$ rpki-client -vvf rpki.apnic.net/member_repository/A91C5413/DF99A1E87BE811EB9A092342C4F9AE02/Nmw2U-SHXe9etk-Yko-v0w_uiHg.mft File: Nmw2U-SHXe9etk-Yko-v0w_uiHg.mft (raw, json) Hash identifier: 2BHiLvJ7NnjnFIDFyWXpYtYGuGj246j7HBAVp0gaNK0= Subject key identifier: FF:64:53:52:67:59:76:56:C2:AF:C9:F2:B0:53:E6:D4:74:D2:13:9D Authority key identifier: 36:6C:36:53:E4:87:5D:EF:5E:B6:4F:98:92:8F:AF:D3:0F:EE:88:78 Certificate issuer: /CN=A91C5413/serialNumber=366C3653E4875DEF5EB64F98928FAFD30FEE8878 Certificate serial: 0684 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nmw2U-SHXe9etk-Yko-v0w_uiHg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C5413/DF99A1E87BE811EB9A092342C4F9AE02/Nmw2U-SHXe9etk-Yko-v0w_uiHg.mft Manifest number: 0827 Signing time: Thu 12 Jun 2025 21:58:23 +0000 Manifest this update: Thu 12 Jun 2025 21:58:22 +0000 Manifest next update: Thu 19 Jun 2025 21:58:22 +0000 Files and hashes: 1: Nmw2U-SHXe9etk-Yko-v0w_uiHg.crl (hash: rFxRQ2I6K/2qI8mnuTHbZsoaOBrA8Sp7GPDiesuRNiY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C5413/DF99A1E87BE811EB9A092342C4F9AE02/Nmw2U-SHXe9etk-Yko-v0w_uiHg.crl rsync://rpki.apnic.net/member_repository/A91C5413/DF99A1E87BE811EB9A092342C4F9AE02/Nmw2U-SHXe9etk-Yko-v0w_uiHg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nmw2U-SHXe9etk-Yko-v0w_uiHg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 21:58:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1668 (0x684) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C5413, serialNumber=366C3653E4875DEF5EB64F98928FAFD30FEE8878 Validity Not Before: Jun 12 21:58:22 2025 GMT Not After : Jun 19 21:58:22 2025 GMT Subject: CN=684b4d7f-5d2b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:9a:25:51:6c:ce:e4:bc:c9:49:92:10:f3:d4: a9:05:62:c6:16:09:4f:c5:8c:b8:92:f2:11:30:93: bf:fb:29:9b:47:ce:a7:4b:b6:3c:82:d6:9e:c1:1a: 8e:9e:ff:09:fa:96:b4:c8:06:eb:06:82:0e:6e:76: 20:fe:2c:8d:3f:56:81:c1:79:d7:e9:4d:b2:9c:48: 1a:a1:b0:89:0d:4c:55:6d:93:65:08:e0:b3:b1:45: dc:64:aa:7a:6c:cc:5e:3b:d1:60:bc:51:54:72:f1: 46:46:1c:f1:12:ce:9d:b3:00:92:42:7e:4a:8a:6e: 1f:4f:31:5a:b3:82:16:00:be:40:51:72:b4:82:61: b0:7f:96:02:f3:1d:43:91:63:42:af:54:4a:21:98: eb:09:42:2c:69:76:a8:c1:ab:17:61:8b:1b:e9:8c: a1:cd:4a:6b:64:e9:15:5e:d5:cd:0e:6e:c6:e9:d8: b0:27:18:7d:5a:24:02:1c:c5:e0:3c:22:91:e7:0e: 59:1f:e2:54:0b:5e:83:e9:a1:53:0d:7f:32:63:a7: 89:7e:70:a8:99:3e:e0:eb:34:9d:66:4b:ba:1d:75: c3:01:88:b6:55:63:36:ad:a1:1f:1e:3c:d4:d2:fc: a6:33:0f:26:00:d7:48:93:df:2d:e7:b0:14:df:ef: ec:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:64:53:52:67:59:76:56:C2:AF:C9:F2:B0:53:E6:D4:74:D2:13:9D X509v3 Authority Key Identifier: