$ rpki-client -vvf rpki.apnic.net/member_repository/A91DD112/DABAB5DCD78F11EC97B59E62C4F9AE02/NuTjWeIN2mUTPhIaktbWrLHlMSM.mft File: NuTjWeIN2mUTPhIaktbWrLHlMSM.mft (raw, json) Hash identifier: ZSaXl1ZOTx3HK4LS05yr+netSmjpg9BsJMM9z4RuhUM= Subject key identifier: A4:A0:6F:0B:9B:06:69:63:91:7E:58:66:4F:7B:2B:A5:C4:78:BC:F5 Authority key identifier: 36:E4:E3:59:E2:0D:DA:65:13:3E:12:1A:92:D6:D6:AC:B1:E5:31:23 Certificate issuer: /CN=A91DD112/serialNumber=36E4E359E20DDA65133E121A92D6D6ACB1E53123 Certificate serial: 0302 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NuTjWeIN2mUTPhIaktbWrLHlMSM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DD112/DABAB5DCD78F11EC97B59E62C4F9AE02/NuTjWeIN2mUTPhIaktbWrLHlMSM.mft Manifest number: 02FF Signing time: Sat 31 May 2025 01:26:23 +0000 Manifest this update: Sat 31 May 2025 01:26:23 +0000 Manifest next update: Sat 07 Jun 2025 01:26:23 +0000 Files and hashes: 1: NuTjWeIN2mUTPhIaktbWrLHlMSM.crl (hash: kv1TXOLcvpidQH1w19Z+RIgcnNqB/20aWy+haPJppCk=) 2: 0D09EE14D79411EC955CCA68C4F9AE02.roa (hash: C0oMAxQHsYdHAGjubReHZgymtUaTL7q6qGZom3tg5Ac=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DD112/DABAB5DCD78F11EC97B59E62C4F9AE02/NuTjWeIN2mUTPhIaktbWrLHlMSM.crl rsync://rpki.apnic.net/member_repository/A91DD112/DABAB5DCD78F11EC97B59E62C4F9AE02/NuTjWeIN2mUTPhIaktbWrLHlMSM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NuTjWeIN2mUTPhIaktbWrLHlMSM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 01:26:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 770 (0x302) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DD112, serialNumber=36E4E359E20DDA65133E121A92D6D6ACB1E53123 Validity Not Before: May 31 01:26:23 2025 GMT Not After : Jun 7 01:26:23 2025 GMT Subject: CN=683a5abf-3072 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:1d:30:70:31:e1:cd:28:99:5e:fc:c4:42:21: 5f:71:22:ab:43:70:4a:a1:d4:a2:83:e8:72:ad:5d: 19:55:2d:34:bd:88:0e:56:0d:ee:49:fa:ae:3c:4c: 37:13:a3:cc:07:49:d3:c0:fb:d8:82:cf:e8:6b:e0: 85:a6:43:c2:b5:e5:dd:88:75:70:87:64:e8:83:d5: 1d:42:8f:e2:44:cd:fc:6c:76:5d:75:90:38:84:3c: 6c:5d:be:ad:8b:31:f9:82:9c:ac:35:4a:4e:9a:7f: 1a:05:31:7f:b1:9b:12:2f:b7:e0:f2:50:60:29:60: 77:74:63:97:d7:40:05:3c:ff:24:c0:8d:82:73:d9: ac:ac:f9:64:a6:f6:b6:ee:bb:2c:f7:7c:2c:5f:ab: 26:34:18:90:19:95:43:a1:4e:06:13:2f:75:fe:12: 07:98:a0:71:4a:2f:15:65:3d:58:73:25:ad:27:19: 63:c5:61:93:2a:d6:19:02:97:9c:cc:ca:67:0b:ad: 2e:9f:17:5b:dc:44:e4:49:49:54:9c:de:ec:3c:ba: ee:18:68:45:f3:d9:ab:15:37:5e:40:eb:fd:3f:28: 00:83:b8:13:35:85:dd:26:47:65:b9:04:66:59:de: 23:4e:32:76:59:de:37:76:53:d3:6a:aa:87:65:9b: b7:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:A0:6F:0B:9B:06:69:63:91:7E:58:66:4F:7B:2B:A5:C4:78:BC:F5 X509v3 Authority Key Identifier: keyid:36:E4:E3:59:E2:0D:DA:65:13:3E:12:1A:92:D6:D6:AC:B1:E5:31:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DD112/DABAB5DCD78F11EC97B59E62C4F9AE02/NuTjWeIN2mUTPhIaktbWrLHlMSM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NuTjWeIN2mUTPhIaktbWrLHlMSM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DD112/DABAB5DCD78F11EC97B59E62C4F9AE02/NuTjWeIN2mUTPhIaktbWrLHlMSM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5c:ac:37:99:c1:80:10:ad:28:5e:a2:a8:5f:ab:70:b3:f1:8b: c1:14:f7:68:34:13:d8:3d:b6:01:d3:76:6e:c8:9f:e6:5e:fb: 0a:2c:4e:c0:e9:5f:c8:5f:df:6a:da:05:77:a0:d8:f4:e8:8c: ac:3c:3d:f6:db:95:17:48:e5:e9:a6:f0:a8:8d:f5:d8:40:70: d0:b9:97:d4:eb:e0:39:a7:d7:35:fd:87:e6:ab:c6:cd:5b:20: d5:37:38:c6:7d:23:72:2f:18:26:01:7f:eb:59:2b:3c:41:2b: 27:06:3c:38:4f:ff:7b:83:ba:5f:78:7f:a6:f0:8c:fa:cd:08: 3f:9f:fd:5d:66:5e:52:c3:df:ea:68:9a:53:fa:f3:37:12:73: e4:a1:21:81:ad:7d:ff:16:33:58:a3:b9:25:67:ab:a5:63:4e: a4:ca:0d:21:83:71:ae:ed:1b:83:1e:e5:d2:96:bc:58:26:b7: 53:86:fd:04:98:14:32:ec:b6:75:f3:35:c4:e5:7b:ce:c9:62: 25:80:d2:17:64:28:4b:7d:64:78:28:a1:08:6d:85:9c:95:2b: 30:a6:ac:9b:a1:7f:e0:87:61:80:1d:ec:fa:64:91:b5:5c:5c: e8:36:fc:d0:b9:76:ae:96:1b:2d:5e:88:c3:ca:dc:77:24:4f: f6:04:6f:19 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAwIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REQxMTIxMTAvBgNVBAUTKDM2RTRFMzU5RTIwRERBNjUxMzNFMTIxQTkyRDZENkFD QjFFNTMxMjMwHhcNMjUwNTMxMDEyNjIzWhcNMjUwNjA3MDEyNjIzWjAYMRYwFAYD VQQDEw02ODNhNWFiZi0zMDcyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxh0wcDHhzSiZXvzEQiFfcSKrQ3BKodSig+hyrV0ZVS00vYgOVg3uSfquPEw3 E6PMB0nTwPvYgs/oa+CFpkPCteXdiHVwh2Tog9UdQo/iRM38bHZddZA4hDxsXb6t izH5gpysNUpOmn8aBTF/sZsSL7fg8lBgKWB3dGOX10AFPP8kwI2Cc9msrPlkpva2 7rss93wsX6smNBiQGZVDoU4GEy91/hIHmKBxSi8VZT1YcyWtJxljxWGTKtYZApec zMpnC60unxdb3ETkSUlUnN7sPLruGGhF89mrFTdeQOv9PygAg7gTNYXdJkdluQRm Wd4jTjJ2Wd43dlPTaqqHZZu3DQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKSgbwub BmljkX5YZk97K6XEeLz1MB8GA1UdIwQYMBaAFDbk41niDdplEz4SGpLW1qyx5TEj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERDExMi9EQUJBQjVEQ0Q3 OEYxMUVDOTdCNTlFNjJDNEY5QUUwMi9OdVRqV2VJTjJtVVRQaElha3RiV3JMSGxN U00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL051VGpXZUlOMm1VVFBoSWFrdGJXckxIbE1TTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RDExMi9EQUJBQjVEQ0Q3OEYxMUVDOTdCNTlFNjJDNEY5QUUwMi9OdVRqV2VJTjJt VVRQaElha3RiV3JMSGxNU00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBcrDeZwYAQrSheoqhfq3Cz8YvBFPdoNBPYPbYB03ZuyJ/mXvsKLE7A 6V/IX99q2gV3oNj06IysPD3225UXSOXppvCojfXYQHDQuZfU6+A5p9c1/Yfmq8bN WyDVNzjGfSNyLxgmAX/rWSs8QSsnBjw4T/97g7pfeH+m8Iz6zQg/n/1dZl5Sw9/q aJpT+vM3EnPkoSGBrX3/FjNYo7klZ6ulY06kyg0hg3Gu7RuDHuXSlrxYJrdThv0E mBQy7LZ18zXE5XvOyWIlgNIXZChLfWR4KKEIbYWclSswpqyboX/gh2GAHez6ZJG1 XFzoNvzQuXaulhstXojDytx3JE/2BG8Z -----END CERTIFICATE-----Generated at Sat May 31 16:27:42 2025 by rpki-client