$ rpki-client -vvf rpki.apnic.net/member_repository/A917FFBF/ED52F030C5F411EC8E80D886C4F9AE02/nPqGncMGNX16wwkuT__QTKUCd14.mft File: nPqGncMGNX16wwkuT__QTKUCd14.mft (raw, json) Hash identifier: MxkJBvLI1SHJsGLr0OwxBrzKAdGty84S+IUatpcbRpk= Subject key identifier: 4B:16:41:3B:39:BA:0C:99:3A:44:18:65:A1:05:67:B2:4D:A6:62:E2 Authority key identifier: 9C:FA:86:9D:C3:06:35:7D:7A:C3:09:2E:4F:FF:D0:4C:A5:02:77:5E Certificate issuer: /CN=A917FFBF/serialNumber=9CFA869DC306357D7AC3092E4FFFD04CA502775E Certificate serial: 0332 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nPqGncMGNX16wwkuT__QTKUCd14.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917FFBF/ED52F030C5F411EC8E80D886C4F9AE02/nPqGncMGNX16wwkuT__QTKUCd14.mft Manifest number: 032E Signing time: Sat 31 May 2025 01:17:00 +0000 Manifest this update: Sat 31 May 2025 01:17:00 +0000 Manifest next update: Sat 07 Jun 2025 01:17:00 +0000 Files and hashes: 1: nPqGncMGNX16wwkuT__QTKUCd14.crl (hash: 2Nx5+/xs8DgAbCOT/s7RzwnWZ9VyZftbLeznlBg7ekM=) 2: 6AE91888C5FC11EC9127557EC4F9AE02.roa (hash: Upjs7verB9kHZN2eaB1a6dX0s9sFshQhi4VCB4ap3GQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917FFBF/ED52F030C5F411EC8E80D886C4F9AE02/nPqGncMGNX16wwkuT__QTKUCd14.crl rsync://rpki.apnic.net/member_repository/A917FFBF/ED52F030C5F411EC8E80D886C4F9AE02/nPqGncMGNX16wwkuT__QTKUCd14.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nPqGncMGNX16wwkuT__QTKUCd14.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 01:16:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 818 (0x332) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917FFBF, serialNumber=9CFA869DC306357D7AC3092E4FFFD04CA502775E Validity Not Before: May 31 01:17:00 2025 GMT Not After : Jun 7 01:17:00 2025 GMT Subject: CN=683a588c-1bdb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:7e:4c:0a:0f:c2:86:a1:cd:b9:22:1b:26:2d: 62:2e:7d:35:13:19:20:13:4c:b6:7f:7b:42:58:c9: 14:f3:9e:d3:e4:9e:fc:57:95:a0:79:d6:51:d2:2d: 82:bf:dc:77:20:09:86:58:ea:77:c6:ed:77:03:f6: 6b:66:0e:7d:c5:b2:d9:ba:47:94:b9:4a:ab:6e:97: 92:e2:03:23:96:68:8a:24:87:17:3e:54:45:d2:09: d9:9e:17:31:f5:69:18:b6:2f:2a:d2:6f:15:b4:10: 0b:77:ad:df:b2:9b:3b:7f:ee:70:46:15:3b:43:6b: 30:fe:62:56:d0:f4:da:44:82:6e:17:12:1d:92:3f: e0:fa:8e:13:20:f8:60:e7:78:5d:57:f0:1e:bb:af: c4:c3:0d:50:91:4b:8b:96:4e:8f:c0:4a:fd:8e:e4: cf:88:5b:ed:d6:f2:43:fd:8d:b9:bf:7f:e7:9c:40: d2:89:4c:d5:1d:2f:8e:2b:15:c7:60:f8:1e:a5:58: 5d:a9:47:b1:cb:93:51:5f:d9:b1:4c:2d:7e:ef:cb: 55:eb:c1:4f:28:30:ec:ce:f2:3c:d3:2b:cc:1a:35: 3d:85:a1:66:43:db:09:e0:91:9b:88:80:ac:30:68: 9f:8a:93:ac:d7:b7:c4:70:92:9b:53:9e:ed:7f:c8: 1f:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:16:41:3B:39:BA:0C:99:3A:44:18:65:A1:05:67:B2:4D:A6:62:E2 X509v3 Authority Key Identifier: keyid:9C:FA:86:9D:C3:06:35:7D:7A:C3:09:2E:4F:FF:D0:4C:A5:02:77:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917FFBF/ED52F030C5F411EC8E80D886C4F9AE02/nPqGncMGNX16wwkuT__QTKUCd14.