$ rpki-client -vvf rpki.apnic.net/member_repository/A917D958/672DB048B39B11EF80F6435EC4F9AE02/n0kGwNTMlkXZv9kzZKI6WjPvWNs.mft File: n0kGwNTMlkXZv9kzZKI6WjPvWNs.mft (raw, json) Hash identifier: LQwVGLReinqHoGRcDLUKHcVpm9+1a3h9+iVXdL54X/8= Subject key identifier: 4F:AD:51:C5:CC:E6:FB:98:23:1C:CE:4F:FE:E5:39:B6:23:8F:8E:6E Authority key identifier: 9F:49:06:C0:D4:CC:96:45:D9:BF:D9:33:64:A2:3A:5A:33:EF:58:DB Certificate issuer: /CN=A917D958/serialNumber=9F4906C0D4CC9645D9BFD93364A23A5A33EF58DB Certificate serial: 62 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/n0kGwNTMlkXZv9kzZKI6WjPvWNs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917D958/672DB048B39B11EF80F6435EC4F9AE02/n0kGwNTMlkXZv9kzZKI6WjPvWNs.mft Manifest number: 5F Signing time: Sun 01 Jun 2025 06:52:31 +0000 Manifest this update: Sun 01 Jun 2025 06:52:31 +0000 Manifest next update: Sun 08 Jun 2025 06:52:31 +0000 Files and hashes: 1: n0kGwNTMlkXZv9kzZKI6WjPvWNs.crl (hash: nwg9UprSPGnB95O1dqWjO1lD4DPuBs9ztTt009UAkEE=) 2: 0AC8BB74B5E211EFBEF4BC5AC4F9AE02.roa (hash: oV9dv3enUEk5QI7ZEWYNcHlwdjoeFV6bdPfVFfihoSE=) 3: 0A581522B5E211EFBEF4BC5AC4F9AE02.roa (hash: PxzOBVWe5yWGLa4iNAyNqYyPaQ/eMXGqSREN7aFVLso=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917D958/672DB048B39B11EF80F6435EC4F9AE02/n0kGwNTMlkXZv9kzZKI6WjPvWNs.crl rsync://rpki.apnic.net/member_repository/A917D958/672DB048B39B11EF80F6435EC4F9AE02/n0kGwNTMlkXZv9kzZKI6WjPvWNs.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/n0kGwNTMlkXZv9kzZKI6WjPvWNs.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Jun 2025 06:52:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 98 (0x62) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917D958, serialNumber=9F4906C0D4CC9645D9BFD93364A23A5A33EF58DB Validity Not Before: Jun 1 06:52:31 2025 GMT Not After : Jun 8 06:52:31 2025 GMT Subject: CN=683bf8af-cd98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:6a:a2:88:9b:63:cf:11:f1:5c:32:1a:18:43: 34:9d:63:c7:60:73:98:fd:79:b2:d5:dd:41:39:1e: 8e:a9:a5:1c:9d:42:0d:4e:b4:25:9d:8b:37:35:e7: 5e:ac:8b:7a:2c:8e:54:1f:b9:fb:cd:0b:bd:0d:a6: eb:c5:4e:2c:64:bb:e7:fc:d7:e6:83:87:ef:50:12: 2d:88:22:26:e7:b7:9e:ce:af:7c:4f:48:52:88:ec: d8:15:e1:d8:b2:ee:cb:46:b3:03:61:21:54:f2:2f: b6:19:92:49:5a:08:38:90:92:f9:b0:17:85:df:a2: 30:2e:00:ac:c7:6a:cc:65:d8:25:ed:e9:5d:3c:1c: cf:57:f6:ab:07:61:5f:bd:d1:39:6e:12:24:53:15: b8:43:5f:7d:e4:72:2d:5d:f1:17:34:6d:de:7e:9e: c3:68:90:72:03:d8:96:f1:bf:00:5b:f6:26:53:dc: 01:57:8a:26:c7:92:2b:1f:31:a5:d3:e0:75:72:57: 5c:b6:f3:02:b2:36:bf:89:ae:16:5c:0f:30:0c:71: 18:94:03:97:22:2c:11:c6:4c:5a:f2:7e:ce:1b:34: 25:57:36:6d:ec:47:79:43:ab:e6:bf:1d:54:63:cd: e3:90:f3:2c:a0:4d:d9:c6:35:65:95:13:e4:2c:d3: bc:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:AD:51:C5:CC:E6:FB:98:23:1C:CE:4F:FE:E5:39:B6:23:8F:8E:6E X509v3 Authority Key Identifier: keyid:9F:49:06:C0:D4:CC:96:45:D9:BF:D9:33:64:A2:3A:5A:33:EF:58:DB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917D958/672DB048B39B11EF80F6435EC4F9AE02/n0kGwNTMlkXZv9kzZKI6WjPvWNs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/n0kGwNTMlkXZv9kzZKI6WjPvWNs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917D958/672DB048B39B11EF80F6435EC4F9AE02/n0kGwNTMlkXZv9kzZKI6WjPvWNs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 32:63:af:98:18:65:fc:79:ee:0b:9c:59:0f:28:67:ac:65:11: 7c:77:a2:42:96:c9:86:4f:52:62:5e:a1:db:9f:af:d6:2e:e7: 93:02:e1:fc:aa:10:c8:fc:4d:b6:95:23:f1:4a:e4:45:c0:7b: 5f:11:87:fe:8a:af:aa:51:c6:c5:e7:8a:d1:b1:da:37:71:34: a4:09:85:85:d0:2f:df:4a:0c:32:83:05:1e:b1:25:90:d6:f8: d0:76:4d:a6:a6:1c:86:3d:a6:12:fe:37:67:a4:df:78:e3:d5: 07:bf:f9:ec:36:65:31:c9:c3:10:e8:6c:64:7f:9f:d9:d9:34: 06:80:42:10:73:dc:0e:bf:39:70:51:cc:b5:77:1e:c5:1b:62: e6:d2:7e:a3:c5:8b:41:4f:c0:1a:fe:66:12:e0:87:7f:d1:d9: 50:5b:92:74:b1:a4:7f:e8:10:28:be:89:7d:5c:2d:b8:fc:8d: a3:32:b7:f2:9f:b1:cb:4e:4a:51:3f:97:0c:be:3a:09:cf:b5: e5:09:eb:9f:9a:15:3a:ae:53:7a:4c:b0:a4:01:0d:66:eb:05: a3:6f:2f:5d:06:06:2a:b5:e6:71:7a:6b:2f:be:20:81:9d:22: 4e:31:d9:6e:b3:ec:74:fa:e6:be:08:62:d7:c5:d8:fb:9a:9a: 43:01:c7:85 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBYjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 RDk1ODExMC8GA1UEBRMoOUY0OTA2QzBENENDOTY0NUQ5QkZEOTMzNjRBMjNBNUEz M0VGNThEQjAeFw0yNTA2MDEwNjUyMzFaFw0yNTA2MDgwNjUyMzFaMBgxFjAUBgNV BAMTDTY4M2JmOGFmLWNkOTgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCxaqKIm2PPEfFcMhoYQzSdY8dgc5j9ebLV3UE5Ho6ppRydQg1OtCWdizc1516s i3osjlQfufvNC70NpuvFTixku+f81+aDh+9QEi2IIibnt57Or3xPSFKI7NgV4diy 7stGswNhIVTyL7YZkklaCDiQkvmwF4XfojAuAKzHasxl2CXt6V08HM9X9qsHYV+9 0TluEiRTFbhDX33kci1d8Rc0bd5+nsNokHID2JbxvwBb9iZT3AFXiibHkisfMaXT 4HVyV1y28wKyNr+JrhZcDzAMcRiUA5ciLBHGTFryfs4bNCVXNm3sR3lDq+a/HVRj zeOQ8yygTdnGNWWVE+Qs07xjAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUT61Rxczm +5gjHM5P/uU5tiOPjm4wHwYDVR0jBBgwFoAUn0kGwNTMlkXZv9kzZKI6WjPvWNsw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdEOTU4LzY3MkRCMDQ4QjM5 QjExRUY4MEY2NDM1RUM0RjlBRTAyL24wa0d3TlRNbGtYWnY5a3paS0k2V2pQdldO cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvbjBrR3dOVE1sa1hadjlrelpLSTZXalB2V05zLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdE OTU4LzY3MkRCMDQ4QjM5QjExRUY4MEY2NDM1RUM0RjlBRTAyL24wa0d3TlRNbGtY WnY5a3paS0k2V2pQdldOcy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBADJjr5gYZfx57gucWQ8oZ6xlEXx3okKWyYZPUmJeodufr9Yu55MC4fyq EMj8TbaVI/FK5EXAe18Rh/6Kr6pRxsXnitGx2jdxNKQJhYXQL99KDDKDBR6xJZDW +NB2TaamHIY9phL+N2ek33jj1Qe/+ew2ZTHJwxDobGR/n9nZNAaAQhBz3A6/OXBR zLV3HsUbYubSfqPFi0FPwBr+ZhLgh3/R2VBbknSxpH/oECi+iX1cLbj8jaMyt/Kf sctOSlE/lwy+OgnPteUJ65+aFTquU3pMsKQBDWbrBaNvL10GBiq15nF6ay++IIGd Ik4x2W6z7HT65r4IYtfF2PuamkMBx4U= -----END CERTIFICATE-----Generated at Mon Jun 2 20:34:43 2025 by rpki-client