat 07 Jun 2025 15:32:58 +0000 Files and hashes: 1: nIFHHxiq7s35RafJF_2KiYXXw6w.crl (hash: FcamtMeKr/62xMKLFD17TjTMRQq09bzwLx0nARXu0IY=) 2: FB405D86900E11EAA43BB21FC4F9AE02.roa (hash: xBHGq+I+gC6mBEO7iAqcoK3D8WpSvv5eSxXQn/j0Q60=) 3: 3118E43E966B11EAAA23047CC4F9AE02.roa (hash: gq6V0/TIcAAKvh2pY9bQTg3IwnYpN56MDdlGTWJZ3cM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914C33A/1D2BD03E2DDB11E49AF61530C4F9AE02/nIFHHxiq7s35RafJF_2KiYXXw6w.crl rsync://rpki.apnic.net/member_repository/A914C33A/1D2BD03E2DDB11E49AF61530C4F9AE02/nIFHHxiq7s35RafJF_2KiYXXw6w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nIFHHxiq7s35RafJF_2KiYXXw6w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 15:23:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10893 (0x2a8d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914C33A, serialNumber=9C81471F18AAEECDF945A7C917FD8A8985D7C3AC Validity Not Before: May 31 15:32:58 2025 GMT Not After : Jun 7 15:32:58 2025 GMT Subject: CN=683b212a-4792 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:73:64:68:d9:8f:48:eb:2d:ef:20:62:67:af: a5:8d:d4:54:7c:df:f3:e0:2a:d4:2c:b6:31:08:8e: 0a:97:81:57:4b:ef:c5:25:ab:ea:8a:89:ed:2f:a9: 4d:76:53:ce:27:7f:1c:41:2d:8c:ad:71:ab:36:96: 3b:83:82:db:84:75:0e:1e:cf:94:97:c1:00:ba:b8: 8a:4e:6a:e3:e9:fb:cd:9b:e4:ee:f7:82:81:42:9c: 5b:4e:45:e3:ac:4e:cc:a3:b9:a0:a3:da:11:25:12: 4f:3f:2f:02:dd:4b:30:ce:97:98:10:62:8f:a0:a8: 35:2a:2e:5f:16:8e:5a:fa:66:21:16:55:84:35:04: 6f:61:e7:00:f0:57:54:6c:7b:c1:c2:5e:85:e8:02: 6b:68:2a:90:5c:c5:78:d2:54:d3:9f:0a:4e:c4:94: 35:a9:32:0c:98:75:15:ad:65:15:c2:98:ec:8f:91: 79:fc:77:ab:14:28:52:90:31:b1:d1:7e:25:62:8e: 68:dd:15:ec:a1:7c:09:47:5c:6b:94:83:1d:fd:b1: 7a:59:a2:8a:7b:99:b1:e5:5f:c7:4f:38:7d:d8:f4: fd:c0:8d:71:ff:52:8a:51:2b:6a:4f:6a:83:d1:2f: f2:8d:50:72:ef:69:db:f0:63:30:f6:d3:b7:b3:9f: 8f:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:90:22:46:3F:62:61:95:E7:06:61:D4:EA:D1:E2:56:8A:2E:F5:A9 X509v3 Authority Key Identifier: keyid:9C:81:47:1F:18:AA:EE:CD:F9:45:A7:C9:17:FD:8A:89:85:D7:C3:AC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914C33A/1D2BD03E2DDB11E49AF61530C4F9AE02/nIFHHxiq7s35RafJF_2KiYXXw6w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nIFHHxiq7s35RafJF_2KiYXXw6w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914C33A/1D2BD03E2DDB11E49AF61530C4F9AE02/nIFHHxiq7s35RafJF_2KiYXXw6w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 