$ rpki-client -vvf rpki.apnic.net/member_repository/A91DE10F/60EA5C2CB5D311E7B6A2DD5DC4F9AE02/NDyCcTdhxY6CRQ2UqleWffm0bxU.mft File: NDyCcTdhxY6CRQ2UqleWffm0bxU.mft (raw, json) Hash identifier: yyiK+291k3ObYEQWhKZGMtHvXjcemeLtpZTI3zEQQOA= Subject key identifier: 0F:42:3F:8F:F3:31:AF:73:66:40:D8:88:31:40:76:A0:D3:D1:6E:B0 Authority key identifier: 34:3C:82:71:37:61:C5:8E:82:45:0D:94:AA:57:96:7D:F9:B4:6F:15 Certificate issuer: /CN=A91DE10F/serialNumber=343C82713761C58E82450D94AA57967DF9B46F15 Certificate serial: 180D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NDyCcTdhxY6CRQ2UqleWffm0bxU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DE10F/60EA5C2CB5D311E7B6A2DD5DC4F9AE02/NDyCcTdhxY6CRQ2UqleWffm0bxU.mft Manifest number: 1804 Signing time: Fri 30 May 2025 16:43:16 +0000 Manifest this update: Fri 30 May 2025 16:43:16 +0000 Manifest next update: Fri 06 Jun 2025 16:43:16 +0000 Files and hashes: 1: NDyCcTdhxY6CRQ2UqleWffm0bxU.crl (hash: DdxnjGIIjNjF4L2hU4Orn8FAql0amKwCJEdY5u2keK8=) 2: 31AA8496B62811E7882B893BC4F9AE02.roa (hash: TzvQgcIEdDiZ2vx98Eai/8pokoL7PkZgm06lLl+dtq8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DE10F/60EA5C2CB5D311E7B6A2DD5DC4F9AE02/NDyCcTdhxY6CRQ2UqleWffm0bxU.crl rsync://rpki.apnic.net/member_repository/A91DE10F/60EA5C2CB5D311E7B6A2DD5DC4F9AE02/NDyCcTdhxY6CRQ2UqleWffm0bxU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NDyCcTdhxY6CRQ2UqleWffm0bxU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 16:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6157 (0x180d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DE10F, serialNumber=343C82713761C58E82450D94AA57967DF9B46F15 Validity Not Before: May 30 16:43:16 2025 GMT Not After : Jun 6 16:43:16 2025 GMT Subject: CN=6839e024-ae98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:27:7f:1a:c1:f2:e1:c5:39:76:77:74:13:78: 69:6b:c5:3f:7e:69:62:cc:7f:dc:28:a9:cb:4d:9e: c9:2d:94:03:18:15:af:f4:fa:a0:2c:e8:f5:85:11: 9f:d7:91:de:d4:0d:10:74:5c:11:90:ca:e6:66:8b: bb:62:32:15:cc:d1:58:97:31:7e:d1:c9:2f:2a:50: 51:b0:fd:f6:9a:75:ce:11:4d:08:0c:57:9d:53:f3: 1d:c5:64:6f:c6:5b:b6:c3:a3:02:48:08:c4:d7:a2: 70:cf:0c:85:d9:9a:d5:ca:fd:cb:9b:dd:1a:ad:6c: b6:46:cc:41:22:e7:e1:20:be:58:02:d4:93:97:f2: c8:cf:88:12:18:5f:f3:e2:65:36:80:2a:ef:1b:67: b8:37:e2:e5:50:58:f2:bc:27:a7:c8:64:ec:f3:a9: 2d:3f:9c:fe:ff:19:ac:9a:3d:ce:7d:00:63:9c:64: 60:00:c3:55:2b:77:a6:bf:52:c1:59:1f:58:3f:4f: 81:63:50:cf:0d:c2:b0:91:ec:93:94:5f:8c:fa:85: 8e:53:e1:f0:40:5e:e4:2e:da:92:90:ec:4e:ea:f8: 9d:30:d4:66:a1:ae:0f:ea:2d:6e:ed:46:29:ea:f4: 55:72:f4:2e:4a:e5:cd:47:0b:eb:a3:a0:ed:a1:3d: dd:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:42:3F:8F:F3:31:AF:73:66:40:D8:88:31:40:76:A0:D3:D1:6E:B0 X509v3 Authority Key Identifier: keyid:34:3C:82:71:37:61:C5:8E:82:45:0D:94:AA:57:96:7D:F9:B4:6F:15 