$ rpki-client -vvf rpki.apnic.net/member_repository/A91FD3F6/371681FAF8D311EF9758FB0FC4F9AE02/n4mmBPRc629oBPtTTq3CQWa9Dyk.mft File: n4mmBPRc629oBPtTTq3CQWa9Dyk.mft (raw, json) Hash identifier: tNw4spjkDFTWL4xwSNqSbRCTed/vqNOKwQRTfnCmXtM= Subject key identifier: 9B:A2:9F:69:ED:81:52:EC:26:94:4A:5E:45:F2:18:BB:52:86:55:2C Authority key identifier: 9F:89:A6:04:F4:5C:EB:6F:68:04:FB:53:4E:AD:C2:41:66:BD:0F:29 Certificate issuer: /CN=A91FD3F6/serialNumber=9F89A604F45CEB6F6804FB534EADC24166BD0F29 Certificate serial: 32 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n4mmBPRc629oBPtTTq3CQWa9Dyk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FD3F6/371681FAF8D311EF9758FB0FC4F9AE02/n4mmBPRc629oBPtTTq3CQWa9Dyk.mft Manifest number: 30 Signing time: Sat 31 May 2025 07:14:54 +0000 Manifest this update: Sat 31 May 2025 07:14:53 +0000 Manifest next update: Sat 07 Jun 2025 07:14:53 +0000 Files and hashes: 1: n4mmBPRc629oBPtTTq3CQWa9Dyk.crl (hash: ieeMT1yOAPUq5bwm+RbHi4LhtDDWypPemWLoba8Ladc=) 2: 27B19A58F99911EFB6B7F427C4F9AE02.roa (hash: BUhldgfxait6fPn7ddMr7oElIYN1G4FTjWGIi47OvkE=) 3: 88E11172F99A11EFA825D961C4F9AE02.roa (hash: AXOaVoqZ86dlROkyEdtuYYcAQanKRipkDbyi/sYqa94=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FD3F6/371681FAF8D311EF9758FB0FC4F9AE02/n4mmBPRc629oBPtTTq3CQWa9Dyk.crl rsync://rpki.apnic.net/member_repository/A91FD3F6/371681FAF8D311EF9758FB0FC4F9AE02/n4mmBPRc629oBPtTTq3CQWa9Dyk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n4mmBPRc629oBPtTTq3CQWa9Dyk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 07:14:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50 (0x32) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FD3F6, serialNumber=9F89A604F45CEB6F6804FB534EADC24166BD0F29 Validity Not Before: May 31 07:14:53 2025 GMT Not After : Jun 7 07:14:53 2025 GMT Subject: CN=683aac6e-89bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:a8:70:0d:36:82:96:2e:04:10:75:16:ed:4f: 95:7c:86:57:5c:e4:a4:47:44:12:aa:be:1a:0a:cf: 36:87:77:41:96:af:44:c8:ad:16:7e:d2:5e:9d:8c: 8e:a0:46:15:00:6e:ad:73:53:22:df:e1:8c:98:74: 9b:ea:84:3f:b9:e2:11:0a:91:5d:eb:c2:f2:de:89: 05:87:57:27:bd:00:a6:03:c0:22:ec:5a:92:11:77: 20:3a:1d:50:25:6d:8a:cd:82:c0:1e:25:5c:eb:5e: a8:6d:8f:61:c7:30:6c:6d:52:2d:3b:7d:d8:4e:7e: c1:29:17:b5:3b:dc:61:88:55:91:af:b1:46:3e:9f: 12:84:b2:ae:27:a7:ae:3f:b8:ea:27:95:40:68:e1: a4:1d:a4:74:f7:bd:82:7b:91:f9:25:b5:ac:eb:48: bb:ea:25:b9:1a:3e:44:14:c5:45:58:23:19:20:0b: 47:70:e5:04:e9:aa:42:a0:91:f0:82:21:3a:e4:23: 75:30:2e:62:ab:75:a1:78:86:40:92:85:12:31:19: e5:70:e9:fc:54:c1:ec:bc:37:41:c0:93:76:25:c0: fc:fc:ef:6f:95:1d:45:b6:83:5a:5f:63:98:7d:6f: 7e:bc:71:69:7d:78:fb:77:da:ac:b6:e8:b8:94:74: aa:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:A2:9F:69:ED:81:52:EC:26:94:4A:5E:45:F2:18:BB:52:86:55:2C X509v3 Authority Key Identifier: keyid:9F:89:A6:04:F4:5C:EB:6F:68:04:FB:53:4E:AD:C2:41:66:BD:0F:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FD3F6/371681FAF8D311EF9758FB0FC4F9AE02/n4mmBPRc629oBPtTTq3CQWa9Dyk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n4mmBPRc629oBPtTTq3CQWa9Dyk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FD3F6/371681FAF8D311EF9758FB0FC4F9AE02/n4mmBPRc629oBPtTTq3CQWa9Dyk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2a:9f:3f:8c:20:66:3e:0e:2b:b5:d7:55:68:5c:b1:a5:f1:cd: 3c:fa:65:a0:87:ef:f5:4c:46:f2:99:50:9f:a7:6a:c4:84:f7: b6:40:70:12:fd:8f:e5:1c:cd:4b:6b:9a:ce:59:f6:bd:e5:c6: 4a:ca:4d:3e:ac:44:07:4c:f5:93:6f:6d:6b:2d:8d:0f:70:0f: 41:a6:ce:6d:b7:b9:ce:ca:04:54:70:b8:c9:18:dd:18:23:be: 5c:f4:5c:c0:f7:d1:c3:a1:47:85:95:9f:e3:13:4a:ad:a8:dc: 41:73:f2:8c:85:c1:b1:b9:cc:e6:00:9e:54:56:a1:c4:b2:a4: c5:9a:c4:48:7f:9f:72:97:51:7d:51:5d:72:9a:f8:e0:c8:b6: 9b:75:dc:a0:4d:9c:2a:04:08:ef:ac:d5:6f:76:8c:81:8e:f8: 31:29:66:ff:2a:48:04:47:b0:00:4a:73:4f:f4:96:34:06:69: 19:ea:c8:d4:ed:89:39:22:73:44:f4:80:4f:00:37:dc:2e:9e: bc:bd:c0:7f:32:c6:4b:b3:3e:9d:a0:2f:1f:4d:ee:13:78:5b: f7:e4:c9:58:32:b4:ac:43:b0:36:75:05:e3:af:b1:a7:83:a6: af:91:56:f3:8c:a9:9e:fa:e5:1b:fa:55:24:c6:1a:aa:06:1c: ed:0d:e9:c2 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBMjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG RDNGNjExMC8GA1UEBRMoOUY4OUE2MDRGNDVDRUI2RjY4MDRGQjUzNEVBREMyNDE2 NkJEMEYyOTAeFw0yNTA1MzEwNzE0NTNaFw0yNTA2MDcwNzE0NTNaMBgxFjAUBgNV BAMTDTY4M2FhYzZlLTg5YmQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDMqHANNoKWLgQQdRbtT5V8hldc5KRHRBKqvhoKzzaHd0GWr0TIrRZ+0l6djI6g RhUAbq1zUyLf4YyYdJvqhD+54hEKkV3rwvLeiQWHVye9AKYDwCLsWpIRdyA6HVAl bYrNgsAeJVzrXqhtj2HHMGxtUi07fdhOfsEpF7U73GGIVZGvsUY+nxKEsq4np64/ uOonlUBo4aQdpHT3vYJ7kfkltazrSLvqJbkaPkQUxUVYIxkgC0dw5QTpqkKgkfCC ITrkI3UwLmKrdaF4hkCShRIxGeVw6fxUwey8N0HAk3YlwPz872+VHUW2g1pfY5h9 b368cWl9ePt32qy26LiUdKpdAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUm6Kfae2B UuwmlEpeRfIYu1KGVSwwHwYDVR0jBBgwFoAUn4mmBPRc629oBPtTTq3CQWa9Dykw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZEM0Y2LzM3MTY4MUZBRjhE MzExRUY5NzU4RkIwRkM0RjlBRTAyL240bW1CUFJjNjI5b0JQdFRUcTNDUVdhOUR5 ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvbjRtbUJQUmM2MjlvQlB0VFRxM0NRV2E5RHlrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZE M0Y2LzM3MTY4MUZBRjhEMzExRUY5NzU4RkIwRkM0RjlBRTAyL240bW1CUFJjNjI5 b0JQdFRUcTNDUVdhOUR5ay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBACqfP4wgZj4OK7XXVWhcsaXxzTz6ZaCH7/VMRvKZUJ+nasSE97ZAcBL9 j+UczUtrms5Z9r3lxkrKTT6sRAdM9ZNvbWstjQ9wD0Gmzm23uc7KBFRwuMkY3Rgj vlz0XMD30cOhR4WVn+MTSq2o3EFz8oyFwbG5zOYAnlRWocSypMWaxEh/n3KXUX1R XXKa+ODItpt13KBNnCoECO+s1W92jIGO+DEpZv8qSARHsABKc0/0ljQGaRnqyNTt iTkic0T0gE8AN9wunry9wH8yxkuzPp2gLx9N7hN4W/fkyVgytKxDsDZ1BeOvsaeD pq+RVvOMqZ765Rv6VSTGGqoGHO0N6cI= -----END CERTIFICATE-----Generated at Sat May 31 16:33:12 2025 by rpki-client