$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4C60/B526FF74D84111E9A4521413C4F9AE02/nvnkN242ZTJ1x5Y1mNa0W3CvgJk.mft File: nvnkN242ZTJ1x5Y1mNa0W3CvgJk.mft (raw, json) Hash identifier: kkz9SBAFir4yQwgFCQt7EPM15KRQUKKZGrf4qrd9LYU= Subject key identifier: 9F:F2:D4:D2:57:89:EF:C1:6C:AF:E2:5F:7C:4A:6E:A0:D2:E5:20:38 Authority key identifier: 9E:F9:E4:37:6E:36:65:32:75:C7:96:35:98:D6:B4:5B:70:AF:80:99 Certificate issuer: /CN=A91A4C60/serialNumber=9EF9E4376E36653275C7963598D6B45B70AF8099 Certificate serial: 0E57 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nvnkN242ZTJ1x5Y1mNa0W3CvgJk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A4C60/B526FF74D84111E9A4521413C4F9AE02/nvnkN242ZTJ1x5Y1mNa0W3CvgJk.mft Manifest number: 0DAF Signing time: Fri 30 May 2025 18:12:13 +0000 Manifest this update: Fri 30 May 2025 18:12:13 +0000 Manifest next update: Fri 06 Jun 2025 18:12:13 +0000 Files and hashes: 1: nvnkN242ZTJ1x5Y1mNa0W3CvgJk.crl (hash: Ts8oXPwgEI96laqz1/4EJRDzr4ayow5s0EzPGoT6ces=) 2: 7072DE7601C911EC9286E827C4F9AE02.roa (hash: 7msEvTLtFsUPExajJssY7rK4WVcg4LZn9GJ36tHnfps=) 3: 72EB65AAC96511EDB2A13779C4F9AE02.roa (hash: EKrxivQN/ugEIGuNskep3asGKS1SHAvX1FnHQ+xTspc=) 4: 88A00388193111EB9E0A6A49C4F9AE02.roa (hash: u3WzgpaL6M5sXXo26nPKh9UHSPFb46VhuO2Q5Fo8Shs=) 5: 81CDB96A53F111EB85FBFA19C4F9AE02.roa (hash: NWo/6+CZ9HQYfqESvTvUnv7ahdvIp39DlAFteKyJz6Y=) 6: 0741B84C2FFA11EB9544F785C4F9AE02.roa (hash: mTcIHah4w3Vjv+PUpTnmqnHZ/WWcS1sHh5BVs3GE+UQ=) 7: 12F0D72E7BC111EA8503D815C4F9AE02.roa (hash: xGtgEmqtoxW1ZnFqrfdXZFVQbRuwiMqE40Ohns82lks=) 8: 0D90C6C899BC11EEBF0F7411C4F9AE02.roa (hash: OqGy61SUyKNWplMZ7rgfQmmSj9+s8efrmcgKdf6cAJk=) 9: B6A7D6FCCAEA11EE8E1B2D36C4F9AE02.roa (hash: SXM3r93+JAbfUFOgTJZWpNNuc7IK/ZoNqCIsmPIym1s=) 10: 378C18A43D3D11EAA59A8012C4F9AE02.roa (hash: HNDIzi1kzv+rbEdjXVJF19/xDZWlePAah9JkFcYlECE=) 11: 9F71391C684F11EAB45B6F4FC4F9AE02.roa (hash: jVu5ZnLYMd3KFvMDPxIr2Kr82SJ5+hpIDGoI5dhGF7o=) 12: 60B3CD6EAF2E11EEBF12DF45C4F9AE02.roa (hash: 1e5MpWXXLnucpXgA7+/6NcCslKn9LXNV+RznqlHIuF0=) 13: D17A895C0C5D11EAB1A29D67C4F9AE02.roa (hash: EZcxncfNl0zD/tSncvn3SUo/vaEA9kPik+cwYMuomd0=) 14: 2152FB1650C511EAB566FE61C4F9AE02.roa (hash: qiruACIeUuWCHVE9fSq/awWWHhKH4G60m/pcIC2u5z8=) 15: 915FFF14A5AF11EAB039ED67C4F9AE02.roa (hash: 2jainDeXw/J702lQhxkzNdpAlcOPjELdE2rK7IEazhc=) 16: 03774914696211EC8A05D115C4F9AE02.roa (hash: /71jeZ/z/bjdOuocI7pJpODjcutgjWmyBXnbScV8x34=) 