$ rpki-client -vvf rpki.apnic.net/member_repository/A91EEAD3/D6231A321E2D11EF83D95229C4F9AE02/N0X7n36iweJS0pvv2GphV3YNiMA.mft File: N0X7n36iweJS0pvv2GphV3YNiMA.mft (raw, json) Hash identifier: kOAdbZnIY+6N7KJwPq1ZcsMtOzEdMFp9WqRwx+OTz50= Subject key identifier: 81:96:ED:B3:FC:0C:9F:D6:54:95:5B:EB:CD:5C:22:96:CE:52:6E:8F Authority key identifier: 37:45:FB:9F:7E:A2:C1:E2:52:D2:9B:EF:D8:6A:61:57:76:0D:88:C0 Certificate issuer: /CN=A91EEAD3/serialNumber=3745FB9F7EA2C1E252D29BEFD86A6157760D88C0 Certificate serial: CB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N0X7n36iweJS0pvv2GphV3YNiMA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EEAD3/D6231A321E2D11EF83D95229C4F9AE02/N0X7n36iweJS0pvv2GphV3YNiMA.mft Manifest number: C8 Signing time: Tue 17 Jun 2025 04:43:38 +0000 Manifest this update: Tue 17 Jun 2025 04:43:37 +0000 Manifest next update: Tue 24 Jun 2025 04:43:37 +0000 Files and hashes: 1: N0X7n36iweJS0pvv2GphV3YNiMA.crl (hash: VFl/wQ/r63mYmf5UhANf0dPCS8xGY/NGNY3tWC1fxv4=) 2: E989DE0C1E2E11EFB8D12A2BC4F9AE02.roa (hash: PkN1Jtt374CIHLZsHPqXl9liocYOPeAQiQHQB34mvOQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EEAD3/D6231A321E2D11EF83D95229C4F9AE02/N0X7n36iweJS0pvv2GphV3YNiMA.crl rsync://rpki.apnic.net/member_repository/A91EEAD3/D6231A321E2D11EF83D95229C4F9AE02/N0X7n36iweJS0pvv2GphV3YNiMA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N0X7n36iweJS0pvv2GphV3YNiMA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 24 Jun 2025 04:43:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 203 (0xcb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EEAD3, serialNumber=3745FB9F7EA2C1E252D29BEFD86A6157760D88C0 Validity Not Before: Jun 17 04:43:37 2025 GMT Not After : Jun 24 04:43:37 2025 GMT Subject: CN=6850f27a-e0e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:4f:dd:41:34:ba:2e:fa:4d:4d:93:55:93:72: 79:ee:e1:91:9b:e3:a9:2d:e4:f3:b3:de:ed:b6:07: 7a:9c:c7:26:9f:28:9c:02:c0:a1:00:e0:0c:9e:bc: 5f:ce:4a:aa:a5:be:8f:ab:ae:48:3c:69:bb:ee:39: c3:3d:5f:31:aa:86:56:64:78:b3:89:80:3a:a5:ce: fa:a6:9e:fc:aa:ba:c5:38:3c:96:f2:cd:8c:99:a5: 11:dc:73:05:a9:4c:67:17:28:e0:e0:8a:00:e5:b5: 8e:fb:82:d0:08:dd:89:a0:59:e9:04:2b:53:ab:18: 0d:c1:36:e8:e1:8a:47:ab:dd:28:41:f3:da:3f:ea: ad:c5:68:5f:a4:5a:21:b3:91:7c:d3:d0:23:96:e5: 36:ee:48:84:f2:86:bf:f7:a4:c9:bd:46:10:8e:d6: 38:13:68:d3:e8:a3:f7:51:04:d9:aa:ea:60:31:59: b1:2d:04:99:00:b4:6c:40:cb:6e:c8:29:c5:9f:9b: 52:28:a5:46:fc:86:09:e2:73:e9:2e:1b:0d:5e:28: d6:53:cd:f1:65:f4:b2:b6:1c:af:e8:b6:5f:b5:cf: 58:97:33:58:9a:c0:48:74:d9:10:c8:6b:b2:5a:aa: 51:5d:dd:64:a8:7b:4c:99:c0:6f:5f:3d:23:67:11: 60:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:96:ED:B3:FC:0C:9F:D6:54:95:5B:EB:CD:5C:22:96:CE:52:6E:8F X509v3 Authority Key Identifier: keyid:37:45:FB:9F:7E:A2:C1:E2:52:D2:9B:EF:D8:6A:61:57:76:0D:88:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EEAD3/D6231A321E2D11EF83D95229C4F9AE02/N0X7n36iweJS0pvv2GphV3YNiMA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N0X7n36iweJS0pvv2GphV3YNiMA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EEAD3/D6231A321E2D11EF83D95229C4F9AE02/N0X7n36iweJS0pvv2GphV3YNiMA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8e:cf:3f:e9:ea:b8:e7:b1:7a:d0:8e:aa:46:b3:0b:77:e5:df: 28:b7:f7:90:f9:11:1b:33:d2:bd:5b:7b:38:5d:d1:6e:df:eb: b0:25:f7:62:d9:00:bf:82:2c:24:be:19:0a:e0:49:57:32:40: 82:ad:0c:9d:97:33:3d:ed:1e:f2:d8:73:9b:5c:e7:22:eb:ee: ec:fa:59:3a:41:52:30:2c:0a:98:bd:e3:77:1a:e9:8b:8b:5c: f7:cf:5d:22:02:3c:b6:f9:42:e8:a1:77:e2:69:0f:cf:c8:74: 49:8c:64:d5:b9:91:a2:65:89:a4:a4:ac:54:13:72:fc:5c:ea: 69:b1:57:b2:cd:bd:7f:e0:f2:7c:e4:2d:6f:5b:27:32:a7:f3: 27:96:12:5a:48:c3:fd:d5:fd:b4:24:9d:f4:1a:8a:52:4c:6c: 84:2f:0a:80:af:4c:bd:62:26:55:13:1e:36:db:64:50:20:d4: 5e:ba:fd:0e:ca:a7:28:85:f8:9f:96:2a:0f:53:ba:f9:65:78: d5:0d:2c:55:58:0f:a0:67:c8:e7:ac:cf:55:07:55:bf:42:07: b8:21:10:89:17:81:7d:57:cb:db:23:ae:94:75:72:d3:77:45: 24:dc:6a:11:8f:a2:c2:13:29:83:8f:43:e8:76:87:65:32:dd: 8c:8c:fd:28 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUVBRDMxMTAvBgNVBAUTKDM3NDVGQjlGN0VBMkMxRTI1MkQyOUJFRkQ4NkE2MTU3 NzYwRDg4QzAwHhcNMjUwNjE3MDQ0MzM3WhcNMjUwNjI0MDQ0MzM3WjAYMRYwFAYD VQQDEw02ODUwZjI3YS1lMGUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu0/dQTS6LvpNTZNVk3J57uGRm+OpLeTzs97ttgd6nMcmnyicAsChAOAMnrxf zkqqpb6Pq65IPGm77jnDPV8xqoZWZHiziYA6pc76pp78qrrFODyW8s2MmaUR3HMF qUxnFyjg4IoA5bWO+4LQCN2JoFnpBCtTqxgNwTbo4YpHq90oQfPaP+qtxWhfpFoh s5F809AjluU27kiE8oa/96TJvUYQjtY4E2jT6KP3UQTZqupgMVmxLQSZALRsQMtu yCnFn5tSKKVG/IYJ4nPpLhsNXijWU83xZfSythyv6LZftc9YlzNYmsBIdNkQyGuy WqpRXd1kqHtMmcBvXz0jZxFgRwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIGW7bP8 DJ/WVJVb681cIpbOUm6PMB8GA1UdIwQYMBaAFDdF+59+osHiUtKb79hqYVd2DYjA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRUFEMy9ENjIzMUEzMjFF MkQxMUVGODNEOTUyMjlDNEY5QUUwMi9OMFg3bjM2aXdlSlMwcHZ2MkdwaFYzWU5p TUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL04wWDduMzZpd2VKUzBwdnYyR3BoVjNZTmlNQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RUFEMy9ENjIzMUEzMjFFMkQxMUVGODNEOTUyMjlDNEY5QUUwMi9OMFg3bjM2aXdl SlMwcHZ2MkdwaFYzWU5pTUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCOzz/p6rjnsXrQjqpGswt35d8ot/eQ+REbM9K9W3s4XdFu3+uwJfdi 2QC/giwkvhkK4ElXMkCCrQydlzM97R7y2HObXOci6+7s+lk6QVIwLAqYveN3GumL i1z3z10iAjy2+ULooXfiaQ/PyHRJjGTVuZGiZYmkpKxUE3L8XOppsVeyzb1/4PJ8 5C1vWycyp/MnlhJaSMP91f20JJ30GopSTGyELwqAr0y9YiZVEx4222RQINReuv0O yqcohfiflioPU7r5ZXjVDSxVWA+gZ8jnrM9VB1W/Qge4IRCJF4F9V8vbI66UdXLT d0Uk3GoRj6LCEymDj0PododlMt2MjP0o -----END CERTIFICATE-----Generated at Wed Jun 18 11:26:20 2025 by rpki-client