$ rpki-client -vvf rpki.apnic.net/member_repository/A9172CE3/6728C4C4405911ECA0AFAA4DC4F9AE02/nimw9Ru7bWAzwO8AYjzEu6zqWEE.mft File: nimw9Ru7bWAzwO8AYjzEu6zqWEE.mft (raw, json) Hash identifier: OA0cx7aZMWhKkaTdVzWgMH3y4QW3fwhV2gcYchU9NyE= Subject key identifier: E1:DA:8C:B9:5E:7E:53:79:8D:DC:16:11:C4:3F:51:D2:06:F5:55:1D Authority key identifier: 9E:29:B0:F5:1B:BB:6D:60:33:C0:EF:00:62:3C:C4:BB:AC:EA:58:41 Certificate issuer: /CN=A9172CE3/serialNumber=9E29B0F51BBB6D6033C0EF00623CC4BBACEA5841 Certificate serial: 0487 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nimw9Ru7bWAzwO8AYjzEu6zqWEE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9172CE3/6728C4C4405911ECA0AFAA4DC4F9AE02/nimw9Ru7bWAzwO8AYjzEu6zqWEE.mft Manifest number: 0487 Signing time: Thu 12 Jun 2025 23:36:09 +0000 Manifest this update: Thu 12 Jun 2025 23:36:08 +0000 Manifest next update: Thu 19 Jun 2025 23:36:08 +0000 Files and hashes: 1: nimw9Ru7bWAzwO8AYjzEu6zqWEE.crl (hash: NK5TfWR2jXhIXHaXTJRmrpszmB+14VI77IEjyltSWYk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9172CE3/6728C4C4405911ECA0AFAA4DC4F9AE02/nimw9Ru7bWAzwO8AYjzEu6zqWEE.crl rsync://rpki.apnic.net/member_repository/A9172CE3/6728C4C4405911ECA0AFAA4DC4F9AE02/nimw9Ru7bWAzwO8AYjzEu6zqWEE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nimw9Ru7bWAzwO8AYjzEu6zqWEE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 23:36:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1159 (0x487) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9172CE3, serialNumber=9E29B0F51BBB6D6033C0EF00623CC4BBACEA5841 Validity Not Before: Jun 12 23:36:08 2025 GMT Not After : Jun 19 23:36:08 2025 GMT Subject: CN=684b6468-9c8e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:5f:4a:29:38:63:5d:9e:ac:42:7c:db:5d:6d: 38:fb:52:0f:d0:83:c1:d6:84:f4:0f:44:a5:68:79: f8:9a:79:a2:3d:12:87:d0:31:d2:8d:ca:5e:99:fe: 52:b6:b2:99:f7:07:e3:37:22:09:71:5f:6f:1f:93: d1:e8:a1:7f:c0:ef:51:3e:72:1c:a3:0a:72:36:db: f2:33:a9:d8:0f:31:eb:94:29:4f:d2:a0:fe:9c:fc: 12:f4:64:f8:0e:14:dc:a2:8b:4a:a5:62:cc:10:e2: c0:7f:dd:71:63:f5:0f:c7:90:b8:a7:cd:28:51:23: 66:01:cd:7e:4a:0f:e6:bc:12:db:e7:60:93:52:14: 8f:f8:08:dd:1b:c4:22:57:aa:f6:15:1f:78:fd:d8: 9f:6b:c4:5e:1b:2f:f0:47:17:2c:6d:16:0a:e3:9d: b1:df:5c:c9:af:17:46:98:d5:4a:c4:bf:98:1b:07: 57:d9:d6:0a:af:1e:9a:23:46:bf:ea:a8:35:2e:72: 09:4a:53:b5:59:de:b0:2b:2a:5b:05:2c:4b:7e:b4: 7e:d7:84:35:6e:ca:ea:25:5b:de:67:60:b1:c9:88: 1f:98:78:5c:88:ca:f2:06:9d:fd:fa:d3:d9:8f:1e: bf:f1:46:3e:3d:68:22:ac:d2:ea:15:8f:be:d9:ad: 1b:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:DA:8C:B9:5E:7E:53:79:8D:DC:16:11:C4:3F:51:D2:06:F5:55:1D X509v3 Authority Key Identifier: keyid:9E:29:B0:F5:1B:BB:6D:60:33:C0:EF:00:62:3C:C4:BB:AC:EA:58:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9172CE3/6728C4C4405911ECA0AFAA4DC4F9AE02/nimw9Ru7bWAzwO8AYjzEu6zqWEE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nimw9Ru7bWAzwO8AYjzEu6zqWEE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172CE3/6728C4C4405911ECA0AFAA4DC4F9AE02/nimw9Ru7bWAzwO8AYjzEu6zqWEE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9d:59:54:c0:f2:cc:b3:71:65:0c:54:2e:14:7c:32:13:05:ff: 43:71:13:c4:a0:92:d2:9d:bc:61:2b:2b:cc:7f:a1:5b:23:9a: 63:f5:17:cb:f4:af:01:37:4d:e1:12:a5:bf:a6:5e:a1:75:f5: ab:15:aa:50:a3:5b:16:cc:a2:f1:0e:d1:d0:ee:c3:7b:4f:53: 25:a4:8e:3d:32:f1:6f:77:40:c3:d7:6e:52:88:0d:10:30:45: 84:fa:4c:11:c7:4d:f5:05:2a:32:4e:73:90:e5:93:d3:91:99: e3:ff:9d:7a:00:8f:bf:bb:5f:8e:02:f9:1f:fc:fc:7c:ff:98: 7b:f7:35:93:d8:88:10:c0:76:a4:2e:65:eb:c4:63:e7:a4:8c: c4:f6:85:37:42:c8:54:87:cb:34:b1:df:ac:5f:f3:72:7f:7e: 69:ae:4b:3b:b6:d9:d8:19:44:e5:54:93:23:ca:34:ba:3a:eb: 80:6e:dd:8a:5a:81:d4:af:e0:3b:ba:57:74:49:6b:d5:d0:3a: a1:18:77:5e:dc:67:e7:d5:ef:d0:9f:1d:4d:ef:29:c2:de:65: 6b:74:0e:bc:80:0c:51:71:64:4a:43:80:65:41:eb:43:9b:f2: 33:0a:a2:2e:77:df:99:eb:e6:29:2d:88:42:d8:b1:0b:f2:1b: a4:98:b6:b7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBIcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzJDRTMxMTAvBgNVBAUTKDlFMjlCMEY1MUJCQjZENjAzM0MwRUYwMDYyM0NDNEJC QUNFQTU4NDEwHhcNMjUwNjEyMjMzNjA4WhcNMjUwNjE5MjMzNjA4WjAYMRYwFAYD VQQDEw02ODRiNjQ2OC05YzhlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwl9KKThjXZ6sQnzbXW04+1IP0IPB1oT0D0SlaHn4mnmiPRKH0DHSjcpemf5S trKZ9wfjNyIJcV9vH5PR6KF/wO9RPnIcowpyNtvyM6nYDzHrlClP0qD+nPwS9GT4 DhTcootKpWLMEOLAf91xY/UPx5C4p80oUSNmAc1+Sg/mvBLb52CTUhSP+AjdG8Qi V6r2FR94/difa8ReGy/wRxcsbRYK452x31zJrxdGmNVKxL+YGwdX2dYKrx6aI0a/ 6qg1LnIJSlO1Wd6wKypbBSxLfrR+14Q1bsrqJVveZ2CxyYgfmHhciMryBp39+tPZ jx6/8UY+PWgirNLqFY++2a0b9QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOHajLle flN5jdwWEcQ/UdIG9VUdMB8GA1UdIwQYMBaAFJ4psPUbu21gM8DvAGI8xLus6lhB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MkNFMy82NzI4QzRDNDQw NTkxMUVDQTBBRkFBNERDNEY5QUUwMi9uaW13OVJ1N2JXQXp3TzhBWWp6RXU2enFX RUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25pbXc5UnU3YldBendPOEFZanpFdTZ6cVdFRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MkNFMy82NzI4QzRDNDQwNTkxMUVDQTBBRkFBNERDNEY5QUUwMi9uaW13OVJ1N2JX QXp3TzhBWWp6RXU2enFXRUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCdWVTA8syzcWUMVC4UfDITBf9DcRPEoJLSnbxhKyvMf6FbI5pj9RfL 9K8BN03hEqW/pl6hdfWrFapQo1sWzKLxDtHQ7sN7T1MlpI49MvFvd0DD125SiA0Q MEWE+kwRx031BSoyTnOQ5ZPTkZnj/516AI+/u1+OAvkf/Px8/5h79zWT2IgQwHak LmXrxGPnpIzE9oU3QshUh8s0sd+sX/Nyf35prks7ttnYGUTlVJMjyjS6OuuAbt2K WoHUr+A7uld0SWvV0DqhGHde3Gfn1e/Qnx1N7ynC3mVrdA68gAxRcWRKQ4BlQetD m/IzCqIud9+Z6+YpLYhC2LEL8hukmLa3 -----END CERTIFICATE-----Generated at Sat Jun 14 19:11:12 2025 by rpki-client