$ rpki-client -vvf rpki.apnic.net/member_repository/A91CFC1C/3C142B1657FE11EEAA553060C4F9AE02/NkXNkOP0PAEtqzvzly6GvJTd1FQ.mft File: NkXNkOP0PAEtqzvzly6GvJTd1FQ.mft (raw, json) Hash identifier: 5CxikdvHV5wWAZ0SbF0Jt6erx70G0wj3M27xvc6vPVU= Subject key identifier: 59:2A:9D:52:AD:9E:77:2E:5E:4D:F4:83:88:E8:9A:E9:0F:E1:9F:E1 Authority key identifier: 36:45:CD:90:E3:F4:3C:01:2D:AB:3B:F3:97:2E:86:BC:94:DD:D4:54 Certificate issuer: /CN=A91CFC1C/serialNumber=3645CD90E3F43C012DAB3BF3972E86BC94DDD454 Certificate serial: 014A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NkXNkOP0PAEtqzvzly6GvJTd1FQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CFC1C/3C142B1657FE11EEAA553060C4F9AE02/NkXNkOP0PAEtqzvzly6GvJTd1FQ.mft Manifest number: 0145 Signing time: Fri 13 Jun 2025 03:16:21 +0000 Manifest this update: Fri 13 Jun 2025 03:16:20 +0000 Manifest next update: Fri 20 Jun 2025 03:16:20 +0000 Files and hashes: 1: NkXNkOP0PAEtqzvzly6GvJTd1FQ.crl (hash: g0Ml2YVGExIHFsyIXZ7ug5XcieQyyetnnLKFJ1wAn0I=) 2: E69E92582C4A11EF91F6202DC4F9AE02.roa (hash: uDYRjWDNbbuer7nADrVfw+s2rVnYHfiATUhAxlq32S0=) 3: B390F78E5CB611EE97D70B78C4F9AE02.roa (hash: LoclVr/421CJQL/D+2O/iwx9gXkx3/NwzPPfEEt2ocM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CFC1C/3C142B1657FE11EEAA553060C4F9AE02/NkXNkOP0PAEtqzvzly6GvJTd1FQ.crl rsync://rpki.apnic.net/member_repository/A91CFC1C/3C142B1657FE11EEAA553060C4F9AE02/NkXNkOP0PAEtqzvzly6GvJTd1FQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NkXNkOP0PAEtqzvzly6GvJTd1FQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 03:16:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 330 (0x14a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CFC1C, serialNumber=3645CD90E3F43C012DAB3BF3972E86BC94DDD454 Validity Not Before: Jun 13 03:16:20 2025 GMT Not After : Jun 20 03:16:20 2025 GMT Subject: CN=684b9805-6d5d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:ee:ac:c6:c8:7e:f5:35:63:d4:4f:06:11:b5: cd:1f:03:1c:8a:a7:aa:88:76:20:cd:3d:b8:0f:4d: a1:90:d5:63:1d:03:9b:30:c7:0c:5e:ad:49:c5:cc: e8:46:c7:b7:29:55:85:dc:ee:13:d7:44:ca:cf:d3: 1e:c2:b7:df:fd:95:63:b1:69:c1:e1:91:31:b3:22: d4:58:60:52:15:de:2d:c1:17:3e:d5:f7:11:e6:6a: 31:6c:ca:57:9e:7f:df:d9:c2:f8:f1:2a:bc:3b:dc: 7e:df:ae:8a:e6:e9:1b:b6:5f:ef:9a:68:f7:de:57: 39:1b:f9:13:cc:f9:5c:c3:d7:f7:e8:f8:92:4f:d5: fb:bf:a5:8c:5e:28:f5:5c:43:e2:3c:88:09:cc:5d: d2:5c:38:bf:36:57:c1:6f:75:bf:a5:2f:62:9f:36: bf:6a:d0:e2:a0:91:60:31:5e:df:ee:0c:03:ce:a2: ad:3e:04:31:fd:bd:ec:32:7f:0b:96:c7:60:18:08: 56:3d:f2:4c:52:42:f9:32:2e:8a:b3:86:8d:41:33: 28:47:db:5d:c2:be:d0:0a:10:ba:1f:32:5a:2f:51: a0:fb:be:19:e1:89:30:9c:9f:7b:98:c6:13:fc:2c: 90:2a:82:ff:9a:11:aa:94:7d:e2:41:27:97:3a:79: 33:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:2A:9D:52:AD:9E:77:2E:5E:4D:F4:83:88:E8:9A:E9:0F:E1:9F:E1 X509v3 Authority Key Identifier: keyid:36:45:CD:90:E3:F4:3C:01:2D:AB:3B:F3:97:2E:86:BC:94:DD:D4:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CFC1C/3C142B1657FE11EEAA553060C4F9AE02/NkXNkOP0PAEtqzvzly6GvJTd1FQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NkXNkOP0PAEtqzvzly6GvJTd1FQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CFC1C/3C142B1657FE11EEAA553060C4F9AE02/NkXNkOP0PAEtqzvzly6GvJTd1FQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 55:5c:6c:af:4a:45:04:dd:c8:5c:0d:04:44:b4:75:ea:19:68: ad:1f:71:92:be:a3:1f:b4:77:28:ce:f3:a0:3a:a7:7c:73:3b: 49:f3:50:bc:18:ca:b2:03:89:d2:28:06:81:5e:01:89:89:35: 52:3b:de:f1:d8:54:2e:f0:45:94:97:77:9a:c4:e0:c1:22:a5: 86:5a:7c:69:ae:48:1b:15:6c:b0:11:e0:ce:00:6a:43:45:3c: 69:c3:33:69:56:de:8d:61:66:e4:7c:cc:de:d9:ae:dc:24:e4: 09:3b:03:b9:27:fd:d2:3a:79:fa:89:c0:39:ea:61:95:c8:b8: 4c:2c:a1:e3:bb:b3:cf:46:58:3c:c9:10:72:0e:3e:77:cb:a2: 37:96:c8:9c:1a:62:3d:55:9c:ba:18:f6:2f:56:f0:d1:08:69: 4f:28:75:bf:e5:90:12:71:89:56:53:8f:cd:de:db:50:77:75: 02:89:ea:02:a1:58:76:b3:aa:a1:11:9d:12:11:e0:4d:c6:b2: 54:d6:b5:70:7c:f2:af:31:de:78:73:52:ca:4c:6b:67:7c:dc: f2:02:e0:ba:b0:55:4b:57:c5:31:d9:87:09:72:65:59:09:6f: ca:f4:87:fb:c0:8a:aa:80:b5:d4:82:4a:bb:24:59:b3:d4:c3: 20:74:03:ca -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAUowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0ZDMUMxMTAvBgNVBAUTKDM2NDVDRDkwRTNGNDNDMDEyREFCM0JGMzk3MkU4NkJD OTREREQ0NTQwHhcNMjUwNjEzMDMxNjIwWhcNMjUwNjIwMDMxNjIwWjAYMRYwFAYD VQQDEw02ODRiOTgwNS02ZDVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0+6sxsh+9TVj1E8GEbXNHwMciqeqiHYgzT24D02hkNVjHQObMMcMXq1Jxczo Rse3KVWF3O4T10TKz9Mewrff/ZVjsWnB4ZExsyLUWGBSFd4twRc+1fcR5moxbMpX nn/f2cL48Sq8O9x+366K5ukbtl/vmmj33lc5G/kTzPlcw9f36PiST9X7v6WMXij1 XEPiPIgJzF3SXDi/NlfBb3W/pS9inza/atDioJFgMV7f7gwDzqKtPgQx/b3sMn8L lsdgGAhWPfJMUkL5Mi6Ks4aNQTMoR9tdwr7QChC6HzJaL1Gg+74Z4YkwnJ97mMYT /CyQKoL/mhGqlH3iQSeXOnkzhQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFkqnVKt nncuXk30g4jomukP4Z/hMB8GA1UdIwQYMBaAFDZFzZDj9DwBLas785cuhryU3dRU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRkMxQy8zQzE0MkIxNjU3 RkUxMUVFQUE1NTMwNjBDNEY5QUUwMi9Oa1hOa09QMFBBRXRxenZ6bHk2R3ZKVGQx RlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05rWE5rT1AwUEFFdHF6dnpseTZHdkpUZDFGUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RkMxQy8zQzE0MkIxNjU3RkUxMUVFQUE1NTMwNjBDNEY5QUUwMi9Oa1hOa09QMFBB RXRxenZ6bHk2R3ZKVGQxRlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBVXGyvSkUE3chcDQREtHXqGWitH3GSvqMftHcozvOgOqd8cztJ81C8 GMqyA4nSKAaBXgGJiTVSO97x2FQu8EWUl3eaxODBIqWGWnxprkgbFWywEeDOAGpD RTxpwzNpVt6NYWbkfMze2a7cJOQJOwO5J/3SOnn6icA56mGVyLhMLKHju7PPRlg8 yRByDj53y6I3lsicGmI9VZy6GPYvVvDRCGlPKHW/5ZAScYlWU4/N3ttQd3UCieoC oVh2s6qhEZ0SEeBNxrJU1rVwfPKvMd54c1LKTGtnfNzyAuC6sFVLV8Ux2YcJcmVZ CW/K9If7wIqqgLXUgkq7JFmz1MMgdAPK -----END CERTIFICATE-----Generated at Sat Jun 14 19:17:28 2025 by rpki-client