$ rpki-client -vvf rpki.apnic.net/member_repository/A91142EA/F5332D7E84C311E6B9821A81C4F9AE02/Ny8cd2Gx3cgyjFC60O7tzZny5PI.mft File: Ny8cd2Gx3cgyjFC60O7tzZny5PI.mft (raw, json) Hash identifier: NVx/sM2EnRZmIDY8ILoGIDMwJXdMih0+4cV5L8Av0jM= Subject key identifier: 89:8C:66:9C:AE:1B:28:1C:BD:55:50:E7:AA:D0:97:DD:43:40:2A:B1 Authority key identifier: 37:2F:1C:77:61:B1:DD:C8:32:8C:50:BA:D0:EE:ED:CD:99:F2:E4:F2 Certificate issuer: /CN=A91142EA/serialNumber=372F1C7761B1DDC8328C50BAD0EEEDCD99F2E4F2 Certificate serial: 0199 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ny8cd2Gx3cgyjFC60O7tzZny5PI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91142EA/F5332D7E84C311E6B9821A81C4F9AE02/Ny8cd2Gx3cgyjFC60O7tzZny5PI.mft Manifest number: 1F57 Signing time: Sat 14 Jun 2025 16:02:48 +0000 Manifest this update: Sat 14 Jun 2025 16:02:48 +0000 Manifest next update: Sat 21 Jun 2025 16:02:48 +0000 Files and hashes: 1: Ny8cd2Gx3cgyjFC60O7tzZny5PI.crl (hash: KDOdVoxFfgUq7bUp2GXvzoKP+XfzVylOmrO9wv/OQd8=) 2: 9FD12146ED7211ED8A92041CC4F9AE02.roa (hash: oRm2blLyiJS/QAfKc6f3YExIUJkkRHUJrPUQp9W2Q+s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91142EA/F5332D7E84C311E6B9821A81C4F9AE02/Ny8cd2Gx3cgyjFC60O7tzZny5PI.crl rsync://rpki.apnic.net/member_repository/A91142EA/F5332D7E84C311E6B9821A81C4F9AE02/Ny8cd2Gx3cgyjFC60O7tzZny5PI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ny8cd2Gx3cgyjFC60O7tzZny5PI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 16:02:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 409 (0x199) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91142EA, serialNumber=372F1C7761B1DDC8328C50BAD0EEEDCD99F2E4F2 Validity Not Before: Jun 14 16:02:48 2025 GMT Not After : Jun 21 16:02:48 2025 GMT Subject: CN=684d9d28-7a64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:7e:fc:a5:58:f0:25:8c:71:00:cb:3f:6a:4a: df:5a:12:ad:bf:0b:e9:4a:8a:e8:f6:63:45:d5:0a: 07:de:2d:c3:e7:96:6f:a6:33:bd:7e:14:6f:20:d3: c8:42:21:d3:a8:59:04:f9:d3:ea:0a:80:92:08:19: eb:f4:e3:f0:e0:7d:d0:8d:ca:77:8e:f2:90:47:de: da:b1:64:46:9c:3b:ac:c3:19:dd:83:84:91:f4:8c: 7b:e0:bf:70:ef:40:d3:ed:17:eb:f3:86:c3:32:10: e7:6d:9d:7c:20:d3:97:53:09:f8:d6:c0:14:d5:a7: 1c:75:1a:15:c7:51:0a:2b:cb:6a:49:d1:80:d3:9b: c7:f1:64:f4:52:20:b6:c2:5e:ee:81:7c:5b:c0:bd: fb:a7:37:dc:15:8a:f3:cc:ed:07:a4:2f:2f:d8:3e: 35:4a:eb:a4:ad:1d:eb:70:9e:9a:1d:9d:9a:ee:6c: f3:8f:54:6d:00:1a:e6:27:18:0f:53:87:f7:56:f6: cb:aa:81:56:2e:6d:80:9c:87:4e:1d:b9:d2:89:bd: 23:ce:d8:4c:f8:cf:b9:84:16:8b:f1:1a:98:46:8e: 9d:ab:17:5f:48:a7:66:45:af:3e:25:d0:ff:ea:b9: 4d:e0:9b:c1:ee:12:d4:fd:80:7e:94:3f:73:36:4f: b0:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:8C:66:9C:AE:1B:28:1C:BD:55:50:E7:AA:D0:97:DD:43:40:2A:B1 X509v3 Authority Key Identifier: keyid:37:2F:1C:77:61:B1:DD:C8:32:8C:50:BA:D0:EE:ED:CD:99:F2:E4:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91142EA/F5332D7E84C311E6B9821A81C4F9AE02/Ny8cd2Gx3cgyjFC60O7tzZny5PI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ny8cd2Gx3cgyjFC60O7tzZny5PI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91142EA/F5332D7E84C311E6B9821A81C4F9AE02/Ny8cd2Gx3cgyjFC60O7tzZny5PI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 36:3e:a8:42:76:0e:5d:d9:77:f8:39:e2:6f:bf:2b:cf:39:07: d8:10:81:cc:5e:84:60:59:dd:fb:4d:9b:25:61:17:d5:52:dc: 56:87:7c:f9:94:0a:3e:07:ce:3a:26:4a:fd:c2:d5:84:26:4e: 4d:c4:ac:9b:99:77:29:ac:1a:21:da:e0:d4:bc:86:ef:cb:f6: 0b:11:f2:07:83:a2:61:87:82:89:eb:0e:5c:4e:63:55:fa:c1: 12:98:88:c9:3a:51:15:7d:67:8d:2f:4f:de:95:3d:05:95:5f: b0:d1:2a:3b:ee:16:d6:84:66:65:55:cf:42:de:ed:0a:c2:62: 15:83:82:f0:8f:9c:e4:05:46:1e:3f:d4:dd:0b:66:ca:93:cb: 67:23:ca:fd:38:4b:bc:ca:5b:ff:09:e9:3f:9b:40:a3:2a:aa: 5c:f1:51:5c:00:13:73:09:bd:e4:17:c2:10:35:21:28:c7:2b: ee:b5:03:81:22:68:24:6d:e5:19:69:af:59:0f:9d:a5:3e:7e: 0d:b5:26:dd:c1:bc:c0:7d:c4:1b:a5:2d:97:0b:fc:64:dd:96: da:05:20:81:fb:f2:b7:f9:fe:bf:ca:80:58:1b:57:77:9d:e5: e9:e8:28:1b:af:48:cb:17:c2:ad:b7:22:b7:85:42:84:9e:81: 3f:56:1f:12 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAZkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTQyRUExMTAvBgNVBAUTKDM3MkYxQzc3NjFCMUREQzgzMjhDNTBCQUQwRUVFRENE OTlGMkU0RjIwHhcNMjUwNjE0MTYwMjQ4WhcNMjUwNjIxMTYwMjQ4WjAYMRYwFAYD VQQDEw02ODRkOWQyOC03YTY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzH78pVjwJYxxAMs/akrfWhKtvwvpSoro9mNF1QoH3i3D55ZvpjO9fhRvINPI QiHTqFkE+dPqCoCSCBnr9OPw4H3Qjcp3jvKQR97asWRGnDuswxndg4SR9Ix74L9w 70DT7Rfr84bDMhDnbZ18INOXUwn41sAU1accdRoVx1EKK8tqSdGA05vH8WT0UiC2 wl7ugXxbwL37pzfcFYrzzO0HpC8v2D41SuukrR3rcJ6aHZ2a7mzzj1RtABrmJxgP U4f3VvbLqoFWLm2AnIdOHbnSib0jzthM+M+5hBaL8RqYRo6dqxdfSKdmRa8+JdD/ 6rlN4JvB7hLU/YB+lD9zNk+wWwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFImMZpyu GygcvVVQ56rQl91DQCqxMB8GA1UdIwQYMBaAFDcvHHdhsd3IMoxQutDu7c2Z8uTy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNDJFQS9GNTMzMkQ3RTg0 QzMxMUU2Qjk4MjFBODFDNEY5QUUwMi9OeThjZDJHeDNjZ3lqRkM2ME83dHpabnk1 UEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL055OGNkMkd4M2NneWpGQzYwTzd0elpueTVQSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NDJFQS9GNTMzMkQ3RTg0QzMxMUU2Qjk4MjFBODFDNEY5QUUwMi9OeThjZDJHeDNj Z3lqRkM2ME83dHpabnk1UEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA2PqhCdg5d2Xf4OeJvvyvPOQfYEIHMXoRgWd37TZslYRfVUtxWh3z5 lAo+B846Jkr9wtWEJk5NxKybmXcprBoh2uDUvIbvy/YLEfIHg6Jhh4KJ6w5cTmNV +sESmIjJOlEVfWeNL0/elT0FlV+w0So77hbWhGZlVc9C3u0KwmIVg4Lwj5zkBUYe P9TdC2bKk8tnI8r9OEu8ylv/Cek/m0CjKqpc8VFcABNzCb3kF8IQNSEoxyvutQOB ImgkbeUZaa9ZD52lPn4NtSbdwbzAfcQbpS2XC/xk3ZbaBSCB+/K3+f6/yoBYG1d3 neXp6Cgbr0jLF8KttyK3hUKEnoE/Vh8S -----END CERTIFICATE-----Generated at Sat Jun 14 19:26:29 2025 by rpki-client