$ rpki-client -vvf rpki.apnic.net/member_repository/A91C6CAF/F3E0FAE4B6F411EEAC203810C4F9AE02/nwLaOrX7RTF1B8SAIc4Ki5NyVck.mft File: nwLaOrX7RTF1B8SAIc4Ki5NyVck.mft (raw, json) Hash identifier: G/PIZYHyf5ZkhaMX9OcGvybvQKJzz7Q1QjZknXQ0O2g= Subject key identifier: DD:CD:F2:1F:59:47:73:76:47:6C:E4:75:52:E1:2A:2F:84:E5:2A:81 Authority key identifier: 9F:02:DA:3A:B5:FB:45:31:75:07:C4:80:21:CE:0A:8B:93:72:55:C9 Certificate issuer: /CN=A91C6CAF/serialNumber=9F02DA3AB5FB45317507C48021CE0A8B937255C9 Certificate serial: 011E Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nwLaOrX7RTF1B8SAIc4Ki5NyVck.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C6CAF/F3E0FAE4B6F411EEAC203810C4F9AE02/nwLaOrX7RTF1B8SAIc4Ki5NyVck.mft Manifest number: 0114 Signing time: Thu 19 Jun 2025 04:23:24 +0000 Manifest this update: Thu 19 Jun 2025 04:23:24 +0000 Manifest next update: Thu 26 Jun 2025 04:23:24 +0000 Files and hashes: 1: nwLaOrX7RTF1B8SAIc4Ki5NyVck.crl (hash: GYIu2xLc63u8wgcLHwAtovJXT31W4LVtHhigzjAyDfo=) 2: 09E42D1E921B11EF829E0041C4F9AE02.roa (hash: B4bx9kA0p4n5ASz52WYMBOS7rU+I5DT2fmWjDq/qssM=) 3: 51E59058921B11EFB656CB41C4F9AE02.roa (hash: ZDrCMxxOwwuqNF0Q4xD3EvKSvIiYcNvuSOn5SbIs2mk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C6CAF/F3E0FAE4B6F411EEAC203810C4F9AE02/nwLaOrX7RTF1B8SAIc4Ki5NyVck.crl rsync://rpki.apnic.net/member_repository/A91C6CAF/F3E0FAE4B6F411EEAC203810C4F9AE02/nwLaOrX7RTF1B8SAIc4Ki5NyVck.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nwLaOrX7RTF1B8SAIc4Ki5NyVck.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 26 Jun 2025 04:23:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 286 (0x11e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C6CAF, serialNumber=9F02DA3AB5FB45317507C48021CE0A8B937255C9 Validity Not Before: Jun 19 04:23:24 2025 GMT Not After : Jun 26 04:23:24 2025 GMT Subject: CN=685390bc-f1e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:ed:4d:19:a8:81:d7:80:00:a6:75:e4:84:00: 43:74:22:5a:04:40:d3:aa:2d:67:9b:8a:af:31:e1: dc:e2:9a:03:a5:83:98:e6:3c:a6:d0:a8:8d:17:2b: 94:80:f1:07:89:71:cc:75:4d:db:bf:6d:96:81:bb: db:c9:82:ed:89:4a:91:44:15:f9:21:a4:41:4e:91: 53:d5:72:36:ea:c2:fe:8a:60:68:2a:54:69:73:e1: 5d:e3:b6:15:c5:fd:07:88:f5:93:ac:bf:6d:cb:e4: 95:1d:78:21:d4:a2:83:df:ae:28:d6:2e:54:2a:fb: 12:62:b2:63:91:48:8c:b3:a8:d6:d8:0e:87:88:eb: 83:ac:5d:49:f7:ce:04:c1:7f:2e:66:c0:09:b6:dd: 7d:91:1a:25:0d:3f:09:ef:b0:4a:88:57:da:14:45: 52:3a:15:74:42:67:b9:39:e0:bf:70:15:e9:9b:81: 82:cb:7c:9a:7b:9a:4b:c7:72:db:e8:df:7e:f6:61: ee:c0:fe:d0:94:99:e1:83:44:0b:fc:22:07:0b:dc: e7:a2:7c:ae:c8:5d:7d:78:7f:27:39:cb:9b:82:61: 1e:35:59:af:5d:68:89:26:bd:8e:27:36:cb:37:79: 66:de:c4:1f:80:ba:b1:0d:7b:5f:71:ae:1e:61:75: ca:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:CD:F2:1F:59:47:73:76:47:6C:E4:75:52:E1:2A:2F:84:E5:2A:81 X509v3 Authority Key Identifier: keyid:9F:02:DA:3A:B5:FB:45:31:75:07:C4:80:21:CE:0A:8B:93:72:55:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C6CAF/F3E0FAE4B6F411EEAC203810C4F9AE02/nwLaOrX7RTF1B8SAIc4Ki5NyVck.