$ rpki-client -vvf rpki.apnic.net/member_repository/A91CFC1C/3C142B1657FE11EEAA553060C4F9AE02/NkXNkOP0PAEtqzvzly6GvJTd1FQ.mft File: NkXNkOP0PAEtqzvzly6GvJTd1FQ.mft (raw, json) Hash identifier: abeonaIkOOKvTWfxeU0ywlN6BJnApB3dCfrNWmAELVw= Subject key identifier: 99:94:CE:DD:00:8D:4F:85:1E:F3:FD:92:40:CE:20:FF:F0:56:8B:B8 Authority key identifier: 36:45:CD:90:E3:F4:3C:01:2D:AB:3B:F3:97:2E:86:BC:94:DD:D4:54 Certificate issuer: /CN=A91CFC1C/serialNumber=3645CD90E3F43C012DAB3BF3972E86BC94DDD454 Certificate serial: 0154 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NkXNkOP0PAEtqzvzly6GvJTd1FQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CFC1C/3C142B1657FE11EEAA553060C4F9AE02/NkXNkOP0PAEtqzvzly6GvJTd1FQ.mft Manifest number: 014F Signing time: Thu 03 Jul 2025 04:17:37 +0000 Manifest this update: Thu 03 Jul 2025 04:17:36 +0000 Manifest next update: Thu 10 Jul 2025 04:17:36 +0000 Files and hashes: 1: NkXNkOP0PAEtqzvzly6GvJTd1FQ.crl (hash: yIpmMIYqYtkw694OWo+bFz3kX1FYxnW6Rr4lru34vt0=) 2: E69E92582C4A11EF91F6202DC4F9AE02.roa (hash: uDYRjWDNbbuer7nADrVfw+s2rVnYHfiATUhAxlq32S0=) 3: B390F78E5CB611EE97D70B78C4F9AE02.roa (hash: LoclVr/421CJQL/D+2O/iwx9gXkx3/NwzPPfEEt2ocM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CFC1C/3C142B1657FE11EEAA553060C4F9AE02/NkXNkOP0PAEtqzvzly6GvJTd1FQ.crl rsync://rpki.apnic.net/member_repository/A91CFC1C/3C142B1657FE11EEAA553060C4F9AE02/NkXNkOP0PAEtqzvzly6GvJTd1FQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NkXNkOP0PAEtqzvzly6GvJTd1FQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 340 (0x154) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CFC1C, serialNumber=3645CD90E3F43C012DAB3BF3972E86BC94DDD454 Validity Not Before: Jul 3 04:17:36 2025 GMT Not After : Jul 10 04:17:36 2025 GMT Subject: CN=68660461-7944 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:59:63:a6:de:ff:4f:d8:6b:24:6f:5e:df:95: 0b:df:7d:e5:f9:91:77:8c:b5:b1:2d:52:11:a4:81: eb:57:4a:0d:07:30:1f:44:03:12:65:68:69:44:6d: 7c:2a:c9:b0:46:35:8a:2e:fe:8e:b9:85:16:ce:a8: d7:bd:da:4a:1b:a5:e5:55:c4:68:b2:a4:da:0b:65: af:f1:dc:98:ae:23:01:46:ec:7d:86:81:bf:a0:5b: 82:53:52:78:26:36:76:19:e4:35:4c:47:5e:ae:2d: b3:d8:44:ea:64:c8:94:14:ca:af:f5:8b:a1:dc:86: 69:0d:47:a5:e3:e5:33:43:be:be:ef:f5:08:1d:1c: 62:58:08:ff:09:76:bf:04:4e:b2:d0:93:e6:3a:13: 9d:36:de:14:59:05:0c:0c:60:71:d3:84:49:cf:c6: 8b:72:35:bb:fa:73:b6:19:37:7d:b5:b0:36:53:18: 3e:04:0f:3f:e1:15:59:95:53:80:1d:af:a4:43:35: 1a:4d:02:56:ee:81:1e:58:86:40:bc:55:7b:fb:0e: a6:50:32:41:c2:21:54:07:98:b7:3d:f5:e4:03:2f: 0f:78:ad:c7:9a:45:29:73:1b:ef:9a:13:82:6e:8b: 59:2b:93:1f:8f:4d:54:ed:6c:2f:38:dc:a8:9d:ed: ea:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:94:CE:DD:00:8D:4F:85:1E:F3:FD:92:40:CE:20:FF:F0:56:8B:B8 X509v3 Authority Key Identifier: keyid:36:45:CD:90:E3:F4:3C:01:2D:AB:3B:F3:97:2E:86:BC:94:DD:D4:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CFC1C/3C142B1657FE11EEAA553060C4F9AE02/NkXNkOP0PAEtqzvzly6GvJTd1FQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NkXNkOP0PAEtqzvzly6GvJTd1FQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CFC1C/3C142B1657FE11EEAA553060C4F9AE02/NkXNkOP0PAEtqzvzly6GvJTd1FQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b9:05:ef:17:3d:57:7b:bb:e5:c5:c4:89:f7:20:fa:1e:6b:01: dd:6b:ac:0a:f5:41:d3:ea:78:fe:92:53:9c:cf:49:c2:e2:96: 1c:21:41:f9:de:d2:7a:a4:f1:c0:bf:69:8c:e0:12:60:68:57: db:6a:06:a4:6e:f9:10:9d:16:62:40:60:b6:fd:93:1c:c0:71: 97:54:41:9e:6c:50:43:11:c1:0a:90:5d:d0:a3:08:dd:62:1d: d3:de:5a:c9:59:30:ad:28:b9:df:e4:44:90:3a:a6:3d:50:25: 14:03:34:c0:69:d9:a1:1b:86:be:aa:d2:cb:4e:0c:c4:d4:0a: 86:6a:c0:18:d5:f0:d6:f3:7a:21:a3:b8:41:76:df:c1:88:eb: d2:5b:dc:9b:d0:e3:42:59:ac:ab:5d:60:f3:8e:39:8a:48:ca: b8:34:54:6c:a5:bf:28:f8:68:d3:3b:f9:e0:2e:ea:5f:91:dd: 93:bd:0a:07:a5:ba:c8:18:b3:b1:5a:35:12:36:86:76:a0:1a: 64:01:e5:e6:14:76:ca:8e:a5:39:c7:42:9c:44:fd:f1:51:69: 53:b0:99:85:e9:79:1c:82:23:c6:59:52:66:8a:c7:a4:a9:b2: f7:e9:70:47:76:cb:6c:97:04:77:3a:49:d2:fc:e8:21:dd:46: 0b:77:cd:dc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAVQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0ZDMUMxMTAvBgNVBAUTKDM2NDVDRDkwRTNGNDNDMDEyREFCM0JGMzk3MkU4NkJD OTREREQ0NTQwHhcNMjUwNzAzMDQxNzM2WhcNMjUwNzEwMDQxNzM2WjAYMRYwFAYD VQQDEw02ODY2MDQ2MS03OTQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv1ljpt7/T9hrJG9e35UL333l+ZF3jLWxLVIRpIHrV0oNBzAfRAMSZWhpRG18 KsmwRjWKLv6OuYUWzqjXvdpKG6XlVcRosqTaC2Wv8dyYriMBRux9hoG/oFuCU1J4 JjZ2GeQ1TEderi2z2ETqZMiUFMqv9Yuh3IZpDUel4+UzQ76+7/UIHRxiWAj/CXa/ BE6y0JPmOhOdNt4UWQUMDGBx04RJz8aLcjW7+nO2GTd9tbA2Uxg+BA8/4RVZlVOA Ha+kQzUaTQJW7oEeWIZAvFV7+w6mUDJBwiFUB5i3PfXkAy8PeK3HmkUpcxvvmhOC botZK5Mfj01U7WwvONyone3qcwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJmUzt0A jU+FHvP9kkDOIP/wVou4MB8GA1UdIwQYMBaAFDZFzZDj9DwBLas785cuhryU3dRU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRkMxQy8zQzE0MkIxNjU3 RkUxMUVFQUE1NTMwNjBDNEY5QUUwMi9Oa1hOa09QMFBBRXRxenZ6bHk2R3ZKVGQx RlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05rWE5rT1AwUEFFdHF6dnpseTZHdkpUZDFGUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RkMxQy8zQzE0MkIxNjU3RkUxMUVFQUE1NTMwNjBDNEY5QUUwMi9Oa1hOa09QMFBB RXRxenZ6bHk2R3ZKVGQxRlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC5Be8XPVd7u+XFxIn3IPoeawHda6wK9UHT6nj+klOcz0nC4pYcIUH5 3tJ6pPHAv2mM4BJgaFfbagakbvkQnRZiQGC2/ZMcwHGXVEGebFBDEcEKkF3Qowjd Yh3T3lrJWTCtKLnf5ESQOqY9UCUUAzTAadmhG4a+qtLLTgzE1AqGasAY1fDW83oh o7hBdt/BiOvSW9yb0ONCWayrXWDzjjmKSMq4NFRspb8o+GjTO/ngLupfkd2TvQoH pbrIGLOxWjUSNoZ2oBpkAeXmFHbKjqU5x0KcRP3xUWlTsJmF6XkcgiPGWVJmisek qbL36XBHdstslwR3OknS/Ogh3UYLd83c -----END CERTIFICATE-----Generated at Fri Jul 4 22:11:03 2025 by rpki-client