$ rpki-client -vvf rpki.apnic.net/member_repository/A91AB383/8CC2A9AADE7711EB8739EC11C4F9AE02/nCNR1FqX1x0D1rw4Wzfdm_uAz14.mft File: nCNR1FqX1x0D1rw4Wzfdm_uAz14.mft (raw, json) Hash identifier: RtiWxE1TRSVf336PQKKBAquwwROBKYNWsooSnX/9uxI= Subject key identifier: 64:61:53:21:BB:DF:EB:49:3E:5D:9F:C6:1C:96:C8:52:48:D7:DD:00 Authority key identifier: 9C:23:51:D4:5A:97:D7:1D:03:D6:BC:38:5B:37:DD:9B:FB:80:CF:5E Certificate issuer: /CN=A91AB383/serialNumber=9C2351D45A97D71D03D6BC385B37DD9BFB80CF5E Certificate serial: 05A1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nCNR1FqX1x0D1rw4Wzfdm_uAz14.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AB383/8CC2A9AADE7711EB8739EC11C4F9AE02/nCNR1FqX1x0D1rw4Wzfdm_uAz14.mft Manifest number: 0589 Signing time: Fri 30 May 2025 23:31:03 +0000 Manifest this update: Fri 30 May 2025 23:31:02 +0000 Manifest next update: Fri 06 Jun 2025 23:31:02 +0000 Files and hashes: 1: nCNR1FqX1x0D1rw4Wzfdm_uAz14.crl (hash: bIfoluac/heIy/pAWW7bfS+zrbhhxqLIDSvRsSdef6Y=) 2: 7AFB859484C711EF9740BE81C4F9AE02.roa (hash: JaP8DbxQir8/0bWtIBOnJ0xxJ2zmG81J8TY5KOYqo20=) 3: B5579BEA421911EC832A4A41C4F9AE02.roa (hash: TnPFt98O/lpzVBzpn7t3CZrVS9wPgwpRPSBubph6Vs8=) 4: B69E6026355C11F0B8094E3AC4F9AE02.roa (hash: WbRkZBA9PNEYhWDMHVJVxZ0NU4zDzXKWpGvmmD0/x40=) 5: 12EDB8D284C711EFA075A16AC4F9AE02.roa (hash: iJ+3fFN0ePrtmOVIDHG94Bkp4m0H5KVuwmeRjgUmL3I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AB383/8CC2A9AADE7711EB8739EC11C4F9AE02/nCNR1FqX1x0D1rw4Wzfdm_uAz14.crl rsync://rpki.apnic.net/member_repository/A91AB383/8CC2A9AADE7711EB8739EC11C4F9AE02/nCNR1FqX1x0D1rw4Wzfdm_uAz14.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nCNR1FqX1x0D1rw4Wzfdm_uAz14.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 23:31:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1441 (0x5a1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AB383, serialNumber=9C2351D45A97D71D03D6BC385B37DD9BFB80CF5E Validity Not Before: May 30 23:31:02 2025 GMT Not After : Jun 6 23:31:02 2025 GMT Subject: CN=683a3fb7-d335 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:06:78:43:82:cd:b3:19:23:85:32:d8:b1:4e: 05:40:1b:bf:2e:1c:43:9b:ae:e6:b7:b3:77:5a:13: 78:12:b1:ca:f3:65:60:86:ec:9c:84:05:3b:66:7d: c9:f6:c4:a3:b8:9b:0e:19:22:2d:8f:ec:2a:bf:65: 4e:ae:45:8c:c3:cc:bf:a9:d9:07:ba:90:ed:68:da: 54:06:19:31:82:83:02:4b:b7:7c:d3:66:1e:87:04: b2:d9:eb:32:cd:b9:0f:bc:ca:8c:9d:9d:58:da:6d: 44:13:16:61:49:cd:14:19:0d:a8:6c:eb:16:73:2c: d0:bf:1d:0e:11:f1:d7:63:3c:36:3e:82:1a:83:59: e8:83:13:72:aa:5b:cd:7a:9d:88:2a:a6:25:8a:b5: f8:c6:94:df:94:9e:55:46:ae:b7:91:54:fd:d2:57: 07:b7:e1:a8:ad:45:83:f7:c8:3e:7c:b3:7c:9f:08: 10:ed:08:97:06:47:36:ba:f9:a3:f9:01:61:39:3b: 11:5d:07:69:18:3a:e6:f8:a2:57:7a:90:ca:02:a5: 32:52:8b:b4:12:83:51:33:be:22:c4:ea:41:00:a9: b9:25:92:33:fd:47:60:f3:20:8b:ba:5c:21:6d:e8: 6d:71:5c:19:2a:0e:15:11:8d:4a:fc:5f:c7:87:75: ac:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:61:53:21:BB:DF:EB:49:3E:5D:9F:C6:1C:96:C8:52:48:D7:DD:00 X509v3 Authority Key Identifier: keyid:9C:23:51:D4:5A:97:D7:1D:03:D6:BC:38:5B:37:DD:9B:FB:80:CF:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AB383/8CC2A9AADE7711EB8739EC11C4F9AE02/nCNR1FqX1x0D1rw4Wzfdm_uAz14.