$ rpki-client -vvf rpki.apnic.net/member_repository/A91F2BA6/84DD79E08B7611EA91050743C4F9AE02/nuqkUJudasqRzaQCHxBekhA363Q.mft File: nuqkUJudasqRzaQCHxBekhA363Q.mft (raw, json) Hash identifier: bKus/dT8iU1fHOrg41VtFCJzjk4ETl8anMiGpRbT1FQ= Subject key identifier: 12:30:1D:AE:4C:B1:D8:0B:45:EC:06:06:27:25:0B:DB:AF:45:DE:C4 Authority key identifier: 9E:EA:A4:50:9B:9D:6A:CA:91:CD:A4:02:1F:10:5E:92:10:37:EB:74 Certificate issuer: /CN=A91F2BA6/serialNumber=9EEAA4509B9D6ACA91CDA4021F105E921037EB74 Certificate serial: 09AB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nuqkUJudasqRzaQCHxBekhA363Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F2BA6/84DD79E08B7611EA91050743C4F9AE02/nuqkUJudasqRzaQCHxBekhA363Q.mft Manifest number: 09A0 Signing time: Tue 10 Jun 2025 19:59:00 +0000 Manifest this update: Tue 10 Jun 2025 19:58:59 +0000 Manifest next update: Tue 17 Jun 2025 19:58:59 +0000 Files and hashes: 1: nuqkUJudasqRzaQCHxBekhA363Q.crl (hash: 8yQ1BSQTOcOf+CLuF6hcM+xwgmHATvBrPHBqblhHnts=) 2: 5A7E13CA8C2B11EA90152018C4F9AE02.roa (hash: mjCI51z49d/ZR6NIO/Fc5BsNeBRLESAiodQLOKBux1k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F2BA6/84DD79E08B7611EA91050743C4F9AE02/nuqkUJudasqRzaQCHxBekhA363Q.crl rsync://rpki.apnic.net/member_repository/A91F2BA6/84DD79E08B7611EA91050743C4F9AE02/nuqkUJudasqRzaQCHxBekhA363Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nuqkUJudasqRzaQCHxBekhA363Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 17 Jun 2025 19:58:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2475 (0x9ab) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F2BA6, serialNumber=9EEAA4509B9D6ACA91CDA4021F105E921037EB74 Validity Not Before: Jun 10 19:58:59 2025 GMT Not After : Jun 17 19:58:59 2025 GMT Subject: CN=68488e84-cd89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:3f:12:49:05:48:a8:79:0e:90:e1:e3:95:96: 32:be:bc:25:0b:d9:d1:b2:e4:97:6a:3e:c4:f3:dc: 4e:72:4c:15:c9:fb:f2:56:f8:07:b5:c6:fb:e0:c5: 2f:05:32:34:3d:d0:92:22:5f:3d:68:3e:bf:18:10: 82:60:2f:3c:f4:11:36:b1:59:6d:57:70:f4:6e:27: d8:5b:1b:eb:e6:78:72:df:b6:b4:5f:13:3f:53:39: 36:4b:7e:d5:27:f4:25:b9:78:23:e3:3c:86:90:ee: 5e:cf:69:57:20:04:ee:32:71:3d:c0:00:b2:36:37: 3e:a1:1a:99:ec:8c:99:bb:41:fb:d5:fb:db:62:c3: d5:67:81:61:86:fc:0e:14:31:1d:9b:ee:ba:0c:7a: 73:60:b3:41:6f:69:14:74:67:31:ab:ff:f1:20:5a: 18:42:74:e1:23:e3:66:a3:44:30:37:c2:48:81:d1: 98:ff:c7:06:74:d0:56:99:f1:b3:c6:af:76:04:b1: c7:76:fa:8f:f6:69:82:63:16:21:c8:b2:24:66:7d: 84:3d:80:c9:70:00:4b:8e:c6:b0:e2:21:49:96:3c: f0:78:ae:b5:3e:68:4b:fa:a4:30:86:5d:14:e7:6d: 4b:7c:63:6a:d4:ff:a4:ef:c3:bf:bf:5f:af:bf:60: cd:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:30:1D:AE:4C:B1:D8:0B:45:EC:06:06:27:25:0B:DB:AF:45:DE:C4 X509v3 Authority Key Identifier: keyid:9E:EA:A4:50:9B:9D:6A:CA:91:CD:A4:02:1F:10:5E:92:10:37:EB:74 