$ rpki-client -vvf rpki.apnic.net/member_repository/A918ACDD/2A2CFC464DCF11EDBF05FA53C4F9AE02/NpFTMwCsweAQXuAxcGNQf4e0AS0.mft File: NpFTMwCsweAQXuAxcGNQf4e0AS0.mft (raw, json) Hash identifier: bEGZg7ae8ErAMq8drPMZu8VhZfqIilvH2KKj8ScmADY= Subject key identifier: 53:2E:57:76:22:0D:EF:AF:94:78:E1:F0:86:FF:0E:21:3B:9E:47:0E Authority key identifier: 36:91:53:33:00:AC:C1:E0:10:5E:E0:31:70:63:50:7F:87:B4:01:2D Certificate issuer: /CN=A918ACDD/serialNumber=3691533300ACC1E0105EE0317063507F87B4012D Certificate serial: 01F2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NpFTMwCsweAQXuAxcGNQf4e0AS0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918ACDD/2A2CFC464DCF11EDBF05FA53C4F9AE02/NpFTMwCsweAQXuAxcGNQf4e0AS0.mft Manifest number: 01EE Signing time: Sat 31 May 2025 02:18:26 +0000 Manifest this update: Sat 31 May 2025 02:18:26 +0000 Manifest next update: Sat 07 Jun 2025 02:18:26 +0000 Files and hashes: 1: NpFTMwCsweAQXuAxcGNQf4e0AS0.crl (hash: Ht8DYG2US0jOCX51d45XS8O36swojXEfxeBDdMXQf4o=) 2: 397504CA4DD211ED8314A659C4F9AE02.roa (hash: IA7ndlMtzlimkIY6svrVtb7hYj1DKuX/Dcj54QQRijI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918ACDD/2A2CFC464DCF11EDBF05FA53C4F9AE02/NpFTMwCsweAQXuAxcGNQf4e0AS0.crl rsync://rpki.apnic.net/member_repository/A918ACDD/2A2CFC464DCF11EDBF05FA53C4F9AE02/NpFTMwCsweAQXuAxcGNQf4e0AS0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NpFTMwCsweAQXuAxcGNQf4e0AS0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 02:18:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 498 (0x1f2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918ACDD, serialNumber=3691533300ACC1E0105EE0317063507F87B4012D Validity Not Before: May 31 02:18:26 2025 GMT Not After : Jun 7 02:18:26 2025 GMT Subject: CN=683a66f2-3bfa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:a6:46:aa:ac:ca:fb:6b:71:02:bf:63:74:18: b8:a4:2a:5f:4d:bb:cb:5d:6d:64:01:e3:20:b0:75: dc:93:4b:29:74:4d:82:dc:83:fc:14:24:2a:9c:1a: 1a:a1:65:ba:f2:4e:8d:42:10:dd:6d:ac:7b:8b:c4: 0e:6e:1b:de:7f:eb:89:39:88:bc:40:5d:49:3c:f4: e7:e3:15:ed:dc:06:79:68:86:71:a6:99:ff:00:98: ff:bb:d5:1a:63:d1:90:6b:e2:ef:c8:56:01:d2:ef: 22:9a:1f:23:a6:54:e6:62:75:a6:49:f5:8f:b7:f9: bc:3d:ca:8c:32:00:21:61:96:ec:d4:74:0f:fa:27: 11:49:78:31:a8:38:8d:db:2f:c4:26:11:eb:58:d6: 16:c6:c6:ee:e6:e0:db:61:9f:5e:08:c7:21:10:8d: 8e:a6:a8:e3:a3:b3:58:ec:35:da:d9:ad:fb:19:50: 76:81:ab:2a:a5:76:f3:f2:fe:26:da:15:5f:09:79: c3:58:d5:4e:16:68:07:ef:ea:76:18:80:a6:ab:2e: e5:e3:45:cb:2d:85:89:8f:36:62:56:a3:96:f1:36: f3:e8:0b:4f:d5:ee:07:ac:ee:04:d6:f9:85:d8:8a: a5:1c:3a:26:c7:b7:3a:9f:d2:91:90:4c:38:09:64: d7:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:2E:57:76:22:0D:EF:AF:94:78:E1:F0:86:FF:0E:21:3B:9E:47:0E X509v3 Authority Key Identifier: keyid:36:91:53:33:00:AC:C1:E0:10:5E:E0:31:70:63:50:7F:87:B4:01:2D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918ACDD/2A2CFC464DCF11EDBF05FA53C4F9AE02/NpFTMwCsweAQXuAxcGNQf4e0AS0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NpFTMwCsweAQXuAxcGNQf4e0AS0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918ACDD/2A2CFC464DCF11EDBF05FA53C4F9AE02/NpFTMwCsweAQXuAxcGNQf4e0AS0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8c:8b:ab:a8:69:b1:af:a4:fc:5f:ec:5f:85:7b:a2:36:e2:a5: 39:71:f6:62:f7:5f:d9:c5:f2:83:23:11:44:87:ff:39:d0:86: 4a:c2:78:36:85:4e:05:66:ff:da:6c:25:3e:ba:09:76:12:32: 7d:d9:e5:60:ab:52:67:31:fb:c2:6a:f4:c8:f7:3a:11:76:b5: 74:89:c7:9c:67:81:ba:ac:22:25:00:80:a8:df:ad:28:99:2e: 81:d5:04:6f:2a:22:e4:4e:a9:94:19:4f:9a:5b:50:b1:92:f2: 27:4f:56:a9:f1:ea:bd:8c:fc:94:42:d4:25:9a:da:e5:81:a4: 85:34:bf:01:86:d7:2f:67:bb:1f:fb:1a:81:a5:31:97:b1:60: 78:12:b9:c9:3f:1f:6f:88:05:35:b5:bc:79:13:bd:01:38:50: 2c:e1:f8:bd:cf:5b:d9:87:c4:7f:b2:a7:c7:56:e7:da:a2:92: a4:46:a1:63:06:f8:0b:72:12:0c:c9:10:2f:8b:19:df:17:00: a9:0d:92:b7:3c:c0:35:a9:f9:b9:d6:3a:97:bf:5c:f1:27:7c: 0b:2d:25:ef:95:a7:62:d0:a1:7f:06:42:d2:6a:9a:29:b1:ee: 0d:59:21:d2:a8:9b:8c:c6:cf:34:94:2e:ce:6c:5a:03:15:32: 67:77:b9:73 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAfIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEFDREQxMTAvBgNVBAUTKDM2OTE1MzMzMDBBQ0MxRTAxMDVFRTAzMTcwNjM1MDdG ODdCNDAxMkQwHhcNMjUwNTMxMDIxODI2WhcNMjUwNjA3MDIxODI2WjAYMRYwFAYD VQQDEw02ODNhNjZmMi0zYmZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz6ZGqqzK+2txAr9jdBi4pCpfTbvLXW1kAeMgsHXck0spdE2C3IP8FCQqnBoa oWW68k6NQhDdbax7i8QObhvef+uJOYi8QF1JPPTn4xXt3AZ5aIZxppn/AJj/u9Ua Y9GQa+LvyFYB0u8imh8jplTmYnWmSfWPt/m8PcqMMgAhYZbs1HQP+icRSXgxqDiN 2y/EJhHrWNYWxsbu5uDbYZ9eCMchEI2Opqjjo7NY7DXa2a37GVB2gasqpXbz8v4m 2hVfCXnDWNVOFmgH7+p2GICmqy7l40XLLYWJjzZiVqOW8Tbz6AtP1e4HrO4E1vmF 2IqlHDomx7c6n9KRkEw4CWTXHwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFMuV3Yi De+vlHjh8Ib/DiE7nkcOMB8GA1UdIwQYMBaAFDaRUzMArMHgEF7gMXBjUH+HtAEt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QUNERC8yQTJDRkM0NjRE Q0YxMUVEQkYwNUZBNTNDNEY5QUUwMi9OcEZUTXdDc3dlQVFYdUF4Y0dOUWY0ZTBB UzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05wRlRNd0Nzd2VBUVh1QXhjR05RZjRlMEFTMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QUNERC8yQTJDRkM0NjREQ0YxMUVEQkYwNUZBNTNDNEY5QUUwMi9OcEZUTXdDc3dl QVFYdUF4Y0dOUWY0ZTBBUzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCMi6uoabGvpPxf7F+Fe6I24qU5cfZi91/ZxfKDIxFEh/850IZKwng2 hU4FZv/abCU+ugl2EjJ92eVgq1JnMfvCavTI9zoRdrV0icecZ4G6rCIlAICo360o mS6B1QRvKiLkTqmUGU+aW1CxkvInT1ap8eq9jPyUQtQlmtrlgaSFNL8BhtcvZ7sf +xqBpTGXsWB4ErnJPx9viAU1tbx5E70BOFAs4fi9z1vZh8R/sqfHVufaopKkRqFj BvgLchIMyRAvixnfFwCpDZK3PMA1qfm51jqXv1zxJ3wLLSXvladi0KF/BkLSapop se4NWSHSqJuMxs80lC7ObFoDFTJnd7lz -----END CERTIFICATE-----Generated at Sat May 31 15:35:07 2025 by rpki-client