$ rpki-client -vvf rpki.apnic.net/member_repository/A91AB85A/185C39B603CD11ECABCE697BC4F9AE02/nZwAihKi96YP7_liJmsFAqHKC6I.mft File: nZwAihKi96YP7_liJmsFAqHKC6I.mft (raw, json) Hash identifier: Cpowycs54CjaG4cXiKE1U718+uEsSYcbhlWk8yLpLKg= Subject key identifier: 88:2F:BF:8E:AA:41:BD:52:EB:9E:AA:A8:EB:21:1F:94:AD:FF:41:E9 Authority key identifier: 9D:9C:00:8A:12:A2:F7:A6:0F:EF:F9:62:26:6B:05:02:A1:CA:0B:A2 Certificate issuer: /CN=A91AB85A/serialNumber=9D9C008A12A2F7A60FEFF962266B0502A1CA0BA2 Certificate serial: 051F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nZwAihKi96YP7_liJmsFAqHKC6I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AB85A/185C39B603CD11ECABCE697BC4F9AE02/nZwAihKi96YP7_liJmsFAqHKC6I.mft Manifest number: 0517 Signing time: Fri 30 May 2025 23:47:56 +0000 Manifest this update: Fri 30 May 2025 23:47:55 +0000 Manifest next update: Fri 06 Jun 2025 23:47:55 +0000 Files and hashes: 1: nZwAihKi96YP7_liJmsFAqHKC6I.crl (hash: id2RMPhzzU1F154DcofDOm0in5+Bzorir+qLtMr1rIk=) 2: 46A2104603CF11ECA480B07CC4F9AE02.roa (hash: X8TS/dUIvy3XOI0UnJtA1d7RV1bb4SxZ7U2o6VOp3BA=) 3: 460AA4AE03CF11ECA480B07CC4F9AE02.roa (hash: Gk9zFIrI4hfeJ0HReT17DaXTFk6xr6upAecBQ6JDnHs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AB85A/185C39B603CD11ECABCE697BC4F9AE02/nZwAihKi96YP7_liJmsFAqHKC6I.crl rsync://rpki.apnic.net/member_repository/A91AB85A/185C39B603CD11ECABCE697BC4F9AE02/nZwAihKi96YP7_liJmsFAqHKC6I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nZwAihKi96YP7_liJmsFAqHKC6I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 23:47:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1311 (0x51f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AB85A, serialNumber=9D9C008A12A2F7A60FEFF962266B0502A1CA0BA2 Validity Not Before: May 30 23:47:55 2025 GMT Not After : Jun 6 23:47:55 2025 GMT Subject: CN=683a43ac-c47b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:0d:1f:3a:1c:d8:25:88:c2:bc:fa:6b:32:98: 01:a5:26:21:0b:84:15:6a:82:12:78:72:67:21:f3: ab:ed:b8:87:b5:ca:a0:6e:e2:b1:2d:8d:a9:de:70: f5:7b:80:d3:09:ec:f9:fa:fd:b3:d3:aa:4f:55:1b: 90:7b:9e:94:e3:d9:3d:c3:dd:c6:94:e6:f3:2d:1f: 98:9d:cf:23:f3:6b:5f:a4:16:45:f0:cb:87:c8:a0: 31:40:d7:fc:5c:d3:e0:8d:90:a0:ec:47:b4:e9:7b: 71:d4:26:5c:91:37:9b:40:be:41:49:c5:73:4c:07: 8c:57:7e:52:71:56:6e:0f:fc:57:3f:4a:65:e2:3e: 13:e9:b7:c0:05:b3:6c:43:f2:01:a2:16:f8:3f:0b: b0:a4:8b:ef:c9:37:30:ab:22:b9:41:01:ac:25:f4: 53:04:8d:62:80:6a:d2:5b:cd:18:44:79:31:88:e7: ff:6b:ef:0a:0b:46:6f:d0:3e:12:e0:ab:f2:79:fe: c3:6c:b6:bc:1b:64:94:c0:f8:03:72:79:63:f4:7f: 64:fd:48:e9:6e:47:e1:d6:a1:b7:2a:b7:96:71:b0: 66:6e:26:ef:fa:f7:ab:4d:05:ab:46:af:1c:e0:ba: 69:85:44:b1:27:d7:3a:eb:0d:4a:e4:aa:92:4a:2b: 9d:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:2F:BF:8E:AA:41:BD:52:EB:9E:AA:A8:EB:21:1F:94:AD:FF:41:E9 X509v3 Authority Key Identifier: keyid:9D:9C:00:8A:12:A2:F7:A6:0F:EF:F9:62:26:6B:05:02:A1:CA:0B:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AB85A/185C39B603CD11ECABCE697BC4F9AE02/nZwAihKi96YP7_liJmsFAqHKC6I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nZwAihKi96YP7_liJmsFAqHKC6I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB85A/185C39B603CD11ECABCE697BC4F9AE02/nZwAihKi96YP7_liJmsFAqHKC6I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 23:e6:c8:ec:9a:d2:1f:b5:17:7e:5a:a6:4e:1f:bf:b5:10:98: ef:45:7f:69:39:60:5e:f9:f3:22:be:f4:d1:82:55:0e:2b:a4: 35:19:f3:7c:52:b6:24:98:a5:1d:64:d3:8c:9f:3d:f3:db:4e: 61:7d:6d:62:5d:b9:10:8a:e5:5a:30:e5:6d:ae:36:16:fe:37: 47:a7:7b:14:02:b9:59:f9:a5:75:51:a0:e9:86:29:31:6a:fa: 99:c4:4d:c7:8e:09:0e:c1:86:2c:39:0b:39:e0:db:84:28:fa: 04:2e:5d:ce:a5:22:66:21:7c:b8:ae:f7:fc:47:de:c9:c3:5f: 36:c1:d8:db:32:b6:07:11:d3:0d:ba:32:86:c2:f7:53:4f:3e: 82:6a:a5:cc:ba:0f:c6:01:44:c1:b4:7e:81:08:7e:9d:b0:80: 95:53:24:29:19:64:86:b0:98:4b:15:15:67:5d:6f:35:a3:88: 89:1e:b1:fb:83:ee:3b:d0:ae:39:22:d8:dc:38:dc:ba:e8:51: 34:b8:65:5b:5b:91:bf:62:67:60:b5:d7:2b:92:54:e9:ad:e5: a6:e0:a4:5d:0a:fb:47:a6:6d:f0:be:b3:78:99:a8:21:84:e8: 02:67:c3:e1:19:3c:73:3b:b2:3d:86:5d:a0:ca:cd:be:99:fb: 80:05:79:19 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBR8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUI4NUExMTAvBgNVBAUTKDlEOUMwMDhBMTJBMkY3QTYwRkVGRjk2MjI2NkIwNTAy QTFDQTBCQTIwHhcNMjUwNTMwMjM0NzU1WhcNMjUwNjA2MjM0NzU1WjAYMRYwFAYD VQQDEw02ODNhNDNhYy1jNDdiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4g0fOhzYJYjCvPprMpgBpSYhC4QVaoISeHJnIfOr7biHtcqgbuKxLY2p3nD1 e4DTCez5+v2z06pPVRuQe56U49k9w93GlObzLR+Ync8j82tfpBZF8MuHyKAxQNf8 XNPgjZCg7Ee06Xtx1CZckTebQL5BScVzTAeMV35ScVZuD/xXP0pl4j4T6bfABbNs Q/IBohb4PwuwpIvvyTcwqyK5QQGsJfRTBI1igGrSW80YRHkxiOf/a+8KC0Zv0D4S 4Kvyef7DbLa8G2SUwPgDcnlj9H9k/Ujpbkfh1qG3KreWcbBmbibv+verTQWrRq8c 4LpphUSxJ9c66w1K5KqSSiud4QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIgvv46q Qb1S656qqOshH5St/0HpMB8GA1UdIwQYMBaAFJ2cAIoSovemD+/5YiZrBQKhygui MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQjg1QS8xODVDMzlCNjAz Q0QxMUVDQUJDRTY5N0JDNEY5QUUwMi9uWndBaWhLaTk2WVA3X2xpSm1zRkFxSEtD NkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25ad0FpaEtpOTZZUDdfbGlKbXNGQXFIS0M2SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB Qjg1QS8xODVDMzlCNjAzQ0QxMUVDQUJDRTY5N0JDNEY5QUUwMi9uWndBaWhLaTk2 WVA3X2xpSm1zRkFxSEtDNkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAj5sjsmtIftRd+WqZOH7+1EJjvRX9pOWBe+fMivvTRglUOK6Q1GfN8 UrYkmKUdZNOMnz3z205hfW1iXbkQiuVaMOVtrjYW/jdHp3sUArlZ+aV1UaDphikx avqZxE3HjgkOwYYsOQs54NuEKPoELl3OpSJmIXy4rvf8R97Jw182wdjbMrYHEdMN ujKGwvdTTz6CaqXMug/GAUTBtH6BCH6dsICVUyQpGWSGsJhLFRVnXW81o4iJHrH7 g+470K45ItjcONy66FE0uGVbW5G/YmdgtdcrklTpreWm4KRdCvtHpm3wvrN4magh hOgCZ8PhGTxzO7I9hl2gys2+mfuABXkZ -----END CERTIFICATE-----Generated at Sat May 31 17:10:20 2025 by rpki-client