$ rpki-client -vvf rpki.apnic.net/member_repository/A91925D2/6DF602D078BF11EE93FFB764C4F9AE02/NFF8wp90Fp_XNqLCQGGfizMP3Z0.mft File: NFF8wp90Fp_XNqLCQGGfizMP3Z0.mft (raw, json) Hash identifier: v+U8pDNCBPbS0oRfpayYwrqYvtZDjgqquR637LGIJLk= Subject key identifier: 48:E7:E1:03:98:AC:A1:72:27:A1:5F:13:D0:8A:58:99:B3:B6:45:24 Authority key identifier: 34:51:7C:C2:9F:74:16:9F:D7:36:A2:C2:40:61:9F:8B:33:0F:DD:9D Certificate issuer: /CN=A91925D2/serialNumber=34517CC29F74169FD736A2C240619F8B330FDD9D Certificate serial: 0128 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NFF8wp90Fp_XNqLCQGGfizMP3Z0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91925D2/6DF602D078BF11EE93FFB764C4F9AE02/NFF8wp90Fp_XNqLCQGGfizMP3Z0.mft Manifest number: 0126 Signing time: Sat 31 May 2025 04:17:20 +0000 Manifest this update: Sat 31 May 2025 04:17:19 +0000 Manifest next update: Sat 07 Jun 2025 04:17:19 +0000 Files and hashes: 1: NFF8wp90Fp_XNqLCQGGfizMP3Z0.crl (hash: LkHAeSKFtuST/o5Zmdp2jorphP0/nEy6EtHBVC77v/M=) 2: 2C4CD10078C011EE90D36F13C4F9AE02.roa (hash: +7GFnP4vXiPay7vN6IrJFOHX1SU8MW5paTRJSWnqDFI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91925D2/6DF602D078BF11EE93FFB764C4F9AE02/NFF8wp90Fp_XNqLCQGGfizMP3Z0.crl rsync://rpki.apnic.net/member_repository/A91925D2/6DF602D078BF11EE93FFB764C4F9AE02/NFF8wp90Fp_XNqLCQGGfizMP3Z0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NFF8wp90Fp_XNqLCQGGfizMP3Z0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 04:17:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 296 (0x128) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91925D2, serialNumber=34517CC29F74169FD736A2C240619F8B330FDD9D Validity Not Before: May 31 04:17:19 2025 GMT Not After : Jun 7 04:17:19 2025 GMT Subject: CN=683a82cf-3182 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:2a:dd:c5:44:b3:d2:0a:47:be:57:ab:b6:df: a7:73:ec:92:c1:f1:68:79:b2:f7:dc:c3:a8:83:01: d8:bf:ac:04:af:35:6a:9d:78:fc:22:80:fb:dd:ae: 41:ab:19:3d:d5:77:29:af:b6:c2:ba:3f:0d:30:e6: 77:3d:cb:84:16:e2:12:e8:30:55:4c:43:29:60:c9: eb:8d:4f:e6:23:13:be:3f:86:53:da:99:ac:9b:73: 7f:75:1f:6e:22:df:67:be:29:74:fc:ef:c4:70:1e: cf:2a:c0:ea:45:f8:90:54:92:5d:fe:fd:f6:54:a0: dd:6a:43:be:a3:2b:75:f6:27:53:08:5e:ef:d3:16: 06:44:88:81:5b:ab:1c:3a:ba:aa:c1:06:a3:1f:ad: 39:f3:ae:05:9f:1d:4f:f2:b7:26:e8:45:b8:99:31: a8:cd:40:15:d2:08:3b:62:db:30:e3:2d:3f:bc:db: 73:7c:a6:05:df:6e:c9:93:1f:c0:9f:7e:58:5b:77: 83:5a:2e:2e:b1:55:30:41:55:d8:19:6a:45:f2:ed: a7:03:a2:23:75:58:f1:62:51:28:7e:ca:49:16:5f: 9a:99:6b:dd:df:65:cb:ea:56:78:f3:a4:01:38:4c: 6c:a7:6c:80:2b:8c:04:34:d8:03:98:b9:92:a2:6e: 9e:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:E7:E1:03:98:AC:A1:72:27:A1:5F:13:D0:8A:58:99:B3:B6:45:24 X509v3 Authority Key Identifier: keyid:34:51:7C:C2:9F:74:16:9F:D7:36:A2:C2:40:61:9F:8B:33:0F:DD:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91925D2/6DF602D078BF11EE93FFB764C4F9AE02/NFF8wp90Fp_XNqLCQGGfizMP3Z0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NFF8wp90Fp_XNqLCQGGfizMP3Z0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91925D2/6DF602D078BF11EE93FFB764C4F9AE02/NFF8wp90Fp_XNqLCQGGfizMP3Z0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 80:18:5a:d5:15:ef:e7:ac:ff:d5:cd:43:cf:35:9c:4e:58:6f: 07:6b:9c:22:26:97:76:4b:49:27:b3:d3:a3:8a:aa:cd:2e:03: 16:c4:be:fe:62:1b:a4:b1:55:bf:f2:d8:43:ee:de:5c:2e:d5: 64:7c:ea:2d:e4:f6:86:d6:8e:18:e2:c8:c8:2f:85:f1:be:ca: 9d:44:09:94:ad:49:bc:96:5c:0c:eb:a3:81:6d:21:64:1f:ab: dc:63:ae:57:b1:0c:4d:8c:e9:23:4a:39:72:7a:30:f5:1c:44: f6:2c:cd:87:ad:59:4a:d3:6b:09:93:43:31:b4:e5:57:ed:e9: cf:0a:c6:6f:a7:2b:18:e5:7f:db:c1:ca:0d:9d:a9:5a:de:fb: bf:05:64:93:bf:ab:74:30:7e:2e:1f:cc:18:75:b8:b9:0c:86: 52:a8:6a:34:ef:6a:33:90:6a:60:38:38:7f:be:e7:80:fc:6a: 40:c9:d5:91:b4:c5:23:bd:ad:b0:c7:00:53:6a:9b:fb:56:a2: b5:af:45:6b:7f:31:9b:e6:33:49:7e:92:8a:a3:5a:47:72:43: b8:76:c9:33:4f:f8:e4:34:f4:f3:69:cf:af:d6:5f:4a:84:7d: b6:48:5f:5a:c1:1e:c6:7d:e0:c5:21:6f:99:a6:38:db:44:17: 7f:e6:83:db -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTI1RDIxMTAvBgNVBAUTKDM0NTE3Q0MyOUY3NDE2OUZENzM2QTJDMjQwNjE5RjhC MzMwRkREOUQwHhcNMjUwNTMxMDQxNzE5WhcNMjUwNjA3MDQxNzE5WjAYMRYwFAYD VQQDEw02ODNhODJjZi0zMTgyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1yrdxUSz0gpHvlertt+nc+ySwfFoebL33MOogwHYv6wErzVqnXj8IoD73a5B qxk91Xcpr7bCuj8NMOZ3PcuEFuIS6DBVTEMpYMnrjU/mIxO+P4ZT2pmsm3N/dR9u It9nvil0/O/EcB7PKsDqRfiQVJJd/v32VKDdakO+oyt19idTCF7v0xYGRIiBW6sc OrqqwQajH605864Fnx1P8rcm6EW4mTGozUAV0gg7Ytsw4y0/vNtzfKYF327Jkx/A n35YW3eDWi4usVUwQVXYGWpF8u2nA6IjdVjxYlEofspJFl+amWvd32XL6lZ486QB OExsp2yAK4wENNgDmLmSom6eKQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEjn4QOY rKFyJ6FfE9CKWJmztkUkMB8GA1UdIwQYMBaAFDRRfMKfdBaf1zaiwkBhn4szD92d MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MjVEMi82REY2MDJEMDc4 QkYxMUVFOTNGRkI3NjRDNEY5QUUwMi9ORkY4d3A5MEZwX1hOcUxDUUdHZml6TVAz WjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05GRjh3cDkwRnBfWE5xTENRR0dmaXpNUDNaMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MjVEMi82REY2MDJEMDc4QkYxMUVFOTNGRkI3NjRDNEY5QUUwMi9ORkY4d3A5MEZw X1hOcUxDUUdHZml6TVAzWjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCAGFrVFe/nrP/VzUPPNZxOWG8Ha5wiJpd2S0kns9OjiqrNLgMWxL7+ YhuksVW/8thD7t5cLtVkfOot5PaG1o4Y4sjIL4XxvsqdRAmUrUm8llwM66OBbSFk H6vcY65XsQxNjOkjSjlyejD1HET2LM2HrVlK02sJk0MxtOVX7enPCsZvpysY5X/b wcoNnala3vu/BWSTv6t0MH4uH8wYdbi5DIZSqGo072ozkGpgODh/vueA/GpAydWR tMUjva2wxwBTapv7VqK1r0VrfzGb5jNJfpKKo1pHckO4dskzT/jkNPTzac+v1l9K hH22SF9awR7GfeDFIW+ZpjjbRBd/5oPb -----END CERTIFICATE-----Generated at Sat May 31 16:26:54 2025 by rpki-client