$ rpki-client -vvf rpki.apnic.net/member_repository/A91C862F/D5E1DDEA965F11ECAD217376C4F9AE02/nLIZXrqiCWDa-IL7X0frVaGdIuw.mft File: nLIZXrqiCWDa-IL7X0frVaGdIuw.mft (raw, json) Hash identifier: ffDpVqdxbenUgXv81/SDbv+c0hDZGz25Ce60N0EyUcE= Subject key identifier: AF:8E:D4:F2:3B:7E:DA:6A:17:E9:90:46:4F:72:B4:B7:62:E7:D1:89 Authority key identifier: 9C:B2:19:5E:BA:A2:09:60:DA:F8:82:FB:5F:47:EB:55:A1:9D:22:EC Certificate issuer: /CN=A91C862F/serialNumber=9CB2195EBAA20960DAF882FB5F47EB55A19D22EC Certificate serial: 03B5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nLIZXrqiCWDa-IL7X0frVaGdIuw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C862F/D5E1DDEA965F11ECAD217376C4F9AE02/nLIZXrqiCWDa-IL7X0frVaGdIuw.mft Manifest number: 03AD Signing time: Sat 31 May 2025 00:55:52 +0000 Manifest this update: Sat 31 May 2025 00:55:51 +0000 Manifest next update: Sat 07 Jun 2025 00:55:51 +0000 Files and hashes: 1: nLIZXrqiCWDa-IL7X0frVaGdIuw.crl (hash: ztjpWcxHhisV287GxFXxiRkRUeRNEEYOy8S9Zsbmq6E=) 2: 437E6F641A2A11ED8E5B3178C4F9AE02.roa (hash: W2t7cvkTvvu4tLiipq3paLT/+ja5H4MoySHQU+pxdNU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C862F/D5E1DDEA965F11ECAD217376C4F9AE02/nLIZXrqiCWDa-IL7X0frVaGdIuw.crl rsync://rpki.apnic.net/member_repository/A91C862F/D5E1DDEA965F11ECAD217376C4F9AE02/nLIZXrqiCWDa-IL7X0frVaGdIuw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nLIZXrqiCWDa-IL7X0frVaGdIuw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 00:55:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 949 (0x3b5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C862F, serialNumber=9CB2195EBAA20960DAF882FB5F47EB55A19D22EC Validity Not Before: May 31 00:55:51 2025 GMT Not After : Jun 7 00:55:51 2025 GMT Subject: CN=683a5397-e4b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:84:92:b1:7b:64:99:a0:7f:50:8b:7c:c8:25: ea:1a:65:52:2d:a4:99:a2:1e:01:34:77:49:38:19: 90:38:e2:cb:43:a6:9e:d0:23:ae:81:e5:bd:c8:4f: f1:8c:8b:c4:cc:9c:35:a6:ac:09:f5:22:98:04:be: 16:13:55:cd:66:34:ea:63:ea:58:35:98:2b:a9:53: 34:56:71:91:10:73:ed:4c:43:39:57:1c:0b:fc:b3: 39:7b:dc:da:a1:b0:0d:cf:bf:80:c7:9b:b0:c7:35: fc:47:06:b7:5c:e1:25:ec:b1:57:87:d4:8f:68:ef: 46:72:2b:3b:80:cf:f5:22:43:5e:da:5c:14:e5:b9: ba:38:96:47:5f:bd:f6:1d:2a:8e:47:6a:38:b4:32: 11:32:70:51:04:70:53:83:57:e3:79:2c:74:b1:42: ae:56:e8:5b:90:65:d8:14:8b:a2:0d:0f:88:80:d3: 33:7e:0a:6b:d4:c4:49:9f:7c:c3:82:cd:6f:ec:56: a2:7f:da:98:6e:e9:18:99:9a:be:35:ee:fd:c7:6e: 97:3b:b4:65:cb:4a:12:91:f8:f8:8f:f7:9c:77:cd: 1a:c9:b7:97:c8:94:4f:9f:7d:60:47:a1:9d:c3:27: 1e:f7:e9:d9:92:02:a2:54:5c:b8:d9:1e:29:d2:f7: bc:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:8E:D4:F2:3B:7E:DA:6A:17:E9:90:46:4F:72:B4:B7:62:E7:D1:89 X509v3 Authority Key Identifier: keyid:9C:B2:19:5E:BA:A2:09:60:DA:F8:82:FB:5F:47:EB:55:A1:9D:22:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C862F/D5E1DDEA965F11ECAD217376C4F9AE02/nLIZXrqiCWDa-IL7X0frVaGdIuw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nLIZXrqiCWDa-IL7X0frVaGdIuw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C862F/D5E1DDEA965F11ECAD217376C4F9AE02/nLIZXrqiCWDa-IL7X0frVaGdIuw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a5:22:a5:eb:a2:cf:d5:7e:c1:8f:67:67:50:b1:82:71:03:23: 01:42:ea:a9:db:c2:e3:ca:ac:6d:a0:96:78:5f:f2:b3:3c:86: db:8f:6f:df:ae:5f:94:69:57:a7:48:28:71:c3:92:73:36:19: d8:7a:cb:d9:3c:8a:05:86:9a:a6:1f:19:ad:99:a8:53:a7:ca: 2c:3c:1e:64:fb:f9:36:88:ef:06:91:f2:d2:f0:32:5b:2b:b4: 18:65:13:17:7e:c7:2d:03:da:8d:02:22:43:8f:b8:f9:1f:72: cd:37:38:be:72:3a:65:42:95:c5:e1:8a:dc:82:86:f5:49:b8: 1e:42:50:f8:6c:90:d8:e0:b5:5e:50:d3:ce:2e:e0:96:c9:58: a2:53:83:ec:01:3a:3f:84:36:2d:8c:58:3e:02:9b:eb:e0:fe: 09:b9:40:8f:d8:99:93:da:7f:af:1c:7c:be:e7:73:d2:80:b3: aa:6a:54:be:ee:3f:36:36:7f:49:97:2d:dd:e7:06:10:f5:f8: ed:86:42:94:cc:e7:33:f3:3e:15:8d:82:af:e2:5a:17:8e:f2: cf:ec:ef:b0:54:e7:d1:7c:b0:2a:7b:da:9d:a4:d1:84:3d:e8: 90:6f:1a:21:0f:be:31:c9:35:ac:b0:90:a0:eb:1b:5d:32:8b: 86:ba:98:4f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA7UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qzg2MkYxMTAvBgNVBAUTKDlDQjIxOTVFQkFBMjA5NjBEQUY4ODJGQjVGNDdFQjU1 QTE5RDIyRUMwHhcNMjUwNTMxMDA1NTUxWhcNMjUwNjA3MDA1NTUxWjAYMRYwFAYD VQQDEw02ODNhNTM5Ny1lNGIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1ISSsXtkmaB/UIt8yCXqGmVSLaSZoh4BNHdJOBmQOOLLQ6ae0COugeW9yE/x jIvEzJw1pqwJ9SKYBL4WE1XNZjTqY+pYNZgrqVM0VnGREHPtTEM5VxwL/LM5e9za obANz7+Ax5uwxzX8Rwa3XOEl7LFXh9SPaO9Gcis7gM/1IkNe2lwU5bm6OJZHX732 HSqOR2o4tDIRMnBRBHBTg1fjeSx0sUKuVuhbkGXYFIuiDQ+IgNMzfgpr1MRJn3zD gs1v7Faif9qYbukYmZq+Ne79x26XO7Rly0oSkfj4j/ecd80aybeXyJRPn31gR6Gd wyce9+nZkgKiVFy42R4p0ve88QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK+O1PI7 ftpqF+mQRk9ytLdi59GJMB8GA1UdIwQYMBaAFJyyGV66oglg2viC+19H61WhnSLs MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDODYyRi9ENUUxRERFQTk2 NUYxMUVDQUQyMTczNzZDNEY5QUUwMi9uTElaWHJxaUNXRGEtSUw3WDBmclZhR2RJ dXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25MSVpYcnFpQ1dEYS1JTDdYMGZyVmFHZEl1dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD ODYyRi9ENUUxRERFQTk2NUYxMUVDQUQyMTczNzZDNEY5QUUwMi9uTElaWHJxaUNX RGEtSUw3WDBmclZhR2RJdXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQClIqXros/VfsGPZ2dQsYJxAyMBQuqp28LjyqxtoJZ4X/KzPIbbj2/f rl+UaVenSChxw5JzNhnYesvZPIoFhpqmHxmtmahTp8osPB5k+/k2iO8GkfLS8DJb K7QYZRMXfsctA9qNAiJDj7j5H3LNNzi+cjplQpXF4Yrcgob1SbgeQlD4bJDY4LVe UNPOLuCWyViiU4PsATo/hDYtjFg+Apvr4P4JuUCP2JmT2n+vHHy+53PSgLOqalS+ 7j82Nn9Jly3d5wYQ9fjthkKUzOcz8z4VjYKv4loXjvLP7O+wVOfRfLAqe9qdpNGE PeiQbxohD74xyTWssJCg6xtdMouGuphP -----END CERTIFICATE-----Generated at Sat May 31 17:06:32 2025 by rpki-client