$ rpki-client -vvf rpki.apnic.net/member_repository/A91889A4/27A25A5604FA11EE8D46E245C4F9AE02/_nQHcdbqABLeOHBW-Iy-3TbEqGA.mft File: _nQHcdbqABLeOHBW-Iy-3TbEqGA.mft (raw, json) Hash identifier: zRY7FWYZQJT20zbJly8vIGEiLURoyXaznRnnXt0WPUw= Subject key identifier: 6C:88:63:91:A6:3B:F8:C6:BB:2A:82:DF:35:6B:EF:D8:37:17:33:4A Authority key identifier: FE:74:07:71:D6:EA:00:12:DE:38:70:56:F8:8C:BE:DD:36:C4:A8:60 Certificate issuer: /CN=A91889A4/serialNumber=FE740771D6EA0012DE387056F88CBEDD36C4A860 Certificate serial: 0176 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_nQHcdbqABLeOHBW-Iy-3TbEqGA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91889A4/27A25A5604FA11EE8D46E245C4F9AE02/_nQHcdbqABLeOHBW-Iy-3TbEqGA.mft Manifest number: 0173 Signing time: Sat 31 May 2025 03:27:19 +0000 Manifest this update: Sat 31 May 2025 03:27:19 +0000 Manifest next update: Sat 07 Jun 2025 03:27:19 +0000 Files and hashes: 1: _nQHcdbqABLeOHBW-Iy-3TbEqGA.crl (hash: jNRgtthn6oWSEWCd281/t3EAcrImuFxaz1kSjIvUp3Y=) 2: 37B318C0050111EEAFBCAE7EC4F9AE02.roa (hash: pZ0jtDypa9zbTRVdqPzNYcOmaqaH3zak3MFxphvTBnU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91889A4/27A25A5604FA11EE8D46E245C4F9AE02/_nQHcdbqABLeOHBW-Iy-3TbEqGA.crl rsync://rpki.apnic.net/member_repository/A91889A4/27A25A5604FA11EE8D46E245C4F9AE02/_nQHcdbqABLeOHBW-Iy-3TbEqGA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_nQHcdbqABLeOHBW-Iy-3TbEqGA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 03:27:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 374 (0x176) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91889A4, serialNumber=FE740771D6EA0012DE387056F88CBEDD36C4A860 Validity Not Before: May 31 03:27:19 2025 GMT Not After : Jun 7 03:27:19 2025 GMT Subject: CN=683a7717-0f1d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:e8:40:82:c2:b8:a6:9f:1d:e9:ec:3a:09:aa: 8a:c9:f0:97:2a:3c:91:69:5c:0e:2b:fc:95:0e:09: 2e:68:53:32:df:42:c3:7e:ca:0c:1d:ef:00:9c:f1: fd:e0:f3:f8:e7:18:80:3a:0a:f6:9f:f1:17:58:f0: 2b:5f:07:1c:5d:8b:10:8f:ea:22:15:79:70:8c:dc: 24:21:21:50:9b:e8:ec:c3:5b:3e:28:29:f9:70:c5: 12:22:6f:c1:d4:7b:67:7e:54:b7:b3:01:5a:eb:24: 2b:c3:58:0f:15:07:1f:26:75:c7:3b:27:9c:3f:6a: 71:cd:db:e9:0d:f0:96:6e:a4:4a:31:17:58:11:b8: c1:ee:d8:af:6b:85:e9:ad:75:f8:c9:39:75:40:8c: 49:84:3f:1d:39:78:b5:6c:7d:84:55:69:51:96:94: d2:a9:06:38:04:d5:d1:7c:a6:9c:c8:99:3e:cb:4e: fd:47:3e:46:dc:e8:11:a8:8e:28:b7:6b:bd:01:47: 5a:14:8e:94:90:01:03:e5:c9:30:8f:29:54:c4:c3: 0a:4e:02:a6:cd:a6:e5:be:0e:fb:41:f1:1d:48:6b: 77:3f:c9:e6:72:61:b4:b6:ca:af:cb:fa:13:e0:d1: f6:20:ef:c1:72:89:02:73:37:a6:55:4b:e6:10:cd: 71:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:88:63:91:A6:3B:F8:C6:BB:2A:82:DF:35:6B:EF:D8:37:17:33:4A X509v3 Authority Key Identifier: keyid:FE:74:07:71:D6:EA:00:12:DE:38:70:56:F8:8C:BE:DD:36:C4:A8:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91889A4/27A25A5604FA11EE8D46E245C4F9AE02/_nQHcdbqABLeOHBW-Iy-3TbEqGA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_nQHcdbqABLeOHBW-Iy-3TbEqGA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91889A4/27A25A5604FA11EE8D46E245C4F9AE02/_nQHcdbqABLeOHBW-Iy-3TbEqGA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 80:0b:c0:a5:4f:3b:89:e9:4b:39:bd:45:75:91:29:ad:08:4e: e7:30:72:40:d9:f5:5a:24:bc:67:3a:cd:1e:7e:6c:3e:fe:13: 7d:19:ed:e0:4b:db:68:6b:18:c5:db:71:de:a0:3f:f8:c9:96: 1d:0e:66:ab:46:44:db:28:8b:ca:88:42:1b:e7:ee:c2:dd:ac: 6f:ef:cc:ba:85:db:47:e0:f3:45:93:29:5c:a2:b2:dd:15:95: 40:b1:18:0e:f8:c9:f1:88:9e:95:d9:48:65:5d:51:c9:5e:e3: 25:77:c2:7e:34:88:4a:10:54:9b:8c:36:34:d8:fa:ed:69:09: 6d:37:e2:b8:e0:29:2a:56:1d:90:82:9f:15:e3:4e:e0:c5:ad: 62:10:46:d1:07:2b:6d:7b:76:dc:ff:69:21:6e:49:47:57:ba: 89:da:70:51:57:b2:b0:2b:5a:21:63:5d:cf:83:a7:56:f0:6a: ed:ad:32:8e:c4:c1:0f:44:5a:34:be:4e:fc:4b:51:fd:3c:a7: 70:03:11:d4:bf:18:bd:b6:ff:7a:8d:5a:0d:cb:34:51:7a:3d: 6c:85:1c:6c:6c:5b:77:ca:f5:2f:2a:62:f6:2d:de:ad:d3:54: e1:90:ff:ef:2c:ae:98:bf:45:3f:f4:5c:4a:64:26:f4:40:aa: 85:3d:43:e7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAXYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODg5QTQxMTAvBgNVBAUTKEZFNzQwNzcxRDZFQTAwMTJERTM4NzA1NkY4OENCRURE MzZDNEE4NjAwHhcNMjUwNTMxMDMyNzE5WhcNMjUwNjA3MDMyNzE5WjAYMRYwFAYD VQQDEw02ODNhNzcxNy0wZjFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsehAgsK4pp8d6ew6CaqKyfCXKjyRaVwOK/yVDgkuaFMy30LDfsoMHe8AnPH9 4PP45xiAOgr2n/EXWPArXwccXYsQj+oiFXlwjNwkISFQm+jsw1s+KCn5cMUSIm/B 1HtnflS3swFa6yQrw1gPFQcfJnXHOyecP2pxzdvpDfCWbqRKMRdYEbjB7tiva4Xp rXX4yTl1QIxJhD8dOXi1bH2EVWlRlpTSqQY4BNXRfKacyJk+y079Rz5G3OgRqI4o t2u9AUdaFI6UkAED5ckwjylUxMMKTgKmzablvg77QfEdSGt3P8nmcmG0tsqvy/oT 4NH2IO/BcokCczemVUvmEM1x6wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGyIY5Gm O/jGuyqC3zVr79g3FzNKMB8GA1UdIwQYMBaAFP50B3HW6gAS3jhwVviMvt02xKhg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4ODlBNC8yN0EyNUE1NjA0 RkExMUVFOEQ0NkUyNDVDNEY5QUUwMi9fblFIY2RicUFCTGVPSEJXLUl5LTNUYkVx R0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19uUUhjZGJxQUJMZU9IQlctSXktM1RiRXFHQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 ODlBNC8yN0EyNUE1NjA0RkExMUVFOEQ0NkUyNDVDNEY5QUUwMi9fblFIY2RicUFC TGVPSEJXLUl5LTNUYkVxR0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCAC8ClTzuJ6Us5vUV1kSmtCE7nMHJA2fVaJLxnOs0efmw+/hN9Ge3g S9toaxjF23HeoD/4yZYdDmarRkTbKIvKiEIb5+7C3axv78y6hdtH4PNFkylcorLd FZVAsRgO+MnxiJ6V2UhlXVHJXuMld8J+NIhKEFSbjDY02PrtaQltN+K44CkqVh2Q gp8V407gxa1iEEbRBytte3bc/2khbklHV7qJ2nBRV7KwK1ohY13Pg6dW8GrtrTKO xMEPRFo0vk78S1H9PKdwAxHUvxi9tv96jVoNyzRRej1shRxsbFt3yvUvKmL2Ld6t 01ThkP/vLK6Yv0U/9FxKZCb0QKqFPUPn -----END CERTIFICATE-----Generated at Sat May 31 17:46:24 2025 by rpki-client