$ rpki-client -vvf rpki.apnic.net/member_repository/A91EB002/E24F8234022E11EF856F5132C4F9AE02/nvPmBKY_LO9L3eN9yokNBFGWeuw.mft File: nvPmBKY_LO9L3eN9yokNBFGWeuw.mft (raw, json) Hash identifier: zK5cC1g5tTMahuISeegFMpz47WtkNNGiUEanWXDechM= Subject key identifier: C5:1F:03:C2:1D:20:86:7B:BB:F0:84:0A:13:89:A3:51:D9:2A:6C:6E Authority key identifier: 9E:F3:E6:04:A6:3F:2C:EF:4B:DD:E3:7D:CA:89:0D:04:51:96:7A:EC Certificate issuer: /CN=A91EB002/serialNumber=9EF3E604A63F2CEF4BDDE37DCA890D0451967AEC Certificate serial: E9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nvPmBKY_LO9L3eN9yokNBFGWeuw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EB002/E24F8234022E11EF856F5132C4F9AE02/nvPmBKY_LO9L3eN9yokNBFGWeuw.mft Manifest number: E1 Signing time: Sun 15 Jun 2025 04:43:49 +0000 Manifest this update: Sun 15 Jun 2025 04:43:48 +0000 Manifest next update: Sun 22 Jun 2025 04:43:48 +0000 Files and hashes: 1: nvPmBKY_LO9L3eN9yokNBFGWeuw.crl (hash: t72gKG8/Y2GhieI9ox0jtdeqE5crF++1YC9SBh3P7yo=) 2: 700507423B1911F0B0CC573EC4F9AE02.roa (hash: +FT8r5Bqy2pkm1XBg6PTxfPLZ+Pqq+RJOe/CskhHrxE=) 3: 5A65F048F19211EFA4D9CD34C4F9AE02.roa (hash: 00Gxu/B4q0Oej8/UcNpQ1rIkErXZo9wae3oYgISIoHo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EB002/E24F8234022E11EF856F5132C4F9AE02/nvPmBKY_LO9L3eN9yokNBFGWeuw.crl rsync://rpki.apnic.net/member_repository/A91EB002/E24F8234022E11EF856F5132C4F9AE02/nvPmBKY_LO9L3eN9yokNBFGWeuw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nvPmBKY_LO9L3eN9yokNBFGWeuw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Jun 2025 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 233 (0xe9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EB002, serialNumber=9EF3E604A63F2CEF4BDDE37DCA890D0451967AEC Validity Not Before: Jun 15 04:43:48 2025 GMT Not After : Jun 22 04:43:48 2025 GMT Subject: CN=684e4f85-b68e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:a9:db:67:03:d5:2d:eb:c7:a8:98:68:20:9d: 86:99:9e:89:bb:19:4e:58:55:f4:5d:87:52:cf:ba: 78:14:16:8d:bf:6c:2c:7d:ed:c1:c9:cd:d7:03:d1: 0c:69:f9:89:be:7e:06:e4:5c:8a:38:a0:43:01:a6: 22:ff:00:55:f1:24:ba:b6:6c:fb:ba:0b:1b:63:ae: 8b:26:85:44:53:7e:26:77:88:2b:75:c0:38:d6:da: 7e:0f:4c:4c:f4:08:f7:92:9d:ff:b9:b8:2d:1a:dc: 41:97:dd:85:8a:1b:b1:b8:11:82:03:63:aa:92:25: b8:60:c6:5f:4d:5b:95:b3:81:a3:b1:e3:20:c6:1f: 10:84:5f:be:64:a5:4b:37:94:73:39:23:a9:81:71: c2:b8:30:31:33:a1:88:35:c7:2d:bf:9d:d0:a1:85: e3:29:a0:82:99:dc:f8:c1:08:b6:c6:9e:61:08:1b: d0:ba:4c:ec:e4:2e:dd:2c:05:b9:51:e8:9a:b3:da: 60:9f:3e:a2:0d:3f:48:23:ee:21:b6:5f:a3:4b:e8: 0f:85:dc:49:c4:08:08:0d:73:e6:07:65:8a:d7:30: 83:37:59:5f:d0:25:e2:54:60:d6:62:7d:00:f3:af: ac:78:00:9d:6a:65:57:af:d8:cb:0c:c2:65:38:f1: f5:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:1F:03:C2:1D:20:86:7B:BB:F0:84:0A:13:89:A3:51:D9:2A:6C:6E X509v3 Authority Key