$ rpki-client -vvf rpki.apnic.net/member_repository/A919C318/65B671B6A82211EAABAA2F19C4F9AE02/NAcoRkbqh4WDwlsPqefW7aCRMpg.mft File: NAcoRkbqh4WDwlsPqefW7aCRMpg.mft (raw, json) Hash identifier: ovb20DqWFhfa2AqVfietvrzPrzZXe+29eX3tZn4OnNs= Subject key identifier: 1D:F9:E5:52:3D:FD:6B:5E:EE:82:DD:EE:E6:9F:A6:98:73:59:F5:C2 Authority key identifier: 34:07:28:46:46:EA:87:85:83:C2:5B:0F:A9:E7:D6:ED:A0:91:32:98 Certificate issuer: /CN=A919C318/serialNumber=3407284646EA878583C25B0FA9E7D6EDA0913298 Certificate serial: 0909 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NAcoRkbqh4WDwlsPqefW7aCRMpg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919C318/65B671B6A82211EAABAA2F19C4F9AE02/NAcoRkbqh4WDwlsPqefW7aCRMpg.mft Manifest number: 0902 Signing time: Sun 08 Jun 2025 20:03:15 +0000 Manifest this update: Sun 08 Jun 2025 20:03:14 +0000 Manifest next update: Sun 15 Jun 2025 20:03:14 +0000 Files and hashes: 1: NAcoRkbqh4WDwlsPqefW7aCRMpg.crl (hash: vh3LKjkLRF1CRbFrlyRE6+yCO4HTo/RAjpXMh8pwru4=) 2: 9AA539E6A82411EA996D5F41C4F9AE02.roa (hash: pMMXr/lqWr+5GcVstLkkyd8gkDTgGy1DHQolAjMLixQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919C318/65B671B6A82211EAABAA2F19C4F9AE02/NAcoRkbqh4WDwlsPqefW7aCRMpg.crl rsync://rpki.apnic.net/member_repository/A919C318/65B671B6A82211EAABAA2F19C4F9AE02/NAcoRkbqh4WDwlsPqefW7aCRMpg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NAcoRkbqh4WDwlsPqefW7aCRMpg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 15 Jun 2025 20:03:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2313 (0x909) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919C318, serialNumber=3407284646EA878583C25B0FA9E7D6EDA0913298 Validity Not Before: Jun 8 20:03:14 2025 GMT Not After : Jun 15 20:03:14 2025 GMT Subject: CN=6845ec83-e06d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:e3:4e:5e:1d:c4:3a:bb:60:36:9b:fd:1f:3e: 4c:57:6d:f2:06:96:f2:79:4b:a7:6c:da:1d:3c:04: 11:bd:e2:ef:5f:8a:57:04:0c:ab:ee:b4:ff:12:dc: 82:82:ae:89:29:01:7e:76:e1:f8:ae:a7:ba:3a:06: 85:7b:f0:53:67:7d:fa:47:9f:7e:ff:a5:a3:d4:f2: 0f:b0:eb:bf:b5:a9:3d:e1:58:ac:9f:74:aa:68:5f: 36:9d:82:cd:89:2a:06:92:17:43:eb:e1:48:3d:43: 27:19:64:9b:cb:71:96:4c:a0:54:68:19:66:12:94: a7:9b:a9:28:46:d6:95:00:d5:80:d4:f7:63:91:0e: f9:de:94:ea:3d:29:cd:a6:9e:18:2b:dd:0a:ff:35: 45:fe:d7:19:65:f7:59:a4:c9:9e:c7:55:91:2e:e7: b3:6e:43:1c:ab:f0:41:d6:d2:2b:97:d1:3f:6c:09: 77:02:bd:08:c0:c8:69:fc:22:72:14:b5:9a:6b:1e: f0:df:1e:71:59:cb:af:df:a2:33:05:4a:c5:3b:0c: 94:67:6c:09:95:6c:4d:58:e4:99:c9:11:58:15:19: a2:45:34:26:29:e5:49:66:6c:06:bd:1d:4b:3b:72: b7:ee:6e:db:2e:af:fa:4d:76:59:2b:5c:86:af:fa: bf:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:F9:E5:52:3D:FD:6B:5E:EE:82:DD:EE:E6:9F:A6:98:73:59:F5:C2 X509v3 Authority Key Identifier: keyid:34:07:28:46:46:EA:87:85:83:C2:5B:0F:A9:E7:D6:ED:A0:91:32:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919C318/65B671B6A82211EAABAA2F19C4F9AE02/NAcoRkbqh4WDwlsPqefW7aCRMpg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NAcoRkbqh4WDwlsPqefW7aCRMpg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919C318/65B671B6A82211EAABAA2F19C4F9AE02/NAcoRkbqh4WDwlsPqefW7aCRMpg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8c:2a:f0:ce:ae:eb:4e:ee:fa:eb:07:aa:85:00:f9:2a:92:12: d5:ba:4c:17:e3:7b:0d:45:d6:82:8f:0b:df:bf:a7:73:04:7a: 48:e8:fe:fe:b2:6c:c7:b0:30:a2:f0:17:0f:9e:78:a4:61:f1: 17:2a:93:89:14:ed:7f:c4:e0:1f:d2:1d:e4:a6:70:9a:31:9f: 48:7a:16:b8:38:e8:a4:9d:bc:d2:e7:d8:c4:cd:44:44:9e:8d: 09:22:f5:d8:1d:92:c8:9b:d8:e1:61:66:ea:4a:ff:b6:60:00: 18:3b:cd:52:cf:37:81:62:47:9c:78:c1:51:53:14:68:dd:81: d3:cc:85:cd:bc:1e:8e:c5:a6:d4:dd:04:e6:a9:51:76:ad:77: 7e:24:8a:67:1d:51:8b:c0:4c:31:71:df:fd:a6:d7:83:7d:0d: 0f:78:56:da:73:39:ed:c7:f4:f1:a9:25:50:f9:fd:2b:64:38: e5:6f:1f:55:e4:a4:ab:7a:cd:50:7f:f7:0a:84:78:bc:00:22: e2:e3:7d:52:c6:d0:a8:74:37:fe:4f:13:cd:7a:24:bb:6c:e6: 52:4f:0f:6e:49:80:8b:ca:54:67:2b:91:ba:f9:87:6c:37:d4: 2d:34:db:0d:62:c8:de:8b:ec:69:d0:88:a2:9f:1a:ef:72:8d: b1:33:d4:3b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCQkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUMzMTgxMTAvBgNVBAUTKDM0MDcyODQ2NDZFQTg3ODU4M0MyNUIwRkE5RTdENkVE QTA5MTMyOTgwHhcNMjUwNjA4MjAwMzE0WhcNMjUwNjE1MjAwMzE0WjAYMRYwFAYD VQQDEw02ODQ1ZWM4My1lMDZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyeNOXh3EOrtgNpv9Hz5MV23yBpbyeUunbNodPAQRveLvX4pXBAyr7rT/EtyC gq6JKQF+duH4rqe6OgaFe/BTZ336R59+/6Wj1PIPsOu/tak94Visn3SqaF82nYLN iSoGkhdD6+FIPUMnGWSby3GWTKBUaBlmEpSnm6koRtaVANWA1PdjkQ753pTqPSnN pp4YK90K/zVF/tcZZfdZpMmex1WRLuezbkMcq/BB1tIrl9E/bAl3Ar0IwMhp/CJy FLWaax7w3x5xWcuv36IzBUrFOwyUZ2wJlWxNWOSZyRFYFRmiRTQmKeVJZmwGvR1L O3K37m7bLq/6TXZZK1yGr/q/4QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB355VI9 /Wte7oLd7uafpphzWfXCMB8GA1UdIwQYMBaAFDQHKEZG6oeFg8JbD6nn1u2gkTKY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QzMxOC82NUI2NzFCNkE4 MjIxMUVBQUJBQTJGMTlDNEY5QUUwMi9OQWNvUmticWg0V0R3bHNQcWVmVzdhQ1JN cGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05BY29Sa2JxaDRXRHdsc1BxZWZXN2FDUk1wZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 QzMxOC82NUI2NzFCNkE4MjIxMUVBQUJBQTJGMTlDNEY5QUUwMi9OQWNvUmticWg0 V0R3bHNQcWVmVzdhQ1JNcGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCMKvDOrutO7vrrB6qFAPkqkhLVukwX43sNRdaCjwvfv6dzBHpI6P7+ smzHsDCi8BcPnnikYfEXKpOJFO1/xOAf0h3kpnCaMZ9Ieha4OOiknbzS59jEzURE no0JIvXYHZLIm9jhYWbqSv+2YAAYO81SzzeBYkeceMFRUxRo3YHTzIXNvB6OxabU 3QTmqVF2rXd+JIpnHVGLwEwxcd/9pteDfQ0PeFbaczntx/TxqSVQ+f0rZDjlbx9V 5KSres1Qf/cKhHi8ACLi431SxtCodDf+TxPNeiS7bOZSTw9uSYCLylRnK5G6+Yds N9QtNNsNYsjei+xp0Iiinxrvco2xM9Q7 -----END CERTIFICATE-----Generated at Mon Jun 9 03:59:49 2025 by rpki-client