$ rpki-client -vvf rpki.apnic.net/member_repository/A91688D4/2F58E4722E5011ECA04B6C25C4F9AE02/nIrj3HsFs4U5Z5DKcyPToJBv7YI.mft File: nIrj3HsFs4U5Z5DKcyPToJBv7YI.mft (raw, json) Hash identifier: dpB+j4Q88nuu2xBoEe6FX9vxmKxs5UZW0AKsAvJzT/w= Subject key identifier: 03:07:CE:AD:89:3F:15:66:0E:D2:89:C9:E6:D1:CB:C7:8E:DB:B4:4F Authority key identifier: 9C:8A:E3:DC:7B:05:B3:85:39:67:90:CA:73:23:D3:A0:90:6F:ED:82 Certificate issuer: /CN=A91688D4/serialNumber=9C8AE3DC7B05B385396790CA7323D3A0906FED82 Certificate serial: 04E4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nIrj3HsFs4U5Z5DKcyPToJBv7YI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91688D4/2F58E4722E5011ECA04B6C25C4F9AE02/nIrj3HsFs4U5Z5DKcyPToJBv7YI.mft Manifest number: 04D1 Signing time: Sat 14 Jun 2025 23:36:02 +0000 Manifest this update: Sat 14 Jun 2025 23:36:01 +0000 Manifest next update: Sat 21 Jun 2025 23:36:01 +0000 Files and hashes: 1: nIrj3HsFs4U5Z5DKcyPToJBv7YI.crl (hash: p91uUGLj00mVfJlNM/f6ZNVucSFVcENuLurBfcOu+W8=) 2: DEACEAE039EB11F09164E80BC4F9AE02.roa (hash: dIjB+tJTrGpfuQ7mIRUF65iXHaHuDI5u5O6AcT6PITs=) 3: 9C3B0AB8911A11EFB0F2DB5DC4F9AE02.roa (hash: 1ZwXIYT8WEQ8AXmik6kQ0iyXkhUrX8a9G8G1OnokxHI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91688D4/2F58E4722E5011ECA04B6C25C4F9AE02/nIrj3HsFs4U5Z5DKcyPToJBv7YI.crl rsync://rpki.apnic.net/member_repository/A91688D4/2F58E4722E5011ECA04B6C25C4F9AE02/nIrj3HsFs4U5Z5DKcyPToJBv7YI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nIrj3HsFs4U5Z5DKcyPToJBv7YI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 23:36:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1252 (0x4e4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91688D4, serialNumber=9C8AE3DC7B05B385396790CA7323D3A0906FED82 Validity Not Before: Jun 14 23:36:01 2025 GMT Not After : Jun 21 23:36:01 2025 GMT Subject: CN=684e0762-f7f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:12:06:0c:d2:b7:c0:6c:ae:0a:6f:9f:6e:59: 8a:70:29:c1:77:4e:e4:32:8b:82:d3:bd:e4:58:88: 14:51:5a:cb:2e:a3:77:95:51:03:bb:40:ba:76:14: c9:80:69:17:eb:7b:6d:59:f9:a2:dc:0f:4d:86:f8: 0d:c1:34:9d:ae:8f:b4:9e:a2:02:e7:16:de:fc:8e: 86:c2:0b:e5:83:45:b0:ae:10:ac:d0:74:89:2e:7f: d4:a1:c1:f8:aa:97:ba:5a:5c:7b:57:cb:06:d3:9b: e0:0e:12:67:21:16:95:3d:95:3d:44:a0:f5:3a:e6: 3b:cb:85:70:18:08:06:1d:af:ac:df:e3:33:2a:56: dd:56:cf:69:7b:42:27:da:bc:ca:1b:1a:74:36:26: d1:09:eb:9b:61:91:13:51:7a:70:65:5e:27:d2:7f: f2:6e:76:6d:d4:b7:f2:98:13:d1:d8:30:22:b4:83: 1b:89:f7:62:5d:c4:0a:cb:1b:86:2a:64:78:87:c6: 0c:45:3d:ab:ba:96:f9:39:6a:7b:b7:9f:2a:17:57: d0:0b:90:66:f9:ab:9e:03:12:8c:e8:0c:d8:08:31: a7:72:0d:a2:fe:e4:b2:6a:a1:78:7b:df:7f:b8:f5: 00:96:bd:4c:51:ef:cb:7c:8c:cf:a9:6d:09:1b:dd: ba:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:07:CE:AD:89:3F:15:66:0E:D2:89:C9:E6:D1:CB:C7:8E:DB:B4:4F X509v3 Authority Key Identifier: keyid:9C:8A:E3:DC:7B:05:B3:85:39:67:90:CA:73:23:D3:A0:90:6F:ED:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91688D4/2F58E4722E5011ECA04B6C25C4F9AE02/nIrj3HsFs4U5Z5DKcyPToJBv7YI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nIrj3HsFs4U5Z5DKcyPToJBv7YI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91688D4/2F58E4722E5011ECA04B6C25C4F9AE02/nIrj3HsFs4U5Z5DKcyPToJBv7YI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c2:d8:51:38:f1:fd:4e:1f:4d:47:08:c0:fb:6f:62:67:13:a6: 9d:e3:06:1f:79:18:40:df:df:be:6a:2a:63:d7:7c:5f:77:8b: 81:12:bb:61:48:f2:58:0c:00:d9:94:4e:9b:31:90:aa:9a:8a: 3e:17:d8:c7:1b:e3:a5:44:45:b0:2e:4a:54:ce:72:bf:59:ea: 75:84:1b:9d:8c:52:c8:2f:1a:cb:8a:7f:a2:cf:f1:f8:c8:60: ca:e3:07:87:34:58:e8:6c:8c:0c:75:47:3d:1a:01:bf:b3:d5: 8b:ad:76:16:54:30:85:72:00:14:ee:1b:49:35:97:b0:b6:bf: 28:8b:ee:5b:d7:d0:f5:2b:12:77:42:9e:89:5e:7c:d9:ab:d4: 43:c4:70:04:84:9e:05:32:ca:ef:07:e7:29:2e:99:85:bf:8c: be:0b:88:33:e1:ce:41:47:79:e3:e8:54:cb:fa:ca:7c:e4:c2: c8:92:1f:39:0e:4b:75:c7:b1:16:3d:e8:8c:d8:a8:d1:22:20: ff:3f:42:b9:bd:d3:4d:e2:3e:ee:e7:c6:bd:bf:97:35:f0:4d: 6b:db:bd:0d:b1:6d:81:11:e5:db:dd:81:14:b1:94:42:dd:9c: 15:eb:5e:37:86:07:e4:a3:78:40:2f:06:8c:82:6b:de:77:06: d3:7b:55:97 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBOQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Njg4RDQxMTAvBgNVBAUTKDlDOEFFM0RDN0IwNUIzODUzOTY3OTBDQTczMjNEM0Ew OTA2RkVEODIwHhcNMjUwNjE0MjMzNjAxWhcNMjUwNjIxMjMzNjAxWjAYMRYwFAYD VQQDEw02ODRlMDc2Mi1mN2Y2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvxIGDNK3wGyuCm+fblmKcCnBd07kMouC073kWIgUUVrLLqN3lVEDu0C6dhTJ gGkX63ttWfmi3A9NhvgNwTSdro+0nqIC5xbe/I6Gwgvlg0WwrhCs0HSJLn/UocH4 qpe6Wlx7V8sG05vgDhJnIRaVPZU9RKD1OuY7y4VwGAgGHa+s3+MzKlbdVs9pe0In 2rzKGxp0NibRCeubYZETUXpwZV4n0n/ybnZt1LfymBPR2DAitIMbifdiXcQKyxuG KmR4h8YMRT2rupb5OWp7t58qF1fQC5Bm+aueAxKM6AzYCDGncg2i/uSyaqF4e99/ uPUAlr1MUe/LfIzPqW0JG926fwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAMHzq2J PxVmDtKJyebRy8eO27RPMB8GA1UdIwQYMBaAFJyK49x7BbOFOWeQynMj06CQb+2C MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2ODhENC8yRjU4RTQ3MjJF NTAxMUVDQTA0QjZDMjVDNEY5QUUwMi9uSXJqM0hzRnM0VTVaNURLY3lQVG9KQnY3 WUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25JcmozSHNGczRVNVo1REtjeVBUb0pCdjdZSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 ODhENC8yRjU4RTQ3MjJFNTAxMUVDQTA0QjZDMjVDNEY5QUUwMi9uSXJqM0hzRnM0 VTVaNURLY3lQVG9KQnY3WUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDC2FE48f1OH01HCMD7b2JnE6ad4wYfeRhA39++aipj13xfd4uBErth SPJYDADZlE6bMZCqmoo+F9jHG+OlREWwLkpUznK/Wep1hBudjFLILxrLin+iz/H4 yGDK4weHNFjobIwMdUc9GgG/s9WLrXYWVDCFcgAU7htJNZewtr8oi+5b19D1KxJ3 Qp6JXnzZq9RDxHAEhJ4FMsrvB+cpLpmFv4y+C4gz4c5BR3nj6FTL+sp85MLIkh85 Dkt1x7EWPeiM2KjRIiD/P0K5vdNN4j7u58a9v5c18E1r270NsW2BEeXb3YEUsZRC 3ZwV6143hgfko3hALwaMgmvedwbTe1WX -----END CERTIFICATE-----Generated at Mon Jun 16 16:34:52 2025 by rpki-client