$ rpki-client -vvf rpki.apnic.net/member_repository/A9133F6B/9852933E74A611EFAB4B053CC4F9AE02/NNe9YUOWrkRRcOBY4K7c661JQF8.mft File: NNe9YUOWrkRRcOBY4K7c661JQF8.mft (raw, json) Hash identifier: gWz9YUEZYnIN9iVEfhUQiLVyxDebfG7OAjbRrpg7qoQ= Subject key identifier: 9F:69:D9:E2:25:5D:7F:6B:23:A5:5E:89:AA:B7:AE:E8:D7:85:6A:4C Authority key identifier: 34:D7:BD:61:43:96:AE:44:51:70:E0:58:E0:AE:DC:EB:AD:49:40:5F Certificate issuer: /CN=A9133F6B/serialNumber=34D7BD614396AE445170E058E0AEDCEBAD49405F Certificate serial: 88 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NNe9YUOWrkRRcOBY4K7c661JQF8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9133F6B/9852933E74A611EFAB4B053CC4F9AE02/NNe9YUOWrkRRcOBY4K7c661JQF8.mft Manifest number: 86 Signing time: Sat 31 May 2025 06:09:45 +0000 Manifest this update: Sat 31 May 2025 06:09:44 +0000 Manifest next update: Sat 07 Jun 2025 06:09:44 +0000 Files and hashes: 1: NNe9YUOWrkRRcOBY4K7c661JQF8.crl (hash: mitfbjRFlozlfa55OLcDLa7D6k6OoVllrEc8gTxi5A8=) 2: CDB922F074AF11EFA0B26646C4F9AE02.roa (hash: Z9wgm3vGJOLLYnMtYAwUdfFZW4JgmPyeFWsMY0AhztU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9133F6B/9852933E74A611EFAB4B053CC4F9AE02/NNe9YUOWrkRRcOBY4K7c661JQF8.crl rsync://rpki.apnic.net/member_repository/A9133F6B/9852933E74A611EFAB4B053CC4F9AE02/NNe9YUOWrkRRcOBY4K7c661JQF8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NNe9YUOWrkRRcOBY4K7c661JQF8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 06:09:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 136 (0x88) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9133F6B, serialNumber=34D7BD614396AE445170E058E0AEDCEBAD49405F Validity Not Before: May 31 06:09:44 2025 GMT Not After : Jun 7 06:09:44 2025 GMT Subject: CN=683a9d29-a7d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:b1:fb:e9:dc:93:2b:39:e7:62:2d:4e:8f:c4: da:73:3d:97:2c:a5:ad:13:96:60:86:00:15:17:c4: a1:39:61:eb:19:65:3f:f9:27:7a:87:e5:b3:d8:99: f2:bc:93:b5:9b:8e:ee:25:d6:d3:6d:c4:a3:6d:77: 4d:2d:5b:7b:80:45:da:b2:77:51:8c:31:69:3d:82: 25:d1:0e:7f:60:91:74:5e:5f:df:50:08:92:b8:30: 7c:1f:26:d8:b3:4a:09:ae:81:f3:51:9e:48:13:00: ec:25:86:9e:d6:97:81:90:3e:d5:7a:31:7c:27:11: d2:f3:d5:2c:54:21:77:ac:96:bc:64:65:e7:01:b9: f0:c4:9f:68:bc:fa:13:54:6b:1e:a3:8a:65:05:f7: f0:24:f1:bf:4d:d3:4a:fc:07:51:0f:bd:98:28:9f: ee:8a:7a:5f:b9:31:61:b2:78:9e:26:16:6c:86:b3: e4:b4:f1:14:79:fb:24:63:38:d3:6a:c3:e8:54:c4: b9:df:d0:2a:78:19:3c:c9:a5:7c:f1:1d:9c:28:28: e2:4b:d7:89:0c:b1:e8:52:8b:24:cd:1c:02:61:d2: 26:83:3d:59:00:31:a4:d8:66:5f:cc:41:bd:9b:14: ed:eb:e5:25:fd:0e:a9:d6:4e:40:86:2b:16:25:66: 26:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:69:D9:E2:25:5D:7F:6B:23:A5:5E:89:AA:B7:AE:E8:D7:85:6A:4C X509v3 Authority Key Identifier: keyid:34:D7:BD:61:43:96:AE:44:51:70:E0:58:E0:AE:DC:EB:AD:49:40:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9133F6B/9852933E74A611EFAB4B053CC4F9AE02/NNe9YUOWrkRRcOBY4K7c661JQF8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NNe9YUOWrkRRcOBY4K7c661JQF8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9133F6B/9852933E74A611EFAB4B053CC4F9AE02/NNe9YUOWrkRRcOBY4K7c661JQF8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 54:c5:aa:27:f9:54:ba:3f:58:9b:48:9c:ce:15:e3:3b:47:23: da:9a:44:6c:21:5b:ba:5b:4a:53:97:c6:d9:86:cb:ae:2a:3c: 2a:45:e7:44:78:05:d6:56:c5:56:78:67:14:27:fe:a3:6f:f0: f7:6c:25:59:ff:3d:2c:e7:97:f1:8e:16:4b:a4:02:c4:1f:20: de:ed:62:1b:f2:d6:b9:ba:1f:33:b7:75:4e:eb:4b:38:78:d2: ca:70:14:d9:99:93:b5:74:71:00:29:72:db:cb:dd:ff:da:4b: 73:5b:74:d0:db:8e:b2:0b:89:50:f9:b9:50:1b:d9:3a:c7:e6: 27:35:48:dc:3c:a6:42:de:ca:cc:be:1a:43:6a:9d:57:e3:c6: 47:09:f4:4a:6e:74:1e:a7:52:91:4f:84:09:42:06:9d:53:8d: ff:0e:24:19:1b:32:8e:61:c0:f2:04:db:f0:5c:28:a0:c3:b4: 07:43:d6:55:0a:09:6b:92:e5:8b:fc:45:8e:a1:3f:d7:b8:63: 82:78:82:99:74:95:ad:77:7c:8c:d4:50:74:ef:dc:d0:ee:c3: 59:40:ff:5d:c1:e5:d3:99:77:cd:6d:94:9a:06:cf:0a:64:6b: ff:20:1b:fa:d6:57:dc:0b:05:8b:66:6a:6b:d7:45:a1:6b:55: 4f:4a:a9:75 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzNGNkIxMTAvBgNVBAUTKDM0RDdCRDYxNDM5NkFFNDQ1MTcwRTA1OEUwQUVEQ0VC QUQ0OTQwNUYwHhcNMjUwNTMxMDYwOTQ0WhcNMjUwNjA3MDYwOTQ0WjAYMRYwFAYD VQQDEw02ODNhOWQyOS1hN2Q1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7LH76dyTKznnYi1Oj8Tacz2XLKWtE5ZghgAVF8ShOWHrGWU/+Sd6h+Wz2Jny vJO1m47uJdbTbcSjbXdNLVt7gEXasndRjDFpPYIl0Q5/YJF0Xl/fUAiSuDB8HybY s0oJroHzUZ5IEwDsJYae1peBkD7VejF8JxHS89UsVCF3rJa8ZGXnAbnwxJ9ovPoT VGseo4plBffwJPG/TdNK/AdRD72YKJ/uinpfuTFhsnieJhZshrPktPEUefskYzjT asPoVMS539AqeBk8yaV88R2cKCjiS9eJDLHoUoskzRwCYdImgz1ZADGk2GZfzEG9 mxTt6+Ul/Q6p1k5AhisWJWYmhwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ9p2eIl XX9rI6Veiaq3rujXhWpMMB8GA1UdIwQYMBaAFDTXvWFDlq5EUXDgWOCu3OutSUBf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzM0Y2Qi85ODUyOTMzRTc0 QTYxMUVGQUI0QjA1M0NDNEY5QUUwMi9OTmU5WVVPV3JrUlJjT0JZNEs3YzY2MUpR RjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05OZTlZVU9XcmtSUmNPQlk0SzdjNjYxSlFGOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz M0Y2Qi85ODUyOTMzRTc0QTYxMUVGQUI0QjA1M0NDNEY5QUUwMi9OTmU5WVVPV3Jr UlJjT0JZNEs3YzY2MUpRRjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBUxaon+VS6P1ibSJzOFeM7RyPamkRsIVu6W0pTl8bZhsuuKjwqRedE eAXWVsVWeGcUJ/6jb/D3bCVZ/z0s55fxjhZLpALEHyDe7WIb8ta5uh8zt3VO60s4 eNLKcBTZmZO1dHEAKXLby93/2ktzW3TQ246yC4lQ+blQG9k6x+YnNUjcPKZC3srM vhpDap1X48ZHCfRKbnQep1KRT4QJQgadU43/DiQZGzKOYcDyBNvwXCigw7QHQ9ZV CglrkuWL/EWOoT/XuGOCeIKZdJWtd3yM1FB079zQ7sNZQP9dweXTmXfNbZSaBs8K ZGv/IBv61lfcCwWLZmpr10Wha1VPSql1 -----END CERTIFICATE-----Generated at Sat May 31 16:49:09 2025 by rpki-client