$ rpki-client -vvf rpki.apnic.net/member_repository/A9186980/CB006D621CD811EB96C7945AC4F9AE02/cNFtdzeYmxXGyN8dyiqYDgu_ug8.mft File: cNFtdzeYmxXGyN8dyiqYDgu_ug8.mft (raw, json) Hash identifier: px6ePeAdXVOCPzl6dh2QTvr3x5F4VkVCpX/150qdMXA= Subject key identifier: 40:56:00:5E:C1:90:75:2D:F6:08:42:F0:DC:9D:27:6A:25:31:4D:56 Authority key identifier: 70:D1:6D:77:37:98:9B:15:C6:C8:DF:1D:CA:2A:98:0E:0B:BF:BA:0F Certificate issuer: /CN=A9186980/serialNumber=70D16D7737989B15C6C8DF1DCA2A980E0BBFBA0F Certificate serial: 0761 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cNFtdzeYmxXGyN8dyiqYDgu_ug8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9186980/CB006D621CD811EB96C7945AC4F9AE02/cNFtdzeYmxXGyN8dyiqYDgu_ug8.mft Manifest number: 075E Signing time: Fri 30 May 2025 21:47:46 +0000 Manifest this update: Fri 30 May 2025 21:47:45 +0000 Manifest next update: Fri 06 Jun 2025 21:47:45 +0000 Files and hashes: 1: cNFtdzeYmxXGyN8dyiqYDgu_ug8.crl (hash: StKl1ZPe3Texlyp4COIj97ohuJZ0J9wgqYd3xp6hkHE=) 2: FFA6AD56DF7211EDB0D24244C4F9AE02.roa (hash: q05bnDBuCJsrUlvlSely8w0jnLrUU3dVN/rTyJ4umLg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9186980/CB006D621CD811EB96C7945AC4F9AE02/cNFtdzeYmxXGyN8dyiqYDgu_ug8.crl rsync://rpki.apnic.net/member_repository/A9186980/CB006D621CD811EB96C7945AC4F9AE02/cNFtdzeYmxXGyN8dyiqYDgu_ug8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cNFtdzeYmxXGyN8dyiqYDgu_ug8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 21:47:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1889 (0x761) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9186980, serialNumber=70D16D7737989B15C6C8DF1DCA2A980E0BBFBA0F Validity Not Before: May 30 21:47:45 2025 GMT Not After : Jun 6 21:47:45 2025 GMT Subject: CN=683a2782-4944 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:01:0f:2f:0e:a6:57:3d:5f:b1:5f:57:bf:ad: 9b:57:8b:26:e2:a6:da:0f:73:70:1d:52:d5:3e:d3: d2:69:0c:98:d7:15:66:a5:b5:3c:4c:28:56:90:e5: d6:c1:87:96:21:41:de:79:39:9e:b9:c7:b0:19:9a: 1e:6a:4d:a3:02:d7:6a:b3:b7:06:e0:39:d9:be:ab: 48:92:69:76:12:f9:9a:ae:b2:01:71:f0:d0:76:d1: c1:60:2a:5b:05:23:5f:f3:18:c1:d5:85:74:bc:41: 06:90:e2:b5:aa:1e:c8:50:8e:97:8b:d7:64:e2:95: 09:fd:4e:e6:ce:47:34:31:8e:39:5e:6c:96:59:ad: 7b:e7:b0:91:c5:f4:bf:51:61:1e:5f:5b:42:7f:05: fe:a4:00:e5:94:73:3f:a2:88:c4:35:90:9f:b7:e9: ec:12:57:22:a9:23:1b:95:77:1b:b4:8f:25:da:cf: 12:a0:3a:4a:3d:42:aa:9a:a8:1b:fd:36:ad:0c:a9: fd:ab:5b:ba:e6:5f:36:41:5f:17:60:6e:47:89:9a: f3:4f:38:94:76:0f:30:a5:2b:96:a3:36:c0:dd:65: 02:94:d2:10:e7:9c:a4:9d:a7:eb:0d:e0:bf:5d:fc: aa:ae:78:62:ea:a6:a4:9d:6e:94:b4:50:cb:f0:94: d9:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:56:00:5E:C1:90:75:2D:F6:08:42:F0:DC:9D:27:6A:25:31:4D:56 X509v3 Authority Key Identifier: