$ rpki-client -vvf rpki.apnic.net/member_repository/A9152696/725CA1D406CD11EAAE5E7934C4F9AE02/nL-xN0vpMpetwbIdvTeY0VvSdN8.mft File: nL-xN0vpMpetwbIdvTeY0VvSdN8.mft (raw, json) Hash identifier: AVjaYfxKlrA9S514kNZ5tJZ81UuSHULdeeOlWSruExA= Subject key identifier: CF:9B:59:9E:37:58:07:9A:A6:79:C8:30:28:4C:6D:0A:50:0B:F6:C6 Authority key identifier: 9C:BF:B1:37:4B:E9:32:97:AD:C1:B2:1D:BD:37:98:D1:5B:D2:74:DF Certificate issuer: /CN=A9152696/serialNumber=9CBFB1374BE93297ADC1B21DBD3798D15BD274DF Certificate serial: 0C46 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nL-xN0vpMpetwbIdvTeY0VvSdN8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9152696/725CA1D406CD11EAAE5E7934C4F9AE02/nL-xN0vpMpetwbIdvTeY0VvSdN8.mft Manifest number: 0C3F Signing time: Sun 08 Jun 2025 18:18:01 +0000 Manifest this update: Sun 08 Jun 2025 18:18:00 +0000 Manifest next update: Sun 15 Jun 2025 18:18:00 +0000 Files and hashes: 1: nL-xN0vpMpetwbIdvTeY0VvSdN8.crl (hash: y/bPBFXlecNMNJCAAzDOqZjYKi9ekcYUXhvAGibh30k=) 2: E905CD5808F111EA8E4F1D51C4F9AE02.roa (hash: Ykh/ajdiEQ6UqJC1nIow2mRMlvxbjVdtujI4Th0ysiU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9152696/725CA1D406CD11EAAE5E7934C4F9AE02/nL-xN0vpMpetwbIdvTeY0VvSdN8.crl rsync://rpki.apnic.net/member_repository/A9152696/725CA1D406CD11EAAE5E7934C4F9AE02/nL-xN0vpMpetwbIdvTeY0VvSdN8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nL-xN0vpMpetwbIdvTeY0VvSdN8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 15 Jun 2025 18:17:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3142 (0xc46) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9152696, serialNumber=9CBFB1374BE93297ADC1B21DBD3798D15BD274DF Validity Not Before: Jun 8 18:18:00 2025 GMT Not After : Jun 15 18:18:00 2025 GMT Subject: CN=6845d3d8-e2d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:18:ca:62:e8:7e:5f:6a:96:a3:93:06:17:23: a3:da:bb:8f:cf:98:00:83:8c:e7:f1:a3:7f:fb:d4: 3b:25:b9:54:2e:ce:8c:d6:46:95:76:bc:04:90:bc: bb:21:9a:93:32:0e:80:26:bf:cd:de:ab:55:f8:1c: 76:74:d5:75:af:5c:ed:80:0b:96:2a:ab:2a:04:b2: 4b:d9:ec:fb:33:4e:88:25:fe:11:a7:53:da:f7:b0: 55:2f:ab:d7:7e:51:d2:b2:dc:e4:db:2c:90:32:a6: ed:00:6e:c2:94:94:f8:e9:8a:f0:f2:f9:ef:98:7e: 56:07:04:79:d6:39:b3:00:96:e8:49:b0:19:ae:b6: 03:22:d6:91:7c:12:9a:69:d4:29:24:c3:56:7c:de: db:4e:19:a6:2b:b1:1e:68:31:57:6b:5c:29:09:84: ef:cc:85:00:4d:4c:76:f1:1e:da:76:da:76:d5:24: 8a:3f:37:93:3e:b3:57:e3:90:e8:e3:fd:e9:fa:67: 65:22:79:ae:53:8b:91:0f:84:67:43:6c:f5:97:98: 0d:0c:0f:24:9e:bd:1c:86:fe:4d:22:85:4e:49:e0: 1a:db:0a:62:0c:8c:88:d3:cb:33:d9:6f:1e:b6:e9: 7e:fa:a5:c6:e0:d4:83:0c:f0:19:4d:c4:4a:9d:63: 45:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:9B:59:9E:37:58:07:9A:A6:79:C8:30:28:4C:6D:0A:50:0B:F6:C6 X509v3 Authority Key Identifier: keyid:9C:BF:B1:37:4B:E9:32:97:AD:C1:B2:1D:BD:37:98:D1:5B:D2:74:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9152696/725CA1D406CD11EAAE5E7934C4F9AE02/nL-xN0vpMpetwbIdvTeY0VvSdN8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nL-xN0vpMpetwbIdvTeY0VvSdN8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9152696/725CA1D406CD11EAAE5E7934C4F9AE02/nL-xN0vpMpetwbIdvTeY0VvSdN8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 24:1c:af:ff:2b:50:fc:58:e4:47:5f:dd:ab:78:a4:80:0b:b4: eb:4b:6b:13:89:15:2e:f4:b6:c4:6c:40:36:ab:49:58:94:2a: 2e:2a:63:71:eb:a4:f1:a5:5d:98:49:a3:3b:bc:aa:50:50:03: 08:e0:41:d1:00:51:9e:16:39:5f:e0:ff:92:7c:87:92:b6:ec: 30:ab:cd:a4:11:20:f4:40:0e:93:ec:80:ee:f4:5d:8d:54:dc: f6:c1:34:f2:96:4a:31:8d:66:7e:58:f6:c0:68:9f:07:0a:5a: b1:24:73:d8:b8:4a:3e:08:6d:37:7b:24:4c:a9:35:ed:33:75: 93:02:82:61:8e:23:e2:9e:e4:e5:5e:17:76:e9:4f:28:04:03: 2c:98:3a:59:bd:bc:09:a1:3a:ac:d3:90:ed:45:93:85:75:35: 1b:cd:f0:ac:16:80:bc:85:56:c3:5c:42:98:6a:79:e2:9b:e3: c5:dc:39:68:cf:56:ed:4f:4c:eb:62:3a:98:61:b7:81:7a:dd: 73:38:d6:a1:ea:38:c6:11:b2:ee:5a:1c:2c:ff:fb:52:e5:5a: 73:75:1f:4f:55:0d:51:e0:9c:7e:0e:5f:96:50:cb:b3:05:38: 16:01:3a:4a:d7:61:87:cc:85:28:fa:57:ee:77:67:50:df:0f: 93:19:9f:81 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDEYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTI2OTYxMTAvBgNVBAUTKDlDQkZCMTM3NEJFOTMyOTdBREMxQjIxREJEMzc5OEQx NUJEMjc0REYwHhcNMjUwNjA4MTgxODAwWhcNMjUwNjE1MTgxODAwWjAYMRYwFAYD VQQDEw02ODQ1ZDNkOC1lMmQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArhjKYuh+X2qWo5MGFyOj2ruPz5gAg4zn8aN/+9Q7JblULs6M1kaVdrwEkLy7 IZqTMg6AJr/N3qtV+Bx2dNV1r1ztgAuWKqsqBLJL2ez7M06IJf4Rp1Pa97BVL6vX flHSstzk2yyQMqbtAG7ClJT46Yrw8vnvmH5WBwR51jmzAJboSbAZrrYDItaRfBKa adQpJMNWfN7bThmmK7EeaDFXa1wpCYTvzIUATUx28R7adtp21SSKPzeTPrNX45Do 4/3p+mdlInmuU4uRD4RnQ2z1l5gNDA8knr0chv5NIoVOSeAa2wpiDIyI08sz2W8e tul++qXG4NSDDPAZTcRKnWNFewIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM+bWZ43 WAeapnnIMChMbQpQC/bGMB8GA1UdIwQYMBaAFJy/sTdL6TKXrcGyHb03mNFb0nTf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MjY5Ni83MjVDQTFENDA2 Q0QxMUVBQUU1RTc5MzRDNEY5QUUwMi9uTC14TjB2cE1wZXR3YklkdlRlWTBWdlNk TjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25MLXhOMHZwTXBldHdiSWR2VGVZMFZ2U2ROOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MjY5Ni83MjVDQTFENDA2Q0QxMUVBQUU1RTc5MzRDNEY5QUUwMi9uTC14TjB2cE1w ZXR3YklkdlRlWTBWdlNkTjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAkHK//K1D8WORHX92reKSAC7TrS2sTiRUu9LbEbEA2q0lYlCouKmNx 66TxpV2YSaM7vKpQUAMI4EHRAFGeFjlf4P+SfIeStuwwq82kESD0QA6T7IDu9F2N VNz2wTTylkoxjWZ+WPbAaJ8HClqxJHPYuEo+CG03eyRMqTXtM3WTAoJhjiPinuTl Xhd26U8oBAMsmDpZvbwJoTqs05DtRZOFdTUbzfCsFoC8hVbDXEKYannim+PF3Dlo z1btT0zrYjqYYbeBet1zONah6jjGEbLuWhws//tS5VpzdR9PVQ1R4Jx+Dl+WUMuz BTgWATpK12GHzIUo+lfud2dQ3w+TGZ+B -----END CERTIFICATE-----Generated at Tue Jun 10 15:15:38 2025 by rpki-client