$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9D5D/DD6F28720A8B11EABCF9CE52C4F9AE02/Ny2TbjjYucsfcBIhn_ghcrkL7lg.mft File: Ny2TbjjYucsfcBIhn_ghcrkL7lg.mft (raw, json) Hash identifier: 4MGDrBfsR64RYKcLh8cEgnCa3rShyjwa9CRaUf6Jhkg= Subject key identifier: 34:4A:76:FE:38:FC:19:35:0C:B8:91:43:97:A4:84:D8:F2:19:85:CE Authority key identifier: 37:2D:93:6E:38:D8:B9:CB:1F:70:12:21:9F:F8:21:72:B9:0B:EE:58 Certificate issuer: /CN=A91C9D5D/serialNumber=372D936E38D8B9CB1F7012219FF82172B90BEE58 Certificate serial: 0C3D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ny2TbjjYucsfcBIhn_ghcrkL7lg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C9D5D/DD6F28720A8B11EABCF9CE52C4F9AE02/Ny2TbjjYucsfcBIhn_ghcrkL7lg.mft Manifest number: 0C35 Signing time: Wed 02 Jul 2025 18:47:08 +0000 Manifest this update: Wed 02 Jul 2025 18:47:07 +0000 Manifest next update: Wed 09 Jul 2025 18:47:07 +0000 Files and hashes: 1: Ny2TbjjYucsfcBIhn_ghcrkL7lg.crl (hash: Gtbwzah9A91JKpVBSzL0VFiPlw7T10CP7c0GdOvDrZo=) 2: A0E062260A8C11EAB25FD253C4F9AE02.roa (hash: 7xX6rH7i12z21iTWC8vTwBT7bsP1fB8No9Xtvt+ZVCA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C9D5D/DD6F28720A8B11EABCF9CE52C4F9AE02/Ny2TbjjYucsfcBIhn_ghcrkL7lg.crl rsync://rpki.apnic.net/member_repository/A91C9D5D/DD6F28720A8B11EABCF9CE52C4F9AE02/Ny2TbjjYucsfcBIhn_ghcrkL7lg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ny2TbjjYucsfcBIhn_ghcrkL7lg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 18:47:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3133 (0xc3d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C9D5D, serialNumber=372D936E38D8B9CB1F7012219FF82172B90BEE58 Validity Not Before: Jul 2 18:47:07 2025 GMT Not After : Jul 9 18:47:07 2025 GMT Subject: CN=68657eac-61cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:4f:e9:92:57:c0:09:d6:5e:e7:85:b8:d7:37: 95:69:2c:1c:01:da:fc:65:25:55:6b:dc:3c:fe:2a: 4d:b8:f8:de:6e:b3:b9:f8:98:5d:c3:8e:fa:09:2f: b7:17:33:99:c6:2b:8b:dd:a5:8f:9f:6a:be:f9:5d: 91:6e:e1:14:08:58:0a:17:1e:4e:9c:7e:4f:ad:bd: 50:cf:f9:9d:67:99:fb:b0:e7:dd:28:a9:62:a6:27: 4a:a7:dd:37:19:a1:37:3f:e4:2b:02:18:a4:97:07: ef:c3:7c:91:09:6c:95:c8:42:e0:69:54:6a:5f:02: f5:2e:f0:19:c8:8f:ab:3d:6b:bd:d6:6b:ee:6a:f8: 0d:f7:bb:b3:bc:41:ea:76:22:1e:7c:f2:2d:3d:06: f5:23:d9:a8:74:01:19:b7:b6:5c:13:51:ec:e6:06: 92:b3:4c:1c:f3:0b:6e:12:61:96:85:2c:b7:b9:0e: c3:76:fa:01:77:51:62:9a:7b:a6:2a:98:b6:2d:5d: fc:b1:65:0e:74:a8:26:d0:be:58:b3:f6:7b:1f:5d: 9a:e0:dc:24:dc:7c:59:86:30:3a:6f:f0:ac:10:8d: da:b0:68:6d:3a:38:37:7d:ce:6a:7b:39:25:24:1e: 05:61:31:c7:ff:8f:da:61:91:84:bf:7c:87:19:8e: ba:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:4A:76:FE:38:FC:19:35:0C:B8:91:43:97:A4:84:D8:F2:19:85:CE X509v3 Authority Key Identifier: keyid:37:2D:93:6E:38:D8:B9:CB:1F:70:12:21:9F:F8:21:72:B9:0B:EE:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C9D5D/DD6F28720A8B11EABCF9CE52C4F9AE02/Ny2TbjjYucsfcBIhn_ghcrkL7lg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ny2TbjjYucsfcBIhn_ghcrkL7lg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9D5D/DD6F28720A8B11EABCF9CE52C4F9AE02/Ny2TbjjYucsfcBIhn_ghcrkL7lg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a3:22:8e:86:c7:4c:64:8f:58:5c:a3:09:f2:2b:b4:f5:fb:ed: f9:e4:76:cb:0a:cf:84:85:40:d6:f7:6b:b4:89:b5:f1:7f:1f: 46:25:a3:b1:35:84:0e:6f:55:6a:4b:ed:82:b3:37:ce:5f:2f: 7e:40:75:94:b7:a0:0a:2e:01:19:06:f3:56:2d:95:e2:75:92: 07:d6:66:90:b4:21:24:17:f3:c6:af:ef:2b:f1:c7:b4:fa:ae: 4d:c3:de:94:9c:a2:58:3c:a4:5a:2b:5d:3c:71:27:69:03:fe: b1:00:3d:65:a9:b1:d0:19:57:6f:86:04:12:34:12:ad:40:ae: c9:20:48:44:fa:2f:6d:4c:06:7b:85:f2:32:1a:2b:37:f8:7a: d1:6f:c9:4e:33:d7:9b:8a:e4:3d:2a:5b:53:17:9f:69:4b:e1: 22:93:7e:4b:09:77:4b:1f:34:71:cb:1d:5a:79:c5:f2:12:31: 9f:2d:72:05:72:ac:51:b9:05:11:da:9a:d9:a3:65:4b:27:67: fb:0e:19:8d:09:14:46:42:7d:af:89:11:04:6e:2d:f8:27:4b: ec:9d:4e:5f:59:77:12:df:c8:1c:d7:ac:42:30:e8:dd:4e:51: 6b:d6:57:b4:f4:62:b1:ae:f9:46:4c:e2:3e:80:1c:d4:cd:a0: a4:d7:ee:0b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDD0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzlENUQxMTAvBgNVBAUTKDM3MkQ5MzZFMzhEOEI5Q0IxRjcwMTIyMTlGRjgyMTcy QjkwQkVFNTgwHhcNMjUwNzAyMTg0NzA3WhcNMjUwNzA5MTg0NzA3WjAYMRYwFAYD VQQDEw02ODY1N2VhYy02MWNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs0/pklfACdZe54W41zeVaSwcAdr8ZSVVa9w8/ipNuPjebrO5+Jhdw476CS+3 FzOZxiuL3aWPn2q++V2RbuEUCFgKFx5OnH5Prb1Qz/mdZ5n7sOfdKKlipidKp903 GaE3P+QrAhiklwfvw3yRCWyVyELgaVRqXwL1LvAZyI+rPWu91mvuavgN97uzvEHq diIefPItPQb1I9modAEZt7ZcE1Hs5gaSs0wc8wtuEmGWhSy3uQ7DdvoBd1Fimnum Kpi2LV38sWUOdKgm0L5Ys/Z7H12a4Nwk3HxZhjA6b/CsEI3asGhtOjg3fc5qezkl JB4FYTHH/4/aYZGEv3yHGY66GQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDRKdv44 /Bk1DLiRQ5ekhNjyGYXOMB8GA1UdIwQYMBaAFDctk2442LnLH3ASIZ/4IXK5C+5Y MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOUQ1RC9ERDZGMjg3MjBB OEIxMUVBQkNGOUNFNTJDNEY5QUUwMi9OeTJUYmpqWXVjc2ZjQklobl9naGNya0w3 bGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL055MlRiampZdWNzZmNCSWhuX2doY3JrTDdsZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD OUQ1RC9ERDZGMjg3MjBBOEIxMUVBQkNGOUNFNTJDNEY5QUUwMi9OeTJUYmpqWXVj c2ZjQklobl9naGNya0w3bGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCjIo6Gx0xkj1hcownyK7T1++355HbLCs+EhUDW92u0ibXxfx9GJaOx NYQOb1VqS+2CszfOXy9+QHWUt6AKLgEZBvNWLZXidZIH1maQtCEkF/PGr+8r8ce0 +q5Nw96UnKJYPKRaK108cSdpA/6xAD1lqbHQGVdvhgQSNBKtQK7JIEhE+i9tTAZ7 hfIyGis3+HrRb8lOM9ebiuQ9KltTF59pS+Eik35LCXdLHzRxyx1aecXyEjGfLXIF cqxRuQUR2prZo2VLJ2f7DhmNCRRGQn2viREEbi34J0vsnU5fWXcS38gc16xCMOjd TlFr1le09GKxrvlGTOI+gBzUzaCk1+4L -----END CERTIFICATE-----Generated at Thu Jul 3 23:37:49 2025 by rpki-client