$ rpki-client -vvf rpki.apnic.net/member_repository/A91CAA4E/55E9795AA94F11E8AA0C900EC4F9AE02/nE_-Zd6jUjPTnocCI4VlV03tRm4.mft File: nE_-Zd6jUjPTnocCI4VlV03tRm4.mft (raw, json) Hash identifier: DF73NmavEZZ5jQB4hCZ6aVfMzo3sQ7gdEYG0itq1yx4= Subject key identifier: FE:6F:65:B3:38:45:E1:3B:10:E9:8E:B4:FF:C7:BD:AF:3F:69:6E:6D Authority key identifier: 9C:4F:FE:65:DE:A3:52:33:D3:9E:87:02:23:85:65:57:4D:ED:46:6E Certificate issuer: /CN=A91CAA4E/serialNumber=9C4FFE65DEA35233D39E8702238565574DED466E Certificate serial: 0726 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nE_-Zd6jUjPTnocCI4VlV03tRm4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CAA4E/55E9795AA94F11E8AA0C900EC4F9AE02/nE_-Zd6jUjPTnocCI4VlV03tRm4.mft Manifest number: 1A46 Signing time: Fri 30 May 2025 17:12:08 +0000 Manifest this update: Fri 30 May 2025 17:12:08 +0000 Manifest next update: Fri 06 Jun 2025 17:12:08 +0000 Files and hashes: 1: nE_-Zd6jUjPTnocCI4VlV03tRm4.crl (hash: KDRe6Y8V4STTdq5FBX84xhwrlZ1zdf/OrDRb0iOJRFw=) 2: FFFE92D29CE611EE883A672FC4F9AE02.roa (hash: GWwckZ18h6sa8xUJU0MBnoisjDnt082CFlW4eSRU0Y4=) 3: 653DCD9ADEE811EF9DE2374CC4F9AE02.roa (hash: Mazx36+KDEkICPeaUfwJ/FcwJ2wGDeNl/2eEhKXlMWc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CAA4E/55E9795AA94F11E8AA0C900EC4F9AE02/nE_-Zd6jUjPTnocCI4VlV03tRm4.crl rsync://rpki.apnic.net/member_repository/A91CAA4E/55E9795AA94F11E8AA0C900EC4F9AE02/nE_-Zd6jUjPTnocCI4VlV03tRm4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nE_-Zd6jUjPTnocCI4VlV03tRm4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 17:12:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1830 (0x726) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CAA4E, serialNumber=9C4FFE65DEA35233D39E8702238565574DED466E Validity Not Before: May 30 17:12:08 2025 GMT Not After : Jun 6 17:12:08 2025 GMT Subject: CN=6839e6e8-ea5f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:1c:3f:41:08:c4:8a:e8:d6:64:48:4b:65:d2: f6:a0:9b:f4:fb:d3:44:ea:33:3f:87:28:e9:7b:e5: a7:20:9a:6d:23:3c:7e:eb:8c:37:96:56:bb:0d:f5: c3:94:b3:27:d3:cf:ba:f7:50:f8:ee:9e:8b:ca:4a: ba:99:e2:52:8d:b1:f6:5c:dd:91:0a:69:84:a3:89: bd:af:94:fb:94:35:dd:35:d0:7c:99:dd:1a:0c:85: 25:1a:b0:a6:65:c2:23:2a:7b:fe:95:dc:af:c8:b7: 46:a1:91:38:92:33:e3:54:63:c7:5f:71:bd:74:fb: 16:74:5e:74:fa:13:78:92:1f:c7:2a:07:80:20:8e: 48:07:4c:d8:2b:32:b0:df:50:12:3a:7f:70:b9:c7: 07:bb:ef:f6:f3:ac:28:fe:bc:f5:93:45:aa:b9:ae: 1e:cf:e7:9c:76:d3:ba:28:5f:31:6f:e4:28:c7:62: ea:33:20:24:a3:55:b8:2e:d2:80:b1:ff:61:59:82: 9b:9e:30:6d:ed:27:fe:61:4a:a4:27:95:a5:f9:47: b6:d8:42:35:a6:90:ee:04:87:22:06:f3:c5:fc:8e: fc:70:1b:57:13:cc:fa:f4:6d:2e:b8:41:6b:27:ac: 88:81:cd:28:c7:57:10:da:7e:02:be:d1:6f:7c:0c: d6:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:6F:65:B3:38:45:E1:3B:10:E9:8E:B4:FF:C7:BD:AF:3F:69:6E:6D X509v3 Authority Key Identifier: keyid:9C:4F:FE:65:DE:A3:52:33:D3:9E:87:02:23:85:65:57:4D:ED:46:6E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CAA4E/55E9795AA94F11E8AA0C900EC4F9AE02/nE_-Zd6jUjPTnocCI4VlV03tRm4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nE_-Zd6jUjPTnocCI4VlV03tRm4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CAA4E/55E9795AA94F11E8AA0C900EC4F9AE02/nE_-Zd6jUjPTnocCI4VlV03tRm4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 81:5c:4d:74:9e:9b:82:8f:00:39:d9:2d:6c:c4:a2:25:a4:f0: f5:a6:e3:7e:82:b3:e7:f8:8f:bb:d1:a6:26:ea:3d:92:3e:17: d7:0a:cd:49:52:b1:ae:84:55:97:cb:99:f6:0e:99:2f:f5:22: 43:8d:57:8d:97:a9:da:bc:3d:98:aa:59:8d:1e:06:16:10:69: 00:eb:4a:06:bd:42:a2:4a:02:c5:17:d5:69:85:66:fb:07:93: 7d:8d:a6:ab:52:05:13:65:25:77:99:98:60:bf:f9:80:67:6f: ea:95:ce:17:56:30:4d:9b:ed:e7:f7:24:dd:39:05:43:97:87: 94:76:e0:da:5b:21:21:13:f8:6a:a7:fd:6d:d2:42:5e:22:81: 6f:1c:c4:6b:a4:87:f3:df:50:a2:f4:ec:62:04:27:36:8c:71: fb:42:75:e3:e7:24:c8:f6:e7:55:03:db:bb:9a:99:1c:8c:b4: da:eb:d6:98:46:b0:f3:61:e6:9a:7a:dd:0f:5b:db:2c:8e:04: 9c:b7:d5:a0:8f:a8:01:0d:ff:98:92:45:ec:3b:c7:66:52:97: 37:c9:33:fc:53:bb:8c:8e:bd:3d:c9:f6:ed:07:b9:05:f5:ef: 41:62:ff:cd:8f:ec:0e:db:dd:1f:a5:b9:55:b7:9b:8f:28:73: 2e:b0:57:5a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICByYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0FBNEUxMTAvBgNVBAUTKDlDNEZGRTY1REVBMzUyMzNEMzlFODcwMjIzODU2NTU3 NERFRDQ2NkUwHhcNMjUwNTMwMTcxMjA4WhcNMjUwNjA2MTcxMjA4WjAYMRYwFAYD VQQDEw02ODM5ZTZlOC1lYTVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyhw/QQjEiujWZEhLZdL2oJv0+9NE6jM/hyjpe+WnIJptIzx+64w3lla7DfXD lLMn08+691D47p6Lykq6meJSjbH2XN2RCmmEo4m9r5T7lDXdNdB8md0aDIUlGrCm ZcIjKnv+ldyvyLdGoZE4kjPjVGPHX3G9dPsWdF50+hN4kh/HKgeAII5IB0zYKzKw 31ASOn9wuccHu+/286wo/rz1k0Wqua4ez+ecdtO6KF8xb+Qox2LqMyAko1W4LtKA sf9hWYKbnjBt7Sf+YUqkJ5Wl+Ue22EI1ppDuBIciBvPF/I78cBtXE8z69G0uuEFr J6yIgc0ox1cQ2n4CvtFvfAzWDQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP5vZbM4 ReE7EOmOtP/Hva8/aW5tMB8GA1UdIwQYMBaAFJxP/mXeo1Iz056HAiOFZVdN7UZu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQUE0RS81NUU5Nzk1QUE5 NEYxMUU4QUEwQzkwMEVDNEY5QUUwMi9uRV8tWmQ2alVqUFRub2NDSTRWbFYwM3RS bTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25FXy1aZDZqVWpQVG5vY0NJNFZsVjAzdFJtNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QUE0RS81NUU5Nzk1QUE5NEYxMUU4QUEwQzkwMEVDNEY5QUUwMi9uRV8tWmQ2alVq UFRub2NDSTRWbFYwM3RSbTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCBXE10npuCjwA52S1sxKIlpPD1puN+grPn+I+70aYm6j2SPhfXCs1J UrGuhFWXy5n2Dpkv9SJDjVeNl6navD2YqlmNHgYWEGkA60oGvUKiSgLFF9VphWb7 B5N9jaarUgUTZSV3mZhgv/mAZ2/qlc4XVjBNm+3n9yTdOQVDl4eUduDaWyEhE/hq p/1t0kJeIoFvHMRrpIfz31Ci9OxiBCc2jHH7QnXj5yTI9udVA9u7mpkcjLTa69aY RrDzYeaaet0PW9ssjgSct9Wgj6gBDf+YkkXsO8dmUpc3yTP8U7uMjr09yfbtB7kF 9e9BYv/Nj+wO290fpblVt5uPKHMusFda -----END CERTIFICATE-----Generated at Sat May 31 17:50:37 2025 by rpki-client