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nPqGncMGNX16wwkuT__QTKUCd14.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917FFBF/ED52F030C5F411EC8E80D886C4F9AE02/nPqGncMGNX16wwkuT__QTKUCd14.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 26:68:dd:ea:b6:3c:92:a7:55:ba:69:28:bc:b1:a9:e6:02:b6: 45:3d:dd:34:0e:47:37:83:b0:bf:6f:03:c5:a7:67:a5:d3:d1: d7:dc:1a:77:9c:5f:a8:c9:56:56:d1:0e:78:5b:ff:81:57:1c: 3d:35:25:73:2d:b2:99:b6:92:3c:75:52:6c:20:39:79:b3:8a: 6c:4a:3d:33:51:13:a3:18:1f:66:2b:42:b6:f0:43:8d:52:56: 0f:f5:e2:bf:79:91:e4:d1:ea:e0:dd:2f:89:8c:44:ac:f6:ea: 6b:ac:01:a5:dd:f4:33:67:b7:86:0d:cb:58:be:5d:5e:02:09: 62:7b:89:78:b0:81:3f:c5:08:b8:18:55:b3:82:6d:57:da:d5: b9:ca:7d:68:26:a1:60:94:ef:0f:74:36:68:c2:77:98:79:c4: 93:3f:94:4e:de:e2:fe:b5:13:45:57:b8:a7:52:dd:b2:2f:f4: 25:d8:2b:d4:85:cb:e2:ca:fc:44:be:f1:ee:7f:e1:1f:69:83: 05:08:28:85:fe:a5:d4:05:df:fb:ad:22:91:d8:63:43:76:a1: 10:74:1b:41:29:8d:72:9e:6a:1e:71:12:68:ef:2f:6a:e8:71: 42:bc:83:34:f0:a9:06:89:c2:d9:3f:26:c9:62:0d:35:88:4e: 1b:b7:ca:40 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAzIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0ZGQkYxMTAvBgNVBAUTKDlDRkE4NjlEQzMwNjM1N0Q3QUMzMDkyRTRGRkZEMDRD QTUwMjc3NUUwHhcNMjUwNTMxMDExNzAwWhcNMjUwNjA3MDExNzAwWjAYMRYwFAYD VQQDEw02ODNhNTg4Yy0xYmRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqX5MCg/ChqHNuSIbJi1iLn01ExkgE0y2f3tCWMkU857T5J78V5WgedZR0i2C v9x3IAmGWOp3xu13A/ZrZg59xbLZukeUuUqrbpeS4gMjlmiKJIcXPlRF0gnZnhcx 9WkYti8q0m8VtBALd63fsps7f+5wRhU7Q2sw/mJW0PTaRIJuFxIdkj/g+o4TIPhg 53hdV/Aeu6/Eww1QkUuLlk6PwEr9juTPiFvt1vJD/Y25v3/nnEDSiUzVHS+OKxXH YPgepVhdqUexy5NRX9mxTC1+78tV68FPKDDszvI80yvMGjU9haFmQ9sJ4JGbiICs MGifipOs17fEcJKbU57tf8gf0QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEsWQTs5 ugyZOkQYZaEFZ7JNpmLiMB8GA1UdIwQYMBaAFJz6hp3DBjV9esMJLk//0EylAnde MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RkZCRi9FRDUyRjAzMEM1 RjQxMUVDOEU4MEQ4ODZDNEY5QUUwMi9uUHFHbmNNR05YMTZ3d2t1VF9fUVRLVUNk MTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25QcUduY01HTlgxNnd3a3VUX19RVEtVQ2QxNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RkZCRi9FRDUyRjAzMEM1RjQxMUVDOEU4MEQ4ODZDNEY5QUUwMi9uUHFHbmNNR05Y MTZ3d2t1VF9fUVRLVUNkMTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAmaN3qtjySp1W6aSi8sanmArZFPd00Dkc3g7C/bwPFp2el09HX3Bp3 nF+oyVZW0Q54W/+BVxw9NSVzLbKZtpI8dVJsIDl5s4psSj0zUROjGB9mK0K28EON UlYP9eK/eZHk0erg3S+JjESs9uprrAGl3fQzZ7eGDctYvl1eAglie4l4sIE/xQi4 GFWzgm1X2tW5yn1oJqFglO8PdDZowneYecSTP5RO3uL+tRNFV7inUt2yL/Ql2CvU hcviyvxEvvHuf+EfaYMFCCiF/qXUBd/7rSKR2GNDdqEQdBtBKY1ynmoecRJo7y9q 6HFCvIM08KkGicLZPybJYg01iE4bt8pA -----END CERTIFICATE-----Generated at Sat May 31 17:36:00 2025 by rpki-client