$ rpki-client -vvf rpki.apnic.net/member_repository/A91CEAE0/AEF63760196811EF8FF7BE6FC4F9AE02/nfT-3_kqnn9uAr_AVK0zmFPZ3TI.mft File: nfT-3_kqnn9uAr_AVK0zmFPZ3TI.mft (raw, json) Hash identifier: CAeISaf3VnXd+R6Za5dQ0jbyipFcVkz2ZMqZkyt/1Og= Subject key identifier: B1:62:A4:B2:88:56:7B:E5:66:E5:B6:01:69:F1:30:C3:04:0F:BB:71 Authority key identifier: 9D:F4:FE:DF:F9:2A:9E:7F:6E:02:BF:C0:54:AD:33:98:53:D9:DD:32 Certificate issuer: /CN=A91CEAE0/serialNumber=9DF4FEDFF92A9E7F6E02BFC054AD339853D9DD32 Certificate serial: F2 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nfT-3_kqnn9uAr_AVK0zmFPZ3TI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CEAE0/AEF63760196811EF8FF7BE6FC4F9AE02/nfT-3_kqnn9uAr_AVK0zmFPZ3TI.mft Manifest number: DC Signing time: Sun 01 Jun 2025 05:32:57 +0000 Manifest this update: Sun 01 Jun 2025 05:32:56 +0000 Manifest next update: Sun 08 Jun 2025 05:32:56 +0000 Files and hashes: 1: nfT-3_kqnn9uAr_AVK0zmFPZ3TI.crl (hash: i2ME06vFxuUmg7ttclYQlhIvv5SRsQfnUYwmTjK9bfo=) 2: FF233C70E62111EFACA87766C4F9AE02.roa (hash: J5BMXPUW8m7K2bOF3471IMNvup3jPF22uZ9URvu627E=) 3: 77E54B78C45111EF9D399128C4F9AE02.roa (hash: kZrd3mAtaTduvChHj54cupYMhDS7pTsrXNeCRQqiQrc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CEAE0/AEF63760196811EF8FF7BE6FC4F9AE02/nfT-3_kqnn9uAr_AVK0zmFPZ3TI.crl rsync://rpki.apnic.net/member_repository/A91CEAE0/AEF63760196811EF8FF7BE6FC4F9AE02/nfT-3_kqnn9uAr_AVK0zmFPZ3TI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nfT-3_kqnn9uAr_AVK0zmFPZ3TI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Jun 2025 05:32:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 242 (0xf2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CEAE0, serialNumber=9DF4FEDFF92A9E7F6E02BFC054AD339853D9DD32 Validity Not Before: Jun 1 05:32:56 2025 GMT Not After : Jun 8 05:32:56 2025 GMT Subject: CN=683be608-3fd7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:d3:b4:1b:74:1d:67:06:bd:5c:e3:a9:a2:b1: 32:eb:09:ab:da:02:7e:8c:39:18:6e:53:97:ef:9c: 97:66:c1:98:66:c9:11:e1:6a:8a:ed:fa:94:fe:4c: 54:b1:56:02:3e:a8:9b:09:e6:6a:87:8b:a7:e7:63: 1a:ac:3a:4b:e8:1a:d3:05:f8:97:3b:6f:c5:04:ce: 9b:3f:29:15:47:df:54:5d:96:df:5a:15:5c:07:e3: 1a:cd:c7:b4:2b:0c:07:45:0d:55:15:8d:5a:47:e2: 04:99:4c:09:9e:d3:5c:f7:94:93:1e:a6:6f:d2:c7: 13:48:aa:4a:ba:c4:46:d5:a1:8d:c0:a7:3d:fb:70: 7a:20:5f:f5:a6:4f:65:de:fa:96:24:64:1a:cd:aa: 65:6f:ec:ac:8b:45:ba:26:62:53:d3:4c:f7:00:e5: be:13:9f:b1:09:14:73:00:cc:a1:bd:61:25:15:28: 5d:84:37:42:8d:d4:9b:f4:de:fa:c9:7c:cc:0b:e9: 50:09:79:a6:26:d4:b9:3c:c0:a4:ee:66:d1:64:3b: 79:8b:d1:26:11:36:4a:ec:bd:e2:f1:6c:9d:a0:22: 61:da:8d:ed:84:17:ae:66:ab:2f:d6:7d:68:a4:2e: 1a:d3:d0:dd:be:3f:31:33:bc:fa:00:44:ff:93:b3: 50:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:62:A4:B2:88:56:7B:E5:66:E5:B6:01:69:F1:30:C3:04:0F:BB:71 X509v3 Authority