$ rpki-client -vvf rpki.apnic.net/member_repository/A91C6B27/82BF2BF4305411EAAFC9116EC4F9AE02/nssirN4JZ6BYN-WPxzHTV-N2N_g.mft File: nssirN4JZ6BYN-WPxzHTV-N2N_g.mft (raw, json) Hash identifier: N7HvZQDeMqWcUWe3xgUJs+fBE5dKTV9YZy6fCRwYdak= Subject key identifier: 46:2A:D1:3F:FC:C1:E5:C9:CA:97:A3:EE:B1:40:AB:03:06:83:EC:47 Authority key identifier: 9E:CB:22:AC:DE:09:67:A0:58:37:E5:8F:C7:31:D3:57:E3:76:37:F8 Certificate issuer: /CN=A91C6B27/serialNumber=9ECB22ACDE0967A05837E58FC731D357E37637F8 Certificate serial: 0B7C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nssirN4JZ6BYN-WPxzHTV-N2N_g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C6B27/82BF2BF4305411EAAFC9116EC4F9AE02/nssirN4JZ6BYN-WPxzHTV-N2N_g.mft Manifest number: 0B6A Signing time: Sat 14 Jun 2025 18:54:15 +0000 Manifest this update: Sat 14 Jun 2025 18:54:15 +0000 Manifest next update: Sat 21 Jun 2025 18:54:15 +0000 Files and hashes: 1: nssirN4JZ6BYN-WPxzHTV-N2N_g.crl (hash: ehfE/4xfbls625GsFsOvGz3u0tP1ub1nK2m+ppPwp2s=) 2: 2B1D3BB2305811EA8D5B6479C4F9AE02.roa (hash: y28rLGPdPmm2RMeTHn7TROIYxoMrptjo0yzzyCvWoMs=) 3: E4BB99E2336E11EA94623E18C4F9AE02.roa (hash: dDWf0aYmxu05SE8QIKzfCcmUhn7e971nZnRqmk+LmCo=) 4: E5675F48336E11EA94623E18C4F9AE02.roa (hash: iPbzGQb+v1UtoJ+/xdLJYlI0s4JJe78IGCPidttsEfQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C6B27/82BF2BF4305411EAAFC9116EC4F9AE02/nssirN4JZ6BYN-WPxzHTV-N2N_g.crl rsync://rpki.apnic.net/member_repository/A91C6B27/82BF2BF4305411EAAFC9116EC4F9AE02/nssirN4JZ6BYN-WPxzHTV-N2N_g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nssirN4JZ6BYN-WPxzHTV-N2N_g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 18:54:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2940 (0xb7c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C6B27, serialNumber=9ECB22ACDE0967A05837E58FC731D357E37637F8 Validity Not Before: Jun 14 18:54:15 2025 GMT Not After : Jun 21 18:54:15 2025 GMT Subject: CN=684dc557-b1a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:ec:70:ce:d5:55:6b:95:a3:da:09:e7:31:45: 09:c7:8e:50:16:d8:45:9f:64:8e:8b:db:1a:7b:4c: 72:d5:3d:10:3a:8f:8c:38:eb:80:65:2d:16:b0:81: 3f:c8:6d:d6:d5:47:dc:16:7b:65:6d:fe:8f:c4:f1: a0:d8:e5:92:4e:a1:9d:14:68:e7:d9:fd:f7:09:49: 1a:39:cf:26:82:9e:56:a9:21:43:1b:4b:3b:57:68: a3:54:70:03:97:42:5e:a7:f9:60:91:ba:e3:5d:f2: c1:04:a7:69:d1:6f:f7:50:0b:1b:4a:6b:a0:d1:7e: 45:25:44:ff:c1:70:4a:d9:33:0f:06:43:bc:28:b2: 29:91:66:87:a5:28:f3:a7:d2:0b:c5:31:e1:bd:63: 50:41:e3:fe:bd:71:fc:d4:6a:f9:d2:d3:52:a2:7c: e6:c8:da:33:03:19:23:b4:0b:2d:34:5a:c9:e6:f9: f8:3b:20:78:a1:93:29:e5:60:74:6e:2b:3b:06:63: 27:81:09:af:c8:e2:28:84:64:5f:f7:aa:43:87:e7: 99:93:e9:74:26:cc:62:63:03:37:77:c0:e9:43:1e: 4c:d1:60:15:bd:58:6e:37:65:37:85:76:13:6f:3d: 41:a3:ad:c4:70:c2:0e:6f:99:45:a4:58:07:c6:3e: 28:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:2A:D1:3F:FC:C1:E5:C9:CA:97:A3:EE:B1:40:AB:03:06:83:EC:47 