$ rpki-client -vvf rpki.apnic.net/member_repository/A91D9D7A/89A9AA24278311ED9BA02450C4F9AE02/NSX5xUTpmw5jRgCZyS39lNSb9so.mft File: NSX5xUTpmw5jRgCZyS39lNSb9so.mft (raw, json) Hash identifier: IB83dgAWt6lEkxp2uZ4vffEPO6/Nwg7rUbEOCjOFAx0= Subject key identifier: C0:F4:2A:31:58:82:99:14:6B:28:7B:81:97:1A:67:CB:1A:DC:88:A9 Authority key identifier: 35:25:F9:C5:44:E9:9B:0E:63:46:00:99:C9:2D:FD:94:D4:9B:F6:CA Certificate issuer: /CN=A91D9D7A/serialNumber=3525F9C544E99B0E63460099C92DFD94D49BF6CA Certificate serial: 0248 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NSX5xUTpmw5jRgCZyS39lNSb9so.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D9D7A/89A9AA24278311ED9BA02450C4F9AE02/NSX5xUTpmw5jRgCZyS39lNSb9so.mft Manifest number: 0245 Signing time: Thu 03 Jul 2025 02:15:32 +0000 Manifest this update: Thu 03 Jul 2025 02:15:32 +0000 Manifest next update: Thu 10 Jul 2025 02:15:32 +0000 Files and hashes: 1: NSX5xUTpmw5jRgCZyS39lNSb9so.crl (hash: eS0okkuSj1p28+Zsw4rMXx+8VlpHZo/z28R2KZdwW3E=) 2: 81B7763C280211ED93948C10C4F9AE02.roa (hash: Tnx2Z5nAikiyTdOaTCX/ncL6S79XtcR6l/WD0Ni24yA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D9D7A/89A9AA24278311ED9BA02450C4F9AE02/NSX5xUTpmw5jRgCZyS39lNSb9so.crl rsync://rpki.apnic.net/member_repository/A91D9D7A/89A9AA24278311ED9BA02450C4F9AE02/NSX5xUTpmw5jRgCZyS39lNSb9so.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NSX5xUTpmw5jRgCZyS39lNSb9so.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 02:15:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 584 (0x248) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D9D7A, serialNumber=3525F9C544E99B0E63460099C92DFD94D49BF6CA Validity Not Before: Jul 3 02:15:32 2025 GMT Not After : Jul 10 02:15:32 2025 GMT Subject: CN=6865e7c4-802d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:2e:91:2b:e2:41:20:1c:bf:09:00:0c:38:b6: b7:d5:a6:f4:0d:01:f0:b2:3b:8c:8b:12:ea:22:73: c7:24:34:c5:ce:e3:ff:86:7a:c4:19:15:8f:51:db: 7f:fa:d1:9b:97:dc:06:03:dc:5f:2e:36:0d:c9:b6: b8:8f:52:d4:ef:d0:f5:97:18:2b:e1:95:4f:4f:52: 6e:35:19:80:94:53:2d:31:8d:e5:c2:41:06:d3:50: 88:fd:81:4d:17:4a:eb:e2:9a:96:8f:22:7d:15:0a: 16:88:3f:ca:11:7b:fd:46:36:e7:f8:bd:bf:f6:5c: cd:32:48:0c:81:91:fc:a0:0c:41:17:a7:7e:f8:59: 84:25:06:f1:06:e4:bc:6d:b6:fe:2e:7d:42:79:7d: 93:a1:a0:8d:7d:15:40:97:2a:b9:f2:48:62:02:7d: b2:f1:7f:8f:e2:b5:f9:b9:74:3d:dc:8e:a7:be:00: 1c:1f:51:4c:48:38:49:13:cd:cd:b5:14:98:85:98: 2e:20:b8:25:12:3a:ce:11:c5:bb:d2:85:15:fb:bc: 3e:45:14:2a:37:dc:19:a6:22:0b:c7:c0:3f:68:ee: 50:42:5f:ce:fe:f2:2f:ce:9a:3e:c3:8e:ee:df:25: f7:98:5e:20:32:08:e4:3a:ed:ba:07:58:fc:18:2b: 84:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:F4:2A:31:58:82:99:14:6B:28:7B:81:97:1A:67:CB:1A:DC:88:A9 X509v3 Authority Key Identifier: keyid:35:25:F9:C5:44:E9:9B:0E:63:46:00:99:C9:2D:FD:94:D4:9B:F6:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D9D7A/89A9AA24278311ED9BA02450C4F9AE02/NSX5xUTpmw5jRgCZyS39lNSb9so.