$ rpki-client -vvf rpki.apnic.net/member_repository/A91113E7/9D3A20002F5611EFA23E5A23C4F9AE02/nWx1DOA5PCAKv4pnHB8sIGoMtHE.mft File: nWx1DOA5PCAKv4pnHB8sIGoMtHE.mft (raw, json) Hash identifier: 4wfDd3H8pLby+Z4PEp0Cgm0xatbT7ncpVEbzkkVN5/4= Subject key identifier: C3:48:26:8D:5D:38:33:90:22:04:12:A8:12:BB:7E:B8:BD:2A:10:5F Authority key identifier: 9D:6C:75:0C:E0:39:3C:20:0A:BF:8A:67:1C:1F:2C:20:6A:0C:B4:71 Certificate issuer: /CN=A91113E7/serialNumber=9D6C750CE0393C200ABF8A671C1F2C206A0CB471 Certificate serial: B3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nWx1DOA5PCAKv4pnHB8sIGoMtHE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91113E7/9D3A20002F5611EFA23E5A23C4F9AE02/nWx1DOA5PCAKv4pnHB8sIGoMtHE.mft Manifest number: B1 Signing time: Sat 31 May 2025 05:35:15 +0000 Manifest this update: Sat 31 May 2025 05:35:14 +0000 Manifest next update: Sat 07 Jun 2025 05:35:14 +0000 Files and hashes: 1: nWx1DOA5PCAKv4pnHB8sIGoMtHE.crl (hash: yqdP4NrZbj5dhDjilO4gLOaJi/Q+IX/C0IsJN7nfo48=) 2: 6375B8642F5811EF93FCF427C4F9AE02.roa (hash: C3woTmy4KRh8oZfuokqoz+ySn5YpmljqQzslPnXWG7g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91113E7/9D3A20002F5611EFA23E5A23C4F9AE02/nWx1DOA5PCAKv4pnHB8sIGoMtHE.crl rsync://rpki.apnic.net/member_repository/A91113E7/9D3A20002F5611EFA23E5A23C4F9AE02/nWx1DOA5PCAKv4pnHB8sIGoMtHE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nWx1DOA5PCAKv4pnHB8sIGoMtHE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 05:35:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 179 (0xb3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91113E7, serialNumber=9D6C750CE0393C200ABF8A671C1F2C206A0CB471 Validity Not Before: May 31 05:35:14 2025 GMT Not After : Jun 7 05:35:14 2025 GMT Subject: CN=683a9513-3a52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:06:17:69:27:e7:5e:38:c4:f3:39:00:a7:9b: f0:b5:b9:dd:71:34:35:43:3d:4c:51:a6:7d:82:70: 2e:30:b4:27:7c:84:65:bc:f4:2e:6f:ee:ca:e6:86: 23:1f:5c:29:6a:90:d1:16:e9:9a:5f:0f:c8:32:64: 2e:de:cd:9e:90:bc:a4:c5:99:93:f4:b3:c9:da:95: 3e:94:32:b1:1b:75:a5:a3:46:75:f6:eb:a3:c4:22: 8f:7b:01:a5:85:ba:fe:8f:47:3c:be:1d:f9:79:14: 2f:62:a5:07:4b:a1:f2:b1:dd:b6:20:a4:44:fb:d7: 9a:dc:2d:80:92:c4:ad:47:fe:d1:74:80:13:9a:de: bd:72:69:a2:36:a6:38:50:4e:e6:8b:00:2b:16:48: 39:7d:3c:c1:f8:3f:c9:5a:93:11:d3:28:93:f6:b7: 2c:a9:4c:0b:35:bb:40:5c:03:40:20:06:cc:d2:bb: f3:4c:5e:73:07:2f:fd:10:56:97:43:12:69:a7:3c: a2:77:c6:d8:1c:c4:e7:83:e8:04:cd:0c:66:a8:a5: 81:63:c1:03:73:42:34:37:4c:69:d0:95:0d:84:b0: a8:ce:08:a4:4a:21:20:d5:19:fa:37:ad:ac:0e:f5: 23:0c:6f:80:36:0c:0c:02:01:e0:59:b7:45:f5:5a: 7e:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:48:26:8D:5D:38:33:90:22:04:12:A8:12:BB:7E:B8:BD:2A:10:5F X509v3 Authority Key Identifier: keyid:9D:6C:75:0C:E0:39:3C:20:0A:BF:8A:67:1C:1F:2C:20:6A:0C:B4:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91113E7/9D3A20002F5611EFA23E5A23C4F9AE02/nWx1DOA5PCAKv4pnHB8sIGoMtHE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nWx1DOA5PCAKv4pnHB8sIGoMtHE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91113E7/9D3A20002F5611EFA23E5A23C4F9AE02/nWx1DOA5PCAKv4pnHB8sIGoMtHE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 83:f8:84:d8:5d:0c:cb:ed:91:dc:c1:2a:d2:42:8b:81:76:24: 83:5c:c9:4d:91:d3:57:0a:07:5e:ec:e9:df:ff:a2:cb:6e:ce: 82:b3:70:59:5e:37:93:22:fc:53:f8:c9:da:0d:85:98:77:7e: cc:a3:ec:46:ca:24:06:41:9a:02:7b:fb:da:93:75:55:0a:cc: 43:36:27:f0:ae:26:04:77:98:9a:76:7c:7a:75:d8:59:7c:1a: ab:59:10:4c:35:2e:6d:bb:17:b7:0e:6d:4e:bb:41:bc:95:c9: 01:7e:9b:1d:77:00:b9:47:9e:25:f1:44:65:68:df:c8:98:91: c0:d2:b1:b3:7c:32:5f:7b:d4:9a:31:62:84:c3:8d:d9:82:79: 2a:12:39:0a:9b:41:9b:81:00:bc:d2:8e:52:6a:75:42:e1:d8: 32:98:f9:a2:f9:c2:96:a1:df:ba:76:2c:52:2f:8f:3e:7c:59: 17:bf:e0:0f:f5:88:ed:ed:3c:06:88:1c:cf:90:81:c9:d0:29: c8:ae:12:4d:73:e0:c3:90:fe:1e:04:bf:9b:83:a4:ca:2b:60: 0c:0f:a0:26:14:ba:cd:0c:08:9b:7a:74:00:3e:5a:9f:0e:28: f6:9b:5c:fc:3c:68:44:64:d4:08:b2:e6:a8:3f:dc:08:cd:de: 7a:d0:17:35 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTEzRTcxMTAvBgNVBAUTKDlENkM3NTBDRTAzOTNDMjAwQUJGOEE2NzFDMUYyQzIw NkEwQ0I0NzEwHhcNMjUwNTMxMDUzNTE0WhcNMjUwNjA3MDUzNTE0WjAYMRYwFAYD VQQDEw02ODNhOTUxMy0zYTUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAywYXaSfnXjjE8zkAp5vwtbndcTQ1Qz1MUaZ9gnAuMLQnfIRlvPQub+7K5oYj H1wpapDRFumaXw/IMmQu3s2ekLykxZmT9LPJ2pU+lDKxG3Wlo0Z19uujxCKPewGl hbr+j0c8vh35eRQvYqUHS6Hysd22IKRE+9ea3C2AksStR/7RdIATmt69cmmiNqY4 UE7miwArFkg5fTzB+D/JWpMR0yiT9rcsqUwLNbtAXANAIAbM0rvzTF5zBy/9EFaX QxJppzyid8bYHMTng+gEzQxmqKWBY8EDc0I0N0xp0JUNhLCozgikSiEg1Rn6N62s DvUjDG+ANgwMAgHgWbdF9Vp+9wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMNIJo1d ODOQIgQSqBK7fri9KhBfMB8GA1UdIwQYMBaAFJ1sdQzgOTwgCr+KZxwfLCBqDLRx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMTNFNy85RDNBMjAwMDJG NTYxMUVGQTIzRTVBMjNDNEY5QUUwMi9uV3gxRE9BNVBDQUt2NHBuSEI4c0lHb010 SEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25XeDFET0E1UENBS3Y0cG5IQjhzSUdvTXRIRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MTNFNy85RDNBMjAwMDJGNTYxMUVGQTIzRTVBMjNDNEY5QUUwMi9uV3gxRE9BNVBD QUt2NHBuSEI4c0lHb010SEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCD+ITYXQzL7ZHcwSrSQouBdiSDXMlNkdNXCgde7Onf/6LLbs6Cs3BZ XjeTIvxT+MnaDYWYd37Mo+xGyiQGQZoCe/vak3VVCsxDNifwriYEd5iadnx6ddhZ fBqrWRBMNS5tuxe3Dm1Ou0G8lckBfpsddwC5R54l8URlaN/ImJHA0rGzfDJfe9Sa MWKEw43ZgnkqEjkKm0GbgQC80o5SanVC4dgymPmi+cKWod+6dixSL48+fFkXv+AP 9Yjt7TwGiBzPkIHJ0CnIrhJNc+DDkP4eBL+bg6TKK2AMD6AmFLrNDAibenQAPlqf Dij2m1z8PGhEZNQIsuaoP9wIzd560Bc1 -----END CERTIFICATE-----Generated at Sat May 31 16:33:07 2025 by rpki-client