$ rpki-client -vvf rpki.apnic.net/member_repository/A91CFC1C/3C142B1657FE11EEAA553060C4F9AE02/NkXNkOP0PAEtqzvzly6GvJTd1FQ.mft File: NkXNkOP0PAEtqzvzly6GvJTd1FQ.mft (raw, json) Hash identifier: aMI9VdCir1LnRQdL4sMWYgA2ogqlD/D1IdNR3cihbds= Subject key identifier: B1:56:22:7A:24:EA:8C:63:31:6F:01:6A:38:0E:2C:E4:36:07:BA:D9 Authority key identifier: 36:45:CD:90:E3:F4:3C:01:2D:AB:3B:F3:97:2E:86:BC:94:DD:D4:54 Certificate issuer: /CN=A91CFC1C/serialNumber=3645CD90E3F43C012DAB3BF3972E86BC94DDD454 Certificate serial: 0143 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NkXNkOP0PAEtqzvzly6GvJTd1FQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CFC1C/3C142B1657FE11EEAA553060C4F9AE02/NkXNkOP0PAEtqzvzly6GvJTd1FQ.mft Manifest number: 013E Signing time: Sat 31 May 2025 04:02:26 +0000 Manifest this update: Sat 31 May 2025 04:02:25 +0000 Manifest next update: Sat 07 Jun 2025 04:02:25 +0000 Files and hashes: 1: NkXNkOP0PAEtqzvzly6GvJTd1FQ.crl (hash: OSFQCe3vYIy2RFC9uYXsJGbixpWdeonpiSJbxDvwIX0=) 2: E69E92582C4A11EF91F6202DC4F9AE02.roa (hash: uDYRjWDNbbuer7nADrVfw+s2rVnYHfiATUhAxlq32S0=) 3: B390F78E5CB611EE97D70B78C4F9AE02.roa (hash: LoclVr/421CJQL/D+2O/iwx9gXkx3/NwzPPfEEt2ocM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CFC1C/3C142B1657FE11EEAA553060C4F9AE02/NkXNkOP0PAEtqzvzly6GvJTd1FQ.crl rsync://rpki.apnic.net/member_repository/A91CFC1C/3C142B1657FE11EEAA553060C4F9AE02/NkXNkOP0PAEtqzvzly6GvJTd1FQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NkXNkOP0PAEtqzvzly6GvJTd1FQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 04:02:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 323 (0x143) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CFC1C, serialNumber=3645CD90E3F43C012DAB3BF3972E86BC94DDD454 Validity Not Before: May 31 04:02:25 2025 GMT Not After : Jun 7 04:02:25 2025 GMT Subject: CN=683a7f52-c1ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:ab:aa:47:f2:b3:ae:85:63:82:a5:1d:3b:b3: c0:c0:db:ab:35:ce:6a:19:26:d8:a6:9c:07:2e:7d: f2:37:c7:64:12:e0:07:06:d0:61:83:5d:bc:62:58: 7d:dc:ea:51:e3:bb:7a:f7:f4:70:06:3a:c0:cc:1b: 29:9f:93:fa:80:57:78:b2:98:cf:44:0b:4f:1c:36: 01:70:27:02:76:27:cf:49:00:1d:bf:51:05:9d:fa: a6:77:26:30:d1:49:97:35:24:c2:7b:c6:5e:3b:d2: 25:00:2d:01:05:64:fc:3e:99:fc:95:ad:b3:ae:23: 2c:e9:14:f6:f9:5d:9e:f2:a6:04:bb:91:20:d0:eb: 41:ce:5e:02:59:c3:0d:d9:ea:24:67:4e:7f:c6:63: 8e:b5:8e:6f:82:1e:9f:ac:da:c5:43:14:64:0c:3a: b2:ee:c9:0f:c9:39:d7:97:1c:ca:d9:0f:fa:2c:2a: 90:67:27:db:e1:5d:f1:86:ad:ab:f9:fa:d4:91:36: 81:33:33:ba:2a:00:3c:32:06:0e:e8:61:6f:1d:22: be:b4:96:b0:ae:fa:b5:20:20:77:5c:23:20:1a:86: eb:b2:97:cf:2c:6b:fa:09:bb:ac:23:70:4b:38:13: 23:52:ce:6a:16:e7:d3:b3:a6:8e:dd:e8:21:e5:82: de:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:56:22:7A:24:EA:8C:63:31:6F:01:6A:38:0E:2C:E4:36:07:BA:D9 X509v3 Authority Key Identifier: keyid:36:45:CD:90:E3:F4:3C:01:2D:AB:3B:F3:97:2E:86:BC:94:DD:D4:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CFC1C/3C142B1657FE11EEAA553060C4F9AE02/NkXNkOP0PAEtqzvzly6GvJTd1FQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NkXNkOP0PAEtqzvzly6GvJTd1FQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CFC1C/3C142B1657FE11EEAA553060C4F9AE02/NkXNkOP0PAEtqzvzly6GvJTd1FQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bb:47:91:ca:79:d9:9b:91:99:a0:92:fb:7f:23:72:d7:90:db: a9:a1:3b:7d:6e:c7:24:b7:3d:bb:aa:32:11:39:cf:a6:e3:81: 38:dd:54:91:24:b5:46:97:21:47:db:98:e8:85:54:df:b7:9f: 0a:f2:27:a7:f8:fa:14:a7:67:27:a6:0a:d6:15:54:ad:1d:12: 75:36:3e:03:23:a8:b8:ca:6d:f8:40:7e:d8:80:a4:ec:f4:58: 14:99:56:d5:49:20:3d:18:b7:35:ef:c2:4e:d0:68:a4:d3:90: 80:4b:ca:b1:94:6d:78:a2:ac:37:b8:f1:0e:e4:08:86:9d:9b: ef:ad:06:30:aa:28:f4:76:0e:26:76:79:50:ec:2a:1e:88:d6: d6:28:ad:09:3d:87:87:64:4e:73:6f:8d:cf:d7:39:58:f7:8a: 92:2b:54:d5:b2:77:58:cc:7d:09:f2:70:ff:ce:2b:42:72:db: e0:5f:a1:6d:92:2f:75:8e:5f:4d:6d:cb:e7:b7:75:dc:b2:43: 0e:b5:02:76:d4:48:1e:f4:b7:a6:11:7e:4e:82:35:5b:9a:39: 76:42:c9:74:d7:0c:ce:2f:62:29:5e:7b:ac:c7:e4:bc:04:ba: 5d:8a:f1:70:20:ca:b0:64:32:b5:fa:2d:58:e8:1e:24:be:50: b7:99:3a:6c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAUMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0ZDMUMxMTAvBgNVBAUTKDM2NDVDRDkwRTNGNDNDMDEyREFCM0JGMzk3MkU4NkJD OTREREQ0NTQwHhcNMjUwNTMxMDQwMjI1WhcNMjUwNjA3MDQwMjI1WjAYMRYwFAYD VQQDEw02ODNhN2Y1Mi1jMWVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4auqR/KzroVjgqUdO7PAwNurNc5qGSbYppwHLn3yN8dkEuAHBtBhg128Ylh9 3OpR47t69/RwBjrAzBspn5P6gFd4spjPRAtPHDYBcCcCdifPSQAdv1EFnfqmdyYw 0UmXNSTCe8ZeO9IlAC0BBWT8Ppn8la2zriMs6RT2+V2e8qYEu5Eg0OtBzl4CWcMN 2eokZ05/xmOOtY5vgh6frNrFQxRkDDqy7skPyTnXlxzK2Q/6LCqQZyfb4V3xhq2r +frUkTaBMzO6KgA8MgYO6GFvHSK+tJawrvq1ICB3XCMgGobrspfPLGv6CbusI3BL OBMjUs5qFufTs6aO3egh5YLeeQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLFWInok 6oxjMW8BajgOLOQ2B7rZMB8GA1UdIwQYMBaAFDZFzZDj9DwBLas785cuhryU3dRU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRkMxQy8zQzE0MkIxNjU3 RkUxMUVFQUE1NTMwNjBDNEY5QUUwMi9Oa1hOa09QMFBBRXRxenZ6bHk2R3ZKVGQx RlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05rWE5rT1AwUEFFdHF6dnpseTZHdkpUZDFGUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RkMxQy8zQzE0MkIxNjU3RkUxMUVFQUE1NTMwNjBDNEY5QUUwMi9Oa1hOa09QMFBB RXRxenZ6bHk2R3ZKVGQxRlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC7R5HKedmbkZmgkvt/I3LXkNupoTt9bscktz27qjIROc+m44E43VSR JLVGlyFH25johVTft58K8ien+PoUp2cnpgrWFVStHRJ1Nj4DI6i4ym34QH7YgKTs 9FgUmVbVSSA9GLc178JO0Gik05CAS8qxlG14oqw3uPEO5AiGnZvvrQYwqij0dg4m dnlQ7CoeiNbWKK0JPYeHZE5zb43P1zlY94qSK1TVsndYzH0J8nD/zitCctvgX6Ft ki91jl9Nbcvnt3XcskMOtQJ21Ege9LemEX5OgjVbmjl2Qsl01wzOL2IpXnusx+S8 BLpdivFwIMqwZDK1+i1Y6B4kvlC3mTps -----END CERTIFICATE-----Generated at Sat May 31 17:13:00 2025 by rpki-client