$ rpki-client -vvf rpki.apnic.net/member_repository/A91C2913/8B43B736FE4911EFA735AD6FC4F9AE02/MN_NyJLnPuJUZCgnQuKcVn6jzgM.mft File: MN_NyJLnPuJUZCgnQuKcVn6jzgM.mft (raw, json) Hash identifier: GGpPPGE1IbCFGntKCkJJBmPVxpr+i7HD904DE0R+lDA= Subject key identifier: 9D:63:76:92:C5:65:E3:6B:D2:9B:D2:CA:C9:C4:9F:56:C9:27:51:06 Authority key identifier: 30:DF:CD:C8:92:E7:3E:E2:54:64:28:27:42:E2:9C:56:7E:A3:CE:03 Certificate issuer: /CN=A91C2913/serialNumber=30DFCDC892E73EE25464282742E29C567EA3CE03 Certificate serial: 35 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MN_NyJLnPuJUZCgnQuKcVn6jzgM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C2913/8B43B736FE4911EFA735AD6FC4F9AE02/MN_NyJLnPuJUZCgnQuKcVn6jzgM.mft Manifest number: 33 Signing time: Fri 13 Jun 2025 06:34:28 +0000 Manifest this update: Fri 13 Jun 2025 06:34:28 +0000 Manifest next update: Fri 20 Jun 2025 06:34:28 +0000 Files and hashes: 1: MN_NyJLnPuJUZCgnQuKcVn6jzgM.crl (hash: 1gfabaaVA8ZkLMP9qME7u+2D+L5wzszLdyjUvfSjPHI=) 2: 7273BDA4FE4A11EF8A0EDD73C4F9AE02.roa (hash: aKDX+epsv+87CublFWvfDFPYgSLhuAtHebX+rfx7L+w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C2913/8B43B736FE4911EFA735AD6FC4F9AE02/MN_NyJLnPuJUZCgnQuKcVn6jzgM.crl rsync://rpki.apnic.net/member_repository/A91C2913/8B43B736FE4911EFA735AD6FC4F9AE02/MN_NyJLnPuJUZCgnQuKcVn6jzgM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MN_NyJLnPuJUZCgnQuKcVn6jzgM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 06:34:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53 (0x35) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C2913, serialNumber=30DFCDC892E73EE25464282742E29C567EA3CE03 Validity Not Before: Jun 13 06:34:28 2025 GMT Not After : Jun 20 06:34:28 2025 GMT Subject: CN=684bc674-3e1f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:b5:64:9d:81:0b:ca:5c:bf:68:06:87:fc:4f: a4:ae:46:94:d3:2d:78:b6:ab:3b:1f:f9:35:74:1f: 60:fa:41:27:92:57:3e:08:6c:0e:b3:85:ad:8c:ef: c3:ad:43:03:a5:76:94:1e:51:cc:fd:33:f6:14:0c: b6:e1:be:d8:e2:c1:52:44:d9:09:0a:a8:73:f1:a9: 6a:2e:7b:8d:0f:db:54:7a:22:4e:68:b0:b8:23:68: 78:e0:98:89:e4:1a:43:d4:1f:30:28:ec:49:d5:8e: 72:27:2a:19:74:30:31:4e:29:ee:af:7a:8e:33:1f: 56:e0:60:58:a4:1f:b3:4d:44:53:8a:26:fd:4a:c3: de:cd:40:3d:a8:14:a9:6f:d6:de:cd:09:4b:f6:59: 88:26:8d:cf:d8:40:9f:68:25:06:08:4d:da:a6:d0: 24:94:ba:2d:c4:b5:d9:c1:60:a8:5e:b1:54:aa:c3: 87:75:4d:58:23:fe:b1:fc:81:0e:9e:59:e9:20:b7: cc:55:5f:d5:ef:3b:ac:45:12:43:56:69:a6:0d:11: 78:67:3d:6c:7b:3d:1e:84:b8:66:58:26:8c:ee:d3: 9c:fd:88:c8:76:fa:df:a4:05:d9:1f:84:79:17:b8: 1f:f9:a0:0c:ac:07:59:26:0f:45:b4:d9:09:4d:f3: 2e:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:63:76:92:C5:65:E3:6B:D2:9B:D2:CA:C9:C4:9F:56:C9:27:51:06 X509v3 Authority Key Identifier: