$ rpki-client -vvf rpki.apnic.net/member_repository/A91CCD0C/819A023432CB11EF9EA0C96AC4F9AE02/NSwvQv_2bLhqacZ-5hurbhEVTss.mft File: NSwvQv_2bLhqacZ-5hurbhEVTss.mft (raw, json) Hash identifier: jhNl/z1bVyt+XsxhHEOWb5Psst8I51TXI8M+EAZSHPM= Subject key identifier: 2E:77:8C:4C:08:A0:98:98:7C:04:7A:EC:E9:8D:EB:C3:5E:30:B1:10 Authority key identifier: 35:2C:2F:42:FF:F6:6C:B8:6A:69:C6:7E:E6:1B:AB:6E:11:15:4E:CB Certificate issuer: /CN=A91CCD0C/serialNumber=352C2F42FFF66CB86A69C67EE61BAB6E11154ECB Certificate serial: B2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NSwvQv_2bLhqacZ-5hurbhEVTss.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CCD0C/819A023432CB11EF9EA0C96AC4F9AE02/NSwvQv_2bLhqacZ-5hurbhEVTss.mft Manifest number: B0 Signing time: Sat 31 May 2025 05:37:20 +0000 Manifest this update: Sat 31 May 2025 05:37:19 +0000 Manifest next update: Sat 07 Jun 2025 05:37:19 +0000 Files and hashes: 1: NSwvQv_2bLhqacZ-5hurbhEVTss.crl (hash: vbd6+YBn7MI5sOBk+p3kKWaeFS8159YPFRHUzbNvT3Q=) 2: E5BB4DB260E411EF83727F5CC4F9AE02.roa (hash: sjsLTuWeFwgevoPUUjQqWdyEX8OASo8b7yHbpb8l0pc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CCD0C/819A023432CB11EF9EA0C96AC4F9AE02/NSwvQv_2bLhqacZ-5hurbhEVTss.crl rsync://rpki.apnic.net/member_repository/A91CCD0C/819A023432CB11EF9EA0C96AC4F9AE02/NSwvQv_2bLhqacZ-5hurbhEVTss.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NSwvQv_2bLhqacZ-5hurbhEVTss.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 05:37:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 178 (0xb2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CCD0C, serialNumber=352C2F42FFF66CB86A69C67EE61BAB6E11154ECB Validity Not Before: May 31 05:37:19 2025 GMT Not After : Jun 7 05:37:19 2025 GMT Subject: CN=683a9590-75bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:d3:8b:5c:84:5d:c7:f2:2a:6a:a9:0c:b6:68: 8c:94:38:82:8e:97:52:1b:a7:8f:a7:57:72:fe:81: b2:61:76:be:75:6b:b1:0a:26:cd:ca:54:14:ff:ef: 3e:81:be:c9:8b:d4:ea:68:79:15:2f:52:04:f2:2f: 30:d6:7e:c4:7e:31:69:55:4e:ac:31:35:de:fd:6c: c1:5f:03:63:d5:37:ba:f6:f8:1e:54:e0:b6:08:9f: c0:7a:5e:11:50:06:fd:f9:32:d7:be:f5:8c:a5:85: 52:d2:d3:bf:2c:9f:8c:c2:1f:a7:9e:a8:6e:c5:81: 87:cc:c2:07:19:e9:1d:d4:cd:fc:65:fd:8b:5b:4a: 9d:68:88:20:6b:1b:72:a8:a8:e7:67:e8:6f:32:d9: c3:6b:10:10:b7:08:ff:20:83:bd:55:52:6c:dc:1c: df:8b:cf:49:a7:72:9c:d9:32:7f:0f:93:1d:3d:a2: 51:4d:20:0a:7d:4a:01:52:bf:43:41:aa:b7:fb:94: 78:4b:6e:92:67:da:26:4f:d1:d6:66:cf:a2:c5:f5: 90:d5:e6:55:da:7e:e9:97:86:c7:48:e6:00:a2:3d: 9b:c7:5b:93:a8:e2:f8:62:27:83:00:7a:93:a8:4d: ec:20:59:3b:0a:16:09:9f:53:cb:f4:9d:c0:9e:17: 6d:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:77:8C:4C:08:A0:98:98:7C:04:7A:EC:E9:8D:EB:C3:5E:30:B1:10 X509v3 Authority Key Identifier: keyid:35:2C:2F:42:FF:F6:6C:B8:6A:69:C6:7E:E6:1B:AB:6E:11:15:4E:CB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CCD0C/819A023432CB11EF9EA0C96AC4F9AE02/NSwvQv_2bLhqacZ-5hurbhEVTss.