$ rpki-client -vvf rpki.apnic.net/member_repository/A91D66A0/625FF726D9E711E988054016C4F9AE02/nJSl3M9qZbaJhscEOEbHIb0zvpk.mft File: nJSl3M9qZbaJhscEOEbHIb0zvpk.mft (raw, json) Hash identifier: wEWzps/rYcMlb9xCbZ3Gg85VteShphjEV06bvgnRIlY= Subject key identifier: EE:16:ED:37:6B:6E:39:7A:E4:22:7F:21:CC:C7:04:29:AC:B2:12:0D Authority key identifier: 9C:94:A5:DC:CF:6A:65:B6:89:86:C7:04:38:46:C7:21:BD:33:BE:99 Certificate issuer: /CN=A91D66A0/serialNumber=9C94A5DCCF6A65B68986C7043846C721BD33BE99 Certificate serial: 0D3A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nJSl3M9qZbaJhscEOEbHIb0zvpk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D66A0/625FF726D9E711E988054016C4F9AE02/nJSl3M9qZbaJhscEOEbHIb0zvpk.mft Manifest number: 0D27 Signing time: Mon 16 Jun 2025 17:59:54 +0000 Manifest this update: Mon 16 Jun 2025 17:59:54 +0000 Manifest next update: Mon 23 Jun 2025 17:59:54 +0000 Files and hashes: 1: nJSl3M9qZbaJhscEOEbHIb0zvpk.crl (hash: WqYqX6MIOxHXnj1lcw3Z/JkKsBzfk5MKeOXMT5tOKug=) 2: 064D129A56EA11EA84DC982BC4F9AE02.roa (hash: 6Rm16lqV7D8ogEdcWjZlICaxyf3FBMg+FZuEOmrvZ+E=) 3: 2B17862A82EE11EAB170FD4BC4F9AE02.roa (hash: Kvq9xzCrVcc/vYKOgXHbGDUWHenbRQHuJZ7CogmXIPc=) 4: 2BABEEB482EE11EAB170FD4BC4F9AE02.roa (hash: 7Q5TQ0GutKyzM0PazgyPbgCiIYVuSp/HifdYRSL6/UE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D66A0/625FF726D9E711E988054016C4F9AE02/nJSl3M9qZbaJhscEOEbHIb0zvpk.crl rsync://rpki.apnic.net/member_repository/A91D66A0/625FF726D9E711E988054016C4F9AE02/nJSl3M9qZbaJhscEOEbHIb0zvpk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nJSl3M9qZbaJhscEOEbHIb0zvpk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 23 Jun 2025 17:59:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3386 (0xd3a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D66A0, serialNumber=9C94A5DCCF6A65B68986C7043846C721BD33BE99 Validity Not Before: Jun 16 17:59:54 2025 GMT Not After : Jun 23 17:59:54 2025 GMT Subject: CN=68505b9a-367d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:4c:80:31:13:cb:7e:16:43:85:b2:61:6c:85: 7c:65:d0:99:ce:97:5d:48:d0:33:6c:0a:ac:c3:dc: 0c:07:00:59:b9:3f:b7:4b:93:a4:74:6e:6f:e9:19: 8b:87:66:2c:8b:a4:04:73:e9:66:ce:2c:38:f6:46: 05:a8:17:a2:94:25:67:68:8c:8f:1b:a7:35:6c:23: 48:7f:1c:1e:88:7d:ab:7f:f4:6f:d5:1d:ca:5c:e3: 1d:e7:4a:4d:a4:37:26:8f:19:a0:ea:26:d3:81:1b: 28:5c:1c:99:8e:e9:81:37:dc:12:cd:5b:ba:71:3f: be:b6:22:18:e2:e8:1e:a8:ec:50:9d:cf:d5:c6:94: 51:9e:b3:ca:d6:80:d7:3a:fe:1f:3d:33:30:12:7d: 52:2c:b9:9f:33:cd:a6:a4:98:e6:b4:b4:d2:eb:d2: 7e:fe:dd:76:13:e3:96:27:5e:90:dc:3a:94:25:46: d8:db:5f:3c:ae:48:6b:07:92:c7:be:74:43:7a:9c: 91:a1:a1:c2:51:49:d5:02:a2:bb:b5:f3:dc:de:0e: 6e:76:b7:21:72:24:f6:1f:19:90:fe:db:d2:ba:ab: f0:33:42:ab:fb:5d:11:be:aa:01:f6:35:74:11:64: 1b:47:5f:89:2e:38:4e:bd:e7:01:c7:52:e5:d4:77: 53:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:16:ED:37:6B:6E:39:7A:E4:22:7F:21:CC:C7:04:29:AC:B2:12:0D