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nCNR1FqX1x0D1rw4Wzfdm_uAz14.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB383/8CC2A9AADE7711EB8739EC11C4F9AE02/nCNR1FqX1x0D1rw4Wzfdm_uAz14.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7d:38:fe:71:37:c0:6a:d7:40:cb:34:10:c9:c7:71:01:a8:08: 53:73:22:cc:a2:e6:52:58:14:b0:f9:6e:8c:b8:f5:14:6d:f8: 29:23:a3:ce:5c:95:5f:b7:47:5b:be:f6:08:7c:f3:29:42:57: 8c:b5:c0:2e:06:ad:25:72:41:1d:eb:bd:70:fc:65:b7:79:75: 17:f8:31:54:a6:81:0a:c6:c7:54:ac:c0:bf:d1:ec:15:8e:99: 3a:38:2e:b9:1e:80:8d:93:98:47:07:47:97:ec:e4:1a:c9:4a: 8a:3d:ae:db:d6:0e:14:2e:03:ba:b2:32:b6:cb:28:ce:e4:62: 01:90:df:07:3f:70:e9:4c:05:d2:78:e5:75:5e:97:2c:47:ec: 55:65:6e:e2:9e:f9:30:5f:29:07:98:53:42:8e:a0:ec:b4:c0: aa:ba:12:47:df:ee:7f:ae:e4:de:a0:61:0e:e4:47:05:71:86: 91:be:d0:d6:c9:cf:1d:71:a9:f2:57:d2:ef:58:5d:65:eb:c3: f0:c5:ad:24:90:a7:22:e1:05:7a:95:4f:71:a3:bc:72:6c:e3: 3f:f6:87:5f:86:e3:00:aa:3c:17:bf:f7:ce:48:a2:66:df:69: 21:d2:21:02:ad:55:1f:57:79:4a:36:3b:10:1b:31:28:b3:d3: 45:ed:5b:38 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBaEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUIzODMxMTAvBgNVBAUTKDlDMjM1MUQ0NUE5N0Q3MUQwM0Q2QkMzODVCMzdERDlC RkI4MENGNUUwHhcNMjUwNTMwMjMzMTAyWhcNMjUwNjA2MjMzMTAyWjAYMRYwFAYD VQQDEw02ODNhM2ZiNy1kMzM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtwZ4Q4LNsxkjhTLYsU4FQBu/LhxDm67mt7N3WhN4ErHK82VghuychAU7Zn3J 9sSjuJsOGSItj+wqv2VOrkWMw8y/qdkHupDtaNpUBhkxgoMCS7d802YehwSy2esy zbkPvMqMnZ1Y2m1EExZhSc0UGQ2obOsWcyzQvx0OEfHXYzw2PoIag1nogxNyqlvN ep2IKqYlirX4xpTflJ5VRq63kVT90lcHt+GorUWD98g+fLN8nwgQ7QiXBkc2uvmj +QFhOTsRXQdpGDrm+KJXepDKAqUyUou0EoNRM74ixOpBAKm5JZIz/Udg8yCLulwh behtcVwZKg4VEY1K/F/Hh3WstwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGRhUyG7 3+tJPl2fxhyWyFJI190AMB8GA1UdIwQYMBaAFJwjUdRal9cdA9a8OFs33Zv7gM9e MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQjM4My84Q0MyQTlBQURF NzcxMUVCODczOUVDMTFDNEY5QUUwMi9uQ05SMUZxWDF4MEQxcnc0V3pmZG1fdUF6 MTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25DTlIxRnFYMXgwRDFydzRXemZkbV91QXoxNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QjM4My84Q0MyQTlBQURFNzcxMUVCODczOUVDMTFDNEY5QUUwMi9uQ05SMUZxWDF4 MEQxcnc0V3pmZG1fdUF6MTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB9OP5xN8Bq10DLNBDJx3EBqAhTcyLMouZSWBSw+W6MuPUUbfgpI6PO XJVft0dbvvYIfPMpQleMtcAuBq0lckEd671w/GW3eXUX+DFUpoEKxsdUrMC/0ewV jpk6OC65HoCNk5hHB0eX7OQayUqKPa7b1g4ULgO6sjK2yyjO5GIBkN8HP3DpTAXS eOV1XpcsR+xVZW7invkwXykHmFNCjqDstMCquhJH3+5/ruTeoGEO5EcFcYaRvtDW yc8dcanyV9LvWF1l68Pwxa0kkKci4QV6lU9xo7xybOM/9odfhuMAqjwXv/fOSKJm 32kh0iECrVUfV3lKNjsQGzEos9NF7Vs4 -----END CERTIFICATE-----Generated at Sat May 31 16:29:33 2025 by rpki-client