$ rpki-client -vvf rpki.apnic.net/member_repository/A91709BC/892897302E9011E99177960FC4F9AE02/Nu6KQBMF6zjijYal2392KKq34k8.mft File: Nu6KQBMF6zjijYal2392KKq34k8.mft (raw, json) Hash identifier: Ce3w9AqqDWiE3ebovQfpJr9fYtKs4cgVGpqftDf086E= Subject key identifier: ED:E6:0C:A8:41:C6:DF:AF:E9:43:F0:4E:43:6C:7B:4C:4E:34:68:5C Authority key identifier: 36:EE:8A:40:13:05:EB:38:E2:8D:86:A5:DB:7F:76:28:AA:B7:E2:4F Certificate issuer: /CN=A91709BC/serialNumber=36EE8A401305EB38E28D86A5DB7F7628AAB7E24F Certificate serial: 110D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nu6KQBMF6zjijYal2392KKq34k8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91709BC/892897302E9011E99177960FC4F9AE02/Nu6KQBMF6zjijYal2392KKq34k8.mft Manifest number: 10A1 Signing time: Fri 06 Jun 2025 17:22:15 +0000 Manifest this update: Fri 06 Jun 2025 17:22:14 +0000 Manifest next update: Fri 13 Jun 2025 17:22:14 +0000 Files and hashes: 1: Nu6KQBMF6zjijYal2392KKq34k8.crl (hash: u9A4wFAHesZyWvgPgAA1FoVZk54PS0RGHPgVHsMrBJw=) 2: 264DBA882E9411E9A7232A19C4F9AE02.roa (hash: R1CUbIu0V+HE4f06nI4AoF8weg5+WJaRb7OLoB74u3o=) 3: 8F5856362E9511E9896EFA1DC4F9AE02.roa (hash: JSG6xv2uqNAgwOpDXcHQxv8WbhIpG22unWVbGkO466o=) 4: 53DFF8EC2E9111E999636910C4F9AE02.roa (hash: 6mj2ePigEKlPzc3f7+eTQsUuSCZHP+3UsHzZtRH/e3g=) 5: 8CD1AEC62E9511E9896EFA1DC4F9AE02.roa (hash: AQJjv8c1H+P8QI0s3FB/4mPX+TV6GerHGXja71yYLBo=) 6: 52685F222E9111E999636910C4F9AE02.roa (hash: tnJuonmKS/V0uoywfbn8ky35GlWjycjl3empqFomJY8=) 7: 8DFDF8AE2E9511E9896EFA1DC4F9AE02.roa (hash: fajAFqylWikP3Jikl5nRrG0DTxFJf4fODLkvijKh8uw=) 8: 81CBCECA0BFF11EE9AE0F676C4F9AE02.roa (hash: /vrezSo6RJ5dq1cFDK2anelkL8dBqwcaNrTPSxP8eN8=) 9: 5870952EC53011EA98D1D651C4F9AE02.roa (hash: aDxTmBiu7r/Tn9jcjNLK8UcWaXq5NN3ow+MDjn+I+ck=) 10: 8D76CA462E9511E9896EFA1DC4F9AE02.roa (hash: MmpvHOBJX6/TYN9r3lrc9Z7dr+vQVfQyHD+RNXiHs1I=) 11: 8EA288F62E9511E9896EFA1DC4F9AE02.roa (hash: S5sgxNBi0p+O5VGwcCA6mYFpVmBWw6J0mLdcaJC7l/k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91709BC/892897302E9011E99177960FC4F9AE02/Nu6KQBMF6zjijYal2392KKq34k8.crl rsync://rpki.apnic.net/member_repository/A91709BC/892897302E9011E99177960FC4F9AE02/Nu6KQBMF6zjijYal2392KKq34k8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nu6KQBMF6zjijYal2392KKq34k8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 13 Jun 2025 17:22:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4365 (0x110d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91709BC, serialNumber=36EE8A401305EB38E28D86A5DB7F7628AAB7E24F Validity Not Before: Jun 6 17:22:14 2025 GMT Not After : Jun 13 17:22:14 2025 GMT Subject: CN=684323c6-1b70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:7f:06:00:b7:c4:90:02:7a:f8:fb:c3:9e:ba: b3:bf:b2:d5:8c:da:99:14:21:67:f2:c6:00:74:e2: b0:8c:78:cd:65:e4:6e:7b:57:3d:51:cf:08:96:7f: 8d:7f:1b:bb:37:9b:89:d8:6a:40:72:c7:80:c4:ab: 77:88:f6:30:6f:03:e7:6c:3b:ac:26:49:93:7b:7e: a2:ba:00:4f:29:6a:3c:f4:db:b5:30:3a:76:df:d5: 8b:50:e5:8c:4c:e3:b1:df:a8:95:22:65:4d:04:03: 12:f9:f6:fd:8e:35:58:b5:52:de:62:d8:4d:89:a5: 9b:ff:49:3f:10:cd:35:d2:aa:dd:70:1e:72:bf:af: 8e:e6:db:28:47:e8:b9:8c:d6:a8:79:fb:06:69:e7: 6b:46:b3:d9:14:e6:9c:a0:d3:f2:11:9c:9b:f5:25: 7f:b8:d7:55:32:1f:b3:91:6c:d7:1e:ee:b4:bf:d7: 