$ rpki-client -vvf rpki.apnic.net/member_repository/A918233C/E6491FE2621411ECB006712CC4F9AE02/_NTfjrSqZK9Wt9DHMm4pEEVDzFU.mft File: _NTfjrSqZK9Wt9DHMm4pEEVDzFU.mft (raw, json) Hash identifier: gwF1RvwJo1MlK+ZUQ9fw4Q9F0cIu2GhtbsffbMGcAv8= Subject key identifier: 71:B8:04:29:FE:E1:A3:80:14:FB:8A:D4:94:0D:D0:75:F6:D4:FF:B1 Authority key identifier: FC:D4:DF:8E:B4:AA:64:AF:56:B7:D0:C7:32:6E:29:10:45:43:CC:55 Certificate issuer: /CN=A918233C/serialNumber=FCD4DF8EB4AA64AF56B7D0C7326E29104543CC55 Certificate serial: 20 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_NTfjrSqZK9Wt9DHMm4pEEVDzFU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918233C/E6491FE2621411ECB006712CC4F9AE02/_NTfjrSqZK9Wt9DHMm4pEEVDzFU.mft Manifest number: 0452 Signing time: Thu 05 Jun 2025 00:12:20 +0000 Manifest this update: Thu 05 Jun 2025 00:12:19 +0000 Manifest next update: Thu 12 Jun 2025 00:12:19 +0000 Files and hashes: 1: _NTfjrSqZK9Wt9DHMm4pEEVDzFU.crl (hash: rGAxWpdP/QX+GRNNqVruc/VNcmwmYF3MOZ7Ee63JI84=) 2: 34E594A215C511F09562D30FC4F9AE02.roa (hash: hO8cBpPkkXeK8WAFYmWHFGS1BpcqmFyN9GM5+DFTdqE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918233C/E6491FE2621411ECB006712CC4F9AE02/_NTfjrSqZK9Wt9DHMm4pEEVDzFU.crl rsync://rpki.apnic.net/member_repository/A918233C/E6491FE2621411ECB006712CC4F9AE02/_NTfjrSqZK9Wt9DHMm4pEEVDzFU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_NTfjrSqZK9Wt9DHMm4pEEVDzFU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 12 Jun 2025 00:12:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32 (0x20) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918233C, serialNumber=FCD4DF8EB4AA64AF56B7D0C7326E29104543CC55 Validity Not Before: Jun 5 00:12:19 2025 GMT Not After : Jun 12 00:12:19 2025 GMT Subject: CN=6840e0e3-7098 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:82:60:7b:2a:ce:e3:24:84:7f:dd:9f:4d:23: 53:4d:cc:45:a0:3f:ac:4b:d5:55:89:1a:3c:90:8e: 6d:58:f2:3b:49:c1:13:29:f2:7a:15:bb:a5:df:ef: 18:84:ff:c8:20:a8:a5:f8:fb:bd:f4:dd:10:2b:85: 02:d3:c1:c6:38:90:84:3b:7d:d1:b4:d9:04:28:5c: 72:d6:bf:f8:fa:75:2c:95:74:11:a0:90:bf:9d:b2: a7:24:f7:44:c3:37:8b:40:7b:68:f1:47:9d:67:cf: 64:cf:05:52:4a:02:e3:21:75:72:f1:68:57:ad:29: 17:fd:7c:a2:d5:6c:15:23:c2:72:b6:03:68:d6:74: 01:57:93:bd:81:b7:87:2b:cd:21:41:31:e4:e7:94: 6c:a2:ed:1c:bf:9d:d3:95:db:f4:18:c3:f9:57:61: 5e:a8:f6:21:89:b8:7b:5a:e1:6d:35:c9:56:ca:86: 88:6f:b5:24:4a:8c:5c:1e:0c:ee:87:cf:dc:56:5a: 8e:b1:32:7a:1b:d6:32:a7:c0:fb:9c:f4:68:4b:46: 82:97:7a:3c:60:5d:88:03:3d:12:a8:bd:02:85:19: ce:e3:8f:36:70:e5:30:41:18:a5:31:55:98:6a:3d: e1:c7:68:91:5b:02:f6:e0:2e:a4:49:b0:19:75:cb: 50:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:B8:04:29:FE:E1:A3:80:14:FB:8A:D4:94:0D:D0:75:F6:D4:FF:B1 X509v3 Authority Key Identifier: keyid:FC:D4:DF:8E:B4:AA:64:AF:56:B7:D0:C7:32:6E:29:10:45:43:CC:55 