$ rpki-client -vvf rpki.apnic.net/member_repository/A91EB002/E24F8234022E11EF856F5132C4F9AE02/nvPmBKY_LO9L3eN9yokNBFGWeuw.mft File: nvPmBKY_LO9L3eN9yokNBFGWeuw.mft (raw, json) Hash identifier: cWttcI+q3qmNbiI4QfWjZCHMizf+lvcAdWWsvuBqJhw= Subject key identifier: 40:29:85:3F:A4:B4:5E:CF:24:E2:87:EC:8C:66:DC:4D:0C:9A:1D:E5 Authority key identifier: 9E:F3:E6:04:A6:3F:2C:EF:4B:DD:E3:7D:CA:89:0D:04:51:96:7A:EC Certificate issuer: /CN=A91EB002/serialNumber=9EF3E604A63F2CEF4BDDE37DCA890D0451967AEC Certificate serial: E1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nvPmBKY_LO9L3eN9yokNBFGWeuw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EB002/E24F8234022E11EF856F5132C4F9AE02/nvPmBKY_LO9L3eN9yokNBFGWeuw.mft Manifest number: D9 Signing time: Sat 31 May 2025 05:17:07 +0000 Manifest this update: Sat 31 May 2025 05:17:06 +0000 Manifest next update: Sat 07 Jun 2025 05:17:06 +0000 Files and hashes: 1: nvPmBKY_LO9L3eN9yokNBFGWeuw.crl (hash: GMmGHJxOADds2pC7pU7R0ZGxHYHRPrPTLeM1jTl30Ws=) 2: 700507423B1911F0B0CC573EC4F9AE02.roa (hash: +FT8r5Bqy2pkm1XBg6PTxfPLZ+Pqq+RJOe/CskhHrxE=) 3: 5A65F048F19211EFA4D9CD34C4F9AE02.roa (hash: 00Gxu/B4q0Oej8/UcNpQ1rIkErXZo9wae3oYgISIoHo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EB002/E24F8234022E11EF856F5132C4F9AE02/nvPmBKY_LO9L3eN9yokNBFGWeuw.crl rsync://rpki.apnic.net/member_repository/A91EB002/E24F8234022E11EF856F5132C4F9AE02/nvPmBKY_LO9L3eN9yokNBFGWeuw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nvPmBKY_LO9L3eN9yokNBFGWeuw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 05:17:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 225 (0xe1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EB002, serialNumber=9EF3E604A63F2CEF4BDDE37DCA890D0451967AEC Validity Not Before: May 31 05:17:06 2025 GMT Not After : Jun 7 05:17:06 2025 GMT Subject: CN=683a90d2-2f01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:37:b6:dd:a4:0e:ab:89:7f:24:5f:8a:80:89: 1f:d0:d5:48:e0:fa:c7:46:d6:f5:bf:34:32:74:ef: cc:0a:ae:d9:5e:40:11:15:a6:9f:d8:c7:5e:08:7e: 5c:76:7b:64:64:85:97:1f:d7:99:b5:ec:94:61:b2: 87:a7:60:c7:01:10:55:6f:fa:f9:1a:ac:4f:a4:6c: 9f:5a:22:a7:8f:8a:4c:7f:c0:4c:7c:25:d3:cc:7c: 74:d1:ec:51:d0:40:54:30:ca:eb:86:25:35:e6:8a: 63:f2:62:67:19:e5:56:8d:a4:a4:28:e3:5d:aa:26: 18:57:95:d6:7c:ba:f0:fa:d6:7d:d6:78:01:de:59: fd:27:ab:a8:29:a0:6e:e1:f5:93:99:e9:49:4b:74: 64:f3:28:32:b9:f4:15:01:4a:3f:d4:3d:77:00:72: 0b:b7:fa:05:2f:6c:23:0b:46:20:66:40:bd:dd:38: e6:d3:d8:78:01:a6:5d:8f:cf:03:df:b9:4d:85:8e: 65:11:88:49:ad:53:45:fb:ee:51:c1:09:33:d1:0e: 3e:a2:90:3d:4a:07:46:44:96:68:73:0d:59:fa:7b: b3:ee:63:24:cc:23:2f:c5:72:d5:dc:41:4b:36:33: bf:aa:c3:f9:7f:e0:cb:19:05:54:16:56:2c:3e:a4: 42:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:29:85:3F:A4:B4:5E:CF:24:E2:87:EC:8C:66:DC:4D:0C:9A:1D:E5 X509v3 Authority Key