$ rpki-client -vvf rpki.apnic.net/member_repository/A913647F/C21C7CF686DB11EFBA4D5F26C4F9AE02/Nnh5oLhd2Dc2N4g3k_Ve6zsiHc8.mft File: Nnh5oLhd2Dc2N4g3k_Ve6zsiHc8.mft (raw, json) Hash identifier: qbFoRSkAq2hCLVRiXWbA/I4sagefsF0mwDBQayFgrw0= Subject key identifier: 02:B0:B9:47:47:6D:C0:99:B6:23:61:04:85:F6:F8:17:D6:FA:3F:F8 Authority key identifier: 36:78:79:A0:B8:5D:D8:37:36:37:88:37:93:F5:5E:EB:3B:22:1D:CF Certificate issuer: /CN=A913647F/serialNumber=367879A0B85DD8373637883793F55EEB3B221DCF Certificate serial: 85 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nnh5oLhd2Dc2N4g3k_Ve6zsiHc8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913647F/C21C7CF686DB11EFBA4D5F26C4F9AE02/Nnh5oLhd2Dc2N4g3k_Ve6zsiHc8.mft Manifest number: 83 Signing time: Sun 15 Jun 2025 05:45:13 +0000 Manifest this update: Sun 15 Jun 2025 05:45:13 +0000 Manifest next update: Sun 22 Jun 2025 05:45:13 +0000 Files and hashes: 1: Nnh5oLhd2Dc2N4g3k_Ve6zsiHc8.crl (hash: J/0pWl7e4IOQGCjz80663w6vaBeBbJDMbQenCPOlyhM=) 2: FD3934BC86E211EF8CF27626C4F9AE02.roa (hash: 6re4BPBhdZPlBhJ6P0bUdH0mQEDnXmK+Ed0vP4MQWeU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913647F/C21C7CF686DB11EFBA4D5F26C4F9AE02/Nnh5oLhd2Dc2N4g3k_Ve6zsiHc8.crl rsync://rpki.apnic.net/member_repository/A913647F/C21C7CF686DB11EFBA4D5F26C4F9AE02/Nnh5oLhd2Dc2N4g3k_Ve6zsiHc8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nnh5oLhd2Dc2N4g3k_Ve6zsiHc8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Jun 2025 05:45:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 133 (0x85) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913647F, serialNumber=367879A0B85DD8373637883793F55EEB3B221DCF Validity Not Before: Jun 15 05:45:13 2025 GMT Not After : Jun 22 05:45:13 2025 GMT Subject: CN=684e5de9-3f89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:45:30:4a:0c:68:07:ae:40:19:25:94:b0:2e: ca:4f:05:ab:4b:c6:c9:85:65:ac:88:dd:3e:2d:bf: 8e:93:35:a2:59:77:ab:91:87:b4:02:b4:a0:8f:11: 8b:ed:1b:4d:ff:c2:63:c6:b2:30:56:69:88:be:db: c0:19:a0:27:2c:91:48:e7:d5:c8:aa:3f:b3:8c:a1: f5:ab:1c:21:e4:23:66:a3:46:59:90:cc:01:45:ae: 92:72:ec:5a:bc:5a:21:3d:b3:fb:83:d4:91:16:84: 98:6a:08:90:b6:43:e5:f7:c4:83:91:fa:50:ae:87: 72:56:0d:89:2b:9d:1c:4b:82:4b:cb:21:d7:f8:f7: 5e:1f:2e:77:c2:70:c7:55:26:0c:fd:53:77:0f:38: bc:78:47:2a:a7:5b:8c:aa:28:06:45:ea:d8:5d:85: 1f:b0:0b:00:fa:97:bd:28:f6:d4:30:4a:0d:7f:d2: 3b:7d:20:f6:94:10:a1:2f:8a:05:2e:cc:f1:e9:9d: 55:c4:0d:a3:b5:d2:e3:29:99:cf:0a:47:79:df:fd: 2e:e4:27:12:26:87:49:96:8b:02:b7:cd:63:d0:a3: c1:73:03:4d:94:ed:1c:45:fb:d7:88:85:22:9d:ed: 01:5e:0c:f4:e1:ae:6d:cd:ed:9c:a5:e6:00:d1:1a: b1:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:B0:B9:47:47:6D:C0:99:B6:23:61:04:85:F6:F8:17:D6:FA:3F:F8 X509v3 Authority Key Identifier: keyid:36:78:79:A0:B8:5D:D8:37:36:37:88:37:93:F5:5E:EB:3B:22:1D:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913647F/C21C7CF686DB11EFBA4D5F26C4F9AE02/Nnh5oLhd2Dc2N4g3k_Ve6zsiHc8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nnh5oLhd2Dc2N4g3k_Ve6zsiHc8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913647F/C21C7CF686DB11EFBA4D5F26C4F9AE02/Nnh5oLhd2Dc2N4g3k_Ve6zsiHc8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6e:9a:91:7f:08:cb:1b:da:87:7c:63:ca:04:d2:10:57:0a:53: ba:55:29:34:9e:de:e8:b4:15:14:a4:5e:11:ab:32:b1:b7:cc: 82:21:27:d3:0f:54:81:1a:aa:43:77:69:4b:32:8a:f1:52:3b: 92:cc:de:cc:ea:f7:04:34:58:7a:9a:74:63:b8:15:d6:c9:9e: e7:dc:9e:88:e7:89:2b:50:58:0c:fb:25:c2:95:c6:9c:74:24: aa:e3:cd:c3:bf:80:19:8c:4d:a7:42:ac:3f:43:b9:46:cc:2b: 2b:80:56:01:81:6e:1d:97:d5:94:51:e1:7c:87:df:bb:23:41: 03:19:0c:b5:e9:95:e1:16:f6:42:9b:22:56:d6:64:76:d4:d4: 1d:81:66:fb:df:de:60:5f:77:33:65:ca:90:81:17:d6:62:34: 99:4e:e1:62:96:3a:f2:fd:c7:44:5d:dc:ca:30:6a:77:10:9a: 8a:06:18:c8:1d:cb:ae:8f:9d:fb:31:44:bc:6d:ef:68:5f:62: 2e:f6:72:32:95:78:e3:1d:e4:a1:09:4b:37:6e:3d:05:96:31: f8:da:31:e7:07:40:81:92:9a:98:a6:8b:cc:5f:bd:ad:c8:29: 62:d6:99:f0:b9:e5:d3:39:58:89:37:90:5f:d3:a2:54:dd:3e: d0:7f:9f:fd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzY0N0YxMTAvBgNVBAUTKDM2Nzg3OUEwQjg1REQ4MzczNjM3ODgzNzkzRjU1RUVC M0IyMjFEQ0YwHhcNMjUwNjE1MDU0NTEzWhcNMjUwNjIyMDU0NTEzWjAYMRYwFAYD VQQDEw02ODRlNWRlOS0zZjg5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtUUwSgxoB65AGSWUsC7KTwWrS8bJhWWsiN0+Lb+OkzWiWXerkYe0ArSgjxGL 7RtN/8JjxrIwVmmIvtvAGaAnLJFI59XIqj+zjKH1qxwh5CNmo0ZZkMwBRa6Scuxa vFohPbP7g9SRFoSYagiQtkPl98SDkfpQrodyVg2JK50cS4JLyyHX+PdeHy53wnDH VSYM/VN3Dzi8eEcqp1uMqigGRerYXYUfsAsA+pe9KPbUMEoNf9I7fSD2lBChL4oF Lszx6Z1VxA2jtdLjKZnPCkd53/0u5CcSJodJlosCt81j0KPBcwNNlO0cRfvXiIUi ne0BXgz04a5tze2cpeYA0RqxTwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAKwuUdH bcCZtiNhBIX2+BfW+j/4MB8GA1UdIwQYMBaAFDZ4eaC4Xdg3NjeIN5P1Xus7Ih3P MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNjQ3Ri9DMjFDN0NGNjg2 REIxMUVGQkE0RDVGMjZDNEY5QUUwMi9Obmg1b0xoZDJEYzJONGcza19WZTZ6c2lI YzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05uaDVvTGhkMkRjMk40ZzNrX1ZlNnpzaUhjOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NjQ3Ri9DMjFDN0NGNjg2REIxMUVGQkE0RDVGMjZDNEY5QUUwMi9Obmg1b0xoZDJE YzJONGcza19WZTZ6c2lIYzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBumpF/CMsb2od8Y8oE0hBXClO6VSk0nt7otBUUpF4RqzKxt8yCISfT D1SBGqpDd2lLMorxUjuSzN7M6vcENFh6mnRjuBXWyZ7n3J6I54krUFgM+yXClcac dCSq483Dv4AZjE2nQqw/Q7lGzCsrgFYBgW4dl9WUUeF8h9+7I0EDGQy16ZXhFvZC myJW1mR21NQdgWb7395gX3czZcqQgRfWYjSZTuFiljry/cdEXdzKMGp3EJqKBhjI Hcuuj537MUS8be9oX2Iu9nIylXjjHeShCUs3bj0FljH42jHnB0CBkpqYpovMX72t yCli1pnwueXTOViJN5Bf06JU3T7Qf5/9 -----END CERTIFICATE-----Generated at Mon Jun 16 13:31:49 2025 by rpki-client