$ rpki-client -vvf rpki.apnic.net/member_repository/A9113BE5/611C512CF0F311EC84B29C80C4F9AE02/NkbrHzcLfmPR823rNsJHbJbmuug.mft File: NkbrHzcLfmPR823rNsJHbJbmuug.mft (raw, json) Hash identifier: v8JIWMqwQxgy/jqOS6yFFNUMIWrMWFu6kDl7//8pows= Subject key identifier: 15:8C:DC:13:C0:50:C3:C0:CF:A7:50:2E:FF:4F:0A:D4:7E:43:0C:AF Authority key identifier: 36:46:EB:1F:37:0B:7E:63:D1:F3:6D:EB:36:C2:47:6C:96:E6:BA:E8 Certificate issuer: /CN=A9113BE5/serialNumber=3646EB1F370B7E63D1F36DEB36C2476C96E6BAE8 Certificate serial: 02D0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NkbrHzcLfmPR823rNsJHbJbmuug.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9113BE5/611C512CF0F311EC84B29C80C4F9AE02/NkbrHzcLfmPR823rNsJHbJbmuug.mft Manifest number: 02C6 Signing time: Sat 31 May 2025 01:36:32 +0000 Manifest this update: Sat 31 May 2025 01:36:32 +0000 Manifest next update: Sat 07 Jun 2025 01:36:32 +0000 Files and hashes: 1: NkbrHzcLfmPR823rNsJHbJbmuug.crl (hash: RrCUMtPsSQKzYlmMAzPuWd+f+iGrq6K+sv3hntC0lyU=) 2: 627A6758DF2A11EEBC440C5EC4F9AE02.roa (hash: Pd8L7s4R6wRwdLV9+7BZMCdFVQ0DCoXNeo8OuEc6g0M=) 3: F3B00CD2666C11EEB1B4711CC4F9AE02.roa (hash: R6LgYLeeG431V+MNRMFG0A1SQaUDq0hWnr4R0asmc6k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9113BE5/611C512CF0F311EC84B29C80C4F9AE02/NkbrHzcLfmPR823rNsJHbJbmuug.crl rsync://rpki.apnic.net/member_repository/A9113BE5/611C512CF0F311EC84B29C80C4F9AE02/NkbrHzcLfmPR823rNsJHbJbmuug.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NkbrHzcLfmPR823rNsJHbJbmuug.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 01:36:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 720 (0x2d0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9113BE5, serialNumber=3646EB1F370B7E63D1F36DEB36C2476C96E6BAE8 Validity Not Before: May 31 01:36:32 2025 GMT Not After : Jun 7 01:36:32 2025 GMT Subject: CN=683a5d20-6f71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:f8:a5:af:58:ef:f9:74:32:a8:8e:ee:76:74: 9e:aa:00:e8:cd:06:ff:71:fa:a3:ad:a3:13:0e:eb: 54:cb:0a:cd:69:2b:0f:f1:45:aa:a0:40:fb:8d:dc: af:83:6d:c8:39:5c:02:28:d5:c2:58:71:d8:f7:21: 83:fd:0d:33:0a:54:af:b0:25:f4:57:08:ea:69:0c: 73:a1:52:28:14:51:f5:61:97:4b:10:01:91:40:e8: 4c:d9:59:51:29:ee:a4:30:83:20:b4:ed:e7:c5:de: 93:c6:b3:80:87:d7:ba:14:20:24:fc:89:a3:12:9d: 36:3e:07:4c:91:cf:a3:bb:ba:9e:5d:07:0f:78:11: 60:58:aa:b9:5b:b4:16:f6:03:e4:3c:3a:33:d2:82: c7:be:6b:28:0e:16:91:fc:31:0b:37:4a:7e:03:fb: 31:80:79:9b:f8:f4:f6:0c:64:8d:ab:34:a1:2e:d3: 06:fc:60:a0:f5:74:16:e3:88:b6:76:fc:a6:12:60: 2d:83:fb:7c:4a:82:df:ee:68:be:cc:60:68:82:c7: 41:c8:c2:5f:2b:3c:eb:16:d8:a7:1f:78:0b:e3:fe: 4b:9b:60:cf:3d:3f:67:b1:9b:f4:2e:f4:88:ce:70: ab:da:22:f4:87:b6:0a:dd:38:a5:9c:8d:54:fa:94: 15:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:8C:DC:13:C0:50:C3:C0:CF:A7:50:2E:FF:4F:0A:D4:7E:43:0C:AF X509v3 Authority Key Identifier: keyid:36:46:EB:1F:37:0B:7E:63:D1:F3:6D:EB:36:C2:47:6C:96:E6:BA:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9113BE5/611C512CF0F311EC84B29C80C4F9AE02/NkbrHzcLfmPR823rNsJHbJbmuug.