$ rpki-client -vvf rpki.apnic.net/member_repository/A911BCDD/348AD8AC861311EEA8C95042C4F9AE02/nkKx9pFGDihG-nHwbcib8sdB25o.mft File: nkKx9pFGDihG-nHwbcib8sdB25o.mft (raw, json) Hash identifier: GQFE/d19BivEH0guiomHkAEir5r5CEJu5JdZ2USTkVk= Subject key identifier: 20:E2:9F:7F:00:8D:67:2D:CD:7B:75:30:A0:BD:15:C9:EC:DD:95:1B Authority key identifier: 9E:42:B1:F6:91:46:0E:28:46:FA:71:F0:6D:C8:9B:F2:C7:41:DB:9A Certificate issuer: /CN=A911BCDD/serialNumber=9E42B1F691460E2846FA71F06DC89BF2C741DB9A Certificate serial: 0123 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nkKx9pFGDihG-nHwbcib8sdB25o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911BCDD/348AD8AC861311EEA8C95042C4F9AE02/nkKx9pFGDihG-nHwbcib8sdB25o.mft Manifest number: 0120 Signing time: Sat 31 May 2025 04:22:22 +0000 Manifest this update: Sat 31 May 2025 04:22:21 +0000 Manifest next update: Sat 07 Jun 2025 04:22:21 +0000 Files and hashes: 1: nkKx9pFGDihG-nHwbcib8sdB25o.crl (hash: C7K9wIJhXzMI0uxES+pq6YK3IlbueLJ4d32u0WJapbI=) 2: 5ED417AE869011EEA9011A36C4F9AE02.roa (hash: secqQJuczQrOBoLhJh1bWX70I59NSlP/4Mk301elvvU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911BCDD/348AD8AC861311EEA8C95042C4F9AE02/nkKx9pFGDihG-nHwbcib8sdB25o.crl rsync://rpki.apnic.net/member_repository/A911BCDD/348AD8AC861311EEA8C95042C4F9AE02/nkKx9pFGDihG-nHwbcib8sdB25o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nkKx9pFGDihG-nHwbcib8sdB25o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 04:22:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 291 (0x123) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911BCDD, serialNumber=9E42B1F691460E2846FA71F06DC89BF2C741DB9A Validity Not Before: May 31 04:22:21 2025 GMT Not After : Jun 7 04:22:21 2025 GMT Subject: CN=683a83fe-06af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:0c:f4:11:e6:9d:23:4e:6f:a9:f6:1c:e2:c7: 21:b0:7a:58:ba:25:1d:e2:03:5b:79:d6:fc:41:21: 71:de:32:24:4b:43:f6:5a:72:34:f3:aa:9a:5f:4f: 87:ca:e1:26:28:ca:51:38:97:8e:26:66:2d:ae:8b: eb:c9:ac:36:98:ed:11:b3:5d:2b:f7:d4:35:10:78: 68:05:4c:91:04:f6:c7:67:70:b4:c9:b3:b6:0d:36: ab:06:6e:8e:c1:89:59:7f:00:bb:ef:38:37:83:89: 06:55:5e:6b:ab:9d:45:a6:dd:da:0a:5b:e7:2b:04: ec:50:77:f8:48:bc:05:17:38:aa:8e:38:f4:46:70: e7:be:60:29:d7:5b:ff:0b:df:b5:8d:53:40:0e:5e: 2c:fb:1a:f4:12:31:81:64:d8:8e:90:40:71:f6:d6: 01:06:7d:5c:48:27:47:8e:fe:6a:fd:73:36:5a:2b: ba:dc:0d:58:72:9b:10:04:0a:39:fb:ff:78:23:5b: 76:59:18:41:84:5d:57:ea:7b:60:9b:88:b9:38:14: 62:18:5a:a6:ec:c2:8b:ff:cd:7c:86:61:25:3d:e6: eb:ee:03:73:1e:b0:b1:86:5b:6b:b0:51:da:fa:5c: f5:34:2e:de:4c:cb:70:84:21:c0:43:8a:70:3d:dc: 3c:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:E2:9F:7F:00:8D:67:2D:CD:7B:75:30:A0:BD:15:C9:EC:DD:95:1B X509v3 Authority Key Identifier: keyid:9E:42:B1:F6:91:46:0E:28:46:FA:71:F0:6D:C8:9B:F2:C7:41:DB:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911BCDD/348AD8AC861311EEA8C95042C4F9AE02/nkKx9pFGDihG-nHwbcib8sdB25o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nkKx9pFGDihG-nHwbcib8sdB25o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911BCDD/348AD8AC861311EEA8C95042C4F9AE02/nkKx9pFGDihG-nHwbcib8sdB25o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 12:00:f7:58:6d:ad:db:cc:36:b0:53:e7:55:38:ef:03:4c:3f: 5e:32:da:a8:c8:82:b3:0c:a2:5f:19:bf:4f:f3:76:d6:88:a8: 52:4d:62:f1:4f:38:e4:a7:c3:12:89:48:c7:60:e0:85:90:af: b8:6e:aa:7d:75:3d:63:02:20:3a:42:42:d9:b6:a5:1d:11:a6: 84:70:7a:7d:58:2a:a2:bf:9c:97:a0:44:14:18:e3:2b:a2:57: 5e:9d:11:f6:dd:3d:fd:7b:a1:01:90:b7:b0:10:e7:55:23:2a: 8c:7a:18:9c:3c:cf:19:69:1e:8d:5c:91:eb:a3:37:8a:17:37: 0a:c2:34:75:e0:e7:99:7a:c4:ba:ab:c6:f0:42:d5:1b:3b:94: b9:29:70:08:bb:a4:42:ed:49:e2:60:47:4c:52:82:d9:e0:10: 96:41:67:ae:61:35:fe:e0:5c:b3:43:18:38:43:33:95:16:83: 07:e9:c7:5d:d3:d1:1a:a2:2d:26:ce:ca:25:01:9e:86:1c:bc: 66:52:98:22:d0:d4:d9:76:9c:d7:b2:5c:86:94:11:32:75:fb: 97:da:00:3f:c4:73:fc:dc:bb:89:ba:76:6d:2a:56:8c:2c:06: 8c:0c:fa:b4:a0:cf:3f:d8:ae:75:46:52:77:5e:b8:6f:53:3b: aa:5e:01:4a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUJDREQxMTAvBgNVBAUTKDlFNDJCMUY2OTE0NjBFMjg0NkZBNzFGMDZEQzg5QkYy Qzc0MURCOUEwHhcNMjUwNTMxMDQyMjIxWhcNMjUwNjA3MDQyMjIxWjAYMRYwFAYD VQQDEw02ODNhODNmZS0wNmFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0Az0EeadI05vqfYc4schsHpYuiUd4gNbedb8QSFx3jIkS0P2WnI086qaX0+H yuEmKMpROJeOJmYtrovryaw2mO0Rs10r99Q1EHhoBUyRBPbHZ3C0ybO2DTarBm6O wYlZfwC77zg3g4kGVV5rq51Fpt3aClvnKwTsUHf4SLwFFziqjjj0RnDnvmAp11v/ C9+1jVNADl4s+xr0EjGBZNiOkEBx9tYBBn1cSCdHjv5q/XM2Wiu63A1YcpsQBAo5 +/94I1t2WRhBhF1X6ntgm4i5OBRiGFqm7MKL/818hmElPebr7gNzHrCxhltrsFHa +lz1NC7eTMtwhCHAQ4pwPdw89wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCDin38A jWctzXt1MKC9Fcns3ZUbMB8GA1UdIwQYMBaAFJ5CsfaRRg4oRvpx8G3Im/LHQdua MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQkNERC8zNDhBRDhBQzg2 MTMxMUVFQThDOTUwNDJDNEY5QUUwMi9ua0t4OXBGR0RpaEctbkh3YmNpYjhzZEIy NW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25rS3g5cEZHRGloRy1uSHdiY2liOHNkQjI1by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QkNERC8zNDhBRDhBQzg2MTMxMUVFQThDOTUwNDJDNEY5QUUwMi9ua0t4OXBGR0Rp aEctbkh3YmNpYjhzZEIyNW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQASAPdYba3bzDawU+dVOO8DTD9eMtqoyIKzDKJfGb9P83bWiKhSTWLx Tzjkp8MSiUjHYOCFkK+4bqp9dT1jAiA6QkLZtqUdEaaEcHp9WCqiv5yXoEQUGOMr oldenRH23T39e6EBkLewEOdVIyqMehicPM8ZaR6NXJHrozeKFzcKwjR14OeZesS6 q8bwQtUbO5S5KXAIu6RC7UniYEdMUoLZ4BCWQWeuYTX+4FyzQxg4QzOVFoMH6cdd 09Eaoi0mzsolAZ6GHLxmUpgi0NTZdpzXslyGlBEydfuX2gA/xHP83LuJunZtKlaM LAaMDPq0oM8/2K51RlJ3XrhvUzuqXgFK -----END CERTIFICATE-----Generated at Sat May 31 16:38:08 2025 by rpki-client