$ rpki-client -vvf rpki.apnic.net/member_repository/A91EF19E/A93E993E340D11E49EC98163C4F9AE02/nh8Zp-GNi87SPvLtqxnoVDjn8Io.mft File: nh8Zp-GNi87SPvLtqxnoVDjn8Io.mft (raw, json) Hash identifier: 4eJIkECcg+yzj7YFzS5PWQadELnKp+UsSdk5EBIdXI8= Subject key identifier: 20:BB:13:B3:89:11:27:5C:87:2D:89:3C:56:84:28:C5:7C:F3:CB:EA Authority key identifier: 9E:1F:19:A7:E1:8D:8B:CE:D2:3E:F2:ED:AB:19:E8:54:38:E7:F0:8A Certificate issuer: /CN=A91EF19E/serialNumber=9E1F19A7E18D8BCED23EF2EDAB19E85438E7F08A Certificate serial: 2A09 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nh8Zp-GNi87SPvLtqxnoVDjn8Io.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EF19E/A93E993E340D11E49EC98163C4F9AE02/nh8Zp-GNi87SPvLtqxnoVDjn8Io.mft Manifest number: 29FF Signing time: Mon 02 Jun 2025 14:24:29 +0000 Manifest this update: Mon 02 Jun 2025 14:24:28 +0000 Manifest next update: Mon 09 Jun 2025 14:24:28 +0000 Files and hashes: 1: nh8Zp-GNi87SPvLtqxnoVDjn8Io.crl (hash: AxBsZ4sfKuMbfvGLUNc+HzTuSSnJJq6VSyY/qKSGUZw=) 2: F9722F8255C411E9A0FEF781C4F9AE02.roa (hash: 7nXeTuR6Lk+Z8nTiU9kBUgYIuWYLSQwBB8CP9oDRsnE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EF19E/A93E993E340D11E49EC98163C4F9AE02/nh8Zp-GNi87SPvLtqxnoVDjn8Io.crl rsync://rpki.apnic.net/member_repository/A91EF19E/A93E993E340D11E49EC98163C4F9AE02/nh8Zp-GNi87SPvLtqxnoVDjn8Io.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nh8Zp-GNi87SPvLtqxnoVDjn8Io.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Jun 2025 05:53:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10761 (0x2a09) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EF19E, serialNumber=9E1F19A7E18D8BCED23EF2EDAB19E85438E7F08A Validity Not Before: Jun 2 14:24:28 2025 GMT Not After : Jun 9 14:24:28 2025 GMT Subject: CN=683db41c-33e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:9a:36:61:1a:76:fb:6b:40:11:98:0f:86:a1: 97:34:fc:92:66:89:17:30:24:bb:89:ae:51:5c:d3: ff:e9:87:b2:c4:15:9e:18:dd:f7:b0:d3:50:51:a8: 7c:29:d3:a4:7e:4d:bb:6f:69:e1:9b:8e:2e:88:ac: 50:b9:a6:a7:26:a6:22:dc:0c:a2:fe:e7:50:03:17: 6b:27:aa:62:d6:fa:a1:ae:27:24:96:6d:14:6e:44: f7:05:cf:e8:04:8c:61:25:79:df:87:43:67:94:3e: b1:e8:23:6c:4a:09:aa:52:3b:ff:d0:de:d0:34:e4: 33:dc:c4:ba:a4:63:61:a7:23:6b:be:62:d5:4e:3a: 4c:2a:0f:78:a0:62:95:65:51:f9:e7:db:92:6b:2d: 4d:3d:86:53:e3:2d:b4:37:df:3f:d6:d1:dc:84:e0: 0a:8c:1e:db:3d:3f:fd:ed:fb:e6:a1:d5:5d:99:77: 15:38:6a:69:04:54:e4:ff:8a:a9:0c:3b:01:12:28: b2:ef:e2:74:c7:59:0a:15:da:12:2e:9f:42:08:1c: 18:a0:b8:58:26:25:85:a1:ae:df:ca:e1:5d:9b:7a: 95:db:2d:77:ba:b6:7b:1e:c6:4d:63:3d:d1:12:0a: 15:b7:e2:28:e8:e2:7c:ca:c7:8b:34:e7:a1:3a:14: 8b:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:BB:13:B3:89:11:27:5C:87:2D:89:3C:56:84:28:C5:7C:F3:CB:EA X509v3 Authority Key Identifier: keyid:9E:1F:19:A7:E1:8D:8B:CE:D2:3E:F2:ED:AB:19:E8:54:38:E7:F0:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EF19E/A93E993E340D11E49EC98163C4F9AE02/nh8Zp-GNi87SPvLtqxnoVDjn8Io.