$ rpki-client -vvf rpki.apnic.net/member_repository/A91F9B3A/7DEAE734F3A311E7B5D09C71C4F9AE02/nhW8ueM67e2saArIyYFuEVkFyiw.mft File: nhW8ueM67e2saArIyYFuEVkFyiw.mft (raw, json) Hash identifier: 2tejCzJBKM9aoNvvBP3uC8JClP0hAfSA2+ppkCJkwIg= Subject key identifier: A5:29:5E:15:3B:10:83:44:62:43:26:83:E0:54:97:36:FB:A3:DB:BE Authority key identifier: 9E:15:BC:B9:E3:3A:ED:ED:AC:68:0A:C8:C9:81:6E:11:59:05:CA:2C Certificate issuer: /CN=A91F9B3A/serialNumber=9E15BCB9E33AEDEDAC680AC8C9816E115905CA2C Certificate serial: 16F1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nhW8ueM67e2saArIyYFuEVkFyiw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F9B3A/7DEAE734F3A311E7B5D09C71C4F9AE02/nhW8ueM67e2saArIyYFuEVkFyiw.mft Manifest number: 16E4 Signing time: Mon 30 Jun 2025 16:48:40 +0000 Manifest this update: Mon 30 Jun 2025 16:48:40 +0000 Manifest next update: Mon 07 Jul 2025 16:48:40 +0000 Files and hashes: 1: nhW8ueM67e2saArIyYFuEVkFyiw.crl (hash: +nu1rXXPK2w/vvPeUTcrqAuR7ek2ydMLfndSH57Rwq0=) 2: 7A7A6AC6234311EA90D15227C4F9AE02.roa (hash: inLOYpzfiQRyaW4Jx9DTFdqEkju4HPJ5ZYoO4gNZ1PI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F9B3A/7DEAE734F3A311E7B5D09C71C4F9AE02/nhW8ueM67e2saArIyYFuEVkFyiw.crl rsync://rpki.apnic.net/member_repository/A91F9B3A/7DEAE734F3A311E7B5D09C71C4F9AE02/nhW8ueM67e2saArIyYFuEVkFyiw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nhW8ueM67e2saArIyYFuEVkFyiw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Jul 2025 16:48:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5873 (0x16f1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F9B3A, serialNumber=9E15BCB9E33AEDEDAC680AC8C9816E115905CA2C Validity Not Before: Jun 30 16:48:40 2025 GMT Not After : Jul 7 16:48:40 2025 GMT Subject: CN=6862bfe8-edc5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:19:c7:20:d7:88:43:20:f6:be:49:ef:20:8c: b3:e0:bd:e1:de:c6:fc:64:20:55:6c:2f:7d:14:78: a5:67:63:9d:62:78:2d:3f:15:ad:d0:14:5d:1e:28: 6a:ae:58:d4:63:42:29:7d:49:ae:f6:5c:a9:d8:05: f3:69:ad:e5:18:87:24:9d:29:68:c8:fd:3f:eb:9d: 7c:9c:b4:c1:96:97:86:e1:b8:1d:76:f0:43:8f:68: c9:67:d7:d6:0a:b1:08:0d:3b:ed:bf:3a:c1:f8:b2: 65:23:8a:77:ea:d8:89:ca:e1:04:db:14:76:03:a2: da:67:d4:30:30:b0:14:88:b6:6b:ed:80:72:68:99: 60:a7:fd:9a:19:f3:53:ff:52:ac:6e:62:7a:d8:9f: 58:8b:1a:6b:9b:60:0e:69:3c:62:86:5c:0b:ac:57: e9:1e:6d:1b:36:0d:c6:62:34:23:d0:28:08:e3:72: 6a:7b:42:dc:9b:de:46:6c:44:1d:39:91:9b:8b:3b: df:af:b8:57:9d:02:3c:fe:83:1e:f4:f0:54:8a:ae: 5c:4e:e2:0e:d9:b4:25:07:88:25:d3:d9:47:3d:8e: 6f:25:83:e3:6a:e8:20:2a:e8:77:89:fe:81:36:79: 55:f7:3d:a9:c4:6a:b8:8b:b8:ee:cb:fa:1c:5e:b0: c7:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:29:5E:15:3B:10:83:44:62:43:26:83:E0:54:97:36:FB:A3:DB:BE X509v3 Authority Key Identifier: keyid:9E:15:BC:B9:E3:3A:ED:ED:AC:68:0A:C8:C9:81:6E:11:59:05:CA:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F9B3A/7DEAE734F3A311E7B5D09C71C4F9AE02/nhW8ueM67e2saArIyYFuEVkFyiw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nhW8ueM67e2saArIyYFuEVkFyiw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F9B3A/7DEAE734F3A311E7B5D09C71C4F9AE02/nhW8ueM67e2saArIyYFuEVkFyiw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1a:7f:da:2f:a3:97:9a:fc:63:bc:86:1d:97:2d:ea:e2:c8:04: e8:e0:7c:5d:fd:09:11:15:3d:38:2a:c2:11:93:f9:12:9a:a8: 56:a2:25:91:a9:b0:3c:65:35:2a:f6:26:ea:61:d3:af:77:2a: 3f:a0:40:3a:77:bd:7e:b8:9a:22:7d:ec:60:05:16:51:ba:62: e5:fb:27:e5:21:99:85:e8:9b:6d:a4:ca:ea:de:ee:68:f1:00: 25:63:c9:8e:7d:07:ed:a4:f1:e4:e6:3d:c7:5f:40:37:9a:fc: f5:70:89:91:f1:7d:c5:0c:49:57:71:1e:80:99:fd:48:7f:17: 06:d3:77:11:9a:65:04:7d:7d:f3:42:b7:04:92:f7:b6:7c:a4: ad:d1:c6:38:8e:2c:71:fd:8a:5e:77:91:cf:1c:1c:34:9d:87: 76:0f:b7:9a:96:7e:98:38:d0:53:6c:f5:77:e3:cf:b5:eb:74: d7:d7:9a:06:ad:06:79:0c:94:8d:da:37:d8:d7:53:f8:6c:44: 25:14:7b:97:e4:3b:eb:cc:09:24:2f:a1:c8:f5:77:f9:eb:63: 66:8d:40:19:e3:66:64:6f:80:21:b7:12:be:80:f6:95:94:93: 89:c5:7b:5c:13:8b:a6:78:bd:a4:51:21:6f:90:85:f5:eb:5e: 8f:94:eb:6f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFvEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjlCM0ExMTAvBgNVBAUTKDlFMTVCQ0I5RTMzQUVERURBQzY4MEFDOEM5ODE2RTEx NTkwNUNBMkMwHhcNMjUwNjMwMTY0ODQwWhcNMjUwNzA3MTY0ODQwWjAYMRYwFAYD VQQDEw02ODYyYmZlOC1lZGM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvBnHINeIQyD2vknvIIyz4L3h3sb8ZCBVbC99FHilZ2OdYngtPxWt0BRdHihq rljUY0IpfUmu9lyp2AXzaa3lGIcknSloyP0/6518nLTBlpeG4bgddvBDj2jJZ9fW CrEIDTvtvzrB+LJlI4p36tiJyuEE2xR2A6LaZ9QwMLAUiLZr7YByaJlgp/2aGfNT /1KsbmJ62J9Yixprm2AOaTxihlwLrFfpHm0bNg3GYjQj0CgI43Jqe0Lcm95GbEQd OZGbizvfr7hXnQI8/oMe9PBUiq5cTuIO2bQlB4gl09lHPY5vJYPjauggKuh3if6B NnlV9z2pxGq4i7juy/ocXrDHgQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKUpXhU7 EINEYkMmg+BUlzb7o9u+MB8GA1UdIwQYMBaAFJ4VvLnjOu3trGgKyMmBbhFZBcos MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGOUIzQS83REVBRTczNEYz QTMxMUU3QjVEMDlDNzFDNEY5QUUwMi9uaFc4dWVNNjdlMnNhQXJJeVlGdUVWa0Z5 aXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25oVzh1ZU02N2Uyc2FBckl5WUZ1RVZrRnlpdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG OUIzQS83REVBRTczNEYzQTMxMUU3QjVEMDlDNzFDNEY5QUUwMi9uaFc4dWVNNjdl MnNhQXJJeVlGdUVWa0Z5aXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAaf9ovo5ea/GO8hh2XLeriyATo4Hxd/QkRFT04KsIRk/kSmqhWoiWR qbA8ZTUq9ibqYdOvdyo/oEA6d71+uJoifexgBRZRumLl+yflIZmF6JttpMrq3u5o 8QAlY8mOfQftpPHk5j3HX0A3mvz1cImR8X3FDElXcR6Amf1IfxcG03cRmmUEfX3z QrcEkve2fKSt0cY4jixx/Yped5HPHBw0nYd2D7ealn6YONBTbPV348+163TX15oG rQZ5DJSN2jfY11P4bEQlFHuX5DvrzAkkL6HI9Xf562NmjUAZ42Zkb4AhtxK+gPaV lJOJxXtcE4umeL2kUSFvkIX1616PlOtv -----END CERTIFICATE-----Generated at Wed Jul 2 15:56:34 2025 by rpki-client