$ rpki-client -vvf rpki.apnic.net/member_repository/A91833A5/CB549D2C76C911ED8EDF6E45C4F9AE02/NRzu3Df4BUcvG2G6xkP-VO4BiWs.mft File: NRzu3Df4BUcvG2G6xkP-VO4BiWs.mft (raw, json) Hash identifier: wpAF1OvqtdZZlfpDFLkfc5df8E/65B5uGRmxvc0oajA= Subject key identifier: ED:3D:85:79:28:2B:4F:1D:22:EB:0E:D3:7C:23:C9:39:01:1E:61:7A Authority key identifier: 35:1C:EE:DC:37:F8:05:47:2F:1B:61:BA:C6:43:FE:54:EE:01:89:6B Certificate issuer: /CN=A91833A5/serialNumber=351CEEDC37F805472F1B61BAC643FE54EE01896B Certificate serial: 01BE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NRzu3Df4BUcvG2G6xkP-VO4BiWs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91833A5/CB549D2C76C911ED8EDF6E45C4F9AE02/NRzu3Df4BUcvG2G6xkP-VO4BiWs.mft Manifest number: 01BB Signing time: Mon 21 Apr 2025 02:04:11 +0000 Manifest this update: Mon 21 Apr 2025 02:04:10 +0000 Manifest next update: Mon 28 Apr 2025 02:04:10 +0000 Files and hashes: 1: NRzu3Df4BUcvG2G6xkP-VO4BiWs.crl (hash: /QBEq2JoPlBQxUE2Y/jNKExPy0AA5sgeV36UksEpgVs=) 2: 9FD3C9A876CD11ED8D13115FC4F9AE02.roa (hash: JQ73d6vfSvqidv93F8yaMEYwVmH6Qg0KkHIcHOt8o0s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91833A5/CB549D2C76C911ED8EDF6E45C4F9AE02/NRzu3Df4BUcvG2G6xkP-VO4BiWs.crl rsync://rpki.apnic.net/member_repository/A91833A5/CB549D2C76C911ED8EDF6E45C4F9AE02/NRzu3Df4BUcvG2G6xkP-VO4BiWs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NRzu3Df4BUcvG2G6xkP-VO4BiWs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 02:04:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 446 (0x1be) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91833A5, serialNumber=351CEEDC37F805472F1B61BAC643FE54EE01896B Validity Not Before: Apr 21 02:04:10 2025 GMT Not After : Apr 28 02:04:10 2025 GMT Subject: CN=6805a79b-5079 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:65:82:7c:65:b6:79:06:d5:ea:49:6c:f3:2e: e5:ba:a1:6a:b0:49:9f:db:71:bb:a2:94:d5:07:f5: d5:f6:fc:95:70:67:2c:83:68:b8:da:48:8b:a4:e4: f0:fa:39:0a:6b:bf:75:bb:a0:2f:63:76:85:77:63: c2:79:55:7b:aa:bb:72:fb:a9:2e:14:4a:e8:5c:62: 9e:24:94:43:d5:90:5a:1a:28:69:2c:03:82:67:a6: 32:4e:e2:34:f8:42:22:0d:ce:19:7b:c5:e1:52:e1: af:78:e2:fc:72:8e:36:16:b5:ed:f3:05:cb:0a:8f: a5:d0:0f:eb:04:f1:42:a7:b0:c2:93:eb:11:66:26: 8d:6f:67:c8:31:c0:c3:c5:cd:a3:8c:c1:6c:a9:7f: d4:13:52:bc:0d:8f:bc:2f:b3:2e:66:e0:c7:71:57: 00:66:eb:71:4e:49:25:9d:ad:97:12:b6:f8:85:11: 7e:2a:75:31:43:73:84:0a:9c:7e:f7:76:5f:91:6a: 10:7d:6f:45:bd:42:59:64:8a:e2:b8:06:2a:ca:61: be:9b:45:eb:4c:7a:69:bb:a5:19:22:0c:7a:74:cf: e6:19:a1:8d:3b:b2:c2:e2:02:f6:22:36:da:03:6f: ab:69:29:b9:04:be:e7:f5:88:2f:82:59:03:f8:22: 10:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:3D:85:79:28:2B:4F:1D:22:EB:0E:D3:7C:23:C9:39:01:1E:61:7A X509v3 Authority Key Identifier: keyid:35:1C:EE:DC:37:F8:05:47:2F:1B:61:BA:C6:43:FE:54:EE:01:89:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91833A5/CB549D2C76C911ED8EDF6E45C4F9AE02/NRzu3Df4BUcvG2G6xkP-VO4BiWs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NRzu3Df4BUcvG2G6xkP-VO4BiWs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91833A5/CB549D2C76C911ED8EDF6E45C4F9AE02/NRzu3Df4BUcvG2G6xkP-VO4BiWs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 53:be:15:21:68:9a:13:7a:1c:39:bd:82:ea:4e:08:44:5e:30: 8d:b5:5c:ea:2c:7e:04:dd:c5:e8:9e:3c:69:f4:36:54:63:bf: cc:ad:b9:ce:0a:a4:94:aa:04:e0:69:37:b4:48:bb:95:3a:4e: 01:c4:6c:a2:2b:c5:47:da:9e:22:cc:c3:fc:10:32:38:10:55: a1:b9:78:0b:8f:41:d3:71:b5:d0:24:a4:cc:5d:34:33:56:f6: 84:94:4c:1a:41:01:33:18:6a:bf:27:c4:cc:37:24:79:4d:aa: c4:38:24:bb:8e:86:3f:2f:77:11:80:5d:38:a9:f7:d5:5a:a7: e5:97:61:bd:f0:a5:68:59:bd:df:b9:c6:db:c9:3f:6c:fb:54: 66:bf:c3:3c:79:79:50:7f:8d:84:0a:13:ce:a8:e4:25:ce:1d: c0:b2:7b:a3:78:df:4d:91:88:d0:16:ee:b3:38:48:4d:77:15: 18:96:da:32:bc:7c:2f:ba:d5:b9:30:07:64:83:3e:16:34:00: 7a:a3:e1:dd:ca:b5:7e:91:61:fc:7b:b5:8a:95:dc:ef:41:f3: c6:fe:15:49:8e:d0:7d:25:de:be:d7:3f:28:11:54:35:b7:68: 7b:c6:d7:33:7b:85:c6:c4:58:61:ef:03:fd:3f:88:11:27:0f: 62:2f:2b:13 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAb4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODMzQTUxMTAvBgNVBAUTKDM1MUNFRURDMzdGODA1NDcyRjFCNjFCQUM2NDNGRTU0 RUUwMTg5NkIwHhcNMjUwNDIxMDIwNDEwWhcNMjUwNDI4MDIwNDEwWjAYMRYwFAYD VQQDEw02ODA1YTc5Yi01MDc5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwmWCfGW2eQbV6kls8y7luqFqsEmf23G7opTVB/XV9vyVcGcsg2i42kiLpOTw +jkKa791u6AvY3aFd2PCeVV7qrty+6kuFEroXGKeJJRD1ZBaGihpLAOCZ6YyTuI0 +EIiDc4Ze8XhUuGveOL8co42FrXt8wXLCo+l0A/rBPFCp7DCk+sRZiaNb2fIMcDD xc2jjMFsqX/UE1K8DY+8L7MuZuDHcVcAZutxTkklna2XErb4hRF+KnUxQ3OECpx+ 93ZfkWoQfW9FvUJZZIriuAYqymG+m0XrTHppu6UZIgx6dM/mGaGNO7LC4gL2Ijba A2+raSm5BL7n9YgvglkD+CIQIwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO09hXko K08dIusO03wjyTkBHmF6MB8GA1UdIwQYMBaAFDUc7tw3+AVHLxthusZD/lTuAYlr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MzNBNS9DQjU0OUQyQzc2 QzkxMUVEOEVERjZFNDVDNEY5QUUwMi9OUnp1M0RmNEJVY3ZHMkc2eGtQLVZPNEJp V3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05SenUzRGY0QlVjdkcyRzZ4a1AtVk80QmlXcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MzNBNS9DQjU0OUQyQzc2QzkxMUVEOEVERjZFNDVDNEY5QUUwMi9OUnp1M0RmNEJV Y3ZHMkc2eGtQLVZPNEJpV3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBTvhUhaJoTehw5vYLqTghEXjCNtVzqLH4E3cXonjxp9DZUY7/MrbnO CqSUqgTgaTe0SLuVOk4BxGyiK8VH2p4izMP8EDI4EFWhuXgLj0HTcbXQJKTMXTQz VvaElEwaQQEzGGq/J8TMNyR5TarEOCS7joY/L3cRgF04qffVWqfll2G98KVoWb3f ucbbyT9s+1Rmv8M8eXlQf42EChPOqOQlzh3AsnujeN9NkYjQFu6zOEhNdxUYltoy vHwvutW5MAdkgz4WNAB6o+HdyrV+kWH8e7WKldzvQfPG/hVJjtB9Jd6+1z8oEVQ1 t2h7xtcze4XGxFhh7wP9P4gRJw9iLysT -----END CERTIFICATE-----Generated at Tue Apr 22 23:11:54 2025 by rpki-client