$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA198/993F2090ABC411E6BD6BED14C4F9AE02/nhw1MdAEXqOJtoz_koagj7y72L0.mft File: nhw1MdAEXqOJtoz_koagj7y72L0.mft (raw, json) Hash identifier: xgKeTiMcuG9D+bD0oj5fJbskuWEHXy1mEpkKV6qoleQ= Subject key identifier: 6E:84:AE:FB:04:8A:EA:E4:A0:96:88:00:50:A9:4D:63:2C:54:CE:30 Authority key identifier: 9E:1C:35:31:D0:04:5E:A3:89:B6:8C:FF:92:86:A0:8F:BC:BB:D8:BD Certificate issuer: /CN=A91EA198/serialNumber=9E1C3531D0045EA389B68CFF9286A08FBCBBD8BD Certificate serial: 1ED7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nhw1MdAEXqOJtoz_koagj7y72L0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EA198/993F2090ABC411E6BD6BED14C4F9AE02/nhw1MdAEXqOJtoz_koagj7y72L0.mft Manifest number: 1E0C Signing time: Sat 31 May 2025 16:06:25 +0000 Manifest this update: Sat 31 May 2025 16:06:25 +0000 Manifest next update: Sat 07 Jun 2025 16:06:25 +0000 Files and hashes: 1: nhw1MdAEXqOJtoz_koagj7y72L0.crl (hash: ht+rRWmwAKaOJzUhrlml/IIx3tPl2YcHmBuQj94RSxc=) 2: EE375CF036BD11E7B9B7251EC4F9AE02.roa (hash: wQsPHV6x/USj/C30qX7ocLzNE1hOKIXglDcWSSVxT9s=) 3: 36D3DC38AA9311ECB5C88036C4F9AE02.roa (hash: 6AyDnzx5A4AjZFDON1usGiiqlcfarAtQyPrblWg9aSI=) 4: C81AC00EB14111EB959D4D3CC4F9AE02.roa (hash: PPz+jo2ZglJLUOgv0BMC7+AH2ZHmEK5hCIx98WW3CQI=) 5: 192418F6AA1811EA97BC574CC4F9AE02.roa (hash: 2NrY7syTQnT2b3fwQCo+pNk5LqubHVwUAREOnAdGVSc=) 6: AB549D62125711EF94D14874C4F9AE02.roa (hash: e42h1gU/GulKJNSgZnYVY16QcfeskjKqY5xdRuNkRtI=) 7: FA4555AA93DC11EEB00AF628C4F9AE02.roa (hash: B0CVo9ry++sVZy/2rBP2AlbhG4hjHy12hERvlOOeEZ8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EA198/993F2090ABC411E6BD6BED14C4F9AE02/nhw1MdAEXqOJtoz_koagj7y72L0.crl rsync://rpki.apnic.net/member_repository/A91EA198/993F2090ABC411E6BD6BED14C4F9AE02/nhw1MdAEXqOJtoz_koagj7y72L0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nhw1MdAEXqOJtoz_koagj7y72L0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 16:06:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7895 (0x1ed7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EA198, serialNumber=9E1C3531D0045EA389B68CFF9286A08FBCBBD8BD Validity Not Before: May 31 16:06:25 2025 GMT Not After : Jun 7 16:06:25 2025 GMT Subject: CN=683b2901-dad4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:13:c2:68:51:77:c4:cc:5c:10:ea:0c:26:70: 61:d1:39:f3:df:80:4d:87:20:9c:39:ff:a6:1d:b5: 5b:64:cc:62:eb:3e:bf:d1:7e:3c:ae:1e:bb:1f:83: fc:16:04:bd:a2:c9:3a:a0:27:25:f1:bf:4a:6b:1c: 08:27:dc:2f:37:f3:cf:f0:db:32:51:52:78:09:3f: fc:91:a0:9a:a3:15:b1:4a:15:fd:10:4c:fb:66:a9: de:70:49:82:2a:f9:ec:5c:cd:cf:b7:47:99:69:4b: 90:e0:fe:92:e5:47:88:e8:6f:86:cf:44:1d:3f:66: 83:31:fc:6e:4e:1f:5c:81:06:65:9a:79:68:06:39: 33:05:9d:18:3a:e1:93:7c:ea:e0:ad:7a:44:c1:f1: f6:0c:f7:ea:cf:a7:45:46:58:26:6f:4a:c5:12:fd: 3d:ca:bc:df:88:d3:75:f0:64:ef:0e:05:a7:07:f1: b7:44:48:e0:ff:22:3a:1d:d6:a5:62:2f:d0:38:79: 37:a4:86:6a:06:94:0f:b4:36:e8:09:93:69:c5:3c: 66:fc:33:b5:18:14:48:41:8e:f5:8d:49:60:32:64: f2:a0:ac:c7:14:1f:ae:a9:ff:a1:87:35:b9:60:2c: 