$ rpki-client -vvf rpki.apnic.net/member_repository/A911BCDD/348AD8AC861311EEA8C95042C4F9AE02/nkKx9pFGDihG-nHwbcib8sdB25o.mft File: nkKx9pFGDihG-nHwbcib8sdB25o.mft (raw, json) Hash identifier: /K9ob/yhT+AVTfoh66R2xgDfAN7uiiP5lXovDHob5Eg= Subject key identifier: 46:6D:7B:50:83:FC:52:A8:95:B5:7F:50:2C:67:4D:B9:E9:63:CD:1A Authority key identifier: 9E:42:B1:F6:91:46:0E:28:46:FA:71:F0:6D:C8:9B:F2:C7:41:DB:9A Certificate issuer: /CN=A911BCDD/serialNumber=9E42B1F691460E2846FA71F06DC89BF2C741DB9A Certificate serial: 0104 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nkKx9pFGDihG-nHwbcib8sdB25o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911BCDD/348AD8AC861311EEA8C95042C4F9AE02/nkKx9pFGDihG-nHwbcib8sdB25o.mft Manifest number: 0101 Signing time: Sat 29 Mar 2025 04:30:23 +0000 Manifest this update: Sat 29 Mar 2025 04:30:23 +0000 Manifest next update: Sat 05 Apr 2025 04:30:23 +0000 Files and hashes: 1: nkKx9pFGDihG-nHwbcib8sdB25o.crl (hash: X/ALqWO5hEEZImE55HWNQ/bv5W6MQIrLjlKCbOGS+Gw=) 2: 5ED417AE869011EEA9011A36C4F9AE02.roa (hash: secqQJuczQrOBoLhJh1bWX70I59NSlP/4Mk301elvvU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911BCDD/348AD8AC861311EEA8C95042C4F9AE02/nkKx9pFGDihG-nHwbcib8sdB25o.crl rsync://rpki.apnic.net/member_repository/A911BCDD/348AD8AC861311EEA8C95042C4F9AE02/nkKx9pFGDihG-nHwbcib8sdB25o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nkKx9pFGDihG-nHwbcib8sdB25o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Apr 2025 04:30:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 260 (0x104) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911BCDD Validity Not Before: Mar 29 04:30:23 2025 GMT Not After : Apr 5 04:30:23 2025 GMT Subject: CN=67e7775f-cc06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:0f:3c:3e:63:a7:e8:dc:ba:ff:d3:23:6e:3e: 71:61:e8:3b:45:45:e7:71:be:6a:81:17:b2:32:3f: a6:b6:fc:d5:22:d8:16:3e:30:74:f7:59:56:06:9e: 37:9d:b7:9e:44:8c:69:e1:4d:78:ca:28:1d:82:92: 45:18:79:3b:9b:a8:7e:2d:dc:44:4a:12:6e:f2:00: 78:5a:2f:92:a7:26:52:89:5b:b4:3d:8d:de:e4:0a: 40:92:e0:4f:aa:09:a8:1a:c9:da:98:a8:ae:e3:25: e2:2c:43:07:03:5a:a9:be:3e:7e:c1:02:dd:8c:6e: 5d:03:73:77:dc:c2:0b:6f:89:b2:77:ba:da:9d:3e: f7:2c:b8:de:da:e0:2f:39:18:23:df:35:b6:78:a2: 9d:e6:90:25:78:0d:3c:21:c1:5c:45:29:cf:f1:08: f1:32:5a:a5:1f:ef:0f:86:80:3f:f1:0d:bd:41:5f: 8e:b6:3a:70:e2:58:6a:d4:47:5a:de:53:8e:b2:cb: 20:88:05:e2:63:9b:25:b9:c3:42:7c:e9:f0:7a:99: b4:f5:42:ce:2f:79:23:6b:26:28:ef:2b:b4:fa:08: ad:e8:1f:11:d0:f8:07:1c:2d:98:44:fd:6c:44:5d: 0b:5a:44:15:9b:b9:23:0a:3a:87:d5:f4:67:f0:73: 15:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:6D:7B:50:83:FC:52:A8:95:B5:7F:50:2C:67:4D:B9:E9:63:CD:1A X509v3 Authority Key Identifier: keyid:9E:42:B1:F6:91:46:0E:28:46:FA:71:F0:6D:C8:9B:F2:C7:41:DB:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911BCDD/348AD8AC861311EEA8C95042C4F9AE02/nkKx9pFGDihG-nHwbcib8sdB25o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nkKx9pFGDihG-nHwbcib8sdB25o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911BCDD/348AD8AC861311EEA8C95042C4F9AE02/nkKx9pFGDihG-nHwbcib8sdB25o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 90:4f:bd:9d:d9:ff:b8:db:22:9c:fa:dc:bf:30:69:e5:83:a2: da:5b:13:a4:2e:e5:27:68:58:ad:2c:0b:e4:9c:ac:05:3b:2a: c6:5a:24:2f:af:6b:c9:08:97:f7:c7:b2:7b:45:da:69:58:26: cf:a8:a6:12:66:73:dc:3c:95:b6:c2:75:34:fa:1a:82:4c:ef: bc:5a:dd:5f:6c:99:5c:7b:48:2d:14:df:a3:4a:e1:36:1e:36: 4b:85:99:45:5f:eb:6c:58:a7:a0:4a:03:0b:3e:58:a8:e8:52: 94:26:01:89:d5:3f:7d:75:ea:94:c0:f3:04:95:29:d8:3e:d3: 9b:91:b8:22:7f:e0:7c:e3:81:09:71:d8:4e:9a:cb:b1:26:f6: b4:47:eb:d1:90:49:02:e8:bf:4b:d5:f1:99:36:e9:05:2c:69: 13:af:39:b0:08:ac:94:e0:e3:0f:42:03:f6:71:be:de:02:5f: 50:4c:35:1b:ef:7b:47:bf:a1:8a:48:6f:62:60:df:c2:c1:89: 8f:09:31:52:92:4f:cd:d3:a0:fb:2a:30:e5:22:9c:8b:8a:0a: 6e:64:52:96:fb:05:77:2f:3a:91:ab:44:55:02:ef:89:94:16: 20:84:09:8b:06:12:89:b8:03:b3:60:99:10:ce:f2:46:53:cb: cc:fa:ad:f6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUJDREQxMTAvBgNVBAUTKDlFNDJCMUY2OTE0NjBFMjg0NkZBNzFGMDZEQzg5QkYy Qzc0MURCOUEwHhcNMjUwMzI5MDQzMDIzWhcNMjUwNDA1MDQzMDIzWjAYMRYwFAYD VQQDEw02N2U3Nzc1Zi1jYzA2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzw88PmOn6Ny6/9Mjbj5xYeg7RUXncb5qgReyMj+mtvzVItgWPjB091lWBp43 nbeeRIxp4U14yigdgpJFGHk7m6h+LdxEShJu8gB4Wi+SpyZSiVu0PY3e5ApAkuBP qgmoGsnamKiu4yXiLEMHA1qpvj5+wQLdjG5dA3N33MILb4myd7ranT73LLje2uAv ORgj3zW2eKKd5pAleA08IcFcRSnP8QjxMlqlH+8PhoA/8Q29QV+Otjpw4lhq1Eda 3lOOsssgiAXiY5slucNCfOnwepm09ULOL3kjayYo7yu0+git6B8R0PgHHC2YRP1s RF0LWkQVm7kjCjqH1fRn8HMVdwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEZte1CD /FKolbV/UCxnTbnpY80aMB8GA1UdIwQYMBaAFJ5CsfaRRg4oRvpx8G3Im/LHQdua MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQkNERC8zNDhBRDhBQzg2 MTMxMUVFQThDOTUwNDJDNEY5QUUwMi9ua0t4OXBGR0RpaEctbkh3YmNpYjhzZEIy NW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25rS3g5cEZHRGloRy1uSHdiY2liOHNkQjI1by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QkNERC8zNDhBRDhBQzg2MTMxMUVFQThDOTUwNDJDNEY5QUUwMi9ua0t4OXBGR0Rp aEctbkh3YmNpYjhzZEIyNW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCQT72d2f+42yKc+ty/MGnlg6LaWxOkLuUnaFitLAvknKwFOyrGWiQv r2vJCJf3x7J7RdppWCbPqKYSZnPcPJW2wnU0+hqCTO+8Wt1fbJlce0gtFN+jSuE2 HjZLhZlFX+tsWKegSgMLPlio6FKUJgGJ1T99deqUwPMElSnYPtObkbgif+B844EJ cdhOmsuxJva0R+vRkEkC6L9L1fGZNukFLGkTrzmwCKyU4OMPQgP2cb7eAl9QTDUb 73tHv6GKSG9iYN/CwYmPCTFSkk/N06D7KjDlIpyLigpuZFKW+wV3LzqRq0RVAu+J lBYghAmLBhKJuAOzYJkQzvJGU8vM+q32 -----END CERTIFICATE-----Generated at Fri Apr 4 21:25:33 2025 by rpki-client