17: EDE3E1EE306D11EB9AEE3E86C4F9AE02.roa (hash: zfIXPPCdkOaknfqYs53DeFIT3TNh9PqHIQnfhYmK5wM=) 18: B07EF7408DDD11EA8B5F824BC4F9AE02.roa (hash: SBkKKnAR6IJ2hBnL0p0PNg19RBJEETP5xc3S8pI7apE=) 19: 45F4DDA265CF11EB9E3CFA6FC4F9AE02.roa (hash: IXKoMwA1CHlc+rwm36botjnh/fDCInGR5gYfUdLmCvQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A4C60/B526FF74D84111E9A4521413C4F9AE02/nvnkN242ZTJ1x5Y1mNa0W3CvgJk.crl rsync://rpki.apnic.net/member_repository/A91A4C60/B526FF74D84111E9A4521413C4F9AE02/nvnkN242ZTJ1x5Y1mNa0W3CvgJk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nvnkN242ZTJ1x5Y1mNa0W3CvgJk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 18:12:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3671 (0xe57) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A4C60, serialNumber=9EF9E4376E36653275C7963598D6B45B70AF8099 Validity Not Before: May 30 18:12:13 2025 GMT Not After : Jun 6 18:12:13 2025 GMT Subject: CN=6839f4fd-18c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:0f:7b:1c:6a:b5:f8:4d:a0:ef:c5:b4:30:ac: 08:aa:b3:ab:6c:f1:a7:26:f8:51:e1:7a:f6:40:6a: 8c:d9:a8:aa:3a:5b:7c:35:ca:3c:f3:f3:93:88:fb: 2b:7b:3c:c6:bc:ff:a1:2d:21:92:7d:da:6c:75:73: ec:1a:5f:11:69:50:ed:20:3e:11:81:57:94:0b:5a: 03:f5:88:81:79:1c:96:51:3f:c8:d8:b8:53:69:29: a9:ca:ea:af:8f:2f:77:f9:8d:f1:28:73:11:fa:be: 7c:0e:91:7b:20:e6:1d:05:4f:d3:ff:5d:df:27:3b: 24:f3:a7:79:66:55:98:c5:10:b6:d8:6c:37:a6:ac: 58:c1:ff:b2:50:b4:e9:94:97:7f:f5:9d:cd:01:8f: a5:95:b4:4c:71:b9:79:80:4f:f2:f6:25:95:69:70: f0:a8:e0:c7:2b:f3:06:b0:7d:ad:91:1a:bb:ba:2e: 7f:b5:f7:66:1b:2f:f2:aa:75:6c:87:a6:cc:9a:25: 75:ac:bf:ad:ad:a6:3e:61:62:4e:67:0c:03:b1:e8: d7:61:df:98:d1:68:8d:96:ec:6c:39:71:de:1f:25: e4:6d:21:a0:4d:44:ec:b8:97:9a:35:ff:5c:a2:92: bf:ff:ab:b4:f9:ac:54:b8:ed:eb:c8:21:b1:8d:2c: e3:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:F2:D4:D2:57:89:EF:C1:6C:AF:E2:5F:7C:4A:6E:A0:D2:E5:20:38 X509v3 Authority Key Identifier: keyid:9E:F9:E4:37:6E:36:65:32:75:C7:96:35:98:D6:B4:5B:70:AF:80:99 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A4C60/B526FF74D84111E9A4521413C4F9AE02/nvnkN242ZTJ1x5Y1mNa0W3CvgJk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nvnkN242ZTJ1x5Y1mNa0W3CvgJk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4C60/B526FF74D84111E9A4521413C4F9AE02/nvnkN242ZTJ1x5Y1mNa0W3CvgJk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 