keyid:36:6C:36:53:E4:87:5D:EF:5E:B6:4F:98:92:8F:AF:D3:0F:EE:88:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C5413/DF99A1E87BE811EB9A092342C4F9AE02/Nmw2U-SHXe9etk-Yko-v0w_uiHg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nmw2U-SHXe9etk-Yko-v0w_uiHg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C5413/DF99A1E87BE811EB9A092342C4F9AE02/Nmw2U-SHXe9etk-Yko-v0w_uiHg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption af:a3:32:be:62:0b:6b:a1:83:55:87:fa:18:de:13:7e:74:2d: dd:67:a0:7b:53:8b:c0:18:2f:f2:a2:e1:f5:bb:a5:92:7a:dd: 2c:04:0d:45:f8:48:e5:69:56:a7:78:ae:ef:d6:a0:da:91:75: 68:45:2e:65:1d:42:90:a8:6d:d9:bf:a8:35:c8:3f:5f:3b:26: 0d:d6:25:b1:c6:13:31:bb:74:fb:75:25:66:75:31:4f:a5:29: 37:a7:ce:24:0e:42:b4:9c:f7:6a:19:40:c3:bf:8f:0a:12:fc: 4f:9a:df:d8:8e:c2:da:9c:a4:b2:83:25:55:b0:50:31:ad:94: 20:77:6f:80:1a:f5:94:59:25:ef:a4:6f:e3:38:c5:e8:3b:e8: 61:39:28:98:38:af:30:92:c2:8f:fc:0d:b2:51:a1:d9:bd:b3: 69:55:fb:03:1e:b1:8b:c4:15:2a:c0:59:e5:b8:6e:62:5e:3e: ac:b4:01:6a:99:a3:fc:5c:3f:6e:d9:e8:d4:2a:4c:cf:c0:66: 42:bc:49:10:39:74:22:94:0a:74:bc:b0:31:ba:c9:96:13:91: 8b:42:71:88:bc:f4:de:9d:fc:26:60:90:5b:4d:fa:3f:72:0c: 1f:cb:bb:dc:58:2a:f5:fd:c3:ed:b7:1b:68:74:84:cc:d4:17: d6:59:f9:0c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBoQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzU0MTMxMTAvBgNVBAUTKDM2NkMzNjUzRTQ4NzVERUY1RUI2NEY5ODkyOEZBRkQz MEZFRTg4NzgwHhcNMjUwNjEyMjE1ODIyWhcNMjUwNjE5MjE1ODIyWjAYMRYwFAYD VQQDEw02ODRiNGQ3Zi01ZDJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1polUWzO5LzJSZIQ89SpBWLGFglPxYy4kvIRMJO/+ymbR86nS7Y8gtaewRqO nv8J+pa0yAbrBoIObnYg/iyNP1aBwXnX6U2ynEgaobCJDUxVbZNlCOCzsUXcZKp6 bMxeO9FgvFFUcvFGRhzxEs6dswCSQn5Kim4fTzFas4IWAL5AUXK0gmGwf5YC8x1D kWNCr1RKIZjrCUIsaXaowasXYYsb6YyhzUprZOkVXtXNDm7G6diwJxh9WiQCHMXg PCKR5w5ZH+JUC16D6aFTDX8yY6eJfnComT7g6zSdZku6HXXDAYi2VWM2raEfHjzU 0vymMw8mANdIk98t57AU3+/sYQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP9kU1Jn WXZWwq/J8rBT5tR00hOdMB8GA1UdIwQYMBaAFDZsNlPkh13vXrZPmJKPr9MP7oh4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNTQxMy9ERjk5QTFFODdC RTgxMUVCOUEwOTIzNDJDNEY5QUUwMi9ObXcyVS1TSFhlOWV0ay1Za28tdjB3X3Vp SGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05tdzJVLVNIWGU5ZXRrLVlrby12MHdfdWlIZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NTQxMy9ERjk5QTFFODdCRTgxMUVCOUEwOTIzNDJDNEY5QUUwMi9ObXcyVS1TSFhl OWV0ay1Za28tdjB3X3VpSGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCvozK+YgtroYNVh/oY3hN+dC3dZ6B7U4vAGC/youH1u6WSet0sBA1F +EjlaVaneK7v1qDakXVoRS5lHUKQqG3Zv6g1yD9fOyYN1iWxxhMxu3T7dSVmdTFP pSk3p84kDkK0nPdqGUDDv48KEvxPmt/YjsLanKSygyVVsFAxrZQgd2+AGvWUWSXv pG/jOMXoO+hhOSiYOK8wksKP/A2yUaHZvbNpVfsDHrGLxBUqwFnluG5iXj6stAFq maP8XD9u2ejUKkzPwGZCvEkQOXQilAp0vLAxusmWE5GLQnGIvPTenfwmYJBbTfo/ cgwfy7vcWCr1/cPttxtodITM1BfWWfkM -----END CERTIFICATE-----Generated at Sat Jun 14 18:48:48 2025 by rpki-client