$ rpki-client -vvf rpki.apnic.net/member_repository/A916A504/321BC48CD3AB11EF8EBD0C2BC4F9AE02/nczQgPBy3iTvhCxqopJJnvE2m_Q.mft File: nczQgPBy3iTvhCxqopJJnvE2m_Q.mft (raw, json) Hash identifier: N5zhMigNo/AOM79ump1FqYvN4cL8z4g2J+Yu3ganEB8= Subject key identifier: 12:43:8C:92:21:CC:0E:AD:DC:C8:A2:FF:12:F7:5D:4C:F3:50:01:CE Authority key identifier: 9D:CC:D0:80:F0:72:DE:24:EF:84:2C:6A:A2:92:49:9E:F1:36:9B:F4 Certificate issuer: /CN=A916A504/serialNumber=9DCCD080F072DE24EF842C6AA292499EF1369BF4 Certificate serial: 4A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nczQgPBy3iTvhCxqopJJnvE2m_Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916A504/321BC48CD3AB11EF8EBD0C2BC4F9AE02/nczQgPBy3iTvhCxqopJJnvE2m_Q.mft Manifest number: 48 Signing time: Sat 31 May 2025 06:59:54 +0000 Manifest this update: Sat 31 May 2025 06:59:53 +0000 Manifest next update: Sat 07 Jun 2025 06:59:53 +0000 Files and hashes: 1: nczQgPBy3iTvhCxqopJJnvE2m_Q.crl (hash: +MUmgas0q36Mz5tw0joDZwLdZM2s7xW0hIMflZPgHy8=) 2: D7BBDE18D3AB11EFB022202CC4F9AE02.roa (hash: zhMP8LF5xzC/Q8On0PtHeNnJWxx2k1+qP2f+3qYJ/jA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916A504/321BC48CD3AB11EF8EBD0C2BC4F9AE02/nczQgPBy3iTvhCxqopJJnvE2m_Q.crl rsync://rpki.apnic.net/member_repository/A916A504/321BC48CD3AB11EF8EBD0C2BC4F9AE02/nczQgPBy3iTvhCxqopJJnvE2m_Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nczQgPBy3iTvhCxqopJJnvE2m_Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 06:59:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74 (0x4a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916A504, serialNumber=9DCCD080F072DE24EF842C6AA292499EF1369BF4 Validity Not Before: May 31 06:59:53 2025 GMT Not After : Jun 7 06:59:53 2025 GMT Subject: CN=683aa8e9-308a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:17:67:49:d9:ea:ba:12:1e:02:ba:52:a8:9d: 0a:b7:95:a1:7e:5c:f5:3c:ad:e0:7e:30:e0:23:ea: ee:c4:e5:f9:0d:60:98:a6:62:a4:3f:93:1c:63:6b: ca:57:d0:fe:06:33:10:b5:1b:d1:3c:4d:e7:cf:a1: 1b:ae:e8:5f:0a:d0:57:b7:37:73:23:1d:f4:ac:6a: 41:61:f0:0b:84:7c:7d:ac:c4:5d:56:29:17:06:5f: 49:8f:ca:68:50:b2:32:04:31:20:29:22:10:11:12: b0:a5:67:b4:92:c7:64:80:4f:42:77:1b:de:d6:db: 7c:84:ac:51:54:3d:70:0d:70:c5:30:75:0e:4e:e9: 3f:f3:ab:32:55:7f:f3:ea:7e:e9:78:97:0c:a0:23: fa:1e:88:40:64:27:ad:40:65:ac:5b:63:c1:26:1b: bb:49:e5:13:4d:63:f0:6d:51:8d:66:55:72:1e:d3: 99:f7:c1:fe:7c:4d:92:0c:95:36:bc:bb:09:4b:db: 45:59:14:56:56:c9:90:78:de:50:d4:50:a9:61:0a: 84:22:25:5b:e8:14:ab:76:3f:c0:f3:f3:79:7e:a9: 17:ab:c0:dc:d1:05:e8:65:53:ff:28:b4:d6:2d:dd: c4:f5:7a:c5:d9:eb:72:86:e8:87:15:91:8a:41:fe: 57:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:43:8C:92:21:CC:0E:AD:DC:C8:A2:FF:12:F7:5D:4C:F3:50:01:CE X509v3 Authority Key Identifier: keyid:9D:CC:D0:80:F0:72:DE:24:EF:84:2C:6A:A2:92:49:9E:F1:36:9B:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916A504/321BC48CD3AB11EF8EBD0C2BC4F9AE02/nczQgPBy3iTvhCxqopJJnvE2m_Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nczQgPBy3iTvhCxqopJJnvE2m_Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A504/321BC48CD3AB11EF8EBD0C2BC4F9AE02/nczQgPBy3iTvhCxqopJJnvE2m_Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 65:dd:c3:a5:a5:a5:3c:df:fa:2a:06:76:cf:c4:06:57:e5:7b: b6:ff:6d:aa:f5:f8:42:1a:68:19:dd:65:72:3a:e8:bb:97:44: 65:5d:d2:5c:f6:25:b7:33:4a:69:ce:af:48:b8:f2:e8:a7:c1: 9f:a8:bc:51:50:f8:a7:ae:13:04:22:b7:86:6d:eb:c1:ca:c5: 9e:bb:7b:88:cb:f5:e1:69:8a:56:29:05:cb:e9:6f:f0:11:f8: 14:1b:c1:98:7d:ac:f0:8a:a4:b5:20:1d:03:c6:7d:c1:e0:e4: 6b:45:02:17:ac:bb:93:3e:24:08:b3:64:45:5c:6d:6c:55:ef: f1:be:db:29:23:da:b9:b8:f1:be:ec:0e:04:9d:20:1c:e4:74: 57:5f:ae:e5:7b:0d:6c:8a:f1:0d:37:98:85:26:4c:af:71:e1: d7:50:9f:1f:24:99:de:19:b7:b1:e3:1f:80:11:68:72:25:67: 76:c3:01:bc:f0:3d:3b:3a:ce:f1:96:88:b9:75:d7:2a:2c:93: 1c:41:77:7c:3d:a0:2c:95:d4:6a:61:4c:91:74:9b:9b:26:9d: 20:89:da:80:68:4e:91:62:44:cb:a7:9b:d5:1e:7f:4d:15:01: 58:39:33:ae:2c:b1:0b:25:b5:4c:7c:e6:a5:0a:3d:d0:55:0c: a3:3f:63:65 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBSjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 QTUwNDExMC8GA1UEBRMoOURDQ0QwODBGMDcyREUyNEVGODQyQzZBQTI5MjQ5OUVG MTM2OUJGNDAeFw0yNTA1MzEwNjU5NTNaFw0yNTA2MDcwNjU5NTNaMBgxFjAUBgNV BAMTDTY4M2FhOGU5LTMwOGEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDEF2dJ2eq6Eh4CulKonQq3laF+XPU8reB+MOAj6u7E5fkNYJimYqQ/kxxja8pX 0P4GMxC1G9E8TefPoRuu6F8K0Fe3N3MjHfSsakFh8AuEfH2sxF1WKRcGX0mPymhQ sjIEMSApIhARErClZ7SSx2SAT0J3G97W23yErFFUPXANcMUwdQ5O6T/zqzJVf/Pq ful4lwygI/oeiEBkJ61AZaxbY8EmG7tJ5RNNY/BtUY1mVXIe05n3wf58TZIMlTa8 uwlL20VZFFZWyZB43lDUUKlhCoQiJVvoFKt2P8Dz83l+qRerwNzRBehlU/8otNYt 3cT1esXZ63KG6IcVkYpB/ldhAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUEkOMkiHM Dq3cyKL/EvddTPNQAc4wHwYDVR0jBBgwFoAUnczQgPBy3iTvhCxqopJJnvE2m/Qw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTZBNTA0LzMyMUJDNDhDRDNB QjExRUY4RUJEMEMyQkM0RjlBRTAyL25jelFnUEJ5M2lUdmhDeHFvcEpKbnZFMm1f US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvbmN6UWdQQnkzaVR2aEN4cW9wSkpudkUybV9RLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTZB NTA0LzMyMUJDNDhDRDNBQjExRUY4RUJEMEMyQkM0RjlBRTAyL25jelFnUEJ5M2lU dmhDeHFvcEpKbnZFMm1fUS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAGXdw6WlpTzf+ioGds/EBlfle7b/bar1+EIaaBndZXI66LuXRGVd0lz2 JbczSmnOr0i48uinwZ+ovFFQ+KeuEwQit4Zt68HKxZ67e4jL9eFpilYpBcvpb/AR +BQbwZh9rPCKpLUgHQPGfcHg5GtFAhesu5M+JAizZEVcbWxV7/G+2ykj2rm48b7s DgSdIBzkdFdfruV7DWyK8Q03mIUmTK9x4ddQnx8kmd4Zt7HjH4ARaHIlZ3bDAbzw PTs6zvGWiLl11yoskxxBd3w9oCyV1GphTJF0m5smnSCJ2oBoTpFiRMunm9Uef00V AVg5M64ssQsltUx85qUKPdBVDKM/Y2U= -----END CERTIFICATE-----Generated at Sat May 31 17:54:56 2025 by rpki-client