$ rpki-client -vvf rpki.apnic.net/member_repository/A91C1710/18229A86826B11ECA11BA52BC4F9AE02/NPs4YMs0-seCIJnB-5kfzfY8hs0.mft File: NPs4YMs0-seCIJnB-5kfzfY8hs0.mft (raw, json) Hash identifier: x2AfqOaQd1FwG9Z9Vwie/9VqsbkAFWPLmr64QFE5afo= Subject key identifier: F0:B2:3A:ED:A1:D8:5B:07:08:C8:A1:C3:7D:63:24:87:81:69:BF:C7 Authority key identifier: 34:FB:38:60:CB:34:FA:C7:82:20:99:C1:FB:99:1F:CD:F6:3C:86:CD Certificate issuer: /CN=A91C1710/serialNumber=34FB3860CB34FAC7822099C1FB991FCDF63C86CD Certificate serial: 03F5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NPs4YMs0-seCIJnB-5kfzfY8hs0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C1710/18229A86826B11ECA11BA52BC4F9AE02/NPs4YMs0-seCIJnB-5kfzfY8hs0.mft Manifest number: 0761 Signing time: Sun 29 Jun 2025 00:04:58 +0000 Manifest this update: Sun 29 Jun 2025 00:04:58 +0000 Manifest next update: Sun 06 Jul 2025 00:04:58 +0000 Files and hashes: 1: NPs4YMs0-seCIJnB-5kfzfY8hs0.crl (hash: OIA6QfJP880B3SSvDRMjy6BJqG3cPqYVre35PWSpSPE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C1710/18229A86826B11ECA11BA52BC4F9AE02/NPs4YMs0-seCIJnB-5kfzfY8hs0.crl rsync://rpki.apnic.net/member_repository/A91C1710/18229A86826B11ECA11BA52BC4F9AE02/NPs4YMs0-seCIJnB-5kfzfY8hs0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NPs4YMs0-seCIJnB-5kfzfY8hs0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 06 Jul 2025 00:04:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1013 (0x3f5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C1710, serialNumber=34FB3860CB34FAC7822099C1FB991FCDF63C86CD Validity Not Before: Jun 29 00:04:58 2025 GMT Not After : Jul 6 00:04:58 2025 GMT Subject: CN=6860832a-884b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:2d:d6:70:c5:fd:99:a4:6f:1e:dc:86:03:f3: ef:b1:bd:28:7a:d0:e9:5e:44:ee:b9:ff:3f:67:81: b2:85:05:dd:d6:5f:71:ff:b6:f1:c9:4a:2c:23:1f: 2a:03:af:c9:ad:ed:7e:4b:86:de:a3:7a:f2:c8:de: 94:a8:c3:7d:6a:34:3c:90:43:17:62:27:3f:eb:ff: e5:54:7d:80:ed:7b:f3:67:0e:1e:63:7b:16:ac:32: ac:96:b7:3a:bb:de:9d:7f:6d:9b:d4:73:9a:3b:9a: 72:5e:a3:03:dd:90:45:39:ab:42:ce:31:a1:e2:1c: ec:91:f2:ef:a8:d3:26:0f:40:e7:fe:4b:f5:21:80: 36:e3:6f:00:d4:ad:8f:3c:42:d8:00:d1:74:d2:fd: f3:a6:1c:90:63:54:49:1f:bb:87:db:b8:ab:69:6d: 8b:35:08:8a:3c:15:99:90:13:d2:40:0b:90:d5:f0: f7:59:97:4e:9e:81:4c:31:f8:6f:5d:b4:b0:26:91: 13:22:b8:35:59:ae:37:0f:f9:df:3f:c3:ca:92:e7: ab:d3:22:ba:a6:da:96:83:94:b1:bd:c8:a5:e3:89: 8f:8f:59:a4:bc:ec:50:3e:05:c9:d9:0e:bf:44:1b: c6:88:31:b6:6c:14:aa:01:a6:a3:5f:84:72:12:b5: 1c:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:B2:3A:ED:A1:D8:5B:07:08:C8:A1:C3:7D:63:24:87:81:69:BF:C7 X509v3 Authority Key Identifier: keyid:34:FB:38:60:CB:34:FA:C7:82:20:99:C1:FB:99:1F:CD:F6:3C:86:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C1710/18229A86826B11ECA11BA52BC4F9AE02/NPs4YMs0-seCIJnB-5kfzfY8hs0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NPs4YMs0-seCIJnB-5kfzfY8hs0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C1710/18229A86826B11ECA11BA52BC4F9AE02/NPs4YMs0-seCIJnB-5kfzfY8hs0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 02:70:ca:0d:25:ca:aa:cc:05:21:ea:8e:94:35:a7:48:98:60: 6e:98:3f:4a:52:68:f5:7e:49:26:dc:9d:bb:7a:6e:4f:6c:05: af:c4:2d:48:6b:b3:e6:a8:b8:43:98:17:66:d2:38:7d:46:22: 5f:64:b3:53:00:41:25:4d:40:f6:61:84:b6:80:6c:ea:40:7b: 24:5d:08:60:9e:56:b4:c7:d4:6f:8e:06:06:f8:1c:a3:4e:26: 80:a5:cd:ad:49:14:3a:a2:37:3c:75:31:3a:15:b9:4f:53:cd: 43:18:8f:1f:95:ed:5a:74:3e:73:f5:d8:34:b7:05:ba:0b:fd: 71:89:19:06:a8:6c:98:6a:02:46:3e:6d:e3:ea:3b:4c:6a:14: 51:ab:68:5f:d7:28:c0:62:98:86:b4:3a:a3:82:a2:ab:8d:15: 59:b5:32:56:66:1f:ee:1a:21:af:39:81:29:d1:52:ab:2b:80: 82:8c:6b:99:68:a0:2f:d1:a3:3e:7e:b3:63:83:0a:b5:ba:7a: b5:dd:e3:7f:96:0c:a1:e0:94:51:04:e7:e2:86:86:19:ef:91: f3:51:3c:10:4a:33:ac:4b:e9:b7:6f:e5:63:22:61:8b:f5:ed: 37:2e:2d:ad:ea:f1:ba:1b:2f:b9:4a:5c:1d:d1:13:e3:39:46: 8b:2e:59:0e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA/UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzE3MTAxMTAvBgNVBAUTKDM0RkIzODYwQ0IzNEZBQzc4MjIwOTlDMUZCOTkxRkNE RjYzQzg2Q0QwHhcNMjUwNjI5MDAwNDU4WhcNMjUwNzA2MDAwNDU4WjAYMRYwFAYD VQQDEw02ODYwODMyYS04ODRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqy3WcMX9maRvHtyGA/Pvsb0oetDpXkTuuf8/Z4GyhQXd1l9x/7bxyUosIx8q A6/Jre1+S4beo3ryyN6UqMN9ajQ8kEMXYic/6//lVH2A7XvzZw4eY3sWrDKslrc6 u96df22b1HOaO5pyXqMD3ZBFOatCzjGh4hzskfLvqNMmD0Dn/kv1IYA2428A1K2P PELYANF00v3zphyQY1RJH7uH27iraW2LNQiKPBWZkBPSQAuQ1fD3WZdOnoFMMfhv XbSwJpETIrg1Wa43D/nfP8PKkuer0yK6ptqWg5Sxvcil44mPj1mkvOxQPgXJ2Q6/ RBvGiDG2bBSqAaajX4RyErUclwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPCyOu2h 2FsHCMihw31jJIeBab/HMB8GA1UdIwQYMBaAFDT7OGDLNPrHgiCZwfuZH832PIbN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMTcxMC8xODIyOUE4Njgy NkIxMUVDQTExQkE1MkJDNEY5QUUwMi9OUHM0WU1zMC1zZUNJSm5CLTVrZnpmWTho czAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05QczRZTXMwLXNlQ0lKbkItNWtmemZZOGhzMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MTcxMC8xODIyOUE4NjgyNkIxMUVDQTExQkE1MkJDNEY5QUUwMi9OUHM0WU1zMC1z ZUNJSm5CLTVrZnpmWThoczAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQACcMoNJcqqzAUh6o6UNadImGBumD9KUmj1fkkm3J27em5PbAWvxC1I a7PmqLhDmBdm0jh9RiJfZLNTAEElTUD2YYS2gGzqQHskXQhgnla0x9RvjgYG+Byj TiaApc2tSRQ6ojc8dTE6FblPU81DGI8fle1adD5z9dg0twW6C/1xiRkGqGyYagJG Pm3j6jtMahRRq2hf1yjAYpiGtDqjgqKrjRVZtTJWZh/uGiGvOYEp0VKrK4CCjGuZ aKAv0aM+frNjgwq1unq13eN/lgyh4JRRBOfihoYZ75HzUTwQSjOsS+m3b+VjImGL 9e03Li2t6vG6Gy+5Slwd0RPjOUaLLlkO -----END CERTIFICATE-----Generated at Sun Jun 29 13:48:22 2025 by rpki-client