$ rpki-client -vvf rpki.apnic.net/member_repository/A91F9749/99D17D96BF9B11ECAD3C0A30C4F9AE02/NebIf2uhtlE6EnD23BNt23ETZFc.mft File: NebIf2uhtlE6EnD23BNt23ETZFc.mft (raw, json) Hash identifier: uV+T5ECcVlWJe1B1BmkB4nwSdyDlv4CaunB5okHYSsY= Subject key identifier: 5D:01:25:3F:9C:BD:77:6F:3C:34:1D:3E:5E:7C:70:ED:B7:38:51:D1 Authority key identifier: 35:E6:C8:7F:6B:A1:B6:51:3A:12:70:F6:DC:13:6D:DB:71:13:64:57 Certificate issuer: /CN=A91F9749/serialNumber=35E6C87F6BA1B6513A1270F6DC136DDB71136457 Certificate serial: 0347 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NebIf2uhtlE6EnD23BNt23ETZFc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F9749/99D17D96BF9B11ECAD3C0A30C4F9AE02/NebIf2uhtlE6EnD23BNt23ETZFc.mft Manifest number: 0343 Signing time: Fri 13 Jun 2025 00:33:44 +0000 Manifest this update: Fri 13 Jun 2025 00:33:44 +0000 Manifest next update: Fri 20 Jun 2025 00:33:44 +0000 Files and hashes: 1: NebIf2uhtlE6EnD23BNt23ETZFc.crl (hash: quQZ9QfJ33ybOddJhtQKtx5ctYHJF26b/O+R3XydHfU=) 2: 97B81DD6BF9F11ECAB5B1239C4F9AE02.roa (hash: WBPEzwrRJmEQao59jsv0p03EV57EGiVD2LS1uQaSE9s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F9749/99D17D96BF9B11ECAD3C0A30C4F9AE02/NebIf2uhtlE6EnD23BNt23ETZFc.crl rsync://rpki.apnic.net/member_repository/A91F9749/99D17D96BF9B11ECAD3C0A30C4F9AE02/NebIf2uhtlE6EnD23BNt23ETZFc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NebIf2uhtlE6EnD23BNt23ETZFc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 00:33:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 839 (0x347) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F9749, serialNumber=35E6C87F6BA1B6513A1270F6DC136DDB71136457 Validity Not Before: Jun 13 00:33:44 2025 GMT Not After : Jun 20 00:33:44 2025 GMT Subject: CN=684b71e8-f12c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:ea:30:68:4f:0b:f4:d2:b2:4e:c7:6f:05:3d: 0b:74:e2:52:63:0d:2c:43:58:ea:ba:c4:f7:4b:40: c7:44:a5:84:5f:4c:57:d5:8d:2b:27:96:d4:2d:df: b6:7c:bf:70:8b:b6:da:14:23:1d:24:ac:c9:89:f4: 8b:6b:8c:24:85:3b:0b:17:b2:a2:31:3c:0e:b2:2b: 25:4f:86:cb:aa:79:96:9b:a6:d0:80:ea:cb:e3:d9: 95:4a:fc:58:f0:1d:7d:b3:71:dc:ac:c6:58:be:44: 06:9f:37:85:7a:da:93:d8:3a:0c:29:82:11:75:6f: 3d:27:2e:b5:db:80:9f:9f:65:99:4c:30:55:8c:18: c7:49:98:d1:2a:00:c5:1e:15:cf:1d:90:46:ae:72: bf:c2:65:b5:5f:99:1e:ec:47:cc:7a:26:76:96:2e: c9:23:e8:2f:9c:4a:b7:ed:af:36:c2:1c:2a:e7:39: e1:5f:31:cc:bd:a1:44:15:12:8f:cd:c7:a0:bf:a4: ce:cd:eb:fc:96:b5:c0:dc:6f:84:f8:1d:19:a5:4d: 8d:4e:8a:e4:43:30:bc:0f:80:72:77:64:3f:ff:cc: 66:53:40:ae:5d:26:be:31:4a:c8:04:41:c9:9e:14: c3:76:7f:7c:90:e3:d1:b6:cc:a2:53:ad:41:52:6b: 32:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:01:25:3F:9C:BD:77:6F:3C:34:1D:3E:5E:7C:70:ED:B7:38:51:D1 X509v3 Authority Key Identifier: keyid:35:E6:C8:7F:6B:A1:B6:51:3A:12:70:F6:DC:13:6D:DB:71:13:64:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F9749/99D17D96BF9B11ECAD3C0A30C4F9AE02/NebIf2uhtlE6EnD23BNt23ETZFc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NebIf2uhtlE6EnD23BNt23ETZFc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F9749/99D17D96BF9B11ECAD3C0A30C4F9AE02/NebIf2uhtlE6EnD23BNt23ETZFc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 09:70:72:c2:44:4c:2c:ae:63:15:69:6e:2d:40:78:68:a8:6e: 3e:18:20:63:65:ec:09:e2:1b:e1:09:b4:9d:3d:25:b2:92:3f: 42:29:c0:d2:f6:6b:1f:9d:4e:70:99:ea:08:78:90:4c:26:98: b3:b3:88:1a:ba:04:a3:d8:8d:cf:57:b9:e4:04:48:3b:0b:22: 8b:6a:4d:6f:03:0c:b0:e8:37:e6:75:4a:81:66:8f:00:a5:0f: 0b:0d:0a:9d:03:c1:5b:dc:27:54:bb:4f:df:95:b0:8f:79:f3: d3:f5:ea:19:50:59:e9:b7:73:32:66:08:3d:78:0a:6f:ca:ca: d0:aa:3e:fc:ae:48:15:33:77:90:09:9c:97:80:e8:60:c5:b4: af:0b:1e:1d:70:35:cf:c3:fe:c4:b4:f6:36:53:73:fd:b6:4b: 58:a2:0c:6c:85:48:e8:a4:10:cd:2a:4d:b5:04:31:8a:e9:44: b5:14:eb:e9:fd:8d:e3:cf:be:93:1c:9a:4e:b2:c2:cf:5b:d4: 3b:4f:cd:c5:ed:4d:f7:63:2a:0f:8c:61:91:db:78:15:f8:f5: 63:2e:e2:6b:53:88:9a:24:7d:1c:79:fd:5f:4d:5f:25:77:bb: 00:be:30:d7:f4:63:30:b6:aa:98:06:b3:24:c3:32:68:d1:0d: df:68:ec:e7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA0cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Rjk3NDkxMTAvBgNVBAUTKDM1RTZDODdGNkJBMUI2NTEzQTEyNzBGNkRDMTM2RERC NzExMzY0NTcwHhcNMjUwNjEzMDAzMzQ0WhcNMjUwNjIwMDAzMzQ0WjAYMRYwFAYD VQQDEw02ODRiNzFlOC1mMTJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx+owaE8L9NKyTsdvBT0LdOJSYw0sQ1jqusT3S0DHRKWEX0xX1Y0rJ5bULd+2 fL9wi7baFCMdJKzJifSLa4wkhTsLF7KiMTwOsislT4bLqnmWm6bQgOrL49mVSvxY 8B19s3HcrMZYvkQGnzeFetqT2DoMKYIRdW89Jy6124Cfn2WZTDBVjBjHSZjRKgDF HhXPHZBGrnK/wmW1X5ke7EfMeiZ2li7JI+gvnEq37a82whwq5znhXzHMvaFEFRKP zcegv6TOzev8lrXA3G+E+B0ZpU2NTorkQzC8D4Byd2Q//8xmU0CuXSa+MUrIBEHJ nhTDdn98kOPRtsyiU61BUmsyPwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF0BJT+c vXdvPDQdPl58cO23OFHRMB8GA1UdIwQYMBaAFDXmyH9robZROhJw9twTbdtxE2RX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGOTc0OS85OUQxN0Q5NkJG OUIxMUVDQUQzQzBBMzBDNEY5QUUwMi9OZWJJZjJ1aHRsRTZFbkQyM0JOdDIzRVRa RmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05lYklmMnVodGxFNkVuRDIzQk50MjNFVFpGYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG OTc0OS85OUQxN0Q5NkJGOUIxMUVDQUQzQzBBMzBDNEY5QUUwMi9OZWJJZjJ1aHRs RTZFbkQyM0JOdDIzRVRaRmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAJcHLCREwsrmMVaW4tQHhoqG4+GCBjZewJ4hvhCbSdPSWykj9CKcDS 9msfnU5wmeoIeJBMJpizs4gaugSj2I3PV7nkBEg7CyKLak1vAwyw6DfmdUqBZo8A pQ8LDQqdA8Fb3CdUu0/flbCPefPT9eoZUFnpt3MyZgg9eApvysrQqj78rkgVM3eQ CZyXgOhgxbSvCx4dcDXPw/7EtPY2U3P9tktYogxshUjopBDNKk21BDGK6US1FOvp /Y3jz76THJpOssLPW9Q7T83F7U33YyoPjGGR23gV+PVjLuJrU4iaJH0cef1fTV8l d7sAvjDX9GMwtqqYBrMkwzJo0Q3faOzn -----END CERTIFICATE-----Generated at Sat Jun 14 18:51:05 2025 by rpki-client