$ rpki-client -vvf rpki.apnic.net/member_repository/A91F9353/0875E64805C611EF89620A26C4F9AE02/rNBH0NiOJlfhLPkTAcFg8dPNLzM.mft File: rNBH0NiOJlfhLPkTAcFg8dPNLzM.mft (raw, json) Hash identifier: iHjqCiI7sdoK7OGCn9q3ErztzPxhTXpMxfBtktK9QXo= Subject key identifier: 0E:41:FB:FC:33:59:E6:16:D3:7B:BD:0D:C3:E9:BC:40:2E:83:47:52 Authority key identifier: AC:D0:47:D0:D8:8E:26:57:E1:2C:F9:13:01:C1:60:F1:D3:CD:2F:33 Certificate issuer: /CN=A91F9353/serialNumber=ACD047D0D88E2657E12CF91301C160F1D3CD2F33 Certificate serial: FD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rNBH0NiOJlfhLPkTAcFg8dPNLzM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F9353/0875E64805C611EF89620A26C4F9AE02/rNBH0NiOJlfhLPkTAcFg8dPNLzM.mft Manifest number: EA Signing time: Sat 31 May 2025 05:18:29 +0000 Manifest this update: Sat 31 May 2025 05:18:28 +0000 Manifest next update: Sat 07 Jun 2025 05:18:28 +0000 Files and hashes: 1: rNBH0NiOJlfhLPkTAcFg8dPNLzM.crl (hash: xMiC2mCvZTZrz8RHFz0y9qA3VAk540uGEX1FYUe9Iw8=) 2: 3285ADDAA9D911EF9F30DA47C4F9AE02.roa (hash: 8EM5Tdb1aWYr9WLpldVjADU+t0zk8U3aJcreE19Ronc=) 3: DD267C66316511EFB284A421C4F9AE02.roa (hash: eSuqYXVr/sRMfsql4kma/aB/fn6WdOxL+gBS/uO7fxQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F9353/0875E64805C611EF89620A26C4F9AE02/rNBH0NiOJlfhLPkTAcFg8dPNLzM.crl rsync://rpki.apnic.net/member_repository/A91F9353/0875E64805C611EF89620A26C4F9AE02/rNBH0NiOJlfhLPkTAcFg8dPNLzM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rNBH0NiOJlfhLPkTAcFg8dPNLzM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 05:18:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 253 (0xfd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F9353, serialNumber=ACD047D0D88E2657E12CF91301C160F1D3CD2F33 Validity Not Before: May 31 05:18:28 2025 GMT Not After : Jun 7 05:18:28 2025 GMT Subject: CN=683a9124-fcac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:a5:0a:e6:52:38:1a:e1:9e:67:05:68:38:0c: f6:f6:9b:b1:48:82:54:04:89:53:f0:44:46:08:03: b6:a2:a1:a2:60:5f:5e:02:fe:27:14:c1:37:a5:db: 30:a1:7f:5c:ff:07:9f:20:0c:e4:71:92:91:7f:3d: 3c:54:ea:4b:69:a3:d4:b6:ba:73:cf:52:9b:c6:86: cc:de:a0:1e:19:3e:87:93:79:52:c7:33:25:53:9d: ac:78:dd:e1:69:0f:51:d3:e0:3a:3b:f0:66:94:ef: d4:d2:4d:8e:e7:ac:86:eb:d6:d2:4e:62:c0:6e:45: 0b:2f:81:fa:1c:ab:7d:90:7a:ac:d0:99:0c:70:4b: a3:ed:5a:18:c3:4e:cc:01:d7:b6:49:46:57:0a:a9: 64:a2:e4:9b:2b:1f:14:a3:94:5c:40:85:9a:61:de: 13:67:aa:41:da:15:27:2b:ee:15:6e:ce:29:b1:8d: 05:d6:11:ee:29:df:2f:53:fb:9e:a2:6a:24:48:85: e7:6f:6b:2a:f2:48:34:e7:3b:cf:97:a9:2f:b5:90: 73:b1:80:4f:44:4b:07:69:50:f6:9d:af:07:e0:a1: b2:7b:98:ff:f7:47:b0:04:53:0b:fd:71:23:4e:13: 7d:87:ea:8a:a3:82:14:04:1e:3f:98:60:69:68:54: 5e:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:41:FB:FC:33:59:E6:16:D3:7B:BD:0D:C3:E9:BC:40:2E:83:47:52 X509v3 Authority Key Identifier: keyid:AC:D0:47:D0:D8:8E:26:57:E1:2C:F9:13:01:C1:60:F1:D3:CD:2F:33 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F9353/0875E64805C611EF89620A26C4F9AE02/rNBH0NiOJlfhLPkTAcFg8dPNLzM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rNBH0NiOJlfhLPkTAcFg8dPNLzM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F9353/0875E64805C611EF89620A26C4F9AE02/rNBH0NiOJlfhLPkTAcFg8dPNLzM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 14:6e:ff:f6:e9:20:d9:33:12:bb:93:24:41:47:4a:44:00:90: fd:db:5f:69:50:62:86:95:19:5f:90:9d:44:31:12:db:f8:c9: 29:fe:44:cd:0f:88:40:4d:89:32:41:71:79:55:c9:36:59:cd: fc:65:6c:d0:25:cb:8e:41:56:de:d4:d0:58:3e:0e:11:85:09: 86:cd:d9:b8:11:00:47:a7:bf:8d:34:17:70:65:b4:fc:32:bd: 5c:1d:2e:70:03:c0:b1:54:0e:1b:ab:1c:32:e2:71:bf:b0:e0: 37:08:ac:ce:b4:4e:52:63:8a:e2:89:f4:9d:df:8e:25:24:23: c0:c7:01:6a:5f:ed:2f:5c:4d:72:cf:4c:4b:ad:67:ad:f9:db: 21:1a:84:27:ec:dc:52:a5:e5:81:01:c1:ab:4d:03:6f:3d:66: fc:15:c7:e3:2c:b3:eb:5f:3f:90:a1:8e:de:eb:b0:53:3c:19: bb:db:d9:19:9b:43:36:bc:de:f0:c5:a0:4a:43:93:23:f3:e8: b5:20:1e:7f:55:59:77:5d:42:e7:5a:94:66:13:74:c8:73:03: e8:f7:de:98:95:b5:91:35:3d:6c:0e:9e:29:35:4f:83:f7:76: 5f:87:b7:08:11:fc:e7:76:05:da:35:08:8d:4b:ec:91:12:56: 2a:30:d9:2e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAP0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjkzNTMxMTAvBgNVBAUTKEFDRDA0N0QwRDg4RTI2NTdFMTJDRjkxMzAxQzE2MEYx RDNDRDJGMzMwHhcNMjUwNTMxMDUxODI4WhcNMjUwNjA3MDUxODI4WjAYMRYwFAYD VQQDEw02ODNhOTEyNC1mY2FjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzaUK5lI4GuGeZwVoOAz29puxSIJUBIlT8ERGCAO2oqGiYF9eAv4nFME3pdsw oX9c/wefIAzkcZKRfz08VOpLaaPUtrpzz1KbxobM3qAeGT6Hk3lSxzMlU52seN3h aQ9R0+A6O/BmlO/U0k2O56yG69bSTmLAbkULL4H6HKt9kHqs0JkMcEuj7VoYw07M Ade2SUZXCqlkouSbKx8Uo5RcQIWaYd4TZ6pB2hUnK+4Vbs4psY0F1hHuKd8vU/ue omokSIXnb2sq8kg05zvPl6kvtZBzsYBPREsHaVD2na8H4KGye5j/90ewBFML/XEj ThN9h+qKo4IUBB4/mGBpaFReMwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA5B+/wz WeYW03u9DcPpvEAug0dSMB8GA1UdIwQYMBaAFKzQR9DYjiZX4Sz5EwHBYPHTzS8z MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGOTM1My8wODc1RTY0ODA1 QzYxMUVGODk2MjBBMjZDNEY5QUUwMi9yTkJIME5pT0psZmhMUGtUQWNGZzhkUE5M ek0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JOQkgwTmlPSmxmaExQa1RBY0ZnOGRQTkx6TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG OTM1My8wODc1RTY0ODA1QzYxMUVGODk2MjBBMjZDNEY5QUUwMi9yTkJIME5pT0ps ZmhMUGtUQWNGZzhkUE5Mek0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAUbv/26SDZMxK7kyRBR0pEAJD9219pUGKGlRlfkJ1EMRLb+Mkp/kTN D4hATYkyQXF5Vck2Wc38ZWzQJcuOQVbe1NBYPg4RhQmGzdm4EQBHp7+NNBdwZbT8 Mr1cHS5wA8CxVA4bqxwy4nG/sOA3CKzOtE5SY4riifSd344lJCPAxwFqX+0vXE1y z0xLrWet+dshGoQn7NxSpeWBAcGrTQNvPWb8FcfjLLPrXz+QoY7e67BTPBm729kZ m0M2vN7wxaBKQ5Mj8+i1IB5/VVl3XULnWpRmE3TIcwPo996YlbWRNT1sDp4pNU+D 93Zfh7cIEfzndgXaNQiNS+yRElYqMNku -----END CERTIFICATE-----Generated at Sat May 31 17:36:01 2025 by rpki-client