Identifier: keyid:9E:F3:E6:04:A6:3F:2C:EF:4B:DD:E3:7D:CA:89:0D:04:51:96:7A:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EB002/E24F8234022E11EF856F5132C4F9AE02/nvPmBKY_LO9L3eN9yokNBFGWeuw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nvPmBKY_LO9L3eN9yokNBFGWeuw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EB002/E24F8234022E11EF856F5132C4F9AE02/nvPmBKY_LO9L3eN9yokNBFGWeuw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 29:ff:e6:b9:12:5e:00:bb:3a:8f:96:e7:a7:04:61:67:0c:61: 4f:a3:b7:f5:7f:e4:31:20:61:a5:87:ce:38:da:d7:d2:96:d1: 36:05:f7:1a:45:11:70:c6:dc:42:3f:f5:c6:27:1a:85:7f:04: 98:ca:06:2b:f8:19:18:35:a8:69:60:50:af:d4:f3:d3:36:91: 59:8c:6d:9c:54:7b:d6:91:fd:42:70:b3:fb:b3:69:ea:30:9d: c5:60:29:14:c1:5c:f5:8b:9d:77:fa:d6:f9:66:fe:20:1d:ae: 9c:99:71:51:51:f0:05:b9:8b:01:16:8c:70:5d:34:22:18:68: 78:27:51:0d:46:92:27:92:df:a4:60:04:99:e7:06:7e:a5:2d: 96:56:dc:b7:bd:d3:ae:b4:d1:22:29:a3:65:3c:49:46:24:7a: d7:6d:8c:51:76:d2:8c:b9:47:6c:61:e2:64:00:13:8c:0b:d4: ab:44:63:59:87:21:d7:49:6b:11:28:88:c1:93:4e:5d:fe:36: 07:93:95:22:9b:cb:c4:c1:f1:d0:cd:dd:fe:f8:10:cc:c2:38: d3:e5:e5:2b:26:71:7b:83:9d:54:09:e9:6a:38:9c:36:d9:a8: 76:aa:21:a0:99:85:c3:7b:26:13:d8:8c:f5:83:fe:48:7d:65: ea:9d:b1:97 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUIwMDIxMTAvBgNVBAUTKDlFRjNFNjA0QTYzRjJDRUY0QkRERTM3RENBODkwRDA0 NTE5NjdBRUMwHhcNMjUwNTMxMDUxNzA2WhcNMjUwNjA3MDUxNzA2WjAYMRYwFAYD VQQDEw02ODNhOTBkMi0yZjAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApDe23aQOq4l/JF+KgIkf0NVI4PrHRtb1vzQydO/MCq7ZXkARFaaf2MdeCH5c dntkZIWXH9eZteyUYbKHp2DHARBVb/r5GqxPpGyfWiKnj4pMf8BMfCXTzHx00exR 0EBUMMrrhiU15opj8mJnGeVWjaSkKONdqiYYV5XWfLrw+tZ91ngB3ln9J6uoKaBu 4fWTmelJS3Rk8ygyufQVAUo/1D13AHILt/oFL2wjC0YgZkC93Tjm09h4AaZdj88D 37lNhY5lEYhJrVNF++5RwQkz0Q4+opA9SgdGRJZocw1Z+nuz7mMkzCMvxXLV3EFL NjO/qsP5f+DLGQVUFlYsPqRCzwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEAphT+k tF7PJOKH7Ixm3E0Mmh3lMB8GA1UdIwQYMBaAFJ7z5gSmPyzvS93jfcqJDQRRlnrs MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQjAwMi9FMjRGODIzNDAy MkUxMUVGODU2RjUxMzJDNEY5QUUwMi9udlBtQktZX0xPOUwzZU45eW9rTkJGR1dl dXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL252UG1CS1lfTE85TDNlTjl5b2tOQkZHV2V1dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QjAwMi9FMjRGODIzNDAyMkUxMUVGODU2RjUxMzJDNEY5QUUwMi9udlBtQktZX0xP OUwzZU45eW9rTkJGR1dldXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAp/+a5El4AuzqPluenBGFnDGFPo7f1f+QxIGGlh8442tfSltE2Bfca RRFwxtxCP/XGJxqFfwSYygYr+BkYNahpYFCv1PPTNpFZjG2cVHvWkf1CcLP7s2nq MJ3FYCkUwVz1i513+tb5Zv4gHa6cmXFRUfAFuYsBFoxwXTQiGGh4J1ENRpInkt+k YASZ5wZ+pS2WVty3vdOutNEiKaNlPElGJHrXbYxRdtKMuUdsYeJkABOMC9SrRGNZ hyHXSWsRKIjBk05d/jYHk5Uim8vEwfHQzd3++BDMwjjT5eUrJnF7g51UCelqOJw2 2ah2qiGgmYXDeyYT2Iz1g/5IfWXqnbGX -----END CERTIFICATE-----Generated at Sat May 31 17:07:39 2025 by rpki-client