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nwLaOrX7RTF1B8SAIc4Ki5NyVck.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C6CAF/F3E0FAE4B6F411EEAC203810C4F9AE02/nwLaOrX7RTF1B8SAIc4Ki5NyVck.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b9:57:48:09:07:e2:00:53:ac:84:08:0d:94:fa:96:43:ff:7e: 92:3b:3c:14:9b:43:2b:96:26:be:dd:c2:2d:16:59:68:24:7f: 46:03:84:3f:97:80:75:18:6a:c2:e3:a7:c1:07:0e:78:b7:20: 07:04:1a:01:a7:30:04:9e:06:a0:a3:50:e3:7e:ff:6a:79:c3: 71:6d:03:17:4d:fc:33:68:6e:cf:7c:10:c5:e1:09:77:0f:a4: 15:8d:c4:fe:f5:4c:2a:99:16:92:13:50:bd:90:87:86:e2:2d: ce:ab:b8:19:db:4f:23:91:30:69:1f:26:d6:78:05:f0:2c:9a: df:32:a5:2c:7c:86:de:d4:b2:f8:6a:f3:c4:36:ef:bd:1f:3b: d6:49:57:06:20:db:93:ea:29:b3:ea:be:c1:02:1a:22:57:ef: 1b:0e:cb:70:65:b4:b3:26:2b:59:4d:8a:93:80:47:e7:67:e6: fb:a9:a2:cd:88:f0:5f:5e:51:eb:eb:b5:04:8e:7f:9f:ec:1e: 8c:70:3b:46:e5:c8:fc:3f:4a:4b:e8:79:dc:35:b2:47:98:a4: 5a:b7:31:5a:37:b6:18:9d:42:5b:aa:ab:a8:72:3f:cf:41:17: d5:97:4d:66:57:4b:ff:4f:38:91:7b:c3:26:d9:06:c4:94:70: eb:c5:25:ba -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAR4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzZDQUYxMTAvBgNVBAUTKDlGMDJEQTNBQjVGQjQ1MzE3NTA3QzQ4MDIxQ0UwQThC OTM3MjU1QzkwHhcNMjUwNjE5MDQyMzI0WhcNMjUwNjI2MDQyMzI0WjAYMRYwFAYD VQQDEw02ODUzOTBiYy1mMWU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3e1NGaiB14AApnXkhABDdCJaBEDTqi1nm4qvMeHc4poDpYOY5jym0KiNFyuU gPEHiXHMdU3bv22WgbvbyYLtiUqRRBX5IaRBTpFT1XI26sL+imBoKlRpc+Fd47YV xf0HiPWTrL9ty+SVHXgh1KKD364o1i5UKvsSYrJjkUiMs6jW2A6HiOuDrF1J984E wX8uZsAJtt19kRolDT8J77BKiFfaFEVSOhV0Qme5OeC/cBXpm4GCy3yae5pLx3Lb 6N9+9mHuwP7QlJnhg0QL/CIHC9znonyuyF19eH8nOcubgmEeNVmvXWiJJr2OJzbL N3lm3sQfgLqxDXtfca4eYXXKNQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN3N8h9Z R3N2R2zkdVLhKi+E5SqBMB8GA1UdIwQYMBaAFJ8C2jq1+0UxdQfEgCHOCouTclXJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNkNBRi9GM0UwRkFFNEI2 RjQxMUVFQUMyMDM4MTBDNEY5QUUwMi9ud0xhT3JYN1JURjFCOFNBSWM0S2k1TnlW Y2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL253TGFPclg3UlRGMUI4U0FJYzRLaTVOeVZjay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NkNBRi9GM0UwRkFFNEI2RjQxMUVFQUMyMDM4MTBDNEY5QUUwMi9ud0xhT3JYN1JU RjFCOFNBSWM0S2k1TnlWY2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC5V0gJB+IAU6yECA2U+pZD/36SOzwUm0Mrlia+3cItFlloJH9GA4Q/ l4B1GGrC46fBBw54tyAHBBoBpzAEngago1Djfv9qecNxbQMXTfwzaG7PfBDF4Ql3 D6QVjcT+9UwqmRaSE1C9kIeG4i3Oq7gZ208jkTBpHybWeAXwLJrfMqUsfIbe1LL4 avPENu+9HzvWSVcGINuT6imz6r7BAhoiV+8bDstwZbSzJitZTYqTgEfnZ+b7qaLN iPBfXlHr67UEjn+f7B6McDtG5cj8P0pL6HncNbJHmKRatzFaN7YYnUJbqquocj/P QRfVl01mV0v/TziRe8Mm2QbElHDrxSW6 -----END CERTIFICATE-----Generated at Thu Jun 19 18:56:25 2025 by rpki-client