keyid:70:D1:6D:77:37:98:9B:15:C6:C8:DF:1D:CA:2A:98:0E:0B:BF:BA:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9186980/CB006D621CD811EB96C7945AC4F9AE02/cNFtdzeYmxXGyN8dyiqYDgu_ug8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cNFtdzeYmxXGyN8dyiqYDgu_ug8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186980/CB006D621CD811EB96C7945AC4F9AE02/cNFtdzeYmxXGyN8dyiqYDgu_ug8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a9:0d:12:bd:06:ec:e4:e4:8f:98:8a:e6:fa:11:08:ae:17:fe: 9b:17:7a:ad:9b:27:0d:bb:3f:f8:d2:3f:15:49:2b:66:9f:3c: af:73:a8:bf:b4:d9:0a:3a:31:76:8b:75:7a:a7:00:ae:a5:d8: 61:db:b6:eb:36:76:3d:20:e1:67:46:78:7d:ce:3c:88:40:64: 96:0f:18:49:07:3c:3b:d1:68:57:5c:39:5c:cc:c6:8a:35:9d: 7c:31:8f:dc:7e:6a:ed:4f:a2:72:9e:5d:16:f2:44:6a:bb:f7: 85:cb:ad:c3:76:a1:d3:35:50:90:b8:b2:c3:c5:96:91:c3:4c: d2:13:a0:ec:cd:a0:04:79:0b:2c:2f:3d:8c:73:19:a9:c3:6f: fd:97:21:96:7f:0b:32:dc:13:bf:d1:74:8d:7b:0d:b9:4f:fb: db:64:dc:99:88:c0:b3:41:05:4d:19:82:2a:fd:aa:11:c5:2d: a6:40:60:c2:77:c8:f1:71:47:40:a3:93:b9:53:71:a6:1d:fd: 31:7a:73:73:aa:d2:9f:d7:5d:d8:b8:8c:ba:58:67:8f:76:18: ac:7a:ea:b8:96:74:9c:bc:1c:c0:ca:a0:f8:3c:b7:f4:bc:17: 61:16:77:dd:80:36:6c:3f:d4:52:b6:7e:2b:3f:96:d5:13:c4: 0a:b0:7e:ea -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB2EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODY5ODAxMTAvBgNVBAUTKDcwRDE2RDc3Mzc5ODlCMTVDNkM4REYxRENBMkE5ODBF MEJCRkJBMEYwHhcNMjUwNTMwMjE0NzQ1WhcNMjUwNjA2MjE0NzQ1WjAYMRYwFAYD VQQDEw02ODNhMjc4Mi00OTQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArgEPLw6mVz1fsV9Xv62bV4sm4qbaD3NwHVLVPtPSaQyY1xVmpbU8TChWkOXW wYeWIUHeeTmeucewGZoeak2jAtdqs7cG4DnZvqtIkml2EvmarrIBcfDQdtHBYCpb BSNf8xjB1YV0vEEGkOK1qh7IUI6Xi9dk4pUJ/U7mzkc0MY45XmyWWa1757CRxfS/ UWEeX1tCfwX+pADllHM/oojENZCft+nsElciqSMblXcbtI8l2s8SoDpKPUKqmqgb /TatDKn9q1u65l82QV8XYG5HiZrzTziUdg8wpSuWozbA3WUClNIQ55yknafrDeC/ Xfyqrnhi6qaknW6UtFDL8JTZmwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEBWAF7B kHUt9ghC8NydJ2olMU1WMB8GA1UdIwQYMBaAFHDRbXc3mJsVxsjfHcoqmA4Lv7oP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4Njk4MC9DQjAwNkQ2MjFD RDgxMUVCOTZDNzk0NUFDNEY5QUUwMi9jTkZ0ZHplWW14WEd5TjhkeWlxWURndV91 ZzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NORnRkemVZbXhYR3lOOGR5aXFZRGd1X3VnOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 Njk4MC9DQjAwNkQ2MjFDRDgxMUVCOTZDNzk0NUFDNEY5QUUwMi9jTkZ0ZHplWW14 WEd5TjhkeWlxWURndV91ZzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCpDRK9Buzk5I+Yiub6EQiuF/6bF3qtmycNuz/40j8VSStmnzyvc6i/ tNkKOjF2i3V6pwCupdhh27brNnY9IOFnRnh9zjyIQGSWDxhJBzw70WhXXDlczMaK NZ18MY/cfmrtT6Jynl0W8kRqu/eFy63DdqHTNVCQuLLDxZaRw0zSE6DszaAEeQss Lz2Mcxmpw2/9lyGWfwsy3BO/0XSNew25T/vbZNyZiMCzQQVNGYIq/aoRxS2mQGDC d8jxcUdAo5O5U3GmHf0xenNzqtKf113YuIy6WGePdhiseuq4lnScvBzAyqD4PLf0 vBdhFnfdgDZsP9RStn4rP5bVE8QKsH7q -----END CERTIFICATE-----Generated at Sat May 31 16:57:51 2025 by rpki-client