$ rpki-client -vvf rpki.apnic.net/member_repository/A91DD112/DABAB5DCD78F11EC97B59E62C4F9AE02/NuTjWeIN2mUTPhIaktbWrLHlMSM.mft File: NuTjWeIN2mUTPhIaktbWrLHlMSM.mft (raw, json) Hash identifier: Hg+Mx+tak1uzPGyRfDkO6AyhTemlGTEyWI/EU20nE/U= Subject key identifier: 2F:10:37:17:49:BB:3C:9D:41:F2:C7:3C:01:09:E7:E7:A6:43:06:71 Authority key identifier: 36:E4:E3:59:E2:0D:DA:65:13:3E:12:1A:92:D6:D6:AC:B1:E5:31:23 Certificate issuer: /CN=A91DD112/serialNumber=36E4E359E20DDA65133E121A92D6D6ACB1E53123 Certificate serial: 030A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NuTjWeIN2mUTPhIaktbWrLHlMSM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DD112/DABAB5DCD78F11EC97B59E62C4F9AE02/NuTjWeIN2mUTPhIaktbWrLHlMSM.mft Manifest number: 0307 Signing time: Sun 15 Jun 2025 00:55:35 +0000 Manifest this update: Sun 15 Jun 2025 00:55:35 +0000 Manifest next update: Sun 22 Jun 2025 00:55:35 +0000 Files and hashes: 1: NuTjWeIN2mUTPhIaktbWrLHlMSM.crl (hash: aKR5z54wbwu3QUJl1b0KkDtJlgN5vUI7arcrqWiRBy8=) 2: 0D09EE14D79411EC955CCA68C4F9AE02.roa (hash: C0oMAxQHsYdHAGjubReHZgymtUaTL7q6qGZom3tg5Ac=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DD112/DABAB5DCD78F11EC97B59E62C4F9AE02/NuTjWeIN2mUTPhIaktbWrLHlMSM.crl rsync://rpki.apnic.net/member_repository/A91DD112/DABAB5DCD78F11EC97B59E62C4F9AE02/NuTjWeIN2mUTPhIaktbWrLHlMSM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NuTjWeIN2mUTPhIaktbWrLHlMSM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Jun 2025 00:55:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 778 (0x30a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DD112, serialNumber=36E4E359E20DDA65133E121A92D6D6ACB1E53123 Validity Not Before: Jun 15 00:55:35 2025 GMT Not After : Jun 22 00:55:35 2025 GMT Subject: CN=684e1a07-69de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:37:69:7f:9c:6a:8d:9d:ba:c4:61:f0:94:13: a5:f3:35:7c:31:80:08:f0:1e:f8:da:b3:62:df:c2: db:70:36:6e:a3:c3:37:9f:ca:54:2c:ed:a1:13:6b: af:6b:3b:ae:35:c4:57:34:ac:bf:8e:af:30:4d:88: 27:ae:d5:4c:4d:89:72:03:05:50:f3:d1:32:16:d3: 3a:02:01:1e:6a:a7:39:dc:6a:a9:53:8f:0e:93:13: 77:e8:15:71:cc:0d:bf:2a:3a:2c:4e:2e:41:0e:38: cd:92:ba:45:6c:fb:39:49:e7:45:22:2b:00:d5:9f: 70:2e:86:a2:b1:99:b9:41:11:8c:50:82:6a:52:18: 8d:10:c3:58:2f:b5:35:bf:bf:b2:32:de:d8:a2:f8: 49:03:81:1f:25:e0:02:ac:45:da:0b:21:bd:7c:e9: a2:56:00:4c:a6:a3:ad:f4:3f:2d:af:b9:f9:1b:a9: f2:f9:d7:e8:20:cb:9a:63:e0:94:5f:af:e7:8f:21: 4b:93:6b:74:9f:7e:a0:54:13:65:c4:d0:19:8a:7a: 0d:a0:f1:aa:be:4b:7c:d9:bc:00:75:a8:5d:f9:46: cf:64:35:65:4e:2f:3d:b4:d8:1e:08:9e:9f:01:08: 73:05:39:1b:ea:2c:3b:4c:e4:8a:2f:d4:4f:b1:d9: 2c:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:10:37:17:49:BB:3C:9D:41:F2:C7:3C:01:09:E7:E7:A6:43:06:71 X509v3 Authority Key Identifier: keyid:36:E4:E3:59:E2:0D:DA:65:13:3E:12:1A:92:D6:D6:AC:B1:E5:31:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DD112/DABAB5DCD78F11EC97B59E62C4F9AE02/NuTjWeIN2mUTPhIaktbWrLHlMSM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NuTjWeIN2mUTPhIaktbWrLHlMSM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DD112/DABAB5DCD78F11EC97B59E62C4F9AE02/NuTjWeIN2mUTPhIaktbWrLHlMSM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 30:ae:65:f9:1a:ac:21:78:6b:38:03:ad:27:f3:fe:98:15:c3: 40:d7:e5:08:81:01:3e:d0:b1:df:a3:76:3f:3a:9b:d8:63:8b: 97:7a:98:e7:8c:f7:04:0c:07:3c:b1:d7:c1:8b:29:d1:a8:26: 33:55:eb:3c:49:04:03:b6:f7:80:d1:2a:f0:14:9c:be:8a:35: 98:b4:e2:6c:48:d6:de:98:54:64:17:16:a0:6e:d6:d9:6a:d7: a5:6f:57:55:bb:4f:85:79:e1:db:ee:1e:d9:08:e5:39:8a:61: c2:ed:0b:dd:3e:34:c0:eb:21:c2:13:03:8d:8f:92:8a:cd:90: 3d:89:9a:e7:d1:ba:60:45:bd:72:b4:27:eb:f9:09:2c:cb:36: a7:40:4d:a6:66:d4:ac:66:82:4f:47:f8:49:99:3e:54:b9:83: 99:34:50:2b:fb:57:e2:2c:1c:5c:74:c9:08:86:e6:51:1b:a3: c2:03:48:48:25:0d:58:0d:f7:38:35:fc:22:5e:c5:51:4b:11: b0:e8:b4:0c:97:a6:eb:db:62:69:c5:0a:4a:b3:c4:83:87:42: cd:de:01:7d:71:96:9f:a2:a9:59:1d:1f:db:da:c8:44:bb:3c: 0b:9d:16:c6:79:51:0b:f7:f1:54:e3:3e:43:13:36:e0:8c:72: ac:6f:d8:75 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAwowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REQxMTIxMTAvBgNVBAUTKDM2RTRFMzU5RTIwRERBNjUxMzNFMTIxQTkyRDZENkFD QjFFNTMxMjMwHhcNMjUwNjE1MDA1NTM1WhcNMjUwNjIyMDA1NTM1WjAYMRYwFAYD VQQDEw02ODRlMWEwNy02OWRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqjdpf5xqjZ26xGHwlBOl8zV8MYAI8B742rNi38LbcDZuo8M3n8pULO2hE2uv azuuNcRXNKy/jq8wTYgnrtVMTYlyAwVQ89EyFtM6AgEeaqc53GqpU48OkxN36BVx zA2/KjosTi5BDjjNkrpFbPs5SedFIisA1Z9wLoaisZm5QRGMUIJqUhiNEMNYL7U1 v7+yMt7YovhJA4EfJeACrEXaCyG9fOmiVgBMpqOt9D8tr7n5G6ny+dfoIMuaY+CU X6/njyFLk2t0n36gVBNlxNAZinoNoPGqvkt82bwAdahd+UbPZDVlTi89tNgeCJ6f AQhzBTkb6iw7TOSKL9RPsdksPwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC8QNxdJ uzydQfLHPAEJ5+emQwZxMB8GA1UdIwQYMBaAFDbk41niDdplEz4SGpLW1qyx5TEj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERDExMi9EQUJBQjVEQ0Q3 OEYxMUVDOTdCNTlFNjJDNEY5QUUwMi9OdVRqV2VJTjJtVVRQaElha3RiV3JMSGxN U00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL051VGpXZUlOMm1VVFBoSWFrdGJXckxIbE1TTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RDExMi9EQUJBQjVEQ0Q3OEYxMUVDOTdCNTlFNjJDNEY5QUUwMi9OdVRqV2VJTjJt VVRQaElha3RiV3JMSGxNU00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAwrmX5GqwheGs4A60n8/6YFcNA1+UIgQE+0LHfo3Y/OpvYY4uXepjn jPcEDAc8sdfBiynRqCYzVes8SQQDtveA0SrwFJy+ijWYtOJsSNbemFRkFxagbtbZ atelb1dVu0+FeeHb7h7ZCOU5imHC7QvdPjTA6yHCEwONj5KKzZA9iZrn0bpgRb1y tCfr+QksyzanQE2mZtSsZoJPR/hJmT5UuYOZNFAr+1fiLBxcdMkIhuZRG6PCA0hI JQ1YDfc4NfwiXsVRSxGw6LQMl6br22JpxQpKs8SDh0LN3gF9cZafoqlZHR/b2shE uzwLnRbGeVEL9/FU4z5DEzbgjHKsb9h1 -----END CERTIFICATE-----Generated at Sun Jun 15 05:04:15 2025 by rpki-client