$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4B39/FEF549E8AF1611EE8C48A74DC4F9AE02/nMiKhtCzfs7o1XZX75l4lTJoDN8.mft File: nMiKhtCzfs7o1XZX75l4lTJoDN8.mft (raw, json) Hash identifier: W6+7yjjaWnOv84VCNBJy37kCd9TzFuz2qwOd9GbSvCQ= Subject key identifier: 5C:3F:AB:45:8D:A3:D7:1C:AA:DB:28:5D:C8:D9:FB:D8:30:40:8D:9C Authority key identifier: 9C:C8:8A:86:D0:B3:7E:CE:E8:D5:76:57:EF:99:78:95:32:68:0C:DF Certificate issuer: /CN=A91A4B39/serialNumber=9CC88A86D0B37ECEE8D57657EF99789532680CDF Certificate serial: F4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nMiKhtCzfs7o1XZX75l4lTJoDN8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A4B39/FEF549E8AF1611EE8C48A74DC4F9AE02/nMiKhtCzfs7o1XZX75l4lTJoDN8.mft Manifest number: F1 Signing time: Mon 07 Apr 2025 04:15:43 +0000 Manifest this update: Mon 07 Apr 2025 04:15:43 +0000 Manifest next update: Mon 14 Apr 2025 04:15:43 +0000 Files and hashes: 1: nMiKhtCzfs7o1XZX75l4lTJoDN8.crl (hash: ZIDfJHoZ5kPSeMA/HDQttTtM9LREZCtJ0w6ArceZuv8=) 2: AA778F4CAF8A11EEB167DB64C4F9AE02.roa (hash: fgJGtU/PUtSjCXondPTJa4miuZo+FHMCntsgLV0Tifg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A4B39/FEF549E8AF1611EE8C48A74DC4F9AE02/nMiKhtCzfs7o1XZX75l4lTJoDN8.crl rsync://rpki.apnic.net/member_repository/A91A4B39/FEF549E8AF1611EE8C48A74DC4F9AE02/nMiKhtCzfs7o1XZX75l4lTJoDN8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nMiKhtCzfs7o1XZX75l4lTJoDN8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 14 Apr 2025 04:15:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 244 (0xf4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A4B39 Validity Not Before: Apr 7 04:15:43 2025 GMT Not After : Apr 14 04:15:43 2025 GMT Subject: CN=67f3516f-8a7c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:44:ee:fc:cc:a5:32:21:7a:ae:28:85:7c:0f: 39:24:f7:14:fd:4e:d9:0a:28:fa:7b:c3:7c:d6:b1: 76:55:47:5f:b7:b0:ce:a3:af:8d:5a:50:a3:27:01: 04:4a:49:60:ca:ba:51:f6:eb:49:f4:f4:df:08:aa: 88:76:ab:92:48:85:e5:94:63:45:0a:ea:bb:00:44: 55:0b:36:34:4f:de:b4:d2:90:9c:1a:d7:79:94:78: e9:7e:5f:c5:d5:76:02:0d:bc:01:96:51:2d:67:e3: 44:62:70:60:63:0e:49:ad:a1:91:90:b1:a3:3b:cb: 39:20:ba:62:aa:94:43:fa:ef:6a:69:0b:b3:b7:09: bb:e2:7b:07:60:15:8e:82:e3:d1:0d:60:97:a2:b0: 7e:b2:e4:80:c4:62:c2:a3:f3:01:6a:b3:0e:41:b9: 83:a5:0b:a1:26:ca:fa:00:ad:10:ae:47:e1:e0:d7: 60:0e:47:15:f1:79:b2:03:91:98:f4:ce:bb:d7:1c: ad:5e:43:53:ad:b6:9c:a2:4d:c6:a6:64:61:3a:49: 42:ba:a7:c7:01:79:8e:33:15:51:a1:9b:b9:75:f1: 54:1b:e4:e4:0d:2d:0b:19:13:2d:27:e5:cc:a0:ad: 33:75:49:27:0c:76:a8:df:c9:2d:6d:a5:aa:31:94: 6b:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:3F:AB:45:8D:A3:D7:1C:AA:DB:28:5D:C8:D9:FB:D8:30:40:8D:9C X509v3 Authority Key Identifier: keyid:9C:C8:8A:86:D0:B3:7E:CE:E8:D5:76:57:EF:99:78:95:32:68:0C:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A4B39/FEF549E8AF1611EE8C48A74DC4F9AE02/nMiKhtCzfs7o1XZX75l4lTJoDN8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nMiKhtCzfs7o1XZX75l4lTJoDN8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4B39/FEF549E8AF1611EE8C48A74DC4F9AE02/nMiKhtCzfs7o1XZX75l4lTJoDN8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5e:74:0e:67:05:8d:85:fa:76:f2:ac:6c:04:2a:44:be:b0:24: cf:71:1f:2d:f6:f7:f5:f6:46:15:3d:6c:26:fb:68:68:f3:65: 9c:d1:c7:86:7c:bf:91:fb:0f:69:6b:7d:f6:35:37:d6:40:14: 8f:77:28:f5:00:ce:d8:5a:59:b0:b6:96:1c:de:46:49:67:11: a6:c1:4d:e2:36:40:ae:86:e4:d6:7d:77:dd:19:66:3c:dd:5a: 21:41:10:3c:3f:09:93:14:f2:2c:51:ac:74:d1:4b:f6:5f:68: e3:f3:a4:14:4d:a9:ae:26:70:08:f3:1c:7a:c2:60:b1:8f:e1: 1a:32:23:40:1f:50:58:2d:9b:a9:4d:61:9b:c7:07:79:0b:a4: fc:fb:1d:ab:e0:a9:c7:1b:dc:4c:65:33:2c:98:61:87:dc:ac: f1:35:e6:8a:20:fa:e0:1a:1e:f0:7d:c7:97:c6:71:0f:fb:cc: b7:e6:dd:8e:c2:75:8a:d6:02:5e:5a:bb:41:96:a9:e7:c7:33: d5:15:63:e4:79:50:d4:1b:8b:de:0d:ae:71:46:81:47:d6:d7: 42:7a:86:b6:31:50:5c:bd:92:f4:a1:59:7c:9c:66:fb:62:42: 2d:75:b4:ac:37:d2:6d:b1:25:a0:f0:1a:69:00:f3:a7:23:39: 1e:ec:49:84 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTRCMzkxMTAvBgNVBAUTKDlDQzg4QTg2RDBCMzdFQ0VFOEQ1NzY1N0VGOTk3ODk1 MzI2ODBDREYwHhcNMjUwNDA3MDQxNTQzWhcNMjUwNDE0MDQxNTQzWjAYMRYwFAYD VQQDEw02N2YzNTE2Zi04YTdjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAskTu/MylMiF6riiFfA85JPcU/U7ZCij6e8N81rF2VUdft7DOo6+NWlCjJwEE SklgyrpR9utJ9PTfCKqIdquSSIXllGNFCuq7AERVCzY0T9600pCcGtd5lHjpfl/F 1XYCDbwBllEtZ+NEYnBgYw5JraGRkLGjO8s5ILpiqpRD+u9qaQuztwm74nsHYBWO guPRDWCXorB+suSAxGLCo/MBarMOQbmDpQuhJsr6AK0Qrkfh4NdgDkcV8XmyA5GY 9M671xytXkNTrbacok3GpmRhOklCuqfHAXmOMxVRoZu5dfFUG+TkDS0LGRMtJ+XM oK0zdUknDHao38ktbaWqMZRrNwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFw/q0WN o9ccqtsoXcjZ+9gwQI2cMB8GA1UdIwQYMBaAFJzIiobQs37O6NV2V++ZeJUyaAzf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNEIzOS9GRUY1NDlFOEFG MTYxMUVFOEM0OEE3NERDNEY5QUUwMi9uTWlLaHRDemZzN28xWFpYNzVsNGxUSm9E TjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25NaUtodEN6ZnM3bzFYWlg3NWw0bFRKb0ROOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NEIzOS9GRUY1NDlFOEFGMTYxMUVFOEM0OEE3NERDNEY5QUUwMi9uTWlLaHRDemZz N28xWFpYNzVsNGxUSm9ETjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBedA5nBY2F+nbyrGwEKkS+sCTPcR8t9vf19kYVPWwm+2ho82Wc0ceG fL+R+w9pa332NTfWQBSPdyj1AM7YWlmwtpYc3kZJZxGmwU3iNkCuhuTWfXfdGWY8 3VohQRA8PwmTFPIsUax00Uv2X2jj86QUTamuJnAI8xx6wmCxj+EaMiNAH1BYLZup TWGbxwd5C6T8+x2r4KnHG9xMZTMsmGGH3KzxNeaKIPrgGh7wfceXxnEP+8y35t2O wnWK1gJeWrtBlqnnxzPVFWPkeVDUG4veDa5xRoFH1tdCeoa2MVBcvZL0oVl8nGb7 YkItdbSsN9JtsSWg8BppAPOnIzke7EmE -----END CERTIFICATE-----Generated at Tue Apr 8 15:19:29 2025 by rpki-client