$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9D5D/DD6F28720A8B11EABCF9CE52C4F9AE02/Ny2TbjjYucsfcBIhn_ghcrkL7lg.mft File: Ny2TbjjYucsfcBIhn_ghcrkL7lg.mft (raw, json) Hash identifier: weE1j+L42EaYQAnCoCCbtpdClxXltGUhr6Sj4OTpxiI= Subject key identifier: 94:75:BA:F5:99:D8:C3:8B:AF:C3:EA:3F:62:86:E9:79:0B:08:11:5D Authority key identifier: 37:2D:93:6E:38:D8:B9:CB:1F:70:12:21:9F:F8:21:72:B9:0B:EE:58 Certificate issuer: /CN=A91C9D5D/serialNumber=372D936E38D8B9CB1F7012219FF82172B90BEE58 Certificate serial: 0C2C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ny2TbjjYucsfcBIhn_ghcrkL7lg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C9D5D/DD6F28720A8B11EABCF9CE52C4F9AE02/Ny2TbjjYucsfcBIhn_ghcrkL7lg.mft Manifest number: 0C24 Signing time: Fri 30 May 2025 18:46:14 +0000 Manifest this update: Fri 30 May 2025 18:46:13 +0000 Manifest next update: Fri 06 Jun 2025 18:46:13 +0000 Files and hashes: 1: Ny2TbjjYucsfcBIhn_ghcrkL7lg.crl (hash: L6Lv63wk115bjmnqHUBRplTFpLWU0eoaAnFW+RvgxY8=) 2: A0E062260A8C11EAB25FD253C4F9AE02.roa (hash: 7xX6rH7i12z21iTWC8vTwBT7bsP1fB8No9Xtvt+ZVCA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C9D5D/DD6F28720A8B11EABCF9CE52C4F9AE02/Ny2TbjjYucsfcBIhn_ghcrkL7lg.crl rsync://rpki.apnic.net/member_repository/A91C9D5D/DD6F28720A8B11EABCF9CE52C4F9AE02/Ny2TbjjYucsfcBIhn_ghcrkL7lg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ny2TbjjYucsfcBIhn_ghcrkL7lg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 18:46:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3116 (0xc2c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C9D5D, serialNumber=372D936E38D8B9CB1F7012219FF82172B90BEE58 Validity Not Before: May 30 18:46:13 2025 GMT Not After : Jun 6 18:46:13 2025 GMT Subject: CN=6839fcf5-26c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:5b:19:ce:fa:47:0d:d2:32:7d:2c:6e:9d:93: 2b:8a:6b:27:8b:fa:03:01:5a:ef:91:04:b4:b6:64: a5:c7:ec:dd:5b:8f:7d:df:2f:8f:5f:21:63:00:ac: e8:fe:bc:14:d6:da:d2:bc:b3:7d:77:a9:3b:e9:15: 87:29:cf:64:66:89:0f:67:0d:67:f6:ba:bc:75:4c: df:f7:86:fd:f9:42:fc:4f:4d:0e:e6:b1:a7:60:b1: 10:f0:ad:a1:fe:23:4e:de:1d:82:6c:62:01:ca:0b: 0e:88:44:b7:8e:de:ce:8b:6b:ba:fb:7f:60:75:b4: 91:74:bb:08:32:68:88:fe:4b:1f:5d:40:36:18:71: d9:9b:c5:31:34:c1:c9:90:e0:68:0a:09:d7:c0:29: 76:e4:56:b9:e9:6d:04:89:e7:42:82:52:3e:64:3c: 7b:e1:2b:52:e9:07:8c:c4:9f:72:8c:cf:80:2f:a4: 07:f5:97:83:69:05:ef:33:c1:58:cd:3d:be:6f:49: 55:c9:5c:76:56:0f:fb:4c:c1:ed:55:1f:98:83:38: 35:42:8a:6d:57:bd:a3:9f:d0:ae:6c:9c:02:d1:82: da:42:d3:74:6d:76:a6:e4:a3:e6:09:27:86:0f:f4: 55:d1:88:e7:cf:85:2c:b0:2a:e5:d2:c4:35:d5:c7: 67:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:75:BA:F5:99:D8:C3:8B:AF:C3:EA:3F:62:86:E9:79:0B:08:11:5D X509v3 Authority Key Identifier: keyid:37:2D:93:6E:38:D8:B9:CB:1F:70:12:21:9F:F8:21:72:B9:0B:EE:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C9D5D/DD6F28720A8B11EABCF9CE52C4F9AE02/Ny2TbjjYucsfcBIhn_ghcrkL7lg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ny2TbjjYucsfcBIhn_ghcrkL7lg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9D5D/DD6F28720A8B11EABCF9CE52C4F9AE02/Ny2TbjjYucsfcBIhn_ghcrkL7lg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 86:11:7f:af:c5:21:2d:e9:43:9f:15:de:9a:41:4f:4c:97:04: d3:62:42:ec:0e:02:4e:70:29:aa:6d:c9:a2:6e:7b:d5:04:62: 97:ba:fd:e5:88:63:6f:5b:04:15:cb:e2:cf:53:71:23:7f:d4: 75:50:ab:60:73:fd:db:d7:eb:af:4f:27:1a:01:05:79:d5:76: 36:a8:ea:ab:69:a9:c3:12:4a:5b:64:7b:e8:51:d4:f0:82:8c: 5a:e4:9a:53:68:4a:d8:2d:48:07:21:ca:0e:d2:42:4c:10:d1: d5:ba:02:33:65:de:30:38:22:40:03:01:9e:59:ca:71:29:eb: be:15:61:df:6d:f1:8c:10:db:24:2a:2e:62:40:a3:09:9c:4b: 2b:1d:58:30:45:2c:b6:69:60:f8:24:f6:66:d8:d9:4d:fb:c5: da:5f:a7:c1:ee:f2:83:c9:15:a8:14:47:3f:00:e3:e9:c1:d3: 5a:db:18:9d:b5:8b:71:06:13:f6:e6:cc:f2:9f:fc:f8:5e:1d: e6:c6:35:f7:6e:db:f9:8c:93:e9:a7:bf:5b:66:d7:18:c5:f0: 3a:a4:31:e3:db:f7:80:bc:35:0a:b6:81:86:d9:71:fe:ca:ae: 79:47:22:ba:c7:54:e7:94:74:3f:80:b6:54:48:df:f4:fe:b3: e1:81:fb:2d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDCwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzlENUQxMTAvBgNVBAUTKDM3MkQ5MzZFMzhEOEI5Q0IxRjcwMTIyMTlGRjgyMTcy QjkwQkVFNTgwHhcNMjUwNTMwMTg0NjEzWhcNMjUwNjA2MTg0NjEzWjAYMRYwFAYD VQQDEw02ODM5ZmNmNS0yNmM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyFsZzvpHDdIyfSxunZMrimsni/oDAVrvkQS0tmSlx+zdW4993y+PXyFjAKzo /rwU1trSvLN9d6k76RWHKc9kZokPZw1n9rq8dUzf94b9+UL8T00O5rGnYLEQ8K2h /iNO3h2CbGIBygsOiES3jt7Oi2u6+39gdbSRdLsIMmiI/ksfXUA2GHHZm8UxNMHJ kOBoCgnXwCl25Fa56W0EiedCglI+ZDx74StS6QeMxJ9yjM+AL6QH9ZeDaQXvM8FY zT2+b0lVyVx2Vg/7TMHtVR+Ygzg1QoptV72jn9CubJwC0YLaQtN0bXam5KPmCSeG D/RV0Yjnz4UssCrl0sQ11cdnUwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJR1uvWZ 2MOLr8PqP2KG6XkLCBFdMB8GA1UdIwQYMBaAFDctk2442LnLH3ASIZ/4IXK5C+5Y MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOUQ1RC9ERDZGMjg3MjBB OEIxMUVBQkNGOUNFNTJDNEY5QUUwMi9OeTJUYmpqWXVjc2ZjQklobl9naGNya0w3 bGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL055MlRiampZdWNzZmNCSWhuX2doY3JrTDdsZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD OUQ1RC9ERDZGMjg3MjBBOEIxMUVBQkNGOUNFNTJDNEY5QUUwMi9OeTJUYmpqWXVj c2ZjQklobl9naGNya0w3bGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCGEX+vxSEt6UOfFd6aQU9MlwTTYkLsDgJOcCmqbcmibnvVBGKXuv3l iGNvWwQVy+LPU3Ejf9R1UKtgc/3b1+uvTycaAQV51XY2qOqraanDEkpbZHvoUdTw goxa5JpTaErYLUgHIcoO0kJMENHVugIzZd4wOCJAAwGeWcpxKeu+FWHfbfGMENsk Ki5iQKMJnEsrHVgwRSy2aWD4JPZm2NlN+8XaX6fB7vKDyRWoFEc/AOPpwdNa2xid tYtxBhP25szyn/z4Xh3mxjX3btv5jJPpp79bZtcYxfA6pDHj2/eAvDUKtoGG2XH+ yq55RyK6x1TnlHQ/gLZUSN/0/rPhgfst -----END CERTIFICATE-----Generated at Sat May 31 17:14:34 2025 by rpki-client