$ rpki-client -vvf rpki.apnic.net/member_repository/A91983A2/61C1A5786DBA11EA9563CB65C4F9AE02/NvLl_YZ1AzcwumM6RQCvVQIFnww.mft File: NvLl_YZ1AzcwumM6RQCvVQIFnww.mft (raw, json) Hash identifier: QFO3OJPlrioBE9uZQf5kK901Mj/mI7m+diDYdofOM9k= Subject key identifier: 4A:C5:60:B4:1E:3E:92:7E:BC:F7:CB:D9:03:5D:89:7E:4E:A1:15:2B Authority key identifier: 36:F2:E5:FD:86:75:03:37:30:BA:63:3A:45:00:AF:55:02:05:9F:0C Certificate issuer: /CN=A91983A2/serialNumber=36F2E5FD8675033730BA633A4500AF5502059F0C Certificate serial: 0A12 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NvLl_YZ1AzcwumM6RQCvVQIFnww.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91983A2/61C1A5786DBA11EA9563CB65C4F9AE02/NvLl_YZ1AzcwumM6RQCvVQIFnww.mft Manifest number: 0A0D Signing time: Fri 04 Apr 2025 19:58:41 +0000 Manifest this update: Fri 04 Apr 2025 19:58:40 +0000 Manifest next update: Fri 11 Apr 2025 19:58:40 +0000 Files and hashes: 1: NvLl_YZ1AzcwumM6RQCvVQIFnww.crl (hash: E/uauAyCr1T3A8Gh2Ju2OqAxir/knPpepvOULop6gRk=) 2: 57DF94FA6DBC11EAB10A1F6CC4F9AE02.roa (hash: 8IuCCJrlkn8DX5/stJkD0in4BPYiGVJv0wrZdIEdC4Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91983A2/61C1A5786DBA11EA9563CB65C4F9AE02/NvLl_YZ1AzcwumM6RQCvVQIFnww.crl rsync://rpki.apnic.net/member_repository/A91983A2/61C1A5786DBA11EA9563CB65C4F9AE02/NvLl_YZ1AzcwumM6RQCvVQIFnww.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NvLl_YZ1AzcwumM6RQCvVQIFnww.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 19:58:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2578 (0xa12) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91983A2 Validity Not Before: Apr 4 19:58:40 2025 GMT Not After : Apr 11 19:58:40 2025 GMT Subject: CN=67f039f0-5e2e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:d3:6a:00:ea:af:55:d1:89:01:40:cb:3e:ed: 22:ab:36:f2:38:ac:64:89:6f:aa:c6:92:dd:de:16: d2:d4:8f:0f:e1:55:de:0d:cd:77:a6:9c:b8:6e:3d: 86:8e:d5:1c:96:25:25:58:8b:f7:fe:75:6c:4c:4e: bd:20:43:71:73:cf:a0:0f:96:b7:e6:17:3e:0a:6f: 6d:73:b1:95:b5:a4:d3:05:29:07:dc:8e:4e:6c:f6: 8d:00:a4:4f:3e:25:46:a6:e9:6f:74:df:0c:12:f6: 55:5b:d0:e9:b5:56:62:10:d9:fe:43:18:16:5f:75: 89:a4:ae:4b:ed:15:81:7a:eb:86:b4:4b:78:e2:7e: 83:f0:72:d9:43:a3:4d:61:57:39:79:d2:7d:77:be: d9:bd:35:ad:2c:69:70:5b:cb:c0:49:e6:1c:1a:f8: b2:e8:87:46:1a:d9:e4:60:18:a0:5f:5c:80:51:90: 8c:8b:e4:89:58:5a:2d:cd:75:a7:1e:0b:ee:e4:f1: a3:9b:62:8c:f1:b8:db:92:21:7a:1c:6d:8f:ba:7a: 0e:ef:52:f2:a8:03:22:cf:33:e5:88:ad:45:75:d8: 60:83:24:24:2f:83:09:4d:67:88:b2:a5:a6:62:7b: 14:7a:34:3c:6a:3e:0a:ed:6b:ad:6c:30:e4:c2:b8: 7b:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:C5:60:B4:1E:3E:92:7E:BC:F7:CB:D9:03:5D:89:7E:4E:A1:15:2B X509v3 Authority Key Identifier: keyid:36:F2:E5:FD:86:75:03:37:30:BA:63:3A:45:00:AF:55:02:05:9F:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91983A2/61C1A5786DBA11EA9563CB65C4F9AE02/NvLl_YZ1AzcwumM6RQCvVQIFnww.