$ rpki-client -vvf rpki.apnic.net/member_repository/A91F38FD/A5A6F37A61F811EE9F79401AC4F9AE02/nLXKgHLiac4FVaYAsheSDrnhrE8.mft File: nLXKgHLiac4FVaYAsheSDrnhrE8.mft (raw, json) Hash identifier: w8YhPzYclA6p4pycjoVPqWOhZe4wHittJK7lmElKdaA= Subject key identifier: 63:ED:CD:80:2D:53:13:4A:49:BC:37:D3:A9:2C:E1:85:22:E5:9B:C6 Authority key identifier: 9C:B5:CA:80:72:E2:69:CE:05:55:A6:00:B2:17:92:0E:B9:E1:AC:4F Certificate issuer: /CN=A91F38FD/serialNumber=9CB5CA8072E269CE0555A600B217920EB9E1AC4F Certificate serial: 014C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nLXKgHLiac4FVaYAsheSDrnhrE8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F38FD/A5A6F37A61F811EE9F79401AC4F9AE02/nLXKgHLiac4FVaYAsheSDrnhrE8.mft Manifest number: 0145 Signing time: Fri 13 Jun 2025 03:20:14 +0000 Manifest this update: Fri 13 Jun 2025 03:20:13 +0000 Manifest next update: Fri 20 Jun 2025 03:20:13 +0000 Files and hashes: 1: nLXKgHLiac4FVaYAsheSDrnhrE8.crl (hash: jZjmQB0ata9afmQewXPiKNPUEuVrchgjrGqbHHJBwoc=) 2: 0B421064DD2411EFA5DECA6CC4F9AE02.roa (hash: iPG0hpzDRBKyvVm+6Qkbihdh+5UI+wgroCyFHLS8kTU=) 3: 36020660DD2411EF9F4FB925C4F9AE02.roa (hash: j9Po9H6BwdSd4+LJVOpstqA6CfVsNzASbprlAvb5WDg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F38FD/A5A6F37A61F811EE9F79401AC4F9AE02/nLXKgHLiac4FVaYAsheSDrnhrE8.crl rsync://rpki.apnic.net/member_repository/A91F38FD/A5A6F37A61F811EE9F79401AC4F9AE02/nLXKgHLiac4FVaYAsheSDrnhrE8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nLXKgHLiac4FVaYAsheSDrnhrE8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 03:20:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 332 (0x14c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F38FD, serialNumber=9CB5CA8072E269CE0555A600B217920EB9E1AC4F Validity Not Before: Jun 13 03:20:13 2025 GMT Not After : Jun 20 03:20:13 2025 GMT Subject: CN=684b98ee-3c10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:d2:dd:db:40:63:ea:a1:e9:17:85:98:87:74: 3f:02:b6:5c:22:b9:63:07:93:dd:4f:70:00:d3:de: 10:32:d1:da:78:b8:07:38:fd:4b:c5:09:4c:0f:e2: d5:75:24:e6:ac:3b:72:ef:d4:e1:05:9f:70:90:b1: 3c:91:44:25:01:0b:b8:f1:98:c9:5d:8d:28:05:c2: 21:45:3d:f6:8d:dc:02:71:0b:4a:44:39:bc:01:6f: 4d:e4:3a:6f:b4:fd:8c:dd:42:64:15:40:50:6d:14: d0:8f:59:bf:99:1a:f2:3a:5a:e2:4c:b5:b9:0d:4d: 6a:07:e7:80:b1:ed:a1:97:8a:09:2d:af:ce:4c:a9: d9:fa:6b:5d:75:12:da:5f:b1:2a:f7:6e:97:85:61: f1:c8:77:b7:bf:c3:d0:02:f5:2f:39:e2:6b:d4:b4: d8:94:28:bf:91:d5:27:7c:e5:21:7b:6b:c3:89:7c: 1b:04:c6:7f:0d:1b:f5:f6:05:03:8c:fd:76:98:87: 5b:e1:db:18:3c:05:28:dd:19:79:1c:4f:88:10:92: 06:6a:36:0d:d4:b6:0b:ae:6a:01:df:c7:d4:cc:53: 0c:33:ba:df:72:15:6b:30:40:3b:ff:64:32:5c:c2: 06:73:a0:5a:90:2f:70:af:ef:a8:eb:86:26:ae:c6: 77:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:ED:CD:80:2D:53:13:4A:49:BC:37:D3:A9:2C:E1:85:22:E5:9B:C6 X509v3 Authority Key Identifier: keyid:9C:B5:CA:80:72:E2:69:CE:05:55:A6:00:B2:17:92:0E:B9:E1:AC:4F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F38FD/A5A6F37A61F811EE9F79401AC4F9AE02/nLXKgHLiac4FVaYAsheSDrnhrE8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nLXKgHLiac4FVaYAsheSDrnhrE8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F38FD/A5A6F37A61F811EE9F79401AC4F9AE02/nLXKgHLiac4FVaYAsheSDrnhrE8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 21:b8:ce:e0:bf:e5:56:89:9c:57:26:0d:a2:fa:2e:4c:4d:c2: dd:80:0e:67:93:29:fc:7c:78:c2:83:dc:4c:27:f6:dd:a4:bd: a0:cb:ad:5b:a4:b9:19:fc:ac:2b:b4:e1:ad:20:a4:d2:4b:a4: f9:d8:9a:55:4b:12:04:a9:59:61:fc:1b:56:b6:5b:a9:7a:03: 62:38:4b:4e:e9:56:18:94:e3:a6:aa:20:3d:65:af:3c:b2:a6: 4b:ae:57:5f:1c:4e:47:64:a3:f7:64:25:a9:82:2a:a9:0b:cf: 13:22:d5:e6:af:bc:57:83:91:56:3f:ae:e9:e4:e3:16:b8:13: 6b:ff:28:9e:10:f9:fe:7d:0d:e7:b1:8e:bb:d7:2c:63:87:c7: 8c:d7:52:33:c6:52:a6:4d:fa:87:e8:ba:69:06:78:43:cc:fc: 69:c0:b3:12:97:ce:a3:cb:8f:6f:3a:43:dd:83:9c:22:69:09: fe:7b:95:40:d6:3b:a9:0d:e4:30:3b:27:50:d2:c1:38:61:ba: d1:9a:af:5d:10:0a:fe:d5:01:10:71:53:29:e6:a1:60:62:0f: b9:a3:83:09:26:e3:cd:e7:54:fd:31:2a:24:d5:b2:97:3e:5e: 37:8f:db:50:65:53:55:c4:65:29:75:bf:13:2a:af:82:9e:5a: dd:b0:bf:60 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAUwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjM4RkQxMTAvBgNVBAUTKDlDQjVDQTgwNzJFMjY5Q0UwNTU1QTYwMEIyMTc5MjBF QjlFMUFDNEYwHhcNMjUwNjEzMDMyMDEzWhcNMjUwNjIwMDMyMDEzWjAYMRYwFAYD VQQDEw02ODRiOThlZS0zYzEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAztLd20Bj6qHpF4WYh3Q/ArZcIrljB5PdT3AA094QMtHaeLgHOP1LxQlMD+LV dSTmrDty79ThBZ9wkLE8kUQlAQu48ZjJXY0oBcIhRT32jdwCcQtKRDm8AW9N5Dpv tP2M3UJkFUBQbRTQj1m/mRryOlriTLW5DU1qB+eAse2hl4oJLa/OTKnZ+mtddRLa X7Eq926XhWHxyHe3v8PQAvUvOeJr1LTYlCi/kdUnfOUhe2vDiXwbBMZ/DRv19gUD jP12mIdb4dsYPAUo3Rl5HE+IEJIGajYN1LYLrmoB38fUzFMMM7rfchVrMEA7/2Qy XMIGc6BakC9wr++o64YmrsZ3MwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGPtzYAt UxNKSbw306ks4YUi5ZvGMB8GA1UdIwQYMBaAFJy1yoBy4mnOBVWmALIXkg654axP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMzhGRC9BNUE2RjM3QTYx RjgxMUVFOUY3OTQwMUFDNEY5QUUwMi9uTFhLZ0hMaWFjNEZWYVlBc2hlU0Rybmhy RTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25MWEtnSExpYWM0RlZhWUFzaGVTRHJuaHJFOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MzhGRC9BNUE2RjM3QTYxRjgxMUVFOUY3OTQwMUFDNEY5QUUwMi9uTFhLZ0hMaWFj NEZWYVlBc2hlU0RybmhyRTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAhuM7gv+VWiZxXJg2i+i5MTcLdgA5nkyn8fHjCg9xMJ/bdpL2gy61b pLkZ/KwrtOGtIKTSS6T52JpVSxIEqVlh/BtWtlupegNiOEtO6VYYlOOmqiA9Za88 sqZLrldfHE5HZKP3ZCWpgiqpC88TItXmr7xXg5FWP67p5OMWuBNr/yieEPn+fQ3n sY671yxjh8eM11IzxlKmTfqH6LppBnhDzPxpwLMSl86jy49vOkPdg5wiaQn+e5VA 1jupDeQwOydQ0sE4YbrRmq9dEAr+1QEQcVMp5qFgYg+5o4MJJuPN51T9MSok1bKX Pl43j9tQZVNVxGUpdb8TKq+CnlrdsL9g -----END CERTIFICATE-----Generated at Sat Jun 14 19:26:30 2025 by rpki-client