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DE10F/60EA5C2CB5D311E7B6A2DD5DC4F9AE02/NDyCcTdhxY6CRQ2UqleWffm0bxU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NDyCcTdhxY6CRQ2UqleWffm0bxU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DE10F/60EA5C2CB5D311E7B6A2DD5DC4F9AE02/NDyCcTdhxY6CRQ2UqleWffm0bxU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a4:0f:23:71:1e:48:7d:47:4d:10:7b:af:37:57:40:4f:2e:6e: c9:be:11:37:ef:e7:f8:73:6a:a4:a7:92:5a:eb:f8:3b:49:4d: 95:08:7e:63:80:ee:ac:7c:72:63:4f:d6:16:bd:05:fe:db:75: 91:ad:7c:2b:32:5a:5d:8d:de:98:f7:a9:fe:7c:c0:13:9c:4e: 49:ea:de:59:b4:78:e3:25:b4:6d:24:3b:2b:d1:c9:b3:1c:b5: ff:e6:50:45:8a:01:04:b1:8c:23:48:aa:d4:3a:12:98:cc:ed: ba:c1:8e:26:d4:8e:c5:e4:75:48:02:66:4d:2f:93:5b:74:2f: 31:f0:c0:d2:71:b0:78:69:5b:22:17:f2:75:4f:06:c8:65:e2: 54:64:b5:fc:20:8d:77:64:a2:59:3f:bb:01:c3:29:29:c9:05: 49:1c:77:6b:2a:dd:d1:de:0c:fc:e9:af:5e:51:09:fd:ff:c9: a3:16:cd:e4:8a:d7:9e:ae:8a:7c:d1:59:ba:00:e0:2b:04:88: 06:6e:4a:a6:c5:48:bd:bb:d0:a6:34:0e:cc:89:20:c1:55:19: 05:d9:97:27:79:48:31:3c:13:ed:e3:4f:4b:5e:0f:0d:9a:bc: 68:01:8d:61:ff:58:01:6c:02:a7:fc:47:56:2a:7f:28:63:12: 7a:35:30:7c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGA0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REUxMEYxMTAvBgNVBAUTKDM0M0M4MjcxMzc2MUM1OEU4MjQ1MEQ5NEFBNTc5NjdE RjlCNDZGMTUwHhcNMjUwNTMwMTY0MzE2WhcNMjUwNjA2MTY0MzE2WjAYMRYwFAYD VQQDEw02ODM5ZTAyNC1hZTk4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9id/GsHy4cU5dnd0E3hpa8U/fmlizH/cKKnLTZ7JLZQDGBWv9PqgLOj1hRGf 15He1A0QdFwRkMrmZou7YjIVzNFYlzF+0ckvKlBRsP32mnXOEU0IDFedU/MdxWRv xlu2w6MCSAjE16JwzwyF2ZrVyv3Lm90arWy2RsxBIufhIL5YAtSTl/LIz4gSGF/z 4mU2gCrvG2e4N+LlUFjyvCenyGTs86ktP5z+/xmsmj3OfQBjnGRgAMNVK3emv1LB WR9YP0+BY1DPDcKwkeyTlF+M+oWOU+HwQF7kLtqSkOxO6vidMNRmoa4P6i1u7UYp 6vRVcvQuSuXNRwvro6DtoT3dHwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA9CP4/z Ma9zZkDYiDFAdqDT0W6wMB8GA1UdIwQYMBaAFDQ8gnE3YcWOgkUNlKpXln35tG8V MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERTEwRi82MEVBNUMyQ0I1 RDMxMUU3QjZBMkRENURDNEY5QUUwMi9ORHlDY1RkaHhZNkNSUTJVcWxlV2ZmbTBi eFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05EeUNjVGRoeFk2Q1JRMlVxbGVXZmZtMGJ4VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RTEwRi82MEVBNUMyQ0I1RDMxMUU3QjZBMkRENURDNEY5QUUwMi9ORHlDY1RkaHhZ NkNSUTJVcWxlV2ZmbTBieFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCkDyNxHkh9R00Qe683V0BPLm7JvhE37+f4c2qkp5Ja6/g7SU2VCH5j gO6sfHJjT9YWvQX+23WRrXwrMlpdjd6Y96n+fMATnE5J6t5ZtHjjJbRtJDsr0cmz HLX/5lBFigEEsYwjSKrUOhKYzO26wY4m1I7F5HVIAmZNL5NbdC8x8MDScbB4aVsi F/J1TwbIZeJUZLX8II13ZKJZP7sBwykpyQVJHHdrKt3R3gz86a9eUQn9/8mjFs3k iteerop80Vm6AOArBIgGbkqmxUi9u9CmNA7MiSDBVRkF2ZcneUgxPBPt409LXg8N mrxoAY1h/1gBbAKn/EdWKn8oYxJ6NTB8 -----END CERTIFICATE-----Generated at Sat May 31 17:03:25 2025 by rpki-client