keyid:30:DF:CD:C8:92:E7:3E:E2:54:64:28:27:42:E2:9C:56:7E:A3:CE:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C2913/8B43B736FE4911EFA735AD6FC4F9AE02/MN_NyJLnPuJUZCgnQuKcVn6jzgM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MN_NyJLnPuJUZCgnQuKcVn6jzgM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C2913/8B43B736FE4911EFA735AD6FC4F9AE02/MN_NyJLnPuJUZCgnQuKcVn6jzgM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption aa:ab:1a:b6:f0:26:0b:6e:26:40:94:21:04:9e:ac:3d:2f:6e: a6:27:ff:63:8d:ac:43:84:fd:cd:5d:44:d6:1c:f8:6e:1a:26: b7:ec:4c:cf:b7:5b:64:ab:0d:2b:17:41:47:71:05:ae:d7:03: bc:5c:f7:d3:c5:58:00:c6:1d:d8:ec:35:46:62:62:5e:79:5f: 66:ed:a1:68:76:85:52:07:6e:dd:92:02:7c:fb:65:df:ac:de: 3b:83:5e:c1:1b:0e:2f:b9:f2:19:38:db:1d:11:db:9f:56:57: 2f:fd:45:e2:d6:55:53:77:82:84:de:f9:7f:49:13:39:9d:22: 9a:93:58:f9:60:e3:ea:82:2b:aa:8d:94:a7:a3:9d:9f:0d:99: 95:c6:cb:ac:79:d8:10:0d:8b:11:2d:cd:da:33:cc:9b:9c:61: 25:b8:dc:8e:39:d0:38:d1:0f:14:f7:2e:a2:2f:31:5b:6e:42: 90:01:b4:37:42:6b:94:5d:7d:de:01:66:a4:33:00:45:4d:55: c3:9b:4b:53:a9:d0:08:a3:da:3a:9c:af:cb:75:a3:eb:e3:8b: 1a:df:14:0d:c2:57:3a:c1:ec:a5:70:2f:62:33:2c:de:43:32: e9:cf:e4:65:73:9b:44:cd:f6:be:39:46:b3:f1:ef:af:27:62: 13:94:87:15 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBNTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD MjkxMzExMC8GA1UEBRMoMzBERkNEQzg5MkU3M0VFMjU0NjQyODI3NDJFMjlDNTY3 RUEzQ0UwMzAeFw0yNTA2MTMwNjM0MjhaFw0yNTA2MjAwNjM0MjhaMBgxFjAUBgNV BAMTDTY4NGJjNjc0LTNlMWYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCetWSdgQvKXL9oBof8T6SuRpTTLXi2qzsf+TV0H2D6QSeSVz4IbA6zha2M78Ot QwOldpQeUcz9M/YUDLbhvtjiwVJE2QkKqHPxqWoue40P21R6Ik5osLgjaHjgmInk GkPUHzAo7EnVjnInKhl0MDFOKe6veo4zH1bgYFikH7NNRFOKJv1Kw97NQD2oFKlv 1t7NCUv2WYgmjc/YQJ9oJQYITdqm0CSUui3EtdnBYKhesVSqw4d1TVgj/rH8gQ6e Wekgt8xVX9XvO6xFEkNWaaYNEXhnPWx7PR6EuGZYJozu05z9iMh2+t+kBdkfhHkX uB/5oAysB1kmD0W02QlN8y61AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUnWN2ksVl 42vSm9LKycSfVsknUQYwHwYDVR0jBBgwFoAUMN/NyJLnPuJUZCgnQuKcVn6jzgMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUMyOTEzLzhCNDNCNzM2RkU0 OTExRUZBNzM1QUQ2RkM0RjlBRTAyL01OX055SkxuUHVKVVpDZ25RdUtjVm42anpn TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvTU5fTnlKTG5QdUpVWkNnblF1S2NWbjZqemdNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUMy OTEzLzhCNDNCNzM2RkU0OTExRUZBNzM1QUQ2RkM0RjlBRTAyL01OX055SkxuUHVK VVpDZ25RdUtjVm42anpnTS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAKqrGrbwJgtuJkCUIQSerD0vbqYn/2ONrEOE/c1dRNYc+G4aJrfsTM+3 W2SrDSsXQUdxBa7XA7xc99PFWADGHdjsNUZiYl55X2btoWh2hVIHbt2SAnz7Zd+s 3juDXsEbDi+58hk42x0R259WVy/9ReLWVVN3goTe+X9JEzmdIpqTWPlg4+qCK6qN lKejnZ8NmZXGy6x52BANixEtzdozzJucYSW43I450DjRDxT3LqIvMVtuQpABtDdC a5Rdfd4BZqQzAEVNVcObS1Op0Aij2jqcr8t1o+vjixrfFA3CVzrB7KVwL2IzLN5D MunP5GVzm0TN9r45RrPx768nYhOUhxU= -----END CERTIFICATE-----Generated at Sat Jun 14 19:14:57 2025 by rpki-client