$ rpki-client -vvf rpki.apnic.net/member_repository/A91D9B75/9C00202EF48811EBA8DB7D0CC4F9AE02/nLpHShuO1MGFZBkQLgnuXvUcSaU.mft File: nLpHShuO1MGFZBkQLgnuXvUcSaU.mft (raw, json) Hash identifier: S317fi67hw6LYKDSuad5CXSHwT9x2fDE5HfVD0ia6ow= Subject key identifier: 3C:B4:6C:F2:3E:A3:FB:3F:A7:36:2E:3C:1F:51:08:29:41:95:FC:36 Authority key identifier: 9C:BA:47:4A:1B:8E:D4:C1:85:64:19:10:2E:09:EE:5E:F5:1C:49:A5 Certificate issuer: /CN=A91D9B75/serialNumber=9CBA474A1B8ED4C1856419102E09EE5EF51C49A5 Certificate serial: 055B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nLpHShuO1MGFZBkQLgnuXvUcSaU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D9B75/9C00202EF48811EBA8DB7D0CC4F9AE02/nLpHShuO1MGFZBkQLgnuXvUcSaU.mft Manifest number: 054B Signing time: Wed 04 Jun 2025 23:18:19 +0000 Manifest this update: Wed 04 Jun 2025 23:18:18 +0000 Manifest next update: Wed 11 Jun 2025 23:18:18 +0000 Files and hashes: 1: nLpHShuO1MGFZBkQLgnuXvUcSaU.crl (hash: uZ/gNzsh8QyPB7VaVJgPT/xDK3wL+OvKLC5yDyZLd7k=) 2: F1C60FA653DC11EC90927C4DC4F9AE02.roa (hash: 9qbFBS3HM4vcPosn8OSliCwGfWG2+6sVIf90uwZ9kCk=) 3: 5C5F31B09A2A11ECAEE8C819C4F9AE02.roa (hash: m6M1aJQP4A3gQ02xCkEHxQI8XaXpDculDx+d/2LUfO0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D9B75/9C00202EF48811EBA8DB7D0CC4F9AE02/nLpHShuO1MGFZBkQLgnuXvUcSaU.crl rsync://rpki.apnic.net/member_repository/A91D9B75/9C00202EF48811EBA8DB7D0CC4F9AE02/nLpHShuO1MGFZBkQLgnuXvUcSaU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nLpHShuO1MGFZBkQLgnuXvUcSaU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 11 Jun 2025 23:18:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1371 (0x55b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D9B75, serialNumber=9CBA474A1B8ED4C1856419102E09EE5EF51C49A5 Validity Not Before: Jun 4 23:18:18 2025 GMT Not After : Jun 11 23:18:18 2025 GMT Subject: CN=6840d43b-363f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:3c:e1:15:f4:5a:1d:18:e6:8f:da:90:8b:44: 8a:f2:93:83:b8:48:71:4c:f5:99:bf:d3:37:4d:bf: c0:28:76:7d:f1:40:e6:dd:66:42:36:59:de:6e:3d: 4b:6f:74:b9:7d:b1:ab:57:fc:fb:f0:61:cb:90:b4: de:0e:b3:9b:fd:44:d3:65:66:8d:d2:30:4e:e6:af: cb:5b:5e:61:2b:46:71:b4:54:d7:71:47:42:6e:ec: 9c:c7:31:64:5e:79:81:1e:1c:93:8f:b0:83:bc:d1: 20:70:a8:fe:96:a2:8d:dc:17:f6:77:63:04:94:1a: d3:af:1f:19:1f:5a:e7:b8:02:5b:6e:bd:27:6f:52: 70:a0:23:d3:4f:ff:9e:de:f3:07:0d:ed:b6:12:82: 21:11:d5:46:32:46:7e:80:35:8e:39:4f:aa:c0:4d: bc:83:0a:1c:4d:46:ea:31:18:4c:65:01:1b:10:35: 06:43:ce:83:e8:26:a0:b2:e5:be:a2:a3:30:0a:de: 26:f4:32:fd:cd:97:f5:d5:b9:f2:74:54:a3:e4:53: 4b:22:48:10:b6:57:40:70:ee:24:77:ef:63:cb:a3: a6:3c:04:73:a8:c8:9e:75:d1:ad:db:b3:1d:90:a1: e7:72:33:34:76:8c:ce:d3:77:a7:ad:65:57:47:57: 7b:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:B4:6C:F2:3E:A3:FB:3F:A7:36:2E:3C:1F:51:08:29:41:95:FC:36 X509v3 Authority Key Identifier: keyid:9C:BA:47:4A:1B:8E:D4:C1:85:64:19:10:2E:09:EE:5E:F5:1C:49:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D9B75/9C00202EF48811EBA8DB7D0CC4F9AE02/nLpHShuO1MGFZBkQLgnuXvUcSaU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nLpHShuO1MGFZBkQLgnuXvUcSaU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D9B75/9C00202EF48811EBA8DB7D0CC4F9AE02/nLpHShuO1MGFZBkQLgnuXvUcSaU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b6:2e:cc:8a:63:5c:02:16:3e:03:26:a3:a3:42:32:4d:c7:28: d2:db:1f:f3:af:82:c7:26:fb:98:90:e6:3f:cd:06:94:a4:f4: e7:64:66:7f:a2:be:3a:8f:2d:df:14:89:25:81:16:9c:c3:11: 75:e5:0d:b6:56:53:f0:84:fc:16:7c:a2:6b:d5:c0:ca:1e:81: fe:61:9d:9c:fb:a4:aa:d8:73:3b:b7:43:70:e8:9f:16:78:a9: 77:a3:96:ce:71:7b:76:7e:85:f1:c2:14:b0:c7:cc:80:16:d9: 3e:75:a9:d7:ed:04:cc:c9:0f:ed:ef:2d:a4:2d:37:1e:a3:6c: f1:19:f1:6f:fd:65:de:a8:a6:01:29:38:25:83:07:a0:7d:50: fc:77:78:00:49:31:27:b5:36:a4:4f:f8:d9:ab:17:7c:06:17: c1:8d:71:21:cc:e7:8e:f8:82:f4:11:1b:58:35:71:00:94:a3: 1f:c4:11:d9:bb:33:c2:13:14:b1:bc:e8:b1:e4:a7:65:ee:ba: fa:0b:da:1d:7d:4b:5c:64:d7:b6:58:63:d6:0a:a0:56:4c:fa: a5:88:84:fc:34:d4:a2:24:a0:c7:c4:ca:e3:16:9b:20:1f:02: 27:35:e3:3a:af:ce:7f:fb:e7:3b:c0:22:17:c7:cb:ec:53:3b: 1c:27:d6:20 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBVswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDlCNzUxMTAvBgNVBAUTKDlDQkE0NzRBMUI4RUQ0QzE4NTY0MTkxMDJFMDlFRTVF RjUxQzQ5QTUwHhcNMjUwNjA0MjMxODE4WhcNMjUwNjExMjMxODE4WjAYMRYwFAYD VQQDEw02ODQwZDQzYi0zNjNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtDzhFfRaHRjmj9qQi0SK8pODuEhxTPWZv9M3Tb/AKHZ98UDm3WZCNlnebj1L b3S5fbGrV/z78GHLkLTeDrOb/UTTZWaN0jBO5q/LW15hK0ZxtFTXcUdCbuycxzFk XnmBHhyTj7CDvNEgcKj+lqKN3Bf2d2MElBrTrx8ZH1rnuAJbbr0nb1JwoCPTT/+e 3vMHDe22EoIhEdVGMkZ+gDWOOU+qwE28gwocTUbqMRhMZQEbEDUGQ86D6CagsuW+ oqMwCt4m9DL9zZf11bnydFSj5FNLIkgQtldAcO4kd+9jy6OmPARzqMieddGt27Md kKHncjM0dozO03enrWVXR1d7wwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDy0bPI+ o/s/pzYuPB9RCClBlfw2MB8GA1UdIwQYMBaAFJy6R0objtTBhWQZEC4J7l71HEml MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEOUI3NS85QzAwMjAyRUY0 ODgxMUVCQThEQjdEMENDNEY5QUUwMi9uTHBIU2h1TzFNR0ZaQmtRTGdudVh2VWNT YVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25McEhTaHVPMU1HRlpCa1FMZ251WHZVY1NhVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE OUI3NS85QzAwMjAyRUY0ODgxMUVCQThEQjdEMENDNEY5QUUwMi9uTHBIU2h1TzFN R0ZaQmtRTGdudVh2VWNTYVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC2LsyKY1wCFj4DJqOjQjJNxyjS2x/zr4LHJvuYkOY/zQaUpPTnZGZ/ or46jy3fFIklgRacwxF15Q22VlPwhPwWfKJr1cDKHoH+YZ2c+6Sq2HM7t0Nw6J8W eKl3o5bOcXt2foXxwhSwx8yAFtk+danX7QTMyQ/t7y2kLTceo2zxGfFv/WXeqKYB KTglgwegfVD8d3gASTEntTakT/jZqxd8BhfBjXEhzOeO+IL0ERtYNXEAlKMfxBHZ uzPCExSxvOix5Kdl7rr6C9odfUtcZNe2WGPWCqBWTPqliIT8NNSiJKDHxMrjFpsg HwInNeM6r85/++c7wCIXx8vsUzscJ9Yg -----END CERTIFICATE-----Generated at Thu Jun 5 18:52:19 2025 by rpki-client