$ rpki-client -vvf rpki.apnic.net/member_repository/A918D5CF/98D0B4F87B1A11E88F3D0C14C4F9AE02/NwOTvGRg5S0PXgIdVS9YF0M-suc.mft File: NwOTvGRg5S0PXgIdVS9YF0M-suc.mft (raw, json) Hash identifier: af7WOpl22dtYYbK4FZc2Khv3/HZhHn84kUBaGpmjURU= Subject key identifier: 66:EE:A6:0B:90:43:1D:C8:FB:27:87:D8:5B:74:3C:40:B4:13:A0:84 Authority key identifier: 37:03:93:BC:64:60:E5:2D:0F:5E:02:1D:55:2F:58:17:43:3E:B2:E7 Certificate issuer: /CN=A918D5CF/serialNumber=370393BC6460E52D0F5E021D552F5817433EB2E7 Certificate serial: 1424 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NwOTvGRg5S0PXgIdVS9YF0M-suc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918D5CF/98D0B4F87B1A11E88F3D0C14C4F9AE02/NwOTvGRg5S0PXgIdVS9YF0M-suc.mft Manifest number: 141C Signing time: Sun 08 Jun 2025 16:50:00 +0000 Manifest this update: Sun 08 Jun 2025 16:49:59 +0000 Manifest next update: Sun 15 Jun 2025 16:49:59 +0000 Files and hashes: 1: NwOTvGRg5S0PXgIdVS9YF0M-suc.crl (hash: 19kttnlMPOGxJQMX+ubEuMkm7szbqyYjIIW9rNg//u0=) 2: 0802DFC67B1C11E8BC732C17C4F9AE02.roa (hash: IY1KR2STRHWACxUYvedIZffoCYQxTjZXanC5kAZHVDk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918D5CF/98D0B4F87B1A11E88F3D0C14C4F9AE02/NwOTvGRg5S0PXgIdVS9YF0M-suc.crl rsync://rpki.apnic.net/member_repository/A918D5CF/98D0B4F87B1A11E88F3D0C14C4F9AE02/NwOTvGRg5S0PXgIdVS9YF0M-suc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NwOTvGRg5S0PXgIdVS9YF0M-suc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 15 Jun 2025 16:49:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5156 (0x1424) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918D5CF, serialNumber=370393BC6460E52D0F5E021D552F5817433EB2E7 Validity Not Before: Jun 8 16:49:59 2025 GMT Not After : Jun 15 16:49:59 2025 GMT Subject: CN=6845bf38-0513 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:e9:58:1f:ba:66:84:37:36:99:bb:2d:7a:51: 21:6a:49:86:41:e3:c1:39:f0:ff:01:8e:4f:80:b2: 73:6d:5d:5c:91:00:22:3a:39:de:2d:87:d2:2f:6b: 21:e6:d2:9c:c3:38:25:b1:dd:73:73:1d:ad:b7:0b: 55:83:a7:de:da:94:f5:3c:5e:75:37:2e:78:83:cf: c2:42:1c:70:7c:47:a5:d1:ec:2f:8b:59:4e:51:5d: 73:60:7d:6b:4c:d2:29:18:1c:22:67:8b:08:1d:b4: 8b:69:bf:b4:f5:75:eb:65:53:a6:77:ff:b4:be:e2: e4:1b:39:c9:19:f0:b5:b5:a6:a7:69:9e:a0:9f:c5: 80:dd:78:b0:ff:5c:bd:c3:06:8c:45:7c:bc:a4:ff: b5:0a:d4:82:0c:9c:c3:2c:c2:75:85:b1:e3:6a:8a: e2:a6:5d:24:67:6d:9f:97:c1:37:3a:83:c1:75:4d: 46:cc:3b:52:c0:f7:35:d0:8c:64:ae:e4:5b:e9:dc: 3c:59:c4:86:84:c3:c6:21:e3:9b:68:14:8e:c7:d2: 9c:7b:cb:2b:85:7c:1d:62:bc:33:7c:90:bc:7a:b7: 3d:c8:a8:ab:68:a3:c2:e8:1e:61:cd:c8:11:54:b2: 2c:66:b0:de:ab:20:eb:1e:6a:99:67:35:e0:da:e8: eb:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:EE:A6:0B:90:43:1D:C8:FB:27:87:D8:5B:74:3C:40:B4:13:A0:84 X509v3 Authority Key Identifier: keyid:37:03:93:BC:64:60:E5:2D:0F:5E:02:1D:55:2F:58:17:43:3E:B2:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918D5CF/98D0B4F87B1A11E88F3D0C14C4F9AE02/NwOTvGRg5S0PXgIdVS9YF0M-suc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NwOTvGRg5S0PXgIdVS9YF0M-suc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D5CF/98D0B4F87B1A11E88F3D0C14C4F9AE02/NwOTvGRg5S0PXgIdVS9YF0M-suc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a0:55:fe:3a:cc:7d:15:ab:59:47:6b:29:b6:0c:9a:06:6c:63: e6:d1:34:ac:d2:9e:9a:c7:45:3f:eb:85:b7:29:5f:47:32:8c: 60:e5:df:13:a1:e5:7a:ab:e9:12:c5:76:f5:d3:d6:87:23:f8: c7:0f:2a:e5:ae:a0:f6:1f:5c:ef:1f:e7:2a:f9:03:50:00:e5: f0:0e:ec:5a:6c:30:78:6e:13:92:5b:90:45:17:e1:86:4f:81: 26:ce:26:8d:6c:49:2e:38:62:34:97:44:3d:94:82:6f:e7:a9: c3:d0:75:35:5e:04:bf:89:f0:5e:bb:95:54:bb:e1:b1:15:e8: 88:6d:c9:d5:51:ee:e8:ce:f8:ea:ea:00:7e:87:e2:21:f3:e1: 36:d5:c1:72:f8:b8:a0:99:86:2b:4e:23:f9:b0:52:1d:e4:ec: 72:37:06:ad:20:7b:5e:e2:14:5e:4d:34:5b:ef:c4:dd:e4:7f: 32:5e:55:e4:d9:a3:04:1d:42:ee:8f:ac:3e:2b:a7:22:1f:97: c8:c1:a1:50:ee:06:04:60:7a:ff:93:13:6c:f7:6a:2d:2d:f1: d4:5d:e1:16:91:14:94:1b:5b:df:a4:ef:7f:e3:58:db:e9:4d: cc:71:95:ba:a4:4f:49:af:b5:66:32:d9:90:6b:5f:16:37:7d: 10:25:2c:52 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFCQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEQ1Q0YxMTAvBgNVBAUTKDM3MDM5M0JDNjQ2MEU1MkQwRjVFMDIxRDU1MkY1ODE3 NDMzRUIyRTcwHhcNMjUwNjA4MTY0OTU5WhcNMjUwNjE1MTY0OTU5WjAYMRYwFAYD VQQDEw02ODQ1YmYzOC0wNTEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1ulYH7pmhDc2mbstelEhakmGQePBOfD/AY5PgLJzbV1ckQAiOjneLYfSL2sh 5tKcwzglsd1zcx2ttwtVg6fe2pT1PF51Ny54g8/CQhxwfEel0ewvi1lOUV1zYH1r TNIpGBwiZ4sIHbSLab+09XXrZVOmd/+0vuLkGznJGfC1taanaZ6gn8WA3Xiw/1y9 wwaMRXy8pP+1CtSCDJzDLMJ1hbHjaoripl0kZ22fl8E3OoPBdU1GzDtSwPc10Ixk ruRb6dw8WcSGhMPGIeObaBSOx9Kce8srhXwdYrwzfJC8erc9yKiraKPC6B5hzcgR VLIsZrDeqyDrHmqZZzXg2ujrDQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGbupguQ Qx3I+yeH2Ft0PEC0E6CEMB8GA1UdIwQYMBaAFDcDk7xkYOUtD14CHVUvWBdDPrLn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RDVDRi85OEQwQjRGODdC MUExMUU4OEYzRDBDMTRDNEY5QUUwMi9Od09UdkdSZzVTMFBYZ0lkVlM5WUYwTS1z dWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL053T1R2R1JnNVMwUFhnSWRWUzlZRjBNLXN1Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RDVDRi85OEQwQjRGODdCMUExMUU4OEYzRDBDMTRDNEY5QUUwMi9Od09UdkdSZzVT MFBYZ0lkVlM5WUYwTS1zdWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCgVf46zH0Vq1lHaym2DJoGbGPm0TSs0p6ax0U/64W3KV9HMoxg5d8T oeV6q+kSxXb109aHI/jHDyrlrqD2H1zvH+cq+QNQAOXwDuxabDB4bhOSW5BFF+GG T4EmziaNbEkuOGI0l0Q9lIJv56nD0HU1XgS/ifBeu5VUu+GxFeiIbcnVUe7ozvjq 6gB+h+Ih8+E21cFy+LigmYYrTiP5sFId5OxyNwatIHte4hReTTRb78Td5H8yXlXk 2aMEHULuj6w+K6ciH5fIwaFQ7gYEYHr/kxNs92otLfHUXeEWkRSUG1vfpO9/41jb 6U3McZW6pE9Jr7VmMtmQa18WN30QJSxS -----END CERTIFICATE-----Generated at Tue Jun 10 04:44:12 2025 by rpki-client