$ rpki-client -vvf rpki.apnic.net/member_repository/A91AB383/8CC2A9AADE7711EB8739EC11C4F9AE02/nCNR1FqX1x0D1rw4Wzfdm_uAz14.mft File: nCNR1FqX1x0D1rw4Wzfdm_uAz14.mft (raw, json) Hash identifier: tFqMopbE7GwLgv/15pDq1phf3vE/jPeGhlSKQ7Tz9VE= Subject key identifier: B0:E7:29:CA:1F:E1:A8:39:45:10:FE:5F:45:50:8E:23:E7:AC:B4:6E Authority key identifier: 9C:23:51:D4:5A:97:D7:1D:03:D6:BC:38:5B:37:DD:9B:FB:80:CF:5E Certificate issuer: /CN=A91AB383/serialNumber=9C2351D45A97D71D03D6BC385B37DD9BFB80CF5E Certificate serial: 05B6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nCNR1FqX1x0D1rw4Wzfdm_uAz14.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AB383/8CC2A9AADE7711EB8739EC11C4F9AE02/nCNR1FqX1x0D1rw4Wzfdm_uAz14.mft Manifest number: 059A Signing time: Sat 28 Jun 2025 22:51:34 +0000 Manifest this update: Sat 28 Jun 2025 22:51:33 +0000 Manifest next update: Sat 05 Jul 2025 22:51:33 +0000 Files and hashes: 1: nCNR1FqX1x0D1rw4Wzfdm_uAz14.crl (hash: EzZkm8rYKP5fRlh9Fasqq85+GhFpreIKsnifHt2plEw=) 2: 7AFB859484C711EF9740BE81C4F9AE02.roa (hash: 414/5RyiyMUZFN0SEFameoFpU4rRSpvpvgBCGAe+h0s=) 3: B5579BEA421911EC832A4A41C4F9AE02.roa (hash: G80CVYb1Ik+/tcRJsx2ECeYr4cToFW70btAWzXQMVLM=) 4: B69E6026355C11F0B8094E3AC4F9AE02.roa (hash: flZUyrEx/m5nugLzwpifQhh18V8aEEhO9FbVnmFKA6A=) 5: 12EDB8D284C711EFA075A16AC4F9AE02.roa (hash: 5J+X0LjgteZA7gTRmfGapcuapYL3WvWAdk4QrzcZNQo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AB383/8CC2A9AADE7711EB8739EC11C4F9AE02/nCNR1FqX1x0D1rw4Wzfdm_uAz14.crl rsync://rpki.apnic.net/member_repository/A91AB383/8CC2A9AADE7711EB8739EC11C4F9AE02/nCNR1FqX1x0D1rw4Wzfdm_uAz14.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nCNR1FqX1x0D1rw4Wzfdm_uAz14.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Jul 2025 22:51:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1462 (0x5b6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AB383, serialNumber=9C2351D45A97D71D03D6BC385B37DD9BFB80CF5E Validity Not Before: Jun 28 22:51:33 2025 GMT Not After : Jul 5 22:51:33 2025 GMT Subject: CN=686071f6-bda0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:88:13:a4:bf:d2:0a:f4:e8:97:70:e0:6e:50: 20:d9:d1:01:6b:62:e6:b8:2b:a7:38:5d:07:b7:f4: e5:9a:2d:ad:be:0b:96:e2:2c:e2:b7:68:2a:5d:bd: f4:6c:0f:99:c5:47:d8:e1:48:9d:60:3c:38:30:65: 8d:5a:16:3f:c7:94:8d:24:1b:1d:d2:37:9c:e7:a2: df:35:a8:c7:0c:c2:4e:c6:8d:fb:46:d2:36:2f:f9: 27:bf:23:35:5d:b2:48:5f:3f:cc:cf:c7:79:60:b9: 8b:2e:73:e0:63:b0:45:d5:ef:31:a9:13:2b:86:a4: f0:c8:95:cb:f5:c3:f8:7b:eb:fa:07:aa:3a:21:4f: 13:89:9c:89:67:ab:39:cd:87:e2:b9:4e:39:1e:6d: ef:d8:8f:25:37:31:2a:b0:72:5a:b1:fd:98:57:3c: 06:cd:e6:01:9d:f8:95:85:4e:73:98:e6:7b:0c:5e: 82:47:7d:a3:f7:86:cf:2f:be:a5:75:59:01:f9:9b: 39:f8:ad:4d:3d:28:b0:38:e5:f5:c1:c3:91:a7:67: fb:f7:fd:fa:0f:a9:35:c7:4f:63:8a:72:87:a9:4d: 86:15:24:8a:77:12:e9:90:3c:b1:7b:01:43:4c:10: 2c:ab:13:08:a2:c5:69:bd:dd:d1:20:0a:d4:c2:0a: 47:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:E7:29:CA:1F:E1:A8:39:45:10:FE:5F:45:50:8E:23:E7:AC:B4:6E X509v3 Authority Key Identifier: keyid:9C:23:51:D4:5A:97:D7:1D:03:D6:BC:38:5B:37:DD:9B:FB:80:CF:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AB383/8CC2A9AADE7711EB8739EC11C4F9AE02/nCNR1FqX1x0D1rw4Wzfdm_uAz14.