$ rpki-client -vvf rpki.apnic.net/member_repository/A91A2F88/4C7DA3C0E0A311EC8F9C0E58C4F9AE02/NpQoPSE6XlZ5WORs29gStcxynXE.mft File: NpQoPSE6XlZ5WORs29gStcxynXE.mft (raw, json) Hash identifier: 4tfpVpiCpclpVY+VY3MEGrtlrYcGQdbPtGPwIJgXKks= Subject key identifier: E6:ED:6C:61:AF:3A:1D:E4:BF:C0:90:15:B3:6F:B9:38:0D:F1:4C:01 Authority key identifier: 36:94:28:3D:21:3A:5E:56:79:58:E4:6C:DB:D8:12:B5:CC:72:9D:71 Certificate issuer: /CN=A91A2F88/serialNumber=3694283D213A5E567958E46CDBD812B5CC729D71 Certificate serial: 02F8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NpQoPSE6XlZ5WORs29gStcxynXE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A2F88/4C7DA3C0E0A311EC8F9C0E58C4F9AE02/NpQoPSE6XlZ5WORs29gStcxynXE.mft Manifest number: 02F3 Signing time: Sat 07 Jun 2025 01:20:16 +0000 Manifest this update: Sat 07 Jun 2025 01:20:15 +0000 Manifest next update: Sat 14 Jun 2025 01:20:15 +0000 Files and hashes: 1: NpQoPSE6XlZ5WORs29gStcxynXE.crl (hash: 2T243sJdG0rX5rVGQTyaCwfcuKUGptNA00+W6Tq13Ow=) 2: 54467164E0A711EC8F4D5B5FC4F9AE02.roa (hash: HwkSTw7raizrXpljDXnHXfZQCr+VPlFOvS2ci48bY0A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A2F88/4C7DA3C0E0A311EC8F9C0E58C4F9AE02/NpQoPSE6XlZ5WORs29gStcxynXE.crl rsync://rpki.apnic.net/member_repository/A91A2F88/4C7DA3C0E0A311EC8F9C0E58C4F9AE02/NpQoPSE6XlZ5WORs29gStcxynXE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NpQoPSE6XlZ5WORs29gStcxynXE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 14 Jun 2025 01:20:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 760 (0x2f8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A2F88, serialNumber=3694283D213A5E567958E46CDBD812B5CC729D71 Validity Not Before: Jun 7 01:20:15 2025 GMT Not After : Jun 14 01:20:15 2025 GMT Subject: CN=684393cf-a8b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:41:29:71:11:2d:14:b2:ab:44:f7:89:2e:6e: f3:21:18:77:90:ac:1c:01:25:9d:86:93:6d:8c:7d: d1:e5:f5:a0:e4:bf:05:56:e5:e4:5a:a7:3b:ef:24: 80:05:37:d5:31:84:56:d6:1e:04:c5:f5:37:fe:8f: 88:6c:0d:cd:b6:4a:d0:c1:13:1b:bc:cf:c0:a5:de: 22:d9:8e:67:9f:b2:9a:ff:fe:1e:b6:ab:59:e6:1d: b0:6f:12:56:5c:62:19:5b:ad:d7:49:0c:da:5c:ce: 3c:c5:57:2d:82:f0:ff:37:51:6a:b7:e1:c5:64:37: ed:23:14:65:0c:8d:a7:f2:e9:68:21:3c:eb:53:69: 53:80:0b:f1:31:9d:fe:81:62:a3:12:1f:59:a2:96: 81:95:fd:bc:e3:aa:01:a8:3c:2b:90:d0:9c:94:8d: 4e:a4:54:63:59:fb:d2:d9:71:26:e1:0c:58:0b:c4: 8c:80:1d:c4:4f:f1:ac:57:a1:52:93:d9:34:fe:bc: 67:70:52:56:65:a6:bc:2b:c9:c7:26:57:b4:29:af: 66:54:68:8a:9c:8d:51:29:21:a2:0a:b2:8a:7f:2b: 34:31:45:fd:b7:03:c3:4b:1d:60:6a:94:eb:ad:98: 8c:d8:53:e1:ce:c1:94:0d:4b:ad:53:10:14:cb:49: 04:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:ED:6C:61:AF:3A:1D:E4:BF:C0:90:15:B3:6F:B9:38:0D:F1:4C:01 X509v3 Authority Key Identifier: keyid:36:94:28:3D:21:3A:5E:56:79:58:E4:6C:DB:D8:12:B5:CC:72:9D:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A2F88/4C7DA3C0E0A311EC8F9C0E58C4F9AE02/NpQoPSE6XlZ5WORs29gStcxynXE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NpQoPSE6XlZ5WORs29gStcxynXE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A2F88/4C7DA3C0E0A311EC8F9C0E58C4F9AE02/NpQoPSE6XlZ5WORs29gStcxynXE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9b:ef:7c:e7:87:eb:30:86:14:e4:6a:4b:b0:6f:8f:31:a5:03: e0:8a:72:e5:a9:58:d2:00:e5:40:a6:2f:57:71:37:ce:e4:e8: eb:1e:df:a5:e4:17:8b:25:f4:75:ec:93:bc:47:29:90:3d:5a: 13:17:72:8e:0b:60:f5:8c:ea:a5:5c:36:d1:58:2c:0c:52:51: 88:8c:7d:19:32:01:ac:96:8c:99:bb:5b:28:a1:c9:28:2d:0e: 40:4c:84:74:a5:da:8d:e0:12:21:c0:3c:38:aa:39:c9:d5:e9: 26:0c:8c:73:74:68:2c:64:55:11:f6:81:04:48:4c:c1:b2:3a: 59:39:74:ee:ba:de:a0:dc:62:1b:d2:3a:3d:db:70:40:e4:7e: e5:61:0a:ec:e5:20:a5:ff:62:c9:02:96:bf:51:bf:17:0b:5a: fd:a3:d5:4d:ba:07:85:19:86:b8:4f:65:b2:05:9e:74:0d:ec: 6c:52:41:a8:92:a2:16:04:d4:e3:b1:67:02:09:27:21:ea:ab: 7d:67:da:a6:ee:cd:2a:9e:8c:07:2f:84:9d:fa:b0:6b:8b:4d: 7c:32:6b:08:9b:7d:41:b8:39:93:7b:73:1e:2d:b3:cb:6a:77: fb:63:57:9a:48:aa:dc:5f:3f:3d:ef:3b:d7:33:89:94:9e:d6: 2d:2a:b3:58 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAvgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTJGODgxMTAvBgNVBAUTKDM2OTQyODNEMjEzQTVFNTY3OTU4RTQ2Q0RCRDgxMkI1 Q0M3MjlENzEwHhcNMjUwNjA3MDEyMDE1WhcNMjUwNjE0MDEyMDE1WjAYMRYwFAYD VQQDEw02ODQzOTNjZi1hOGI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw0EpcREtFLKrRPeJLm7zIRh3kKwcASWdhpNtjH3R5fWg5L8FVuXkWqc77ySA BTfVMYRW1h4ExfU3/o+IbA3NtkrQwRMbvM/Apd4i2Y5nn7Ka//4etqtZ5h2wbxJW XGIZW63XSQzaXM48xVctgvD/N1Fqt+HFZDftIxRlDI2n8uloITzrU2lTgAvxMZ3+ gWKjEh9ZopaBlf2846oBqDwrkNCclI1OpFRjWfvS2XEm4QxYC8SMgB3ET/GsV6FS k9k0/rxncFJWZaa8K8nHJle0Ka9mVGiKnI1RKSGiCrKKfys0MUX9twPDSx1gapTr rZiM2FPhzsGUDUutUxAUy0kE3wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFObtbGGv Oh3kv8CQFbNvuTgN8UwBMB8GA1UdIwQYMBaAFDaUKD0hOl5WeVjkbNvYErXMcp1x MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMkY4OC80QzdEQTNDMEUw QTMxMUVDOEY5QzBFNThDNEY5QUUwMi9OcFFvUFNFNlhsWjVXT1JzMjlnU3RjeHlu WEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05wUW9QU0U2WGxaNVdPUnMyOWdTdGN4eW5YRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MkY4OC80QzdEQTNDMEUwQTMxMUVDOEY5QzBFNThDNEY5QUUwMi9OcFFvUFNFNlhs WjVXT1JzMjlnU3RjeHluWEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCb73znh+swhhTkakuwb48xpQPginLlqVjSAOVApi9XcTfO5OjrHt+l 5BeLJfR17JO8RymQPVoTF3KOC2D1jOqlXDbRWCwMUlGIjH0ZMgGsloyZu1soocko LQ5ATIR0pdqN4BIhwDw4qjnJ1ekmDIxzdGgsZFUR9oEESEzBsjpZOXTuut6g3GIb 0jo923BA5H7lYQrs5SCl/2LJApa/Ub8XC1r9o9VNugeFGYa4T2WyBZ50DexsUkGo kqIWBNTjsWcCCSch6qt9Z9qm7s0qnowHL4Sd+rBri018MmsIm31BuDmTe3MeLbPL anf7Y1eaSKrcXz897zvXM4mUntYtKrNY -----END CERTIFICATE-----Generated at Sun Jun 8 08:02:48 2025 by rpki-client