$ rpki-client -vvf rpki.apnic.net/member_repository/A91810E3/339314C8717D11EE89EF6236C4F9AE02/nberk64z9kYWgi3wP_2Bd2jx6Y8.mft File: nberk64z9kYWgi3wP_2Bd2jx6Y8.mft (raw, json) Hash identifier: NrzGU1qz0zh5+fl09RBGq/2CtMwgS0Uhtz9P5V6F8/k= Subject key identifier: EC:12:D6:E4:1C:5B:54:08:F5:D9:FA:40:81:01:2B:61:31:E7:D7:B1 Authority key identifier: 9D:B7:AB:93:AE:33:F6:46:16:82:2D:F0:3F:FD:81:77:68:F1:E9:8F Certificate issuer: /CN=A91810E3/serialNumber=9DB7AB93AE33F64616822DF03FFD817768F1E98F Certificate serial: 0149 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nberk64z9kYWgi3wP_2Bd2jx6Y8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91810E3/339314C8717D11EE89EF6236C4F9AE02/nberk64z9kYWgi3wP_2Bd2jx6Y8.mft Manifest number: 0142 Signing time: Thu 03 Jul 2025 04:29:49 +0000 Manifest this update: Thu 03 Jul 2025 04:29:49 +0000 Manifest next update: Thu 10 Jul 2025 04:29:49 +0000 Files and hashes: 1: nberk64z9kYWgi3wP_2Bd2jx6Y8.crl (hash: imC2I9IoqWAujqOWtRGmltmDt2Wfy/YIARFmzdAvM6c=) 2: A56F3A8A718811EEADDA430AC4F9AE02.roa (hash: q1gVEbmNzPAYit/PZzlFgDk+Tc1AUGMImEJ9QqP60MQ=) 3: 497917BA719B11EEA5D8F416C4F9AE02.roa (hash: RXrmTRENl+7Zg6y5wMLjJWSZiSVWcqVyL1CzU9Mm2gA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91810E3/339314C8717D11EE89EF6236C4F9AE02/nberk64z9kYWgi3wP_2Bd2jx6Y8.crl rsync://rpki.apnic.net/member_repository/A91810E3/339314C8717D11EE89EF6236C4F9AE02/nberk64z9kYWgi3wP_2Bd2jx6Y8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nberk64z9kYWgi3wP_2Bd2jx6Y8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 329 (0x149) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91810E3, serialNumber=9DB7AB93AE33F64616822DF03FFD817768F1E98F Validity Not Before: Jul 3 04:29:49 2025 GMT Not After : Jul 10 04:29:49 2025 GMT Subject: CN=6866073d-3370 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:89:8f:00:47:07:2c:a9:c4:68:de:3b:95:70: 1c:36:76:77:2a:75:de:e1:99:22:13:e1:8b:2d:05: e4:03:b7:2c:b0:20:dc:69:74:00:b7:f8:c9:cb:33: b1:ee:8a:d9:83:12:c2:37:90:af:98:bc:6d:27:c0: a5:c6:91:ab:48:92:c0:0f:7c:20:6f:dc:d3:84:54: f3:e6:81:2c:80:40:e6:a0:6c:97:e3:1f:52:2d:ad: ee:8a:e0:3c:52:a4:d8:b0:18:ad:a6:5b:b4:f3:3c: be:02:9a:8c:d5:43:3e:71:a5:eb:ff:24:c8:2b:76: d6:f2:9c:6a:e0:96:97:cf:b3:d1:dc:c4:6a:63:05: 8f:67:b9:1a:ce:93:38:2f:92:ed:31:2f:a7:4f:a3: ed:bd:ae:4b:f3:88:d6:cd:bd:a4:56:82:98:9a:8f: 8f:ff:fe:3c:21:24:3a:c4:0e:1e:58:bc:69:d5:42: 20:16:7c:37:83:4a:e7:d2:c2:ba:5e:b8:04:fc:e1: 7a:43:46:d9:26:1d:33:b2:5f:60:6b:19:bc:ee:af: 97:e7:73:fe:a4:ec:25:94:31:86:fc:b5:d2:67:66: 65:2e:f4:aa:2c:33:6b:9f:8a:dd:10:97:c3:26:f3: bb:0c:17:08:25:ad:26:26:47:49:bd:0d:96:c4:15: 45:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:12:D6:E4:1C:5B:54:08:F5:D9:FA:40:81:01:2B:61:31:E7:D7:B1 X509v3 Authority Key Identifier: keyid:9D:B7:AB:93:AE:33:F6:46:16:82:2D:F0:3F:FD:81:77:68:F1:E9:8F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91810E3/339314C8717D11EE89EF6236C4F9AE02/nberk64z9kYWgi3wP_2Bd2jx6Y8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nberk64z9kYWgi3wP_2Bd2jx6Y8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91810E3/339314C8717D11EE89EF6236C4F9AE02/nberk64z9kYWgi3wP_2Bd2jx6Y8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ac:2d:44:56:f0:f5:54:7c:8c:e3:7c:b1:b6:ba:bc:5e:48:4b: 0a:f3:b5:67:a9:9a:d4:1c:3b:81:27:0a:c7:58:3c:c4:0f:55: 0d:10:27:96:3f:cf:96:5c:1d:bf:13:8e:e7:c6:84:e2:6b:cc: b0:e7:4f:59:c2:81:e3:cb:cb:0f:bc:72:20:84:fc:35:e1:40: e6:30:e4:80:4a:05:3c:89:f9:23:01:6b:6c:9f:36:d3:28:1e: e7:f2:d7:21:0b:5c:a3:a5:db:9d:ab:34:b4:db:4f:75:f5:68: 7a:9c:f6:c2:57:48:73:de:eb:dc:28:ee:05:4c:ec:6b:df:6f: f3:c2:56:2a:6c:f7:cd:1f:20:c2:db:53:3a:fa:2c:d5:dd:1c: c8:cd:c3:4f:8d:cb:07:3e:ef:29:b1:a9:9a:ed:a1:ea:5e:0f: e1:32:16:3b:cb:8e:22:cd:25:92:7f:e8:5d:6f:fa:5d:64:8b: 8a:a2:af:28:89:80:e5:73:1a:2c:69:76:fa:ee:26:33:8d:b4: c1:5c:4e:1a:1e:5d:2f:64:10:5e:98:ef:88:11:8a:18:f8:20: 7c:98:00:7b:4d:c1:8a:22:94:92:03:21:e1:89:fa:65:2e:db: 92:c6:f6:d8:17:cc:04:91:b5:e3:6f:86:86:c1:d1:eb:98:2f: 0e:35:f3:66 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAUkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODEwRTMxMTAvBgNVBAUTKDlEQjdBQjkzQUUzM0Y2NDYxNjgyMkRGMDNGRkQ4MTc3 NjhGMUU5OEYwHhcNMjUwNzAzMDQyOTQ5WhcNMjUwNzEwMDQyOTQ5WjAYMRYwFAYD VQQDEw02ODY2MDczZC0zMzcwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3YmPAEcHLKnEaN47lXAcNnZ3KnXe4ZkiE+GLLQXkA7cssCDcaXQAt/jJyzOx 7orZgxLCN5CvmLxtJ8ClxpGrSJLAD3wgb9zThFTz5oEsgEDmoGyX4x9SLa3uiuA8 UqTYsBitplu08zy+ApqM1UM+caXr/yTIK3bW8pxq4JaXz7PR3MRqYwWPZ7kazpM4 L5LtMS+nT6Ptva5L84jWzb2kVoKYmo+P//48ISQ6xA4eWLxp1UIgFnw3g0rn0sK6 XrgE/OF6Q0bZJh0zsl9gaxm87q+X53P+pOwllDGG/LXSZ2ZlLvSqLDNrn4rdEJfD JvO7DBcIJa0mJkdJvQ2WxBVFUwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOwS1uQc W1QI9dn6QIEBK2Ex59exMB8GA1UdIwQYMBaAFJ23q5OuM/ZGFoIt8D/9gXdo8emP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MTBFMy8zMzkzMTRDODcx N0QxMUVFODlFRjYyMzZDNEY5QUUwMi9uYmVyazY0ejlrWVdnaTN3UF8yQmQyang2 WTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25iZXJrNjR6OWtZV2dpM3dQXzJCZDJqeDZZOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MTBFMy8zMzkzMTRDODcxN0QxMUVFODlFRjYyMzZDNEY5QUUwMi9uYmVyazY0ejlr WVdnaTN3UF8yQmQyang2WTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCsLURW8PVUfIzjfLG2urxeSEsK87VnqZrUHDuBJwrHWDzED1UNECeW P8+WXB2/E47nxoTia8yw509ZwoHjy8sPvHIghPw14UDmMOSASgU8ifkjAWtsnzbT KB7n8tchC1yjpdudqzS020919Wh6nPbCV0hz3uvcKO4FTOxr32/zwlYqbPfNHyDC 21M6+izV3RzIzcNPjcsHPu8psama7aHqXg/hMhY7y44izSWSf+hdb/pdZIuKoq8o iYDlcxosaXb67iYzjbTBXE4aHl0vZBBemO+IEYoY+CB8mAB7TcGKIpSSAyHhifpl LtuSxvbYF8wEkbXjb4aGwdHrmC8ONfNm -----END CERTIFICATE-----Generated at Fri Jul 4 11:55:01 2025 by rpki-client