$ rpki-client -vvf rpki.apnic.net/member_repository/A91810E3/339314C8717D11EE89EF6236C4F9AE02/nberk64z9kYWgi3wP_2Bd2jx6Y8.mft File: nberk64z9kYWgi3wP_2Bd2jx6Y8.mft (raw, json) Hash identifier: THfYEEMRX+W2CAvVLiRt2dIfeBT76G6q3vKOp0X+ZXE= Subject key identifier: EF:0E:19:29:7A:2E:D4:1F:95:A2:E7:97:EF:40:1F:19:B1:61:6E:4F Authority key identifier: 9D:B7:AB:93:AE:33:F6:46:16:82:2D:F0:3F:FD:81:77:68:F1:E9:8F Certificate issuer: /CN=A91810E3/serialNumber=9DB7AB93AE33F64616822DF03FFD817768F1E98F Certificate serial: 0119 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nberk64z9kYWgi3wP_2Bd2jx6Y8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91810E3/339314C8717D11EE89EF6236C4F9AE02/nberk64z9kYWgi3wP_2Bd2jx6Y8.mft Manifest number: 0112 Signing time: Sat 29 Mar 2025 04:21:50 +0000 Manifest this update: Sat 29 Mar 2025 04:21:49 +0000 Manifest next update: Sat 05 Apr 2025 04:21:49 +0000 Files and hashes: 1: nberk64z9kYWgi3wP_2Bd2jx6Y8.crl (hash: nMFQ1Uh1Il+tN5AZaL8jf8EaD0Eyghn2UR8S1RBBRHM=) 2: A56F3A8A718811EEADDA430AC4F9AE02.roa (hash: q1gVEbmNzPAYit/PZzlFgDk+Tc1AUGMImEJ9QqP60MQ=) 3: 497917BA719B11EEA5D8F416C4F9AE02.roa (hash: RXrmTRENl+7Zg6y5wMLjJWSZiSVWcqVyL1CzU9Mm2gA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91810E3/339314C8717D11EE89EF6236C4F9AE02/nberk64z9kYWgi3wP_2Bd2jx6Y8.crl rsync://rpki.apnic.net/member_repository/A91810E3/339314C8717D11EE89EF6236C4F9AE02/nberk64z9kYWgi3wP_2Bd2jx6Y8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nberk64z9kYWgi3wP_2Bd2jx6Y8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Apr 2025 04:21:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 281 (0x119) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91810E3 Validity Not Before: Mar 29 04:21:49 2025 GMT Not After : Apr 5 04:21:49 2025 GMT Subject: CN=67e7755e-ccc5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:f2:c1:90:0c:0d:6d:b9:d1:ca:11:5e:66:57: ec:3f:79:0b:d6:9b:0e:9b:e9:06:32:ad:56:c7:fa: e1:43:e4:8a:c3:57:9c:e9:ce:30:ae:f0:07:ae:ac: 4a:2c:fb:1b:7e:df:a7:01:84:4c:ae:f8:2e:37:66: 7f:a5:b5:27:21:6d:a3:b2:1f:d9:dc:49:ff:73:71: 81:b9:56:97:01:19:c1:3d:f4:e2:77:0b:4d:01:eb: 95:72:db:08:74:ab:5a:8a:81:bb:20:b8:cd:8a:c2: 76:08:c6:d9:ae:da:de:ab:7c:d1:92:1d:fb:7e:c2: c2:bf:09:9e:f1:4a:e5:be:df:76:67:5a:d4:00:3c: ad:ef:13:cf:58:fb:63:27:e6:74:df:8d:76:5b:fa: 38:b1:f3:f8:71:72:3c:df:43:b0:34:d3:c6:21:d5: bb:03:a8:42:13:e2:cd:2e:73:7f:33:67:3a:80:a9: c2:d1:4d:6a:50:fb:48:5a:5b:b7:ab:1e:14:e6:b8: 49:ab:e9:5d:a7:bb:a0:c7:ba:f8:8f:a3:52:3e:41: 8a:56:e7:03:69:75:61:b0:ca:ff:ae:ef:47:04:2c: f5:e6:25:3e:73:53:2f:ff:bf:91:c3:42:39:c9:aa: a4:26:80:56:c1:fc:cb:8c:ce:20:81:99:cd:c4:d9: 44:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:0E:19:29:7A:2E:D4:1F:95:A2:E7:97:EF:40:1F:19:B1:61:6E:4F X509v3 Authority Key Identifier: keyid:9D:B7:AB:93:AE:33:F6:46:16:82:2D:F0:3F:FD:81:77:68:F1:E9:8F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91810E3/339314C8717D11EE89EF6236C4F9AE02/nberk64z9kYWgi3wP_2Bd2jx6Y8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nberk64z9kYWgi3wP_2Bd2jx6Y8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91810E3/339314C8717D11EE89EF6236C4F9AE02/nberk64z9kYWgi3wP_2Bd2jx6Y8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 83:0e:7f:a7:9d:73:52:6d:96:f4:d8:f3:f5:f9:28:28:88:ea: f8:d7:d3:fe:ff:42:3c:3f:56:27:74:b1:0d:56:22:68:7a:a6: 57:61:df:3e:3f:9a:8f:a1:19:a4:ee:3f:11:cd:31:77:e0:0c: 8d:be:ff:0a:f7:b4:1f:a6:28:9b:1e:24:89:4d:1a:17:48:27: 42:07:72:bd:73:3e:a4:5a:a9:6f:8f:9d:dd:19:25:c2:90:fc: 3e:6e:09:9d:74:41:9d:2e:00:16:ed:1e:93:ea:ad:5e:65:d3: ff:db:88:e7:98:a6:7d:07:c2:04:05:2b:ea:ef:b1:ab:df:66: cc:f2:e1:0b:a4:65:28:85:7b:e5:9f:92:89:16:0d:d2:44:f0: 43:ba:17:18:0d:ea:b4:6f:64:17:ed:74:0b:bb:eb:3a:7d:53: c8:17:88:8f:bf:d5:a2:89:51:7a:db:2f:05:e8:4f:96:e0:b5: 5e:e6:d3:d5:fb:5f:23:9c:d4:f0:a4:65:43:4b:5e:de:ff:7d: cc:c5:20:d5:20:f1:79:f7:09:e7:8c:d2:59:16:be:1f:55:c1: dc:1e:fb:68:6d:4b:e9:ee:67:85:e2:cc:0e:45:ea:3e:03:8a: 15:2b:16:6a:2f:f2:75:a5:0b:78:ec:f5:96:6c:9a:23:7b:d9: 89:7b:57:33 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICARkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODEwRTMxMTAvBgNVBAUTKDlEQjdBQjkzQUUzM0Y2NDYxNjgyMkRGMDNGRkQ4MTc3 NjhGMUU5OEYwHhcNMjUwMzI5MDQyMTQ5WhcNMjUwNDA1MDQyMTQ5WjAYMRYwFAYD VQQDEw02N2U3NzU1ZS1jY2M1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApvLBkAwNbbnRyhFeZlfsP3kL1psOm+kGMq1Wx/rhQ+SKw1ec6c4wrvAHrqxK LPsbft+nAYRMrvguN2Z/pbUnIW2jsh/Z3En/c3GBuVaXARnBPfTidwtNAeuVctsI dKtaioG7ILjNisJ2CMbZrtreq3zRkh37fsLCvwme8Urlvt92Z1rUADyt7xPPWPtj J+Z03412W/o4sfP4cXI830OwNNPGIdW7A6hCE+LNLnN/M2c6gKnC0U1qUPtIWlu3 qx4U5rhJq+ldp7ugx7r4j6NSPkGKVucDaXVhsMr/ru9HBCz15iU+c1Mv/7+Rw0I5 yaqkJoBWwfzLjM4ggZnNxNlEdQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO8OGSl6 LtQflaLnl+9AHxmxYW5PMB8GA1UdIwQYMBaAFJ23q5OuM/ZGFoIt8D/9gXdo8emP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MTBFMy8zMzkzMTRDODcx N0QxMUVFODlFRjYyMzZDNEY5QUUwMi9uYmVyazY0ejlrWVdnaTN3UF8yQmQyang2 WTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25iZXJrNjR6OWtZV2dpM3dQXzJCZDJqeDZZOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MTBFMy8zMzkzMTRDODcxN0QxMUVFODlFRjYyMzZDNEY5QUUwMi9uYmVyazY0ejlr WVdnaTN3UF8yQmQyang2WTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCDDn+nnXNSbZb02PP1+SgoiOr419P+/0I8P1YndLENViJoeqZXYd8+ P5qPoRmk7j8RzTF34AyNvv8K97QfpiibHiSJTRoXSCdCB3K9cz6kWqlvj53dGSXC kPw+bgmddEGdLgAW7R6T6q1eZdP/24jnmKZ9B8IEBSvq77Gr32bM8uELpGUohXvl n5KJFg3SRPBDuhcYDeq0b2QX7XQLu+s6fVPIF4iPv9WiiVF62y8F6E+W4LVe5tPV +18jnNTwpGVDS17e/33MxSDVIPF59wnnjNJZFr4fVcHcHvtobUvp7meF4swOReo+ A4oVKxZqL/J1pQt47PWWbJoje9mJe1cz -----END CERTIFICATE-----Generated at Fri Apr 4 18:37:21 2025 by rpki-client