$ rpki-client -vvf rpki.apnic.net/member_repository/A91C6064/52FEF73A297011EB91E9DE54C4F9AE02/NFMkWvnnaQX2mpDxzs2F6og_6hY.mft File: NFMkWvnnaQX2mpDxzs2F6og_6hY.mft (raw, json) Hash identifier: p0ld0+gYHWaVBwWElrg8nIU7He/Dj7gD1ne5+ryD7jY= Subject key identifier: E2:6C:7C:98:69:36:1F:26:DE:ED:52:7E:09:44:66:C4:47:44:0F:D2 Authority key identifier: 34:53:24:5A:F9:E7:69:05:F6:9A:90:F1:CE:CD:85:EA:88:3F:EA:16 Certificate issuer: /CN=A91C6064/serialNumber=3453245AF9E76905F69A90F1CECD85EA883FEA16 Certificate serial: 074B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NFMkWvnnaQX2mpDxzs2F6og_6hY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C6064/52FEF73A297011EB91E9DE54C4F9AE02/NFMkWvnnaQX2mpDxzs2F6og_6hY.mft Manifest number: 0744 Signing time: Fri 30 May 2025 21:55:01 +0000 Manifest this update: Fri 30 May 2025 21:55:01 +0000 Manifest next update: Fri 06 Jun 2025 21:55:01 +0000 Files and hashes: 1: NFMkWvnnaQX2mpDxzs2F6og_6hY.crl (hash: 8+uby42fLw9jZv2XMxAOyhM0+OeGLnyxJJ8bpwCzL+k=) 2: 0BAA4608297211EB99ECF956C4F9AE02.roa (hash: Pzy/lWlyEAOnnToKQdX1gv5KRRU1QsPgl9JiMWq4wxE=) 3: E9D321CEF2F611EE95E10935C4F9AE02.roa (hash: 0MDsliqtqRrojbtZYNkkZiieXi7syQdv9RVqPyRdcns=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C6064/52FEF73A297011EB91E9DE54C4F9AE02/NFMkWvnnaQX2mpDxzs2F6og_6hY.crl rsync://rpki.apnic.net/member_repository/A91C6064/52FEF73A297011EB91E9DE54C4F9AE02/NFMkWvnnaQX2mpDxzs2F6og_6hY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NFMkWvnnaQX2mpDxzs2F6og_6hY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 21:55:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1867 (0x74b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C6064, serialNumber=3453245AF9E76905F69A90F1CECD85EA883FEA16 Validity Not Before: May 30 21:55:01 2025 GMT Not After : Jun 6 21:55:01 2025 GMT Subject: CN=683a2935-b3b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:4d:cd:2d:53:91:be:81:4f:30:ea:b7:f4:b4: a3:1f:c4:e6:35:78:30:92:7a:74:f2:25:99:31:94: dc:81:d9:9d:42:4c:6a:67:6f:bf:95:b3:88:e9:ac: 6e:d1:8d:24:61:1d:ce:f7:fe:07:0a:7c:4d:d4:2c: 83:a1:e7:75:9c:5a:15:b2:ab:2c:e5:17:be:bd:06: d8:72:ba:fd:99:5c:94:9f:93:27:f9:d1:7e:0e:eb: 9f:eb:a7:57:90:2a:32:77:28:89:43:56:2f:bc:d1: 39:b9:10:f5:c9:c0:87:5a:2a:9f:06:8f:af:01:8a: c5:1f:a5:5d:67:aa:92:91:da:80:1a:11:6d:53:41: 1d:cf:d3:f8:19:70:82:8e:56:10:8b:39:20:c3:0f: 97:42:46:2c:0f:ed:a6:2c:1c:7c:83:19:49:23:58: f4:50:a2:3a:94:ce:51:32:a8:2f:b1:1b:20:b9:4e: a8:73:45:53:ea:0e:62:0f:9e:76:32:8b:5d:73:6c: 1e:fa:2d:72:c8:cc:37:8b:5c:18:f2:79:d5:4e:bd: c9:5c:15:32:84:49:d0:5d:4c:35:d6:52:31:c4:35: 93:ab:1c:e5:54:ed:74:23:e7:51:54:08:83:c5:46: 07:14:5d:49:84:a3:91:33:10:43:0f:b1:d3:0a:24: 08:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:6C:7C:98:69:36:1F:26:DE:ED:52:7E:09:44:66:C4:47:44:0F:D2 X509v3 Authority Key Identifier: keyid:34:53:24:5A:F9:E7:69:05:F6:9A:90:F1:CE:CD:85:EA:88:3F:EA:16 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C6064/52FEF73A297011EB91E9DE54C4F9AE02/NFMkWvnnaQX2mpDxzs2F6og_6hY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NFMkWvnnaQX2mpDxzs2F6og_6hY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C6064/52FEF73A297011EB91E9DE54C4F9AE02/NFMkWvnnaQX2mpDxzs2F6og_6hY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 71:ec:67:53:a4:e0:e6:6f:20:e4:5e:9d:6d:a0:9c:1e:0b:2b: 92:62:2f:b8:02:5e:0c:2d:62:ee:bc:d1:02:54:44:c5:cd:4d: 61:ba:3a:5b:d1:9a:e0:99:1f:2a:22:e0:71:db:60:d0:fb:d3: da:52:37:8f:7e:51:f6:0e:92:05:ff:6a:a3:99:da:67:e1:5e: 1c:a4:26:3c:e9:81:97:33:d4:e3:f6:55:51:85:db:fb:fb:72: 9e:05:3a:cd:9e:13:5d:a6:f3:ad:3e:a6:3d:86:2b:fe:f5:be: 66:6d:bc:4a:6b:32:5e:86:d6:54:13:92:b8:da:89:0f:0c:68: 29:d6:26:87:d4:f0:c0:b2:67:48:c5:bf:5c:72:9c:be:50:2f: e9:9c:1a:3f:8f:88:12:bf:08:2e:bb:87:46:64:f1:08:06:3d: 06:42:e9:08:30:3f:a6:8d:75:56:fb:4d:57:59:da:03:ea:5e: d8:cb:05:86:ca:e3:7e:af:f8:78:ef:54:56:cc:5b:ef:1d:f7: e8:08:0d:b2:2f:0d:ab:45:2f:32:81:b4:85:82:61:a0:26:c8: 61:4e:6a:23:93:f1:82:98:ea:b8:bc:69:58:b2:32:89:f5:7f: 13:56:e0:f3:e1:c9:ea:c8:39:cf:3a:68:a6:ff:0d:00:f1:60: ea:f4:2d:e9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB0swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzYwNjQxMTAvBgNVBAUTKDM0NTMyNDVBRjlFNzY5MDVGNjlBOTBGMUNFQ0Q4NUVB ODgzRkVBMTYwHhcNMjUwNTMwMjE1NTAxWhcNMjUwNjA2MjE1NTAxWjAYMRYwFAYD VQQDEw02ODNhMjkzNS1iM2I0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1E3NLVORvoFPMOq39LSjH8TmNXgwknp08iWZMZTcgdmdQkxqZ2+/lbOI6axu 0Y0kYR3O9/4HCnxN1CyDoed1nFoVsqss5Re+vQbYcrr9mVyUn5Mn+dF+Duuf66dX kCoydyiJQ1YvvNE5uRD1ycCHWiqfBo+vAYrFH6VdZ6qSkdqAGhFtU0Edz9P4GXCC jlYQizkgww+XQkYsD+2mLBx8gxlJI1j0UKI6lM5RMqgvsRsguU6oc0VT6g5iD552 Motdc2we+i1yyMw3i1wY8nnVTr3JXBUyhEnQXUw11lIxxDWTqxzlVO10I+dRVAiD xUYHFF1JhKORMxBDD7HTCiQIxwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOJsfJhp Nh8m3u1SfglEZsRHRA/SMB8GA1UdIwQYMBaAFDRTJFr552kF9pqQ8c7NheqIP+oW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNjA2NC81MkZFRjczQTI5 NzAxMUVCOTFFOURFNTRDNEY5QUUwMi9ORk1rV3ZubmFRWDJtcER4enMyRjZvZ182 aFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05GTWtXdm5uYVFYMm1wRHh6czJGNm9nXzZoWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NjA2NC81MkZFRjczQTI5NzAxMUVCOTFFOURFNTRDNEY5QUUwMi9ORk1rV3ZubmFR WDJtcER4enMyRjZvZ182aFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBx7GdTpODmbyDkXp1toJweCyuSYi+4Al4MLWLuvNECVETFzU1hujpb 0ZrgmR8qIuBx22DQ+9PaUjePflH2DpIF/2qjmdpn4V4cpCY86YGXM9Tj9lVRhdv7 +3KeBTrNnhNdpvOtPqY9hiv+9b5mbbxKazJehtZUE5K42okPDGgp1iaH1PDAsmdI xb9ccpy+UC/pnBo/j4gSvwguu4dGZPEIBj0GQukIMD+mjXVW+01XWdoD6l7YywWG yuN+r/h471RWzFvvHffoCA2yLw2rRS8ygbSFgmGgJshhTmojk/GCmOq4vGlYsjKJ 9X8TVuDz4cnqyDnPOmim/w0A8WDq9C3p -----END CERTIFICATE-----Generated at Sat May 31 17:45:01 2025 by rpki-client