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F2BA6/84DD79E08B7611EA91050743C4F9AE02/nuqkUJudasqRzaQCHxBekhA363Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nuqkUJudasqRzaQCHxBekhA363Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F2BA6/84DD79E08B7611EA91050743C4F9AE02/nuqkUJudasqRzaQCHxBekhA363Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9e:1a:dd:a8:72:ef:55:c1:a8:7f:f8:e0:68:c8:16:f0:d7:43: 79:1a:e9:03:dc:ad:a2:3c:96:f5:e7:77:aa:e5:22:42:9c:4e: 9f:a7:b6:9a:da:82:ac:68:5f:20:6c:08:d4:ac:d7:f1:3c:44: 74:ab:97:25:7e:e8:7f:78:0e:7b:ba:4d:7d:83:5d:6f:ad:e3: e7:53:1d:39:c1:03:59:78:b8:c5:9d:ba:62:ab:e3:3b:f2:b1: 95:32:50:c2:11:e7:08:ee:26:64:ca:60:b8:15:77:cd:21:db: 0d:af:55:85:f4:6f:f0:1b:d1:c8:73:c9:27:46:77:b6:73:8d: 83:4d:68:30:28:75:8c:86:82:bc:d2:74:2b:40:2a:20:2a:0d: 6d:1e:2d:f7:df:b3:ed:85:dc:1a:6f:a0:44:f5:ad:a7:8e:55: ba:02:89:eb:95:fb:7c:66:8f:8f:7a:a5:6e:de:11:43:cf:1e: 95:3a:23:53:1c:74:4f:80:cc:7f:60:12:d7:28:28:7b:d0:ec: 62:52:94:14:b8:49:ed:d9:23:16:25:ba:75:de:99:af:88:d7: d5:34:9d:d9:2f:cb:44:a7:6b:d7:9b:78:a3:3d:d2:f6:da:f8: fd:53:e8:0a:44:27:71:1b:2f:77:a0:80:6a:91:3e:df:63:e3: 3f:9b:8f:f1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCaswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjJCQTYxMTAvBgNVBAUTKDlFRUFBNDUwOUI5RDZBQ0E5MUNEQTQwMjFGMTA1RTky MTAzN0VCNzQwHhcNMjUwNjEwMTk1ODU5WhcNMjUwNjE3MTk1ODU5WjAYMRYwFAYD VQQDEw02ODQ4OGU4NC1jZDg5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1D8SSQVIqHkOkOHjlZYyvrwlC9nRsuSXaj7E89xOckwVyfvyVvgHtcb74MUv BTI0PdCSIl89aD6/GBCCYC889BE2sVltV3D0bifYWxvr5nhy37a0XxM/Uzk2S37V J/QluXgj4zyGkO5ez2lXIATuMnE9wACyNjc+oRqZ7IyZu0H71fvbYsPVZ4FhhvwO FDEdm+66DHpzYLNBb2kUdGcxq//xIFoYQnThI+Nmo0QwN8JIgdGY/8cGdNBWmfGz xq92BLHHdvqP9mmCYxYhyLIkZn2EPYDJcABLjsaw4iFJljzweK61PmhL+qQwhl0U 521LfGNq1P+k78O/v1+vv2DNNwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBIwHa5M sdgLRewGBiclC9uvRd7EMB8GA1UdIwQYMBaAFJ7qpFCbnWrKkc2kAh8QXpIQN+t0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMkJBNi84NERENzlFMDhC NzYxMUVBOTEwNTA3NDNDNEY5QUUwMi9udXFrVUp1ZGFzcVJ6YVFDSHhCZWtoQTM2 M1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL251cWtVSnVkYXNxUnphUUNIeEJla2hBMzYzUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MkJBNi84NERENzlFMDhCNzYxMUVBOTEwNTA3NDNDNEY5QUUwMi9udXFrVUp1ZGFz cVJ6YVFDSHhCZWtoQTM2M1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCeGt2ocu9Vwah/+OBoyBbw10N5GukD3K2iPJb153eq5SJCnE6fp7aa 2oKsaF8gbAjUrNfxPER0q5clfuh/eA57uk19g11vrePnUx05wQNZeLjFnbpiq+M7 8rGVMlDCEecI7iZkymC4FXfNIdsNr1WF9G/wG9HIc8knRne2c42DTWgwKHWMhoK8 0nQrQCogKg1tHi3337Pthdwab6BE9a2njlW6Aonrlft8Zo+PeqVu3hFDzx6VOiNT HHRPgMx/YBLXKCh70OxiUpQUuEnt2SMWJbp13pmviNfVNJ3ZL8tEp2vXm3ijPdL2 2vj9U+gKRCdxGy93oIBqkT7fY+M/m4/x -----END CERTIFICATE-----Generated at Thu Jun 12 13:05:05 2025 by rpki-client