$ rpki-client -vvf rpki.apnic.net/member_repository/A91EEAD3/D6231A321E2D11EF83D95229C4F9AE02/N0X7n36iweJS0pvv2GphV3YNiMA.mft File: N0X7n36iweJS0pvv2GphV3YNiMA.mft (raw, json) Hash identifier: 0PO/LZ0Rkh7ZsmROi1XPlQlpS/GJcELhKw+BWXMcJoQ= Subject key identifier: AF:7B:4D:13:53:22:B9:51:2F:8B:A7:C5:A4:8A:5F:1A:39:D7:D0:9B Authority key identifier: 37:45:FB:9F:7E:A2:C1:E2:52:D2:9B:EF:D8:6A:61:57:76:0D:88:C0 Certificate issuer: /CN=A91EEAD3/serialNumber=3745FB9F7EA2C1E252D29BEFD86A6157760D88C0 Certificate serial: C2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N0X7n36iweJS0pvv2GphV3YNiMA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EEAD3/D6231A321E2D11EF83D95229C4F9AE02/N0X7n36iweJS0pvv2GphV3YNiMA.mft Manifest number: BF Signing time: Sat 31 May 2025 05:28:00 +0000 Manifest this update: Sat 31 May 2025 05:28:00 +0000 Manifest next update: Sat 07 Jun 2025 05:28:00 +0000 Files and hashes: 1: N0X7n36iweJS0pvv2GphV3YNiMA.crl (hash: XSUrEOf4oL+ecO9hvlm0BOUIR7QsG2CHxOhyy77aQhc=) 2: E989DE0C1E2E11EFB8D12A2BC4F9AE02.roa (hash: PkN1Jtt374CIHLZsHPqXl9liocYOPeAQiQHQB34mvOQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EEAD3/D6231A321E2D11EF83D95229C4F9AE02/N0X7n36iweJS0pvv2GphV3YNiMA.crl rsync://rpki.apnic.net/member_repository/A91EEAD3/D6231A321E2D11EF83D95229C4F9AE02/N0X7n36iweJS0pvv2GphV3YNiMA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N0X7n36iweJS0pvv2GphV3YNiMA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 05:27:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 194 (0xc2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EEAD3, serialNumber=3745FB9F7EA2C1E252D29BEFD86A6157760D88C0 Validity Not Before: May 31 05:28:00 2025 GMT Not After : Jun 7 05:28:00 2025 GMT Subject: CN=683a9360-72d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:ed:33:da:3e:a2:78:69:f6:3b:d8:b1:09:15: 00:44:f2:3c:23:76:32:23:aa:c3:43:c0:b6:c3:4d: f8:bf:75:91:47:aa:90:d5:31:be:ed:c1:83:e2:5f: e8:84:38:26:a8:b8:89:1e:3b:3d:1c:98:73:92:31: 0c:0d:bc:74:11:7d:81:8a:56:06:56:dd:b4:d2:69: ca:7f:93:c4:1c:0f:0a:f6:ea:a9:7a:d2:e1:ee:59: 22:46:6d:15:08:01:bd:c7:0c:f1:c4:07:89:10:83: 8b:37:f9:2e:f6:cc:c1:27:f4:0e:a0:d3:c8:ad:91: ee:ef:16:c1:73:3f:89:ac:48:38:15:64:30:c2:eb: 79:4e:9e:96:54:93:33:37:d9:62:b6:76:8e:be:c3: c4:ee:e5:63:39:f1:68:67:33:4a:4b:d8:e6:34:2b: f2:ca:dc:a9:4a:6a:96:8b:e5:d5:26:dd:98:7a:be: 95:45:36:ec:1a:68:7e:e8:13:14:33:60:26:42:bd: 17:29:d4:61:15:1f:43:18:4a:17:45:05:b6:fe:82: a9:fa:a1:cd:96:60:53:14:9a:a5:bf:2a:f4:38:08: ef:b4:e4:67:ea:96:7f:d2:bf:e7:8b:49:d4:32:c5: c1:d5:91:fe:ae:4f:5c:72:90:e7:a5:20:a3:1c:77: 94:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:7B:4D:13:53:22:B9:51:2F:8B:A7:C5:A4:8A:5F:1A:39:D7:D0:9B X509v3 Authority Key Identifier: keyid:37:45:FB:9F:7E:A2:C1:E2:52:D2:9B:EF:D8:6A:61:57:76:0D:88:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EEAD3/D6231A321E2D11EF83D95229C4F9AE02/N0X7n36iweJS0pvv2GphV3YNiMA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N0X7n36iweJS0pvv2GphV3YNiMA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EEAD3/D6231A321E2D11EF83D95229C4F9AE02/N0X7n36iweJS0pvv2GphV3YNiMA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 12:18:56:74:19:c5:6c:b5:94:d8:0b:47:06:90:02:7d:26:73: f1:be:3d:80:65:2a:86:e2:2e:52:e7:22:24:ad:d0:5b:11:d0: 5a:b4:f0:d8:e0:89:ad:9b:e4:50:73:c3:50:06:82:f9:dc:90: 24:48:6d:9f:fd:6a:20:1b:ec:f6:f7:57:b9:83:16:36:24:be: 19:ce:09:f9:25:68:05:d6:80:f9:96:ab:6c:3f:e1:23:73:42: 95:02:a5:24:bb:3d:4e:e3:f1:6d:4b:2e:1c:cf:72:da:c5:c0: 8a:9c:88:12:03:76:7e:09:8e:e4:1b:c7:74:e8:14:b4:59:12: 1f:f8:d0:74:0c:93:58:c3:5b:3c:e5:d2:bc:de:91:a8:af:e9: 80:9e:11:d3:f0:54:a9:2f:e9:c8:88:0a:f1:99:ec:1a:2f:16: 10:fd:de:4a:ea:9c:bb:d2:78:de:9e:fa:84:8c:81:bf:dc:51: 0b:4e:87:25:e9:a8:53:48:3d:11:bd:8a:e1:d0:4a:7d:0c:1c: ff:3b:9e:bb:b9:4a:7c:33:e5:a8:9b:27:aa:cc:b9:8d:a2:e4: 91:6f:be:7d:f9:4e:a3:69:6c:cf:1f:5a:fd:82:49:82:29:79: 29:58:c8:22:c2:8d:8d:c5:39:d5:d6:f3:74:94:49:5d:9c:43: bb:44:c2:70 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUVBRDMxMTAvBgNVBAUTKDM3NDVGQjlGN0VBMkMxRTI1MkQyOUJFRkQ4NkE2MTU3 NzYwRDg4QzAwHhcNMjUwNTMxMDUyODAwWhcNMjUwNjA3MDUyODAwWjAYMRYwFAYD VQQDEw02ODNhOTM2MC03MmQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw+0z2j6ieGn2O9ixCRUARPI8I3YyI6rDQ8C2w034v3WRR6qQ1TG+7cGD4l/o hDgmqLiJHjs9HJhzkjEMDbx0EX2BilYGVt200mnKf5PEHA8K9uqpetLh7lkiRm0V CAG9xwzxxAeJEIOLN/ku9szBJ/QOoNPIrZHu7xbBcz+JrEg4FWQwwut5Tp6WVJMz N9litnaOvsPE7uVjOfFoZzNKS9jmNCvyytypSmqWi+XVJt2Yer6VRTbsGmh+6BMU M2AmQr0XKdRhFR9DGEoXRQW2/oKp+qHNlmBTFJqlvyr0OAjvtORn6pZ/0r/ni0nU MsXB1ZH+rk9ccpDnpSCjHHeUkQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK97TRNT IrlRL4unxaSKXxo519CbMB8GA1UdIwQYMBaAFDdF+59+osHiUtKb79hqYVd2DYjA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRUFEMy9ENjIzMUEzMjFF MkQxMUVGODNEOTUyMjlDNEY5QUUwMi9OMFg3bjM2aXdlSlMwcHZ2MkdwaFYzWU5p TUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL04wWDduMzZpd2VKUzBwdnYyR3BoVjNZTmlNQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RUFEMy9ENjIzMUEzMjFFMkQxMUVGODNEOTUyMjlDNEY5QUUwMi9OMFg3bjM2aXdl SlMwcHZ2MkdwaFYzWU5pTUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQASGFZ0GcVstZTYC0cGkAJ9JnPxvj2AZSqG4i5S5yIkrdBbEdBatPDY 4Imtm+RQc8NQBoL53JAkSG2f/WogG+z291e5gxY2JL4Zzgn5JWgF1oD5lqtsP+Ej c0KVAqUkuz1O4/FtSy4cz3LaxcCKnIgSA3Z+CY7kG8d06BS0WRIf+NB0DJNYw1s8 5dK83pGor+mAnhHT8FSpL+nIiArxmewaLxYQ/d5K6py70njenvqEjIG/3FELTocl 6ahTSD0RvYrh0Ep9DBz/O567uUp8M+WomyeqzLmNouSRb759+U6jaWzPH1r9gkmC KXkpWMgiwo2NxTnV1vN0lEldnEO7RMJw -----END CERTIFICATE-----Generated at Sat May 31 16:46:48 2025 by rpki-client