$ rpki-client -vvf rpki.apnic.net/member_repository/A919D656/93CB77AE6ACB11ED9B633B39C4F9AE02/Nhu6lAj6GbXpfYLN2_-y55u7oz8.mft File: Nhu6lAj6GbXpfYLN2_-y55u7oz8.mft (raw, json) Hash identifier: sHZ3zOo9Zim//R0Ws8YSzJ5SqTLmO68J7zKEMX/J3xE= Subject key identifier: 92:06:0A:48:54:57:FC:7E:3B:88:3F:03:59:96:B0:83:E4:0D:C2:D4 Authority key identifier: 36:1B:BA:94:08:FA:19:B5:E9:7D:82:CD:DB:FF:B2:E7:9B:BB:A3:3F Certificate issuer: /CN=A919D656/serialNumber=361BBA9408FA19B5E97D82CDDBFFB2E79BBBA33F Certificate serial: 01E5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nhu6lAj6GbXpfYLN2_-y55u7oz8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919D656/93CB77AE6ACB11ED9B633B39C4F9AE02/Nhu6lAj6GbXpfYLN2_-y55u7oz8.mft Manifest number: 01E0 Signing time: Fri 13 Jun 2025 01:45:28 +0000 Manifest this update: Fri 13 Jun 2025 01:45:27 +0000 Manifest next update: Fri 20 Jun 2025 01:45:27 +0000 Files and hashes: 1: Nhu6lAj6GbXpfYLN2_-y55u7oz8.crl (hash: iaZg0oL8zpMebReIlmfH6zgspuZE6n28i6nYTZ6KYeo=) 2: 00FFAB766ACF11EDBCC28E3CC4F9AE02.roa (hash: XpTSLigO4HKKd3j+0vvg/u/YVC83XW6OinlRQSFc3LQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919D656/93CB77AE6ACB11ED9B633B39C4F9AE02/Nhu6lAj6GbXpfYLN2_-y55u7oz8.crl rsync://rpki.apnic.net/member_repository/A919D656/93CB77AE6ACB11ED9B633B39C4F9AE02/Nhu6lAj6GbXpfYLN2_-y55u7oz8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nhu6lAj6GbXpfYLN2_-y55u7oz8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 01:45:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 485 (0x1e5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919D656, serialNumber=361BBA9408FA19B5E97D82CDDBFFB2E79BBBA33F Validity Not Before: Jun 13 01:45:27 2025 GMT Not After : Jun 20 01:45:27 2025 GMT Subject: CN=684b82b8-40c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:70:e0:a4:f8:1d:0f:0a:b1:49:2a:fc:63:46: 73:49:47:5f:02:7b:a6:f3:00:07:82:82:2f:8f:b9: 1d:39:b6:51:7b:35:86:06:e7:a0:4f:3f:8d:8e:45: ca:7f:b8:c3:2a:f8:45:ea:8f:0e:62:47:03:55:f8: 9f:94:7f:ef:b4:cc:43:7e:35:15:b4:c5:2a:5d:4e: 32:10:72:a6:44:18:8b:11:22:e1:6a:26:c0:f2:61: a4:58:c5:cc:ad:ed:91:86:ee:db:a9:96:94:02:8a: 95:ed:a3:84:ed:5d:50:50:89:bc:10:ef:20:06:6d: 72:8c:af:e3:e6:e0:ef:a2:f2:35:0b:a0:94:00:af: a9:4c:ac:f4:52:08:6e:60:71:9e:37:6a:7f:a8:3c: e5:cb:af:04:b5:6c:2e:e9:2f:af:cb:bc:3c:0d:03: 8d:73:4c:25:fc:e1:76:3c:12:4c:ab:fb:c6:ef:9e: 47:59:7b:09:cf:41:20:d7:3c:ec:63:0b:98:e0:6d: 82:85:b7:cf:28:3f:80:75:15:fd:a5:4c:b1:56:d3: 1e:d4:72:49:db:2a:a2:10:0a:ad:f9:80:76:2b:3a: 62:09:10:06:01:51:8a:4a:0f:34:36:5d:5a:ee:61: 8e:37:03:53:9e:24:39:aa:db:d1:d8:a7:43:7f:e2: be:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:06:0A:48:54:57:FC:7E:3B:88:3F:03:59:96:B0:83:E4:0D:C2:D4 X509v3 Authority Key Identifier: keyid:36:1B:BA:94:08:FA:19:B5:E9:7D:82:CD:DB:FF:B2:E7:9B:BB:A3:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919D656/93CB77AE6ACB11ED9B633B39C4F9AE02/Nhu6lAj6GbXpfYLN2_-y55u7oz8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nhu6lAj6GbXpfYLN2_-y55u7oz8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919D656/93CB77AE6ACB11ED9B633B39C4F9AE02/Nhu6lAj6GbXpfYLN2_-y55u7oz8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7d:8e:30:f0:5b:62:31:fe:a0:18:c0:40:ca:48:71:78:9e:27: 68:23:c3:8e:d9:78:94:29:db:31:7e:53:b7:cc:5b:41:db:b8: 6a:58:9c:b7:53:5d:c6:6c:ac:d3:c7:c5:7e:76:ed:00:87:70: ee:05:f8:e4:1f:76:fc:7c:7a:90:18:2c:98:82:c2:71:f0:83: e4:81:d1:39:73:2e:b1:95:82:80:10:ad:cb:d4:a7:c4:77:b9: 85:6f:29:bb:ec:44:97:3c:ee:ae:33:e7:e7:68:22:39:33:aa: bb:27:38:aa:d3:36:bc:b6:ef:1f:2f:f5:7e:86:81:52:37:ed: e2:90:dd:fb:0a:05:07:db:14:07:e8:99:2a:d5:31:24:dd:88: ae:a1:b5:4d:2b:70:22:7d:3f:62:b8:fc:57:e3:d5:02:e7:55: 2f:0d:f1:4c:29:93:51:44:08:31:bb:9a:ba:53:c5:4f:ee:6d: 94:ac:48:01:36:f8:24:8a:a5:2e:62:c0:49:18:c8:71:87:06: 7a:36:41:6f:e5:5e:6f:30:d7:00:fb:58:7f:1d:61:a6:08:17: 11:34:d2:e0:41:3e:bf:8b:1d:80:c6:1a:41:33:22:80:0d:20: cc:ca:5f:fe:dd:6a:4a:09:d0:1a:70:c6:a7:79:2b:5e:59:7c: 72:2c:b7:43 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAeUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUQ2NTYxMTAvBgNVBAUTKDM2MUJCQTk0MDhGQTE5QjVFOTdEODJDRERCRkZCMkU3 OUJCQkEzM0YwHhcNMjUwNjEzMDE0NTI3WhcNMjUwNjIwMDE0NTI3WjAYMRYwFAYD VQQDEw02ODRiODJiOC00MGM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2nDgpPgdDwqxSSr8Y0ZzSUdfAnum8wAHgoIvj7kdObZRezWGBuegTz+NjkXK f7jDKvhF6o8OYkcDVfiflH/vtMxDfjUVtMUqXU4yEHKmRBiLESLhaibA8mGkWMXM re2Rhu7bqZaUAoqV7aOE7V1QUIm8EO8gBm1yjK/j5uDvovI1C6CUAK+pTKz0Ughu YHGeN2p/qDzly68EtWwu6S+vy7w8DQONc0wl/OF2PBJMq/vG755HWXsJz0Eg1zzs YwuY4G2ChbfPKD+AdRX9pUyxVtMe1HJJ2yqiEAqt+YB2KzpiCRAGAVGKSg80Nl1a 7mGONwNTniQ5qtvR2KdDf+K+wQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJIGCkhU V/x+O4g/A1mWsIPkDcLUMB8GA1UdIwQYMBaAFDYbupQI+hm16X2Czdv/suebu6M/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RDY1Ni85M0NCNzdBRTZB Q0IxMUVEOUI2MzNCMzlDNEY5QUUwMi9OaHU2bEFqNkdiWHBmWUxOMl8teTU1dTdv ejguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05odTZsQWo2R2JYcGZZTE4yXy15NTV1N296OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RDY1Ni85M0NCNzdBRTZBQ0IxMUVEOUI2MzNCMzlDNEY5QUUwMi9OaHU2bEFqNkdi WHBmWUxOMl8teTU1dTdvejgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB9jjDwW2Ix/qAYwEDKSHF4nidoI8OO2XiUKdsxflO3zFtB27hqWJy3 U13GbKzTx8V+du0Ah3DuBfjkH3b8fHqQGCyYgsJx8IPkgdE5cy6xlYKAEK3L1KfE d7mFbym77ESXPO6uM+fnaCI5M6q7Jziq0za8tu8fL/V+hoFSN+3ikN37CgUH2xQH 6Jkq1TEk3YiuobVNK3AifT9iuPxX49UC51UvDfFMKZNRRAgxu5q6U8VP7m2UrEgB NvgkiqUuYsBJGMhxhwZ6NkFv5V5vMNcA+1h/HWGmCBcRNNLgQT6/ix2AxhpBMyKA DSDMyl/+3WpKCdAacManeSteWXxyLLdD -----END CERTIFICATE-----Generated at Sat Jun 14 19:39:59 2025 by rpki-client