Identifier: keyid:9E:F3:E6:04:A6:3F:2C:EF:4B:DD:E3:7D:CA:89:0D:04:51:96:7A:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EB002/E24F8234022E11EF856F5132C4F9AE02/nvPmBKY_LO9L3eN9yokNBFGWeuw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nvPmBKY_LO9L3eN9yokNBFGWeuw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EB002/E24F8234022E11EF856F5132C4F9AE02/nvPmBKY_LO9L3eN9yokNBFGWeuw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b0:4f:ff:4c:e6:ac:b0:35:ac:bd:99:c6:7e:36:78:ef:2b:f8: 44:3a:c5:5f:87:75:94:7b:c0:8a:c8:50:24:16:b5:d6:e5:c2: 09:1a:37:03:02:7d:2e:00:9a:8e:b7:6c:d4:62:c6:63:df:f1: 06:1f:d5:16:9f:14:cf:51:ba:49:53:38:c8:d5:f4:ac:02:63: a4:71:63:ad:9b:43:53:57:56:5b:d4:85:66:90:87:c7:94:66: dd:97:b2:00:29:1f:b8:89:39:8f:cb:c6:fb:7e:a3:19:71:d7: d0:58:9e:ed:39:19:1c:6c:2f:d6:b2:1a:55:73:d7:10:a4:28: 42:36:53:c9:f8:e3:28:c5:3a:d3:1b:5c:6d:f3:63:ed:74:7c: 9d:56:8d:54:5d:13:d8:1e:97:7f:a3:e6:f4:f3:21:65:eb:29: b3:b1:72:a7:f8:4f:78:3d:3a:89:15:a1:60:6d:14:64:c0:fa: aa:93:ad:ce:7f:e7:d4:83:32:6f:4c:2c:af:98:17:c6:71:39: a6:b0:35:79:83:90:b0:9f:08:bd:75:f6:7d:88:bd:5a:87:f1: d1:b0:79:8d:93:79:93:a1:a6:c7:b6:fd:4a:01:fd:1c:06:2f: 9a:ee:25:a2:ea:23:a8:8b:d8:be:67:b7:1f:a1:5b:8e:08:c7: 6c:fb:4b:d4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUIwMDIxMTAvBgNVBAUTKDlFRjNFNjA0QTYzRjJDRUY0QkRERTM3RENBODkwRDA0 NTE5NjdBRUMwHhcNMjUwNjE1MDQ0MzQ4WhcNMjUwNjIyMDQ0MzQ4WjAYMRYwFAYD VQQDEw02ODRlNGY4NS1iNjhlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtanbZwPVLevHqJhoIJ2GmZ6JuxlOWFX0XYdSz7p4FBaNv2wsfe3Byc3XA9EM afmJvn4G5FyKOKBDAaYi/wBV8SS6tmz7ugsbY66LJoVEU34md4grdcA41tp+D0xM 9Aj3kp3/ubgtGtxBl92FihuxuBGCA2OqkiW4YMZfTVuVs4GjseMgxh8QhF++ZKVL N5RzOSOpgXHCuDAxM6GINcctv53QoYXjKaCCmdz4wQi2xp5hCBvQukzs5C7dLAW5 Ueias9pgnz6iDT9II+4htl+jS+gPhdxJxAgIDXPmB2WK1zCDN1lf0CXiVGDWYn0A 86+seACdamVXr9jLDMJlOPH1oQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMUfA8Id IIZ7u/CEChOJo1HZKmxuMB8GA1UdIwQYMBaAFJ7z5gSmPyzvS93jfcqJDQRRlnrs MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQjAwMi9FMjRGODIzNDAy MkUxMUVGODU2RjUxMzJDNEY5QUUwMi9udlBtQktZX0xPOUwzZU45eW9rTkJGR1dl dXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL252UG1CS1lfTE85TDNlTjl5b2tOQkZHV2V1dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QjAwMi9FMjRGODIzNDAyMkUxMUVGODU2RjUxMzJDNEY5QUUwMi9udlBtQktZX0xP OUwzZU45eW9rTkJGR1dldXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCwT/9M5qywNay9mcZ+NnjvK/hEOsVfh3WUe8CKyFAkFrXW5cIJGjcD An0uAJqOt2zUYsZj3/EGH9UWnxTPUbpJUzjI1fSsAmOkcWOtm0NTV1Zb1IVmkIfH lGbdl7IAKR+4iTmPy8b7fqMZcdfQWJ7tORkcbC/WshpVc9cQpChCNlPJ+OMoxTrT G1xt82PtdHydVo1UXRPYHpd/o+b08yFl6ymzsXKn+E94PTqJFaFgbRRkwPqqk63O f+fUgzJvTCyvmBfGcTmmsDV5g5Cwnwi9dfZ9iL1ah/HRsHmNk3mToabHtv1KAf0c Bi+a7iWi6iOoi9i+Z7cfoVuOCMds+0vU -----END CERTIFICATE-----Generated at Sun Jun 15 08:44:27 2025 by rpki-client