$ rpki-client -vvf rpki.apnic.net/member_repository/A91F38FD/A5A6F37A61F811EE9F79401AC4F9AE02/nLXKgHLiac4FVaYAsheSDrnhrE8.mft File: nLXKgHLiac4FVaYAsheSDrnhrE8.mft (raw, json) Hash identifier: yZw2N2+8gdQkIbdOhCQoi+9ISg5J8Klqdj4FyKNzTg0= Subject key identifier: B7:E7:08:E0:DD:6C:F1:E5:A6:9E:26:CE:B3:CD:A3:52:F3:C6:D7:D0 Authority key identifier: 9C:B5:CA:80:72:E2:69:CE:05:55:A6:00:B2:17:92:0E:B9:E1:AC:4F Certificate issuer: /CN=A91F38FD/serialNumber=9CB5CA8072E269CE0555A600B217920EB9E1AC4F Certificate serial: 0145 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nLXKgHLiac4FVaYAsheSDrnhrE8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F38FD/A5A6F37A61F811EE9F79401AC4F9AE02/nLXKgHLiac4FVaYAsheSDrnhrE8.mft Manifest number: 013E Signing time: Sat 31 May 2025 04:06:22 +0000 Manifest this update: Sat 31 May 2025 04:06:21 +0000 Manifest next update: Sat 07 Jun 2025 04:06:21 +0000 Files and hashes: 1: nLXKgHLiac4FVaYAsheSDrnhrE8.crl (hash: QrdxTQhfYGv6WddWdu7khFAuc2oKiK/TWcx1bT6+IGc=) 2: 0B421064DD2411EFA5DECA6CC4F9AE02.roa (hash: iPG0hpzDRBKyvVm+6Qkbihdh+5UI+wgroCyFHLS8kTU=) 3: 36020660DD2411EF9F4FB925C4F9AE02.roa (hash: j9Po9H6BwdSd4+LJVOpstqA6CfVsNzASbprlAvb5WDg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F38FD/A5A6F37A61F811EE9F79401AC4F9AE02/nLXKgHLiac4FVaYAsheSDrnhrE8.crl rsync://rpki.apnic.net/member_repository/A91F38FD/A5A6F37A61F811EE9F79401AC4F9AE02/nLXKgHLiac4FVaYAsheSDrnhrE8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nLXKgHLiac4FVaYAsheSDrnhrE8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 04:06:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 325 (0x145) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F38FD, serialNumber=9CB5CA8072E269CE0555A600B217920EB9E1AC4F Validity Not Before: May 31 04:06:21 2025 GMT Not After : Jun 7 04:06:21 2025 GMT Subject: CN=683a803e-7b79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:c2:8c:e8:89:e5:e6:3a:82:73:58:d1:37:0c: d6:f4:8d:3d:38:ca:92:9c:51:18:d1:ed:7b:71:69: 8c:03:44:82:c0:bf:7f:43:2f:97:1f:e9:b0:fb:aa: 04:9f:38:2b:d7:0a:25:38:2e:fc:a7:47:a4:32:73: c3:3e:d2:4d:d5:f9:61:43:70:02:39:dd:f4:08:36: 67:54:ba:ec:6e:8f:1a:1d:08:92:b1:99:53:91:dc: 90:3d:84:ae:7c:3e:d0:89:58:10:fa:79:52:36:cb: 07:dd:f0:a9:b6:2b:a4:a8:c1:9f:f0:1d:1e:b7:a0: df:a5:08:a7:f4:bf:53:42:a1:01:f5:4b:3d:0d:ad: 3b:4c:40:c4:fe:95:8f:a2:62:7a:b4:d3:6c:1c:db: 35:3a:7d:52:31:3f:91:a1:fe:82:21:c9:2b:5d:bf: 8d:7e:a0:e5:7a:3d:1e:10:db:a0:a2:4f:85:16:65: 79:9a:e0:90:a6:ff:c8:a5:56:be:aa:94:88:ba:ef: 0f:7e:ae:11:6d:d9:96:cd:c9:b7:d3:4d:06:4c:20: f2:cc:51:33:f6:54:29:2a:94:a1:71:60:3d:12:10: 85:1a:a3:7c:4a:91:cb:14:ac:ac:82:a2:71:f3:00: 41:c5:42:2f:4f:8b:27:1f:ea:7c:1d:9a:cf:77:da: a9:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:E7:08:E0:DD:6C:F1:E5:A6:9E:26:CE:B3:CD:A3:52:F3:C6:D7:D0 X509v3 Authority Key Identifier: keyid:9C:B5:CA:80:72:E2:69:CE:05:55:A6:00:B2:17:92:0E:B9:E1:AC:4F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F38FD/A5A6F37A61F811EE9F79401AC4F9AE02/nLXKgHLiac4FVaYAsheSDrnhrE8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nLXKgHLiac4FVaYAsheSDrnhrE8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F38FD/A5A6F37A61F811EE9F79401AC4F9AE02/nLXKgHLiac4FVaYAsheSDrnhrE8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 72:d2:4b:09:1f:df:0c:69:1f:b4:d7:f2:87:2c:42:ff:3a:6e: 43:6f:a1:55:34:af:88:80:32:32:8e:33:17:a0:18:09:b8:33: e8:34:18:2a:95:1b:4d:99:1e:2c:bc:d1:c8:d0:f6:2d:83:76: 08:03:4c:e7:10:eb:e7:dc:08:cb:4a:9c:8b:36:dd:8d:57:c3: 1f:bf:28:2b:c2:e9:3d:7d:a0:c5:0d:a4:33:86:3f:f2:3f:b2: dc:d7:53:90:6d:16:68:c3:9a:f4:fc:09:8f:67:d6:0f:37:10: a3:50:e5:d7:cd:35:5f:0c:e8:f9:7f:1e:b3:be:f5:66:e3:d9: a4:9e:3e:31:c8:3b:a2:39:92:25:26:20:4a:8c:b0:ec:ac:ef: 3d:7f:d5:20:da:ed:33:83:a6:62:bb:27:1e:ca:6a:44:41:8e: ae:37:86:24:11:0a:a4:c1:41:67:2f:64:28:57:11:62:82:de: bf:c3:69:c4:d8:12:53:1b:53:08:31:59:55:6e:79:37:51:e1: 93:78:e3:a6:ed:ba:38:44:b9:cd:ea:6b:e5:4a:e6:58:8b:eb: 57:41:ef:56:bb:04:01:f8:44:59:df:e7:12:ac:4b:9a:33:22: c1:2d:b8:82:f7:90:6c:88:cd:d3:a7:be:5e:1d:7f:55:dc:9a: 84:04:3d:6c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAUUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjM4RkQxMTAvBgNVBAUTKDlDQjVDQTgwNzJFMjY5Q0UwNTU1QTYwMEIyMTc5MjBF QjlFMUFDNEYwHhcNMjUwNTMxMDQwNjIxWhcNMjUwNjA3MDQwNjIxWjAYMRYwFAYD VQQDEw02ODNhODAzZS03Yjc5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3MKM6Inl5jqCc1jRNwzW9I09OMqSnFEY0e17cWmMA0SCwL9/Qy+XH+mw+6oE nzgr1wolOC78p0ekMnPDPtJN1flhQ3ACOd30CDZnVLrsbo8aHQiSsZlTkdyQPYSu fD7QiVgQ+nlSNssH3fCptiukqMGf8B0et6DfpQin9L9TQqEB9Us9Da07TEDE/pWP omJ6tNNsHNs1On1SMT+Rof6CIckrXb+NfqDlej0eENugok+FFmV5muCQpv/IpVa+ qpSIuu8Pfq4RbdmWzcm3000GTCDyzFEz9lQpKpShcWA9EhCFGqN8SpHLFKysgqJx 8wBBxUIvT4snH+p8HZrPd9qpgQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLfnCODd bPHlpp4mzrPNo1LzxtfQMB8GA1UdIwQYMBaAFJy1yoBy4mnOBVWmALIXkg654axP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMzhGRC9BNUE2RjM3QTYx RjgxMUVFOUY3OTQwMUFDNEY5QUUwMi9uTFhLZ0hMaWFjNEZWYVlBc2hlU0Rybmhy RTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25MWEtnSExpYWM0RlZhWUFzaGVTRHJuaHJFOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MzhGRC9BNUE2RjM3QTYxRjgxMUVFOUY3OTQwMUFDNEY5QUUwMi9uTFhLZ0hMaWFj NEZWYVlBc2hlU0RybmhyRTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBy0ksJH98MaR+01/KHLEL/Om5Db6FVNK+IgDIyjjMXoBgJuDPoNBgq lRtNmR4svNHI0PYtg3YIA0znEOvn3AjLSpyLNt2NV8Mfvygrwuk9faDFDaQzhj/y P7Lc11OQbRZow5r0/AmPZ9YPNxCjUOXXzTVfDOj5fx6zvvVm49mknj4xyDuiOZIl JiBKjLDsrO89f9Ug2u0zg6ZiuyceympEQY6uN4YkEQqkwUFnL2QoVxFigt6/w2nE 2BJTG1MIMVlVbnk3UeGTeOOm7bo4RLnN6mvlSuZYi+tXQe9WuwQB+ERZ3+cSrEua MyLBLbiC95BsiM3Tp75eHX9V3JqEBD1s -----END CERTIFICATE-----Generated at Sat May 31 17:31:59 2025 by rpki-client