$ rpki-client -vvf rpki.apnic.net/member_repository/A91C5413/DF99A1E87BE811EB9A092342C4F9AE02/Nmw2U-SHXe9etk-Yko-v0w_uiHg.mft File: Nmw2U-SHXe9etk-Yko-v0w_uiHg.mft (raw, json) Hash identifier: idbBKNHpJzkPizhWnJrVlnLplsmzMtmaG53nxKpabhk= Subject key identifier: E8:36:C0:E3:63:80:11:C0:23:B1:60:02:2D:5D:30:65:8D:F8:B5:A2 Authority key identifier: 36:6C:36:53:E4:87:5D:EF:5E:B6:4F:98:92:8F:AF:D3:0F:EE:88:78 Certificate issuer: /CN=A91C5413/serialNumber=366C3653E4875DEF5EB64F98928FAFD30FEE8878 Certificate serial: 067E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nmw2U-SHXe9etk-Yko-v0w_uiHg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C5413/DF99A1E87BE811EB9A092342C4F9AE02/Nmw2U-SHXe9etk-Yko-v0w_uiHg.mft Manifest number: 0815 Signing time: Sat 31 May 2025 22:23:31 +0000 Manifest this update: Sat 31 May 2025 22:23:30 +0000 Manifest next update: Sat 07 Jun 2025 22:23:30 +0000 Files and hashes: 1: Nmw2U-SHXe9etk-Yko-v0w_uiHg.crl (hash: ZdRF95xWX0CXsrPd7QM9QQ//Z4VxcFvUL/mj90o5Ix4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C5413/DF99A1E87BE811EB9A092342C4F9AE02/Nmw2U-SHXe9etk-Yko-v0w_uiHg.crl rsync://rpki.apnic.net/member_repository/A91C5413/DF99A1E87BE811EB9A092342C4F9AE02/Nmw2U-SHXe9etk-Yko-v0w_uiHg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nmw2U-SHXe9etk-Yko-v0w_uiHg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 22:23:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1662 (0x67e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C5413, serialNumber=366C3653E4875DEF5EB64F98928FAFD30FEE8878 Validity Not Before: May 31 22:23:30 2025 GMT Not After : Jun 7 22:23:30 2025 GMT Subject: CN=683b8162-0b7e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:87:95:54:65:47:a1:55:0b:17:44:85:74:63: 5e:fa:0b:3c:d6:48:6e:d3:1a:29:d2:5d:85:08:98: 8f:ff:18:c8:a7:46:de:65:51:13:38:05:5e:ea:40: ca:6e:bf:b1:a5:0f:e3:92:db:45:30:73:da:f3:f9: 7a:c7:50:64:58:2a:5b:9f:cc:18:e7:b0:27:36:36: 47:57:7b:ae:53:c1:a5:35:c9:fc:ce:27:27:54:47: 6c:03:61:f2:a7:e2:10:cd:90:0a:91:18:a6:0d:ad: ba:e3:6a:08:11:94:ab:cf:83:3a:da:d8:ed:17:d7: 9d:23:39:e4:3f:f7:e7:b6:a0:78:8d:cd:4d:28:3c: 42:4e:07:59:ee:1f:aa:ab:5c:b1:bd:2a:ad:ab:b3: 9a:e9:82:2d:89:bb:d6:0a:a0:60:fd:a0:34:07:f7: ab:8c:b0:93:78:08:0c:4e:84:1c:9f:f9:7a:d3:76: eb:53:9d:82:1b:2e:b1:60:6b:49:a3:d3:83:b4:a3: 19:ac:60:8e:a1:38:07:76:03:af:64:85:85:94:c7: 5b:e3:22:10:ed:ee:a6:a0:ba:3c:67:af:5c:4d:72: b0:b8:8e:8c:f8:01:30:86:3f:a2:84:66:2a:52:e0: 9c:f5:35:06:3f:13:e5:2e:c5:d6:f4:30:55:d2:23: e2:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:36:C0:E3:63:80:11:C0:23:B1:60:02:2D:5D:30:65:8D:F8:B5:A2 X509v3 Authority Key Identifier: keyid:36:6C:36:53:E4:87:5D:EF:5E:B6:4F:98:92:8F:AF:D3:0F:EE:88:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C5413/DF99A1E87BE811EB9A092342C4F9AE02/Nmw2U-SHXe9etk-Yko-v0w_uiHg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nmw2U-SHXe9etk-Yko-v0w_uiHg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C5413/DF99A1E87BE811EB9A092342C4F9AE02/Nmw2U-SHXe9etk-Yko-v0w_uiHg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b1:e7:aa:56:49:af:38:45:cf:f8:ce:f1:51:37:f3:20:bb:e6: 61:98:7b:f5:60:c8:26:ba:be:08:17:26:5a:a6:75:60:63:68: 62:cf:f7:37:44:01:6a:b4:f9:ad:de:af:18:23:9b:65:9a:31: 0c:ba:33:4f:77:8a:60:f5:f3:58:9d:14:b8:cc:2f:24:a2:28: e0:f9:b5:ed:26:86:5a:38:f7:93:f6:cb:5b:b0:1d:4c:e9:94: bc:93:db:ff:33:32:8a:da:da:86:93:4f:6c:e8:e1:f8:86:61: 2a:63:27:c1:01:ce:8b:44:eb:c8:c7:36:a0:bd:f5:44:9b:70: f8:f1:30:92:66:e8:a5:3d:ac:e9:21:60:42:0c:2b:d2:1c:dd: 1f:c0:0b:b9:54:ce:45:79:6f:b0:c7:ad:20:e6:ce:00:1f:67: a0:22:9b:60:ff:f0:22:71:48:b6:f5:95:a1:e3:02:bb:93:0d: d8:7e:92:cb:88:8d:aa:bc:54:9b:f9:c3:ff:62:09:a4:26:30: 38:59:ab:7c:4e:f0:4c:bd:6b:11:a0:94:19:99:0b:16:2c:0b: a9:f6:d6:2b:e2:3b:c0:41:e4:db:9e:05:bc:44:f0:ee:a0:e9: 36:15:70:c8:c3:8e:14:a0:44:46:a0:da:46:dd:4e:bc:59:6b: c3:83:03:88 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBn4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzU0MTMxMTAvBgNVBAUTKDM2NkMzNjUzRTQ4NzVERUY1RUI2NEY5ODkyOEZBRkQz MEZFRTg4NzgwHhcNMjUwNTMxMjIyMzMwWhcNMjUwNjA3MjIyMzMwWjAYMRYwFAYD VQQDEw02ODNiODE2Mi0wYjdlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw4eVVGVHoVULF0SFdGNe+gs81khu0xop0l2FCJiP/xjIp0beZVETOAVe6kDK br+xpQ/jkttFMHPa8/l6x1BkWCpbn8wY57AnNjZHV3uuU8GlNcn8zicnVEdsA2Hy p+IQzZAKkRimDa2642oIEZSrz4M62tjtF9edIznkP/fntqB4jc1NKDxCTgdZ7h+q q1yxvSqtq7Oa6YItibvWCqBg/aA0B/erjLCTeAgMToQcn/l603brU52CGy6xYGtJ o9ODtKMZrGCOoTgHdgOvZIWFlMdb4yIQ7e6moLo8Z69cTXKwuI6M+AEwhj+ihGYq UuCc9TUGPxPlLsXW9DBV0iPiBwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOg2wONj gBHAI7FgAi1dMGWN+LWiMB8GA1UdIwQYMBaAFDZsNlPkh13vXrZPmJKPr9MP7oh4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNTQxMy9ERjk5QTFFODdC RTgxMUVCOUEwOTIzNDJDNEY5QUUwMi9ObXcyVS1TSFhlOWV0ay1Za28tdjB3X3Vp SGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05tdzJVLVNIWGU5ZXRrLVlrby12MHdfdWlIZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NTQxMy9ERjk5QTFFODdCRTgxMUVCOUEwOTIzNDJDNEY5QUUwMi9ObXcyVS1TSFhl OWV0ay1Za28tdjB3X3VpSGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCx56pWSa84Rc/4zvFRN/Mgu+ZhmHv1YMgmur4IFyZapnVgY2hiz/c3 RAFqtPmt3q8YI5tlmjEMujNPd4pg9fNYnRS4zC8koijg+bXtJoZaOPeT9stbsB1M 6ZS8k9v/MzKK2tqGk09s6OH4hmEqYyfBAc6LROvIxzagvfVEm3D48TCSZuilPazp IWBCDCvSHN0fwAu5VM5FeW+wx60g5s4AH2egIptg//AicUi29ZWh4wK7kw3YfpLL iI2qvFSb+cP/YgmkJjA4Wat8TvBMvWsRoJQZmQsWLAup9tYr4jvAQeTbngW8RPDu oOk2FXDIw44UoERGoNpG3U68WWvDgwOI -----END CERTIFICATE-----Generated at Mon Jun 2 04:59:39 2025 by rpki-client