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nCNR1FqX1x0D1rw4Wzfdm_uAz14.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB383/8CC2A9AADE7711EB8739EC11C4F9AE02/nCNR1FqX1x0D1rw4Wzfdm_uAz14.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 92:b3:35:c1:0b:c0:d1:a5:24:d0:1d:e7:7c:60:cc:50:a9:71: 70:1c:37:91:af:41:fb:81:88:f9:4c:a2:e7:60:5a:d0:ed:5a: c7:08:ba:66:9b:7c:47:6f:96:a1:5c:b5:bd:41:13:3e:f5:3e: e0:80:c7:a3:5e:f6:71:1e:14:75:d7:2e:c7:04:de:e3:e9:d1: 40:62:0d:a5:24:b6:ae:6d:d3:08:dd:00:ef:b9:52:10:22:42: d9:c6:16:48:6b:2d:18:0e:dc:60:67:d7:c4:51:4f:69:33:bf: c6:a2:9e:e6:a8:c0:95:0e:f1:9e:29:88:9c:33:6e:46:81:1b: 66:d7:7d:16:c5:a4:6e:08:61:7f:38:9a:bb:0c:79:73:fa:d4: 7b:dc:7c:e3:ea:5a:4a:26:80:6f:4b:04:47:81:04:99:f4:d9: 72:eb:6a:05:9e:04:7e:54:ee:39:b1:49:9e:f0:68:e1:03:5e: e8:f6:79:59:cb:88:62:2a:92:ed:32:e5:91:91:3d:0b:6c:e8: 23:a7:01:dc:69:e3:3f:4b:c4:cd:bc:aa:02:36:b0:ef:fc:38: 90:45:70:fe:5f:17:71:af:41:ae:ea:a9:83:5a:d4:44:8b:4f: 4c:45:6b:ac:43:ae:46:2f:6d:0b:74:83:5f:a7:97:e2:1c:12: 5d:9a:bd:18 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBbYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUIzODMxMTAvBgNVBAUTKDlDMjM1MUQ0NUE5N0Q3MUQwM0Q2QkMzODVCMzdERDlC RkI4MENGNUUwHhcNMjUwNjI4MjI1MTMzWhcNMjUwNzA1MjI1MTMzWjAYMRYwFAYD VQQDEw02ODYwNzFmNi1iZGEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu4gTpL/SCvTol3DgblAg2dEBa2LmuCunOF0Ht/Tlmi2tvguW4izit2gqXb30 bA+ZxUfY4UidYDw4MGWNWhY/x5SNJBsd0jec56LfNajHDMJOxo37RtI2L/knvyM1 XbJIXz/Mz8d5YLmLLnPgY7BF1e8xqRMrhqTwyJXL9cP4e+v6B6o6IU8TiZyJZ6s5 zYfiuU45Hm3v2I8lNzEqsHJasf2YVzwGzeYBnfiVhU5zmOZ7DF6CR32j94bPL76l dVkB+Zs5+K1NPSiwOOX1wcORp2f79/36D6k1x09jinKHqU2GFSSKdxLpkDyxewFD TBAsqxMIosVpvd3RIArUwgpHWQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLDnKcof 4ag5RRD+X0VQjiPnrLRuMB8GA1UdIwQYMBaAFJwjUdRal9cdA9a8OFs33Zv7gM9e MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQjM4My84Q0MyQTlBQURF NzcxMUVCODczOUVDMTFDNEY5QUUwMi9uQ05SMUZxWDF4MEQxcnc0V3pmZG1fdUF6 MTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25DTlIxRnFYMXgwRDFydzRXemZkbV91QXoxNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QjM4My84Q0MyQTlBQURFNzcxMUVCODczOUVDMTFDNEY5QUUwMi9uQ05SMUZxWDF4 MEQxcnc0V3pmZG1fdUF6MTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCSszXBC8DRpSTQHed8YMxQqXFwHDeRr0H7gYj5TKLnYFrQ7VrHCLpm m3xHb5ahXLW9QRM+9T7ggMejXvZxHhR11y7HBN7j6dFAYg2lJLaubdMI3QDvuVIQ IkLZxhZIay0YDtxgZ9fEUU9pM7/Gop7mqMCVDvGeKYicM25GgRtm130WxaRuCGF/ OJq7DHlz+tR73Hzj6lpKJoBvSwRHgQSZ9Nly62oFngR+VO45sUme8GjhA17o9nlZ y4hiKpLtMuWRkT0LbOgjpwHcaeM/S8TNvKoCNrDv/DiQRXD+Xxdxr0Gu6qmDWtRE i09MRWusQ65GL20LdINfp5fiHBJdmr0Y -----END CERTIFICATE-----Generated at Mon Jun 30 14:12:46 2025 by rpki-client