$ rpki-client -vvf rpki.apnic.net/member_repository/A91AB85A/185C39B603CD11ECABCE697BC4F9AE02/nZwAihKi96YP7_liJmsFAqHKC6I.mft File: nZwAihKi96YP7_liJmsFAqHKC6I.mft (raw, json) Hash identifier: JjOJkqvu/4ArBdb2pFq8nIQcVJmzpND/6RzuhY3LomU= Subject key identifier: 91:D0:0F:6C:6B:03:75:BC:39:2F:C6:F3:5E:62:FB:9E:0F:31:1C:B2 Authority key identifier: 9D:9C:00:8A:12:A2:F7:A6:0F:EF:F9:62:26:6B:05:02:A1:CA:0B:A2 Certificate issuer: /CN=A91AB85A/serialNumber=9D9C008A12A2F7A60FEFF962266B0502A1CA0BA2 Certificate serial: 0530 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nZwAihKi96YP7_liJmsFAqHKC6I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AB85A/185C39B603CD11ECABCE697BC4F9AE02/nZwAihKi96YP7_liJmsFAqHKC6I.mft Manifest number: 0528 Signing time: Wed 02 Jul 2025 23:52:23 +0000 Manifest this update: Wed 02 Jul 2025 23:52:23 +0000 Manifest next update: Wed 09 Jul 2025 23:52:23 +0000 Files and hashes: 1: nZwAihKi96YP7_liJmsFAqHKC6I.crl (hash: i6opvC28nqsr/zOTL8SHxF19BvDhVA+CziSswMNrw00=) 2: 46A2104603CF11ECA480B07CC4F9AE02.roa (hash: X8TS/dUIvy3XOI0UnJtA1d7RV1bb4SxZ7U2o6VOp3BA=) 3: 460AA4AE03CF11ECA480B07CC4F9AE02.roa (hash: Gk9zFIrI4hfeJ0HReT17DaXTFk6xr6upAecBQ6JDnHs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AB85A/185C39B603CD11ECABCE697BC4F9AE02/nZwAihKi96YP7_liJmsFAqHKC6I.crl rsync://rpki.apnic.net/member_repository/A91AB85A/185C39B603CD11ECABCE697BC4F9AE02/nZwAihKi96YP7_liJmsFAqHKC6I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nZwAihKi96YP7_liJmsFAqHKC6I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 23:52:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1328 (0x530) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AB85A, serialNumber=9D9C008A12A2F7A60FEFF962266B0502A1CA0BA2 Validity Not Before: Jul 2 23:52:23 2025 GMT Not After : Jul 9 23:52:23 2025 GMT Subject: CN=6865c637-2ca0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:10:41:1c:21:b6:a8:de:fc:d9:46:53:48:a7: eb:44:cf:fa:04:4f:12:22:a6:87:f3:fc:85:fd:e4: cf:8d:ea:da:a3:02:d9:47:b6:1a:ca:90:b4:0a:d1: 6a:a9:ca:f6:72:08:0e:0d:69:56:66:9c:1a:8a:ab: 42:29:38:88:af:64:86:30:e0:59:07:45:a2:c5:fb: 68:9f:58:38:e9:ee:de:12:70:59:96:ec:ad:19:2d: de:1c:5a:15:12:6b:f7:0d:85:b6:75:b2:5a:aa:4a: 1b:cf:0b:5d:37:94:bc:01:55:d0:e4:b1:2e:4b:d6: e7:74:c2:ba:43:a7:a1:23:bf:28:c6:8a:d2:23:02: 12:ca:9e:69:5b:55:18:7f:b6:cb:00:6b:65:8b:ce: b5:38:86:1d:f7:57:5c:05:c9:a7:94:10:6e:32:bb: 17:c4:55:6c:7e:f5:5e:8a:4f:e5:e0:aa:5e:9a:b0: 71:b9:4e:b9:ac:38:b4:b7:84:84:66:cf:dd:c0:db: 02:fc:c1:1c:67:8b:0e:b6:46:21:a3:09:ee:09:37: 54:65:7b:43:98:4e:4e:da:67:2c:99:9f:06:d5:4b: c7:46:1f:f4:47:47:d0:e0:d6:2f:3a:55:9a:cd:95: a1:b5:6e:fc:e3:50:5e:9f:75:b2:93:ae:1f:53:67: 09:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:D0:0F:6C:6B:03:75:BC:39:2F:C6:F3:5E:62:FB:9E:0F:31:1C:B2 X509v3 Authority Key Identifier: keyid:9D:9C:00:8A:12:A2:F7:A6:0F:EF:F9:62:26:6B:05:02:A1:CA:0B:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AB85A/185C39B603CD11ECABCE697BC4F9AE02/nZwAihKi96YP7_liJmsFAqHKC6I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nZwAihKi96YP7_liJmsFAqHKC6I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB85A/185C39B603CD11ECABCE697BC4F9AE02/nZwAihKi96YP7_liJmsFAqHKC6I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 68:92:93:64:91:b4:75:ee:3a:49:eb:ca:92:9b:74:4c:a1:23: 9a:b1:92:88:f4:a6:78:ae:14:79:fc:31:cf:d9:9a:7d:04:28: 11:b2:72:30:2c:a0:d1:38:83:10:70:f0:aa:17:bd:54:28:c7: d7:a4:81:23:0b:b8:e1:91:f2:44:07:e3:5c:45:db:cc:13:94: cc:d3:02:7c:3e:a4:6e:33:fa:02:0c:4d:03:fe:6f:6d:dd:0c: 38:ed:1d:ee:15:ea:51:49:ca:75:1c:76:79:90:50:4b:4f:04: b1:d7:67:66:2a:00:7f:26:af:7b:53:ef:df:ee:f9:c4:c7:c5: bb:70:d3:d7:50:b6:55:0a:d0:c8:ca:fc:5c:e3:09:dc:1d:0c: 15:8b:0c:95:01:b6:c0:9e:82:c3:d4:a5:40:87:d1:c6:3c:af: 37:d6:0f:2a:e2:39:42:1d:21:6b:66:02:04:40:7a:cc:b1:d8: 49:4b:a0:ac:72:27:88:41:62:14:01:79:90:41:ac:eb:fa:e0: 61:db:c3:86:cd:98:82:a2:be:a6:d7:ae:71:36:90:74:d5:0b: 42:f4:e7:a9:f0:a4:3a:6d:a5:11:4c:e3:e8:75:3a:cc:98:96: d4:a9:80:54:13:9b:e9:63:91:74:10:aa:b3:fd:eb:ed:68:a0: 5f:0d:f2:88 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBTAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUI4NUExMTAvBgNVBAUTKDlEOUMwMDhBMTJBMkY3QTYwRkVGRjk2MjI2NkIwNTAy QTFDQTBCQTIwHhcNMjUwNzAyMjM1MjIzWhcNMjUwNzA5MjM1MjIzWjAYMRYwFAYD VQQDEw02ODY1YzYzNy0yY2EwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9RBBHCG2qN782UZTSKfrRM/6BE8SIqaH8/yF/eTPjeraowLZR7YaypC0CtFq qcr2cggODWlWZpwaiqtCKTiIr2SGMOBZB0Wixfton1g46e7eEnBZluytGS3eHFoV Emv3DYW2dbJaqkobzwtdN5S8AVXQ5LEuS9bndMK6Q6ehI78oxorSIwISyp5pW1UY f7bLAGtli861OIYd91dcBcmnlBBuMrsXxFVsfvVeik/l4KpemrBxuU65rDi0t4SE Zs/dwNsC/MEcZ4sOtkYhownuCTdUZXtDmE5O2mcsmZ8G1UvHRh/0R0fQ4NYvOlWa zZWhtW7841Ben3Wyk64fU2cJsQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJHQD2xr A3W8OS/G815i+54PMRyyMB8GA1UdIwQYMBaAFJ2cAIoSovemD+/5YiZrBQKhygui MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQjg1QS8xODVDMzlCNjAz Q0QxMUVDQUJDRTY5N0JDNEY5QUUwMi9uWndBaWhLaTk2WVA3X2xpSm1zRkFxSEtD NkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25ad0FpaEtpOTZZUDdfbGlKbXNGQXFIS0M2SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB Qjg1QS8xODVDMzlCNjAzQ0QxMUVDQUJDRTY5N0JDNEY5QUUwMi9uWndBaWhLaTk2 WVA3X2xpSm1zRkFxSEtDNkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBokpNkkbR17jpJ68qSm3RMoSOasZKI9KZ4rhR5/DHP2Zp9BCgRsnIw LKDROIMQcPCqF71UKMfXpIEjC7jhkfJEB+NcRdvME5TM0wJ8PqRuM/oCDE0D/m9t 3Qw47R3uFepRScp1HHZ5kFBLTwSx12dmKgB/Jq97U+/f7vnEx8W7cNPXULZVCtDI yvxc4wncHQwViwyVAbbAnoLD1KVAh9HGPK831g8q4jlCHSFrZgIEQHrMsdhJS6Cs cieIQWIUAXmQQazr+uBh28OGzZiCor6m165xNpB01QtC9Oep8KQ6baURTOPodTrM mJbUqYBUE5vpY5F0EKqz/evtaKBfDfKI -----END CERTIFICATE-----Generated at Thu Jul 3 20:04:56 2025 by rpki-client