$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9702/EF913D26E3AA11EA88F49560C4F9AE02/nmN2pfKqPix_9VKvuK9Q2sE9Sbc.mft File: nmN2pfKqPix_9VKvuK9Q2sE9Sbc.mft (raw, json) Hash identifier: yfqIVhA3NpaGqq+87bfUerMZdUddv11mmAPROWI0YLE= Subject key identifier: 62:51:37:E5:C6:FF:C3:C3:B6:A8:46:99:F6:7D:C1:F0:DE:3B:67:C3 Authority key identifier: 9E:63:76:A5:F2:AA:3E:2C:7F:F5:52:AF:B8:AF:50:DA:C1:3D:49:B7 Certificate issuer: /CN=A91C9702/serialNumber=9E6376A5F2AA3E2C7FF552AFB8AF50DAC13D49B7 Certificate serial: 07F9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nmN2pfKqPix_9VKvuK9Q2sE9Sbc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C9702/EF913D26E3AA11EA88F49560C4F9AE02/nmN2pfKqPix_9VKvuK9Q2sE9Sbc.mft Manifest number: 07ED Signing time: Sat 10 May 2025 20:38:35 +0000 Manifest this update: Sat 10 May 2025 20:38:35 +0000 Manifest next update: Sat 17 May 2025 20:38:35 +0000 Files and hashes: 1: nmN2pfKqPix_9VKvuK9Q2sE9Sbc.crl (hash: 4OzbzGGpr4kU0S91lyah3RNtFgo7A3DkylGnkiQab7c=) 2: 0BC9660CE3AC11EAAAC85761C4F9AE02.roa (hash: 6X9DRIYN2JCL/kdvqE4XHDfEtLiRnlrwHj3YHZE4kgg=) 3: 0C5564C2E3AC11EAAAC85761C4F9AE02.roa (hash: 6lqehcAyCNVs7/NRnq82eztxUGH8XbnYMN7Uvtot0JE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C9702/EF913D26E3AA11EA88F49560C4F9AE02/nmN2pfKqPix_9VKvuK9Q2sE9Sbc.crl rsync://rpki.apnic.net/member_repository/A91C9702/EF913D26E3AA11EA88F49560C4F9AE02/nmN2pfKqPix_9VKvuK9Q2sE9Sbc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nmN2pfKqPix_9VKvuK9Q2sE9Sbc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 20:38:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2041 (0x7f9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C9702, serialNumber=9E6376A5F2AA3E2C7FF552AFB8AF50DAC13D49B7 Validity Not Before: May 10 20:38:35 2025 GMT Not After : May 17 20:38:35 2025 GMT Subject: CN=681fb94b-0ada Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:63:cb:6c:6c:76:b4:70:a7:5d:0f:ae:9f:fe: d9:66:b6:30:43:13:b0:55:c9:33:96:cf:57:e8:de: dd:0c:33:87:3b:a2:4b:57:c0:f1:22:23:7f:b1:2d: d1:96:16:b8:84:ce:41:51:ca:ca:d2:4b:2b:d4:8c: 9b:8f:2a:86:d3:35:2c:d2:db:ae:6d:3e:80:57:42: c6:b5:71:a0:89:d4:f4:7c:af:4f:59:2a:99:7b:86: 70:de:30:28:79:50:0a:5f:75:8c:3a:ae:a7:c8:45: 37:5c:cd:61:fe:28:1f:2f:3f:11:84:b7:0d:bb:27: 8b:54:60:98:34:83:0b:89:ed:a8:80:73:eb:0c:43: f3:27:61:bb:77:a6:e8:d8:f3:34:33:5a:49:c0:f0: ab:1a:17:e1:97:97:08:89:0a:96:2f:35:09:54:ff: 67:5d:02:75:ac:0e:60:fb:7d:9a:b1:f8:ac:9e:3e: e7:aa:da:96:91:54:20:1b:12:d6:4b:41:81:4b:24: 60:88:d2:e5:3b:38:90:a7:64:3b:e3:af:82:c8:b8: c1:fb:54:49:b7:1e:24:dd:fc:0c:4d:87:24:e1:47: 8a:e7:4f:25:5c:c0:27:0b:57:92:94:49:01:75:20: 3e:82:f2:37:49:96:34:e8:e8:1f:6d:68:7e:e1:82: 2c:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:51:37:E5:C6:FF:C3:C3:B6:A8:46:99:F6:7D:C1:F0:DE:3B:67:C3 X509v3 Authority Key Identifier: keyid:9E:63:76:A5:F2:AA:3E:2C:7F:F5:52:AF:B8:AF:50:DA:C1:3D:49:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C9702/EF913D26E3AA11EA88F49560C4F9AE02/nmN2pfKqPix_9VKvuK9Q2sE9Sbc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nmN2pfKqPix_9VKvuK9Q2sE9Sbc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9702/EF913D26E3AA11EA88F49560C4F9AE02/nmN2pfKqPix_9VKvuK9Q2sE9Sbc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1a:bc:e6:ab:2d:6e:68:0d:fa:87:00:25:f6:75:71:fd:f2:17: e2:1d:fa:79:a1:e1:af:58:48:bb:b6:38:2a:17:da:9b:be:10: 8e:c8:b1:9c:b7:6f:7a:f5:b9:96:8d:5a:9e:c1:14:38:ac:68: 99:b5:03:ff:1e:89:26:7d:65:50:d1:b7:cd:63:09:b6:df:0c: b0:b5:c4:aa:8d:00:4d:4a:fe:d4:e5:57:99:f8:bf:51:ef:a3: 4d:d4:07:62:5a:a6:16:58:a3:89:c8:54:bc:33:68:11:70:4c: 68:96:96:c4:f7:97:f3:86:3b:0b:c0:f8:f8:32:37:05:2f:e3: e7:a0:62:5b:f7:30:4f:4d:4f:b2:ce:94:13:80:db:f4:e2:34: 3c:b8:1b:a4:65:2c:a4:c6:a3:20:5c:73:44:48:13:51:20:c8: c9:1a:9c:6e:74:70:9f:ac:4f:8b:e6:0a:20:4a:e9:6d:d9:03: fd:e3:2c:d9:ba:f5:27:fd:ea:f2:ff:a8:c9:f0:cb:17:7b:fd: ac:51:8a:85:4b:6d:9b:76:70:93:b5:e2:15:22:78:74:1f:f1: da:4f:bb:f7:71:58:45:65:0c:ff:90:e5:4f:6f:4b:26:38:b9: 5d:1a:0b:fc:6d:dd:94:d7:43:72:a7:da:7f:f1:da:8c:61:f1: 50:7d:14:2e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB/kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qzk3MDIxMTAvBgNVBAUTKDlFNjM3NkE1RjJBQTNFMkM3RkY1NTJBRkI4QUY1MERB QzEzRDQ5QjcwHhcNMjUwNTEwMjAzODM1WhcNMjUwNTE3MjAzODM1WjAYMRYwFAYD VQQDEw02ODFmYjk0Yi0wYWRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzGPLbGx2tHCnXQ+un/7ZZrYwQxOwVckzls9X6N7dDDOHO6JLV8DxIiN/sS3R lha4hM5BUcrK0ksr1IybjyqG0zUs0tuubT6AV0LGtXGgidT0fK9PWSqZe4Zw3jAo eVAKX3WMOq6nyEU3XM1h/igfLz8RhLcNuyeLVGCYNIMLie2ogHPrDEPzJ2G7d6bo 2PM0M1pJwPCrGhfhl5cIiQqWLzUJVP9nXQJ1rA5g+32asfisnj7nqtqWkVQgGxLW S0GBSyRgiNLlOziQp2Q746+CyLjB+1RJtx4k3fwMTYck4UeK508lXMAnC1eSlEkB dSA+gvI3SZY06OgfbWh+4YIs7wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGJRN+XG /8PDtqhGmfZ9wfDeO2fDMB8GA1UdIwQYMBaAFJ5jdqXyqj4sf/VSr7ivUNrBPUm3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOTcwMi9FRjkxM0QyNkUz QUExMUVBODhGNDk1NjBDNEY5QUUwMi9ubU4ycGZLcVBpeF85Vkt2dUs5UTJzRTlT YmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25tTjJwZktxUGl4XzlWS3Z1SzlRMnNFOVNiYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD OTcwMi9FRjkxM0QyNkUzQUExMUVBODhGNDk1NjBDNEY5QUUwMi9ubU4ycGZLcVBp eF85Vkt2dUs5UTJzRTlTYmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAavOarLW5oDfqHACX2dXH98hfiHfp5oeGvWEi7tjgqF9qbvhCOyLGc t2969bmWjVqewRQ4rGiZtQP/HokmfWVQ0bfNYwm23wywtcSqjQBNSv7U5VeZ+L9R 76NN1AdiWqYWWKOJyFS8M2gRcExolpbE95fzhjsLwPj4MjcFL+PnoGJb9zBPTU+y zpQTgNv04jQ8uBukZSykxqMgXHNESBNRIMjJGpxudHCfrE+L5gogSult2QP94yzZ uvUn/ery/6jJ8MsXe/2sUYqFS22bdnCTteIVInh0H/HaT7v3cVhFZQz/kOVPb0sm OLldGgv8bd2U10Nyp9p/8dqMYfFQfRQu -----END CERTIFICATE-----Generated at Sun May 11 18:49:47 2025 by rpki-client