$ rpki-client -vvf rpki.apnic.net/member_repository/A91C456F/D33FC82AA08411EC94AD2A37C4F9AE02/N6CiG7WFEffv59KwRIPtgLSgIzo.mft File: N6CiG7WFEffv59KwRIPtgLSgIzo.mft (raw, json) Hash identifier: 5SzQgkdPhgmwaIz+sld6aUyGwCnB5mmaXWOr27bHQII= Subject key identifier: 78:8E:FC:C3:21:B8:81:27:1F:45:7B:13:7A:84:D2:1E:E0:77:4C:30 Authority key identifier: 37:A0:A2:1B:B5:85:11:F7:EF:E7:D2:B0:44:83:ED:80:B4:A0:23:3A Certificate issuer: /CN=A91C456F/serialNumber=37A0A21BB58511F7EFE7D2B04483ED80B4A0233A Certificate serial: 0391 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N6CiG7WFEffv59KwRIPtgLSgIzo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C456F/D33FC82AA08411EC94AD2A37C4F9AE02/N6CiG7WFEffv59KwRIPtgLSgIzo.mft Manifest number: 038D Signing time: Sat 31 May 2025 01:02:51 +0000 Manifest this update: Sat 31 May 2025 01:02:50 +0000 Manifest next update: Sat 07 Jun 2025 01:02:50 +0000 Files and hashes: 1: N6CiG7WFEffv59KwRIPtgLSgIzo.crl (hash: UbB18vKxjStasgqiKr85bYVBUXVXw98QIO30YIDNo0M=) 2: AF95CCA0A08711EC88A88D39C4F9AE02.roa (hash: f88t3B3XEIrStaMOLBEX51aBDTSHx6vviz1RmYW+1Aw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C456F/D33FC82AA08411EC94AD2A37C4F9AE02/N6CiG7WFEffv59KwRIPtgLSgIzo.crl rsync://rpki.apnic.net/member_repository/A91C456F/D33FC82AA08411EC94AD2A37C4F9AE02/N6CiG7WFEffv59KwRIPtgLSgIzo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N6CiG7WFEffv59KwRIPtgLSgIzo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 01:02:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 913 (0x391) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C456F, serialNumber=37A0A21BB58511F7EFE7D2B04483ED80B4A0233A Validity Not Before: May 31 01:02:50 2025 GMT Not After : Jun 7 01:02:50 2025 GMT Subject: CN=683a553a-6bf8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:ed:18:2d:fc:1b:31:86:a9:60:1a:10:cd:86: 48:53:ee:0b:a5:8b:80:5d:d5:57:98:a2:51:af:2f: f0:45:4e:d3:75:87:a1:28:ed:d5:9c:08:4c:23:bb: d3:3b:ec:41:1a:4e:6e:4f:ab:c8:b0:09:78:cb:b2: 05:70:99:63:25:cb:4b:e5:b4:15:a0:2c:65:49:1e: 02:00:bd:64:d8:10:4b:fa:5c:77:a8:52:71:28:47: 84:ff:e2:74:b5:9e:f4:e9:5e:88:86:fb:ea:31:4d: 91:61:56:4a:08:48:02:34:8c:fa:57:af:22:b4:92: 0d:68:49:c7:09:e2:46:b5:f8:e5:d0:e4:32:4b:aa: b8:04:39:ca:0e:52:db:d5:c1:f8:31:9d:b7:18:8f: 0e:28:fc:47:3b:69:4f:b2:ce:7d:3f:36:d0:e8:90: 0f:ea:20:54:a0:73:1d:28:69:3d:8f:fd:07:1a:80: 9a:b6:b1:82:be:8c:aa:04:36:06:de:d9:3c:30:0e: 2f:b2:25:d1:e3:80:cc:fe:e6:53:6b:ff:2d:6b:d6: 0d:2d:0b:88:6a:e1:3f:26:32:97:b1:9c:08:7a:e1: 03:29:84:b0:d0:ae:25:37:b0:89:f7:94:13:99:a9: 21:9e:a1:75:2c:d8:f7:7d:1a:64:ce:d4:4f:38:d2: 85:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:8E:FC:C3:21:B8:81:27:1F:45:7B:13:7A:84:D2:1E:E0:77:4C:30 X509v3 Authority Key Identifier: keyid:37:A0:A2:1B:B5:85:11:F7:EF:E7:D2:B0:44:83:ED:80:B4:A0:23:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C456F/D33FC82AA08411EC94AD2A37C4F9AE02/N6CiG7WFEffv59KwRIPtgLSgIzo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N6CiG7WFEffv59KwRIPtgLSgIzo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C456F/D33FC82AA08411EC94AD2A37C4F9AE02/N6CiG7WFEffv59KwRIPtgLSgIzo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 30:9f:d9:c8:5b:9a:96:d0:5d:27:d2:58:99:06:ea:ed:1c:92: a5:97:48:93:f6:aa:67:82:5c:0a:37:10:8b:5a:5a:63:74:8f: dd:03:d2:56:55:49:b6:a0:ec:70:21:9a:6c:fe:f6:f0:b2:e2: 00:f3:0d:a8:7c:42:71:44:4b:7c:6b:1a:e4:ee:19:c1:27:aa: 6b:c3:0d:7c:73:01:e3:59:00:49:51:f9:99:1e:89:0c:dc:46: cb:55:a3:02:cb:32:71:4d:6d:6a:70:e0:bc:96:2b:7d:d5:bd: 54:c8:ef:d1:82:77:e0:94:f2:d7:d4:71:3c:3e:d3:b9:c6:8f: 3e:fc:9e:8f:8d:a8:11:78:fa:be:4a:63:c7:57:c8:85:4a:f1: e5:3b:a4:6a:e4:2a:aa:75:3b:dd:70:81:f8:6a:61:60:88:a2: a5:b8:e5:7c:55:75:37:35:31:fd:0b:13:5e:ac:34:b4:88:be: 54:52:03:70:17:06:79:8c:4e:7e:7e:bb:2a:27:1b:8c:c5:0c: 33:67:d4:6e:45:97:f0:7e:14:b1:05:14:90:0d:8d:64:66:64: 0d:5c:3b:25:6d:71:fc:83:9e:ff:82:2d:2c:bf:65:ce:83:98: 9e:c2:f0:f2:57:16:ae:d7:7d:b9:ad:17:ed:b0:c1:3e:54:0f: e6:ec:63:63 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA5EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzQ1NkYxMTAvBgNVBAUTKDM3QTBBMjFCQjU4NTExRjdFRkU3RDJCMDQ0ODNFRDgw QjRBMDIzM0EwHhcNMjUwNTMxMDEwMjUwWhcNMjUwNjA3MDEwMjUwWjAYMRYwFAYD VQQDEw02ODNhNTUzYS02YmY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwe0YLfwbMYapYBoQzYZIU+4LpYuAXdVXmKJRry/wRU7TdYehKO3VnAhMI7vT O+xBGk5uT6vIsAl4y7IFcJljJctL5bQVoCxlSR4CAL1k2BBL+lx3qFJxKEeE/+J0 tZ706V6IhvvqMU2RYVZKCEgCNIz6V68itJINaEnHCeJGtfjl0OQyS6q4BDnKDlLb 1cH4MZ23GI8OKPxHO2lPss59PzbQ6JAP6iBUoHMdKGk9j/0HGoCatrGCvoyqBDYG 3tk8MA4vsiXR44DM/uZTa/8ta9YNLQuIauE/JjKXsZwIeuEDKYSw0K4lN7CJ95QT makhnqF1LNj3fRpkztRPONKFrQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHiO/MMh uIEnH0V7E3qE0h7gd0wwMB8GA1UdIwQYMBaAFDegohu1hRH37+fSsESD7YC0oCM6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNDU2Ri9EMzNGQzgyQUEw ODQxMUVDOTRBRDJBMzdDNEY5QUUwMi9ONkNpRzdXRkVmZnY1OUt3UklQdGdMU2dJ em8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL042Q2lHN1dGRWZmdjU5S3dSSVB0Z0xTZ0l6by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NDU2Ri9EMzNGQzgyQUEwODQxMUVDOTRBRDJBMzdDNEY5QUUwMi9ONkNpRzdXRkVm ZnY1OUt3UklQdGdMU2dJem8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAwn9nIW5qW0F0n0liZBurtHJKll0iT9qpnglwKNxCLWlpjdI/dA9JW VUm2oOxwIZps/vbwsuIA8w2ofEJxREt8axrk7hnBJ6prww18cwHjWQBJUfmZHokM 3EbLVaMCyzJxTW1qcOC8lit91b1UyO/RgnfglPLX1HE8PtO5xo8+/J6PjagRePq+ SmPHV8iFSvHlO6Rq5CqqdTvdcIH4amFgiKKluOV8VXU3NTH9CxNerDS0iL5UUgNw FwZ5jE5+frsqJxuMxQwzZ9RuRZfwfhSxBRSQDY1kZmQNXDslbXH8g57/gi0sv2XO g5iewvDyVxau1325rRftsME+VA/m7GNj -----END CERTIFICATE-----Generated at Sat May 31 14:43:09 2025 by rpki-client