$ rpki-client -vvf rpki.apnic.net/member_repository/A91C99B4/5DE59696594911EBA48C7871C4F9AE02/NIvmaU7XBBqvKNDsjGxlZVkfLdo.mft File: NIvmaU7XBBqvKNDsjGxlZVkfLdo.mft (raw, json) Hash identifier: znHFup2/iWsB+07lWpkmKUfD+1lk9dGjVM13IJIVz5M= Subject key identifier: ED:C8:62:92:7D:CD:3A:5D:3B:29:55:0F:03:29:8A:F9:EE:44:6F:B2 Authority key identifier: 34:8B:E6:69:4E:D7:04:1A:AF:28:D0:EC:8C:6C:65:65:59:1F:2D:DA Certificate issuer: /CN=A91C99B4/serialNumber=348BE6694ED7041AAF28D0EC8C6C6565591F2DDA Certificate serial: 0714 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NIvmaU7XBBqvKNDsjGxlZVkfLdo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C99B4/5DE59696594911EBA48C7871C4F9AE02/NIvmaU7XBBqvKNDsjGxlZVkfLdo.mft Manifest number: 06F0 Signing time: Sat 14 Jun 2025 21:47:31 +0000 Manifest this update: Sat 14 Jun 2025 21:47:30 +0000 Manifest next update: Sat 21 Jun 2025 21:47:30 +0000 Files and hashes: 1: NIvmaU7XBBqvKNDsjGxlZVkfLdo.crl (hash: MiueCZLQHe2prVCEWWfliIMX4SJQWGuj+dqv3vIzWAk=) 2: 96FC6944591111EEBFB2384AC4F9AE02.roa (hash: ax+xM3Q8UL+b4tURGtbo2gp+tcgS0j+5JXjNoSNoJus=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C99B4/5DE59696594911EBA48C7871C4F9AE02/NIvmaU7XBBqvKNDsjGxlZVkfLdo.crl rsync://rpki.apnic.net/member_repository/A91C99B4/5DE59696594911EBA48C7871C4F9AE02/NIvmaU7XBBqvKNDsjGxlZVkfLdo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NIvmaU7XBBqvKNDsjGxlZVkfLdo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 21:47:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1812 (0x714) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C99B4, serialNumber=348BE6694ED7041AAF28D0EC8C6C6565591F2DDA Validity Not Before: Jun 14 21:47:30 2025 GMT Not After : Jun 21 21:47:30 2025 GMT Subject: CN=684dedf3-a71a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:03:31:cb:74:cf:21:73:10:cf:d8:4e:57:2e: 80:79:e9:1b:25:34:56:83:f2:2a:47:07:bf:48:52: 8d:f1:f6:9e:4b:1e:82:63:72:18:9b:b9:a4:70:eb: 78:ca:95:1d:c2:4b:19:e4:5c:cd:b8:8a:16:9e:8f: f1:95:2f:ad:e6:05:5c:d7:bf:40:97:95:0a:c4:33: 74:e1:19:87:05:f4:e1:61:aa:aa:10:b9:a2:fb:1c: e2:7c:57:a4:5f:93:1c:9e:e2:34:8e:67:72:23:58: d3:e6:7f:95:a4:7b:a3:c3:05:47:c6:ad:d2:c2:25: e8:83:44:3f:f1:6b:5e:fd:d8:90:50:cf:aa:ff:0a: d5:13:87:f3:d3:36:88:88:91:46:a6:c7:b5:3c:6e: 7d:ff:e7:4c:3f:6f:a4:4b:2c:8d:cc:44:bf:12:45: 9e:81:2e:f0:f8:1f:6a:3c:99:68:a4:9e:d0:83:54: 70:75:8e:67:28:95:f5:89:65:d6:93:03:cd:75:c5: a3:eb:e1:fa:c4:fc:d5:e7:5c:c5:0e:e7:65:9e:10: 9f:b6:b0:3a:83:67:16:bd:aa:a0:78:95:c9:06:9a: 24:6c:c3:99:61:0d:3c:11:77:e2:e6:f0:df:a3:1e: 22:6a:2d:3a:cf:d6:27:a5:ea:7c:ad:6b:ce:b7:f1: 7d:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:C8:62:92:7D:CD:3A:5D:3B:29:55:0F:03:29:8A:F9:EE:44:6F:B2 X509v3 Authority Key Identifier: keyid:34:8B:E6:69:4E:D7:04:1A:AF:28:D0:EC:8C:6C:65:65:59:1F:2D:DA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C99B4/5DE59696594911EBA48C7871C4F9AE02/NIvmaU7XBBqvKNDsjGxlZVkfLdo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NIvmaU7XBBqvKNDsjGxlZVkfLdo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C99B4/5DE59696594911EBA48C7871C4F9AE02/NIvmaU7XBBqvKNDsjGxlZVkfLdo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 45:6c:77:c5:c6:b6:f8:88:f9:c0:c6:67:b0:94:0f:da:51:67: a0:89:3e:48:3f:45:f7:1d:93:00:f0:65:82:ca:a6:66:bf:94: 7b:aa:3c:8e:40:f2:1f:25:b2:54:6c:5e:81:39:e9:a1:88:c0: 27:f7:5a:50:d9:9b:71:56:89:64:97:3e:a3:95:c2:bf:27:fc: ca:14:a3:ec:28:35:2a:d6:6a:8d:7c:71:69:f3:31:08:45:49: 35:aa:68:35:77:8c:d4:c4:ba:43:7c:88:d4:3d:b8:7c:f7:51: bb:cc:2c:aa:d9:e8:eb:b0:d0:8e:ea:f6:91:66:20:ac:3f:c2: f4:d6:68:6e:60:ca:4b:4e:4e:4f:41:6e:9f:c0:c2:d4:cc:ca: c8:66:52:a5:38:a9:93:7f:ab:6e:b1:ee:a6:6e:39:14:c8:62: 86:6e:4f:96:26:bb:e2:0a:90:51:54:cf:a8:8b:be:15:85:51: 2f:e2:83:f9:f3:4a:9a:76:5a:57:c7:fe:78:57:1b:cd:dd:72: 27:09:05:6b:2f:cd:46:cc:f1:4f:8d:70:bc:38:8b:a2:e0:8a: 1b:cb:b1:f5:1b:36:f3:e2:9c:66:04:0d:ea:3a:3a:59:d5:d8: 26:43:6b:0d:f8:b2:4f:3d:26:00:06:62:9a:9e:80:da:7f:10: f4:af:68:e7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBxQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qzk5QjQxMTAvBgNVBAUTKDM0OEJFNjY5NEVENzA0MUFBRjI4RDBFQzhDNkM2NTY1 NTkxRjJEREEwHhcNMjUwNjE0MjE0NzMwWhcNMjUwNjIxMjE0NzMwWjAYMRYwFAYD VQQDEw02ODRkZWRmMy1hNzFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwAMxy3TPIXMQz9hOVy6AeekbJTRWg/IqRwe/SFKN8faeSx6CY3IYm7mkcOt4 ypUdwksZ5FzNuIoWno/xlS+t5gVc179Al5UKxDN04RmHBfThYaqqELmi+xzifFek X5McnuI0jmdyI1jT5n+VpHujwwVHxq3SwiXog0Q/8Wte/diQUM+q/wrVE4fz0zaI iJFGpse1PG59/+dMP2+kSyyNzES/EkWegS7w+B9qPJlopJ7Qg1RwdY5nKJX1iWXW kwPNdcWj6+H6xPzV51zFDudlnhCftrA6g2cWvaqgeJXJBpokbMOZYQ08EXfi5vDf ox4iai06z9Ynpep8rWvOt/F9WQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO3IYpJ9 zTpdOylVDwMpivnuRG+yMB8GA1UdIwQYMBaAFDSL5mlO1wQaryjQ7IxsZWVZHy3a MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOTlCNC81REU1OTY5NjU5 NDkxMUVCQTQ4Qzc4NzFDNEY5QUUwMi9OSXZtYVU3WEJCcXZLTkRzakd4bFpWa2ZM ZG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05Jdm1hVTdYQkJxdktORHNqR3hsWlZrZkxkby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD OTlCNC81REU1OTY5NjU5NDkxMUVCQTQ4Qzc4NzFDNEY5QUUwMi9OSXZtYVU3WEJC cXZLTkRzakd4bFpWa2ZMZG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBFbHfFxrb4iPnAxmewlA/aUWegiT5IP0X3HZMA8GWCyqZmv5R7qjyO QPIfJbJUbF6BOemhiMAn91pQ2ZtxVolklz6jlcK/J/zKFKPsKDUq1mqNfHFp8zEI RUk1qmg1d4zUxLpDfIjUPbh891G7zCyq2ejrsNCO6vaRZiCsP8L01mhuYMpLTk5P QW6fwMLUzMrIZlKlOKmTf6tuse6mbjkUyGKGbk+WJrviCpBRVM+oi74VhVEv4oP5 80qadlpXx/54VxvN3XInCQVrL81GzPFPjXC8OIui4Ioby7H1Gzbz4pxmBA3qOjpZ 1dgmQ2sN+LJPPSYABmKanoDafxD0r2jn -----END CERTIFICATE-----Generated at Sun Jun 15 08:52:10 2025 by rpki-client