$ rpki-client -vvf rpki.apnic.net/member_repository/A91C6CAF/F3E0FAE4B6F411EEAC203810C4F9AE02/nwLaOrX7RTF1B8SAIc4Ki5NyVck.mft File: nwLaOrX7RTF1B8SAIc4Ki5NyVck.mft (raw, json) Hash identifier: 0GJNESmIVMlibjz55pYxVwkJdGvnPeqQilQNsFMcvmo= Subject key identifier: 97:DF:43:02:DE:2D:F2:12:04:05:AA:D5:92:76:13:B9:98:66:BB:2E Authority key identifier: 9F:02:DA:3A:B5:FB:45:31:75:07:C4:80:21:CE:0A:8B:93:72:55:C9 Certificate issuer: /CN=A91C6CAF/serialNumber=9F02DA3AB5FB45317507C48021CE0A8B937255C9 Certificate serial: 0125 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nwLaOrX7RTF1B8SAIc4Ki5NyVck.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C6CAF/F3E0FAE4B6F411EEAC203810C4F9AE02/nwLaOrX7RTF1B8SAIc4Ki5NyVck.mft Manifest number: 011B Signing time: Thu 03 Jul 2025 05:06:16 +0000 Manifest this update: Thu 03 Jul 2025 05:06:16 +0000 Manifest next update: Thu 10 Jul 2025 05:06:16 +0000 Files and hashes: 1: nwLaOrX7RTF1B8SAIc4Ki5NyVck.crl (hash: OExthxRrFK8ayuelFnse3bzdKc/rcjoUHMm0SXVL0zs=) 2: 09E42D1E921B11EF829E0041C4F9AE02.roa (hash: B4bx9kA0p4n5ASz52WYMBOS7rU+I5DT2fmWjDq/qssM=) 3: 51E59058921B11EFB656CB41C4F9AE02.roa (hash: ZDrCMxxOwwuqNF0Q4xD3EvKSvIiYcNvuSOn5SbIs2mk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C6CAF/F3E0FAE4B6F411EEAC203810C4F9AE02/nwLaOrX7RTF1B8SAIc4Ki5NyVck.crl rsync://rpki.apnic.net/member_repository/A91C6CAF/F3E0FAE4B6F411EEAC203810C4F9AE02/nwLaOrX7RTF1B8SAIc4Ki5NyVck.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nwLaOrX7RTF1B8SAIc4Ki5NyVck.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 293 (0x125) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C6CAF, serialNumber=9F02DA3AB5FB45317507C48021CE0A8B937255C9 Validity Not Before: Jul 3 05:06:16 2025 GMT Not After : Jul 10 05:06:16 2025 GMT Subject: CN=68660fc8-2c20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:ea:2e:3e:6b:c6:0e:df:a4:07:48:99:d1:da: 24:45:3d:24:c5:bd:0c:b5:f0:d0:45:81:ca:b9:83: 83:41:75:95:75:cc:89:07:51:60:33:e2:da:85:4d: b8:f7:77:ab:5c:5d:4f:76:c3:c0:a2:86:97:7c:60: 39:62:a6:76:27:f2:15:0a:a8:0b:fa:7a:9c:83:a7: 81:ce:77:a4:20:8b:c3:28:67:3f:26:ee:ef:83:d8: 26:0e:37:d2:8a:6d:97:46:4c:41:12:f1:c3:5f:25: 84:9a:f1:84:c5:10:d0:8a:6c:0d:cc:93:3c:65:a3: 9b:50:77:ce:ad:35:4b:e6:5e:07:f2:07:60:f1:61: 62:3b:ff:01:1f:29:ff:26:69:cc:df:35:13:d3:3d: bd:83:b0:76:25:ca:4b:31:96:15:0a:e8:5a:cb:6d: b3:c3:ab:36:0a:05:f8:87:9a:1d:80:ea:c9:26:d9: 4d:da:88:e7:f0:a7:c1:de:02:2d:c4:1f:8c:23:93: 9f:37:98:93:3b:87:4b:a4:cc:d4:92:d2:82:30:6c: ea:bb:2d:21:c3:ef:6e:db:6a:da:db:cb:52:34:9f: 8f:fb:7b:da:56:8b:af:86:29:05:fd:03:9a:93:76: bc:c9:bf:1e:e9:3d:7b:e0:c3:9f:c2:01:a7:1d:dd: b0:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:DF:43:02:DE:2D:F2:12:04:05:AA:D5:92:76:13:B9:98:66:BB:2E X509v3 Authority Key Identifier: keyid:9F:02:DA:3A:B5:FB:45:31:75:07:C4:80:21:CE:0A:8B:93:72:55:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C6CAF/F3E0FAE4B6F411EEAC203810C4F9AE02/nwLaOrX7RTF1B8SAIc4Ki5NyVck.