$ rpki-client -vvf rpki.apnic.net/member_repository/A919D656/93CB77AE6ACB11ED9B633B39C4F9AE02/Nhu6lAj6GbXpfYLN2_-y55u7oz8.mft File: Nhu6lAj6GbXpfYLN2_-y55u7oz8.mft (raw, json) Hash identifier: R2njX6XM2pK2pf1pKbHP/J//mQLgGpkhs45/dRNhCAI= Subject key identifier: FB:DE:12:7F:71:42:57:F7:D3:44:6D:69:32:D1:A4:6D:A1:90:1E:86 Authority key identifier: 36:1B:BA:94:08:FA:19:B5:E9:7D:82:CD:DB:FF:B2:E7:9B:BB:A3:3F Certificate issuer: /CN=A919D656/serialNumber=361BBA9408FA19B5E97D82CDDBFFB2E79BBBA33F Certificate serial: 01C2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nhu6lAj6GbXpfYLN2_-y55u7oz8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919D656/93CB77AE6ACB11ED9B633B39C4F9AE02/Nhu6lAj6GbXpfYLN2_-y55u7oz8.mft Manifest number: 01BD Signing time: Thu 03 Apr 2025 02:23:01 +0000 Manifest this update: Thu 03 Apr 2025 02:23:00 +0000 Manifest next update: Thu 10 Apr 2025 02:23:00 +0000 Files and hashes: 1: Nhu6lAj6GbXpfYLN2_-y55u7oz8.crl (hash: eG+hOYV10MNpZ446GLVpivcwYvMvZhp8RMEvi81k5os=) 2: 00FFAB766ACF11EDBCC28E3CC4F9AE02.roa (hash: XpTSLigO4HKKd3j+0vvg/u/YVC83XW6OinlRQSFc3LQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919D656/93CB77AE6ACB11ED9B633B39C4F9AE02/Nhu6lAj6GbXpfYLN2_-y55u7oz8.crl rsync://rpki.apnic.net/member_repository/A919D656/93CB77AE6ACB11ED9B633B39C4F9AE02/Nhu6lAj6GbXpfYLN2_-y55u7oz8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nhu6lAj6GbXpfYLN2_-y55u7oz8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Apr 2025 02:22:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 450 (0x1c2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919D656 Validity Not Before: Apr 3 02:23:00 2025 GMT Not After : Apr 10 02:23:00 2025 GMT Subject: CN=67edf104-46e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:e0:7b:c3:d4:5f:68:4e:4d:51:4d:e7:fb:50: 99:a4:09:b5:5b:33:bf:4e:7d:ae:fc:d8:ab:83:59: 78:82:6b:e4:20:ca:df:df:d1:08:4a:6d:ba:7f:7f: a0:f3:d4:d9:ec:ab:8c:ec:bc:b0:7d:16:c6:ea:92: 1b:ff:23:ed:0d:a6:6e:44:87:33:3c:ea:2e:5b:2b: 00:6d:cd:02:d0:37:5b:45:99:c4:ed:ac:9a:d6:02: 78:97:02:97:7b:be:a2:43:90:7f:32:7f:64:06:90: 62:2a:e4:e7:fc:fa:7d:b2:21:4a:d6:64:39:48:71: 2e:06:81:0b:2e:bf:56:32:39:19:17:21:a0:4b:74: ba:a8:d5:f1:09:96:bf:b7:a0:4a:01:84:b0:50:f2: fd:37:0e:90:9a:c7:42:6d:7b:0f:c8:d3:17:69:85: fb:21:10:18:eb:f2:e5:ad:4a:e2:ad:5d:72:f5:dd: c1:db:1e:bd:2f:a4:38:f8:8f:fd:7c:c8:09:44:d5: fe:9b:32:d9:b0:2a:f9:9d:8e:45:3d:83:f3:28:af: 58:58:8c:a6:3d:8a:b9:d2:c3:6c:53:4c:09:1c:e2: 72:b9:bf:8f:0a:15:fa:53:36:40:bb:7a:b6:cd:db: f3:94:0f:a8:5c:88:8d:57:6f:4d:24:24:4a:e1:a9: 7b:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:DE:12:7F:71:42:57:F7:D3:44:6D:69:32:D1:A4:6D:A1:90:1E:86 X509v3 Authority Key Identifier: keyid:36:1B:BA:94:08:FA:19:B5:E9:7D:82:CD:DB:FF:B2:E7:9B:BB:A3:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919D656/93CB77AE6ACB11ED9B633B39C4F9AE02/Nhu6lAj6GbXpfYLN2_-y55u7oz8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nhu6lAj6GbXpfYLN2_-y55u7oz8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919D656/93CB77AE6ACB11ED9B633B39C4F9AE02/Nhu6lAj6GbXpfYLN2_-y55u7oz8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6d:52:22:33:7a:09:8a:6f:c1:82:26:49:d5:82:91:ca:60:c4: 95:81:86:b5:1f:56:4d:22:0d:fa:30:3b:4f:dd:24:f3:ce:f0: c4:32:a4:22:95:da:a6:56:72:4d:4d:18:73:e7:57:16:ca:96: 07:1c:95:85:e3:8c:fd:f1:01:bc:3b:04:40:4d:30:1b:75:d4: a4:cf:ca:41:8a:bb:49:96:3e:43:f9:cd:30:e8:85:17:80:40: c5:39:ee:da:6c:ef:3d:b5:96:61:f1:9d:b2:a6:fd:88:c8:95: f7:9d:61:e4:32:9a:e2:ce:69:1e:50:22:43:0b:2d:68:2a:3e: d5:c5:7e:ed:8e:90:82:d3:88:be:ac:99:cc:b1:1b:89:73:7f: ea:2f:47:de:18:f4:2a:fb:c7:28:1b:e1:fb:aa:75:3b:44:e4: ed:c3:20:33:e5:17:b8:d9:c9:d5:ee:6f:f9:0a:85:1c:d3:45: ab:10:42:0c:93:34:7d:ba:56:c1:66:99:13:6c:17:36:69:aa: ba:90:86:be:78:4f:20:cb:12:15:f9:73:7e:e9:a6:12:5b:52: 8a:8a:fd:ed:99:09:16:a0:a3:92:cd:8d:ad:f2:91:d9:b1:8b: 62:7d:c0:b2:d6:70:fc:24:81:78:e1:07:7c:38:b2:77:b0:23: 84:d8:77:86 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAcIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUQ2NTYxMTAvBgNVBAUTKDM2MUJCQTk0MDhGQTE5QjVFOTdEODJDRERCRkZCMkU3 OUJCQkEzM0YwHhcNMjUwNDAzMDIyMzAwWhcNMjUwNDEwMDIyMzAwWjAYMRYwFAYD VQQDEw02N2VkZjEwNC00NmU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwOB7w9RfaE5NUU3n+1CZpAm1WzO/Tn2u/Nirg1l4gmvkIMrf39EISm26f3+g 89TZ7KuM7LywfRbG6pIb/yPtDaZuRIczPOouWysAbc0C0DdbRZnE7aya1gJ4lwKX e76iQ5B/Mn9kBpBiKuTn/Pp9siFK1mQ5SHEuBoELLr9WMjkZFyGgS3S6qNXxCZa/ t6BKAYSwUPL9Nw6QmsdCbXsPyNMXaYX7IRAY6/LlrUrirV1y9d3B2x69L6Q4+I/9 fMgJRNX+mzLZsCr5nY5FPYPzKK9YWIymPYq50sNsU0wJHOJyub+PChX6UzZAu3q2 zdvzlA+oXIiNV29NJCRK4al7NwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPveEn9x Qlf300RtaTLRpG2hkB6GMB8GA1UdIwQYMBaAFDYbupQI+hm16X2Czdv/suebu6M/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RDY1Ni85M0NCNzdBRTZB Q0IxMUVEOUI2MzNCMzlDNEY5QUUwMi9OaHU2bEFqNkdiWHBmWUxOMl8teTU1dTdv ejguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05odTZsQWo2R2JYcGZZTE4yXy15NTV1N296OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RDY1Ni85M0NCNzdBRTZBQ0IxMUVEOUI2MzNCMzlDNEY5QUUwMi9OaHU2bEFqNkdi WHBmWUxOMl8teTU1dTdvejgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBtUiIzegmKb8GCJknVgpHKYMSVgYa1H1ZNIg36MDtP3STzzvDEMqQi ldqmVnJNTRhz51cWypYHHJWF44z98QG8OwRATTAbddSkz8pBirtJlj5D+c0w6IUX gEDFOe7abO89tZZh8Z2ypv2IyJX3nWHkMprizmkeUCJDCy1oKj7VxX7tjpCC04i+ rJnMsRuJc3/qL0feGPQq+8coG+H7qnU7ROTtwyAz5Re42cnV7m/5CoUc00WrEEIM kzR9ulbBZpkTbBc2aaq6kIa+eE8gyxIV+XN+6aYSW1KKiv3tmQkWoKOSzY2t8pHZ sYtifcCy1nD8JIF44Qd8OLJ3sCOE2HeG -----END CERTIFICATE-----Generated at Fri Apr 4 22:40:05 2025 by rpki-client