$ rpki-client -vvf rpki.apnic.net/member_repository/A91D404F/D5D0FEB4CBF711EF869C904FC4F9AE02/_nzI0SyMuUDQbq7bWwrUPQUDYvE.mft File: _nzI0SyMuUDQbq7bWwrUPQUDYvE.mft (raw, json) Hash identifier: 9wSMgTm5g/3p46drn4D/uPbO4KI3LbETlrPJP3dRIac= Subject key identifier: 4E:29:54:F9:D7:1E:D2:DA:CA:62:D4:49:34:3D:90:78:C5:0C:56:8B Authority key identifier: FE:7C:C8:D1:2C:8C:B9:40:D0:6E:AE:DB:5B:0A:D4:3D:05:03:62:F1 Certificate issuer: /CN=A91D404F/serialNumber=FE7CC8D12C8CB940D06EAEDB5B0AD43D050362F1 Certificate serial: 54 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_nzI0SyMuUDQbq7bWwrUPQUDYvE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D404F/D5D0FEB4CBF711EF869C904FC4F9AE02/_nzI0SyMuUDQbq7bWwrUPQUDYvE.mft Manifest number: 53 Signing time: Sun 15 Jun 2025 06:19:01 +0000 Manifest this update: Sun 15 Jun 2025 06:19:01 +0000 Manifest next update: Sun 22 Jun 2025 06:19:01 +0000 Files and hashes: 1: _nzI0SyMuUDQbq7bWwrUPQUDYvE.crl (hash: XiAI+QH9nZLpH65hjvDUfjziBghWCVbNgw7U2O2mF6Q=) 2: F943DF74CBF711EFB86EC74FC4F9AE02.roa (hash: OQsiNqk/6UEhG+WoM7b9x1Qk45e1mg8EolKiz0N5DwU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D404F/D5D0FEB4CBF711EF869C904FC4F9AE02/_nzI0SyMuUDQbq7bWwrUPQUDYvE.crl rsync://rpki.apnic.net/member_repository/A91D404F/D5D0FEB4CBF711EF869C904FC4F9AE02/_nzI0SyMuUDQbq7bWwrUPQUDYvE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_nzI0SyMuUDQbq7bWwrUPQUDYvE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Jun 2025 06:19:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 84 (0x54) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D404F, serialNumber=FE7CC8D12C8CB940D06EAEDB5B0AD43D050362F1 Validity Not Before: Jun 15 06:19:01 2025 GMT Not After : Jun 22 06:19:01 2025 GMT Subject: CN=684e65d5-e566 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:07:cf:8c:9b:e1:6c:3d:80:9d:13:5b:ab:9a: eb:52:7a:b6:bd:96:ab:c3:58:1c:12:57:c9:ca:37: a6:34:b7:57:67:fc:f5:23:22:cd:fb:82:97:4c:23: 59:14:56:7d:d7:da:8c:bd:59:ed:37:5c:5f:cc:4f: 61:46:7c:4a:c9:f0:d5:6b:ff:99:9b:bb:48:c4:51: fd:3a:21:e2:b7:15:dc:38:22:51:94:a9:e5:16:70: 46:3f:76:72:18:71:de:e7:31:ff:51:07:2d:11:84: 8c:c3:fc:4e:9d:fc:43:fd:70:0f:6d:d3:0b:80:5d: 4c:63:09:0d:f9:c4:93:36:e3:85:10:14:44:c7:6b: d9:55:3b:28:c2:3b:c0:56:92:59:66:9f:91:cf:5f: c5:c3:0b:41:f8:80:de:b1:5e:ba:10:86:09:7f:3f: 40:e2:07:62:fb:9d:63:b2:cc:cf:4e:d1:52:41:2d: 18:ab:ab:fd:5c:a8:da:da:39:91:44:fc:17:c1:e8: 2f:95:02:2d:52:d3:94:b1:66:94:96:18:15:19:41: 64:14:b4:14:9e:5d:e2:1e:1f:2d:9b:83:cb:3a:ad: 39:40:02:e2:11:fa:c6:67:8d:bf:98:68:fc:63:7f: cd:70:c3:99:6f:89:84:b3:41:1b:f6:c0:0e:d3:42: 98:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:29:54:F9:D7:1E:D2:DA:CA:62:D4:49:34:3D:90:78:C5:0C:56:8B X509v3 Authority Key Identifier: keyid:FE:7C:C8:D1:2C:8C:B9:40:D0:6E:AE:DB:5B:0A:D4:3D:05:03:62:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D404F/D5D0FEB4CBF711EF869C904FC4F9AE02/_nzI0SyMuUDQbq7bWwrUPQUDYvE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_nzI0SyMuUDQbq7bWwrUPQUDYvE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D404F/D5D0FEB4CBF711EF869C904FC4F9AE02/_nzI0SyMuUDQbq7bWwrUPQUDYvE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 26:78:c5:c3:1f:40:e0:20:14:46:f2:d0:1e:3d:a7:84:b5:82: d3:6b:7b:7a:1a:f3:1e:ea:9e:ea:55:81:6c:37:c0:2f:47:20: 93:57:b7:d1:1f:ce:43:41:ee:f3:01:f3:7f:30:e0:86:09:cd: bf:d9:5e:b4:33:f7:8a:8a:08:93:4e:88:2b:e5:53:80:1b:e9: d2:83:e8:dc:41:b5:45:20:ca:dd:50:74:99:49:5e:dc:c7:a9: d1:10:50:22:d0:6f:be:d4:6e:94:4e:fa:f5:6e:c4:77:35:fc: 84:97:82:3a:2a:52:6c:1a:8f:c9:78:e1:90:01:5f:00:36:8c: 2b:7a:37:c2:84:91:d9:df:01:0c:64:35:65:5b:17:3b:97:9b: ad:1d:d5:24:52:90:4b:09:4c:fe:17:48:00:fb:0b:72:c9:b6: 0a:72:a6:82:54:67:6d:81:76:aa:90:de:51:4b:5b:07:3e:27: 9c:7f:4a:73:44:6a:3f:f4:91:ad:0e:c1:70:54:2a:50:55:e1: d5:5a:dd:74:f1:c9:46:0c:17:da:31:7c:a3:ff:f5:6a:b8:ab: e4:84:d7:8c:0f:22:a9:be:3f:6f:83:ad:2b:35:7f:4b:b7:43: f6:cc:cd:b7:36:24:5f:ed:41:65:b3:53:38:9b:b4:9f:a4:fa: 51:85:e1:cb -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBVDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE NDA0RjExMC8GA1UEBRMoRkU3Q0M4RDEyQzhDQjk0MEQwNkVBRURCNUIwQUQ0M0Qw NTAzNjJGMTAeFw0yNTA2MTUwNjE5MDFaFw0yNTA2MjIwNjE5MDFaMBgxFjAUBgNV BAMTDTY4NGU2NWQ1LWU1NjYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCoB8+Mm+FsPYCdE1urmutSera9lqvDWBwSV8nKN6Y0t1dn/PUjIs37gpdMI1kU Vn3X2oy9We03XF/MT2FGfErJ8NVr/5mbu0jEUf06IeK3Fdw4IlGUqeUWcEY/dnIY cd7nMf9RBy0RhIzD/E6d/EP9cA9t0wuAXUxjCQ35xJM244UQFETHa9lVOyjCO8BW kllmn5HPX8XDC0H4gN6xXroQhgl/P0DiB2L7nWOyzM9O0VJBLRirq/1cqNraOZFE /BfB6C+VAi1S05SxZpSWGBUZQWQUtBSeXeIeHy2bg8s6rTlAAuIR+sZnjb+YaPxj f81ww5lviYSzQRv2wA7TQphtAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUTilU+dce 0trKYtRJND2QeMUMVoswHwYDVR0jBBgwFoAU/nzI0SyMuUDQbq7bWwrUPQUDYvEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQ0MDRGL0Q1RDBGRUI0Q0JG NzExRUY4NjlDOTA0RkM0RjlBRTAyL19uekkwU3lNdVVEUWJxN2JXd3JVUFFVRFl2 RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvX256STBTeU11VURRYnE3Yld3clVQUVVEWXZFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQ0 MDRGL0Q1RDBGRUI0Q0JGNzExRUY4NjlDOTA0RkM0RjlBRTAyL19uekkwU3lNdVVE UWJxN2JXd3JVUFFVRFl2RS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBACZ4xcMfQOAgFEby0B49p4S1gtNre3oa8x7qnupVgWw3wC9HIJNXt9Ef zkNB7vMB838w4IYJzb/ZXrQz94qKCJNOiCvlU4Ab6dKD6NxBtUUgyt1QdJlJXtzH qdEQUCLQb77UbpRO+vVuxHc1/ISXgjoqUmwaj8l44ZABXwA2jCt6N8KEkdnfAQxk NWVbFzuXm60d1SRSkEsJTP4XSAD7C3LJtgpypoJUZ22BdqqQ3lFLWwc+J5x/SnNE aj/0ka0OwXBUKlBV4dVa3XTxyUYMF9oxfKP/9Wq4q+SE14wPIqm+P2+DrSs1f0u3 Q/bMzbc2JF/tQWWzUzibtJ+k+lGF4cs= -----END CERTIFICATE-----Generated at Mon Jun 16 19:23:03 2025 by rpki-client