$ rpki-client -vvf rpki.apnic.net/member_repository/A917190F/B3CA76C0FA3111EABD249E7AC4F9AE02/nQdEbvmfPFfCnFgta3rKRzX05HA.mft File: nQdEbvmfPFfCnFgta3rKRzX05HA.mft (raw, json) Hash identifier: /A3jnesfg3b75FDzClEZTfzn13ycqtSfMyCP7h8x2nc= Subject key identifier: 40:EB:16:CA:91:5D:AF:FB:02:FA:26:4D:1A:3E:2C:A1:18:B2:B4:98 Authority key identifier: 9D:07:44:6E:F9:9F:3C:57:C2:9C:58:2D:6B:7A:CA:47:35:F4:E4:70 Certificate issuer: /CN=A917190F/serialNumber=9D07446EF99F3C57C29C582D6B7ACA4735F4E470 Certificate serial: 0834 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nQdEbvmfPFfCnFgta3rKRzX05HA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917190F/B3CA76C0FA3111EABD249E7AC4F9AE02/nQdEbvmfPFfCnFgta3rKRzX05HA.mft Manifest number: 07FD Signing time: Wed 04 Jun 2025 21:02:22 +0000 Manifest this update: Wed 04 Jun 2025 21:02:21 +0000 Manifest next update: Wed 11 Jun 2025 21:02:21 +0000 Files and hashes: 1: nQdEbvmfPFfCnFgta3rKRzX05HA.crl (hash: aE0ArtnQWr+8G6nVFCgYrSRm7zFuDLcUHSt1ERnbUwg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917190F/B3CA76C0FA3111EABD249E7AC4F9AE02/nQdEbvmfPFfCnFgta3rKRzX05HA.crl rsync://rpki.apnic.net/member_repository/A917190F/B3CA76C0FA3111EABD249E7AC4F9AE02/nQdEbvmfPFfCnFgta3rKRzX05HA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nQdEbvmfPFfCnFgta3rKRzX05HA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 11 Jun 2025 21:02:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2100 (0x834) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917190F, serialNumber=9D07446EF99F3C57C29C582D6B7ACA4735F4E470 Validity Not Before: Jun 4 21:02:21 2025 GMT Not After : Jun 11 21:02:21 2025 GMT Subject: CN=6840b45d-c21f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:b6:5b:52:07:ec:54:3b:c8:40:26:0a:78:9b: e3:b0:8d:f4:d9:4b:8b:59:bf:53:6d:5f:f1:1f:d3: 34:21:50:4a:2f:4f:81:b9:1d:c1:92:0b:d6:54:0b: 08:28:b5:ea:12:da:c0:fb:a2:b4:71:82:61:3e:35: d9:30:26:52:e2:c6:27:c4:6e:9e:5b:5e:e5:a5:85: 32:31:d6:08:ca:32:59:0c:aa:a1:e8:d2:05:48:02: 8e:9b:fa:ad:85:49:15:18:7a:d7:00:14:d6:5a:c3: ea:0f:c6:50:36:a6:62:2a:3e:c0:6f:f1:e4:bb:f5: 6d:6b:54:21:56:ef:e4:c6:41:ab:1f:53:96:65:3e: 7e:07:d2:8d:7a:13:70:45:9b:c6:d0:07:51:d9:69: 5c:ee:8c:58:16:11:92:38:8a:ed:c7:18:42:3e:17: bb:09:a7:e3:21:89:36:2a:5c:eb:e8:49:89:01:97: b1:a4:77:e4:b0:16:d0:4a:4a:e9:fa:15:c0:66:48: ba:89:68:08:ee:5a:b0:80:31:3b:0c:98:7a:c2:e4: df:a8:b5:47:67:8a:e9:e1:cb:b4:2b:15:5c:37:66: 13:1a:ed:5d:59:9a:c0:9b:2d:bc:3f:f8:05:f3:5d: 51:83:9c:2d:de:4e:2d:41:6e:c6:7c:d4:08:d1:ca: 34:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:EB:16:CA:91:5D:AF:FB:02:FA:26:4D:1A:3E:2C:A1:18:B2:B4:98 X509v3 Authority Key Identifier: keyid:9D:07:44:6E:F9:9F:3C:57:C2:9C:58:2D:6B:7A:CA:47:35:F4:E4:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917190F/B3CA76C0FA3111EABD249E7AC4F9AE02/nQdEbvmfPFfCnFgta3rKRzX05HA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nQdEbvmfPFfCnFgta3rKRzX05HA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917190F/B3CA76C0FA3111EABD249E7AC4F9AE02/nQdEbvmfPFfCnFgta3rKRzX05HA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9e:26:7e:19:66:14:8e:2e:e6:79:45:36:25:6e:0b:65:26:24: 78:fd:6b:7e:08:58:47:80:4a:91:cd:8f:71:e9:0c:93:a1:d4: af:77:36:62:2d:74:c8:0c:51:a2:65:8f:91:34:cf:f1:35:ec: 6b:c6:aa:5c:37:29:57:61:81:d5:e1:70:8f:dc:0b:44:aa:66: dc:3a:42:79:c8:87:25:91:54:74:7f:97:44:d0:76:45:7b:c3: 1d:5f:f7:81:5e:d3:87:05:8a:45:79:6b:bd:4f:af:08:f7:b3: 2b:2b:30:91:f0:80:af:c6:ea:46:44:15:74:67:eb:24:a4:49: 6b:d6:df:3b:7f:2e:c7:76:c8:78:6d:4a:7c:56:b6:52:dd:ca: 36:a3:77:2b:b7:b4:64:28:20:a2:74:49:13:01:d1:8f:d0:b8: 9b:ff:53:9e:a9:b2:b8:24:81:dd:6d:00:4e:4c:cc:80:10:92: b7:6e:22:12:12:93:d5:60:32:60:48:a9:15:b3:e0:56:a6:27: e7:75:ed:f7:d6:01:5b:fa:d6:82:bc:5c:b6:c3:d0:64:84:78: 2d:50:49:ac:a0:b5:88:3e:63:e9:88:00:98:f2:3a:51:39:3f: 08:92:11:90:12:1a:00:33:ef:aa:16:5e:1b:c9:d0:48:fa:fd: df:42:8b:95 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCDQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzE5MEYxMTAvBgNVBAUTKDlEMDc0NDZFRjk5RjNDNTdDMjlDNTgyRDZCN0FDQTQ3 MzVGNEU0NzAwHhcNMjUwNjA0MjEwMjIxWhcNMjUwNjExMjEwMjIxWjAYMRYwFAYD VQQDEw02ODQwYjQ1ZC1jMjFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArbZbUgfsVDvIQCYKeJvjsI302UuLWb9TbV/xH9M0IVBKL0+BuR3BkgvWVAsI KLXqEtrA+6K0cYJhPjXZMCZS4sYnxG6eW17lpYUyMdYIyjJZDKqh6NIFSAKOm/qt hUkVGHrXABTWWsPqD8ZQNqZiKj7Ab/Hku/Vta1QhVu/kxkGrH1OWZT5+B9KNehNw RZvG0AdR2Wlc7oxYFhGSOIrtxxhCPhe7CafjIYk2Klzr6EmJAZexpHfksBbQSkrp +hXAZki6iWgI7lqwgDE7DJh6wuTfqLVHZ4rp4cu0KxVcN2YTGu1dWZrAmy28P/gF 811Rg5wt3k4tQW7GfNQI0co0qwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEDrFsqR Xa/7AvomTRo+LKEYsrSYMB8GA1UdIwQYMBaAFJ0HRG75nzxXwpxYLWt6ykc19ORw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MTkwRi9CM0NBNzZDMEZB MzExMUVBQkQyNDlFN0FDNEY5QUUwMi9uUWRFYnZtZlBGZkNuRmd0YTNyS1J6WDA1 SEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25RZEVidm1mUEZmQ25GZ3RhM3JLUnpYMDVIQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MTkwRi9CM0NBNzZDMEZBMzExMUVBQkQyNDlFN0FDNEY5QUUwMi9uUWRFYnZtZlBG ZkNuRmd0YTNyS1J6WDA1SEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCeJn4ZZhSOLuZ5RTYlbgtlJiR4/Wt+CFhHgEqRzY9x6QyTodSvdzZi LXTIDFGiZY+RNM/xNexrxqpcNylXYYHV4XCP3AtEqmbcOkJ5yIclkVR0f5dE0HZF e8MdX/eBXtOHBYpFeWu9T68I97MrKzCR8ICvxupGRBV0Z+skpElr1t87fy7Hdsh4 bUp8VrZS3co2o3crt7RkKCCidEkTAdGP0Lib/1OeqbK4JIHdbQBOTMyAEJK3biIS EpPVYDJgSKkVs+BWpifnde331gFb+taCvFy2w9BkhHgtUEmsoLWIPmPpiACY8jpR OT8IkhGQEhoAM++qFl4bydBI+v3fQouV -----END CERTIFICATE-----Generated at Thu Jun 5 19:23:55 2025 by rpki-client