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NkbrHzcLfmPR823rNsJHbJbmuug.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9113BE5/611C512CF0F311EC84B29C80C4F9AE02/NkbrHzcLfmPR823rNsJHbJbmuug.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9d:db:7c:42:9f:7d:21:80:2d:c3:14:42:30:bf:43:ab:fe:de: c8:c2:e9:67:81:77:f3:e8:cf:87:53:f5:8d:bc:2e:20:53:b4: 3a:67:38:59:eb:99:94:cd:c2:c1:6c:90:ed:04:36:cb:5f:45: c3:43:4d:e8:ed:7e:69:e0:a8:0b:a6:0c:58:79:3a:bb:36:38: a8:45:29:d4:9c:13:e2:a6:97:57:bf:95:57:d1:2d:61:ea:a3: 66:37:c8:8a:da:d2:f1:17:9d:24:6d:3b:55:4a:fb:7a:ed:09: bc:66:37:04:1d:29:e0:0e:1d:ab:08:61:7e:f2:3c:20:c6:85: f4:22:49:34:68:c9:f5:cc:da:db:a8:09:09:97:9d:66:8b:40: 6e:72:b9:74:00:20:2b:61:7b:d4:cc:7f:b8:a5:92:1b:e1:2c: 91:1b:37:46:4c:86:78:1d:39:a7:51:10:a9:62:d8:fb:4d:a9: 19:2e:68:25:36:2b:5c:c2:ff:62:a7:ea:44:8c:6d:94:78:b6: 3a:9f:27:ae:7c:41:fb:6b:d3:59:e3:1c:91:ae:ab:70:d1:d8: 47:81:5f:2f:c4:bd:7e:03:93:11:10:bd:b0:44:df:96:57:af: 7e:66:2a:1a:9c:92:d2:a4:94:b5:d4:0d:a9:10:2b:95:5b:73: f4:dd:bb:91 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAtAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTNCRTUxMTAvBgNVBAUTKDM2NDZFQjFGMzcwQjdFNjNEMUYzNkRFQjM2QzI0NzZD OTZFNkJBRTgwHhcNMjUwNTMxMDEzNjMyWhcNMjUwNjA3MDEzNjMyWjAYMRYwFAYD VQQDEw02ODNhNWQyMC02ZjcxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArvilr1jv+XQyqI7udnSeqgDozQb/cfqjraMTDutUywrNaSsP8UWqoED7jdyv g23IOVwCKNXCWHHY9yGD/Q0zClSvsCX0VwjqaQxzoVIoFFH1YZdLEAGRQOhM2VlR Ke6kMIMgtO3nxd6TxrOAh9e6FCAk/ImjEp02PgdMkc+ju7qeXQcPeBFgWKq5W7QW 9gPkPDoz0oLHvmsoDhaR/DELN0p+A/sxgHmb+PT2DGSNqzShLtMG/GCg9XQW44i2 dvymEmAtg/t8SoLf7mi+zGBogsdByMJfKzzrFtinH3gL4/5Lm2DPPT9nsZv0LvSI znCr2iL0h7YK3TilnI1U+pQV4wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBWM3BPA UMPAz6dQLv9PCtR+QwyvMB8GA1UdIwQYMBaAFDZG6x83C35j0fNt6zbCR2yW5rro MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExM0JFNS82MTFDNTEyQ0Yw RjMxMUVDODRCMjlDODBDNEY5QUUwMi9Oa2JySHpjTGZtUFI4MjNyTnNKSGJKYm11 dWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05rYnJIemNMZm1QUjgyM3JOc0pIYkpibXV1Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx M0JFNS82MTFDNTEyQ0YwRjMxMUVDODRCMjlDODBDNEY5QUUwMi9Oa2JySHpjTGZt UFI4MjNyTnNKSGJKYm11dWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCd23xCn30hgC3DFEIwv0Or/t7IwulngXfz6M+HU/WNvC4gU7Q6ZzhZ 65mUzcLBbJDtBDbLX0XDQ03o7X5p4KgLpgxYeTq7NjioRSnUnBPippdXv5VX0S1h 6qNmN8iK2tLxF50kbTtVSvt67Qm8ZjcEHSngDh2rCGF+8jwgxoX0Ikk0aMn1zNrb qAkJl51mi0Bucrl0ACArYXvUzH+4pZIb4SyRGzdGTIZ4HTmnURCpYtj7TakZLmgl Nitcwv9ip+pEjG2UeLY6nyeufEH7a9NZ4xyRrqtw0dhHgV8vxL1+A5MREL2wRN+W V69+ZioanJLSpJS11A2pECuVW3P03buR -----END CERTIFICATE-----Generated at Sat May 31 16:40:38 2025 by rpki-client