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918233C/E6491FE2621411ECB006712CC4F9AE02/_NTfjrSqZK9Wt9DHMm4pEEVDzFU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_NTfjrSqZK9Wt9DHMm4pEEVDzFU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918233C/E6491FE2621411ECB006712CC4F9AE02/_NTfjrSqZK9Wt9DHMm4pEEVDzFU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 59:ce:69:82:93:d4:e5:1e:44:9c:5e:17:43:2c:3b:f8:90:91: fd:0a:12:a9:d4:da:80:f5:1e:ce:d3:bb:79:a2:8e:dc:52:63: 63:c6:3c:91:1f:8f:15:db:8a:06:92:d3:9e:6d:07:55:bd:7e: ef:23:51:15:99:84:87:18:e0:53:15:5f:bd:1b:e3:9b:65:4e: 88:00:05:c5:a4:e4:f9:97:eb:06:fa:1b:b7:af:4a:e6:e2:c9: 2e:a3:08:e9:32:ad:6b:3b:b6:4a:50:68:78:7e:d6:55:8b:75: 3b:08:3b:8a:9e:1c:2f:19:94:72:cd:bd:83:b3:cf:67:26:6f: 7d:b5:b3:9f:81:3e:30:d6:69:69:d7:68:a6:76:b7:8b:d3:33: fc:57:c3:f7:cf:e0:08:b5:a5:60:36:dc:df:aa:1d:6b:aa:ef: f4:36:c4:fc:d3:f5:b7:72:97:8a:d0:96:9f:a4:28:b5:f4:4a: 5d:b2:f2:0d:19:cb:47:58:99:42:85:6a:56:31:93:a8:83:b0: fd:bc:3b:8d:43:0f:13:4b:aa:68:4d:f1:da:3e:cf:c6:cd:6e: 7e:f3:b9:b9:57:92:e2:77:b9:df:f4:59:27:03:10:0f:4e:85: df:f2:64:39:e0:12:62:1c:bd:83:5f:99:7a:5e:01:cc:ae:76: 2c:17:c4:3e -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBIDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 MjMzQzExMC8GA1UEBRMoRkNENERGOEVCNEFBNjRBRjU2QjdEMEM3MzI2RTI5MTA0 NTQzQ0M1NTAeFw0yNTA2MDUwMDEyMTlaFw0yNTA2MTIwMDEyMTlaMBgxFjAUBgNV BAMTDTY4NDBlMGUzLTcwOTgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCogmB7Ks7jJIR/3Z9NI1NNzEWgP6xL1VWJGjyQjm1Y8jtJwRMp8noVu6Xf7xiE /8ggqKX4+7303RArhQLTwcY4kIQ7fdG02QQoXHLWv/j6dSyVdBGgkL+dsqck90TD N4tAe2jxR51nz2TPBVJKAuMhdXLxaFetKRf9fKLVbBUjwnK2A2jWdAFXk72Bt4cr zSFBMeTnlGyi7Ry/ndOV2/QYw/lXYV6o9iGJuHta4W01yVbKhohvtSRKjFweDO6H z9xWWo6xMnob1jKnwPuc9GhLRoKXejxgXYgDPRKovQKFGc7jjzZw5TBBGKUxVZhq PeHHaJFbAvbgLqRJsBl1y1DvAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUcbgEKf7h o4AU+4rUlA3QdfbU/7EwHwYDVR0jBBgwFoAU/NTfjrSqZK9Wt9DHMm4pEEVDzFUw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTgyMzNDL0U2NDkxRkUyNjIx NDExRUNCMDA2NzEyQ0M0RjlBRTAyL19OVGZqclNxWks5V3Q5REhNbTRwRUVWRHpG VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvX05UZmpyU3FaSzlXdDlESE1tNHBFRVZEekZVLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTgy MzNDL0U2NDkxRkUyNjIxNDExRUNCMDA2NzEyQ0M0RjlBRTAyL19OVGZqclNxWks5 V3Q5REhNbTRwRUVWRHpGVS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAFnOaYKT1OUeRJxeF0MsO/iQkf0KEqnU2oD1Hs7Tu3mijtxSY2PGPJEf jxXbigaS055tB1W9fu8jURWZhIcY4FMVX70b45tlTogABcWk5PmX6wb6G7evSubi yS6jCOkyrWs7tkpQaHh+1lWLdTsIO4qeHC8ZlHLNvYOzz2cmb321s5+BPjDWaWnX aKZ2t4vTM/xXw/fP4Ai1pWA23N+qHWuq7/Q2xPzT9bdyl4rQlp+kKLX0Sl2y8g0Z y0dYmUKFalYxk6iDsP28O41DDxNLqmhN8do+z8bNbn7zublXkuJ3ud/0WScDEA9O hd/yZDngEmIcvYNfmXpeAcyudiwXxD4= -----END CERTIFICATE-----Generated at Thu Jun 5 19:58:31 2025 by rpki-client