$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9D5D/DD6F28720A8B11EABCF9CE52C4F9AE02/Ny2TbjjYucsfcBIhn_ghcrkL7lg.mft File: Ny2TbjjYucsfcBIhn_ghcrkL7lg.mft (raw, json) Hash identifier: TEHoZdlTzgaGvR3pK/+rN29Nxi5S9KcpeGcv/qxGZYQ= Subject key identifier: 26:97:B9:0B:7E:CD:50:5D:B1:84:4F:57:64:AA:98:4E:06:4B:17:F2 Authority key identifier: 37:2D:93:6E:38:D8:B9:CB:1F:70:12:21:9F:F8:21:72:B9:0B:EE:58 Certificate issuer: /CN=A91C9D5D/serialNumber=372D936E38D8B9CB1F7012219FF82172B90BEE58 Certificate serial: 0C34 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ny2TbjjYucsfcBIhn_ghcrkL7lg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C9D5D/DD6F28720A8B11EABCF9CE52C4F9AE02/Ny2TbjjYucsfcBIhn_ghcrkL7lg.mft Manifest number: 0C2C Signing time: Sat 14 Jun 2025 18:26:39 +0000 Manifest this update: Sat 14 Jun 2025 18:26:38 +0000 Manifest next update: Sat 21 Jun 2025 18:26:38 +0000 Files and hashes: 1: Ny2TbjjYucsfcBIhn_ghcrkL7lg.crl (hash: SGIKX+LW9P7uGWbub7kz6vsYCw74e0pHD8eXTbcTZos=) 2: A0E062260A8C11EAB25FD253C4F9AE02.roa (hash: 7xX6rH7i12z21iTWC8vTwBT7bsP1fB8No9Xtvt+ZVCA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C9D5D/DD6F28720A8B11EABCF9CE52C4F9AE02/Ny2TbjjYucsfcBIhn_ghcrkL7lg.crl rsync://rpki.apnic.net/member_repository/A91C9D5D/DD6F28720A8B11EABCF9CE52C4F9AE02/Ny2TbjjYucsfcBIhn_ghcrkL7lg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ny2TbjjYucsfcBIhn_ghcrkL7lg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 18:26:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3124 (0xc34) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C9D5D, serialNumber=372D936E38D8B9CB1F7012219FF82172B90BEE58 Validity Not Before: Jun 14 18:26:38 2025 GMT Not After : Jun 21 18:26:38 2025 GMT Subject: CN=684dbede-4df8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:6b:f9:41:3e:89:fc:68:6d:33:1f:c9:e0:37: 78:d4:4d:bd:ef:73:9d:e6:c7:fe:71:4a:1d:4e:10: a1:dd:78:45:74:a5:70:41:93:e4:0e:4f:13:12:75: 69:f4:0c:f0:a1:69:a2:bc:81:38:cd:1f:14:ba:1c: f4:c7:ff:20:03:77:3b:9e:da:12:c3:a4:8f:44:d0: 66:b2:57:f0:59:e6:fc:63:3d:31:85:24:0b:68:36: 72:8e:87:38:e7:8d:55:17:0b:11:22:61:79:47:fb: e2:35:8b:d0:b1:de:78:1f:12:e9:3c:9c:be:bf:e2: 4c:48:1d:05:87:e1:bf:ca:fe:45:19:55:e9:bc:c1: 8f:24:e6:f0:af:51:83:02:ae:30:ab:d3:fb:dd:cf: 64:06:28:a2:a9:aa:bf:4f:89:24:a4:40:22:12:8f: ed:6e:5f:ab:d2:3f:36:ef:51:06:68:7a:34:35:bb: af:56:af:d4:79:b6:5e:32:c6:28:e4:73:08:2a:ed: 5f:67:ed:96:18:92:a3:1a:08:08:5f:fb:11:68:17: 28:e6:18:30:7a:9d:a1:0b:51:f6:fa:2c:77:2c:7b: 38:cf:15:5f:eb:58:58:b9:6f:f2:34:51:a4:9f:e3: 72:60:8b:ff:16:c2:b5:2b:71:d7:89:b8:69:78:c6: f4:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:97:B9:0B:7E:CD:50:5D:B1:84:4F:57:64:AA:98:4E:06:4B:17:F2 X509v3 Authority Key Identifier: keyid:37:2D:93:6E:38:D8:B9:CB:1F:70:12:21:9F:F8:21:72:B9:0B:EE:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C9D5D/DD6F28720A8B11EABCF9CE52C4F9AE02/Ny2TbjjYucsfcBIhn_ghcrkL7lg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ny2TbjjYucsfcBIhn_ghcrkL7lg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9D5D/DD6F28720A8B11EABCF9CE52C4F9AE02/Ny2TbjjYucsfcBIhn_ghcrkL7lg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bf:f7:66:4b:28:93:3e:33:01:ac:29:a0:bf:b0:9e:40:d0:2d: 79:7e:e0:5f:5c:d2:af:2f:1b:41:89:77:da:1a:ef:ac:ac:35: d0:8a:e5:9e:8c:d7:02:e8:ba:47:91:35:a5:03:9f:db:8c:4d: cd:5f:50:f6:53:9c:d1:9d:1e:a5:c2:d5:7e:e4:d0:72:7e:29: 0c:6a:d0:21:f7:3f:4c:cb:09:04:f4:2c:da:b2:41:aa:96:8b: 34:72:de:01:c2:9c:aa:87:47:db:f0:f1:64:55:d2:06:2a:5c: 51:9f:05:24:e6:b3:be:31:e3:e2:e5:7a:0d:ce:0a:90:d2:9b: 30:47:54:ad:a1:21:38:09:5c:70:43:96:88:68:0e:d6:59:76: d7:7f:b7:57:f8:ec:e4:e5:14:82:da:f2:17:27:0d:70:56:47: 17:6d:ed:7a:6a:42:67:6a:04:eb:92:ce:e3:b2:c2:d2:72:45: 10:6a:80:38:ea:11:25:6f:17:24:5f:e9:72:59:f6:ec:d0:1a: c1:19:74:8b:c8:39:69:18:d3:52:2e:cc:0e:8c:52:fc:a1:b0: 08:91:01:f7:d3:74:69:74:b4:7b:32:c2:70:fc:2f:75:fe:5e: 42:1f:f0:3e:a7:cd:15:7b:3d:04:e9:da:bd:76:50:df:10:2c: 7b:03:92:08 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDDQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzlENUQxMTAvBgNVBAUTKDM3MkQ5MzZFMzhEOEI5Q0IxRjcwMTIyMTlGRjgyMTcy QjkwQkVFNTgwHhcNMjUwNjE0MTgyNjM4WhcNMjUwNjIxMTgyNjM4WjAYMRYwFAYD VQQDEw02ODRkYmVkZS00ZGY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtWv5QT6J/GhtMx/J4Dd41E2973Od5sf+cUodThCh3XhFdKVwQZPkDk8TEnVp 9AzwoWmivIE4zR8Uuhz0x/8gA3c7ntoSw6SPRNBmslfwWeb8Yz0xhSQLaDZyjoc4 541VFwsRImF5R/viNYvQsd54HxLpPJy+v+JMSB0Fh+G/yv5FGVXpvMGPJObwr1GD Aq4wq9P73c9kBiiiqaq/T4kkpEAiEo/tbl+r0j8271EGaHo0NbuvVq/UebZeMsYo 5HMIKu1fZ+2WGJKjGggIX/sRaBco5hgwep2hC1H2+ix3LHs4zxVf61hYuW/yNFGk n+NyYIv/FsK1K3HXibhpeMb05QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCaXuQt+ zVBdsYRPV2SqmE4GSxfyMB8GA1UdIwQYMBaAFDctk2442LnLH3ASIZ/4IXK5C+5Y MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOUQ1RC9ERDZGMjg3MjBB OEIxMUVBQkNGOUNFNTJDNEY5QUUwMi9OeTJUYmpqWXVjc2ZjQklobl9naGNya0w3 bGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL055MlRiampZdWNzZmNCSWhuX2doY3JrTDdsZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD OUQ1RC9ERDZGMjg3MjBBOEIxMUVBQkNGOUNFNTJDNEY5QUUwMi9OeTJUYmpqWXVj c2ZjQklobl9naGNya0w3bGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC/92ZLKJM+MwGsKaC/sJ5A0C15fuBfXNKvLxtBiXfaGu+srDXQiuWe jNcC6LpHkTWlA5/bjE3NX1D2U5zRnR6lwtV+5NByfikMatAh9z9MywkE9CzaskGq los0ct4Bwpyqh0fb8PFkVdIGKlxRnwUk5rO+MePi5XoNzgqQ0pswR1StoSE4CVxw Q5aIaA7WWXbXf7dX+Ozk5RSC2vIXJw1wVkcXbe16akJnagTrks7jssLSckUQaoA4 6hElbxckX+lyWfbs0BrBGXSLyDlpGNNSLswOjFL8obAIkQH303RpdLR7MsJw/C91 /l5CH/A+p80Vez0E6dq9dlDfECx7A5II -----END CERTIFICATE-----Generated at Sun Jun 15 09:32:33 2025 by rpki-client