X509v3 Authority Key Identifier: keyid:9C:94:A5:DC:CF:6A:65:B6:89:86:C7:04:38:46:C7:21:BD:33:BE:99 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D66A0/625FF726D9E711E988054016C4F9AE02/nJSl3M9qZbaJhscEOEbHIb0zvpk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nJSl3M9qZbaJhscEOEbHIb0zvpk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D66A0/625FF726D9E711E988054016C4F9AE02/nJSl3M9qZbaJhscEOEbHIb0zvpk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 18:f4:ba:1b:57:ef:59:c3:02:0a:de:0f:35:30:7c:6d:27:38: be:df:23:0a:de:5d:c6:f9:ac:29:db:5a:cf:50:ae:4b:c3:b3: 6b:39:8c:df:ee:19:55:b2:07:56:29:ee:07:34:7b:9d:19:e6: 30:dc:39:a3:bf:fa:98:8c:1d:59:e2:d3:1d:14:f2:c8:c5:f3: 71:ff:aa:df:08:aa:10:8c:75:ba:d5:ec:2a:89:a0:93:fd:ab: f6:d3:8e:6d:6e:4a:a6:50:f1:ad:95:96:22:99:f2:a3:09:c7: 9c:1c:b7:24:c3:7a:c3:b4:53:61:d7:61:eb:bf:03:a2:dc:53: d0:e6:48:02:08:4e:f8:2b:54:70:b0:4c:d2:c9:cb:7d:6c:47: a8:d1:5c:67:39:a3:da:53:e4:7c:28:43:2f:90:b1:94:39:4c: d1:e6:07:2b:6c:26:8e:97:a2:35:88:72:ce:90:3a:c1:0c:35: 25:02:5d:5b:4e:17:c8:2b:54:2f:e3:e3:1a:72:82:f1:19:0d: 69:91:92:51:36:52:dd:a6:ae:09:1f:b6:c6:ba:76:c6:59:a4: 68:e1:5d:8a:24:be:ac:a8:d8:ef:4d:37:c8:3f:3f:3d:79:9a: 71:f7:5a:0d:8a:81:22:31:9b:4a:71:74:db:0c:a0:31:5e:31: 1a:65:42:c4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDTowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDY2QTAxMTAvBgNVBAUTKDlDOTRBNURDQ0Y2QTY1QjY4OTg2QzcwNDM4NDZDNzIx QkQzM0JFOTkwHhcNMjUwNjE2MTc1OTU0WhcNMjUwNjIzMTc1OTU0WjAYMRYwFAYD VQQDEw02ODUwNWI5YS0zNjdkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtUyAMRPLfhZDhbJhbIV8ZdCZzpddSNAzbAqsw9wMBwBZuT+3S5OkdG5v6RmL h2Ysi6QEc+lmziw49kYFqBeilCVnaIyPG6c1bCNIfxweiH2rf/Rv1R3KXOMd50pN pDcmjxmg6ibTgRsoXByZjumBN9wSzVu6cT++tiIY4ugeqOxQnc/VxpRRnrPK1oDX Ov4fPTMwEn1SLLmfM82mpJjmtLTS69J+/t12E+OWJ16Q3DqUJUbY2188rkhrB5LH vnRDepyRoaHCUUnVAqK7tfPc3g5udrchciT2HxmQ/tvSuqvwM0Kr+10RvqoB9jV0 EWQbR1+JLjhOvecBx1Ll1HdTewIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO4W7Tdr bjl65CJ/IczHBCmsshINMB8GA1UdIwQYMBaAFJyUpdzPamW2iYbHBDhGxyG9M76Z MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENjZBMC82MjVGRjcyNkQ5 RTcxMUU5ODgwNTQwMTZDNEY5QUUwMi9uSlNsM005cVpiYUpoc2NFT0ViSEliMHp2 cGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25KU2wzTTlxWmJhSmhzY0VPRWJISWIwenZway5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NjZBMC82MjVGRjcyNkQ5RTcxMUU5ODgwNTQwMTZDNEY5QUUwMi9uSlNsM005cVpi YUpoc2NFT0ViSEliMHp2cGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAY9LobV+9ZwwIK3g81MHxtJzi+3yMK3l3G+awp21rPUK5Lw7NrOYzf 7hlVsgdWKe4HNHudGeYw3Dmjv/qYjB1Z4tMdFPLIxfNx/6rfCKoQjHW61ewqiaCT /av2045tbkqmUPGtlZYimfKjCcecHLckw3rDtFNh12HrvwOi3FPQ5kgCCE74K1Rw sEzSyct9bEeo0VxnOaPaU+R8KEMvkLGUOUzR5gcrbCaOl6I1iHLOkDrBDDUlAl1b ThfIK1Qv4+MacoLxGQ1pkZJRNlLdpq4JH7bGunbGWaRo4V2KJL6sqNjvTTfIPz89 eZpx91oNioEiMZtKcXTbDKAxXjEaZULE -----END CERTIFICATE-----Generated at Tue Jun 17 04:42:25 2025 by rpki-client