$ rpki-client -vvf rpki.apnic.net/member_repository/A91538E7/BF404A5A026711EB8E1C301AC4F9AE02/nB8zLBJVRXgs4gxu9nGvHT_JN0s.mft File: nB8zLBJVRXgs4gxu9nGvHT_JN0s.mft (raw, json) Hash identifier: E0KpYmUK6x/wQpEH4Wld+1PnO27ENnqnV1XaML2AgG8= Subject key identifier: 9C:A8:70:50:9C:98:BF:0F:71:A9:18:3B:1C:C6:87:AC:C0:47:0B:D5 Authority key identifier: 9C:1F:33:2C:12:55:45:78:2C:E2:0C:6E:F6:71:AF:1D:3F:C9:37:4B Certificate issuer: /CN=A91538E7/serialNumber=9C1F332C125545782CE20C6EF671AF1D3FC9374B Certificate serial: 07AE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nB8zLBJVRXgs4gxu9nGvHT_JN0s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91538E7/BF404A5A026711EB8E1C301AC4F9AE02/nB8zLBJVRXgs4gxu9nGvHT_JN0s.mft Manifest number: 07A8 Signing time: Mon 02 Jun 2025 21:24:10 +0000 Manifest this update: Mon 02 Jun 2025 21:24:10 +0000 Manifest next update: Mon 09 Jun 2025 21:24:10 +0000 Files and hashes: 1: nB8zLBJVRXgs4gxu9nGvHT_JN0s.crl (hash: 1lZYIUZPgJH6yKKpuqCkiD6d3Cel1TfEkzvap9SmS7s=) 2: 5ABF5FB0026911EBB480261FC4F9AE02.roa (hash: f+tqP307alHmtL4Nv8/Sj5RxK8BZomyv0PqPMhlVuTE=) 3: 83B284AEB54F11EF8F5EE86FC4F9AE02.roa (hash: DfjAP4F+b7VdurvxdjrAlhP/yG1ojER19VQC4yTE15s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91538E7/BF404A5A026711EB8E1C301AC4F9AE02/nB8zLBJVRXgs4gxu9nGvHT_JN0s.crl rsync://rpki.apnic.net/member_repository/A91538E7/BF404A5A026711EB8E1C301AC4F9AE02/nB8zLBJVRXgs4gxu9nGvHT_JN0s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nB8zLBJVRXgs4gxu9nGvHT_JN0s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Jun 2025 21:24:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1966 (0x7ae) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91538E7, serialNumber=9C1F332C125545782CE20C6EF671AF1D3FC9374B Validity Not Before: Jun 2 21:24:10 2025 GMT Not After : Jun 9 21:24:10 2025 GMT Subject: CN=683e167a-795a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:14:cf:2a:fc:8a:8b:a0:72:47:dd:41:85:b7: e4:2f:0f:c9:18:f4:a7:af:05:2e:80:2a:38:03:df: 47:74:83:a8:91:79:6e:02:e4:09:5f:8d:7c:87:e0: 6c:a3:42:8f:8b:98:e8:e9:e7:e0:d6:80:fc:17:23: 65:b6:7c:d6:f8:51:74:c5:57:8e:d2:6d:04:5c:63: 7e:6c:68:36:68:b8:13:ed:c8:12:4c:46:74:1f:72: be:ea:50:81:c1:84:17:06:b0:4f:21:0f:ae:08:65: 56:65:4b:45:b1:a8:8a:57:26:80:5a:7d:72:87:9b: 57:05:db:f5:00:c4:ce:1b:11:44:fb:59:47:82:fc: 65:18:e0:14:48:a8:5a:ad:11:cc:55:ba:d4:5c:6b: 14:05:35:a6:74:24:4f:81:c3:25:a3:e1:26:2d:cc: 0a:48:06:b2:ec:a9:73:97:63:0d:23:3f:d6:c7:dd: 96:40:55:7b:9b:95:22:f4:5b:57:20:68:e1:2f:22: e1:75:59:d8:35:6e:2e:80:ba:9d:18:a9:83:d8:69: 20:e1:40:c3:62:6b:53:fd:40:8b:22:5f:c0:62:2f: c0:58:70:1a:d9:fc:4b:45:ce:e6:1f:6d:bb:95:ca: 5d:7b:4a:d1:b0:f8:1c:30:e9:5c:ee:10:49:7b:ca: db:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:A8:70:50:9C:98:BF:0F:71:A9:18:3B:1C:C6:87:AC:C0:47:0B:D5 X509v3 Authority Key Identifier: keyid:9C:1F:33:2C:12:55:45:78:2C:E2:0C:6E:F6:71:AF:1D:3F:C9:37:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91538E7/BF404A5A026711EB8E1C301AC4F9AE02/nB8zLBJVRXgs4gxu9nGvHT_JN0s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nB8zLBJVRXgs4gxu9nGvHT_JN0s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91538E7/BF404A5A026711EB8E1C301AC4F9AE02/nB8zLBJVRXgs4gxu9nGvHT_JN0s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 40:6b:42:d9:11:c7:68:84:71:d1:db:d4:ff:83:07:ea:b5:7a: a5:81:f5:16:07:c8:b3:46:01:8c:ce:c2:15:b6:37:95:60:7d: 32:e0:00:3c:7d:8a:81:a2:0b:c4:62:15:a6:b5:ce:79:1b:b9: b2:e7:bf:f8:77:6a:e0:ad:09:4e:d1:67:9a:1c:f3:84:54:14: fd:5f:58:52:99:3a:81:99:4b:60:fe:c6:98:bc:a9:bc:2b:30: 0c:ae:0e:71:d6:77:c9:e7:ff:95:24:46:3d:02:90:c6:52:a0: 35:7f:16:28:72:e8:6a:6c:b1:ea:38:df:6b:90:f0:d4:53:65: 2c:33:60:2a:33:0e:4d:2b:01:ae:95:42:43:90:d0:c3:7f:a9: 6a:4a:6a:ac:2f:ae:ce:36:04:46:d0:6e:3b:dd:23:b2:e2:f2: 27:35:90:05:1f:4b:73:4b:f6:fc:eb:ff:f2:7f:d2:0b:05:5f: 62:a6:cd:e7:a0:ed:08:2b:e0:79:0d:33:e3:f4:c4:ab:fb:17: f9:a2:bc:10:81:ec:d5:6c:74:60:e3:c0:03:4c:ea:de:c6:a6: fd:04:73:8e:8e:e1:52:a2:a3:10:09:ce:2c:9a:25:24:91:5c: 52:31:ce:e6:bd:1f:d7:6f:ab:c2:a3:34:9b:0f:fe:b5:e6:ed: aa:13:02:1d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB64wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTM4RTcxMTAvBgNVBAUTKDlDMUYzMzJDMTI1NTQ1NzgyQ0UyMEM2RUY2NzFBRjFE M0ZDOTM3NEIwHhcNMjUwNjAyMjEyNDEwWhcNMjUwNjA5MjEyNDEwWjAYMRYwFAYD VQQDEw02ODNlMTY3YS03OTVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0hTPKvyKi6ByR91BhbfkLw/JGPSnrwUugCo4A99HdIOokXluAuQJX418h+Bs o0KPi5jo6efg1oD8FyNltnzW+FF0xVeO0m0EXGN+bGg2aLgT7cgSTEZ0H3K+6lCB wYQXBrBPIQ+uCGVWZUtFsaiKVyaAWn1yh5tXBdv1AMTOGxFE+1lHgvxlGOAUSKha rRHMVbrUXGsUBTWmdCRPgcMlo+EmLcwKSAay7Klzl2MNIz/Wx92WQFV7m5Ui9FtX IGjhLyLhdVnYNW4ugLqdGKmD2Gkg4UDDYmtT/UCLIl/AYi/AWHAa2fxLRc7mH227 lcpde0rRsPgcMOlc7hBJe8rbYQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJyocFCc mL8PcakYOxzGh6zARwvVMB8GA1UdIwQYMBaAFJwfMywSVUV4LOIMbvZxrx0/yTdL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MzhFNy9CRjQwNEE1QTAy NjcxMUVCOEUxQzMwMUFDNEY5QUUwMi9uQjh6TEJKVlJYZ3M0Z3h1OW5HdkhUX0pO MHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25COHpMQkpWUlhnczRneHU5bkd2SFRfSk4wcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MzhFNy9CRjQwNEE1QTAyNjcxMUVCOEUxQzMwMUFDNEY5QUUwMi9uQjh6TEJKVlJY Z3M0Z3h1OW5HdkhUX0pOMHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBAa0LZEcdohHHR29T/gwfqtXqlgfUWB8izRgGMzsIVtjeVYH0y4AA8 fYqBogvEYhWmtc55G7my57/4d2rgrQlO0WeaHPOEVBT9X1hSmTqBmUtg/saYvKm8 KzAMrg5x1nfJ5/+VJEY9ApDGUqA1fxYocuhqbLHqON9rkPDUU2UsM2AqMw5NKwGu lUJDkNDDf6lqSmqsL67ONgRG0G473SOy4vInNZAFH0tzS/b86//yf9ILBV9ips3n oO0IK+B5DTPj9MSr+xf5orwQgezVbHRg48ADTOrexqb9BHOOjuFSoqMQCc4smiUk kVxSMc7mvR/Xb6vCozSbD/615u2qEwId -----END CERTIFICATE-----Generated at Tue Jun 3 23:59:27 2025 by rpki-client