$ rpki-client -vvf rpki.apnic.net/member_repository/A91B2EDE/55CB2E041AB411F085DD694AC4F9AE02/nbJYwXCyMilNhj9g0twBI82q54k.mft File: nbJYwXCyMilNhj9g0twBI82q54k.mft (raw, json) Hash identifier: lTmJUXDPxFnd1wKXr6ZIgtmA7NMu+SrJ37CykUgDVz0= Subject key identifier: 06:AC:5C:7E:84:78:ED:87:A1:BE:72:6A:52:69:02:B6:C7:0E:8B:9D Authority key identifier: 9D:B2:58:C1:70:B2:32:29:4D:86:3F:60:D2:DC:01:23:CD:AA:E7:89 Certificate issuer: /CN=A91B2EDE/serialNumber=9DB258C170B232294D863F60D2DC0123CDAAE789 Certificate serial: 22 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nbJYwXCyMilNhj9g0twBI82q54k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B2EDE/55CB2E041AB411F085DD694AC4F9AE02/nbJYwXCyMilNhj9g0twBI82q54k.mft Manifest number: 20 Signing time: Fri 13 Jun 2025 06:46:56 +0000 Manifest this update: Fri 13 Jun 2025 06:46:56 +0000 Manifest next update: Fri 20 Jun 2025 06:46:55 +0000 Files and hashes: 1: nbJYwXCyMilNhj9g0twBI82q54k.crl (hash: V6YPFkRNcdv2nQLnmsO0P4zJTIRo7130EqfW2oUq9U8=) 2: 13EB65D41AB511F0A1F0A34BC4F9AE02.roa (hash: gBn5RMkmkclmyZmL4wf1QAerjjB7P04/rGPHIIjACSc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B2EDE/55CB2E041AB411F085DD694AC4F9AE02/nbJYwXCyMilNhj9g0twBI82q54k.crl rsync://rpki.apnic.net/member_repository/A91B2EDE/55CB2E041AB411F085DD694AC4F9AE02/nbJYwXCyMilNhj9g0twBI82q54k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nbJYwXCyMilNhj9g0twBI82q54k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 06:46:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34 (0x22) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B2EDE, serialNumber=9DB258C170B232294D863F60D2DC0123CDAAE789 Validity Not Before: Jun 13 06:46:56 2025 GMT Not After : Jun 20 06:46:55 2025 GMT Subject: CN=684bc960-541c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:61:14:b9:a6:f6:ee:f9:23:64:fb:0f:6e:3a: d2:02:dc:0a:1a:48:3a:c2:0a:c6:6c:ce:de:6e:d7: f8:11:d3:ad:e3:c2:2f:7f:4c:b4:02:09:c4:9b:61: b2:4b:d1:d1:ca:a8:21:93:b0:2b:f6:a6:49:d1:9c: 73:d1:ff:48:e9:a0:5e:00:07:b9:61:6c:66:7d:09: 36:29:ad:66:2e:2f:bb:aa:18:35:6c:b4:65:94:ee: a1:91:15:54:cc:5c:9b:58:64:91:ff:f3:7b:63:44: 1d:41:94:b0:f2:e3:85:fb:c4:cc:89:04:dc:90:1d: 42:07:8d:25:ba:91:e4:c0:83:42:8f:d1:60:15:8b: 6e:5b:22:a6:f1:9c:8a:bd:72:91:4b:bf:7e:dd:43: e0:8b:5b:cc:fe:46:f4:ac:a3:cd:44:e5:50:5a:fc: 9d:8c:bc:de:95:57:9f:75:3e:d7:86:69:f7:bd:8b: fe:4d:a8:b0:55:67:85:ff:3b:35:7a:71:da:60:ee: 3c:7f:79:ff:72:92:63:fd:90:32:f3:c0:12:a3:f1: f9:f2:0d:2b:9d:f8:37:5f:de:ab:fe:e0:d2:81:2a: c3:33:12:9d:56:92:56:d0:61:b7:ed:23:d6:be:33: d8:d4:32:86:ee:41:d8:bf:15:78:11:ae:a7:26:28: de:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:AC:5C:7E:84:78:ED:87:A1:BE:72:6A:52:69:02:B6:C7:0E:8B:9D X509v3 Authority Key Identifier: keyid:9D:B2:58:C1:70:B2:32:29:4D:86:3F:60:D2:DC:01:23:CD:AA:E7:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B2EDE/55CB2E041AB411F085DD694AC4F9AE02/nbJYwXCyMilNhj9g0twBI82q54k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nbJYwXCyMilNhj9g0twBI82q54k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B2EDE/55CB2E041AB411F085DD694AC4F9AE02/nbJYwXCyMilNhj9g0twBI82q54k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 60:a4:fe:c7:46:58:18:25:7f:3c:a5:22:d4:6e:ea:1a:9b:74: eb:28:9f:16:c5:cd:c2:06:94:1f:81:c3:95:76:fd:8e:a8:14: 11:96:67:08:9a:63:15:1b:c2:e0:f9:f6:f5:06:ac:2a:7b:7b: 24:dd:09:2e:88:49:88:ca:ab:06:96:e7:89:7b:01:1a:9c:dd: 16:ff:2b:d5:a4:51:49:e8:3e:0d:f6:be:90:75:8e:31:c2:ea: 4a:d4:a9:35:b6:ea:5c:2c:58:93:71:21:c6:54:79:87:50:cd: 35:b5:b8:69:a8:72:8c:92:ad:9e:c7:b7:de:3b:c8:a7:02:83: 44:26:13:51:78:24:13:40:54:df:16:7a:ec:f1:61:1a:ff:3c: 66:99:95:5c:7a:a9:8c:0c:24:19:1b:e9:08:79:0b:54:fb:3a: c0:7e:be:f9:3b:4a:13:62:35:e4:12:1b:85:5a:99:a8:ca:0c: 97:70:e9:bc:79:8c:ed:0c:67:a0:d8:69:ed:c6:66:a6:a7:b4: ba:0f:da:f8:ce:04:5c:ca:e4:1b:9b:b5:14:f0:e8:48:2c:a5: 77:06:ae:2f:f4:4a:aa:db:9a:dc:64:00:1f:6a:f6:24:8a:e0: 75:2f:31:07:88:17:c8:f0:ee:c0:d9:aa:9b:a6:79:5b:8f:ad: 83:a7:11:c2 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBIjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC MkVERTExMC8GA1UEBRMoOURCMjU4QzE3MEIyMzIyOTREODYzRjYwRDJEQzAxMjND REFBRTc4OTAeFw0yNTA2MTMwNjQ2NTZaFw0yNTA2MjAwNjQ2NTVaMBgxFjAUBgNV BAMTDTY4NGJjOTYwLTU0MWMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCfYRS5pvbu+SNk+w9uOtIC3AoaSDrCCsZszt5u1/gR063jwi9/TLQCCcSbYbJL 0dHKqCGTsCv2pknRnHPR/0jpoF4AB7lhbGZ9CTYprWYuL7uqGDVstGWU7qGRFVTM XJtYZJH/83tjRB1BlLDy44X7xMyJBNyQHUIHjSW6keTAg0KP0WAVi25bIqbxnIq9 cpFLv37dQ+CLW8z+RvSso81E5VBa/J2MvN6VV591PteGafe9i/5NqLBVZ4X/OzV6 cdpg7jx/ef9ykmP9kDLzwBKj8fnyDSud+Ddf3qv+4NKBKsMzEp1WklbQYbftI9a+ M9jUMobuQdi/FXgRrqcmKN4RAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUBqxcfoR4 7YehvnJqUmkCtscOi50wHwYDVR0jBBgwFoAUnbJYwXCyMilNhj9g0twBI82q54kw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUIyRURFLzU1Q0IyRTA0MUFC NDExRjA4NURENjk0QUM0RjlBRTAyL25iSll3WEN5TWlsTmhqOWcwdHdCSTgycTU0 ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvbmJKWXdYQ3lNaWxOaGo5ZzB0d0JJODJxNTRrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUIy RURFLzU1Q0IyRTA0MUFCNDExRjA4NURENjk0QUM0RjlBRTAyL25iSll3WEN5TWls TmhqOWcwdHdCSTgycTU0ay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAGCk/sdGWBglfzylItRu6hqbdOsonxbFzcIGlB+Bw5V2/Y6oFBGWZwia YxUbwuD59vUGrCp7eyTdCS6ISYjKqwaW54l7ARqc3Rb/K9WkUUnoPg32vpB1jjHC 6krUqTW26lwsWJNxIcZUeYdQzTW1uGmocoySrZ7Ht947yKcCg0QmE1F4JBNAVN8W euzxYRr/PGaZlVx6qYwMJBkb6Qh5C1T7OsB+vvk7ShNiNeQSG4VamajKDJdw6bx5 jO0MZ6DYae3GZqantLoP2vjOBFzK5BubtRTw6EgspXcGri/0SqrbmtxkAB9q9iSK 4HUvMQeIF8jw7sDZqpumeVuPrYOnEcI= -----END CERTIFICATE-----Generated at Sat Jun 14 18:51:12 2025 by rpki-client