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nh8Zp-GNi87SPvLtqxnoVDjn8Io.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EF19E/A93E993E340D11E49EC98163C4F9AE02/nh8Zp-GNi87SPvLtqxnoVDjn8Io.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 12:63:d4:c3:4c:51:6a:be:92:2e:9d:aa:f3:7a:17:10:93:5d: d4:7d:5d:ef:83:c4:80:0a:95:d9:e7:c1:ab:b5:86:44:3c:13: 1a:63:d6:7b:3e:48:97:12:b5:d5:10:06:9d:fa:1f:24:47:0b: 3b:bb:14:fb:26:fe:7c:67:3b:ea:96:f2:29:19:ee:82:eb:4a: 3a:1f:b9:c7:dc:6e:6f:39:4a:c1:7e:e1:3d:d5:25:4a:61:ae: d7:83:b1:d6:24:d6:20:61:8a:19:05:80:07:20:ef:31:b5:66: c2:60:8a:7d:4c:a3:b4:52:bb:ef:20:b0:17:d1:b6:79:5e:65: 79:8d:70:d1:80:2d:1c:21:ab:a8:fe:e3:19:46:bc:50:02:10: 1f:fa:bd:7c:e4:0b:d8:2f:20:f5:e3:a9:c2:33:1d:e6:80:a3: f1:7f:d7:17:97:6a:91:c1:7d:59:3b:16:76:2d:a8:26:1f:50: a0:bb:d9:87:21:03:4b:f2:dd:a3:74:62:41:77:20:03:41:9b: b5:c3:6c:63:a1:d1:d7:f0:c7:26:ca:ac:05:8a:59:f4:bf:13: 2b:77:5a:96:80:85:00:73:12:ff:a1:7a:ae:57:34:eb:47:6a: 93:70:6f:d3:b6:b7:57:ad:a9:5a:9f:89:fd:41:68:0c:17:da: 81:18:1b:30 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICKgkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUYxOUUxMTAvBgNVBAUTKDlFMUYxOUE3RTE4RDhCQ0VEMjNFRjJFREFCMTlFODU0 MzhFN0YwOEEwHhcNMjUwNjAyMTQyNDI4WhcNMjUwNjA5MTQyNDI4WjAYMRYwFAYD VQQDEw02ODNkYjQxYy0zM2U2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq5o2YRp2+2tAEZgPhqGXNPySZokXMCS7ia5RXNP/6YeyxBWeGN33sNNQUah8 KdOkfk27b2nhm44uiKxQuaanJqYi3Ayi/udQAxdrJ6pi1vqhricklm0UbkT3Bc/o BIxhJXnfh0NnlD6x6CNsSgmqUjv/0N7QNOQz3MS6pGNhpyNrvmLVTjpMKg94oGKV ZVH559uSay1NPYZT4y20N98/1tHchOAKjB7bPT/97fvmodVdmXcVOGppBFTk/4qp DDsBEiiy7+J0x1kKFdoSLp9CCBwYoLhYJiWFoa7fyuFdm3qV2y13urZ7HsZNYz3R EgoVt+Io6OJ8yseLNOehOhSLcwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCC7E7OJ ESdchy2JPFaEKMV888vqMB8GA1UdIwQYMBaAFJ4fGafhjYvO0j7y7asZ6FQ45/CK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRjE5RS9BOTNFOTkzRTM0 MEQxMUU0OUVDOTgxNjNDNEY5QUUwMi9uaDhacC1HTmk4N1NQdkx0cXhub1ZEam44 SW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL25oOFpwLUdOaTg3U1B2THRxeG5vVkRqbjhJby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RjE5RS9BOTNFOTkzRTM0MEQxMUU0OUVDOTgxNjNDNEY5QUUwMi9uaDhacC1HTmk4 N1NQdkx0cXhub1ZEam44SW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQASY9TDTFFqvpIunarzehcQk13UfV3vg8SACpXZ58GrtYZEPBMaY9Z7 PkiXErXVEAad+h8kRws7uxT7Jv58ZzvqlvIpGe6C60o6H7nH3G5vOUrBfuE91SVK Ya7Xg7HWJNYgYYoZBYAHIO8xtWbCYIp9TKO0UrvvILAX0bZ5XmV5jXDRgC0cIauo /uMZRrxQAhAf+r185AvYLyD146nCMx3mgKPxf9cXl2qRwX1ZOxZ2LagmH1Cgu9mH IQNL8t2jdGJBdyADQZu1w2xjodHX8McmyqwFiln0vxMrd1qWgIUAcxL/oXquVzTr R2qTcG/TtrdXralan4n9QWgMF9qBGBsw -----END CERTIFICATE-----Generated at Mon Jun 2 21:51:04 2025 by rpki-client