6e:a6:82:30:d0:be:31:55:98:46:c9:94:db:d1:20: cf:63:c6:21:b0:ea:3b:59:41:65:be:a7:51:8b:60: b5:9d:87:90:fc:28:a9:56:51:67:db:27:d8:62:c4: bb:2e:21:d9:b0:07:45:28:96:d0:2d:af:b9:40:b6: a3:a6:38:f9:23:c6:1a:af:4c:0c:d4:1d:43:81:e6: ab:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:E6:0C:A8:41:C6:DF:AF:E9:43:F0:4E:43:6C:7B:4C:4E:34:68:5C X509v3 Authority Key Identifier: keyid:36:EE:8A:40:13:05:EB:38:E2:8D:86:A5:DB:7F:76:28:AA:B7:E2:4F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91709BC/892897302E9011E99177960FC4F9AE02/Nu6KQBMF6zjijYal2392KKq34k8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nu6KQBMF6zjijYal2392KKq34k8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91709BC/892897302E9011E99177960FC4F9AE02/Nu6KQBMF6zjijYal2392KKq34k8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c1:09:09:12:bf:63:c6:85:7a:e6:fb:15:42:07:cf:42:62:5f: 0b:56:89:0e:60:9e:ce:54:11:8b:d1:ce:1e:76:fd:e8:7f:5e: f8:23:a6:e3:9e:5f:5b:df:0a:9c:3c:10:f5:5b:db:b8:5f:fd: 5e:96:c6:15:9b:2d:14:89:ef:80:30:38:bc:9c:87:7e:93:23: ff:9c:a6:67:c2:ad:ff:db:64:af:3a:9b:32:7a:e4:19:9a:3a: ad:f6:49:6b:a8:ee:a0:e3:bf:07:45:af:e1:ef:d2:58:7a:81: f7:20:1d:73:8c:b7:7a:2a:1c:7c:72:0f:5b:50:48:ed:5b:df: b6:47:60:11:af:d1:d3:2b:64:29:b9:9d:6a:44:72:8c:7e:e6: 6b:9d:c7:f6:aa:48:a2:10:02:cb:0f:6a:d6:80:62:c7:04:f5: 38:5c:36:47:7f:27:1d:85:d3:b6:d2:ad:c6:36:92:58:45:92: cc:e6:90:ae:82:77:4d:f1:17:4e:9e:7b:3f:5c:b6:8e:c4:cf: 1b:fb:b0:97:db:be:54:35:55:68:00:5d:ed:f6:a0:4e:cf:64: 47:73:6a:f5:57:dd:51:a0:73:22:35:f5:a1:98:2b:f9:33:df: 40:72:a5:db:2d:9a:66:de:ce:5c:bb:3d:de:3a:5f:0b:40:0c: c3:64:88:f7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEQ0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzA5QkMxMTAvBgNVBAUTKDM2RUU4QTQwMTMwNUVCMzhFMjhEODZBNURCN0Y3NjI4 QUFCN0UyNEYwHhcNMjUwNjA2MTcyMjE0WhcNMjUwNjEzMTcyMjE0WjAYMRYwFAYD VQQDEw02ODQzMjNjNi0xYjcwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv38GALfEkAJ6+PvDnrqzv7LVjNqZFCFn8sYAdOKwjHjNZeRue1c9Uc8Iln+N fxu7N5uJ2GpAcseAxKt3iPYwbwPnbDusJkmTe36iugBPKWo89Nu1MDp239WLUOWM TOOx36iVImVNBAMS+fb9jjVYtVLeYthNiaWb/0k/EM010qrdcB5yv6+O5tsoR+i5 jNaoefsGaedrRrPZFOacoNPyEZyb9SV/uNdVMh+zkWzXHu60v9dupoIw0L4xVZhG yZTb0SDPY8YhsOo7WUFlvqdRi2C1nYeQ/CipVlFn2yfYYsS7LiHZsAdFKJbQLa+5 QLajpjj5I8Yar0wM1B1DgearZwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO3mDKhB xt+v6UPwTkNse0xONGhcMB8GA1UdIwQYMBaAFDbuikATBes44o2Gpdt/diiqt+JP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MDlCQy84OTI4OTczMDJF OTAxMUU5OTE3Nzk2MEZDNEY5QUUwMi9OdTZLUUJNRjZ6amlqWWFsMjM5MktLcTM0 azguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL051NktRQk1GNnpqaWpZYWwyMzkyS0txMzRrOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MDlCQy84OTI4OTczMDJFOTAxMUU5OTE3Nzk2MEZDNEY5QUUwMi9OdTZLUUJNRjZ6 amlqWWFsMjM5MktLcTM0azgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDBCQkSv2PGhXrm+xVCB89CYl8LVokOYJ7OVBGL0c4edv3of174I6bj nl9b3wqcPBD1W9u4X/1elsYVmy0Uie+AMDi8nId+kyP/nKZnwq3/22SvOpsyeuQZ mjqt9klrqO6g478HRa/h79JYeoH3IB1zjLd6Khx8cg9bUEjtW9+2R2ARr9HTK2Qp uZ1qRHKMfuZrncf2qkiiEALLD2rWgGLHBPU4XDZHfycdhdO20q3GNpJYRZLM5pCu gndN8RdOnns/XLaOxM8b+7CX275UNVVoAF3t9qBOz2RHc2r1V91RoHMiNfWhmCv5 M99AcqXbLZpm3s5cuz3eOl8LQAzDZIj3 -----END CERTIFICATE-----Generated at Sat Jun 7 07:11:08 2025 by rpki-client