$ rpki-client -vvf rpki.apnic.net/member_repository/A91CCD0C/819A023432CB11EF9EA0C96AC4F9AE02/NSwvQv_2bLhqacZ-5hurbhEVTss.mft File: NSwvQv_2bLhqacZ-5hurbhEVTss.mft (raw, json) Hash identifier: t+1eVO8j88xhw4sYlarLqG9ycaVhvrrvkwGZTHlUi/k= Subject key identifier: 6B:59:EE:8B:19:1B:C8:60:71:43:DE:12:67:24:7A:1C:BE:70:EB:F7 Authority key identifier: 35:2C:2F:42:FF:F6:6C:B8:6A:69:C6:7E:E6:1B:AB:6E:11:15:4E:CB Certificate issuer: /CN=A91CCD0C/serialNumber=352C2F42FFF66CB86A69C67EE61BAB6E11154ECB Certificate serial: BC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NSwvQv_2bLhqacZ-5hurbhEVTss.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CCD0C/819A023432CB11EF9EA0C96AC4F9AE02/NSwvQv_2bLhqacZ-5hurbhEVTss.mft Manifest number: BA Signing time: Thu 19 Jun 2025 05:16:07 +0000 Manifest this update: Thu 19 Jun 2025 05:16:07 +0000 Manifest next update: Thu 26 Jun 2025 05:16:07 +0000 Files and hashes: 1: NSwvQv_2bLhqacZ-5hurbhEVTss.crl (hash: F72qZk6LQJEYryOOy8lQhDe3ZZXFJTVNSRe51jnvQnQ=) 2: E5BB4DB260E411EF83727F5CC4F9AE02.roa (hash: sjsLTuWeFwgevoPUUjQqWdyEX8OASo8b7yHbpb8l0pc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CCD0C/819A023432CB11EF9EA0C96AC4F9AE02/NSwvQv_2bLhqacZ-5hurbhEVTss.crl rsync://rpki.apnic.net/member_repository/A91CCD0C/819A023432CB11EF9EA0C96AC4F9AE02/NSwvQv_2bLhqacZ-5hurbhEVTss.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NSwvQv_2bLhqacZ-5hurbhEVTss.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 26 Jun 2025 05:16:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 188 (0xbc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CCD0C, serialNumber=352C2F42FFF66CB86A69C67EE61BAB6E11154ECB Validity Not Before: Jun 19 05:16:07 2025 GMT Not After : Jun 26 05:16:07 2025 GMT Subject: CN=68539d17-e85b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:40:b5:24:9f:0f:36:d2:aa:7f:8d:c6:b2:93: 15:d2:74:2b:2a:9d:3d:7d:0f:20:77:7e:50:6c:d0: d7:1b:0e:ea:51:6e:43:de:62:47:86:42:dd:f2:fe: 70:20:a6:1d:c9:94:9c:3b:82:a8:2d:ce:25:f3:37: 1c:bb:80:cf:e3:da:df:53:67:70:c0:a2:0a:30:35: 23:6f:78:09:8f:2e:7a:07:7a:1f:d8:ed:e9:2d:ff: 6b:2d:9f:df:73:ae:7f:e8:d8:73:0f:cd:b3:d2:d3: 48:fb:cb:18:ba:4a:b3:02:9f:73:bd:c0:c0:1c:90: fd:7e:ed:fd:e9:4a:85:3c:da:9c:02:34:06:3f:26: d7:56:1c:bc:1e:3e:22:d1:7e:d9:38:07:2b:2c:49: fe:2e:28:d8:53:f9:bf:f8:52:96:02:67:12:29:54: e5:c2:d8:78:24:ef:c2:60:5e:b4:82:d9:46:2b:d1: 86:b3:61:f5:8f:6f:bd:1c:66:d7:7a:cf:4e:dc:13: 32:86:43:77:f2:46:cb:38:cb:45:06:b7:df:95:fa: 92:a3:f7:78:84:de:aa:b1:da:c1:01:bb:88:70:fd: e7:80:ca:c0:c3:64:e6:9f:f0:b1:c7:9f:8f:25:92: 58:77:c0:77:47:cf:14:f0:2b:8c:0f:58:04:2d:23: 5e:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:59:EE:8B:19:1B:C8:60:71:43:DE:12:67:24:7A:1C:BE:70:EB:F7 X509v3 Authority Key Identifier: keyid:35:2C:2F:42:FF:F6:6C:B8:6A:69:C6:7E:E6:1B:AB:6E:11:15:4E:CB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CCD0C/819A023432CB11EF9EA0C96AC4F9AE02/NSwvQv_2bLhqacZ-5hurbhEVTss.