$ rpki-client -vvf rpki.apnic.net/member_repository/A91DE7DE/CEE3D71804E111E98EA7D872C4F9AE02/NxJzz9jCyQi2kda-oXXo3oK9Q5o.mft File: NxJzz9jCyQi2kda-oXXo3oK9Q5o.mft (raw, json) Hash identifier: I0PtaB+zd+YBLvCssDXRvU001DpcLBkc+2zHnYGhreA= Subject key identifier: F3:E5:E0:6B:59:EF:38:B2:66:88:8D:42:18:C8:97:C0:63:71:04:36 Authority key identifier: 37:12:73:CF:D8:C2:C9:08:B6:91:D6:BE:A1:75:E8:DE:82:BD:43:9A Certificate issuer: /CN=A91DE7DE/serialNumber=371273CFD8C2C908B691D6BEA175E8DE82BD439A Certificate serial: 11C2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NxJzz9jCyQi2kda-oXXo3oK9Q5o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DE7DE/CEE3D71804E111E98EA7D872C4F9AE02/NxJzz9jCyQi2kda-oXXo3oK9Q5o.mft Manifest number: 1193 Signing time: Sat 14 Jun 2025 17:10:57 +0000 Manifest this update: Sat 14 Jun 2025 17:10:57 +0000 Manifest next update: Sat 21 Jun 2025 17:10:57 +0000 Files and hashes: 1: NxJzz9jCyQi2kda-oXXo3oK9Q5o.crl (hash: Z4WyxbfA3Zi1JiKNSkZEWu56AfE8vb2CAjMNnD2QfSk=) 2: 7F7F1470091D11F0B7E95627C4F9AE02.roa (hash: hpmM9pfcrUFnNRets4Cm3b/cVvffA5StG3HyqAHQxOA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DE7DE/CEE3D71804E111E98EA7D872C4F9AE02/NxJzz9jCyQi2kda-oXXo3oK9Q5o.crl rsync://rpki.apnic.net/member_repository/A91DE7DE/CEE3D71804E111E98EA7D872C4F9AE02/NxJzz9jCyQi2kda-oXXo3oK9Q5o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NxJzz9jCyQi2kda-oXXo3oK9Q5o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 17:10:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4546 (0x11c2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DE7DE, serialNumber=371273CFD8C2C908B691D6BEA175E8DE82BD439A Validity Not Before: Jun 14 17:10:57 2025 GMT Not After : Jun 21 17:10:57 2025 GMT Subject: CN=684dad21-1350 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:87:81:a4:17:98:26:cf:c4:24:5a:e1:73:38: 15:e1:4f:dd:bd:c8:f4:94:d9:a6:9a:4e:79:7c:47: 3e:12:6f:fe:0c:0c:85:fe:7d:a2:88:63:57:80:b2: 12:98:9d:73:8f:00:72:c3:79:1a:c2:34:db:32:07: 6d:a3:5f:ea:28:be:a4:a7:66:c3:28:98:9a:00:9f: 45:23:78:e5:31:d8:d8:ac:0a:0d:e9:36:a2:88:e1: e5:b6:99:e0:f8:0d:95:dc:05:68:9a:34:f2:4a:61: b2:08:5e:8f:55:db:18:2f:f6:6c:11:30:f9:50:71: 32:66:29:81:fe:b0:34:c0:de:31:6d:d1:c9:a4:b7: a4:0f:19:31:e5:b6:e4:c8:de:67:4d:de:97:30:f8: 6b:bb:32:b0:84:87:fc:07:bf:24:04:04:17:b8:5a: 02:c0:47:85:2d:4f:c7:4f:b2:2f:2b:81:dd:c5:64: ad:02:da:be:c7:79:5c:0e:57:ad:31:55:76:dd:42: 5e:68:67:d7:46:ab:32:aa:2d:4f:09:bb:42:7a:36: e5:7f:c6:fa:78:f5:1b:89:d0:0b:42:30:59:e2:3f: 80:46:40:3d:a6:31:72:b6:12:67:a9:24:38:75:07: 5b:b3:23:47:ed:6a:03:cd:26:0f:c9:4d:ee:94:b4: 99:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:E5:E0:6B:59:EF:38:B2:66:88:8D:42:18:C8:97:C0:63:71:04:36 X509v3 Authority Key Identifier: keyid:37:12:73:CF:D8:C2:C9:08:B6:91:D6:BE:A1:75:E8:DE:82:BD:43:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DE7DE/CEE3D71804E111E98EA7D872C4F9AE02/NxJzz9jCyQi2kda-oXXo3oK9Q5o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NxJzz9jCyQi2kda-oXXo3oK9Q5o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DE7DE/CEE3D71804E111E98EA7D872C4F9AE02/NxJzz9jCyQi2kda-oXXo3oK9Q5o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 96:8d:11:78:ef:a3:f6:1e:9d:31:81:d8:cb:d0:1d:0e:90:00: bc:55:66:ce:a8:77:31:12:eb:c3:6f:ea:03:08:d3:e2:86:a5: 1a:df:8f:d1:e1:46:90:9c:ea:0d:90:36:37:7e:f0:24:9a:cb: bd:92:31:a8:eb:79:d9:9d:d4:42:50:3f:5e:bc:06:f5:07:fe: 7e:9a:bd:aa:91:9b:f0:87:d9:2f:ab:d8:e5:5d:d7:49:b2:55: 8b:90:33:e1:ea:d9:ee:91:af:ac:4c:f2:65:d5:1d:28:00:30: 2b:41:af:c0:ca:e6:83:70:03:8b:93:a3:63:31:e0:a1:29:9c: d6:12:d5:3c:07:46:01:83:ef:c1:cb:64:49:61:2f:b1:46:7d: eb:41:2d:47:f7:51:d0:9b:d4:7f:87:a6:4e:80:67:77:fa:06: 1f:27:43:68:d1:61:f9:28:9e:43:1a:8f:5c:6c:64:80:cb:ef: e3:20:9a:49:fb:b3:c3:96:8e:bd:3d:14:a3:dd:20:2d:28:c8: c1:78:66:b2:bb:83:45:c3:a2:53:96:cf:54:8b:59:92:1c:a3: 4d:a6:d0:b7:ff:a5:3e:3b:e4:ba:96:15:96:4a:74:f1:8a:29: a2:30:0c:03:e3:64:ac:dc:50:ac:71:9b:6f:f9:ed:28:13:1c: c0:ca:a6:04 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEcIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REU3REUxMTAvBgNVBAUTKDM3MTI3M0NGRDhDMkM5MDhCNjkxRDZCRUExNzVFOERF ODJCRDQzOUEwHhcNMjUwNjE0MTcxMDU3WhcNMjUwNjIxMTcxMDU3WjAYMRYwFAYD VQQDEw02ODRkYWQyMS0xMzUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAloeBpBeYJs/EJFrhczgV4U/dvcj0lNmmmk55fEc+Em/+DAyF/n2iiGNXgLIS mJ1zjwByw3kawjTbMgdto1/qKL6kp2bDKJiaAJ9FI3jlMdjYrAoN6TaiiOHltpng +A2V3AVomjTySmGyCF6PVdsYL/ZsETD5UHEyZimB/rA0wN4xbdHJpLekDxkx5bbk yN5nTd6XMPhruzKwhIf8B78kBAQXuFoCwEeFLU/HT7IvK4HdxWStAtq+x3lcDlet MVV23UJeaGfXRqsyqi1PCbtCejblf8b6ePUbidALQjBZ4j+ARkA9pjFythJnqSQ4 dQdbsyNH7WoDzSYPyU3ulLSZXwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPPl4GtZ 7ziyZoiNQhjIl8BjcQQ2MB8GA1UdIwQYMBaAFDcSc8/YwskItpHWvqF16N6CvUOa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERTdERS9DRUUzRDcxODA0 RTExMUU5OEVBN0Q4NzJDNEY5QUUwMi9OeEp6ejlqQ3lRaTJrZGEtb1hYbzNvSzlR NW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL054Snp6OWpDeVFpMmtkYS1vWFhvM29LOVE1by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RTdERS9DRUUzRDcxODA0RTExMUU5OEVBN0Q4NzJDNEY5QUUwMi9OeEp6ejlqQ3lR aTJrZGEtb1hYbzNvSzlRNW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCWjRF476P2Hp0xgdjL0B0OkAC8VWbOqHcxEuvDb+oDCNPihqUa34/R 4UaQnOoNkDY3fvAkmsu9kjGo63nZndRCUD9evAb1B/5+mr2qkZvwh9kvq9jlXddJ slWLkDPh6tnuka+sTPJl1R0oADArQa/AyuaDcAOLk6NjMeChKZzWEtU8B0YBg+/B y2RJYS+xRn3rQS1H91HQm9R/h6ZOgGd3+gYfJ0No0WH5KJ5DGo9cbGSAy+/jIJpJ +7PDlo69PRSj3SAtKMjBeGayu4NFw6JTls9Ui1mSHKNNptC3/6U+O+S6lhWWSnTx iimiMAwD42Ss3FCscZtv+e0oExzAyqYE -----END CERTIFICATE-----Generated at Sun Jun 15 08:35:40 2025 by rpki-client