$ rpki-client -vvf rpki.apnic.net/member_repository/A91AE8D7/54666B3CF93F11EFB7EAB425C4F9AE02/nnH7cbZwDEBFpcNAwY8TDwhgqjk.mft File: nnH7cbZwDEBFpcNAwY8TDwhgqjk.mft (raw, json) Hash identifier: +mxTsGNKjtjEfdsrcGX28HsHm7H94Jif4bz/55PbQrQ= Subject key identifier: E4:94:45:79:F4:68:7D:12:31:1B:6C:E7:74:45:08:12:8B:67:C9:59 Authority key identifier: 9E:71:FB:71:B6:70:0C:40:45:A5:C3:40:C1:8F:13:0F:08:60:AA:39 Certificate issuer: /CN=A91AE8D7/serialNumber=9E71FB71B6700C4045A5C340C18F130F0860AA39 Certificate serial: 3E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nnH7cbZwDEBFpcNAwY8TDwhgqjk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AE8D7/54666B3CF93F11EFB7EAB425C4F9AE02/nnH7cbZwDEBFpcNAwY8TDwhgqjk.mft Manifest number: 3E Signing time: Thu 03 Jul 2025 07:43:16 +0000 Manifest this update: Thu 03 Jul 2025 07:43:16 +0000 Manifest next update: Thu 10 Jul 2025 07:43:16 +0000 Files and hashes: 1: nnH7cbZwDEBFpcNAwY8TDwhgqjk.crl (hash: 9+EWdqIBzLJd2c4xyTk8UR38pglfoVxAx3UELK+EaRI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AE8D7/54666B3CF93F11EFB7EAB425C4F9AE02/nnH7cbZwDEBFpcNAwY8TDwhgqjk.crl rsync://rpki.apnic.net/member_repository/A91AE8D7/54666B3CF93F11EFB7EAB425C4F9AE02/nnH7cbZwDEBFpcNAwY8TDwhgqjk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nnH7cbZwDEBFpcNAwY8TDwhgqjk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62 (0x3e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AE8D7, serialNumber=9E71FB71B6700C4045A5C340C18F130F0860AA39 Validity Not Before: Jul 3 07:43:16 2025 GMT Not After : Jul 10 07:43:16 2025 GMT Subject: CN=68663494-d5b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:3e:a5:86:07:12:41:be:61:a6:41:2c:fc:4b: a7:69:8d:d1:4e:d3:b2:fd:cc:aa:cf:b2:f2:c9:d8: 65:d7:a2:d2:dc:b1:10:68:0a:e7:e0:c0:32:43:e0: b5:72:e5:1d:ab:0a:26:88:29:eb:ac:67:98:fc:19: 47:c4:0a:a9:08:97:d7:6b:be:07:2d:e8:24:bb:f3: 2a:fa:0a:00:7b:a7:6d:de:09:31:30:b5:15:c5:29: df:c5:38:b0:df:15:b9:43:52:29:13:19:98:00:d2: c7:61:49:09:d6:e4:d7:96:60:95:93:7d:fd:63:f3: 27:30:44:68:d8:5e:7e:14:b4:c4:bf:07:73:3f:41: 7c:7f:9c:4d:b4:81:de:43:77:ef:70:6a:b2:7b:15: 48:0f:bc:71:3b:6a:57:ad:0c:76:9f:b4:c1:9f:eb: 22:b8:0a:56:16:12:9c:54:cf:f2:1f:62:a3:05:92: b6:8e:74:5a:ca:64:d3:6f:6d:a9:5b:46:aa:85:85: f9:38:c7:89:a2:18:3b:a1:07:4f:cf:a6:86:ca:ad: f2:7e:14:12:28:1b:1c:cc:ab:2d:dd:a1:94:45:90: 16:57:e5:c3:02:c7:85:83:03:c1:c1:ee:27:31:1d: d7:b7:74:84:15:23:ae:e0:81:4e:d3:4b:05:1b:1b: fe:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:94:45:79:F4:68:7D:12:31:1B:6C:E7:74:45:08:12:8B:67:C9:59 X509v3 Authority Key Identifier: keyid:9E:71:FB:71:B6:70:0C:40:45:A5:C3:40:C1:8F:13:0F:08:60:AA:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AE8D7/54666B3CF93F11EFB7EAB425C4F9AE02/nnH7cbZwDEBFpcNAwY8TDwhgqjk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nnH7cbZwDEBFpcNAwY8TDwhgqjk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AE8D7/54666B3CF93F11EFB7EAB425C4F9AE02/nnH7cbZwDEBFpcNAwY8TDwhgqjk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2d:9f:47:96:ea:1e:cd:0b:9d:46:15:99:53:a4:1b:2a:cc:39: 33:ef:df:d7:c3:11:e3:3a:80:2a:ab:c2:a8:64:da:53:ab:53: e0:5f:09:32:e6:af:75:14:7e:25:f6:76:9e:1c:97:48:45:a9: f0:97:52:17:fa:63:3f:1e:0c:20:e5:18:fb:6c:76:e4:ee:06: 06:d0:29:01:ea:16:85:df:80:6c:7e:d6:c0:35:bc:22:97:dd: 53:80:ad:8c:8d:b2:38:d2:04:8c:96:3a:d8:1a:c7:38:8a:e5: 94:8d:da:68:e8:7b:ed:63:8e:a9:86:4f:c5:93:5e:1f:3f:60: 3a:fc:19:ec:29:65:c2:d7:59:b2:c1:65:78:6c:dc:9b:f1:18: 5f:4a:f3:82:8b:64:67:a8:fc:1c:e7:9a:15:6b:31:1a:c1:da: 02:91:10:4b:b9:f5:79:32:f2:e8:5b:7a:22:72:94:c4:9f:81: f7:fc:ba:77:32:ad:a4:10:3f:66:70:85:c3:ea:cf:a4:33:23: 8d:b6:eb:1e:69:04:97:36:2e:ac:1a:2e:95:5a:f8:d8:87:11: ce:8a:a4:aa:38:17:d5:d8:c0:3a:b1:6a:1a:cb:4e:f2:6b:96: 0c:38:32:71:ba:8f:9e:cc:ff:9c:fa:02:27:f3:07:78:e4:99: a8:0c:62:52 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBPjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB RThENzExMC8GA1UEBRMoOUU3MUZCNzFCNjcwMEM0MDQ1QTVDMzQwQzE4RjEzMEYw ODYwQUEzOTAeFw0yNTA3MDMwNzQzMTZaFw0yNTA3MTAwNzQzMTZaMBgxFjAUBgNV BAMTDTY4NjYzNDk0LWQ1YjQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQChPqWGBxJBvmGmQSz8S6dpjdFO07L9zKrPsvLJ2GXXotLcsRBoCufgwDJD4LVy 5R2rCiaIKeusZ5j8GUfECqkIl9drvgct6CS78yr6CgB7p23eCTEwtRXFKd/FOLDf FblDUikTGZgA0sdhSQnW5NeWYJWTff1j8ycwRGjYXn4UtMS/B3M/QXx/nE20gd5D d+9warJ7FUgPvHE7aletDHaftMGf6yK4ClYWEpxUz/IfYqMFkraOdFrKZNNvbalb RqqFhfk4x4miGDuhB0/PpobKrfJ+FBIoGxzMqy3doZRFkBZX5cMCx4WDA8HB7icx Hde3dIQVI67ggU7TSwUbG/7nAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU5JRFefRo fRIxG2zndEUIEotnyVkwHwYDVR0jBBgwFoAUnnH7cbZwDEBFpcNAwY8TDwhgqjkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUFFOEQ3LzU0NjY2QjNDRjkz RjExRUZCN0VBQjQyNUM0RjlBRTAyL25uSDdjYlp3REVCRnBjTkF3WThURHdoZ3Fq ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvbm5IN2NiWndERUJGcGNOQXdZOFREd2hncWprLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUFF OEQ3LzU0NjY2QjNDRjkzRjExRUZCN0VBQjQyNUM0RjlBRTAyL25uSDdjYlp3REVC RnBjTkF3WThURHdoZ3Fqay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAC2fR5bqHs0LnUYVmVOkGyrMOTPv39fDEeM6gCqrwqhk2lOrU+BfCTLm r3UUfiX2dp4cl0hFqfCXUhf6Yz8eDCDlGPtsduTuBgbQKQHqFoXfgGx+1sA1vCKX 3VOArYyNsjjSBIyWOtgaxziK5ZSN2mjoe+1jjqmGT8WTXh8/YDr8GewpZcLXWbLB ZXhs3JvxGF9K84KLZGeo/BznmhVrMRrB2gKREEu59Xky8uhbeiJylMSfgff8uncy raQQP2ZwhcPqz6QzI4226x5pBJc2LqwaLpVa+NiHEc6KpKo4F9XYwDqxahrLTvJr lgw4MnG6j57M/5z6AifzB3jkmagMYlI= -----END CERTIFICATE-----Generated at Fri Jul 4 18:43:57 2025 by rpki-client