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NSwvQv_2bLhqacZ-5hurbhEVTss.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CCD0C/819A023432CB11EF9EA0C96AC4F9AE02/NSwvQv_2bLhqacZ-5hurbhEVTss.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 81:36:6c:6a:3e:65:83:c8:39:a7:34:49:e5:ee:00:c9:32:ec: 5b:68:7a:7b:b8:d6:9e:ca:61:46:c3:81:b8:da:0a:1f:18:21: 83:3f:26:bb:36:75:cc:ea:86:69:c2:27:32:43:ad:0a:35:ae: e2:07:8d:5b:31:53:da:9b:17:04:02:4d:1e:c2:e4:30:6e:81: f1:55:11:d5:c8:44:14:f5:a8:10:0d:3d:23:45:8b:fd:ea:d3: db:5b:32:2c:b9:6a:ac:45:da:da:3e:92:ce:19:9a:bf:e1:61: bc:34:b0:43:31:db:22:59:eb:1d:74:30:ff:17:aa:68:b8:da: 61:62:2c:e7:43:a3:c5:17:05:36:8a:19:85:eb:86:e4:f5:69: 61:64:1b:ea:8d:50:47:b7:39:da:f1:0d:8d:26:32:b6:95:84: 26:94:fa:69:b3:52:54:7f:d4:fc:a0:9d:8f:ba:0d:81:91:55: ce:81:4d:e8:ec:65:19:c7:1d:40:b4:81:5e:34:9a:19:1b:88: c5:f5:c9:be:52:d5:90:3c:95:a8:3d:1c:4c:26:56:3a:1b:4c: 60:8c:cd:dd:39:84:49:a6:e1:63:56:b8:28:23:5a:41:e6:fc: 74:0c:ac:68:ce:02:98:52:77:f6:61:d4:86:cc:8d:61:48:28: b8:b7:b1:f7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0NEMEMxMTAvBgNVBAUTKDM1MkMyRjQyRkZGNjZDQjg2QTY5QzY3RUU2MUJBQjZF MTExNTRFQ0IwHhcNMjUwNjE5MDUxNjA3WhcNMjUwNjI2MDUxNjA3WjAYMRYwFAYD VQQDEw02ODUzOWQxNy1lODViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvkC1JJ8PNtKqf43GspMV0nQrKp09fQ8gd35QbNDXGw7qUW5D3mJHhkLd8v5w IKYdyZScO4KoLc4l8zccu4DP49rfU2dwwKIKMDUjb3gJjy56B3of2O3pLf9rLZ/f c65/6NhzD82z0tNI+8sYukqzAp9zvcDAHJD9fu396UqFPNqcAjQGPybXVhy8Hj4i 0X7ZOAcrLEn+LijYU/m/+FKWAmcSKVTlwth4JO/CYF60gtlGK9GGs2H1j2+9HGbX es9O3BMyhkN38kbLOMtFBrfflfqSo/d4hN6qsdrBAbuIcP3ngMrAw2Tmn/Cxx5+P JZJYd8B3R88U8CuMD1gELSNeKwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGtZ7osZ G8hgcUPeEmckehy+cOv3MB8GA1UdIwQYMBaAFDUsL0L/9my4amnGfuYbq24RFU7L MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQ0QwQy84MTlBMDIzNDMy Q0IxMUVGOUVBMEM5NkFDNEY5QUUwMi9OU3d2UXZfMmJMaHFhY1otNWh1cmJoRVZU c3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05Td3ZRdl8yYkxocWFjWi01aHVyYmhFVlRzcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD Q0QwQy84MTlBMDIzNDMyQ0IxMUVGOUVBMEM5NkFDNEY5QUUwMi9OU3d2UXZfMmJM aHFhY1otNWh1cmJoRVZUc3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCBNmxqPmWDyDmnNEnl7gDJMuxbaHp7uNaeymFGw4G42gofGCGDPya7 NnXM6oZpwicyQ60KNa7iB41bMVPamxcEAk0ewuQwboHxVRHVyEQU9agQDT0jRYv9 6tPbWzIsuWqsRdraPpLOGZq/4WG8NLBDMdsiWesddDD/F6pouNphYiznQ6PFFwU2 ihmF64bk9WlhZBvqjVBHtzna8Q2NJjK2lYQmlPpps1JUf9T8oJ2Pug2BkVXOgU3o 7GUZxx1AtIFeNJoZG4jF9cm+UtWQPJWoPRxMJlY6G0xgjM3dOYRJpuFjVrgoI1pB 5vx0DKxozgKYUnf2YdSGzI1hSCi4t7H3 -----END CERTIFICATE-----Generated at Thu Jun 19 20:13:00 2025 by rpki-client