$ rpki-client -vvf rpki.apnic.net/member_repository/A91B2472/E62B735A481911EFB8BE4534C4F9AE02/nlE6zE17kAFKhn-1KviSKeALpKw.mft File: nlE6zE17kAFKhn-1KviSKeALpKw.mft (raw, json) Hash identifier: VfREpH3tvd6bF5DvN2YGSFoBT+vp4Oj27vLOFmz8vu4= Subject key identifier: C1:03:BD:F3:01:1B:B7:ED:65:14:F9:68:A9:FA:82:C2:CB:25:82:AD Authority key identifier: 9E:51:3A:CC:4D:7B:90:01:4A:86:7F:B5:2A:F8:92:29:E0:0B:A4:AC Certificate issuer: /CN=A91B2472/serialNumber=9E513ACC4D7B90014A867FB52AF89229E00BA4AC Certificate serial: B5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nlE6zE17kAFKhn-1KviSKeALpKw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B2472/E62B735A481911EFB8BE4534C4F9AE02/nlE6zE17kAFKhn-1KviSKeALpKw.mft Manifest number: B2 Signing time: Tue 01 Jul 2025 06:41:54 +0000 Manifest this update: Tue 01 Jul 2025 06:41:53 +0000 Manifest next update: Tue 08 Jul 2025 06:41:53 +0000 Files and hashes: 1: nlE6zE17kAFKhn-1KviSKeALpKw.crl (hash: qOFe5R+Ec09u9iQzx8xovA7kOGWgG/3hKNBsmcpjFAY=) 2: 1B4BDA5C48B011EF9D34415EC4F9AE02.roa (hash: /fW0UzdpOpiVi/4bzpgP5X5TzlzFOgXdGZfbyGjzbdE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B2472/E62B735A481911EFB8BE4534C4F9AE02/nlE6zE17kAFKhn-1KviSKeALpKw.crl rsync://rpki.apnic.net/member_repository/A91B2472/E62B735A481911EFB8BE4534C4F9AE02/nlE6zE17kAFKhn-1KviSKeALpKw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nlE6zE17kAFKhn-1KviSKeALpKw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 06:41:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 181 (0xb5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B2472, serialNumber=9E513ACC4D7B90014A867FB52AF89229E00BA4AC Validity Not Before: Jul 1 06:41:53 2025 GMT Not After : Jul 8 06:41:53 2025 GMT Subject: CN=68638332-3554 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:21:5c:b1:79:96:04:87:f7:7a:3d:90:9d:7d: 74:7e:a9:f5:77:24:de:c1:c3:ca:85:ca:d1:cd:7b: 29:7b:94:28:9c:e5:bd:e3:87:34:34:77:6c:7a:93: 89:9b:e3:42:f8:b7:6b:a8:fd:61:9c:1e:c3:ad:e8: ba:05:7e:c5:87:a4:72:c6:ae:e2:dd:70:f3:af:e6: 71:2f:7c:9b:d5:f8:f9:47:8a:eb:97:7e:32:67:0a: 29:be:cd:b5:eb:86:31:f6:f9:6e:6d:47:f1:2c:7e: bc:1c:be:1e:51:df:11:d9:db:90:d5:2a:11:29:12: 88:d3:96:40:51:51:a6:fd:fb:6f:e6:ae:b5:f7:fa: c4:4a:95:7f:89:00:41:9d:92:a7:df:c1:ba:38:43: 49:4d:2d:ff:da:44:41:d8:1a:02:32:83:76:84:99: 65:37:f5:f5:84:61:d7:bf:1f:a3:4c:58:01:2d:3c: 6d:32:a9:d8:53:83:87:7c:ae:7d:a0:18:08:3c:16: 4d:7d:23:81:88:f1:a4:82:39:93:61:2e:2d:49:b5: 6e:0b:68:d6:ae:23:5c:54:3b:b3:f6:46:b6:91:e7: ac:51:3b:c6:0b:4c:53:20:d7:df:4a:e7:f0:c0:8a: d7:f9:80:aa:73:03:93:5e:8f:a9:90:2e:80:eb:e0: 32:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:03:BD:F3:01:1B:B7:ED:65:14:F9:68:A9:FA:82:C2:CB:25:82:AD X509v3 Authority Key Identifier: keyid:9E:51:3A:CC:4D:7B:90:01:4A:86:7F:B5:2A:F8:92:29:E0:0B:A4:AC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B2472/E62B735A481911EFB8BE4534C4F9AE02/nlE6zE17kAFKhn-1KviSKeALpKw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nlE6zE17kAFKhn-1KviSKeALpKw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B2472/E62B735A481911EFB8BE4534C4F9AE02/nlE6zE17kAFKhn-1KviSKeALpKw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 32:3e:62:6f:03:c4:7f:3f:3d:6c:0c:49:92:e1:b2:36:23:22: 6f:f9:46:c4:fb:dc:95:0a:22:7b:a1:fa:11:6c:9c:55:74:5c: f1:19:29:02:c4:31:f3:10:f2:f7:9c:c3:c3:36:6d:fc:ec:57: 04:bd:37:3e:b6:3f:e5:f5:cc:c4:4d:20:86:8d:b2:04:86:36: 43:8e:ed:ba:78:17:67:c3:70:64:d1:e5:22:1b:98:36:58:96: b5:3e:ea:87:28:49:8d:83:f2:13:02:b0:30:7f:3b:f5:ab:be: a7:94:b7:1f:0c:0c:2a:6c:90:ee:3f:b1:e6:e9:0f:aa:cc:a4: 1a:78:4c:e8:d2:3b:22:6b:08:bb:31:21:2c:c5:25:1f:99:df: 89:55:dc:4f:21:af:8b:7b:f7:cd:7d:68:e7:61:6d:97:18:b4: e6:a7:56:74:b1:60:b2:9e:44:10:94:d5:66:45:5e:82:dc:44: be:23:a7:bf:09:7a:ec:71:3c:45:fb:de:73:0e:9f:26:77:42: d4:c9:11:94:85:45:82:3a:12:ea:ab:f8:f2:da:5e:5e:d7:34: 99:ab:5f:f8:74:d9:f1:e6:5b:ed:1f:a5:00:b6:6b:d7:da:75: 43:b0:be:ce:79:0f:7b:55:ae:68:86:21:3a:4e:f6:f5:01:fe: 52:5f:9b:72 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjI0NzIxMTAvBgNVBAUTKDlFNTEzQUNDNEQ3QjkwMDE0QTg2N0ZCNTJBRjg5MjI5 RTAwQkE0QUMwHhcNMjUwNzAxMDY0MTUzWhcNMjUwNzA4MDY0MTUzWjAYMRYwFAYD VQQDEw02ODYzODMzMi0zNTU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1yFcsXmWBIf3ej2QnX10fqn1dyTewcPKhcrRzXspe5QonOW944c0NHdsepOJ m+NC+LdrqP1hnB7Drei6BX7Fh6Ryxq7i3XDzr+ZxL3yb1fj5R4rrl34yZwopvs21 64Yx9vlubUfxLH68HL4eUd8R2duQ1SoRKRKI05ZAUVGm/ftv5q619/rESpV/iQBB nZKn38G6OENJTS3/2kRB2BoCMoN2hJllN/X1hGHXvx+jTFgBLTxtMqnYU4OHfK59 oBgIPBZNfSOBiPGkgjmTYS4tSbVuC2jWriNcVDuz9ka2keesUTvGC0xTINffSufw wIrX+YCqcwOTXo+pkC6A6+AyPQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMEDvfMB G7ftZRT5aKn6gsLLJYKtMB8GA1UdIwQYMBaAFJ5ROsxNe5ABSoZ/tSr4kingC6Ss MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMjQ3Mi9FNjJCNzM1QTQ4 MTkxMUVGQjhCRTQ1MzRDNEY5QUUwMi9ubEU2ekUxN2tBRktobi0xS3ZpU0tlQUxw S3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25sRTZ6RTE3a0FGS2huLTFLdmlTS2VBTHBLdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MjQ3Mi9FNjJCNzM1QTQ4MTkxMUVGQjhCRTQ1MzRDNEY5QUUwMi9ubEU2ekUxN2tB Rktobi0xS3ZpU0tlQUxwS3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAyPmJvA8R/Pz1sDEmS4bI2IyJv+UbE+9yVCiJ7ofoRbJxVdFzxGSkC xDHzEPL3nMPDNm387FcEvTc+tj/l9czETSCGjbIEhjZDju26eBdnw3Bk0eUiG5g2 WJa1PuqHKEmNg/ITArAwfzv1q76nlLcfDAwqbJDuP7Hm6Q+qzKQaeEzo0jsiawi7 MSEsxSUfmd+JVdxPIa+Le/fNfWjnYW2XGLTmp1Z0sWCynkQQlNVmRV6C3ES+I6e/ CXrscTxF+95zDp8md0LUyRGUhUWCOhLqq/jy2l5e1zSZq1/4dNnx5lvtH6UAtmvX 2nVDsL7OeQ97Va5ohiE6Tvb1Af5SX5ty -----END CERTIFICATE-----Generated at Thu Jul 3 05:42:17 2025 by rpki-client