$ rpki-client -vvf rpki.apnic.net/member_repository/A91D6F21/FE37E3ECA1AC11EFB6758548C4F9AE02/nN366rxkvM14iClikQ7BkqLSKDg.mft File: nN366rxkvM14iClikQ7BkqLSKDg.mft (raw, json) Hash identifier: IPCK27sntmN6xkekqjAq+oS/tpk9/C80azXLJlGXz4A= Subject key identifier: 48:CA:82:F5:74:AA:62:B7:E7:87:4E:99:91:60:0D:D1:C3:B1:F7:4A Authority key identifier: 9C:DD:FA:EA:BC:64:BC:CD:78:88:29:62:91:0E:C1:92:A2:D2:28:38 Certificate issuer: /CN=A91D6F21/serialNumber=9CDDFAEABC64BCCD78882962910EC192A2D22838 Certificate serial: 61 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nN366rxkvM14iClikQ7BkqLSKDg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D6F21/FE37E3ECA1AC11EFB6758548C4F9AE02/nN366rxkvM14iClikQ7BkqLSKDg.mft Manifest number: 5E Signing time: Sun 11 May 2025 05:50:19 +0000 Manifest this update: Sun 11 May 2025 05:50:19 +0000 Manifest next update: Sun 18 May 2025 05:50:19 +0000 Files and hashes: 1: nN366rxkvM14iClikQ7BkqLSKDg.crl (hash: bfu1vd+nzscLna5RXbz+PRH2sRp9ahcMf4BxvItkSeA=) 2: 6EBBA0F4A1AD11EF8A984349C4F9AE02.roa (hash: 4TxOvtXO/ZobHaFuZq+jlbsn4MEouHzffnZwxkoUjpM=) 3: 685DC124EC7B11EFAF014776C4F9AE02.roa (hash: HNlIYD/ULKjSdzSST5l7khzVoaw7HPjUFT3q9CFffJQ=) 4: 6F25556CA1AD11EF8A984349C4F9AE02.roa (hash: 9vy2sRLiVK7gv+Iu4032kUkO8gYn31dF49cn6btcuzY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D6F21/FE37E3ECA1AC11EFB6758548C4F9AE02/nN366rxkvM14iClikQ7BkqLSKDg.crl rsync://rpki.apnic.net/member_repository/A91D6F21/FE37E3ECA1AC11EFB6758548C4F9AE02/nN366rxkvM14iClikQ7BkqLSKDg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nN366rxkvM14iClikQ7BkqLSKDg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 May 2025 05:50:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 97 (0x61) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D6F21, serialNumber=9CDDFAEABC64BCCD78882962910EC192A2D22838 Validity Not Before: May 11 05:50:19 2025 GMT Not After : May 18 05:50:19 2025 GMT Subject: CN=68203a9b-b301 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:1f:3f:4b:e6:36:20:fb:b4:2f:6c:70:fb:57: d5:55:dc:a5:35:47:23:90:50:67:f0:8a:94:5a:67: 37:f0:e5:bd:b8:d1:ca:f1:c2:7e:c6:7c:e4:9c:db: 67:54:4b:c8:c6:d6:2e:03:e3:f8:d2:93:d9:38:0a: e2:72:20:56:45:b7:7e:6c:9a:79:38:76:93:cf:d3: 57:0f:6b:38:57:4b:dc:7d:ef:4c:55:a3:a7:8e:6d: 5a:7e:9b:b3:a5:30:45:1a:18:33:45:55:80:c6:05: ac:ac:a7:c2:4b:b3:e9:b9:91:bc:96:8e:aa:c7:c5: d6:ac:a8:47:7e:a7:c2:9f:05:92:cd:1b:51:6f:05: 95:47:15:bf:91:79:4d:a5:6e:8e:64:65:df:6f:a8: f8:a7:55:ec:e6:27:f8:66:77:1f:eb:a4:b8:86:fd: 88:53:68:ca:da:fd:3d:8e:95:6a:c4:fb:63:7d:9c: 9a:8e:68:bb:ff:1b:44:e8:11:24:bf:df:32:ae:d2: dd:f3:50:24:51:88:ea:aa:3c:1f:cc:04:28:11:51: ac:6d:c7:0b:8d:14:95:22:f3:ff:5f:b9:f5:99:e2: d8:60:53:38:3d:83:db:82:67:cb:79:6e:ca:2f:77: d2:60:12:73:2d:10:45:03:07:77:43:4d:56:50:10: a3:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:CA:82:F5:74:AA:62:B7:E7:87:4E:99:91:60:0D:D1:C3:B1:F7:4A X509v3 