$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4B39/FEF549E8AF1611EE8C48A74DC4F9AE02/nMiKhtCzfs7o1XZX75l4lTJoDN8.mft File: nMiKhtCzfs7o1XZX75l4lTJoDN8.mft (raw, json) Hash identifier: q5CSEqTZ+srp7yKL38PQlH27O7sVId5nmBayoa0Mv6k= Subject key identifier: 04:74:A1:D4:67:E1:2D:F4:F8:F0:AB:20:77:01:7E:9E:23:25:ED:79 Authority key identifier: 9C:C8:8A:86:D0:B3:7E:CE:E8:D5:76:57:EF:99:78:95:32:68:0C:DF Certificate issuer: /CN=A91A4B39/serialNumber=9CC88A86D0B37ECEE8D57657EF99789532680CDF Certificate serial: 0120 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nMiKhtCzfs7o1XZX75l4lTJoDN8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A4B39/FEF549E8AF1611EE8C48A74DC4F9AE02/nMiKhtCzfs7o1XZX75l4lTJoDN8.mft Manifest number: 011C Signing time: Sun 29 Jun 2025 03:56:58 +0000 Manifest this update: Sun 29 Jun 2025 03:56:58 +0000 Manifest next update: Sun 06 Jul 2025 03:56:58 +0000 Files and hashes: 1: nMiKhtCzfs7o1XZX75l4lTJoDN8.crl (hash: HJ1TksSNIUl78em8cU2F3H7VV/fGBE4zjX7mx6A6kNI=) 2: AA778F4CAF8A11EEB167DB64C4F9AE02.roa (hash: da2ZawdG5alxBTyeAyi7NwDwyDeUsxgI6h/wI95o9Ho=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A4B39/FEF549E8AF1611EE8C48A74DC4F9AE02/nMiKhtCzfs7o1XZX75l4lTJoDN8.crl rsync://rpki.apnic.net/member_repository/A91A4B39/FEF549E8AF1611EE8C48A74DC4F9AE02/nMiKhtCzfs7o1XZX75l4lTJoDN8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nMiKhtCzfs7o1XZX75l4lTJoDN8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 06 Jul 2025 03:56:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 288 (0x120) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A4B39, serialNumber=9CC88A86D0B37ECEE8D57657EF99789532680CDF Validity Not Before: Jun 29 03:56:58 2025 GMT Not After : Jul 6 03:56:58 2025 GMT Subject: CN=6860b98a-159f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:47:ba:6c:37:0a:dc:74:c1:c3:fd:d9:fe:30: bf:4c:67:6e:9e:51:e9:3e:7d:7a:26:c2:bc:67:75: 9f:cd:62:82:19:b8:1c:6d:0e:c9:74:95:d7:a8:ac: 8b:d2:df:b3:88:d3:e2:3f:75:2c:ad:6c:59:de:97: 7d:44:a6:3a:7d:15:10:fc:56:3e:75:03:9b:fd:8d: 05:ef:24:de:de:c3:e9:3f:66:c7:4b:d4:03:8c:4f: 7b:9f:5e:d3:90:d1:e3:7e:ae:c5:f5:af:8d:02:06: b6:f6:c0:4d:37:35:cf:67:e5:2c:1e:ed:bd:29:e7: f2:8c:c7:eb:ff:e9:24:5b:18:45:69:c8:22:28:b9: 20:b4:4c:89:47:51:26:e5:50:68:af:43:f6:93:de: 0c:fc:26:84:9f:76:bb:07:38:f4:a0:68:fa:91:02: d4:b0:d4:6c:82:86:fa:df:5c:40:40:f5:ba:1a:fc: 44:2c:f7:ca:bf:c6:f7:0b:83:f0:62:27:63:76:4b: 8f:a7:54:6e:2d:1b:4b:ad:f7:91:13:d2:f4:82:76: 3e:c5:af:2c:0a:91:73:2d:75:45:c6:be:e9:22:b5: 5e:4c:3f:76:15:9a:55:79:eb:02:3f:1b:44:c1:25: 62:2b:ed:7f:86:7d:ff:7b:ac:2e:a6:02:35:5f:d6: ed:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:74:A1:D4:67:E1:2D:F4:F8:F0:AB:20:77:01:7E:9E:23:25:ED:79 X509v3 Authority Key Identifier: keyid:9C:C8:8A:86:D0:B3:7E:CE:E8:D5:76:57:EF:99:78:95:32:68:0C:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A4B39/FEF549E8AF1611EE8C48A74DC4F9AE02/nMiKhtCzfs7o1XZX75l4lTJoDN8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nMiKhtCzfs7o1XZX75l4lTJoDN8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4B39/FEF549E8AF1611EE8C48A74DC4F9AE02/nMiKhtCzfs7o1XZX75l4lTJoDN8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b7:36:d1:0c:2d:6f:ce:d3:86:3b:3f:0a:2f:b7:52:54:16:3e: 2c:c2:74:5c:b8:03:e0:80:1f:ca:40:50:6a:d7:df:ca:e2:93: 08:22:9b:30:16:1e:08:9b:ff:7d:14:81:65:18:93:f5:b2:86: c1:77:e4:0d:fc:a9:ca:15:f8:fa:e0:a7:59:50:22:17:61:10: a6:09:e6:c6:5a:a2:ff:92:6d:24:75:4f:24:85:21:f2:bb:b8: 41:05:3f:97:af:a9:ab:ea:8f:28:a3:64:ac:a6:3a:12:3a:61: a7:b0:d6:78:e0:bd:af:a4:f8:07:4f:90:e5:17:ae:52:bb:42: 9b:a8:10:ee:45:af:60:ab:8b:04:9e:12:46:76:01:60:02:c8: 5b:0b:e7:52:36:e3:92:ec:06:42:71:16:24:c2:b8:c4:ff:ef: 61:ed:05:85:1a:18:a4:e1:54:54:c0:dc:07:26:28:01:fc:32: 5f:78:96:28:f4:66:0d:9b:4e:01:9e:8c:23:a2:00:bd:cd:da: 1b:a0:7f:e5:7a:77:5e:b7:ba:7a:b6:a9:fb:3c:57:c6:58:84: fb:82:4c:ef:69:3b:c9:30:5a:27:18:48:d7:64:1a:29:57:d4: cb:7f:83:d3:7a:4d:c1:51:88:94:38:22:65:a3:4a:59:0a:e0: 46:90:b7:36 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTRCMzkxMTAvBgNVBAUTKDlDQzg4QTg2RDBCMzdFQ0VFOEQ1NzY1N0VGOTk3ODk1 MzI2ODBDREYwHhcNMjUwNjI5MDM1NjU4WhcNMjUwNzA2MDM1NjU4WjAYMRYwFAYD VQQDEw02ODYwYjk4YS0xNTlmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAkke6bDcK3HTBw/3Z/jC/TGdunlHpPn16JsK8Z3WfzWKCGbgcbQ7JdJXXqKyL 0t+ziNPiP3UsrWxZ3pd9RKY6fRUQ/FY+dQOb/Y0F7yTe3sPpP2bHS9QDjE97n17T kNHjfq7F9a+NAga29sBNNzXPZ+UsHu29KefyjMfr/+kkWxhFacgiKLkgtEyJR1Em 5VBor0P2k94M/CaEn3a7Bzj0oGj6kQLUsNRsgob631xAQPW6GvxELPfKv8b3C4Pw YidjdkuPp1RuLRtLrfeRE9L0gnY+xa8sCpFzLXVFxr7pIrVeTD92FZpVeesCPxtE wSViK+1/hn3/e6wupgI1X9btIwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAR0odRn 4S30+PCrIHcBfp4jJe15MB8GA1UdIwQYMBaAFJzIiobQs37O6NV2V++ZeJUyaAzf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNEIzOS9GRUY1NDlFOEFG MTYxMUVFOEM0OEE3NERDNEY5QUUwMi9uTWlLaHRDemZzN28xWFpYNzVsNGxUSm9E TjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25NaUtodEN6ZnM3bzFYWlg3NWw0bFRKb0ROOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NEIzOS9GRUY1NDlFOEFGMTYxMUVFOEM0OEE3NERDNEY5QUUwMi9uTWlLaHRDemZz N28xWFpYNzVsNGxUSm9ETjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC3NtEMLW/O04Y7Pwovt1JUFj4swnRcuAPggB/KQFBq19/K4pMIIpsw Fh4Im/99FIFlGJP1sobBd+QN/KnKFfj64KdZUCIXYRCmCebGWqL/km0kdU8khSHy u7hBBT+Xr6mr6o8oo2SspjoSOmGnsNZ44L2vpPgHT5DlF65Su0KbqBDuRa9gq4sE nhJGdgFgAshbC+dSNuOS7AZCcRYkwrjE/+9h7QWFGhik4VRUwNwHJigB/DJfeJYo 9GYNm04BnowjogC9zdoboH/lendet7p6tqn7PFfGWIT7gkzvaTvJMFonGEjXZBop V9TLf4PTek3BUYiUOCJlo0pZCuBGkLc2 -----END CERTIFICATE-----Generated at Mon Jun 30 19:36:46 2025 by rpki-client