$ rpki-client -vvf rpki.apnic.net/member_repository/A91925D2/6DF602D078BF11EE93FFB764C4F9AE02/NFF8wp90Fp_XNqLCQGGfizMP3Z0.mft File: NFF8wp90Fp_XNqLCQGGfizMP3Z0.mft (raw, json) Hash identifier: nNXUR0xKQe4DBnsKrbsc37bscGQWjFV/3XPF4U6eDJo= Subject key identifier: 5A:FA:D3:85:50:CD:AB:93:29:EB:D9:BB:17:A2:B6:7C:74:1C:68:87 Authority key identifier: 34:51:7C:C2:9F:74:16:9F:D7:36:A2:C2:40:61:9F:8B:33:0F:DD:9D Certificate issuer: /CN=A91925D2/serialNumber=34517CC29F74169FD736A2C240619F8B330FDD9D Certificate serial: 0110 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NFF8wp90Fp_XNqLCQGGfizMP3Z0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91925D2/6DF602D078BF11EE93FFB764C4F9AE02/NFF8wp90Fp_XNqLCQGGfizMP3Z0.mft Manifest number: 010E Signing time: Fri 11 Apr 2025 04:11:15 +0000 Manifest this update: Fri 11 Apr 2025 04:11:15 +0000 Manifest next update: Fri 18 Apr 2025 04:11:15 +0000 Files and hashes: 1: NFF8wp90Fp_XNqLCQGGfizMP3Z0.crl (hash: rghAGhcRIBse4JEl0Ey5zvX2+r+2XgAb1KeHm5GFPRY=) 2: 2C4CD10078C011EE90D36F13C4F9AE02.roa (hash: +7GFnP4vXiPay7vN6IrJFOHX1SU8MW5paTRJSWnqDFI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91925D2/6DF602D078BF11EE93FFB764C4F9AE02/NFF8wp90Fp_XNqLCQGGfizMP3Z0.crl rsync://rpki.apnic.net/member_repository/A91925D2/6DF602D078BF11EE93FFB764C4F9AE02/NFF8wp90Fp_XNqLCQGGfizMP3Z0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NFF8wp90Fp_XNqLCQGGfizMP3Z0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Apr 2025 04:11:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 272 (0x110) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91925D2, serialNumber=34517CC29F74169FD736A2C240619F8B330FDD9D Validity Not Before: Apr 11 04:11:15 2025 GMT Not After : Apr 18 04:11:15 2025 GMT Subject: CN=67f89663-4673 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:ba:4d:c6:f8:b8:88:31:cc:f7:6e:a5:06:14: f4:94:06:55:ba:6d:9a:5a:fc:a3:44:1f:56:eb:16: d0:92:7f:12:95:f4:4d:0f:12:5b:e1:86:4d:6a:e2: 51:a2:a1:99:6c:ed:84:2d:14:cb:18:67:74:7b:9c: 40:90:79:2f:c9:e1:5d:f6:07:aa:6f:18:1c:e6:21: ae:cd:83:d3:32:c5:c0:5d:42:ac:61:ff:ef:90:bb: 63:3e:46:36:b2:64:e9:a4:5c:63:f7:97:11:c7:11: ce:95:aa:97:dc:04:46:9e:3d:98:f5:cf:af:78:be: 41:e8:39:0f:43:53:40:51:4d:23:d7:ed:cf:b1:ae: 7f:a4:10:9a:56:77:c5:1c:e5:53:d5:26:56:cd:64: 9e:39:82:5a:b3:f8:9b:53:8d:ca:2a:09:01:d4:5c: af:a7:47:e4:96:0f:dc:e1:84:f1:30:83:71:9b:87: 57:21:d1:a5:f6:fb:a2:01:d8:6c:38:1b:29:3a:d4: 08:4a:a2:44:76:21:2b:53:3a:9a:fd:f4:2b:a4:8b: 67:f5:64:10:ef:7b:4d:dc:fd:94:4b:81:94:1b:bb: 31:b3:eb:d2:ce:53:28:35:e7:32:81:14:b8:6b:1d: eb:4f:54:79:54:13:46:bc:95:24:8c:ab:f5:b9:aa: a4:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:FA:D3:85:50:CD:AB:93:29:EB:D9:BB:17:A2:B6:7C:74:1C:68:87 X509v3 Authority Key Identifier: keyid:34:51:7C:C2:9F:74:16:9F:D7:36:A2:C2:40:61:9F:8B:33:0F:DD:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91925D2/6DF602D078BF11EE93FFB764C4F9AE02/NFF8wp90Fp_XNqLCQGGfizMP3Z0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NFF8wp90Fp_XNqLCQGGfizMP3Z0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91925D2/6DF602D078BF11EE93FFB764C4F9AE02/NFF8wp90Fp_XNqLCQGGfizMP3Z0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 02:49:9c:7e:13:da:03:cb:b4:cb:c3:59:17:b5:93:71:b4:85: a5:e5:78:ce:04:96:57:b5:74:54:7b:94:63:91:5d:69:6c:4f: d1:8d:8f:95:ce:f4:13:ee:a2:ce:d7:a9:3b:e9:50:91:72:e1: dd:c1:b3:ac:c0:4f:73:ce:19:2a:b2:70:25:89:77:c8:a5:16: 52:97:2a:b3:c7:12:7f:fa:93:c7:6e:7b:c4:c6:ac:a2:d5:00: 74:32:c5:ba:a7:33:a6:31:75:64:15:f0:84:75:e1:23:96:92: f3:23:58:a3:9a:f1:d6:e1:89:c1:40:b9:3d:dc:a2:e6:43:a0: 7b:cb:4e:37:e5:e0:36:21:c8:b3:74:55:f4:ee:f1:a7:07:34: 69:52:6f:51:05:df:e0:d5:b8:9c:22:d8:c7:d1:6a:d1:fb:c3: 90:ec:d2:2f:1d:ed:33:9f:d4:f7:08:37:75:b8:36:3e:c0:76: fe:70:7d:a7:06:2b:12:fc:2f:b1:d2:3a:c3:f9:29:f2:e0:4f: e6:b3:05:92:1e:2b:ff:d2:dd:ea:61:ed:1c:cb:cb:3e:eb:c6: 8f:55:2f:f2:62:47:a5:69:79:a6:67:80:39:5f:7a:39:fa:c0: c2:bc:f7:6d:a3:48:e2:c8:95:26:bd:b2:89:eb:81:b8:a7:f0: 91:99:68:21 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICARAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTI1RDIxMTAvBgNVBAUTKDM0NTE3Q0MyOUY3NDE2OUZENzM2QTJDMjQwNjE5RjhC MzMwRkREOUQwHhcNMjUwNDExMDQxMTE1WhcNMjUwNDE4MDQxMTE1WjAYMRYwFAYD VQQDEw02N2Y4OTY2My00NjczMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3LpNxvi4iDHM926lBhT0lAZVum2aWvyjRB9W6xbQkn8SlfRNDxJb4YZNauJR oqGZbO2ELRTLGGd0e5xAkHkvyeFd9geqbxgc5iGuzYPTMsXAXUKsYf/vkLtjPkY2 smTppFxj95cRxxHOlaqX3ARGnj2Y9c+veL5B6DkPQ1NAUU0j1+3Psa5/pBCaVnfF HOVT1SZWzWSeOYJas/ibU43KKgkB1Fyvp0fklg/c4YTxMINxm4dXIdGl9vuiAdhs OBspOtQISqJEdiErUzqa/fQrpItn9WQQ73tN3P2US4GUG7sxs+vSzlMoNecygRS4 ax3rT1R5VBNGvJUkjKv1uaqk8QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFr604VQ zauTKevZuxeitnx0HGiHMB8GA1UdIwQYMBaAFDRRfMKfdBaf1zaiwkBhn4szD92d MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MjVEMi82REY2MDJEMDc4 QkYxMUVFOTNGRkI3NjRDNEY5QUUwMi9ORkY4d3A5MEZwX1hOcUxDUUdHZml6TVAz WjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05GRjh3cDkwRnBfWE5xTENRR0dmaXpNUDNaMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MjVEMi82REY2MDJEMDc4QkYxMUVFOTNGRkI3NjRDNEY5QUUwMi9ORkY4d3A5MEZw X1hOcUxDUUdHZml6TVAzWjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQACSZx+E9oDy7TLw1kXtZNxtIWl5XjOBJZXtXRUe5RjkV1pbE/RjY+V zvQT7qLO16k76VCRcuHdwbOswE9zzhkqsnAliXfIpRZSlyqzxxJ/+pPHbnvExqyi 1QB0MsW6pzOmMXVkFfCEdeEjlpLzI1ijmvHW4YnBQLk93KLmQ6B7y0435eA2Iciz dFX07vGnBzRpUm9RBd/g1bicItjH0WrR+8OQ7NIvHe0zn9T3CDd1uDY+wHb+cH2n BisS/C+x0jrD+Sny4E/mswWSHiv/0t3qYe0cy8s+68aPVS/yYkelaXmmZ4A5X3o5 +sDCvPdto0jiyJUmvbKJ64G4p/CRmWgh -----END CERTIFICATE-----Generated at Sat Apr 12 15:03:34 2025 by rpki-client