$ rpki-client -vvf rpki.apnic.net/member_repository/A91F8357/14A78F2CDF8A11EF87472B74C4F9AE02/Nh-touCojPKH9M5sw7RGLJEzC_w.mft File: Nh-touCojPKH9M5sw7RGLJEzC_w.mft (raw, json) Hash identifier: JaS4nO/sVb3bsEodQjZtZlS7bQoWix8DOQj1VgBgD+8= Subject key identifier: D8:56:1E:08:CD:7D:9C:D6:BE:85:CF:51:95:5D:54:A6:2D:79:E2:6B Authority key identifier: 36:1F:AD:A2:E0:A8:8C:F2:87:F4:CE:6C:C3:B4:46:2C:91:33:0B:FC Certificate issuer: /CN=A91F8357/serialNumber=361FADA2E0A88CF287F4CE6CC3B4462C91330BFC Certificate serial: 5A Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Nh-touCojPKH9M5sw7RGLJEzC_w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F8357/14A78F2CDF8A11EF87472B74C4F9AE02/Nh-touCojPKH9M5sw7RGLJEzC_w.mft Manifest number: 55 Signing time: Thu 03 Jul 2025 07:30:52 +0000 Manifest this update: Thu 03 Jul 2025 07:30:52 +0000 Manifest next update: Thu 10 Jul 2025 07:30:52 +0000 Files and hashes: 1: Nh-touCojPKH9M5sw7RGLJEzC_w.crl (hash: vAQHiVwKRxOwKUNSNBtA7oOZMjiUmMtUKUYEpkoYFwI=) 2: 89E51722DF9011EFB2CE892EC4F9AE02.roa (hash: KpVW4cQhj8alBR7jcPtqJ2dq3s1eufaG57nwvRNG5IA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F8357/14A78F2CDF8A11EF87472B74C4F9AE02/Nh-touCojPKH9M5sw7RGLJEzC_w.crl rsync://rpki.apnic.net/member_repository/A91F8357/14A78F2CDF8A11EF87472B74C4F9AE02/Nh-touCojPKH9M5sw7RGLJEzC_w.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Nh-touCojPKH9M5sw7RGLJEzC_w.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 90 (0x5a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F8357, serialNumber=361FADA2E0A88CF287F4CE6CC3B4462C91330BFC Validity Not Before: Jul 3 07:30:52 2025 GMT Not After : Jul 10 07:30:52 2025 GMT Subject: CN=686631ac-7d17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:5c:22:6b:c7:10:0b:00:eb:01:6f:68:76:5e: 35:b9:e0:41:7d:4d:b0:44:98:84:25:48:11:a7:5a: eb:b3:c3:32:ad:d2:a4:dc:0a:5b:a7:35:e4:f5:f7: f9:e3:a4:d8:41:4b:5e:29:23:32:a5:a4:13:74:f6: 41:f2:0c:82:f8:f3:d8:8f:ac:bc:92:25:33:94:dd: fb:e8:48:3f:32:66:b6:de:65:32:a3:19:11:ba:d7: 2b:4a:29:3c:0c:b4:4d:6d:b4:31:ce:09:b2:12:d4: 1e:d2:b8:58:c8:97:10:b4:ba:a2:ff:5e:73:5b:4c: cf:b6:6b:68:5d:fc:90:f2:06:d3:e7:2f:be:8b:a6: 3c:43:f8:40:8b:ad:aa:9d:03:5d:5a:e2:e3:09:67: 90:0b:09:04:00:d6:97:ba:5a:cb:41:30:fb:53:67: 92:3b:3e:6f:e5:89:a4:60:eb:97:74:9b:e2:30:dd: bb:81:63:40:ab:39:6b:d8:9d:1a:e6:c5:a9:67:56: 58:35:02:1b:4c:92:43:5e:7a:44:49:bb:5a:0a:53: 3c:7f:19:d5:05:a3:d2:0c:9f:f0:01:a3:4e:f3:46: c7:a7:10:f4:3f:f5:c5:fe:ee:46:96:db:da:a0:53: fa:92:68:9d:fd:42:df:6a:a9:aa:36:be:6a:f1:18: ff:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:56:1E:08:CD:7D:9C:D6:BE:85:CF:51:95:5D:54:A6:2D:79:E2:6B X509v3 Authority Key Identifier: keyid:36:1F:AD:A2:E0:A8:8C:F2:87:F4:CE:6C:C3:B4:46:2C:91:33:0B:FC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F8357/14A78F2CDF8A11EF87472B74C4F9AE02/Nh-touCojPKH9M5sw7RGLJEzC_w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Nh-touCojPKH9M5sw7RGLJEzC_w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8357/14A78F2CDF8A11EF87472B74C4F9AE02/Nh-touCojPKH9M5sw7RGLJEzC_w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7a:de:ef:2c:09:16:2e:4c:e1:53:fb:43:49:60:d6:ef:51:b4: 8b:1c:f7:b9:7d:16:cc:52:76:ce:77:44:69:9b:bc:b0:e2:1a: c3:98:59:1b:ea:3a:76:22:04:2b:20:7a:c1:a3:fc:9a:2c:b0: 3e:e0:93:41:6a:7f:7e:b2:ac:a5:98:96:d9:8b:b8:15:69:81: eb:ce:f1:b4:c9:e7:15:0a:90:da:9e:1d:38:47:16:97:81:f8: d3:80:2c:b5:d4:2b:7d:19:46:3b:b6:88:32:ef:73:93:da:f5: 8e:a0:5e:f1:f9:ff:b8:30:ef:1c:62:73:f4:08:4a:a0:96:65: 7c:0e:4a:05:c5:71:e9:cb:e9:15:bf:54:f8:5d:5f:01:20:bb: f3:da:0b:a1:6f:3a:ad:7c:b4:ce:e0:b9:79:bb:96:45:bb:8d: 25:6e:66:fd:0c:64:ab:5a:aa:bd:4f:53:2b:44:63:60:92:3d: 2e:8a:54:0e:0d:a2:c3:74:06:19:56:86:a8:c4:c0:a0:bf:f8: c6:74:58:0c:63:c9:5d:da:ba:d2:a3:79:ed:be:b8:77:55:96: 25:c8:f3:5b:5b:75:b2:1b:57:2f:5c:f1:30:a3:dd:6a:0e:56: 99:49:e3:20:26:22:2c:d8:d2:90:ac:d0:87:52:20:ed:c1:b9: f7:e9:c9:56 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBWjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG ODM1NzExMC8GA1UEBRMoMzYxRkFEQTJFMEE4OENGMjg3RjRDRTZDQzNCNDQ2MkM5 MTMzMEJGQzAeFw0yNTA3MDMwNzMwNTJaFw0yNTA3MTAwNzMwNTJaMBgxFjAUBgNV BAMTDTY4NjYzMWFjLTdkMTcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDGXCJrxxALAOsBb2h2XjW54EF9TbBEmIQlSBGnWuuzwzKt0qTcClunNeT19/nj pNhBS14pIzKlpBN09kHyDIL489iPrLySJTOU3fvoSD8yZrbeZTKjGRG61ytKKTwM tE1ttDHOCbIS1B7SuFjIlxC0uqL/XnNbTM+2a2hd/JDyBtPnL76LpjxD+ECLraqd A11a4uMJZ5ALCQQA1pe6WstBMPtTZ5I7Pm/liaRg65d0m+Iw3buBY0CrOWvYnRrm xalnVlg1AhtMkkNeekRJu1oKUzx/GdUFo9IMn/ABo07zRsenEPQ/9cX+7kaW29qg U/qSaJ39Qt9qqao2vmrxGP85AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU2FYeCM19 nNa+hc9RlV1Upi154mswHwYDVR0jBBgwFoAUNh+touCojPKH9M5sw7RGLJEzC/ww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUY4MzU3LzE0QTc4RjJDREY4 QTExRUY4NzQ3MkI3NEM0RjlBRTAyL05oLXRvdUNvalBLSDlNNXN3N1JHTEpFekNf dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvTmgtdG91Q29qUEtIOU01c3c3UkdMSkV6Q193LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUY4 MzU3LzE0QTc4RjJDREY4QTExRUY4NzQ3MkI3NEM0RjlBRTAyL05oLXRvdUNvalBL SDlNNXN3N1JHTEpFekNfdy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAHre7ywJFi5M4VP7Q0lg1u9RtIsc97l9FsxSds53RGmbvLDiGsOYWRvq OnYiBCsgesGj/JossD7gk0Fqf36yrKWYltmLuBVpgevO8bTJ5xUKkNqeHThHFpeB +NOALLXUK30ZRju2iDLvc5Pa9Y6gXvH5/7gw7xxic/QISqCWZXwOSgXFcenL6RW/ VPhdXwEgu/PaC6FvOq18tM7guXm7lkW7jSVuZv0MZKtaqr1PUytEY2CSPS6KVA4N osN0BhlWhqjEwKC/+MZ0WAxjyV3autKjee2+uHdVliXI81tbdbIbVy9c8TCj3WoO VplJ4yAmIizY0pCs0IdSIO3BuffpyVY= -----END CERTIFICATE-----Generated at Thu Jul 3 14:51:43 2025 by rpki-client