$ rpki-client -vvf rpki.apnic.net/member_repository/A91A1860/4222E664ACFF11ED81035733C4F9AE02/NfIQw_y-8NYqPeiPXz-iThGTdEw.mft File: NfIQw_y-8NYqPeiPXz-iThGTdEw.mft (raw, json) Hash identifier: p8wYAZMlLQ0vu11T2r4BNzrjoquN9Sl8QNqmmL4hhVg= Subject key identifier: 8D:0E:A2:8C:94:03:57:D1:F4:05:BE:1C:A9:65:CA:EA:9E:46:C0:5B Authority key identifier: 35:F2:10:C3:FC:BE:F0:D6:2A:3D:E8:8F:5F:3F:A2:4E:11:93:74:4C Certificate issuer: /CN=A91A1860/serialNumber=35F210C3FCBEF0D62A3DE88F5F3FA24E1193744C Certificate serial: 0194 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NfIQw_y-8NYqPeiPXz-iThGTdEw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A1860/4222E664ACFF11ED81035733C4F9AE02/NfIQw_y-8NYqPeiPXz-iThGTdEw.mft Manifest number: 0191 Signing time: Thu 03 Apr 2025 02:59:24 +0000 Manifest this update: Thu 03 Apr 2025 02:59:23 +0000 Manifest next update: Thu 10 Apr 2025 02:59:23 +0000 Files and hashes: 1: NfIQw_y-8NYqPeiPXz-iThGTdEw.crl (hash: OZMCKjdVBQp6VBmVKt3r3d52j0DE51Ar8XiO1NP5SLY=) 2: 832503DCAD0311ED8DFD5339C4F9AE02.roa (hash: WkJCgrbBmelQA5c6twQaEqrtwUH2ZoyRfcoaWRVuiIU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A1860/4222E664ACFF11ED81035733C4F9AE02/NfIQw_y-8NYqPeiPXz-iThGTdEw.crl rsync://rpki.apnic.net/member_repository/A91A1860/4222E664ACFF11ED81035733C4F9AE02/NfIQw_y-8NYqPeiPXz-iThGTdEw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NfIQw_y-8NYqPeiPXz-iThGTdEw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Apr 2025 02:59:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 404 (0x194) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A1860 Validity Not Before: Apr 3 02:59:23 2025 GMT Not After : Apr 10 02:59:23 2025 GMT Subject: CN=67edf98c-eba9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f9:c2:5d:8f:2f:07:da:39:55:32:e7:e9:e8:3e: b1:ca:52:e2:82:1a:b1:bf:16:77:b5:f0:13:79:53: 7b:69:bc:c6:7e:73:3f:ef:ed:1a:7d:70:be:37:7b: 8e:bc:9e:a1:6e:bd:77:82:d8:d7:55:12:cd:0f:8b: 66:88:d8:b0:f8:e5:fd:7b:d4:e6:19:5f:ff:bc:b9: ef:65:40:77:47:eb:e3:97:42:8a:41:48:6a:88:de: 89:36:bb:32:3a:20:46:7e:bc:6f:35:5c:c3:58:ec: af:2d:16:5f:77:35:7f:95:10:a3:ab:32:df:86:6d: d6:85:f9:87:09:7d:8f:37:3b:49:87:8b:93:bc:8e: e2:74:c6:5c:e3:ad:84:6f:fb:7c:8d:3f:32:8c:60: ed:1b:49:3d:d2:91:05:8c:4d:fe:e2:08:dd:7c:e5: 3f:2c:c6:2b:f3:04:cf:7e:f1:46:1e:a2:60:36:00: 1b:b2:5e:f1:1c:3f:2c:32:c2:ef:30:ed:51:cd:37: c2:af:71:2d:fe:73:e7:0d:c2:65:af:28:21:b5:e4: 51:10:8f:48:20:51:2a:a9:64:23:1f:1d:3c:1e:b5: 4b:62:55:cf:3f:56:ee:a4:2c:3f:35:82:47:1a:53: 1e:d5:49:82:5f:c5:2f:5f:d4:1b:00:96:7a:da:5f: ae:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:0E:A2:8C:94:03:57:D1:F4:05:BE:1C:A9:65:CA:EA:9E:46:C0:5B X509v3 Authority Key Identifier: keyid:35:F2:10:C3:FC:BE:F0:D6:2A:3D:E8:8F:5F:3F:A2:4E:11:93:74:4C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A1860/4222E664ACFF11ED81035733C4F9AE02/NfIQw_y-8NYqPeiPXz-iThGTdEw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NfIQw_y-8NYqPeiPXz-iThGTdEw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A1860/4222E664ACFF11ED81035733C4F9AE02/NfIQw_y-8NYqPeiPXz-iThGTdEw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 35:e8:23:6a:0e:e0:9a:ac:ba:f6:a7:bc:55:55:c6:a0:66:3f: b9:4f:7b:9f:11:53:0a:84:d9:5d:51:d2:45:f7:98:7e:18:a0: 5b:88:83:b7:d8:70:d4:f1:99:11:a8:73:10:49:1e:43:22:44: b1:87:49:af:92:41:b8:1d:a8:22:56:9f:4d:e0:f4:79:7c:ee: 03:34:10:47:22:e7:4c:04:a5:74:33:02:47:33:ce:66:91:e4: b5:53:8e:29:a1:d8:90:2e:c9:02:ed:12:f7:10:11:74:cb:ba: 73:54:19:a4:19:7c:de:1c:ba:e7:e2:91:c3:a9:1a:57:ff:ec: 7e:ac:1f:63:d2:27:bb:99:38:89:6b:34:13:17:13:69:e5:22: ba:fe:53:fd:fd:c8:81:d3:04:d2:91:07:51:2d:0d:99:82:8a: 8f:7b:10:7b:1c:12:78:45:d1:fe:01:2b:0a:d9:0b:3e:e3:f0: 82:3e:ee:10:01:61:60:06:43:a7:14:5e:fd:e1:3c:14:72:99: 1e:2b:50:72:45:46:fe:92:42:a3:a4:92:65:5c:35:71:f1:72: 58:fb:1e:c8:aa:23:2e:6d:eb:a2:2d:f3:58:71:5a:f6:c3:ed: 6a:45:3b:0b:d2:81:d2:f8:a2:af:12:ee:97:98:19:74:f8:a4: 47:fa:f4:cd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAZQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTE4NjAxMTAvBgNVBAUTKDM1RjIxMEMzRkNCRUYwRDYyQTNERTg4RjVGM0ZBMjRF MTE5Mzc0NEMwHhcNMjUwNDAzMDI1OTIzWhcNMjUwNDEwMDI1OTIzWjAYMRYwFAYD VQQDEw02N2VkZjk4Yy1lYmE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA+cJdjy8H2jlVMufp6D6xylLighqxvxZ3tfATeVN7abzGfnM/7+0afXC+N3uO vJ6hbr13gtjXVRLND4tmiNiw+OX9e9TmGV//vLnvZUB3R+vjl0KKQUhqiN6JNrsy OiBGfrxvNVzDWOyvLRZfdzV/lRCjqzLfhm3WhfmHCX2PNztJh4uTvI7idMZc462E b/t8jT8yjGDtG0k90pEFjE3+4gjdfOU/LMYr8wTPfvFGHqJgNgAbsl7xHD8sMsLv MO1RzTfCr3Et/nPnDcJlryghteRREI9IIFEqqWQjHx08HrVLYlXPP1bupCw/NYJH GlMe1UmCX8UvX9QbAJZ62l+usQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI0OooyU A1fR9AW+HKllyuqeRsBbMB8GA1UdIwQYMBaAFDXyEMP8vvDWKj3oj18/ok4Rk3RM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMTg2MC80MjIyRTY2NEFD RkYxMUVEODEwMzU3MzNDNEY5QUUwMi9OZklRd195LThOWXFQZWlQWHotaVRoR1Rk RXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05mSVF3X3ktOE5ZcVBlaVBYei1pVGhHVGRFdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MTg2MC80MjIyRTY2NEFDRkYxMUVEODEwMzU3MzNDNEY5QUUwMi9OZklRd195LThO WXFQZWlQWHotaVRoR1RkRXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA16CNqDuCarLr2p7xVVcagZj+5T3ufEVMKhNldUdJF95h+GKBbiIO3 2HDU8ZkRqHMQSR5DIkSxh0mvkkG4HagiVp9N4PR5fO4DNBBHIudMBKV0MwJHM85m keS1U44podiQLskC7RL3EBF0y7pzVBmkGXzeHLrn4pHDqRpX/+x+rB9j0ie7mTiJ azQTFxNp5SK6/lP9/ciB0wTSkQdRLQ2ZgoqPexB7HBJ4RdH+ASsK2Qs+4/CCPu4Q AWFgBkOnFF794TwUcpkeK1ByRUb+kkKjpJJlXDVx8XJY+x7IqiMubeuiLfNYcVr2 w+1qRTsL0oHS+KKvEu6XmBl0+KRH+vTN -----END CERTIFICATE-----Generated at Fri Apr 4 22:34:55 2025 by rpki-client