$ rpki-client -vvf rpki.apnic.net/member_repository/A91889A4/27A25A5604FA11EE8D46E245C4F9AE02/_nQHcdbqABLeOHBW-Iy-3TbEqGA.mft File: _nQHcdbqABLeOHBW-Iy-3TbEqGA.mft (raw, json) Hash identifier: PBLJkZv3vW+GynzHggk5lMatU4pzQ1QKv7bKrneqluE= Subject key identifier: 1B:E3:94:25:EA:33:38:4A:CB:03:CF:63:97:3D:A9:D5:40:F2:B3:B6 Authority key identifier: FE:74:07:71:D6:EA:00:12:DE:38:70:56:F8:8C:BE:DD:36:C4:A8:60 Certificate issuer: /CN=A91889A4/serialNumber=FE740771D6EA0012DE387056F88CBEDD36C4A860 Certificate serial: 017D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_nQHcdbqABLeOHBW-Iy-3TbEqGA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91889A4/27A25A5604FA11EE8D46E245C4F9AE02/_nQHcdbqABLeOHBW-Iy-3TbEqGA.mft Manifest number: 017A Signing time: Fri 13 Jun 2025 02:42:06 +0000 Manifest this update: Fri 13 Jun 2025 02:42:06 +0000 Manifest next update: Fri 20 Jun 2025 02:42:06 +0000 Files and hashes: 1: _nQHcdbqABLeOHBW-Iy-3TbEqGA.crl (hash: YJjDnsvmL7vp0z3/Io2NntPMR2lgZYZ6M0ubh1tDUlQ=) 2: 37B318C0050111EEAFBCAE7EC4F9AE02.roa (hash: pZ0jtDypa9zbTRVdqPzNYcOmaqaH3zak3MFxphvTBnU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91889A4/27A25A5604FA11EE8D46E245C4F9AE02/_nQHcdbqABLeOHBW-Iy-3TbEqGA.crl rsync://rpki.apnic.net/member_repository/A91889A4/27A25A5604FA11EE8D46E245C4F9AE02/_nQHcdbqABLeOHBW-Iy-3TbEqGA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_nQHcdbqABLeOHBW-Iy-3TbEqGA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 02:42:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 381 (0x17d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91889A4, serialNumber=FE740771D6EA0012DE387056F88CBEDD36C4A860 Validity Not Before: Jun 13 02:42:06 2025 GMT Not After : Jun 20 02:42:06 2025 GMT Subject: CN=684b8ffe-c7d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:1b:15:1d:4b:0a:35:1a:92:b6:c7:5f:7a:5e: 2c:69:75:ce:7d:3f:8f:56:b6:c9:fd:78:0a:16:aa: 83:89:b7:b2:70:78:b0:72:1b:d1:98:d3:ba:1c:49: 44:0a:1a:5c:17:7a:b7:f8:94:29:be:ba:56:3c:78: e7:4b:a5:60:bf:e0:d3:f8:d3:c2:a0:fe:93:ef:3a: 15:93:f0:53:a3:e1:2d:2f:80:30:ce:b4:e0:5b:76: 9a:e7:10:1a:4e:47:52:d3:6b:09:9f:63:6e:a1:d7: fa:e6:c5:e3:51:6e:17:5e:30:5a:a5:f7:2b:78:ea: 09:04:de:46:e9:69:09:da:99:06:12:22:a8:a4:ac: 58:56:da:bf:35:fe:c0:cb:53:4f:4e:22:c7:a6:1d: f6:a8:97:56:af:bd:ac:dd:5f:a1:d6:9a:11:b0:ae: 22:90:f7:60:31:6c:76:be:03:c9:0b:ca:0a:e7:4d: 8d:70:4a:47:7f:23:8a:5d:f5:9b:da:24:15:a7:71: d0:3e:73:46:b0:7c:aa:10:a4:7a:d9:c3:75:58:ec: 23:37:17:dd:c5:f7:2e:71:15:00:ee:7f:26:f4:3f: 1c:b2:dd:eb:fd:58:9c:76:d9:a8:75:1c:19:06:3f: ee:05:dd:30:e8:55:62:7c:7d:33:40:21:38:ef:dc: a0:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:E3:94:25:EA:33:38:4A:CB:03:CF:63:97:3D:A9:D5:40:F2:B3:B6 X509v3 Authority Key Identifier: keyid:FE:74:07:71:D6:EA:00:12:DE:38:70:56:F8:8C:BE:DD:36:C4:A8:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91889A4/27A25A5604FA11EE8D46E245C4F9AE02/_nQHcdbqABLeOHBW-Iy-3TbEqGA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_nQHcdbqABLeOHBW-Iy-3TbEqGA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91889A4/27A25A5604FA11EE8D46E245C4F9AE02/_nQHcdbqABLeOHBW-Iy-3TbEqGA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7a:22:1e:f2:d0:ac:a1:70:2a:72:a1:9a:ad:72:49:44:29:7a: f3:93:1f:d7:14:2f:aa:e4:28:c4:41:df:03:fb:36:fb:ad:91: 19:a2:8a:d3:9b:42:29:59:46:8d:9e:6a:99:fa:67:c2:24:e0: 83:ba:39:f9:66:c0:42:5a:c5:5b:0a:eb:e9:e5:6c:c6:44:85: e0:9c:06:ef:a1:6a:58:57:90:46:86:f7:c7:97:79:ec:e3:f4: e0:ee:18:69:ba:86:cb:c9:d5:5b:a7:68:a0:f4:46:34:2e:b9: 35:de:0b:9d:07:13:20:c2:f4:dc:a9:89:53:e0:6d:d8:54:c7: 4b:b1:49:09:78:88:d6:ed:e1:86:cf:b8:82:60:c5:c0:dd:3d: 34:05:6f:c9:48:ed:43:7a:be:19:52:57:da:09:37:ef:dc:44: fa:fb:13:fb:f9:fd:ba:6f:e8:2d:78:4b:44:5a:a0:e2:94:15: 23:26:74:d9:0d:0b:38:82:45:ff:5b:32:3f:5a:fa:18:15:79: c9:68:e7:6a:68:a2:91:7c:c0:ca:19:7f:86:0f:1f:bf:ae:88: 63:bd:1d:ce:85:ad:06:26:8f:1e:e9:52:c0:85:bb:e9:08:a3: b1:2a:6c:51:de:65:79:b2:15:9a:72:c3:40:29:c5:0c:99:e4: cf:89:3b:2e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAX0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODg5QTQxMTAvBgNVBAUTKEZFNzQwNzcxRDZFQTAwMTJERTM4NzA1NkY4OENCRURE MzZDNEE4NjAwHhcNMjUwNjEzMDI0MjA2WhcNMjUwNjIwMDI0MjA2WjAYMRYwFAYD VQQDEw02ODRiOGZmZS1jN2Q0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6xsVHUsKNRqStsdfel4saXXOfT+PVrbJ/XgKFqqDibeycHiwchvRmNO6HElE ChpcF3q3+JQpvrpWPHjnS6Vgv+DT+NPCoP6T7zoVk/BTo+EtL4AwzrTgW3aa5xAa TkdS02sJn2Nuodf65sXjUW4XXjBapfcreOoJBN5G6WkJ2pkGEiKopKxYVtq/Nf7A y1NPTiLHph32qJdWr72s3V+h1poRsK4ikPdgMWx2vgPJC8oK502NcEpHfyOKXfWb 2iQVp3HQPnNGsHyqEKR62cN1WOwjNxfdxfcucRUA7n8m9D8cst3r/VicdtmodRwZ Bj/uBd0w6FVifH0zQCE479ygIwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBvjlCXq MzhKywPPY5c9qdVA8rO2MB8GA1UdIwQYMBaAFP50B3HW6gAS3jhwVviMvt02xKhg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4ODlBNC8yN0EyNUE1NjA0 RkExMUVFOEQ0NkUyNDVDNEY5QUUwMi9fblFIY2RicUFCTGVPSEJXLUl5LTNUYkVx R0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19uUUhjZGJxQUJMZU9IQlctSXktM1RiRXFHQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 ODlBNC8yN0EyNUE1NjA0RkExMUVFOEQ0NkUyNDVDNEY5QUUwMi9fblFIY2RicUFC TGVPSEJXLUl5LTNUYkVxR0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB6Ih7y0KyhcCpyoZqtcklEKXrzkx/XFC+q5CjEQd8D+zb7rZEZoorT m0IpWUaNnmqZ+mfCJOCDujn5ZsBCWsVbCuvp5WzGRIXgnAbvoWpYV5BGhvfHl3ns 4/Tg7hhpuobLydVbp2ig9EY0Lrk13gudBxMgwvTcqYlT4G3YVMdLsUkJeIjW7eGG z7iCYMXA3T00BW/JSO1Der4ZUlfaCTfv3ET6+xP7+f26b+gteEtEWqDilBUjJnTZ DQs4gkX/WzI/WvoYFXnJaOdqaKKRfMDKGX+GDx+/rohjvR3Oha0GJo8e6VLAhbvp CKOxKmxR3mV5shWacsNAKcUMmeTPiTsu -----END CERTIFICATE-----Generated at Sat Jun 14 19:34:03 2025 by rpki-client