$ rpki-client -vvf rpki.apnic.net/member_repository/A91C2913/8B43B736FE4911EFA735AD6FC4F9AE02/MN_NyJLnPuJUZCgnQuKcVn6jzgM.mft File: MN_NyJLnPuJUZCgnQuKcVn6jzgM.mft (raw, json) Hash identifier: w3fN9m5CZCilc9e5DDpFfO8QElDk0dy0fLF2oz8d6zA= Subject key identifier: 75:94:77:18:DE:3F:48:73:AC:70:8F:A6:26:4C:FC:52:15:A4:89:4D Authority key identifier: 30:DF:CD:C8:92:E7:3E:E2:54:64:28:27:42:E2:9C:56:7E:A3:CE:03 Certificate issuer: /CN=A91C2913/serialNumber=30DFCDC892E73EE25464282742E29C567EA3CE03 Certificate serial: 26 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MN_NyJLnPuJUZCgnQuKcVn6jzgM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C2913/8B43B736FE4911EFA735AD6FC4F9AE02/MN_NyJLnPuJUZCgnQuKcVn6jzgM.mft Manifest number: 24 Signing time: Tue 13 May 2025 07:03:59 +0000 Manifest this update: Tue 13 May 2025 07:03:59 +0000 Manifest next update: Tue 20 May 2025 07:03:59 +0000 Files and hashes: 1: MN_NyJLnPuJUZCgnQuKcVn6jzgM.crl (hash: PcFw9nHxvkM5ddQM5ZaSSL/KwfAeGnvDh+sxzR2+IZA=) 2: 7273BDA4FE4A11EF8A0EDD73C4F9AE02.roa (hash: aKDX+epsv+87CublFWvfDFPYgSLhuAtHebX+rfx7L+w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C2913/8B43B736FE4911EFA735AD6FC4F9AE02/MN_NyJLnPuJUZCgnQuKcVn6jzgM.crl rsync://rpki.apnic.net/member_repository/A91C2913/8B43B736FE4911EFA735AD6FC4F9AE02/MN_NyJLnPuJUZCgnQuKcVn6jzgM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MN_NyJLnPuJUZCgnQuKcVn6jzgM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 07:03:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38 (0x26) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C2913, serialNumber=30DFCDC892E73EE25464282742E29C567EA3CE03 Validity Not Before: May 13 07:03:59 2025 GMT Not After : May 20 07:03:59 2025 GMT Subject: CN=6822eedf-0412 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:50:d7:6d:2b:d6:3f:7f:c4:26:52:92:52:2d: 6f:e3:35:51:a6:f3:47:4f:70:64:bc:0f:68:bd:93: 94:ef:a7:5c:e3:a2:8b:c5:7b:b7:21:04:d8:1c:86: 7c:34:24:0b:56:d2:dc:71:24:98:dc:5c:28:9a:ca: 76:3b:4b:cc:1c:0d:4e:31:1e:69:32:3e:90:11:9e: 6e:4f:e2:d8:29:6d:ee:f4:0d:dc:60:94:58:c4:7b: 78:de:17:af:85:7a:78:2b:e0:c5:dc:2e:77:b9:20: 2f:f7:74:58:0a:35:cf:4f:bd:61:52:be:b7:b2:67: c3:bc:02:36:bb:f4:50:a6:11:b5:05:72:ea:c7:20: 24:8b:43:de:d0:f8:82:90:ec:f6:cf:d1:0b:bf:19: 55:b6:2f:4a:41:e4:ec:a8:ae:33:a7:a1:04:c2:e0: 0b:4d:0d:05:51:39:f3:31:ec:df:f0:a3:e9:4a:6c: 4d:eb:cf:14:3c:8c:7e:f1:cf:96:17:78:20:a5:52: d3:df:29:9d:8c:b2:76:46:f4:3e:da:43:41:47:c3: 8e:e4:87:31:5d:28:26:70:02:26:75:00:05:84:a5: fd:35:e6:a5:6b:46:97:f5:9b:05:cf:63:d7:3d:08: 22:5d:da:21:7b:6b:43:dc:7a:58:20:28:31:d7:73: 54:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:94:77:18:DE:3F:48:73:AC:70:8F:A6:26:4C:FC:52:15:A4:89:4D X509v3 Authority Key Identifier: keyid:30:DF:CD:C8:92:E7:3E:E2:54:64:28:27:42:E2:9C:56:7E:A3:CE:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C2913/8B43B736FE4911EFA735AD6FC4F9AE02/MN_NyJLnPuJUZCgnQuKcVn6jzgM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MN_NyJLnPuJUZCgnQuKcVn6jzgM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C2913/8B43B736FE4911EFA735AD6FC4F9AE02/MN_NyJLnPuJUZCgnQuKcVn6jzgM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b3:ad:39:99:6a:14:be:60:81:9a:d4:14:f7:9f:e3:aa:40:34: de:f0:07:ab:4e:50:a4:e5:77:bc:4f:29:85:f6:de:27:9a:fc: a5:73:de:b1:20:a1:88:bf:90:29:af:07:a0:c8:8b:24:db:c8: d2:04:ae:2f:a5:ba:6c:f1:4e:17:ab:7e:f4:5c:7a:a4:45:9a: 20:51:f6:1c:c2:9e:09:4a:e1:7c:c8:e6:92:61:88:c1:8a:09: 76:2f:d4:ad:a2:96:a3:c2:16:4e:1b:f2:d9:d9:03:e7:04:4e: 3d:09:0a:d8:2f:f5:0e:05:a7:3a:c2:f8:5e:58:89:d8:fc:14: 39:df:d6:ac:a0:70:58:c8:6a:1d:ae:1e:e6:bd:34:08:c0:06: 3d:e1:b7:57:1a:52:b8:d1:42:d8:b2:92:a9:cd:f7:71:36:df: 23:9c:44:31:f3:68:ca:4b:6d:f2:e1:bf:1f:7f:61:76:62:40: 4c:50:c0:b5:f2:1f:11:a6:29:33:be:08:56:8c:4d:af:bd:a0: 96:cc:ac:84:bb:de:cb:87:de:16:3c:47:6f:86:31:d5:92:95: 56:e6:db:97:33:f2:cc:d6:55:4f:ed:9d:67:df:24:8e:f1:4a: 86:27:eb:00:9e:63:a8:96:c0:cb:e5:c5:2d:75:73:d3:3d:44: 6a:a1:58:69 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBJjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD MjkxMzExMC8GA1UEBRMoMzBERkNEQzg5MkU3M0VFMjU0NjQyODI3NDJFMjlDNTY3 RUEzQ0UwMzAeFw0yNTA1MTMwNzAzNTlaFw0yNTA1MjAwNzAzNTlaMBgxFjAUBgNV BAMTDTY4MjJlZWRmLTA0MTIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDAUNdtK9Y/f8QmUpJSLW/jNVGm80dPcGS8D2i9k5Tvp1zjoovFe7chBNgchnw0 JAtW0txxJJjcXCiaynY7S8wcDU4xHmkyPpARnm5P4tgpbe70DdxglFjEe3jeF6+F engr4MXcLne5IC/3dFgKNc9PvWFSvreyZ8O8Aja79FCmEbUFcurHICSLQ97Q+IKQ 7PbP0Qu/GVW2L0pB5OyorjOnoQTC4AtNDQVROfMx7N/wo+lKbE3rzxQ8jH7xz5YX eCClUtPfKZ2MsnZG9D7aQ0FHw47khzFdKCZwAiZ1AAWEpf015qVrRpf1mwXPY9c9 CCJd2iF7a0PcelggKDHXc1STAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUdZR3GN4/ SHOscI+mJkz8UhWkiU0wHwYDVR0jBBgwFoAUMN/NyJLnPuJUZCgnQuKcVn6jzgMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUMyOTEzLzhCNDNCNzM2RkU0 OTExRUZBNzM1QUQ2RkM0RjlBRTAyL01OX055SkxuUHVKVVpDZ25RdUtjVm42anpn TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvTU5fTnlKTG5QdUpVWkNnblF1S2NWbjZqemdNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUMy OTEzLzhCNDNCNzM2RkU0OTExRUZBNzM1QUQ2RkM0RjlBRTAyL01OX055SkxuUHVK VVpDZ25RdUtjVm42anpnTS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBALOtOZlqFL5ggZrUFPef46pANN7wB6tOUKTld7xPKYX23iea/KVz3rEg oYi/kCmvB6DIiyTbyNIEri+lumzxTherfvRceqRFmiBR9hzCnglK4XzI5pJhiMGK CXYv1K2ilqPCFk4b8tnZA+cETj0JCtgv9Q4FpzrC+F5Yidj8FDnf1qygcFjIah2u Hua9NAjABj3ht1caUrjRQtiykqnN93E23yOcRDHzaMpLbfLhvx9/YXZiQExQwLXy HxGmKTO+CFaMTa+9oJbMrIS73suH3hY8R2+GMdWSlVbm25cz8szWVU/tnWffJI7x SoYn6wCeY6iWwMvlxS11c9M9RGqhWGk= -----END CERTIFICATE-----Generated at Wed May 14 04:36:11 2025 by rpki-client