$ rpki-client -vvf rpki.apnic.net/member_repository/A91D4E53/A4A519EA4E6211EBA8ACAC5AC4F9AE02/NJ5ZfHF4gQSwZJ8HOrpy9l8oS5o.mft File: NJ5ZfHF4gQSwZJ8HOrpy9l8oS5o.mft (raw, json) Hash identifier: AwLCP1k7fa9Gmse82WHQuzCRVcvxIuBnI9mwz+OkdVw= Subject key identifier: 17:F9:9A:C9:AA:32:E4:DA:DC:0A:9D:F9:48:24:68:69:99:57:A7:FF Authority key identifier: 34:9E:59:7C:71:78:81:04:B0:64:9F:07:3A:BA:72:F6:5F:28:4B:9A Certificate issuer: /CN=A91D4E53/serialNumber=349E597C71788104B0649F073ABA72F65F284B9A Certificate serial: 06F6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NJ5ZfHF4gQSwZJ8HOrpy9l8oS5o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D4E53/A4A519EA4E6211EBA8ACAC5AC4F9AE02/NJ5ZfHF4gQSwZJ8HOrpy9l8oS5o.mft Manifest number: 06EE Signing time: Sat 14 Jun 2025 21:41:54 +0000 Manifest this update: Sat 14 Jun 2025 21:41:54 +0000 Manifest next update: Sat 21 Jun 2025 21:41:54 +0000 Files and hashes: 1: NJ5ZfHF4gQSwZJ8HOrpy9l8oS5o.crl (hash: jnRJPN/sCEpNB08Exwf75ruQdpsAf4pD0A3JhBbiWaw=) 2: 349EFE924E6511EBBFE35D1AC4F9AE02.roa (hash: ErOTyz5l442f54R4SgwNJSi5aE/r3E7WeodId76rTk4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D4E53/A4A519EA4E6211EBA8ACAC5AC4F9AE02/NJ5ZfHF4gQSwZJ8HOrpy9l8oS5o.crl rsync://rpki.apnic.net/member_repository/A91D4E53/A4A519EA4E6211EBA8ACAC5AC4F9AE02/NJ5ZfHF4gQSwZJ8HOrpy9l8oS5o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NJ5ZfHF4gQSwZJ8HOrpy9l8oS5o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 21:41:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1782 (0x6f6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D4E53, serialNumber=349E597C71788104B0649F073ABA72F65F284B9A Validity Not Before: Jun 14 21:41:54 2025 GMT Not After : Jun 21 21:41:54 2025 GMT Subject: CN=684deca2-e7af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:64:1d:3f:48:d7:eb:40:3a:16:58:16:35:1b: 21:b1:fd:b0:9d:d8:68:42:67:49:a6:67:00:5a:cc: fb:8d:1f:83:61:5e:7d:f7:bb:ee:26:2f:6c:54:b4: 1a:77:88:4a:32:c2:b8:3c:71:da:d2:a4:60:73:cd: 92:1d:61:7f:a8:61:a8:1d:d8:07:ba:5b:4b:54:b7: 57:87:be:78:cd:90:a5:60:36:67:55:5c:36:78:1a: 6e:40:54:3c:bd:89:da:b9:96:90:94:c0:50:a0:6c: ad:15:f6:5f:89:0e:10:3d:9c:da:2e:5f:33:81:a2: 96:db:ab:c1:dd:07:3d:c9:e2:4c:6d:ae:a3:e9:0e: cf:33:fd:f9:e2:86:f1:3b:0e:64:e8:2c:30:67:fb: 47:b1:df:33:fc:57:f6:8b:fd:30:e9:26:3e:ea:70: 71:70:f9:6c:26:65:ea:0c:71:fc:5d:b3:45:4d:13: ee:48:1c:87:53:a5:ba:58:c1:1f:d3:cc:f3:9b:5b: 9f:00:6b:b6:31:f8:a1:75:90:9b:4d:12:d3:ea:c1: e3:bc:2d:8b:30:91:5e:4b:61:69:42:27:e3:92:6e: 13:fc:d4:63:bf:cd:c7:f7:bd:40:aa:63:8c:03:6d: 7c:91:63:fc:97:9a:95:fc:a8:38:da:4a:5b:46:22: aa:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:F9:9A:C9:AA:32:E4:DA:DC:0A:9D:F9:48:24:68:69:99:57:A7:FF X509v3 Authority Key Identifier: keyid:34:9E:59:7C:71:78:81:04:B0:64:9F:07:3A:BA:72:F6:5F:28:4B:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D4E53/A4A519EA4E6211EBA8ACAC5AC4F9AE02/NJ5ZfHF4gQSwZJ8HOrpy9l8oS5o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NJ5ZfHF4gQSwZJ8HOrpy9l8oS5o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D4E53/A4A519EA4E6211EBA8ACAC5AC4F9AE02/NJ5ZfHF4gQSwZJ8HOrpy9l8oS5o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 17:53:76:a0:07:27:a8:5b:48:31:88:9a:dc:7f:71:a5:f6:d2: d4:2a:69:1a:11:bb:4b:b8:02:e8:ed:00:54:8f:2a:78:a3:38: dc:5e:7d:87:63:0b:ef:c2:00:0f:d8:9d:db:2a:f5:e2:a0:2a: 01:83:62:08:ee:a3:9f:b6:c6:78:22:7b:ef:f6:50:83:55:77: 53:3d:5b:2e:e4:7b:06:d0:a2:79:9f:94:0d:16:9c:3f:b7:8c: 15:af:5d:aa:b9:89:ca:d9:0f:75:0b:3e:63:d2:cf:c8:5e:27: 94:93:bf:6b:c7:6c:a6:10:bf:c6:c9:87:53:69:01:78:d7:71: 60:b5:f8:d9:e0:e1:f1:b7:f2:b0:a4:9c:2f:d6:2c:11:8a:6e: d5:e9:b7:5d:f4:29:55:1e:96:47:39:45:23:ee:b9:7a:85:6d: 26:af:9c:fc:16:82:8b:52:c3:8d:e6:47:8e:69:8c:bc:ce:55: 87:26:41:5f:ab:38:0e:9d:0e:1f:c3:14:d1:a5:aa:ea:9e:46: 41:7f:b3:65:e0:1c:a1:8c:51:1e:13:6d:e8:89:e1:c2:9b:af: 27:d9:e3:81:20:4c:f8:3d:10:c4:cd:d3:ef:43:a2:ac:e1:ff: 23:61:2d:94:55:26:75:8f:40:f3:e5:c3:be:fb:93:20:ba:e4: be:e8:ca:24 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBvYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDRFNTMxMTAvBgNVBAUTKDM0OUU1OTdDNzE3ODgxMDRCMDY0OUYwNzNBQkE3MkY2 NUYyODRCOUEwHhcNMjUwNjE0MjE0MTU0WhcNMjUwNjIxMjE0MTU0WjAYMRYwFAYD VQQDEw02ODRkZWNhMi1lN2FmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA12QdP0jX60A6FlgWNRshsf2wndhoQmdJpmcAWsz7jR+DYV5997vuJi9sVLQa d4hKMsK4PHHa0qRgc82SHWF/qGGoHdgHultLVLdXh754zZClYDZnVVw2eBpuQFQ8 vYnauZaQlMBQoGytFfZfiQ4QPZzaLl8zgaKW26vB3Qc9yeJMba6j6Q7PM/354obx Ow5k6CwwZ/tHsd8z/Ff2i/0w6SY+6nBxcPlsJmXqDHH8XbNFTRPuSByHU6W6WMEf 08zzm1ufAGu2MfihdZCbTRLT6sHjvC2LMJFeS2FpQifjkm4T/NRjv83H971AqmOM A218kWP8l5qV/Kg42kpbRiKqQwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBf5msmq MuTa3Aqd+UgkaGmZV6f/MB8GA1UdIwQYMBaAFDSeWXxxeIEEsGSfBzq6cvZfKEua MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENEU1My9BNEE1MTlFQTRF NjIxMUVCQThBQ0FDNUFDNEY5QUUwMi9OSjVaZkhGNGdRU3daSjhIT3JweTlsOG9T NW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05KNVpmSEY0Z1FTd1pKOEhPcnB5OWw4b1M1by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NEU1My9BNEE1MTlFQTRFNjIxMUVCQThBQ0FDNUFDNEY5QUUwMi9OSjVaZkhGNGdR U3daSjhIT3JweTlsOG9TNW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAXU3agByeoW0gxiJrcf3Gl9tLUKmkaEbtLuALo7QBUjyp4ozjcXn2H YwvvwgAP2J3bKvXioCoBg2II7qOftsZ4Invv9lCDVXdTPVsu5HsG0KJ5n5QNFpw/ t4wVr12quYnK2Q91Cz5j0s/IXieUk79rx2ymEL/GyYdTaQF413FgtfjZ4OHxt/Kw pJwv1iwRim7V6bdd9ClVHpZHOUUj7rl6hW0mr5z8FoKLUsON5keOaYy8zlWHJkFf qzgOnQ4fwxTRparqnkZBf7Nl4ByhjFEeE23oieHCm68n2eOBIEz4PRDEzdPvQ6Ks 4f8jYS2UVSZ1j0Dz5cO++5MguuS+6Mok -----END CERTIFICATE-----Generated at Sun Jun 15 09:29:29 2025 by rpki-client