52:2e:40:86:88:13:6c:d8:1f:ce:89:32:61:e1:ca:16:5a:3a: 4b:16:bf:cb:73:7c:75:d4:95:bb:08:df:75:9f:06:6b:96:d4: 0a:b7:a3:a8:98:7c:45:ae:c5:a1:d0:95:d6:b7:ef:66:60:e3: b5:93:ed:8f:56:35:87:4e:a4:49:eb:de:5a:db:ce:9f:57:54: 66:f4:42:46:c2:92:37:c4:ba:a4:9d:fa:ea:96:1e:50:14:79: 92:13:70:0a:30:86:db:1b:f4:61:be:80:5d:fa:1a:74:87:5b: 43:06:9c:a1:e4:14:27:df:33:79:30:b3:0e:8d:4d:da:1d:f8: 28:b2:d6:90:ca:5a:6e:2c:8b:ef:ec:fd:4f:67:68:5b:db:f9: 2c:7b:69:f3:4b:31:e8:3f:79:fb:36:b7:39:cf:07:b3:22:ef: cd:e5:da:5b:7a:dd:e6:0d:68:d6:79:51:7e:a4:67:37:ef:94: 0b:a6:cb:08:19:5e:0d:59:bb:98:98:1b:d9:bf:4e:96:db:b0: 3e:cc:8c:f3:07:82:b9:5d:09:3e:5d:51:95:f2:e2:2d:9a:00: 1b:c1:4f:b9:35:bf:6a:4e:75:29:5d:6a:54:c7:61:c7:39:b7: d6:15:9e:e1:d1:52:2a:f5:d1:aa:9c:53:c8:e5:74:54:55:20: 48:d0:f4:80 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDlcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTRDNjAxMTAvBgNVBAUTKDlFRjlFNDM3NkUzNjY1MzI3NUM3OTYzNTk4RDZCNDVC NzBBRjgwOTkwHhcNMjUwNTMwMTgxMjEzWhcNMjUwNjA2MTgxMjEzWjAYMRYwFAYD VQQDEw02ODM5ZjRmZC0xOGMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzQ97HGq1+E2g78W0MKwIqrOrbPGnJvhR4Xr2QGqM2aiqOlt8Nco88/OTiPsr ezzGvP+hLSGSfdpsdXPsGl8RaVDtID4RgVeUC1oD9YiBeRyWUT/I2LhTaSmpyuqv jy93+Y3xKHMR+r58DpF7IOYdBU/T/13fJzsk86d5ZlWYxRC22Gw3pqxYwf+yULTp lJd/9Z3NAY+llbRMcbl5gE/y9iWVaXDwqODHK/MGsH2tkRq7ui5/tfdmGy/yqnVs h6bMmiV1rL+traY+YWJOZwwDsejXYd+Y0WiNluxsOXHeHyXkbSGgTUTsuJeaNf9c opK//6u0+axUuO3ryCGxjSzj5QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ/y1NJX ie/BbK/iX3xKbqDS5SA4MB8GA1UdIwQYMBaAFJ755DduNmUydceWNZjWtFtwr4CZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNEM2MC9CNTI2RkY3NEQ4 NDExMUU5QTQ1MjE0MTNDNEY5QUUwMi9udm5rTjI0MlpUSjF4NVkxbU5hMFczQ3Zn SmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL252bmtOMjQyWlRKMXg1WTFtTmEwVzNDdmdKay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NEM2MC9CNTI2RkY3NEQ4NDExMUU5QTQ1MjE0MTNDNEY5QUUwMi9udm5rTjI0MlpU SjF4NVkxbU5hMFczQ3ZnSmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBSLkCGiBNs2B/OiTJh4coWWjpLFr/Lc3x11JW7CN91nwZrltQKt6Oo mHxFrsWh0JXWt+9mYOO1k+2PVjWHTqRJ695a286fV1Rm9EJGwpI3xLqknfrqlh5Q FHmSE3AKMIbbG/RhvoBd+hp0h1tDBpyh5BQn3zN5MLMOjU3aHfgostaQylpuLIvv 7P1PZ2hb2/kse2nzSzHoP3n7Nrc5zwezIu/N5dpbet3mDWjWeVF+pGc375QLpssI GV4NWbuYmBvZv06W27A+zIzzB4K5XQk+XVGV8uItmgAbwU+5Nb9qTnUpXWpUx2HH ObfWFZ7h0VIq9dGqnFPI5XRUVSBI0PSA -----END CERTIFICATE-----Generated at Sat May 31 17:44:09 2025 by rpki-client