$ rpki-client -vvf rpki.apnic.net/member_repository/A91C8E33/AD2CF21EA97F11EABF43EF4AC4F9AE02/nag9eBUvVmRHEvSlgLqVNV-IgUc.mft File: nag9eBUvVmRHEvSlgLqVNV-IgUc.mft (raw, json) Hash identifier: DygBeEuArDjcyCe9epaXTALyYvwb7T2uVFiFbI15hR8= Subject key identifier: 97:7A:26:31:3E:50:58:BB:7D:21:07:5E:9D:58:3E:AB:0F:EA:14:D1 Authority key identifier: 9D:A8:3D:78:15:2F:56:64:47:12:F4:A5:80:BA:95:35:5F:88:81:47 Certificate issuer: /CN=A91C8E33/serialNumber=9DA83D78152F56644712F4A580BA95355F888147 Certificate serial: 0908 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nag9eBUvVmRHEvSlgLqVNV-IgUc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C8E33/AD2CF21EA97F11EABF43EF4AC4F9AE02/nag9eBUvVmRHEvSlgLqVNV-IgUc.mft Manifest number: 0901 Signing time: Thu 12 Jun 2025 20:05:59 +0000 Manifest this update: Thu 12 Jun 2025 20:05:59 +0000 Manifest next update: Thu 19 Jun 2025 20:05:59 +0000 Files and hashes: 1: nag9eBUvVmRHEvSlgLqVNV-IgUc.crl (hash: 8bbjjPxAGI5bnP3Ry8y0hiph2PIfzn8vCGXoJCDq5Wg=) 2: 9C3E2D18A98111EAB4B3FD50C4F9AE02.roa (hash: uVDqEWvFSoFCutjWZ+pfrsUVRlgkPu0drLynarAKc08=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C8E33/AD2CF21EA97F11EABF43EF4AC4F9AE02/nag9eBUvVmRHEvSlgLqVNV-IgUc.crl rsync://rpki.apnic.net/member_repository/A91C8E33/AD2CF21EA97F11EABF43EF4AC4F9AE02/nag9eBUvVmRHEvSlgLqVNV-IgUc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nag9eBUvVmRHEvSlgLqVNV-IgUc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 20:05:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2312 (0x908) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C8E33, serialNumber=9DA83D78152F56644712F4A580BA95355F888147 Validity Not Before: Jun 12 20:05:59 2025 GMT Not After : Jun 19 20:05:59 2025 GMT Subject: CN=684b3327-ac2b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:55:c7:a9:76:fe:f7:4e:d8:ac:c3:17:26:ee: dc:b3:1b:7e:9b:34:03:35:98:f9:84:dc:f4:4f:c3: 6d:de:cb:ff:39:92:a9:bb:be:82:06:81:30:7e:17: b6:a6:d5:1d:c8:30:84:05:7c:30:12:a3:13:da:b6: 8b:cd:ee:ea:d7:dd:59:5d:b2:d7:2f:74:44:74:58: 35:0e:b9:74:7e:a9:ab:7b:2b:6b:08:34:fc:f4:9c: 40:ea:f3:69:23:e4:4d:37:70:08:f8:19:56:5d:5f: d6:a5:f7:25:e3:1a:52:4f:d9:e1:a1:73:af:b7:ae: 80:9e:60:74:5e:f9:f8:43:d1:98:1f:00:01:e0:41: 26:11:99:4b:27:34:e3:8b:4c:90:c1:81:6b:95:fc: a9:ba:c6:11:99:28:62:2a:37:27:88:f7:81:e0:e2: 3e:92:cb:dc:6a:44:03:14:62:f1:b5:fd:85:4e:dd: a2:bd:0d:13:ba:dc:91:41:5c:22:16:bb:49:60:73: a9:99:07:95:27:57:ed:da:88:b5:29:0e:65:50:97: cb:6c:9f:f6:28:51:b7:08:aa:6c:57:28:a5:e8:ad: a6:33:8c:de:7e:c1:88:f1:6a:27:7c:cc:2c:7e:ed: 75:a8:4b:a4:3c:c4:40:b5:c4:2f:17:3e:81:39:4d: 8b:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:7A:26:31:3E:50:58:BB:7D:21:07:5E:9D:58:3E:AB:0F:EA:14:D1 X509v3 Authority Key Identifier: keyid:9D:A8:3D:78:15:2F:56:64:47:12:F4:A5:80:BA:95:35:5F:88:81:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C8E33/AD2CF21EA97F11EABF43EF4AC4F9AE02/nag9eBUvVmRHEvSlgLqVNV-IgUc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nag9eBUvVmRHEvSlgLqVNV-IgUc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C8E33/AD2CF21EA97F11EABF43EF4AC4F9AE02/nag9eBUvVmRHEvSlgLqVNV-IgUc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 26:c4:70:7d:1b:1a:53:0c:02:12:88:a3:9f:d3:0f:c1:2d:f4: 79:8e:4d:c4:e1:ce:23:78:6b:48:e8:39:44:49:1f:25:fd:5e: ac:81:96:82:bf:af:92:a0:17:4c:17:ff:ad:a8:1f:dc:db:1b: db:de:67:89:22:11:f6:7d:96:4f:c4:ea:c2:6e:5b:17:7d:91: aa:87:b6:f2:c7:ee:37:5d:22:e8:9d:cb:86:f8:5a:9f:aa:73: 05:bb:9d:9b:9d:fd:7d:c9:99:63:70:9d:76:91:f9:fb:85:b0: 51:b4:65:09:f5:e8:63:ae:ea:e3:2f:d2:ec:40:22:d2:10:2f: e2:f5:11:91:97:4c:be:1f:fb:86:7a:eb:03:40:55:e2:e8:c2: 95:9c:c3:d4:96:4e:2c:73:19:a8:36:72:05:8e:f4:33:3c:2a: d0:3e:95:4b:de:94:0c:3d:c1:51:31:63:b1:51:e8:1f:2b:da: 00:43:81:04:38:b0:d5:dc:97:f8:c0:91:0c:9e:9e:ec:76:f9: 89:e4:f0:72:86:93:42:04:9b:4e:c9:4a:64:0b:8d:22:89:3b: 81:84:ea:13:c5:e8:5e:28:8b:16:d4:75:b9:2e:91:bd:2a:9d: 1a:20:02:04:9c:de:c0:95:0b:6c:5c:e3:2c:1d:82:df:41:69: cf:44:05:7c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCQgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzhFMzMxMTAvBgNVBAUTKDlEQTgzRDc4MTUyRjU2NjQ0NzEyRjRBNTgwQkE5NTM1 NUY4ODgxNDcwHhcNMjUwNjEyMjAwNTU5WhcNMjUwNjE5MjAwNTU5WjAYMRYwFAYD VQQDEw02ODRiMzMyNy1hYzJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzVXHqXb+907YrMMXJu7csxt+mzQDNZj5hNz0T8Nt3sv/OZKpu76CBoEwfhe2 ptUdyDCEBXwwEqMT2raLze7q191ZXbLXL3REdFg1Drl0fqmreytrCDT89JxA6vNp I+RNN3AI+BlWXV/Wpfcl4xpST9nhoXOvt66AnmB0Xvn4Q9GYHwAB4EEmEZlLJzTj i0yQwYFrlfypusYRmShiKjcniPeB4OI+ksvcakQDFGLxtf2FTt2ivQ0TutyRQVwi FrtJYHOpmQeVJ1ft2oi1KQ5lUJfLbJ/2KFG3CKpsVyil6K2mM4zefsGI8WonfMws fu11qEukPMRAtcQvFz6BOU2LPwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJd6JjE+ UFi7fSEHXp1YPqsP6hTRMB8GA1UdIwQYMBaAFJ2oPXgVL1ZkRxL0pYC6lTVfiIFH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOEUzMy9BRDJDRjIxRUE5 N0YxMUVBQkY0M0VGNEFDNEY5QUUwMi9uYWc5ZUJVdlZtUkhFdlNsZ0xxVk5WLUln VWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25hZzllQlV2Vm1SSEV2U2xnTHFWTlYtSWdVYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD OEUzMy9BRDJDRjIxRUE5N0YxMUVBQkY0M0VGNEFDNEY5QUUwMi9uYWc5ZUJVdlZt UkhFdlNsZ0xxVk5WLUlnVWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAmxHB9GxpTDAISiKOf0w/BLfR5jk3E4c4jeGtI6DlESR8l/V6sgZaC v6+SoBdMF/+tqB/c2xvb3meJIhH2fZZPxOrCblsXfZGqh7byx+43XSLoncuG+Fqf qnMFu52bnf19yZljcJ12kfn7hbBRtGUJ9ehjrurjL9LsQCLSEC/i9RGRl0y+H/uG eusDQFXi6MKVnMPUlk4scxmoNnIFjvQzPCrQPpVL3pQMPcFRMWOxUegfK9oAQ4EE OLDV3Jf4wJEMnp7sdvmJ5PByhpNCBJtOyUpkC40iiTuBhOoTxeheKIsW1HW5LpG9 Kp0aIAIEnN7AlQtsXOMsHYLfQWnPRAV8 -----END CERTIFICATE-----Generated at Sat Jun 14 17:48:52 2025 by rpki-client