X509v3 Authority Key Identifier: keyid:9E:CB:22:AC:DE:09:67:A0:58:37:E5:8F:C7:31:D3:57:E3:76:37:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C6B27/82BF2BF4305411EAAFC9116EC4F9AE02/nssirN4JZ6BYN-WPxzHTV-N2N_g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nssirN4JZ6BYN-WPxzHTV-N2N_g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C6B27/82BF2BF4305411EAAFC9116EC4F9AE02/nssirN4JZ6BYN-WPxzHTV-N2N_g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4a:6a:cb:e2:c2:bc:2d:11:32:15:63:62:53:10:c5:92:7c:d8: 0f:39:f8:71:ae:59:8b:51:ed:50:0e:c8:2c:a3:a5:0e:60:13: 57:80:47:03:02:e8:49:d9:36:37:76:fb:d2:57:a7:48:7c:d8: cc:53:7c:46:00:c8:93:f4:d8:2f:69:16:52:59:ac:48:ea:2f: 1f:4d:09:a5:38:9b:84:76:93:37:1f:b5:76:4e:4f:d4:cc:32: 99:48:07:ab:50:b6:2d:96:36:be:86:87:b3:29:9b:9d:11:11: 05:ed:aa:dc:a0:9c:28:38:0c:3a:f4:f0:a6:13:e3:ba:72:23: 37:54:87:19:c0:e3:19:eb:4a:4b:6a:4e:9f:18:27:dd:79:7e: 9b:49:be:00:05:a1:e0:10:89:21:84:7b:fa:08:2f:98:22:ee: e2:36:57:42:4d:9a:4c:9d:99:8b:18:35:08:ef:d7:5b:59:c1: 8d:5e:a1:11:21:77:da:d6:ed:2f:f9:8a:eb:af:a0:08:22:eb: a0:89:cc:87:b7:12:e7:89:5e:a3:98:5f:29:d0:eb:f3:64:94: db:96:11:05:39:69:07:ef:7d:98:4e:de:1f:83:5a:46:e2:f2: 3a:f0:e8:ce:c2:72:85:f4:03:76:7a:33:ac:22:f3:63:c5:cc: 71:e5:d3:6d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC3wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzZCMjcxMTAvBgNVBAUTKDlFQ0IyMkFDREUwOTY3QTA1ODM3RTU4RkM3MzFEMzU3 RTM3NjM3RjgwHhcNMjUwNjE0MTg1NDE1WhcNMjUwNjIxMTg1NDE1WjAYMRYwFAYD VQQDEw02ODRkYzU1Ny1iMWE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuexwztVVa5Wj2gnnMUUJx45QFthFn2SOi9sae0xy1T0QOo+MOOuAZS0WsIE/ yG3W1UfcFntlbf6PxPGg2OWSTqGdFGjn2f33CUkaOc8mgp5WqSFDG0s7V2ijVHAD l0Jep/lgkbrjXfLBBKdp0W/3UAsbSmug0X5FJUT/wXBK2TMPBkO8KLIpkWaHpSjz p9ILxTHhvWNQQeP+vXH81Gr50tNSonzmyNozAxkjtAstNFrJ5vn4OyB4oZMp5WB0 bis7BmMngQmvyOIohGRf96pDh+eZk+l0JsxiYwM3d8DpQx5M0WAVvVhuN2U3hXYT bz1Bo63EcMIOb5lFpFgHxj4o4QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEYq0T/8 weXJypej7rFAqwMGg+xHMB8GA1UdIwQYMBaAFJ7LIqzeCWegWDflj8cx01fjdjf4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNkIyNy84MkJGMkJGNDMw NTQxMUVBQUZDOTExNkVDNEY5QUUwMi9uc3Npck40Slo2QllOLVdQeHpIVFYtTjJO X2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25zc2lyTjRKWjZCWU4tV1B4ekhUVi1OMk5fZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NkIyNy84MkJGMkJGNDMwNTQxMUVBQUZDOTExNkVDNEY5QUUwMi9uc3Npck40Slo2 QllOLVdQeHpIVFYtTjJOX2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBKasviwrwtETIVY2JTEMWSfNgPOfhxrlmLUe1QDsgso6UOYBNXgEcD AuhJ2TY3dvvSV6dIfNjMU3xGAMiT9NgvaRZSWaxI6i8fTQmlOJuEdpM3H7V2Tk/U zDKZSAerULYtlja+hoezKZudEREF7arcoJwoOAw69PCmE+O6ciM3VIcZwOMZ60pL ak6fGCfdeX6bSb4ABaHgEIkhhHv6CC+YIu7iNldCTZpMnZmLGDUI79dbWcGNXqER IXfa1u0v+Yrrr6AIIuugicyHtxLniV6jmF8p0OvzZJTblhEFOWkH732YTt4fg1pG 4vI68OjOwnKF9AN2ejOsIvNjxcxx5dNt -----END CERTIFICATE-----Generated at Mon Jun 16 09:50:39 2025 by rpki-client