$ rpki-client -vvf rpki.apnic.net/member_repository/A91C2168/24C62C061D9111E2924430F308B02CD2/nTRubbOcPTMMGv-UBg4VBV_07Rw.mft File: nTRubbOcPTMMGv-UBg4VBV_07Rw.mft (raw, json) Hash identifier: bkLA0uZiK1RoIfe/H3nEMhsi1gRxrhn57pEbzONIh5w= Subject key identifier: DD:27:11:9E:F9:37:AC:58:9B:B3:72:92:18:32:64:D9:17:05:7A:3D Authority key identifier: 9D:34:6E:6D:B3:9C:3D:33:0C:1A:FF:94:06:0E:15:05:5F:F4:ED:1C Certificate issuer: /CN=A91C2168/serialNumber=9D346E6DB39C3D330C1AFF94060E15055FF4ED1C Certificate serial: 34A9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nTRubbOcPTMMGv-UBg4VBV_07Rw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C2168/24C62C061D9111E2924430F308B02CD2/nTRubbOcPTMMGv-UBg4VBV_07Rw.mft Manifest number: 349B Signing time: Sat 31 May 2025 14:41:45 +0000 Manifest this update: Sat 31 May 2025 14:41:45 +0000 Manifest next update: Sat 07 Jun 2025 14:41:45 +0000 Files and hashes: 1: nTRubbOcPTMMGv-UBg4VBV_07Rw.crl (hash: TnL9g3fQCoFRLh+PyMcKlcMWppXefaKe01+t4OZ9m+w=) 2: 2251B910AC7411EBBE196180C4F9AE02.roa (hash: 0oRyzqVuAdePO5EPsN2BuW/GIZU57nKR40ge4zIrFQo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C2168/24C62C061D9111E2924430F308B02CD2/nTRubbOcPTMMGv-UBg4VBV_07Rw.crl rsync://rpki.apnic.net/member_repository/A91C2168/24C62C061D9111E2924430F308B02CD2/nTRubbOcPTMMGv-UBg4VBV_07Rw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nTRubbOcPTMMGv-UBg4VBV_07Rw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 14:18:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13481 (0x34a9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C2168, serialNumber=9D346E6DB39C3D330C1AFF94060E15055FF4ED1C Validity Not Before: May 31 14:41:45 2025 GMT Not After : Jun 7 14:41:45 2025 GMT Subject: CN=683b1529-98a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:22:98:76:bb:f5:bb:d1:38:69:de:e0:88:ad: f2:72:58:eb:1e:66:30:5c:55:af:d8:d6:b5:4f:2e: 9f:49:59:e6:b0:61:71:7a:61:9b:52:f7:ee:7e:16: 2e:f1:39:04:f0:3c:db:8f:19:04:ca:33:cf:0f:e1: c4:43:bc:e7:e3:a5:1f:67:b2:82:ae:d3:d0:96:a6: f5:f6:05:8e:37:48:d9:2c:6e:40:28:63:29:2a:ba: e6:fd:5c:89:f0:09:b9:4f:2d:ee:7b:e3:39:29:83: 7c:7e:3d:1b:49:3f:4c:0f:dc:a3:d1:f7:7c:07:ea: 86:95:33:75:1b:cc:cc:74:48:15:9c:71:d3:18:ea: 8f:70:0f:b1:0a:ea:b6:3b:a1:20:5f:93:c7:21:43: 7a:51:fa:eb:a1:69:6f:f7:2a:5e:ce:15:ea:9b:aa: b5:13:a8:7f:26:f4:2b:d1:36:aa:07:79:9a:60:37: 27:e7:b0:ec:24:bd:eb:52:a3:92:11:0d:46:89:a5: b4:03:2d:a5:28:95:76:d6:62:8b:cf:3b:46:a2:e2: 17:c4:6e:5b:81:63:33:1e:3a:c2:00:ba:51:56:d7: 23:6c:96:26:4f:04:b8:c5:5d:e4:33:df:fd:8c:53: 97:69:55:66:31:57:e4:7c:6f:03:6b:ca:09:b9:f7: 26:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:27:11:9E:F9:37:AC:58:9B:B3:72:92:18:32:64:D9:17:05:7A:3D X509v3 Authority Key Identifier: keyid:9D:34:6E:6D:B3:9C:3D:33:0C:1A:FF:94:06:0E:15:05:5F:F4:ED:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C2168/24C62C061D9111E2924430F308B02CD2/nTRubbOcPTMMGv-UBg4VBV_07Rw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nTRubbOcPTMMGv-UBg4VBV_07Rw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C2168/24C62C061D9111E2924430F308B02CD2/nTRubbOcPTMMGv-UBg4VBV_07Rw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b1:11:da:70:6b:03:02:9b:46:f6:cc:77:74:48:64:10:e0:78: 91:0c:c9:dc:1a:7d:13:29:ae:d3:44:69:c4:79:34:69:3e:e1: 98:bf:7b:60:7d:c4:91:a6:16:e7:40:35:1e:68:f8:25:36:76: 8e:d9:25:58:03:4f:a7:ea:64:a2:94:2a:fe:a9:96:1d:41:5c: ae:48:b2:79:79:75:98:48:30:3d:5e:58:c5:f2:5e:95:69:db: f3:53:c7:34:19:a9:1e:fb:b6:d2:cb:b2:f4:e7:55:d8:17:5f: 52:d2:4c:4c:cd:1d:96:a6:64:98:5a:b2:4e:aa:29:6c:6d:97: 8b:15:b6:89:3a:22:05:2d:91:c3:5b:6b:ec:07:d6:ca:08:15: 5b:46:93:2b:18:f1:70:65:f7:a7:0e:79:7f:f3:cb:e6:c0:19: 5c:6d:4e:77:f1:a5:94:87:b5:2c:9a:4f:3b:b1:0e:56:26:de: 62:d1:73:a3:75:ea:6c:22:e5:12:23:66:96:dd:af:3d:e5:e9: 76:14:8b:ed:f4:42:4e:9b:5d:17:89:03:3f:1f:7c:ee:05:ad: d7:6f:c4:5d:ef:be:55:c8:9d:3e:58:a7:be:37:f8:70:87:12: 5c:b1:e4:b7:0d:a5:83:77:fe:30:a7:6a:30:27:e2:d8:4e:a6: 65:4d:be:28 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNKkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzIxNjgxMTAvBgNVBAUTKDlEMzQ2RTZEQjM5QzNEMzMwQzFBRkY5NDA2MEUxNTA1 NUZGNEVEMUMwHhcNMjUwNTMxMTQ0MTQ1WhcNMjUwNjA3MTQ0MTQ1WjAYMRYwFAYD VQQDEw02ODNiMTUyOS05OGExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlSKYdrv1u9E4ad7giK3ycljrHmYwXFWv2Na1Ty6fSVnmsGFxemGbUvfufhYu 8TkE8DzbjxkEyjPPD+HEQ7zn46UfZ7KCrtPQlqb19gWON0jZLG5AKGMpKrrm/VyJ 8Am5Ty3ue+M5KYN8fj0bST9MD9yj0fd8B+qGlTN1G8zMdEgVnHHTGOqPcA+xCuq2 O6EgX5PHIUN6UfrroWlv9ypezhXqm6q1E6h/JvQr0TaqB3maYDcn57DsJL3rUqOS EQ1GiaW0Ay2lKJV21mKLzztGouIXxG5bgWMzHjrCALpRVtcjbJYmTwS4xV3kM9/9 jFOXaVVmMVfkfG8Da8oJufcmMwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN0nEZ75 N6xYm7NykhgyZNkXBXo9MB8GA1UdIwQYMBaAFJ00bm2znD0zDBr/lAYOFQVf9O0c MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMjE2OC8yNEM2MkMwNjFE OTExMUUyOTI0NDMwRjMwOEIwMkNEMi9uVFJ1YmJPY1BUTU1Hdi1VQmc0VkJWXzA3 UncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25UUnViYk9jUFRNTUd2LVVCZzRWQlZfMDdSdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MjE2OC8yNEM2MkMwNjFEOTExMUUyOTI0NDMwRjMwOEIwMkNEMi9uVFJ1YmJPY1BU TU1Hdi1VQmc0VkJWXzA3UncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCxEdpwawMCm0b2zHd0SGQQ4HiRDMncGn0TKa7TRGnEeTRpPuGYv3tg fcSRphbnQDUeaPglNnaO2SVYA0+n6mSilCr+qZYdQVyuSLJ5eXWYSDA9XljF8l6V advzU8c0Gake+7bSy7L051XYF19S0kxMzR2WpmSYWrJOqilsbZeLFbaJOiIFLZHD W2vsB9bKCBVbRpMrGPFwZfenDnl/88vmwBlcbU538aWUh7Usmk87sQ5WJt5i0XOj depsIuUSI2aW3a895el2FIvt9EJOm10XiQM/H3zuBa3Xb8Rd775VyJ0+WKe+N/hw hxJcseS3DaWDd/4wp2owJ+LYTqZlTb4o -----END CERTIFICATE-----Generated at Sat May 31 16:45:51 2025 by rpki-client