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nwLaOrX7RTF1B8SAIc4Ki5NyVck.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C6CAF/F3E0FAE4B6F411EEAC203810C4F9AE02/nwLaOrX7RTF1B8SAIc4Ki5NyVck.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption cd:da:12:c0:86:09:34:4a:91:d7:e4:16:37:04:2e:3b:40:0d: 90:f1:c7:34:8e:a8:a9:93:65:f9:10:ee:cb:94:90:51:43:ea: 3d:1e:bc:67:ea:d0:14:be:8f:82:ba:79:52:cc:f8:7d:c8:22: 65:b9:89:37:d1:13:a7:38:90:6a:9c:9b:8c:8d:6f:82:59:11: 24:00:4c:bc:46:dc:78:dd:31:38:84:b7:a9:9a:22:02:91:b2: b0:c3:93:00:69:77:40:13:66:4a:62:2a:44:b1:7d:18:13:fd: 74:86:7b:47:25:c5:3e:19:8e:8d:42:99:2b:1b:8b:61:6b:a5: 01:9f:44:6f:8e:bc:3c:97:c2:1d:8e:0d:23:e5:a9:8e:6a:68: e6:8b:77:30:4d:ac:46:4a:19:dd:6c:db:6a:51:19:fd:88:84: 7d:97:2d:91:28:86:be:22:2d:9e:b3:cf:2a:ae:87:0c:30:47: 1d:34:2d:4b:0b:c5:82:44:d7:be:0f:77:cd:43:9d:a0:98:3e: e2:15:92:47:4d:99:fe:40:14:76:9f:37:2a:0a:8e:0d:b1:fb: bd:4d:d7:9c:45:14:3a:d7:05:ed:c0:71:87:be:cc:9c:9e:e8: ed:32:4c:a2:c8:8a:2a:dd:b3:e6:10:15:14:a1:ba:a8:d3:8a: 71:ff:55:ad -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzZDQUYxMTAvBgNVBAUTKDlGMDJEQTNBQjVGQjQ1MzE3NTA3QzQ4MDIxQ0UwQThC OTM3MjU1QzkwHhcNMjUwNzAzMDUwNjE2WhcNMjUwNzEwMDUwNjE2WjAYMRYwFAYD VQQDEw02ODY2MGZjOC0yYzIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqeouPmvGDt+kB0iZ0dokRT0kxb0MtfDQRYHKuYODQXWVdcyJB1FgM+LahU24 93erXF1PdsPAooaXfGA5YqZ2J/IVCqgL+nqcg6eBznekIIvDKGc/Ju7vg9gmDjfS im2XRkxBEvHDXyWEmvGExRDQimwNzJM8ZaObUHfOrTVL5l4H8gdg8WFiO/8BHyn/ JmnM3zUT0z29g7B2JcpLMZYVCuhay22zw6s2CgX4h5odgOrJJtlN2ojn8KfB3gIt xB+MI5OfN5iTO4dLpMzUktKCMGzquy0hw+9u22ra28tSNJ+P+3vaVouvhikF/QOa k3a8yb8e6T174MOfwgGnHd2wnwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJffQwLe LfISBAWq1ZJ2E7mYZrsuMB8GA1UdIwQYMBaAFJ8C2jq1+0UxdQfEgCHOCouTclXJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNkNBRi9GM0UwRkFFNEI2 RjQxMUVFQUMyMDM4MTBDNEY5QUUwMi9ud0xhT3JYN1JURjFCOFNBSWM0S2k1TnlW Y2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL253TGFPclg3UlRGMUI4U0FJYzRLaTVOeVZjay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NkNBRi9GM0UwRkFFNEI2RjQxMUVFQUMyMDM4MTBDNEY5QUUwMi9ud0xhT3JYN1JU RjFCOFNBSWM0S2k1TnlWY2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDN2hLAhgk0SpHX5BY3BC47QA2Q8cc0jqipk2X5EO7LlJBRQ+o9Hrxn 6tAUvo+CunlSzPh9yCJluYk30ROnOJBqnJuMjW+CWREkAEy8Rtx43TE4hLepmiIC kbKww5MAaXdAE2ZKYipEsX0YE/10hntHJcU+GY6NQpkrG4tha6UBn0Rvjrw8l8Id jg0j5amOamjmi3cwTaxGShndbNtqURn9iIR9ly2RKIa+Ii2es88qrocMMEcdNC1L C8WCRNe+D3fNQ52gmD7iFZJHTZn+QBR2nzcqCo4Nsfu9TdecRRQ61wXtwHGHvsyc nujtMkyiyIoq3bPmEBUUobqo04px/1Wt -----END CERTIFICATE-----Generated at Sat Jul 5 05:34:53 2025 by rpki-client