$ rpki-client -vvf rpki.apnic.net/member_repository/A91B35BB/5789B1A43C0011EAB8179734C4F9AE02/NfWNhhxBvf6ka4xykLGqxnDnzBs.mft File: NfWNhhxBvf6ka4xykLGqxnDnzBs.mft (raw, json) Hash identifier: mVnFywKGU9dL9Peaui/7xuDf27vq9tisrHqMIXAScas= Subject key identifier: 24:27:86:E7:12:D7:7E:EC:AB:24:FE:85:83:B0:46:60:9E:BA:EB:60 Authority key identifier: 35:F5:8D:86:1C:41:BD:FE:A4:6B:8C:72:90:B1:AA:C6:70:E7:CC:1B Certificate issuer: /CN=A91B35BB/serialNumber=35F58D861C41BDFEA46B8C7290B1AAC670E7CC1B Certificate serial: 0B40 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NfWNhhxBvf6ka4xykLGqxnDnzBs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B35BB/5789B1A43C0011EAB8179734C4F9AE02/NfWNhhxBvf6ka4xykLGqxnDnzBs.mft Manifest number: 0B31 Signing time: Thu 12 Jun 2025 18:58:52 +0000 Manifest this update: Thu 12 Jun 2025 18:58:51 +0000 Manifest next update: Thu 19 Jun 2025 18:58:51 +0000 Files and hashes: 1: NfWNhhxBvf6ka4xykLGqxnDnzBs.crl (hash: DmBp7ESWPvhr68onMP3GhwMEKMx9IB4SVdjF40Vqf3Y=) 2: 902F47663C0111EAB6CB9936C4F9AE02.roa (hash: W5+kOWbZGS14ELyZcRgsnHDoDEprTMY6BAsrjTgD1lM=) 3: 8F9F2F823C0111EAB6CB9936C4F9AE02.roa (hash: IHsFYOv59LECoaCivBqfgQOGspVwczVXXfHkd/E13QQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B35BB/5789B1A43C0011EAB8179734C4F9AE02/NfWNhhxBvf6ka4xykLGqxnDnzBs.crl rsync://rpki.apnic.net/member_repository/A91B35BB/5789B1A43C0011EAB8179734C4F9AE02/NfWNhhxBvf6ka4xykLGqxnDnzBs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NfWNhhxBvf6ka4xykLGqxnDnzBs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 18:58:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2880 (0xb40) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B35BB, serialNumber=35F58D861C41BDFEA46B8C7290B1AAC670E7CC1B Validity Not Before: Jun 12 18:58:51 2025 GMT Not After : Jun 19 18:58:51 2025 GMT Subject: CN=684b236b-04b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:59:a3:ae:29:5f:15:bd:9a:64:9f:27:1c:d4: d6:e4:ae:24:08:aa:12:46:a4:fd:fe:7c:70:4f:b5: d8:d8:72:b6:fe:ad:d3:7b:f4:13:cf:74:9a:c5:a5: ab:2c:5f:5e:51:a1:44:f2:65:bc:e8:0c:f6:a0:a8: c9:74:f2:23:81:cc:71:5f:67:ab:68:92:90:d1:5f: ed:33:2c:f0:c3:b8:95:67:96:5f:1a:c9:7c:5f:06: 06:3e:46:b1:a2:fc:28:47:2d:3d:7b:11:28:de:82: 2b:e5:fe:b8:5e:14:7e:cc:a6:4c:03:27:12:c5:02: 78:0c:1d:09:38:93:f6:ee:b4:4f:35:a3:b3:08:99: 9e:8c:44:d7:9d:51:45:e2:59:af:46:e9:f9:3c:e2: ac:01:c1:04:3d:ab:fc:4f:54:28:9a:73:0f:c2:6c: 2f:d2:a3:52:34:27:86:75:54:a2:94:3d:4c:3c:2c: d6:ee:e0:1e:b5:13:e1:f9:72:74:a5:7b:3f:32:bd: be:3e:c4:b1:8c:b8:9d:be:30:73:2a:d1:71:92:ae: 60:23:84:84:14:bc:26:b5:c6:0f:d4:36:b1:32:fd: 4f:e9:1c:3f:6a:bd:a2:76:e5:5c:25:d6:9b:6c:69: e4:c5:67:a8:8c:69:e5:8e:cb:e9:50:49:4a:1c:18: cf:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:27:86:E7:12:D7:7E:EC:AB:24:FE:85:83:B0:46:60:9E:BA:EB:60 X509v3 Authority Key Identifier: keyid:35:F5:8D:86:1C:41:BD:FE:A4:6B:8C:72:90:B1:AA:C6:70:E7:CC:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B35BB/5789B1A43C0011EAB8179734C4F9AE02/NfWNhhxBvf6ka4xykLGqxnDnzBs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NfWNhhxBvf6ka4xykLGqxnDnzBs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B35BB/5789B1A43C0011EAB8179734C4F9AE02/NfWNhhxBvf6ka4xykLGqxnDnzBs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 54:4d:14:c9:f7:00:33:3b:64:58:22:98:a6:38:42:6a:2f:40: 3e:a5:2f:45:0a:87:32:b1:be:37:fe:4d:06:8a:9f:74:d2:c9: d3:43:37:00:4b:40:f0:5c:f5:96:99:e5:a8:d8:9d:2b:ff:60: 3f:59:a0:1a:00:9e:6c:6d:4b:b3:a3:55:44:7f:fc:d7:c4:6c: 36:ae:36:2c:15:7f:3f:c5:ca:74:01:59:d4:56:2b:aa:6d:4a: b6:e0:02:1e:60:1a:99:9b:74:e3:55:fe:9d:1f:b2:76:6f:ac: 87:01:38:9c:e0:fe:77:68:7b:be:20:de:8e:75:a1:ba:e0:7f: c4:68:ef:c0:50:1b:cf:30:ea:3c:e2:5b:de:3a:f3:47:b5:7f: 7c:b6:d6:43:30:21:dc:f4:5f:8b:29:40:3a:9e:a2:24:e3:68: 85:84:46:02:fc:3a:5f:28:0f:25:ca:33:c3:c8:0e:f5:70:d9: f7:1f:1f:21:c4:e4:9c:f6:62:f9:f2:95:f9:7c:b5:67:97:92: 8c:2a:15:9f:43:84:f2:f3:81:b1:d2:b5:e1:93:74:ab:f0:f5: 9c:c3:ef:1a:af:6c:46:02:49:60:e7:16:b9:cb:59:d9:bd:fc: 62:64:51:ff:9b:98:0b:9a:90:f4:98:69:62:e9:2a:d3:b4:bd: e4:56:15:ad -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC0AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjM1QkIxMTAvBgNVBAUTKDM1RjU4RDg2MUM0MUJERkVBNDZCOEM3MjkwQjFBQUM2 NzBFN0NDMUIwHhcNMjUwNjEyMTg1ODUxWhcNMjUwNjE5MTg1ODUxWjAYMRYwFAYD VQQDEw02ODRiMjM2Yi0wNGI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1VmjrilfFb2aZJ8nHNTW5K4kCKoSRqT9/nxwT7XY2HK2/q3Te/QTz3SaxaWr LF9eUaFE8mW86Az2oKjJdPIjgcxxX2eraJKQ0V/tMyzww7iVZ5ZfGsl8XwYGPkax ovwoRy09exEo3oIr5f64XhR+zKZMAycSxQJ4DB0JOJP27rRPNaOzCJmejETXnVFF 4lmvRun5POKsAcEEPav8T1QomnMPwmwv0qNSNCeGdVSilD1MPCzW7uAetRPh+XJ0 pXs/Mr2+PsSxjLidvjBzKtFxkq5gI4SEFLwmtcYP1DaxMv1P6Rw/ar2iduVcJdab bGnkxWeojGnljsvpUElKHBjPRQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCQnhucS 137sqyT+hYOwRmCeuutgMB8GA1UdIwQYMBaAFDX1jYYcQb3+pGuMcpCxqsZw58wb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMzVCQi81Nzg5QjFBNDND MDAxMUVBQjgxNzk3MzRDNEY5QUUwMi9OZldOaGh4QnZmNmthNHh5a0xHcXhuRG56 QnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05mV05oaHhCdmY2a2E0eHlrTEdxeG5EbnpCcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MzVCQi81Nzg5QjFBNDNDMDAxMUVBQjgxNzk3MzRDNEY5QUUwMi9OZldOaGh4QnZm NmthNHh5a0xHcXhuRG56QnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBUTRTJ9wAzO2RYIpimOEJqL0A+pS9FCocysb43/k0Gip900snTQzcA S0DwXPWWmeWo2J0r/2A/WaAaAJ5sbUuzo1VEf/zXxGw2rjYsFX8/xcp0AVnUViuq bUq24AIeYBqZm3TjVf6dH7J2b6yHATic4P53aHu+IN6OdaG64H/EaO/AUBvPMOo8 4lveOvNHtX98ttZDMCHc9F+LKUA6nqIk42iFhEYC/DpfKA8lyjPDyA71cNn3Hx8h xOSc9mL58pX5fLVnl5KMKhWfQ4Ty84Gx0rXhk3Sr8PWcw+8ar2xGAklg5xa5y1nZ vfxiZFH/m5gLmpD0mGli6SrTtL3kVhWt -----END CERTIFICATE-----Generated at Sat Jun 14 19:40:45 2025 by rpki-client