$ rpki-client -vvf rpki.apnic.net/member_repository/A91F9353/0875E64805C611EF89620A26C4F9AE02/rNBH0NiOJlfhLPkTAcFg8dPNLzM.mft File: rNBH0NiOJlfhLPkTAcFg8dPNLzM.mft (raw, json) Hash identifier: jhfecP6bvY12u4TwlrMJlV8/GEHIFBK5NE75aT65wQc= Subject key identifier: 73:56:1B:98:D7:C4:F8:AE:60:0E:DF:31:59:86:1F:5E:9C:AA:F9:2D Authority key identifier: AC:D0:47:D0:D8:8E:26:57:E1:2C:F9:13:01:C1:60:F1:D3:CD:2F:33 Certificate issuer: /CN=A91F9353/serialNumber=ACD047D0D88E2657E12CF91301C160F1D3CD2F33 Certificate serial: 010E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rNBH0NiOJlfhLPkTAcFg8dPNLzM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F9353/0875E64805C611EF89620A26C4F9AE02/rNBH0NiOJlfhLPkTAcFg8dPNLzM.mft Manifest number: FB Signing time: Thu 03 Jul 2025 05:41:19 +0000 Manifest this update: Thu 03 Jul 2025 05:41:18 +0000 Manifest next update: Thu 10 Jul 2025 05:41:18 +0000 Files and hashes: 1: rNBH0NiOJlfhLPkTAcFg8dPNLzM.crl (hash: JvI4dIJyuZCcNu3k2NziXiKBKEVI//LE//+A5UyWmPY=) 2: 3285ADDAA9D911EF9F30DA47C4F9AE02.roa (hash: 8EM5Tdb1aWYr9WLpldVjADU+t0zk8U3aJcreE19Ronc=) 3: DD267C66316511EFB284A421C4F9AE02.roa (hash: eSuqYXVr/sRMfsql4kma/aB/fn6WdOxL+gBS/uO7fxQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F9353/0875E64805C611EF89620A26C4F9AE02/rNBH0NiOJlfhLPkTAcFg8dPNLzM.crl rsync://rpki.apnic.net/member_repository/A91F9353/0875E64805C611EF89620A26C4F9AE02/rNBH0NiOJlfhLPkTAcFg8dPNLzM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rNBH0NiOJlfhLPkTAcFg8dPNLzM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 270 (0x10e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F9353, serialNumber=ACD047D0D88E2657E12CF91301C160F1D3CD2F33 Validity Not Before: Jul 3 05:41:18 2025 GMT Not After : Jul 10 05:41:18 2025 GMT Subject: CN=686617ff-c4ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:5b:51:d0:da:8b:62:5c:38:bf:3c:3d:a8:bc: f9:41:6a:de:10:79:d1:4a:ea:f9:97:fc:5f:42:a7: d0:3c:d9:b2:a9:bb:85:1f:35:a9:fb:22:55:b6:48: 52:77:25:65:a0:d4:5e:b8:83:e8:ac:94:9f:27:59: 18:87:5a:3c:0c:ac:9f:2e:3d:70:4d:0e:ff:f9:bb: 5d:0b:01:52:c5:c2:2a:1f:e6:f8:e4:55:da:c6:6b: 0d:de:2c:f5:cb:d2:35:83:a4:6b:27:84:f7:c0:5b: 83:c2:3f:21:ab:21:a5:c9:0b:04:bf:94:7c:d4:95: 11:bf:d8:ca:2a:08:c2:a4:05:ff:e0:74:16:78:43: 6a:d5:01:be:4f:da:ec:08:00:c8:50:dc:0d:19:3c: 87:74:21:f3:2c:90:11:b2:6f:fe:d8:60:fb:dc:a3: d4:35:44:24:c2:55:bd:13:9f:b5:5f:5a:90:e2:ff: d2:d1:0a:b7:a2:5d:c5:65:17:86:4e:90:e8:32:0a: 39:fc:05:0e:cf:85:b0:af:c4:b7:08:63:ca:d4:f3: 60:cd:5b:71:af:a9:21:11:33:c4:8d:d8:d2:66:c9: e8:d6:96:cd:7f:ff:e6:3d:41:80:c1:e9:07:4f:83: 39:06:48:a7:65:14:1a:eb:fb:24:a9:b8:6a:8e:52: 80:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:56:1B:98:D7:C4:F8:AE:60:0E:DF:31:59:86:1F:5E:9C:AA:F9:2D X509v3 Authority Key Identifier: keyid:AC:D0:47:D0:D8:8E:26:57:E1:2C:F9:13:01:C1:60:F1:D3:CD:2F:33 