$ rpki-client -vvf rpki.apnic.net/member_repository/A91CAA4E/55E9795AA94F11E8AA0C900EC4F9AE02/nE_-Zd6jUjPTnocCI4VlV03tRm4.mft File: nE_-Zd6jUjPTnocCI4VlV03tRm4.mft (raw, json) Hash identifier: 1wjg6tpREJdFcHar7iO8C/kgcLHWpaDPzrtIVqGSXFk= Subject key identifier: 70:5C:55:ED:46:19:30:DD:F7:06:42:45:6E:E5:C8:B5:4E:42:91:04 Authority key identifier: 9C:4F:FE:65:DE:A3:52:33:D3:9E:87:02:23:85:65:57:4D:ED:46:6E Certificate issuer: /CN=A91CAA4E/serialNumber=9C4FFE65DEA35233D39E8702238565574DED466E Certificate serial: 072E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nE_-Zd6jUjPTnocCI4VlV03tRm4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CAA4E/55E9795AA94F11E8AA0C900EC4F9AE02/nE_-Zd6jUjPTnocCI4VlV03tRm4.mft Manifest number: 1A56 Signing time: Sat 14 Jun 2025 16:57:54 +0000 Manifest this update: Sat 14 Jun 2025 16:57:53 +0000 Manifest next update: Sat 21 Jun 2025 16:57:53 +0000 Files and hashes: 1: nE_-Zd6jUjPTnocCI4VlV03tRm4.crl (hash: oB7stu5jJplX97+AwnRNiMF/9bc0djUfcLfjjPbTPQU=) 2: FFFE92D29CE611EE883A672FC4F9AE02.roa (hash: GWwckZ18h6sa8xUJU0MBnoisjDnt082CFlW4eSRU0Y4=) 3: 653DCD9ADEE811EF9DE2374CC4F9AE02.roa (hash: Mazx36+KDEkICPeaUfwJ/FcwJ2wGDeNl/2eEhKXlMWc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CAA4E/55E9795AA94F11E8AA0C900EC4F9AE02/nE_-Zd6jUjPTnocCI4VlV03tRm4.crl rsync://rpki.apnic.net/member_repository/A91CAA4E/55E9795AA94F11E8AA0C900EC4F9AE02/nE_-Zd6jUjPTnocCI4VlV03tRm4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nE_-Zd6jUjPTnocCI4VlV03tRm4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 16:57:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1838 (0x72e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CAA4E, serialNumber=9C4FFE65DEA35233D39E8702238565574DED466E Validity Not Before: Jun 14 16:57:53 2025 GMT Not After : Jun 21 16:57:53 2025 GMT Subject: CN=684daa11-3b19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:09:54:6c:d2:3d:62:50:2f:5b:3e:c4:17:3b: 2a:84:35:fa:1d:e1:eb:de:cd:a0:d7:fd:93:88:c9: 95:d7:38:7c:44:60:b8:c2:8f:4f:1a:b9:b3:7d:ae: 24:ec:a5:99:5a:db:c4:4b:ec:26:2a:35:da:92:e7: 49:d6:fa:da:6e:ff:9f:3c:24:e0:a8:86:f9:6d:ab: ca:91:32:e2:85:ba:27:04:f9:78:c9:38:c7:37:e4: 6d:85:8d:40:9c:4b:91:49:7c:68:0f:65:89:90:c5: 47:03:43:a7:c7:6a:40:cf:33:a4:8b:83:03:a0:b4: 2c:54:ba:e7:da:78:5a:96:49:5d:5a:9c:89:48:74: 59:a0:0c:72:ad:c1:49:1a:d8:63:db:8e:fd:56:e1: 75:79:4e:6b:f0:09:78:2d:ab:e4:81:8d:7e:33:41: 2e:c3:8d:23:bd:02:c6:3a:f2:3d:49:29:aa:d5:90: 5f:85:65:be:48:7c:ee:6e:81:0d:f0:ea:b8:ef:ff: 27:44:32:ba:ff:23:dc:4d:9b:34:80:a4:7a:1d:f8: f0:03:66:03:53:b2:a4:85:a6:65:3a:4c:c2:84:76: 84:08:2e:83:24:a1:54:b4:06:29:ea:e1:e4:29:b4: 19:5b:b4:d9:cc:4f:c2:01:d7:6a:1e:b3:23:99:77: ac:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:5C:55:ED:46:19:30:DD:F7:06:42:45:6E:E5:C8:B5:4E:42:91:04 X509v3 Authority Key Identifier: keyid:9C:4F:FE:65:DE:A3:52:33:D3:9E:87:02:23:85:65:57:4D:ED:46:6E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CAA4E/55E9795AA94F11E8AA0C900EC4F9AE02/nE_-Zd6jUjPTnocCI4VlV03tRm4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nE_-Zd6jUjPTnocCI4VlV03tRm4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CAA4E/55E9795AA94F11E8AA0C900EC4F9AE02/nE_-Zd6jUjPTnocCI4VlV03tRm4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d8:79:33:8d:26:8f:86:30:91:01:05:5d:f8:33:d4:61:f3:c9: 79:4b:f8:aa:52:67:c6:a5:3a:68:9d:00:18:15:74:46:f2:64: d7:b4:15:a7:ea:bb:1c:0d:c1:38:35:f4:40:9c:63:b0:31:4f: 3e:ea:50:eb:c4:99:00:9e:c6:fd:fc:c4:6e:a6:28:1e:48:2a: c0:c2:dd:3d:7c:7f:3b:65:90:38:5c:ba:06:f8:54:67:3d:e0: 9f:c3:0d:53:df:a3:9f:ef:0f:3c:74:f4:ea:25:21:44:fb:a5: f1:5f:d3:fa:55:74:78:ff:be:2e:4d:e7:55:ad:37:7d:5d:46: cb:22:8c:08:61:9d:53:89:dc:4a:87:08:e1:50:84:d1:5c:9e: df:6c:17:e7:b8:85:28:00:b0:0a:b3:66:c8:96:b5:2e:cd:c0: c7:a6:eb:93:94:f8:91:cf:50:c0:f8:3d:f2:36:8e:6d:f4:ff: 0f:b7:98:42:4d:32:ae:10:b1:8a:8b:81:28:4b:a2:0d:b7:f0: e3:4d:64:69:3f:43:bc:20:fd:d3:20:47:c2:07:ff:be:25:d7: f3:4e:b2:fe:1c:d9:82:76:f6:ec:e5:e7:64:ac:41:46:5d:88: 99:31:b6:e7:6a:50:d9:f0:0e:98:b7:f4:e6:97:b2:71:80:86: bf:48:fa:c2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBy4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0FBNEUxMTAvBgNVBAUTKDlDNEZGRTY1REVBMzUyMzNEMzlFODcwMjIzODU2NTU3 NERFRDQ2NkUwHhcNMjUwNjE0MTY1NzUzWhcNMjUwNjIxMTY1NzUzWjAYMRYwFAYD VQQDEw02ODRkYWExMS0zYjE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArQlUbNI9YlAvWz7EFzsqhDX6HeHr3s2g1/2TiMmV1zh8RGC4wo9PGrmzfa4k 7KWZWtvES+wmKjXakudJ1vrabv+fPCTgqIb5bavKkTLihbonBPl4yTjHN+RthY1A nEuRSXxoD2WJkMVHA0Onx2pAzzOki4MDoLQsVLrn2nhalkldWpyJSHRZoAxyrcFJ Gthj2479VuF1eU5r8Al4LavkgY1+M0Euw40jvQLGOvI9SSmq1ZBfhWW+SHzuboEN 8Oq47/8nRDK6/yPcTZs0gKR6HfjwA2YDU7KkhaZlOkzChHaECC6DJKFUtAYp6uHk KbQZW7TZzE/CAddqHrMjmXesyQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHBcVe1G GTDd9wZCRW7lyLVOQpEEMB8GA1UdIwQYMBaAFJxP/mXeo1Iz056HAiOFZVdN7UZu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQUE0RS81NUU5Nzk1QUE5 NEYxMUU4QUEwQzkwMEVDNEY5QUUwMi9uRV8tWmQ2alVqUFRub2NDSTRWbFYwM3RS bTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25FXy1aZDZqVWpQVG5vY0NJNFZsVjAzdFJtNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QUE0RS81NUU5Nzk1QUE5NEYxMUU4QUEwQzkwMEVDNEY5QUUwMi9uRV8tWmQ2alVq UFRub2NDSTRWbFYwM3RSbTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDYeTONJo+GMJEBBV34M9Rh88l5S/iqUmfGpTponQAYFXRG8mTXtBWn 6rscDcE4NfRAnGOwMU8+6lDrxJkAnsb9/MRupigeSCrAwt09fH87ZZA4XLoG+FRn PeCfww1T36Of7w88dPTqJSFE+6XxX9P6VXR4/74uTedVrTd9XUbLIowIYZ1TidxK hwjhUITRXJ7fbBfnuIUoALAKs2bIlrUuzcDHpuuTlPiRz1DA+D3yNo5t9P8Pt5hC TTKuELGKi4EoS6INt/DjTWRpP0O8IP3TIEfCB/++JdfzTrL+HNmCdvbs5edkrEFG XYiZMbbnalDZ8A6Yt/Tml7JxgIa/SPrC -----END CERTIFICATE-----Generated at Sat Jun 14 19:36:40 2025 by rpki-client