$ rpki-client -vvf rpki.apnic.net/member_repository/A91810E3/339314C8717D11EE89EF6236C4F9AE02/nberk64z9kYWgi3wP_2Bd2jx6Y8.mft File: nberk64z9kYWgi3wP_2Bd2jx6Y8.mft (raw, json) Hash identifier: DgI3ZDk+SdoI29efn47W68+ONLl7sd5zmECbVo6er/o= Subject key identifier: 58:AB:11:8D:B5:48:8F:2B:E2:F6:AF:6E:C4:B7:A8:C3:B4:C3:24:1B Authority key identifier: 9D:B7:AB:93:AE:33:F6:46:16:82:2D:F0:3F:FD:81:77:68:F1:E9:8F Certificate issuer: /CN=A91810E3/serialNumber=9DB7AB93AE33F64616822DF03FFD817768F1E98F Certificate serial: 0132 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nberk64z9kYWgi3wP_2Bd2jx6Y8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91810E3/339314C8717D11EE89EF6236C4F9AE02/nberk64z9kYWgi3wP_2Bd2jx6Y8.mft Manifest number: 012B Signing time: Sat 17 May 2025 04:15:15 +0000 Manifest this update: Sat 17 May 2025 04:15:14 +0000 Manifest next update: Sat 24 May 2025 04:15:14 +0000 Files and hashes: 1: nberk64z9kYWgi3wP_2Bd2jx6Y8.crl (hash: X4XpPCliaQeP51wmafm094ytRvtT9QEkIxrZdN/l0sg=) 2: A56F3A8A718811EEADDA430AC4F9AE02.roa (hash: q1gVEbmNzPAYit/PZzlFgDk+Tc1AUGMImEJ9QqP60MQ=) 3: 497917BA719B11EEA5D8F416C4F9AE02.roa (hash: RXrmTRENl+7Zg6y5wMLjJWSZiSVWcqVyL1CzU9Mm2gA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91810E3/339314C8717D11EE89EF6236C4F9AE02/nberk64z9kYWgi3wP_2Bd2jx6Y8.crl rsync://rpki.apnic.net/member_repository/A91810E3/339314C8717D11EE89EF6236C4F9AE02/nberk64z9kYWgi3wP_2Bd2jx6Y8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nberk64z9kYWgi3wP_2Bd2jx6Y8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 24 May 2025 04:15:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 306 (0x132) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91810E3, serialNumber=9DB7AB93AE33F64616822DF03FFD817768F1E98F Validity Not Before: May 17 04:15:14 2025 GMT Not After : May 24 04:15:14 2025 GMT Subject: CN=68280d53-f2e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:ab:23:36:00:72:23:ab:4a:70:4d:ea:20:79: 76:75:0f:63:48:d3:34:79:34:65:65:36:a1:78:55: c9:58:36:85:8f:82:81:35:cc:71:0f:3d:2d:6d:7e: 65:91:dd:7e:db:c8:17:e6:e5:23:cb:a8:0a:e9:13: ed:3a:2b:e0:8d:34:98:70:18:d0:77:60:38:b0:ed: ac:c1:7d:fd:32:a4:fd:96:b6:47:80:9a:81:cc:7f: bb:a9:88:40:2c:ee:f8:be:bb:45:78:76:39:70:f4: c1:e6:0d:be:aa:48:9d:53:56:b6:9f:7c:6a:34:b0: 46:91:a9:eb:5c:71:71:2b:d7:69:2b:a6:4e:27:0c: 82:ee:83:a7:f3:15:bb:be:48:1e:7f:32:1c:7c:1e: 61:53:c9:3b:3a:d7:87:79:06:68:e6:ee:34:07:06: c9:dd:6d:d2:df:b9:78:1b:15:7e:8c:58:9b:e0:55: 14:15:cc:ba:bb:84:81:18:fa:6c:d1:b8:7e:dd:71: 25:79:c7:3a:0c:37:f7:ca:14:08:6d:29:ca:29:58: 4b:ef:a0:03:78:87:c9:86:0a:12:1e:01:c3:98:0c: 1d:a6:2f:f7:56:2c:a8:3b:d6:df:a9:87:d2:57:0b: 58:b3:0a:c4:6f:2a:ee:ed:b1:29:81:32:75:5d:09: 7c:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:AB:11:8D:B5:48:8F:2B:E2:F6:AF:6E:C4:B7:A8:C3:B4:C3:24:1B X509v3 Authority Key Identifier: keyid:9D:B7:AB:93:AE:33:F6:46:16:82:2D:F0:3F:FD:81:77:68:F1:E9:8F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91810E3/339314C8717D11EE89EF6236C4F9AE02/nberk64z9kYWgi3wP_2Bd2jx6Y8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nberk64z9kYWgi3wP_2Bd2jx6Y8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91810E3/339314C8717D11EE89EF6236C4F9AE02/nberk64z9kYWgi3wP_2Bd2jx6Y8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 07:49:8c:2e:96:5f:a9:0b:21:38:57:e8:4f:30:d3:1e:5d:7e: 54:a8:64:28:ec:63:79:3c:c9:e1:41:fc:c6:fc:1f:50:3f:a8: 83:3a:2d:47:d1:17:9b:0a:b8:39:75:9c:3f:11:ee:f2:4a:95: 5a:db:c8:23:81:ab:66:d2:47:58:27:eb:d6:3c:3a:08:d0:c2: c7:fe:b9:7b:69:4c:83:67:43:5c:4d:91:3c:48:35:f3:93:ad: b5:d3:cc:15:74:6b:87:51:57:dc:50:f4:24:9b:79:85:6a:c1: cc:9f:6e:4a:14:c7:a4:02:b6:43:74:a7:8a:1a:96:f9:ee:a1: 35:4b:72:70:56:9b:73:f1:57:31:c3:a6:8d:92:2b:05:af:a2: 71:6b:78:c6:d8:66:1d:a3:0a:77:22:36:f9:c5:9c:0c:ad:b4: 76:2a:10:18:70:68:f7:e3:aa:31:8e:76:f7:28:0f:f9:bb:2a: 42:fb:2d:c2:4d:f3:49:56:8f:c5:cd:08:43:2d:9e:22:70:56: c7:0c:7f:f2:03:71:ef:45:42:d0:8a:f8:bd:42:c1:85:74:4a: f1:c5:04:9e:33:9a:9f:32:23:f5:89:a3:67:7c:21:fa:a9:cf: 54:93:48:5a:41:7e:49:3b:7a:a0:04:2a:df:1d:fe:1d:55:91: 63:f3:09:d5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICATIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODEwRTMxMTAvBgNVBAUTKDlEQjdBQjkzQUUzM0Y2NDYxNjgyMkRGMDNGRkQ4MTc3 NjhGMUU5OEYwHhcNMjUwNTE3MDQxNTE0WhcNMjUwNTI0MDQxNTE0WjAYMRYwFAYD VQQDEw02ODI4MGQ1My1mMmUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvKsjNgByI6tKcE3qIHl2dQ9jSNM0eTRlZTaheFXJWDaFj4KBNcxxDz0tbX5l kd1+28gX5uUjy6gK6RPtOivgjTSYcBjQd2A4sO2swX39MqT9lrZHgJqBzH+7qYhA LO74vrtFeHY5cPTB5g2+qkidU1a2n3xqNLBGkanrXHFxK9dpK6ZOJwyC7oOn8xW7 vkgefzIcfB5hU8k7OteHeQZo5u40BwbJ3W3S37l4GxV+jFib4FUUFcy6u4SBGPps 0bh+3XElecc6DDf3yhQIbSnKKVhL76ADeIfJhgoSHgHDmAwdpi/3ViyoO9bfqYfS VwtYswrEbyru7bEpgTJ1XQl8bwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFirEY21 SI8r4vavbsS3qMO0wyQbMB8GA1UdIwQYMBaAFJ23q5OuM/ZGFoIt8D/9gXdo8emP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MTBFMy8zMzkzMTRDODcx N0QxMUVFODlFRjYyMzZDNEY5QUUwMi9uYmVyazY0ejlrWVdnaTN3UF8yQmQyang2 WTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25iZXJrNjR6OWtZV2dpM3dQXzJCZDJqeDZZOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MTBFMy8zMzkzMTRDODcxN0QxMUVFODlFRjYyMzZDNEY5QUUwMi9uYmVyazY0ejlr WVdnaTN3UF8yQmQyang2WTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAHSYwull+pCyE4V+hPMNMeXX5UqGQo7GN5PMnhQfzG/B9QP6iDOi1H 0RebCrg5dZw/Ee7ySpVa28gjgatm0kdYJ+vWPDoI0MLH/rl7aUyDZ0NcTZE8SDXz k62108wVdGuHUVfcUPQkm3mFasHMn25KFMekArZDdKeKGpb57qE1S3JwVptz8Vcx w6aNkisFr6Jxa3jG2GYdowp3Ijb5xZwMrbR2KhAYcGj346oxjnb3KA/5uypC+y3C TfNJVo/FzQhDLZ4icFbHDH/yA3HvRULQivi9QsGFdErxxQSeM5qfMiP1iaNnfCH6 qc9Uk0haQX5JO3qgBCrfHf4dVZFj8wnV -----END CERTIFICATE-----Generated at Sat May 17 15:49:18 2025 by rpki-client