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F9353/0875E64805C611EF89620A26C4F9AE02/rNBH0NiOJlfhLPkTAcFg8dPNLzM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rNBH0NiOJlfhLPkTAcFg8dPNLzM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F9353/0875E64805C611EF89620A26C4F9AE02/rNBH0NiOJlfhLPkTAcFg8dPNLzM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 17:b1:20:83:a3:f6:3b:ee:39:a0:2d:aa:bb:09:ab:5b:4a:9a: c9:8c:97:5f:9a:86:3f:81:99:eb:46:34:dd:05:1d:59:d0:a1: eb:73:6f:70:a3:7f:56:8c:29:c2:fc:8b:ef:0e:11:18:cd:85: 5b:1b:a8:c7:1e:2b:fb:ce:8d:89:a7:c1:c0:b0:fa:4e:f7:f7: 6b:72:d3:c9:04:b9:d3:21:c1:9d:41:3c:54:dc:42:f1:50:95: b8:a4:6f:a5:20:73:37:33:55:5d:56:2a:39:38:bf:4c:74:f2: 7d:af:94:83:7a:e6:9b:24:93:ea:c6:d7:62:52:f5:cc:de:77: a1:e8:80:fe:34:43:7c:e6:bb:25:02:69:11:2f:6e:ba:a7:ce: 0d:8e:9c:82:d8:76:be:c7:97:89:11:f7:a6:79:76:a7:60:9d: a1:24:98:10:cb:fb:e5:c7:d2:6f:3d:0a:b6:07:cb:66:fb:3c: 35:01:0c:1e:45:99:56:3f:08:8a:3e:bf:87:b9:43:3d:89:dc: d4:f0:11:81:c9:21:4b:2d:12:c9:0c:5e:50:35:8d:6a:a5:a5: ee:c1:db:ac:36:df:79:61:b6:67:5a:21:95:c8:43:8f:98:fa: c8:d3:88:72:ae:e2:81:aa:05:17:7f:4e:26:bf:da:b5:c7:0d: 02:54:eb:45 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQ4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjkzNTMxMTAvBgNVBAUTKEFDRDA0N0QwRDg4RTI2NTdFMTJDRjkxMzAxQzE2MEYx RDNDRDJGMzMwHhcNMjUwNzAzMDU0MTE4WhcNMjUwNzEwMDU0MTE4WjAYMRYwFAYD VQQDEw02ODY2MTdmZi1jNGVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6ltR0NqLYlw4vzw9qLz5QWreEHnRSur5l/xfQqfQPNmyqbuFHzWp+yJVtkhS dyVloNReuIPorJSfJ1kYh1o8DKyfLj1wTQ7/+btdCwFSxcIqH+b45FXaxmsN3iz1 y9I1g6RrJ4T3wFuDwj8hqyGlyQsEv5R81JURv9jKKgjCpAX/4HQWeENq1QG+T9rs CADIUNwNGTyHdCHzLJARsm/+2GD73KPUNUQkwlW9E5+1X1qQ4v/S0Qq3ol3FZReG TpDoMgo5/AUOz4Wwr8S3CGPK1PNgzVtxr6khETPEjdjSZsno1pbNf//mPUGAwekH T4M5BkinZRQa6/skqbhqjlKA3QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHNWG5jX xPiuYA7fMVmGH16cqvktMB8GA1UdIwQYMBaAFKzQR9DYjiZX4Sz5EwHBYPHTzS8z MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGOTM1My8wODc1RTY0ODA1 QzYxMUVGODk2MjBBMjZDNEY5QUUwMi9yTkJIME5pT0psZmhMUGtUQWNGZzhkUE5M ek0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JOQkgwTmlPSmxmaExQa1RBY0ZnOGRQTkx6TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG OTM1My8wODc1RTY0ODA1QzYxMUVGODk2MjBBMjZDNEY5QUUwMi9yTkJIME5pT0ps ZmhMUGtUQWNGZzhkUE5Mek0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAXsSCDo/Y77jmgLaq7CatbSprJjJdfmoY/gZnrRjTdBR1Z0KHrc29w o39WjCnC/IvvDhEYzYVbG6jHHiv7zo2Jp8HAsPpO9/drctPJBLnTIcGdQTxU3ELx UJW4pG+lIHM3M1VdVio5OL9MdPJ9r5SDeuabJJPqxtdiUvXM3neh6ID+NEN85rsl AmkRL266p84NjpyC2Ha+x5eJEfemeXanYJ2hJJgQy/vlx9JvPQq2B8tm+zw1AQwe RZlWPwiKPr+HuUM9idzU8BGBySFLLRLJDF5QNY1qpaXuwdusNt95YbZnWiGVyEOP mPrI04hyruKBqgUXf04mv9q1xw0CVOtF -----END CERTIFICATE-----Generated at Fri Jul 4 14:49:51 2025 by rpki-client