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NSwvQv_2bLhqacZ-5hurbhEVTss.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CCD0C/819A023432CB11EF9EA0C96AC4F9AE02/NSwvQv_2bLhqacZ-5hurbhEVTss.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1d:52:79:0d:dc:6b:13:51:c4:ff:41:37:cf:f6:41:23:72:78: 36:20:bd:fa:61:f9:6f:34:85:99:ff:3f:d5:fe:47:4e:a3:03: bd:f6:0f:b3:81:f7:bc:83:42:2f:a5:11:64:a8:94:29:34:3e: 9d:c3:1a:48:3b:3b:b5:a8:5c:e9:b7:d1:d6:08:90:7b:3f:ff: 7b:db:c6:8a:2c:16:7d:38:76:4d:73:92:df:17:5e:b2:61:b6: 76:0b:5e:c8:6d:72:d1:ef:62:2b:80:68:b4:1a:ef:33:d5:cc: 1f:d4:de:9f:64:c6:19:52:ac:7b:8f:e5:08:7e:5d:a1:95:f4: 9f:49:c0:dd:fd:a9:89:88:49:bf:a2:d6:fa:db:1b:7f:15:70: 96:20:a1:05:2a:06:7e:7d:91:82:62:55:c7:cc:97:36:0d:b9: f9:7d:be:34:bc:2b:b7:22:62:68:b5:51:4a:14:b8:20:b7:09: f1:1a:f5:eb:df:b7:51:3d:e3:8a:48:a2:6d:e7:c1:bf:c8:03: 76:83:7e:43:77:f8:e1:8d:44:fd:39:c0:94:11:e5:72:49:75: 28:4a:86:ee:2b:80:16:15:81:0c:7a:d3:61:6c:7d:66:0b:97: 89:21:47:6e:26:cf:22:32:ae:6e:19:c6:77:86:8a:e1:e6:4f: c9:a2:08:76 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0NEMEMxMTAvBgNVBAUTKDM1MkMyRjQyRkZGNjZDQjg2QTY5QzY3RUU2MUJBQjZF MTExNTRFQ0IwHhcNMjUwNTMxMDUzNzE5WhcNMjUwNjA3MDUzNzE5WjAYMRYwFAYD VQQDEw02ODNhOTU5MC03NWJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4tOLXIRdx/IqaqkMtmiMlDiCjpdSG6ePp1dy/oGyYXa+dWuxCibNylQU/+8+ gb7Ji9TqaHkVL1IE8i8w1n7EfjFpVU6sMTXe/WzBXwNj1Te69vgeVOC2CJ/Ael4R UAb9+TLXvvWMpYVS0tO/LJ+Mwh+nnqhuxYGHzMIHGekd1M38Zf2LW0qdaIggaxty qKjnZ+hvMtnDaxAQtwj/IIO9VVJs3Bzfi89Jp3Kc2TJ/D5MdPaJRTSAKfUoBUr9D Qaq3+5R4S26SZ9omT9HWZs+ixfWQ1eZV2n7pl4bHSOYAoj2bx1uTqOL4YieDAHqT qE3sIFk7ChYJn1PL9J3AnhdtNQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC53jEwI oJiYfAR67OmN68NeMLEQMB8GA1UdIwQYMBaAFDUsL0L/9my4amnGfuYbq24RFU7L MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQ0QwQy84MTlBMDIzNDMy Q0IxMUVGOUVBMEM5NkFDNEY5QUUwMi9OU3d2UXZfMmJMaHFhY1otNWh1cmJoRVZU c3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05Td3ZRdl8yYkxocWFjWi01aHVyYmhFVlRzcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD Q0QwQy84MTlBMDIzNDMyQ0IxMUVGOUVBMEM5NkFDNEY5QUUwMi9OU3d2UXZfMmJM aHFhY1otNWh1cmJoRVZUc3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAdUnkN3GsTUcT/QTfP9kEjcng2IL36YflvNIWZ/z/V/kdOowO99g+z gfe8g0IvpRFkqJQpND6dwxpIOzu1qFzpt9HWCJB7P/9728aKLBZ9OHZNc5LfF16y YbZ2C17IbXLR72IrgGi0Gu8z1cwf1N6fZMYZUqx7j+UIfl2hlfSfScDd/amJiEm/ otb62xt/FXCWIKEFKgZ+fZGCYlXHzJc2Dbn5fb40vCu3ImJotVFKFLggtwnxGvXr 37dRPeOKSKJt58G/yAN2g35Dd/jhjUT9OcCUEeVySXUoSobuK4AWFYEMetNhbH1m C5eJIUduJs8iMq5uGcZ3horh5k/Jogh2 -----END CERTIFICATE-----Generated at Sat May 31 17:17:30 2025 by rpki-client