$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4B39/FEF549E8AF1611EE8C48A74DC4F9AE02/nMiKhtCzfs7o1XZX75l4lTJoDN8.mft File: nMiKhtCzfs7o1XZX75l4lTJoDN8.mft (raw, json) Hash identifier: G348fkNJ3H2cEsMDMidfFWde/q9xvNC1P2BsUI+v3Ko= Subject key identifier: A1:06:DA:61:E9:87:0E:F5:EE:BC:46:43:BF:BB:1D:99:13:29:25:DE Authority key identifier: 9C:C8:8A:86:D0:B3:7E:CE:E8:D5:76:57:EF:99:78:95:32:68:0C:DF Certificate issuer: /CN=A91A4B39/serialNumber=9CC88A86D0B37ECEE8D57657EF99789532680CDF Certificate serial: 0118 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nMiKhtCzfs7o1XZX75l4lTJoDN8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A4B39/FEF549E8AF1611EE8C48A74DC4F9AE02/nMiKhtCzfs7o1XZX75l4lTJoDN8.mft Manifest number: 0114 Signing time: Fri 13 Jun 2025 03:55:22 +0000 Manifest this update: Fri 13 Jun 2025 03:55:22 +0000 Manifest next update: Fri 20 Jun 2025 03:55:22 +0000 Files and hashes: 1: nMiKhtCzfs7o1XZX75l4lTJoDN8.crl (hash: eYhlxupAa+K23+g+zigXfXPC6DwYElw9YR6uPFDJ0eU=) 2: AA778F4CAF8A11EEB167DB64C4F9AE02.roa (hash: da2ZawdG5alxBTyeAyi7NwDwyDeUsxgI6h/wI95o9Ho=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A4B39/FEF549E8AF1611EE8C48A74DC4F9AE02/nMiKhtCzfs7o1XZX75l4lTJoDN8.crl rsync://rpki.apnic.net/member_repository/A91A4B39/FEF549E8AF1611EE8C48A74DC4F9AE02/nMiKhtCzfs7o1XZX75l4lTJoDN8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nMiKhtCzfs7o1XZX75l4lTJoDN8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 03:55:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 280 (0x118) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A4B39, serialNumber=9CC88A86D0B37ECEE8D57657EF99789532680CDF Validity Not Before: Jun 13 03:55:22 2025 GMT Not After : Jun 20 03:55:22 2025 GMT Subject: CN=684ba12a-ec83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:97:dd:78:c4:c3:3b:3f:83:e8:51:3c:96:a8: 29:df:c2:4d:43:75:d8:5a:7e:62:6c:43:70:62:d2: aa:56:7e:12:a1:fc:07:ce:5b:89:6f:4f:b8:18:5c: 60:aa:35:f8:12:2c:a8:eb:40:5f:42:5b:b5:2e:e1: 95:65:31:ac:c3:ff:bb:5f:1d:b3:dd:cd:41:9d:e9: b5:21:69:37:0e:f1:93:00:8e:65:64:ff:ce:30:0d: b1:52:81:f1:fa:f0:77:09:26:07:ac:6f:63:50:4e: 09:e5:4d:72:46:be:fe:ba:38:a1:de:a9:b4:b7:9b: 42:9b:fe:0b:e7:19:4c:ca:f2:ba:74:2a:f8:cd:fc: 8a:8d:56:8b:7e:20:11:93:2b:e9:60:29:ab:d1:58: 34:e9:b1:fb:bd:a5:e0:ae:49:1b:e9:6b:04:7e:63: 68:3a:60:b5:d2:68:36:ab:65:12:00:76:6c:5c:f4: 5f:3d:cd:75:01:9f:fb:50:08:c3:46:3c:29:3a:08: 2d:66:99:df:3e:a0:36:d9:cd:31:a6:f7:74:67:7d: e4:7e:4e:14:50:13:67:02:28:30:38:5c:ad:9c:77: 5c:66:c5:f3:cf:76:1c:70:36:89:6a:a8:3e:bf:9c: c3:2e:0a:01:be:cb:e6:5e:bf:88:45:ad:f7:ec:84: 22:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:06:DA:61:E9:87:0E:F5:EE:BC:46:43:BF:BB:1D:99:13:29:25:DE X509v3 Authority Key Identifier: keyid:9C:C8:8A:86:D0:B3:7E:CE:E8:D5:76:57:EF:99:78:95:32:68:0C:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A4B39/FEF549E8AF1611EE8C48A74DC4F9AE02/nMiKhtCzfs7o1XZX75l4lTJoDN8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nMiKhtCzfs7o1XZX75l4lTJoDN8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4B39/FEF549E8AF1611EE8C48A74DC4F9AE02/nMiKhtCzfs7o1XZX75l4lTJoDN8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 14:50:fb:58:ba:55:d5:38:33:50:cd:f1:e0:18:d2:b7:d2:5c: 00:22:ef:c1:b7:95:48:61:1f:07:a6:f2:77:59:61:c9:04:41: 26:62:0c:59:c2:18:1e:4a:d0:15:40:de:3c:35:91:7f:21:20: ee:9d:61:b4:b7:9c:c8:37:f7:f5:72:9f:12:a6:d4:f1:33:3b: 6b:1f:20:46:18:33:ff:eb:54:87:b3:c7:b5:bf:f3:7d:3b:47: 6c:e5:c4:5d:29:55:f2:da:61:50:37:e2:52:9a:37:03:a5:af: 09:63:8e:50:7b:ee:a5:f6:f5:7a:9c:fc:d8:f2:39:ef:ac:d1: b1:96:5f:68:74:1a:03:a1:79:6e:29:ab:00:92:1c:34:29:11: 8a:9d:c9:70:0a:b3:c3:f0:2b:cc:0a:25:31:54:dd:a2:d6:f9: 21:22:9d:66:f2:a2:f6:95:c8:ee:22:59:00:83:2c:6e:b4:8c: 7a:63:50:a2:d7:1e:39:d4:e0:8b:ab:25:8a:1c:df:b0:85:71: 35:12:39:6d:45:91:ce:1f:27:6e:11:a8:24:02:30:b6:35:20: 52:2a:72:82:41:ab:0e:89:47:a9:8b:0e:e7:b5:c5:9b:19:7c: 4c:1a:49:ef:99:c3:f0:75:3f:46:93:23:ee:28:26:7a:92:03: b9:60:c9:e1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICARgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTRCMzkxMTAvBgNVBAUTKDlDQzg4QTg2RDBCMzdFQ0VFOEQ1NzY1N0VGOTk3ODk1 MzI2ODBDREYwHhcNMjUwNjEzMDM1NTIyWhcNMjUwNjIwMDM1NTIyWjAYMRYwFAYD VQQDEw02ODRiYTEyYS1lYzgzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0ZfdeMTDOz+D6FE8lqgp38JNQ3XYWn5ibENwYtKqVn4SofwHzluJb0+4GFxg qjX4Eiyo60BfQlu1LuGVZTGsw/+7Xx2z3c1Bnem1IWk3DvGTAI5lZP/OMA2xUoHx +vB3CSYHrG9jUE4J5U1yRr7+ujih3qm0t5tCm/4L5xlMyvK6dCr4zfyKjVaLfiAR kyvpYCmr0Vg06bH7vaXgrkkb6WsEfmNoOmC10mg2q2USAHZsXPRfPc11AZ/7UAjD RjwpOggtZpnfPqA22c0xpvd0Z33kfk4UUBNnAigwOFytnHdcZsXzz3YccDaJaqg+ v5zDLgoBvsvmXr+IRa337IQihwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKEG2mHp hw717rxGQ7+7HZkTKSXeMB8GA1UdIwQYMBaAFJzIiobQs37O6NV2V++ZeJUyaAzf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNEIzOS9GRUY1NDlFOEFG MTYxMUVFOEM0OEE3NERDNEY5QUUwMi9uTWlLaHRDemZzN28xWFpYNzVsNGxUSm9E TjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25NaUtodEN6ZnM3bzFYWlg3NWw0bFRKb0ROOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NEIzOS9GRUY1NDlFOEFGMTYxMUVFOEM0OEE3NERDNEY5QUUwMi9uTWlLaHRDemZz N28xWFpYNzVsNGxUSm9ETjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAUUPtYulXVODNQzfHgGNK30lwAIu/Bt5VIYR8HpvJ3WWHJBEEmYgxZ whgeStAVQN48NZF/ISDunWG0t5zIN/f1cp8SptTxMztrHyBGGDP/61SHs8e1v/N9 O0ds5cRdKVXy2mFQN+JSmjcDpa8JY45Qe+6l9vV6nPzY8jnvrNGxll9odBoDoXlu KasAkhw0KRGKnclwCrPD8CvMCiUxVN2i1vkhIp1m8qL2lcjuIlkAgyxutIx6Y1Ci 1x451OCLqyWKHN+whXE1EjltRZHOHyduEagkAjC2NSBSKnKCQasOiUepiw7ntcWb GXxMGknvmcPwdT9GkyPuKCZ6kgO5YMnh -----END CERTIFICATE-----Generated at Sat Jun 14 17:35:25 2025 by rpki-client