Authority Key Identifier: keyid:9C:DD:FA:EA:BC:64:BC:CD:78:88:29:62:91:0E:C1:92:A2:D2:28:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D6F21/FE37E3ECA1AC11EFB6758548C4F9AE02/nN366rxkvM14iClikQ7BkqLSKDg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nN366rxkvM14iClikQ7BkqLSKDg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D6F21/FE37E3ECA1AC11EFB6758548C4F9AE02/nN366rxkvM14iClikQ7BkqLSKDg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 86:81:32:01:4c:96:77:50:10:1a:15:19:e0:0b:21:eb:0f:3a: 26:78:89:8c:73:33:d4:14:ad:b2:f8:55:1a:ef:16:62:af:57: f5:b5:77:da:be:15:1f:e2:d7:73:8d:2d:a1:f3:eb:02:ea:bf: 94:38:ee:68:22:a6:3b:de:6e:c7:6b:98:1a:3c:91:29:06:b9: ba:43:87:73:f6:c6:de:58:4d:f8:37:0d:b9:78:4c:f3:19:03: 07:42:f0:2e:25:73:0f:c7:2a:a2:4a:8b:4e:76:79:01:2c:c8: 74:59:29:74:c6:4b:4d:96:91:1c:d4:a5:e9:a5:e8:66:90:6d: 32:be:4f:ea:9c:eb:b6:b3:4b:eb:36:84:10:d7:f8:2c:1c:1a: f0:89:53:9c:17:c9:76:1e:ba:7c:5c:d7:80:82:70:2e:51:ed: 0a:d9:15:98:46:bc:cb:93:00:d5:a3:ad:84:52:7b:4a:d7:a5: a2:a7:f2:b6:89:86:e0:24:f7:ee:45:7b:22:6f:8f:f9:1e:ae: a8:f6:6a:7b:71:aa:a3:aa:93:7a:d1:ac:cf:56:ce:fa:83:3d: 4d:30:b2:f3:3f:7f:aa:65:a8:ab:5e:8d:9a:36:d0:99:c8:61: 76:ff:35:89:a5:0c:fc:9c:83:cf:6c:70:82:6c:19:7c:56:7a: 23:d1:78:9c -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBYTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE NkYyMTExMC8GA1UEBRMoOUNEREZBRUFCQzY0QkNDRDc4ODgyOTYyOTEwRUMxOTJB MkQyMjgzODAeFw0yNTA1MTEwNTUwMTlaFw0yNTA1MTgwNTUwMTlaMBgxFjAUBgNV BAMTDTY4MjAzYTliLWIzMDEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCyHz9L5jYg+7QvbHD7V9VV3KU1RyOQUGfwipRaZzfw5b240crxwn7GfOSc22dU S8jG1i4D4/jSk9k4CuJyIFZFt35smnk4dpPP01cPazhXS9x970xVo6eObVp+m7Ol MEUaGDNFVYDGBaysp8JLs+m5kbyWjqrHxdasqEd+p8KfBZLNG1FvBZVHFb+ReU2l bo5kZd9vqPinVezmJ/hmdx/rpLiG/YhTaMra/T2OlWrE+2N9nJqOaLv/G0ToESS/ 3zKu0t3zUCRRiOqqPB/MBCgRUaxtxwuNFJUi8/9fufWZ4thgUzg9g9uCZ8t5bsov d9JgEnMtEEUDB3dDTVZQEKNrAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUSMqC9XSq Yrfnh06ZkWAN0cOx90owHwYDVR0jBBgwFoAUnN366rxkvM14iClikQ7BkqLSKDgw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQ2RjIxL0ZFMzdFM0VDQTFB QzExRUZCNjc1ODU0OEM0RjlBRTAyL25OMzY2cnhrdk0xNGlDbGlrUTdCa3FMU0tE Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvbk4zNjZyeGt2TTE0aUNsaWtRN0JrcUxTS0RnLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQ2 RjIxL0ZFMzdFM0VDQTFBQzExRUZCNjc1ODU0OEM0RjlBRTAyL25OMzY2cnhrdk0x NGlDbGlrUTdCa3FMU0tEZy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAIaBMgFMlndQEBoVGeALIesPOiZ4iYxzM9QUrbL4VRrvFmKvV/W1d9q+ FR/i13ONLaHz6wLqv5Q47mgipjvebsdrmBo8kSkGubpDh3P2xt5YTfg3Dbl4TPMZ AwdC8C4lcw/HKqJKi052eQEsyHRZKXTGS02WkRzUpeml6GaQbTK+T+qc67azS+s2 hBDX+CwcGvCJU5wXyXYeunxc14CCcC5R7QrZFZhGvMuTANWjrYRSe0rXpaKn8raJ huAk9+5FeyJvj/kerqj2antxqqOqk3rRrM9WzvqDPU0wsvM/f6plqKtejZo20JnI YXb/NYmlDPycg89scIJsGXxWeiPReJw= -----END CERTIFICATE-----Generated at Sun May 11 19:10:17 2025 by rpki-client