$ rpki-client -vvf rpki.apnic.net/member_repository/A91C2913/8B43B736FE4911EFA735AD6FC4F9AE02/MN_NyJLnPuJUZCgnQuKcVn6jzgM.mft File: MN_NyJLnPuJUZCgnQuKcVn6jzgM.mft (raw, json) Hash identifier: MmpAqAbBmnri18CD0JVJXKqbc5AVtg30C5NlQuhLVWc= Subject key identifier: 63:91:50:95:85:1A:98:89:9A:8A:92:FE:DD:6F:9B:BB:D3:58:8F:EC Authority key identifier: 30:DF:CD:C8:92:E7:3E:E2:54:64:28:27:42:E2:9C:56:7E:A3:CE:03 Certificate issuer: /CN=A91C2913/serialNumber=30DFCDC892E73EE25464282742E29C567EA3CE03 Certificate serial: 3E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MN_NyJLnPuJUZCgnQuKcVn6jzgM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C2913/8B43B736FE4911EFA735AD6FC4F9AE02/MN_NyJLnPuJUZCgnQuKcVn6jzgM.mft Manifest number: 3C Signing time: Tue 01 Jul 2025 08:19:52 +0000 Manifest this update: Tue 01 Jul 2025 08:19:51 +0000 Manifest next update: Tue 08 Jul 2025 08:19:51 +0000 Files and hashes: 1: MN_NyJLnPuJUZCgnQuKcVn6jzgM.crl (hash: FAIhu/HXe4jozM+WbtqigkSEqAjf04yelomW9ujNeV8=) 2: 7273BDA4FE4A11EF8A0EDD73C4F9AE02.roa (hash: aKDX+epsv+87CublFWvfDFPYgSLhuAtHebX+rfx7L+w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C2913/8B43B736FE4911EFA735AD6FC4F9AE02/MN_NyJLnPuJUZCgnQuKcVn6jzgM.crl rsync://rpki.apnic.net/member_repository/A91C2913/8B43B736FE4911EFA735AD6FC4F9AE02/MN_NyJLnPuJUZCgnQuKcVn6jzgM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MN_NyJLnPuJUZCgnQuKcVn6jzgM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 08:19:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62 (0x3e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C2913, serialNumber=30DFCDC892E73EE25464282742E29C567EA3CE03 Validity Not Before: Jul 1 08:19:51 2025 GMT Not After : Jul 8 08:19:51 2025 GMT Subject: CN=68639a27-c3c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:37:4d:16:21:e2:02:75:51:c3:d7:4e:94:df: 01:14:9b:6c:99:fd:29:f4:e0:cb:c0:07:7d:6b:70: 55:61:49:0f:d5:b8:3d:22:ee:36:de:01:4b:ca:8a: 4a:97:9e:a0:ef:4e:82:96:0c:ed:fc:e1:d2:de:fd: f0:28:cf:8d:d9:01:93:f0:04:8f:b0:c1:59:1b:12: 55:c0:b1:a1:f7:da:15:0e:1b:48:f6:aa:5e:12:30: 0e:ee:ac:1a:e2:e0:9c:d0:37:3c:3f:79:02:81:5b: 76:70:7c:27:97:f1:fd:1b:bc:73:ad:6e:cf:70:4e: f1:91:f5:15:6e:0a:8c:d7:d9:b3:af:51:8e:28:ab: d6:84:23:07:54:08:d6:82:fc:f8:36:5b:7d:43:17: e1:ef:65:7a:3c:dc:58:58:74:16:e8:ea:89:66:82: 12:da:56:6e:6d:81:44:eb:4f:6c:c6:b9:c1:32:cd: 4a:1b:93:cd:32:86:1c:40:77:ca:9f:61:d8:a6:47: 3c:47:c5:78:80:64:94:05:ca:73:d4:f5:7d:38:3a: 1c:d6:f7:b2:d6:e7:80:e7:49:8e:f3:e6:b0:96:55: 2c:ad:49:f2:e0:4e:ad:8d:74:61:45:87:2c:39:4d: 7c:6a:f6:42:d9:11:4f:fe:c4:56:9a:55:e2:ee:1a: ff:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:91:50:95:85:1A:98:89:9A:8A:92:FE:DD:6F:9B:BB:D3:58:8F:EC X509v3 Authority Key Identifier: keyid:30:DF:CD:C8:92:E7:3E:E2:54:64:28:27:42:E2:9C:56:7E:A3:CE:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C2913/8B43B736FE4911EFA735AD6FC4F9AE02/MN_NyJLnPuJUZCgnQuKcVn6jzgM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MN_NyJLnPuJUZCgnQuKcVn6jzgM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C2913/8B43B736FE4911EFA735AD6FC4F9AE02/MN_NyJLnPuJUZCgnQuKcVn6jzgM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 92:c1:e7:8f:16:d2:ef:6a:8c:4a:ab:f1:33:f9:54:a5:93:2c: 8d:fa:60:13:5f:80:0f:58:4f:47:da:96:83:4f:e3:09:0c:51: 12:88:44:ca:f3:78:aa:dd:cd:24:28:33:f8:d6:c9:fc:e4:72: a9:4f:c1:a1:7a:a3:23:39:a1:e3:44:e4:9a:30:5d:b0:16:4e: 71:57:dd:b2:a7:6a:82:f6:e6:5c:0f:3a:ce:a7:a4:c3:e6:2e: 98:aa:ac:a3:4f:37:d5:50:2d:72:2b:66:ff:5c:2c:5f:36:68: 73:39:df:71:88:aa:e4:ab:7e:21:38:3c:00:2f:25:0b:59:9b: 92:96:8a:f3:b6:ff:e1:40:fa:f7:db:88:14:bc:8a:d2:e1:cd: 00:83:8c:37:36:af:52:15:c4:16:58:ad:e2:ac:ce:00:eb:91: 86:b6:86:49:3b:42:05:ae:2d:11:77:ab:07:f7:64:5b:28:d4: 7a:77:fc:af:41:5d:9d:93:a7:54:b1:02:7c:9a:5e:d3:a5:3f: f8:08:38:ff:33:cc:3f:29:5d:ca:4f:e5:8b:af:e9:dd:69:1d: b9:df:76:31:c2:55:1e:b3:5d:9d:45:97:f8:7c:66:53:6d:1b: 27:09:6c:2a:27:01:da:61:e9:a3:1f:b5:fd:d0:32:45:a2:71: 24:f2:28:0b -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBPjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD MjkxMzExMC8GA1UEBRMoMzBERkNEQzg5MkU3M0VFMjU0NjQyODI3NDJFMjlDNTY3 RUEzQ0UwMzAeFw0yNTA3MDEwODE5NTFaFw0yNTA3MDgwODE5NTFaMBgxFjAUBgNV BAMTDTY4NjM5YTI3LWMzYzgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDTN00WIeICdVHD106U3wEUm2yZ/Sn04MvAB31rcFVhSQ/VuD0i7jbeAUvKikqX nqDvToKWDO384dLe/fAoz43ZAZPwBI+wwVkbElXAsaH32hUOG0j2ql4SMA7urBri 4JzQNzw/eQKBW3ZwfCeX8f0bvHOtbs9wTvGR9RVuCozX2bOvUY4oq9aEIwdUCNaC /Pg2W31DF+HvZXo83FhYdBbo6olmghLaVm5tgUTrT2zGucEyzUobk80yhhxAd8qf YdimRzxHxXiAZJQFynPU9X04OhzW97LW54DnSY7z5rCWVSytSfLgTq2NdGFFhyw5 TXxq9kLZEU/+xFaaVeLuGv+fAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUY5FQlYUa mImaipL+3W+bu9NYj+wwHwYDVR0jBBgwFoAUMN/NyJLnPuJUZCgnQuKcVn6jzgMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUMyOTEzLzhCNDNCNzM2RkU0 OTExRUZBNzM1QUQ2RkM0RjlBRTAyL01OX055SkxuUHVKVVpDZ25RdUtjVm42anpn TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvTU5fTnlKTG5QdUpVWkNnblF1S2NWbjZqemdNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUMy OTEzLzhCNDNCNzM2RkU0OTExRUZBNzM1QUQ2RkM0RjlBRTAyL01OX055SkxuUHVK VVpDZ25RdUtjVm42anpnTS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJLB548W0u9qjEqr8TP5VKWTLI36YBNfgA9YT0faloNP4wkMURKIRMrz eKrdzSQoM/jWyfzkcqlPwaF6oyM5oeNE5JowXbAWTnFX3bKnaoL25lwPOs6npMPm LpiqrKNPN9VQLXIrZv9cLF82aHM533GIquSrfiE4PAAvJQtZm5KWivO2/+FA+vfb iBS8itLhzQCDjDc2r1IVxBZYreKszgDrkYa2hkk7QgWuLRF3qwf3ZFso1Hp3/K9B XZ2Tp1SxAnyaXtOlP/gIOP8zzD8pXcpP5Yuv6d1pHbnfdjHCVR6zXZ1Fl/h8ZlNt GycJbConAdph6aMftf3QMkWicSTyKAs= -----END CERTIFICATE-----Generated at Thu Jul 3 07:59:18 2025 by rpki-client