1f:bb:63:59:80:c2:09:dd:35:c5:80:d4:4c:04:47: 45:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:84:AE:FB:04:8A:EA:E4:A0:96:88:00:50:A9:4D:63:2C:54:CE:30 X509v3 Authority Key Identifier: keyid:9E:1C:35:31:D0:04:5E:A3:89:B6:8C:FF:92:86:A0:8F:BC:BB:D8:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EA198/993F2090ABC411E6BD6BED14C4F9AE02/nhw1MdAEXqOJtoz_koagj7y72L0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nhw1MdAEXqOJtoz_koagj7y72L0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA198/993F2090ABC411E6BD6BED14C4F9AE02/nhw1MdAEXqOJtoz_koagj7y72L0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bc:db:11:27:57:a1:92:45:b0:5c:c8:56:bd:94:cd:76:91:09: 76:a9:53:71:15:28:e5:73:8a:66:a6:9e:93:e9:c3:c3:9e:3d: 68:13:d6:9d:ac:d4:88:71:fc:27:3b:5e:a3:0a:1f:90:09:eb: d8:c3:d2:4c:db:18:e4:e0:13:49:0e:07:e2:ed:2d:ca:4b:c3: 6c:76:e0:f9:f7:f3:0b:e4:92:ab:db:92:cf:f3:40:4b:97:a9: ef:17:bf:a2:14:8f:af:86:96:08:40:14:95:65:4a:7b:b4:c8: a3:6f:2b:fe:36:85:de:95:ad:54:48:8c:19:6d:94:26:ee:23: 40:3d:92:97:d4:b5:95:00:f7:80:ae:d2:a9:b9:50:3d:0f:73: 20:91:77:63:30:c5:15:dd:29:03:95:6d:e2:7d:41:f2:ec:16: 70:0f:27:f4:e9:f7:d6:e2:2e:2d:0c:da:72:14:df:5e:06:c2: 2b:cb:9a:b1:59:42:c0:b2:ae:bc:4d:49:38:25:b6:44:68:e4: 11:82:3c:71:19:09:c2:20:c9:b5:4b:65:23:ef:c2:28:62:b8: 4e:90:5d:15:89:c2:ba:72:32:9f:c9:ad:e8:ae:e6:76:98:7f: b6:06:b8:a4:20:bc:84:07:fb:20:42:80:81:59:91:b5:01:1a: 3e:e1:29:a5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHtcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUExOTgxMTAvBgNVBAUTKDlFMUMzNTMxRDAwNDVFQTM4OUI2OENGRjkyODZBMDhG QkNCQkQ4QkQwHhcNMjUwNTMxMTYwNjI1WhcNMjUwNjA3MTYwNjI1WjAYMRYwFAYD VQQDEw02ODNiMjkwMS1kYWQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7hPCaFF3xMxcEOoMJnBh0Tnz34BNhyCcOf+mHbVbZMxi6z6/0X48rh67H4P8 FgS9osk6oCcl8b9KaxwIJ9wvN/PP8NsyUVJ4CT/8kaCaoxWxShX9EEz7ZqnecEmC KvnsXM3Pt0eZaUuQ4P6S5UeI6G+Gz0QdP2aDMfxuTh9cgQZlmnloBjkzBZ0YOuGT fOrgrXpEwfH2DPfqz6dFRlgmb0rFEv09yrzfiNN18GTvDgWnB/G3REjg/yI6Hdal Yi/QOHk3pIZqBpQPtDboCZNpxTxm/DO1GBRIQY71jUlgMmTyoKzHFB+uqf+hhzW5 YCwfu2NZgMIJ3TXFgNRMBEdFTQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG6ErvsE iurkoJaIAFCpTWMsVM4wMB8GA1UdIwQYMBaAFJ4cNTHQBF6jibaM/5KGoI+8u9i9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQTE5OC85OTNGMjA5MEFC QzQxMUU2QkQ2QkVEMTRDNEY5QUUwMi9uaHcxTWRBRVhxT0p0b3pfa29hZ2o3eTcy TDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25odzFNZEFFWHFPSnRvel9rb2Fnajd5NzJMMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QTE5OC85OTNGMjA5MEFCQzQxMUU2QkQ2QkVEMTRDNEY5QUUwMi9uaHcxTWRBRVhx T0p0b3pfa29hZ2o3eTcyTDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC82xEnV6GSRbBcyFa9lM12kQl2qVNxFSjlc4pmpp6T6cPDnj1oE9ad rNSIcfwnO16jCh+QCevYw9JM2xjk4BNJDgfi7S3KS8NsduD59/ML5JKr25LP80BL l6nvF7+iFI+vhpYIQBSVZUp7tMijbyv+NoXela1USIwZbZQm7iNAPZKX1LWVAPeA rtKpuVA9D3MgkXdjMMUV3SkDlW3ifUHy7BZwDyf06ffW4i4tDNpyFN9eBsIry5qx WULAsq68TUk4JbZEaOQRgjxxGQnCIMm1S2Uj78IoYrhOkF0VicK6cjKfya3oruZ2 mH+2BrikILyEB/sgQoCBWZG1ARo+4Sml -----END CERTIFICATE-----Generated at Sat May 31 17:51:35 2025 by rpki-client