$ rpki-client -vvf rpki.apnic.net/member_repository/A91C2913/8B43B736FE4911EFA735AD6FC4F9AE02/MN_NyJLnPuJUZCgnQuKcVn6jzgM.mft File: MN_NyJLnPuJUZCgnQuKcVn6jzgM.mft (raw, json) Hash identifier: whyEwUyjlSpVYoHWlCSCWYueR2RZ0dAOi8dJEP74Foc= Subject key identifier: 8D:0D:D6:B5:BB:99:FC:6B:8A:C0:65:A1:78:AA:B6:66:E8:0E:34:74 Authority key identifier: 30:DF:CD:C8:92:E7:3E:E2:54:64:28:27:42:E2:9C:56:7E:A3:CE:03 Certificate issuer: /CN=A91C2913/serialNumber=30DFCDC892E73EE25464282742E29C567EA3CE03 Certificate serial: 2E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MN_NyJLnPuJUZCgnQuKcVn6jzgM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C2913/8B43B736FE4911EFA735AD6FC4F9AE02/MN_NyJLnPuJUZCgnQuKcVn6jzgM.mft Manifest number: 2C Signing time: Sat 31 May 2025 07:19:17 +0000 Manifest this update: Sat 31 May 2025 07:19:17 +0000 Manifest next update: Sat 07 Jun 2025 07:19:17 +0000 Files and hashes: 1: MN_NyJLnPuJUZCgnQuKcVn6jzgM.crl (hash: vv7ljL+m4HpTaK21Bp+mql73CTpVnu1t+eHFHNqf05Q=) 2: 7273BDA4FE4A11EF8A0EDD73C4F9AE02.roa (hash: aKDX+epsv+87CublFWvfDFPYgSLhuAtHebX+rfx7L+w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C2913/8B43B736FE4911EFA735AD6FC4F9AE02/MN_NyJLnPuJUZCgnQuKcVn6jzgM.crl rsync://rpki.apnic.net/member_repository/A91C2913/8B43B736FE4911EFA735AD6FC4F9AE02/MN_NyJLnPuJUZCgnQuKcVn6jzgM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MN_NyJLnPuJUZCgnQuKcVn6jzgM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 07:19:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46 (0x2e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C2913, serialNumber=30DFCDC892E73EE25464282742E29C567EA3CE03 Validity Not Before: May 31 07:19:17 2025 GMT Not After : Jun 7 07:19:17 2025 GMT Subject: CN=683aad75-8f1c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:25:c9:00:aa:53:7a:c3:9e:d0:c3:72:da:7c: 9e:d5:7c:56:91:75:16:d8:72:99:1b:4e:09:2e:9d: f4:1a:7a:ec:a2:28:98:43:9e:d5:26:50:74:1d:bf: 7e:64:b7:06:e7:f5:cc:21:44:ec:60:78:af:50:0e: df:18:8d:c5:9b:f0:63:0e:95:b0:2f:9f:89:87:3a: ff:25:8c:91:30:fd:67:a1:b9:7b:69:fc:9f:5c:6e: fd:ed:a9:db:20:7a:17:14:a1:2f:1d:41:94:8f:8a: db:c6:88:94:e2:6c:be:b7:6c:d4:28:27:2a:4e:58: 13:7e:1e:ca:a6:f4:3e:83:08:fd:22:e4:9f:db:7d: a5:7d:c9:0c:4f:fb:53:11:d7:a6:1a:cc:a4:d7:24: a1:c6:3c:fa:d4:8f:7f:39:f8:9d:88:80:10:fd:4c: d3:77:54:00:66:77:85:49:35:ec:58:18:12:ef:dd: e1:12:f6:22:aa:f8:3f:38:fc:57:0e:f7:bd:ae:91: a8:9c:92:86:a2:5f:40:a5:a6:04:f0:cd:ea:20:66: d8:3d:44:16:81:5e:98:63:99:3f:9c:24:ba:59:e5: c7:17:bb:e1:2a:1d:bd:26:90:1d:59:42:b5:5a:c4: 87:f2:59:4a:18:ea:13:2c:d3:46:17:88:a7:c6:a1: 04:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:0D:D6:B5:BB:99:FC:6B:8A:C0:65:A1:78:AA:B6:66:E8:0E:34:74 X509v3 Authority Key Identifier: keyid:30:DF:CD:C8:92:E7:3E:E2:54:64:28:27:42:E2:9C:56:7E:A3:CE:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C2913/8B43B736FE4911EFA735AD6FC4F9AE02/MN_NyJLnPuJUZCgnQuKcVn6jzgM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MN_NyJLnPuJUZCgnQuKcVn6jzgM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C2913/8B43B736FE4911EFA735AD6FC4F9AE02/MN_NyJLnPuJUZCgnQuKcVn6jzgM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 44:7b:b5:49:6d:60:18:9a:39:68:3f:d8:aa:10:a2:0d:47:84: 43:45:8f:09:c4:0a:fe:f2:8c:7c:86:7c:1b:96:a0:f4:d9:2b: 85:41:57:aa:29:07:d4:fb:8b:e1:ad:95:ea:e1:62:6b:3c:1d: e7:a1:d1:a8:e4:c7:e3:69:08:21:3d:dc:5c:23:19:62:09:fc: 12:da:b9:f7:bf:11:ac:70:27:59:9f:8c:43:2b:4b:6f:19:79: fa:fa:91:b7:d0:fc:05:e3:d7:ac:72:0e:6a:aa:84:44:1e:96: cd:33:74:a7:1a:36:8d:fb:15:c1:95:db:5a:32:8c:56:a2:91: 7f:fa:89:bf:0f:b2:42:4b:d4:da:ed:f3:67:02:7a:40:89:3f: 78:35:33:01:f6:f2:24:a4:84:7c:25:84:9d:e5:01:d5:f4:4c: 3c:fa:45:62:bf:c6:94:25:e5:55:67:7f:5d:dd:13:2a:b0:eb: fc:64:d9:ee:5d:ba:99:74:7b:15:6d:d1:52:35:9d:18:33:98: 7f:49:3f:1b:53:4d:b0:bf:f7:2b:0c:20:51:07:39:06:24:56: 28:05:23:3a:1e:20:3e:8e:df:eb:41:16:b7:26:e4:19:9d:c7: 36:39:f0:98:14:a7:74:f2:02:c4:43:27:ff:4b:c6:ec:4b:f9: 06:dd:6e:5a -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBLjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD MjkxMzExMC8GA1UEBRMoMzBERkNEQzg5MkU3M0VFMjU0NjQyODI3NDJFMjlDNTY3 RUEzQ0UwMzAeFw0yNTA1MzEwNzE5MTdaFw0yNTA2MDcwNzE5MTdaMBgxFjAUBgNV BAMTDTY4M2FhZDc1LThmMWMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCfJckAqlN6w57Qw3LafJ7VfFaRdRbYcpkbTgkunfQaeuyiKJhDntUmUHQdv35k twbn9cwhROxgeK9QDt8YjcWb8GMOlbAvn4mHOv8ljJEw/WehuXtp/J9cbv3tqdsg ehcUoS8dQZSPitvGiJTibL63bNQoJypOWBN+Hsqm9D6DCP0i5J/bfaV9yQxP+1MR 16YazKTXJKHGPPrUj385+J2IgBD9TNN3VABmd4VJNexYGBLv3eES9iKq+D84/FcO 972ukaickoaiX0ClpgTwzeogZtg9RBaBXphjmT+cJLpZ5ccXu+EqHb0mkB1ZQrVa xIfyWUoY6hMs00YXiKfGoQQVAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUjQ3WtbuZ /GuKwGWheKq2ZugONHQwHwYDVR0jBBgwFoAUMN/NyJLnPuJUZCgnQuKcVn6jzgMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUMyOTEzLzhCNDNCNzM2RkU0 OTExRUZBNzM1QUQ2RkM0RjlBRTAyL01OX055SkxuUHVKVVpDZ25RdUtjVm42anpn TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvTU5fTnlKTG5QdUpVWkNnblF1S2NWbjZqemdNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUMy OTEzLzhCNDNCNzM2RkU0OTExRUZBNzM1QUQ2RkM0RjlBRTAyL01OX055SkxuUHVK VVpDZ25RdUtjVm42anpnTS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAER7tUltYBiaOWg/2KoQog1HhENFjwnECv7yjHyGfBuWoPTZK4VBV6op B9T7i+GtlerhYms8Heeh0ajkx+NpCCE93FwjGWIJ/BLaufe/EaxwJ1mfjEMrS28Z efr6kbfQ/AXj16xyDmqqhEQels0zdKcaNo37FcGV21oyjFaikX/6ib8PskJL1Nrt 82cCekCJP3g1MwH28iSkhHwlhJ3lAdX0TDz6RWK/xpQl5VVnf13dEyqw6/xk2e5d upl0exVt0VI1nRgzmH9JPxtTTbC/9ysMIFEHOQYkVigFIzoeID6O3+tBFrcm5Bmd xzY58JgUp3TyAsRDJ/9LxuxL+Qbdblo= -----END CERTIFICATE-----Generated at Sat May 31 17:11:30 2025 by rpki-client