$ rpki-client -vvf rpki.apnic.net/member_repository/A91AE8D7/54666B3CF93F11EFB7EAB425C4F9AE02/nnH7cbZwDEBFpcNAwY8TDwhgqjk.mft File: nnH7cbZwDEBFpcNAwY8TDwhgqjk.mft (raw, json) Hash identifier: jvz52pZMQLjDCbrwSeUMvdc2As+YEpvIraqAdUJaxLo= Subject key identifier: 1C:50:DD:38:65:0F:48:52:F0:2D:F6:4D:83:87:51:91:29:D6:E3:80 Authority key identifier: 9E:71:FB:71:B6:70:0C:40:45:A5:C3:40:C1:8F:13:0F:08:60:AA:39 Certificate issuer: /CN=A91AE8D7/serialNumber=9E71FB71B6700C4045A5C340C18F130F0860AA39 Certificate serial: 32 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nnH7cbZwDEBFpcNAwY8TDwhgqjk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AE8D7/54666B3CF93F11EFB7EAB425C4F9AE02/nnH7cbZwDEBFpcNAwY8TDwhgqjk.mft Manifest number: 32 Signing time: Mon 09 Jun 2025 06:34:15 +0000 Manifest this update: Mon 09 Jun 2025 06:34:15 +0000 Manifest next update: Mon 16 Jun 2025 06:34:15 +0000 Files and hashes: 1: nnH7cbZwDEBFpcNAwY8TDwhgqjk.crl (hash: 4uIu8h8emF53S4hecfc9s4v8sNKbZ0KWNOt3vLJKQcI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AE8D7/54666B3CF93F11EFB7EAB425C4F9AE02/nnH7cbZwDEBFpcNAwY8TDwhgqjk.crl rsync://rpki.apnic.net/member_repository/A91AE8D7/54666B3CF93F11EFB7EAB425C4F9AE02/nnH7cbZwDEBFpcNAwY8TDwhgqjk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nnH7cbZwDEBFpcNAwY8TDwhgqjk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 16 Jun 2025 06:34:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50 (0x32) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AE8D7, serialNumber=9E71FB71B6700C4045A5C340C18F130F0860AA39 Validity Not Before: Jun 9 06:34:15 2025 GMT Not After : Jun 16 06:34:15 2025 GMT Subject: CN=68468067-dfc9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:e4:48:95:84:5f:f4:58:03:21:ca:19:b4:1a: 9e:51:29:f6:39:be:d9:91:51:7e:75:21:38:59:f0: dc:10:47:38:cb:c7:f5:d5:0b:64:0e:71:de:eb:c3: 34:82:22:29:b7:c4:30:04:d2:87:51:17:7d:86:f7: 56:1e:87:b5:31:f1:d9:ca:7b:a5:e1:9d:5f:b9:58: 37:e8:a2:1d:d9:fa:f3:a8:86:86:3a:9b:f0:e2:8c: 63:66:0a:29:e5:f2:51:b6:3b:29:08:e8:22:cd:3f: a5:0e:f0:1a:0d:e9:80:4c:51:66:11:a9:dd:84:1c: 4e:c0:f2:00:4a:9b:fe:1b:fe:85:7c:34:a7:2c:c3: 7c:f6:68:47:63:9d:9c:ae:fb:6f:7e:9e:54:69:ec: a7:a3:ff:80:6c:e5:5b:2c:87:21:f8:da:b9:8b:52: 79:98:99:d4:0f:74:c1:9e:2c:b2:61:4b:02:9a:d1: 65:9e:a6:dc:d0:41:b3:1c:39:74:1f:2f:c6:50:6b: 5f:56:5a:19:38:4f:0b:6a:b7:10:0e:90:b9:64:54: 35:71:08:65:83:2f:da:2b:ae:93:96:e7:ba:90:eb: 33:70:90:07:50:b5:7c:7e:5d:6d:c9:e6:cd:23:99: 29:da:74:50:bc:f7:1c:dd:dc:5b:43:83:ef:9b:27: 43:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:50:DD:38:65:0F:48:52:F0:2D:F6:4D:83:87:51:91:29:D6:E3:80 X509v3 Authority Key Identifier: keyid:9E:71:FB:71:B6:70:0C:40:45:A5:C3:40:C1:8F:13:0F:08:60:AA:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AE8D7/54666B3CF93F11EFB7EAB425C4F9AE02/nnH7cbZwDEBFpcNAwY8TDwhgqjk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nnH7cbZwDEBFpcNAwY8TDwhgqjk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AE8D7/54666B3CF93F11EFB7EAB425C4F9AE02/nnH7cbZwDEBFpcNAwY8TDwhgqjk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ae:86:f6:4e:27:c4:df:8f:f2:29:57:18:da:a6:2a:3a:a5:08: c1:4e:fe:97:17:2b:be:14:1f:e7:e5:02:84:b8:30:3f:03:fb: 6a:4f:40:55:8a:a1:49:66:d8:c6:c9:dd:93:05:44:06:19:3c: 9c:d8:7e:68:f0:d2:21:01:ea:60:bb:3e:1a:c7:9c:3a:8f:bb: e4:d8:8c:0d:53:6b:a0:0a:66:aa:1b:7a:43:2f:4f:c4:0b:24: cb:5a:22:ed:83:6d:2f:29:c9:25:8d:25:6b:88:67:ae:d1:2e: 24:7d:3e:3d:33:dd:12:1d:36:0a:2b:55:88:99:95:7b:9d:c0: 39:84:18:13:19:44:b7:22:e4:43:04:33:f0:f0:c7:29:49:ae: 6a:0d:00:3d:ca:3c:84:ae:f6:70:d5:64:0c:89:80:dd:14:77: 4f:e4:bb:e2:b3:ad:69:d4:e3:3f:be:a9:e2:db:4a:6a:5a:48: e1:11:bc:e4:87:78:6b:64:93:86:91:be:69:77:9c:f6:b2:9c: 6a:2c:1a:4c:94:4a:db:3c:ad:b0:05:8b:26:5c:52:d9:6b:fa: 70:20:5c:7e:ee:84:69:d1:a8:28:c2:8a:21:69:91:11:7a:fc: ad:b2:b8:9f:b3:d8:7f:bf:2f:4f:c0:42:f1:d6:80:aa:46:ca: cd:a9:6c:b7 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBMjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB RThENzExMC8GA1UEBRMoOUU3MUZCNzFCNjcwMEM0MDQ1QTVDMzQwQzE4RjEzMEYw ODYwQUEzOTAeFw0yNTA2MDkwNjM0MTVaFw0yNTA2MTYwNjM0MTVaMBgxFjAUBgNV BAMTDTY4NDY4MDY3LWRmYzkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDL5EiVhF/0WAMhyhm0Gp5RKfY5vtmRUX51IThZ8NwQRzjLx/XVC2QOcd7rwzSC Iim3xDAE0odRF32G91Yeh7Ux8dnKe6XhnV+5WDfooh3Z+vOohoY6m/DijGNmCinl 8lG2OykI6CLNP6UO8BoN6YBMUWYRqd2EHE7A8gBKm/4b/oV8NKcsw3z2aEdjnZyu +29+nlRp7Kej/4Bs5VsshyH42rmLUnmYmdQPdMGeLLJhSwKa0WWeptzQQbMcOXQf L8ZQa19WWhk4TwtqtxAOkLlkVDVxCGWDL9orrpOW57qQ6zNwkAdQtXx+XW3J5s0j mSnadFC89xzd3FtDg++bJ0PZAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUHFDdOGUP SFLwLfZNg4dRkSnW44AwHwYDVR0jBBgwFoAUnnH7cbZwDEBFpcNAwY8TDwhgqjkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUFFOEQ3LzU0NjY2QjNDRjkz RjExRUZCN0VBQjQyNUM0RjlBRTAyL25uSDdjYlp3REVCRnBjTkF3WThURHdoZ3Fq ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvbm5IN2NiWndERUJGcGNOQXdZOFREd2hncWprLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUFF OEQ3LzU0NjY2QjNDRjkzRjExRUZCN0VBQjQyNUM0RjlBRTAyL25uSDdjYlp3REVC RnBjTkF3WThURHdoZ3Fqay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAK6G9k4nxN+P8ilXGNqmKjqlCMFO/pcXK74UH+flAoS4MD8D+2pPQFWK oUlm2MbJ3ZMFRAYZPJzYfmjw0iEB6mC7PhrHnDqPu+TYjA1Ta6AKZqobekMvT8QL JMtaIu2DbS8pySWNJWuIZ67RLiR9Pj0z3RIdNgorVYiZlXudwDmEGBMZRLci5EME M/DwxylJrmoNAD3KPISu9nDVZAyJgN0Ud0/ku+KzrWnU4z++qeLbSmpaSOERvOSH eGtkk4aRvml3nPaynGosGkyUSts8rbAFiyZcUtlr+nAgXH7uhGnRqCjCiiFpkRF6 /K2yuJ+z2H+/L0/AQvHWgKpGys2pbLc= -----END CERTIFICATE-----Generated at Mon Jun 9 20:18:05 2025 by rpki-client