$ rpki-client -vvf rpki.apnic.net/member_repository/A91B190F/BFA96FAA7BEC11EF999FBC19C4F9AE02/nGj0A_AkAXvdJtbdDSAnpAK58oE.mft File: nGj0A_AkAXvdJtbdDSAnpAK58oE.mft (raw, json) Hash identifier: ubfh8scy0o80bI2LPySiPPp2D+4A4D9/Ip12Rs4aYjI= Subject key identifier: 38:C8:8F:FA:40:5D:1F:DE:78:CA:F4:DC:41:A5:73:BC:5F:32:6B:C9 Authority key identifier: 9C:68:F4:03:F0:24:01:7B:DD:26:D6:DD:0D:20:27:A4:02:B9:F2:81 Certificate issuer: /CN=A91B190F/serialNumber=9C68F403F024017BDD26D6DD0D2027A402B9F281 Certificate serial: 81 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nGj0A_AkAXvdJtbdDSAnpAK58oE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B190F/BFA96FAA7BEC11EF999FBC19C4F9AE02/nGj0A_AkAXvdJtbdDSAnpAK58oE.mft Manifest number: 80 Signing time: Sun 01 Jun 2025 06:21:33 +0000 Manifest this update: Sun 01 Jun 2025 06:21:33 +0000 Manifest next update: Sun 08 Jun 2025 06:21:33 +0000 Files and hashes: 1: nGj0A_AkAXvdJtbdDSAnpAK58oE.crl (hash: AmyU2cPzyYLGCamWgMbtfZx6Pco2U+9t30SivB7kyuo=) 2: 262A51D67BED11EF9BAF751AC4F9AE02.roa (hash: Se4X5BCi6S9clBdJBFWLU+YP4g35YhqfcEGf60R+i8s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B190F/BFA96FAA7BEC11EF999FBC19C4F9AE02/nGj0A_AkAXvdJtbdDSAnpAK58oE.crl rsync://rpki.apnic.net/member_repository/A91B190F/BFA96FAA7BEC11EF999FBC19C4F9AE02/nGj0A_AkAXvdJtbdDSAnpAK58oE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nGj0A_AkAXvdJtbdDSAnpAK58oE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Jun 2025 06:21:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 129 (0x81) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B190F, serialNumber=9C68F403F024017BDD26D6DD0D2027A402B9F281 Validity Not Before: Jun 1 06:21:33 2025 GMT Not After : Jun 8 06:21:33 2025 GMT Subject: CN=683bf16d-c1b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:0c:c3:5c:1f:97:fb:75:52:29:24:8e:9e:65: dd:3a:d4:1e:b7:78:3f:c3:80:4a:aa:24:f7:18:e1: 2b:17:00:af:2a:41:cd:1d:c0:a8:9f:9b:09:ea:05: 7e:5b:01:3c:ab:f0:50:eb:b5:65:99:e0:a9:85:bc: 3c:ac:c2:a5:3e:4f:be:45:d9:c4:a0:74:c4:cb:85: 9c:bc:65:8a:e5:51:36:58:55:a7:10:fb:03:74:89: 9f:42:28:ee:6d:c5:97:64:24:2a:b7:5c:56:99:e8: 40:db:04:43:d5:fc:05:78:5c:12:d6:87:78:6a:da: 8c:2e:ca:9e:ca:19:24:88:b7:be:e7:c1:dd:11:c7: 2e:09:12:50:89:f6:f6:5e:3b:fc:5d:c0:4a:12:6b: e7:c3:4d:2e:52:4b:bd:ed:bd:ac:d6:82:51:20:d8: ee:22:5c:e9:b4:62:91:94:13:b4:34:26:42:c6:1f: 72:ce:7d:e0:ec:d7:35:9f:ed:37:12:f2:3d:3f:4c: 19:ae:ac:c9:73:4c:40:2e:21:59:5c:91:e5:2c:ee: 3b:02:3b:43:d9:5d:8c:65:c4:6b:73:5e:4d:ce:ff: 8b:bb:39:5e:5b:1c:fd:80:26:27:f1:64:fc:f6:b5: 07:8b:d3:dd:db:6a:a3:9b:a8:93:ce:bc:b1:9c:67: 20:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:C8:8F:FA:40:5D:1F:DE:78:CA:F4:DC:41:A5:73:BC:5F:32:6B:C9 X509v3 Authority Key Identifier: keyid:9C:68:F4:03:F0:24:01:7B:DD:26:D6:DD:0D:20:27:A4:02:B9:F2:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B190F/BFA96FAA7BEC11EF999FBC19C4F9AE02/nGj0A_AkAXvdJtbdDSAnpAK58oE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nGj0A_AkAXvdJtbdDSAnpAK58oE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B190F/BFA96FAA7BEC11EF999FBC19C4F9AE02/nGj0A_AkAXvdJtbdDSAnpAK58oE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 46:22:a7:eb:91:bb:df:e4:8f:4a:59:dd:91:75:d4:7f:db:7c: 85:54:61:06:16:d7:22:18:dd:b8:5b:24:5f:ac:9e:b6:9f:f7: b5:e4:e2:85:51:57:d0:12:b5:e2:1a:71:58:6e:fc:78:0a:17: ff:95:4a:78:6d:de:4a:66:0f:96:05:1f:a5:9e:ef:9e:4d:e9: f4:3f:8b:1a:73:dc:3d:b4:df:86:d3:cf:ba:7c:a5:2f:49:df: 37:9d:cd:a9:24:73:1b:3f:f9:52:84:89:f6:08:c6:0f:e4:3e: 53:cc:35:f8:de:98:85:f7:76:94:70:d8:f7:f3:53:01:1a:c9: 4e:01:22:1c:58:a1:f3:3d:0e:16:ea:e8:23:10:b6:a0:ff:b1: f2:91:c3:8a:dc:f1:0b:6c:4f:90:2d:43:2d:a8:5e:86:02:61: 2d:4c:8d:9f:a5:80:68:57:e3:5e:53:41:fe:8b:91:5a:2a:ab: 3b:da:51:dd:09:dd:a8:ec:4a:1e:6b:a2:80:fa:3c:ee:29:7b: 33:8d:f8:0a:cc:d7:96:fc:19:ff:d0:5e:d8:8d:e6:0d:49:8f: 46:e1:50:1b:4e:65:62:e1:1f:f3:92:7b:76:fa:6e:30:e0:64: e2:79:f4:74:c2:f7:80:6c:58:8c:3a:c2:a1:ff:ec:33:aa:c3: a2:60:e8:dd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjE5MEYxMTAvBgNVBAUTKDlDNjhGNDAzRjAyNDAxN0JERDI2RDZERDBEMjAyN0E0 MDJCOUYyODEwHhcNMjUwNjAxMDYyMTMzWhcNMjUwNjA4MDYyMTMzWjAYMRYwFAYD VQQDEw02ODNiZjE2ZC1jMWI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1wzDXB+X+3VSKSSOnmXdOtQet3g/w4BKqiT3GOErFwCvKkHNHcCon5sJ6gV+ WwE8q/BQ67VlmeCphbw8rMKlPk++RdnEoHTEy4WcvGWK5VE2WFWnEPsDdImfQiju bcWXZCQqt1xWmehA2wRD1fwFeFwS1od4atqMLsqeyhkkiLe+58HdEccuCRJQifb2 Xjv8XcBKEmvnw00uUku97b2s1oJRINjuIlzptGKRlBO0NCZCxh9yzn3g7Nc1n+03 EvI9P0wZrqzJc0xALiFZXJHlLO47AjtD2V2MZcRrc15Nzv+LuzleWxz9gCYn8WT8 9rUHi9Pd22qjm6iTzryxnGcgnwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDjIj/pA XR/eeMr03EGlc7xfMmvJMB8GA1UdIwQYMBaAFJxo9APwJAF73SbW3Q0gJ6QCufKB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMTkwRi9CRkE5NkZBQTdC RUMxMUVGOTk5RkJDMTlDNEY5QUUwMi9uR2owQV9Ba0FYdmRKdGJkRFNBbnBBSzU4 b0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL25HajBBX0FrQVh2ZEp0YmREU0FucEFLNThvRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MTkwRi9CRkE5NkZBQTdCRUMxMUVGOTk5RkJDMTlDNEY5QUUwMi9uR2owQV9Ba0FY dmRKdGJkRFNBbnBBSzU4b0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBGIqfrkbvf5I9KWd2RddR/23yFVGEGFtciGN24WyRfrJ62n/e15OKF UVfQErXiGnFYbvx4Chf/lUp4bd5KZg+WBR+lnu+eTen0P4sac9w9tN+G08+6fKUv Sd83nc2pJHMbP/lShIn2CMYP5D5TzDX43piF93aUcNj381MBGslOASIcWKHzPQ4W 6ugjELag/7HykcOK3PELbE+QLUMtqF6GAmEtTI2fpYBoV+NeU0H+i5FaKqs72lHd Cd2o7Eoea6KA+jzuKXszjfgKzNeW/Bn/0F7YjeYNSY9G4VAbTmVi4R/zknt2+m4w 4GTiefR0wveAbFiMOsKh/+wzqsOiYOjd -----END CERTIFICATE-----Generated at Mon Jun 2 20:15:17 2025 by rpki-client