$ rpki-client -vvf rpki.apnic.net/member_repository/A914FA25/2BBCBCAA1DAC11EAAF4A3763C4F9AE02/ng7u9_yIBOBDfomd7TGYizxgLQI.mft File: ng7u9_yIBOBDfomd7TGYizxgLQI.mft (raw, json) Hash identifier: c/EQpr3t2IkLj9U2ICcmKzDL3FZeK63eVMYiMobvtwM= Subject key identifier: 9B:8E:41:9F:AA:08:D5:9E:F0:7B:AA:07:05:B6:A4:D9:99:6E:E5:41 Authority key identifier: 9E:0E:EE:F7:FC:88:04:E0:43:7E:89:9D:ED:31:98:8B:3C:60:2D:02 Certificate issuer: /CN=A914FA25/serialNumber=9E0EEEF7FC8804E0437E899DED31988B3C602D02 Certificate serial: 0BEC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ng7u9_yIBOBDfomd7TGYizxgLQI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914FA25/2BBCBCAA1DAC11EAAF4A3763C4F9AE02/ng7u9_yIBOBDfomd7TGYizxgLQI.mft Manifest number: 0DD5 Signing time: Mon 02 Jun 2025 19:01:32 +0000 Manifest this update: Mon 02 Jun 2025 19:01:32 +0000 Manifest next update: Mon 09 Jun 2025 19:01:32 +0000 Files and hashes: 1: ng7u9_yIBOBDfomd7TGYizxgLQI.crl (hash: Ru7sm7hXE6Wa6OK0hAwmg32qRT0mfAtmLn4qowYchQE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914FA25/2BBCBCAA1DAC11EAAF4A3763C4F9AE02/ng7u9_yIBOBDfomd7TGYizxgLQI.crl rsync://rpki.apnic.net/member_repository/A914FA25/2BBCBCAA1DAC11EAAF4A3763C4F9AE02/ng7u9_yIBOBDfomd7TGYizxgLQI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ng7u9_yIBOBDfomd7TGYizxgLQI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Jun 2025 19:01:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3052 (0xbec) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914FA25, serialNumber=9E0EEEF7FC8804E0437E899DED31988B3C602D02 Validity Not Before: Jun 2 19:01:32 2025 GMT Not After : Jun 9 19:01:32 2025 GMT Subject: CN=683df50c-b680 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:3e:37:71:65:fb:8b:34:0f:90:7b:35:da:9d: fd:74:e4:d7:eb:22:21:88:ee:95:2f:52:15:5a:df: fa:e5:e2:57:4e:88:9a:9f:15:7b:b5:04:e5:f5:3b: 46:88:1b:e1:6c:fe:b7:33:a9:cf:fd:60:30:c4:85: a3:98:71:30:63:4e:20:8d:6f:ba:53:8f:bb:24:40: ce:7c:b6:02:8f:dc:e6:b2:03:8f:ee:d7:cb:da:64: 57:23:d7:71:78:0e:c7:51:88:9a:76:11:89:45:7b: 4f:2a:d0:1f:68:8e:b7:12:83:ae:3a:58:a3:29:6e: 6a:d8:37:38:56:eb:82:5c:72:8a:78:59:e4:6e:e4: d1:d7:2d:66:59:c8:59:d0:45:75:d4:7f:20:fd:f7: a1:1c:2c:e0:7b:62:d5:16:84:9f:36:c2:0d:cb:39: 72:10:1e:6f:47:c4:b9:93:a8:70:6f:ac:78:a6:76: ff:59:4d:9f:0a:d8:c2:07:05:c1:56:f9:c0:bd:b1: 26:99:b4:fc:8a:1b:36:2e:4a:92:5f:e2:d6:4c:1e: cd:88:44:2b:d8:4a:5c:6e:c3:99:c4:f9:d5:f0:8e: 1d:35:6d:70:8e:a0:ec:77:aa:88:a9:8d:5a:14:f1: c3:e2:9e:80:f4:c5:81:b5:29:40:af:d7:87:ce:f6: d2:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:8E:41:9F:AA:08:D5:9E:F0:7B:AA:07:05:B6:A4:D9:99:6E:E5:41 X509v3 Authority Key Identifier: keyid:9E:0E:EE:F7:FC:88:04:E0:43:7E:89:9D:ED:31:98:8B:3C:60:2D:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914FA25/2BBCBCAA1DAC11EAAF4A3763C4F9AE02/ng7u9_yIBOBDfomd7TGYizxgLQI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ng7u9_yIBOBDfomd7TGYizxgLQI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914FA25/2BBCBCAA1DAC11EAAF4A3763C4F9AE02/ng7u9_yIBOBDfomd7TGYizxgLQI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 24:8a:89:4e:a7:e9:07:49:00:a9:bc:9c:34:c6:a4:58:d8:75: fc:ff:ac:cf:b9:84:e8:f3:d1:56:39:ef:85:d6:bf:4e:73:4f: 7f:9b:4f:8e:8b:51:a7:91:d9:72:3f:9c:2c:42:6c:d1:d0:25: d9:eb:e7:16:59:ae:7f:c8:3c:ca:d1:f1:8b:d3:d1:29:78:b1: 9b:e1:db:43:92:18:83:bf:be:d3:0b:8c:fd:08:ea:41:4d:21: 9f:9d:33:1b:7e:02:e1:4c:ca:12:8a:77:91:e0:22:f3:22:cc: a5:ce:3b:4f:47:ec:0d:7f:69:59:c9:11:6b:24:ac:b1:0b:b4: f2:24:7c:2b:26:68:14:85:fe:fa:c7:68:71:53:03:4b:9d:bb: ce:4b:3a:4d:30:78:ae:7a:01:fa:81:df:1a:9f:3e:82:4a:71: 7e:d8:1d:8a:a9:4f:c6:e7:04:91:d3:60:89:95:a5:95:43:97: 90:1c:7d:6f:97:a4:aa:e0:47:95:36:8f:d7:ed:c2:10:ac:be: 8d:74:40:05:f5:f3:f2:c2:22:59:7e:be:ad:74:a4:94:14:20: 6c:d3:2f:0c:eb:d7:a6:68:42:5a:e7:8d:f5:49:55:c8:11:f6: b7:a2:42:af:f7:47:66:78:98:10:74:0c:a1:4a:11:6e:6c:9a: 0d:6f:37:f2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC+wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEZBMjUxMTAvBgNVBAUTKDlFMEVFRUY3RkM4ODA0RTA0MzdFODk5REVEMzE5ODhC M0M2MDJEMDIwHhcNMjUwNjAyMTkwMTMyWhcNMjUwNjA5MTkwMTMyWjAYMRYwFAYD VQQDEw02ODNkZjUwYy1iNjgwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnz43cWX7izQPkHs12p39dOTX6yIhiO6VL1IVWt/65eJXToianxV7tQTl9TtG iBvhbP63M6nP/WAwxIWjmHEwY04gjW+6U4+7JEDOfLYCj9zmsgOP7tfL2mRXI9dx eA7HUYiadhGJRXtPKtAfaI63EoOuOlijKW5q2Dc4VuuCXHKKeFnkbuTR1y1mWchZ 0EV11H8g/fehHCzge2LVFoSfNsINyzlyEB5vR8S5k6hwb6x4pnb/WU2fCtjCBwXB VvnAvbEmmbT8ihs2LkqSX+LWTB7NiEQr2EpcbsOZxPnV8I4dNW1wjqDsd6qIqY1a FPHD4p6A9MWBtSlAr9eHzvbStQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJuOQZ+q CNWe8HuqBwW2pNmZbuVBMB8GA1UdIwQYMBaAFJ4O7vf8iATgQ36Jne0xmIs8YC0C MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RkEyNS8yQkJDQkNBQTFE QUMxMUVBQUY0QTM3NjNDNEY5QUUwMi9uZzd1OV95SUJPQkRmb21kN1RHWWl6eGdM UUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25nN3U5X3lJQk9CRGZvbWQ3VEdZaXp4Z0xRSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RkEyNS8yQkJDQkNBQTFEQUMxMUVBQUY0QTM3NjNDNEY5QUUwMi9uZzd1OV95SUJP QkRmb21kN1RHWWl6eGdMUUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAkiolOp+kHSQCpvJw0xqRY2HX8/6zPuYTo89FWOe+F1r9Oc09/m0+O i1GnkdlyP5wsQmzR0CXZ6+cWWa5/yDzK0fGL09EpeLGb4dtDkhiDv77TC4z9COpB TSGfnTMbfgLhTMoSineR4CLzIsylzjtPR+wNf2lZyRFrJKyxC7TyJHwrJmgUhf76 x2hxUwNLnbvOSzpNMHiuegH6gd8anz6CSnF+2B2KqU/G5wSR02CJlaWVQ5eQHH1v l6Sq4EeVNo/X7cIQrL6NdEAF9fPywiJZfr6tdKSUFCBs0y8M69emaEJa5431SVXI Efa3okKv90dmeJgQdAyhShFubJoNbzfy -----END CERTIFICATE-----Generated at Tue Jun 3 23:51:48 2025 by rpki-client