58:7d:1f:0b:b3:74:ac:ba:ae:e6:30:fb:27:7e:1d:ac:02:96: bf:ce:cf:c7:46:0e:52:8b:80:24:b1:83:09:4f:92:32:39:32: 67:2e:29:25:bd:c5:2e:a6:77:cd:29:b5:38:32:ce:92:81:3d: 56:c3:b7:10:46:fb:f2:5d:ae:74:6f:7a:36:59:34:c5:80:8c: da:80:9b:3d:c4:1a:c9:fe:c0:57:2e:1b:01:43:8a:f4:4f:bd: bf:b7:19:11:ec:b1:6a:bf:96:d3:cc:79:a4:24:6a:76:42:13: 4f:50:a9:2d:b4:49:a2:f4:04:c3:4d:8d:ef:45:6e:07:fc:51: 28:da:3c:b7:1b:82:dd:fe:e6:f3:1b:ed:a6:c1:78:8c:d7:46: 86:09:18:35:c4:a6:6f:47:70:88:7b:af:53:95:da:d9:10:ad: b0:52:a6:0c:fd:36:61:34:a8:99:db:c7:c4:58:6d:8c:e8:af: c4:3d:4b:f4:78:7d:18:ba:53:dd:48:53:53:a8:3f:52:08:c0: 27:32:87:5f:94:f5:95:ac:78:e7:1f:f6:c9:97:ff:da:05:0b: 38:ff:03:2f:38:9b:0c:2f:2a:2d:51:0c:3c:4b:81:00:c9:a5: 2d:6a:33:dc:e7:f1:0f:aa:05:3b:05:90:5b:c7:c1:7b:f4:ed: 50:cd:c9:8d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICKo0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEMzM0ExMTAvBgNVBAUTKDlDODE0NzFGMThBQUVFQ0RGOTQ1QTdDOTE3RkQ4QTg5 ODVEN0MzQUMwHhcNMjUwNTMxMTUzMjU4WhcNMjUwNjA3MTUzMjU4WjAYMRYwFAYD VQQDEw02ODNiMjEyYS00NzkyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArXNkaNmPSOst7yBiZ6+ljdRUfN/z4CrULLYxCI4Kl4FXS+/FJavqiontL6lN dlPOJ38cQS2MrXGrNpY7g4LbhHUOHs+Ul8EAuriKTmrj6fvNm+Tu94KBQpxbTkXj rE7Mo7mgo9oRJRJPPy8C3UswzpeYEGKPoKg1Ki5fFo5a+mYhFlWENQRvYecA8FdU bHvBwl6F6AJraCqQXMV40lTTnwpOxJQ1qTIMmHUVrWUVwpjsj5F5/HerFChSkDGx 0X4lYo5o3RXsoXwJR1xrlIMd/bF6WaKKe5mx5V/HTzh92PT9wI1x/1KKUStqT2qD 0S/yjVBy72nb8GMw9tO3s5+PvQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKyQIkY/ YmGV5wZh1OrR4laKLvWpMB8GA1UdIwQYMBaAFJyBRx8Yqu7N+UWnyRf9iomF18Os MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QzMzQS8xRDJCRDAzRTJE REIxMUU0OUFGNjE1MzBDNEY5QUUwMi9uSUZISHhpcTdzMzVSYWZKRl8yS2lZWFh3 NncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25JRkhIeGlxN3MzNVJhZkpGXzJLaVlYWHc2dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QzMzQS8xRDJCRDAzRTJEREIxMUU0OUFGNjE1MzBDNEY5QUUwMi9uSUZISHhpcTdz MzVSYWZKRl8yS2lZWFh3NncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBYfR8Ls3Ssuq7mMPsnfh2sApa/zs/HRg5Si4AksYMJT5IyOTJnLikl vcUupnfNKbU4Ms6SgT1Ww7cQRvvyXa50b3o2WTTFgIzagJs9xBrJ/sBXLhsBQ4r0 T72/txkR7LFqv5bTzHmkJGp2QhNPUKkttEmi9ATDTY3vRW4H/FEo2jy3G4Ld/ubz G+2mwXiM10aGCRg1xKZvR3CIe69TldrZEK2wUqYM/TZhNKiZ28fEWG2M6K/EPUv0 eH0YulPdSFNTqD9SCMAnModflPWVrHjnH/bJl//aBQs4/wMvOJsMLyotUQw8S4EA yaUtajPc5/EPqgU7BZBbx8F79O1QzcmN -----END CERTIFICATE-----Generated at Sat May 31 17:37:40 2025 by rpki-client