Key Identifier: keyid:9D:F4:FE:DF:F9:2A:9E:7F:6E:02:BF:C0:54:AD:33:98:53:D9:DD:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CEAE0/AEF63760196811EF8FF7BE6FC4F9AE02/nfT-3_kqnn9uAr_AVK0zmFPZ3TI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nfT-3_kqnn9uAr_AVK0zmFPZ3TI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CEAE0/AEF63760196811EF8FF7BE6FC4F9AE02/nfT-3_kqnn9uAr_AVK0zmFPZ3TI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1d:26:98:31:d7:ac:37:39:e5:c7:59:ec:d8:75:80:4a:29:49: e1:d9:c8:d0:62:1a:60:3b:d5:43:63:8a:a7:c7:86:76:5d:aa: c4:bc:56:b2:50:75:7c:82:6c:cf:24:0a:36:69:2b:5c:16:e3: 27:7c:82:9d:d8:2b:50:c1:06:28:a0:46:67:25:6d:fa:34:89: ed:44:0e:ad:06:4a:16:17:92:6c:49:28:24:f6:8f:39:d8:fd: c1:1a:c2:dd:49:73:8a:57:e6:a5:95:61:ec:04:9a:c0:d7:fb: f0:c0:da:a2:f8:f2:d1:13:43:67:55:91:2b:31:ed:fa:9e:c2: e4:93:05:bf:fe:dc:f5:1d:0f:42:1b:ff:b9:8e:d8:83:97:af: ab:38:ce:47:79:f1:1e:93:21:5c:c7:37:56:1f:39:5e:2b:91: bb:1b:03:d8:b9:50:66:c8:c6:6d:30:1d:a7:19:19:e2:8e:23: d9:7f:3f:1c:3d:87:c3:6b:66:e1:b4:15:10:8a:f8:53:40:4f: 16:7d:89:cf:57:58:0b:85:a2:8b:55:0b:2b:54:2f:4f:c4:ac: 1d:26:33:d4:1b:72:4a:0b:ea:dc:d3:18:97:e6:a9:32:50:76: 76:0c:d3:f6:80:30:e4:aa:0b:3b:01:7c:43:f1:d9:04:8a:9e: 3b:d7:3d:28 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0VBRTAxMTAvBgNVBAUTKDlERjRGRURGRjkyQTlFN0Y2RTAyQkZDMDU0QUQzMzk4 NTNEOUREMzIwHhcNMjUwNjAxMDUzMjU2WhcNMjUwNjA4MDUzMjU2WjAYMRYwFAYD VQQDEw02ODNiZTYwOC0zZmQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsdO0G3QdZwa9XOOporEy6wmr2gJ+jDkYblOX75yXZsGYZskR4WqK7fqU/kxU sVYCPqibCeZqh4un52MarDpL6BrTBfiXO2/FBM6bPykVR99UXZbfWhVcB+Mazce0 KwwHRQ1VFY1aR+IEmUwJntNc95STHqZv0scTSKpKusRG1aGNwKc9+3B6IF/1pk9l 3vqWJGQazaplb+ysi0W6JmJT00z3AOW+E5+xCRRzAMyhvWElFShdhDdCjdSb9N76 yXzMC+lQCXmmJtS5PMCk7mbRZDt5i9EmETZK7L3i8WydoCJh2o3thBeuZqsv1n1o pC4a09Ddvj8xM7z6AET/k7NQSwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLFipLKI VnvlZuW2AWnxMMMED7txMB8GA1UdIwQYMBaAFJ30/t/5Kp5/bgK/wFStM5hT2d0y MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRUFFMC9BRUY2Mzc2MDE5 NjgxMUVGOEZGN0JFNkZDNEY5QUUwMi9uZlQtM19rcW5uOXVBcl9BVkswem1GUFoz VEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL25mVC0zX2txbm45dUFyX0FWSzB6bUZQWjNUSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RUFFMC9BRUY2Mzc2MDE5NjgxMUVGOEZGN0JFNkZDNEY5QUUwMi9uZlQtM19rcW5u OXVBcl9BVkswem1GUFozVEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAdJpgx16w3OeXHWezYdYBKKUnh2cjQYhpgO9VDY4qnx4Z2XarEvFay UHV8gmzPJAo2aStcFuMnfIKd2CtQwQYooEZnJW36NIntRA6tBkoWF5JsSSgk9o85 2P3BGsLdSXOKV+allWHsBJrA1/vwwNqi+PLRE0NnVZErMe36nsLkkwW//tz1HQ9C G/+5jtiDl6+rOM5HefEekyFcxzdWHzleK5G7GwPYuVBmyMZtMB2nGRnijiPZfz8c PYfDa2bhtBUQivhTQE8WfYnPV1gLhaKLVQsrVC9PxKwdJjPUG3JKC+rc0xiX5qky UHZ2DNP2gDDkqgs7AXxD8dkEip471z0o -----END CERTIFICATE-----Generated at Mon Jun 2 19:30:35 2025 by rpki-client