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NvLl_YZ1AzcwumM6RQCvVQIFnww.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91983A2/61C1A5786DBA11EA9563CB65C4F9AE02/NvLl_YZ1AzcwumM6RQCvVQIFnww.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 25:49:39:44:d1:fb:5a:c3:60:e8:fb:f7:18:2e:26:12:2a:7c: ad:0f:66:c5:e5:98:ab:87:2b:65:79:dd:99:9f:04:9a:4d:1f: 11:34:6d:7e:c1:d4:e5:af:d1:74:0f:4b:13:f7:00:66:6e:13: ba:9e:06:2e:43:9f:80:0b:6b:04:2c:1b:50:a7:57:38:f0:22: df:0c:ac:1a:21:f4:8e:2f:db:52:80:74:f3:96:d9:dc:0a:42: ab:34:5f:d6:5c:dd:93:7b:d2:10:d0:4c:29:fe:fb:0d:fe:e8: d7:7f:3a:0b:b2:83:c7:39:7e:0c:0e:e4:4b:fc:3c:24:6f:35: a3:a2:f1:5d:57:81:8c:00:63:c0:9a:79:c3:0d:f6:d4:1c:d3: 98:73:5c:9d:8e:34:52:dd:a0:32:92:e4:c2:73:13:d6:f0:a5: 39:ba:f9:a6:85:31:ff:28:b0:91:71:bf:14:cf:be:79:ee:1e: f8:7f:6f:ed:d0:a0:43:86:6d:e9:de:13:cc:20:f7:c2:8c:98: dd:f9:3f:53:cb:0e:97:9e:04:61:bb:cd:8e:dd:ae:26:09:55: 64:5d:69:15:56:37:a9:8b:6d:48:d3:2e:0d:a0:a1:0b:0e:9a: 52:a7:a6:af:1e:9c:d2:7b:bf:5b:e4:8f:a2:30:17:13:2f:ba: fb:44:ea:d2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICChIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTgzQTIxMTAvBgNVBAUTKDM2RjJFNUZEODY3NTAzMzczMEJBNjMzQTQ1MDBBRjU1 MDIwNTlGMEMwHhcNMjUwNDA0MTk1ODQwWhcNMjUwNDExMTk1ODQwWjAYMRYwFAYD VQQDEw02N2YwMzlmMC01ZTJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtdNqAOqvVdGJAUDLPu0iqzbyOKxkiW+qxpLd3hbS1I8P4VXeDc13ppy4bj2G jtUcliUlWIv3/nVsTE69IENxc8+gD5a35hc+Cm9tc7GVtaTTBSkH3I5ObPaNAKRP PiVGpulvdN8MEvZVW9DptVZiENn+QxgWX3WJpK5L7RWBeuuGtEt44n6D8HLZQ6NN YVc5edJ9d77ZvTWtLGlwW8vASeYcGviy6IdGGtnkYBigX1yAUZCMi+SJWFotzXWn Hgvu5PGjm2KM8bjbkiF6HG2PunoO71LyqAMizzPliK1FddhggyQkL4MJTWeIsqWm YnsUejQ8aj4K7WutbDDkwrh7sQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFErFYLQe PpJ+vPfL2QNdiX5OoRUrMB8GA1UdIwQYMBaAFDby5f2GdQM3MLpjOkUAr1UCBZ8M MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5ODNBMi82MUMxQTU3ODZE QkExMUVBOTU2M0NCNjVDNEY5QUUwMi9OdkxsX1laMUF6Y3d1bU02UlFDdlZRSUZu d3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL052TGxfWVoxQXpjd3VtTTZSUUN2VlFJRm53dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 ODNBMi82MUMxQTU3ODZEQkExMUVBOTU2M0NCNjVDNEY5QUUwMi9OdkxsX1laMUF6 Y3d1bU02UlFDdlZRSUZud3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAlSTlE0ftaw2Do+/cYLiYSKnytD2bF5Zirhytled2ZnwSaTR8RNG1+ wdTlr9F0D0sT9wBmbhO6ngYuQ5+AC2sELBtQp1c48CLfDKwaIfSOL9tSgHTzltnc CkKrNF/WXN2Te9IQ0Ewp/vsN/ujXfzoLsoPHOX4MDuRL/DwkbzWjovFdV4GMAGPA mnnDDfbUHNOYc1ydjjRS3aAykuTCcxPW8KU5uvmmhTH/KLCRcb8Uz7557h74f2/t 0KBDhm3p3hPMIPfCjJjd+T9Tyw6XngRhu82O3a4mCVVkXWkVVjepi21I0y4NoKEL DppSp6avHpzSe79b5I+iMBcTL7r7ROrS -----END CERTIFICATE-----Generated at Sat Apr 5 12:37:21 2025 by rpki-client