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NSX5xUTpmw5jRgCZyS39lNSb9so.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D9D7A/89A9AA24278311ED9BA02450C4F9AE02/NSX5xUTpmw5jRgCZyS39lNSb9so.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2d:4b:35:ae:05:93:4f:e1:4c:14:66:d7:fc:65:5b:06:e9:c6: a8:86:41:41:1a:be:34:dc:f0:e6:de:e7:e9:2c:43:f7:cc:4a: 9d:d1:62:17:46:5c:a2:0b:e2:8e:b8:35:df:8d:45:44:8b:25: bd:58:20:73:d8:70:2b:e4:7a:49:ce:79:74:a8:9c:37:0c:b3: 89:61:ba:e5:04:a7:17:4e:2e:bd:58:97:2d:48:14:e7:6d:3b: ca:d0:7d:75:67:f4:0e:02:f1:81:1c:00:1c:33:7c:6f:5f:fd: 7a:01:8d:2c:9f:f3:92:1f:d0:bc:d7:11:3a:ab:f1:9a:ac:12: 9b:a3:d7:1d:61:b8:b3:f2:ce:f0:ac:83:14:04:bb:f8:9c:86: af:f8:c4:af:38:14:15:3a:a7:dd:40:31:c9:ae:ad:4d:ae:a2: 37:d6:6d:05:fd:fb:4a:8e:e1:3b:30:b3:e1:2b:61:9c:03:98: 52:20:1b:fd:1c:13:ec:9c:6f:28:6a:39:b9:27:9e:1a:01:8b: c5:9c:f6:17:a6:b2:d2:4e:61:63:f3:30:85:86:63:61:07:14: 80:68:e7:bb:85:92:a9:e8:10:87:68:5a:79:91:d2:41:f5:74: c5:b8:29:79:1b:bb:d7:66:65:f0:27:42:9a:a9:6b:96:b6:75: a7:76:45:7b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAkgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDlEN0ExMTAvBgNVBAUTKDM1MjVGOUM1NDRFOTlCMEU2MzQ2MDA5OUM5MkRGRDk0 RDQ5QkY2Q0EwHhcNMjUwNzAzMDIxNTMyWhcNMjUwNzEwMDIxNTMyWjAYMRYwFAYD VQQDEw02ODY1ZTdjNC04MDJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsy6RK+JBIBy/CQAMOLa31ab0DQHwsjuMixLqInPHJDTFzuP/hnrEGRWPUdt/ +tGbl9wGA9xfLjYNyba4j1LU79D1lxgr4ZVPT1JuNRmAlFMtMY3lwkEG01CI/YFN F0rr4pqWjyJ9FQoWiD/KEXv9Rjbn+L2/9lzNMkgMgZH8oAxBF6d++FmEJQbxBuS8 bbb+Ln1CeX2ToaCNfRVAlyq58khiAn2y8X+P4rX5uXQ93I6nvgAcH1FMSDhJE83N tRSYhZguILglEjrOEcW70oUV+7w+RRQqN9wZpiILx8A/aO5QQl/O/vIvzpo+w47u 3yX3mF4gMgjkOu26B1j8GCuEQwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMD0KjFY gpkUayh7gZcaZ8sa3IipMB8GA1UdIwQYMBaAFDUl+cVE6ZsOY0YAmckt/ZTUm/bK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEOUQ3QS84OUE5QUEyNDI3 ODMxMUVEOUJBMDI0NTBDNEY5QUUwMi9OU1g1eFVUcG13NWpSZ0NaeVMzOWxOU2I5 c28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05TWDV4VVRwbXc1alJnQ1p5UzM5bE5TYjlzby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE OUQ3QS84OUE5QUEyNDI3ODMxMUVEOUJBMDI0NTBDNEY5QUUwMi9OU1g1eFVUcG13 NWpSZ0NaeVMzOWxOU2I5c28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAtSzWuBZNP4UwUZtf8ZVsG6caohkFBGr403PDm3ufpLEP3zEqd0WIX RlyiC+KOuDXfjUVEiyW9WCBz2HAr5HpJznl0qJw3DLOJYbrlBKcXTi69WJctSBTn bTvK0H11Z/QOAvGBHAAcM3xvX/16AY0sn/OSH9C81xE6q/GarBKbo9cdYbiz8s7w rIMUBLv4nIav+MSvOBQVOqfdQDHJrq1NrqI31m0F/ftKjuE7MLPhK2GcA5hSIBv9 HBPsnG8oajm5J54aAYvFnPYXprLSTmFj8zCFhmNhBxSAaOe7hZKp6BCHaFp5kdJB 9XTFuCl5G7vXZmXwJ0KaqWuWtnWndkV7 -----END CERTIFICATE-----Generated at Thu Jul 3 08:05:55 2025 by rpki-client