$ rpki-client -vvf rpki.apnic.net/member_repository/A91F9749/99D17D96BF9B11ECAD3C0A30C4F9AE02/NebIf2uhtlE6EnD23BNt23ETZFc.mft File: NebIf2uhtlE6EnD23BNt23ETZFc.mft (raw, json) Hash identifier: 5E1b1dF5uCdQuuRfNtKKztTuR7zpxQWxf++hcNbQCSo= Subject key identifier: CE:F0:15:DC:20:43:F8:BD:9A:32:F4:55:3C:E8:86:92:42:B1:30:50 Authority key identifier: 35:E6:C8:7F:6B:A1:B6:51:3A:12:70:F6:DC:13:6D:DB:71:13:64:57 Certificate issuer: /CN=A91F9749/serialNumber=35E6C87F6BA1B6513A1270F6DC136DDB71136457 Certificate serial: 0340 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NebIf2uhtlE6EnD23BNt23ETZFc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F9749/99D17D96BF9B11ECAD3C0A30C4F9AE02/NebIf2uhtlE6EnD23BNt23ETZFc.mft Manifest number: 033C Signing time: Sat 31 May 2025 01:14:07 +0000 Manifest this update: Sat 31 May 2025 01:14:07 +0000 Manifest next update: Sat 07 Jun 2025 01:14:07 +0000 Files and hashes: 1: NebIf2uhtlE6EnD23BNt23ETZFc.crl (hash: RWEjC8p8OcGEPRS0ijyXiuduwEpsdMS1GUdJhSHAbJk=) 2: 97B81DD6BF9F11ECAB5B1239C4F9AE02.roa (hash: WBPEzwrRJmEQao59jsv0p03EV57EGiVD2LS1uQaSE9s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F9749/99D17D96BF9B11ECAD3C0A30C4F9AE02/NebIf2uhtlE6EnD23BNt23ETZFc.crl rsync://rpki.apnic.net/member_repository/A91F9749/99D17D96BF9B11ECAD3C0A30C4F9AE02/NebIf2uhtlE6EnD23BNt23ETZFc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NebIf2uhtlE6EnD23BNt23ETZFc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 01:14:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 832 (0x340) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F9749, serialNumber=35E6C87F6BA1B6513A1270F6DC136DDB71136457 Validity Not Before: May 31 01:14:07 2025 GMT Not After : Jun 7 01:14:07 2025 GMT Subject: CN=683a57df-280d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:0f:0e:6e:e8:48:a4:4a:70:2c:45:3d:d5:9d: 7d:3e:7c:5a:1b:dd:48:53:df:16:1f:a3:dd:61:f9: b6:6e:2a:8d:08:a8:84:ec:e5:89:25:93:31:47:ed: dc:b5:a5:69:65:ac:7a:36:c8:25:d6:c1:0a:d9:01: 39:c0:af:63:9f:a5:91:ae:84:25:08:e9:89:46:78: 3a:d6:b2:4d:6c:93:f5:fa:14:4f:c0:22:8c:46:5a: ea:09:53:22:c7:78:d1:67:1f:e9:41:17:ab:66:fe: 99:f1:bd:4b:23:5b:85:58:5f:3c:53:78:57:6b:e1: 31:3f:ba:95:cf:1d:52:98:7f:c5:81:4f:91:81:da: 37:14:a7:c3:70:55:3b:cb:8d:38:41:50:85:a0:e2: 66:25:e2:59:6f:8e:e7:d3:2c:d0:02:65:5e:1d:08: b5:1b:88:82:94:b0:1e:39:b4:43:18:01:b3:64:8a: f1:a0:0b:86:41:a1:11:67:10:ef:e7:9f:29:8a:d1: fa:04:dd:ac:87:e6:e8:9d:48:36:e7:36:ae:a2:84: 68:a9:47:6b:f6:7c:1f:d4:5e:5c:cc:3e:59:04:2b: 8d:cb:5e:53:c9:4e:3f:50:b2:6f:a1:54:a5:26:45: db:aa:8b:ac:ff:f2:11:45:e4:3a:78:78:f7:ab:00: 66:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:F0:15:DC:20:43:F8:BD:9A:32:F4:55:3C:E8:86:92:42:B1:30:50 X509v3 Authority Key Identifier: keyid:35:E6:C8:7F:6B:A1:B6:51:3A:12:70:F6:DC:13:6D:DB:71:13:64:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F9749/99D17D96BF9B11ECAD3C0A30C4F9AE02/NebIf2uhtlE6EnD23BNt23ETZFc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NebIf2uhtlE6EnD23BNt23ETZFc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F9749/99D17D96BF9B11ECAD3C0A30C4F9AE02/NebIf2uhtlE6EnD23BNt23ETZFc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 85:2d:48:8c:00:b6:b5:b2:90:4d:d2:ed:49:50:44:f2:0e:65: 4b:78:0e:8c:8f:14:18:cd:a2:13:4e:9f:60:4e:a6:d9:d1:ca: 22:28:d0:29:4c:6a:2c:a9:c6:9d:69:63:55:b2:d5:26:c7:e5: e5:85:54:72:63:33:fa:88:a4:85:4f:b0:31:6c:3b:2c:6d:59: 84:5b:c4:9c:18:0a:e3:2c:46:b3:9a:68:19:fe:85:64:fa:6b: d3:b2:e3:b6:ee:53:bd:8e:87:3b:cd:4b:1a:b1:1b:5b:1d:8a: 62:65:98:7e:9a:99:8b:21:9e:22:d0:fd:a5:60:26:b6:61:3b: d3:cf:b7:f6:35:2d:91:20:82:62:d3:5d:52:4d:fa:66:83:b4: ec:dc:a1:c9:9c:aa:9b:e9:a4:89:e9:71:40:3c:84:d2:a3:82: d5:a2:e4:b7:85:45:98:3a:e1:b4:5d:1d:b4:47:d4:17:d9:70: f3:38:b4:29:64:46:3f:36:8e:70:61:a2:61:17:85:e8:25:af: 2a:dd:13:22:55:3d:d5:fc:ac:4a:e1:5f:f2:50:25:13:3f:41: a5:cf:26:9a:d0:32:a9:20:54:2d:03:7b:f4:4c:37:09:96:0d: d2:41:91:d1:d9:19:ef:0b:47:cd:9a:89:bb:c9:65:ee:0b:85: 1f:02:22:33 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA0AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Rjk3NDkxMTAvBgNVBAUTKDM1RTZDODdGNkJBMUI2NTEzQTEyNzBGNkRDMTM2RERC NzExMzY0NTcwHhcNMjUwNTMxMDExNDA3WhcNMjUwNjA3MDExNDA3WjAYMRYwFAYD VQQDEw02ODNhNTdkZi0yODBkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6w8ObuhIpEpwLEU91Z19PnxaG91IU98WH6PdYfm2biqNCKiE7OWJJZMxR+3c taVpZax6Nsgl1sEK2QE5wK9jn6WRroQlCOmJRng61rJNbJP1+hRPwCKMRlrqCVMi x3jRZx/pQRerZv6Z8b1LI1uFWF88U3hXa+ExP7qVzx1SmH/FgU+Rgdo3FKfDcFU7 y404QVCFoOJmJeJZb47n0yzQAmVeHQi1G4iClLAeObRDGAGzZIrxoAuGQaERZxDv 558pitH6BN2sh+bonUg25zauooRoqUdr9nwf1F5czD5ZBCuNy15TyU4/ULJvoVSl JkXbqous//IRReQ6eHj3qwBmQwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM7wFdwg Q/i9mjL0VTzohpJCsTBQMB8GA1UdIwQYMBaAFDXmyH9robZROhJw9twTbdtxE2RX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGOTc0OS85OUQxN0Q5NkJG OUIxMUVDQUQzQzBBMzBDNEY5QUUwMi9OZWJJZjJ1aHRsRTZFbkQyM0JOdDIzRVRa RmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05lYklmMnVodGxFNkVuRDIzQk50MjNFVFpGYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG OTc0OS85OUQxN0Q5NkJGOUIxMUVDQUQzQzBBMzBDNEY5QUUwMi9OZWJJZjJ1aHRs RTZFbkQyM0JOdDIzRVRaRmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCFLUiMALa1spBN0u1JUETyDmVLeA6MjxQYzaITTp9gTqbZ0coiKNAp TGosqcadaWNVstUmx+XlhVRyYzP6iKSFT7AxbDssbVmEW8ScGArjLEazmmgZ/oVk +mvTsuO27lO9joc7zUsasRtbHYpiZZh+mpmLIZ4i0P2lYCa2YTvTz7f2NS2RIIJi 011STfpmg7Ts3KHJnKqb6aSJ6XFAPITSo4LVouS3hUWYOuG0XR20R9QX2XDzOLQp ZEY/No5wYaJhF4XoJa8q3RMiVT3V/KxK4V/yUCUTP0Glzyaa0DKpIFQtA3v0TDcJ lg3SQZHR2RnvC0fNmom7yWXuC4UfAiIz -----END CERTIFICATE-----Generated at Sat May 31 16:35:47 2025 by rpki-client