$ rpki-client -vvf rpki.apnic.net/member_repository/A91C1710/18229A86826B11ECA11BA52BC4F9AE02/NPs4YMs0-seCIJnB-5kfzfY8hs0.mft File: NPs4YMs0-seCIJnB-5kfzfY8hs0.mft (raw, json) Hash identifier: glnOmNinp2t7rkyx7fOzl38mwZzFO3RuI/bP+1qZhiA= Subject key identifier: 20:07:F1:B9:D9:73:14:49:A0:87:8A:2D:CE:C8:75:4F:6C:64:D0:25 Authority key identifier: 34:FB:38:60:CB:34:FA:C7:82:20:99:C1:FB:99:1F:CD:F6:3C:86:CD Certificate issuer: /CN=A91C1710/serialNumber=34FB3860CB34FAC7822099C1FB991FCDF63C86CD Certificate serial: 03E8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NPs4YMs0-seCIJnB-5kfzfY8hs0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C1710/18229A86826B11ECA11BA52BC4F9AE02/NPs4YMs0-seCIJnB-5kfzfY8hs0.mft Manifest number: 073A Signing time: Tue 03 Jun 2025 00:47:58 +0000 Manifest this update: Tue 03 Jun 2025 00:47:57 +0000 Manifest next update: Tue 10 Jun 2025 00:47:57 +0000 Files and hashes: 1: NPs4YMs0-seCIJnB-5kfzfY8hs0.crl (hash: eA+1cmpJVTg5Jqdy06IOxCMVmO3AxECjfDgI4faa4RA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C1710/18229A86826B11ECA11BA52BC4F9AE02/NPs4YMs0-seCIJnB-5kfzfY8hs0.crl rsync://rpki.apnic.net/member_repository/A91C1710/18229A86826B11ECA11BA52BC4F9AE02/NPs4YMs0-seCIJnB-5kfzfY8hs0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NPs4YMs0-seCIJnB-5kfzfY8hs0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Jun 2025 00:47:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1000 (0x3e8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C1710, serialNumber=34FB3860CB34FAC7822099C1FB991FCDF63C86CD Validity Not Before: Jun 3 00:47:57 2025 GMT Not After : Jun 10 00:47:57 2025 GMT Subject: CN=683e463d-b1c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:15:bb:df:48:33:7a:4d:a4:1b:2d:d3:f0:32: c0:90:04:75:16:ad:f4:2e:ad:08:27:5b:15:e3:39: 71:0b:1c:a2:de:8a:d8:0b:8f:cb:8f:9c:8d:2e:e2: 1c:b4:8a:9c:0c:3f:fd:2f:22:28:55:2d:b8:c3:5a: 4b:b9:8c:90:75:da:a0:53:7e:2b:b3:10:e5:d2:56: 95:07:cf:ef:aa:78:cb:cf:12:d9:ce:b9:10:3c:6b: 6a:23:39:6c:bc:3c:0c:a8:06:a4:9f:e9:1e:d1:5a: fa:96:cb:7c:9c:a2:a8:6a:1e:2a:a2:c2:26:a3:d5: 5c:bb:fd:e9:dd:a6:a9:63:50:2f:31:8a:1c:78:bf: a2:25:13:c4:b0:2c:35:97:54:cd:09:4c:e6:26:6e: f7:a8:54:9d:b5:b6:98:87:02:10:a2:a6:a9:2a:cd: 8c:90:70:ea:1c:f1:e9:10:26:c5:ba:c3:1b:a1:fe: dc:1a:83:02:57:14:82:e3:23:08:bf:e6:48:cb:4e: 23:b4:9b:9a:3b:11:3f:c9:7a:db:e7:43:e0:b9:f1: 15:f3:01:78:8d:8a:6b:41:6a:23:f0:11:9e:ac:7a: c8:76:19:3e:d3:33:e9:05:67:f4:34:f8:53:83:63: b8:89:33:06:23:91:67:37:e4:e6:03:69:92:e0:c9: f7:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:07:F1:B9:D9:73:14:49:A0:87:8A:2D:CE:C8:75:4F:6C:64:D0:25 X509v3 Authority Key Identifier: keyid:34:FB:38:60:CB:34:FA:C7:82:20:99:C1:FB:99:1F:CD:F6:3C:86:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C1710/18229A86826B11ECA11BA52BC4F9AE02/NPs4YMs0-seCIJnB-5kfzfY8hs0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NPs4YMs0-seCIJnB-5kfzfY8hs0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C1710/18229A86826B11ECA11BA52BC4F9AE02/NPs4YMs0-seCIJnB-5kfzfY8hs0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7c:d9:4b:6c:c7:81:3c:7e:3c:a7:30:12:eb:bc:df:86:98:ce: 64:76:c5:80:e2:ad:f6:46:cf:1c:e6:d3:bc:fe:78:60:4b:d0: a7:12:57:f8:83:4d:89:31:b6:cb:5f:3f:1c:9b:12:06:e6:18: 4f:d8:63:20:c1:7f:33:9a:df:aa:48:94:93:92:3b:8e:e2:2a: 12:af:c7:59:2e:a9:0f:6b:ac:13:1c:5d:b9:6e:e5:26:59:e7: 55:2c:84:00:0c:86:bf:8e:e1:93:94:70:30:c7:82:43:0f:72: d3:e2:92:93:1e:ab:9a:6b:59:43:60:75:78:46:ac:f5:fe:c1: 3d:7f:84:be:44:73:37:ca:c8:df:2f:44:7f:51:fc:a2:4f:8d: 2a:1b:8c:35:c0:b8:ac:89:a2:3e:c8:10:6b:ac:65:a4:13:8e: d3:0d:18:a0:b6:3a:06:e8:8b:7c:dc:bb:40:37:5e:c0:9a:fc: 08:b3:c5:5a:2b:c5:5d:f8:3c:76:d6:c2:82:97:63:e7:71:a8: 0a:ca:76:51:aa:7b:cb:3b:63:b8:da:36:1f:9f:31:22:87:2c: 4a:2f:3f:3c:b1:63:f9:ae:a2:8f:f5:95:c4:5a:1b:cf:6a:16: 9c:e3:b1:39:a3:69:9b:aa:9d:d0:e1:25:fc:85:99:ec:0c:47: 7a:eb:16:51 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA+gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzE3MTAxMTAvBgNVBAUTKDM0RkIzODYwQ0IzNEZBQzc4MjIwOTlDMUZCOTkxRkNE RjYzQzg2Q0QwHhcNMjUwNjAzMDA0NzU3WhcNMjUwNjEwMDA0NzU3WjAYMRYwFAYD VQQDEw02ODNlNDYzZC1iMWM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1RW730gzek2kGy3T8DLAkAR1Fq30Lq0IJ1sV4zlxCxyi3orYC4/Lj5yNLuIc tIqcDD/9LyIoVS24w1pLuYyQddqgU34rsxDl0laVB8/vqnjLzxLZzrkQPGtqIzls vDwMqAakn+ke0Vr6lst8nKKoah4qosImo9Vcu/3p3aapY1AvMYoceL+iJRPEsCw1 l1TNCUzmJm73qFSdtbaYhwIQoqapKs2MkHDqHPHpECbFusMbof7cGoMCVxSC4yMI v+ZIy04jtJuaOxE/yXrb50PgufEV8wF4jYprQWoj8BGerHrIdhk+0zPpBWf0NPhT g2O4iTMGI5FnN+TmA2mS4Mn3nQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCAH8bnZ cxRJoIeKLc7IdU9sZNAlMB8GA1UdIwQYMBaAFDT7OGDLNPrHgiCZwfuZH832PIbN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMTcxMC8xODIyOUE4Njgy NkIxMUVDQTExQkE1MkJDNEY5QUUwMi9OUHM0WU1zMC1zZUNJSm5CLTVrZnpmWTho czAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05QczRZTXMwLXNlQ0lKbkItNWtmemZZOGhzMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MTcxMC8xODIyOUE4NjgyNkIxMUVDQTExQkE1MkJDNEY5QUUwMi9OUHM0WU1zMC1z ZUNJSm5CLTVrZnpmWThoczAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB82Utsx4E8fjynMBLrvN+GmM5kdsWA4q32Rs8c5tO8/nhgS9CnElf4 g02JMbbLXz8cmxIG5hhP2GMgwX8zmt+qSJSTkjuO4ioSr8dZLqkPa6wTHF25buUm WedVLIQADIa/juGTlHAwx4JDD3LT4pKTHquaa1lDYHV4Rqz1/sE9f4S+RHM3ysjf L0R/UfyiT40qG4w1wLisiaI+yBBrrGWkE47TDRigtjoG6It83LtAN17AmvwIs8Va K8Vd+Dx21sKCl2PncagKynZRqnvLO2O42jYfnzEihyxKLz88sWP5rqKP9ZXEWhvP ahac47E5o2mbqp3Q4SX8hZnsDEd66xZR -----END CERTIFICATE-----Generated at Tue Jun 3 23:34:43 2025 by rpki-client