$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4C60/B526FF74D84111E9A4521413C4F9AE02/nvnkN242ZTJ1x5Y1mNa0W3CvgJk.mft File: nvnkN242ZTJ1x5Y1mNa0W3CvgJk.mft (raw, json) Hash identifier: JTRUXYYVDf7rgag1pLUDa34cFTJFwp7YPQvKSc/4nzg= Subject key identifier: 37:0D:58:0D:46:54:4C:81:ED:09:43:A2:89:D0:1B:90:A0:AA:B6:60 Authority key identifier: 9E:F9:E4:37:6E:36:65:32:75:C7:96:35:98:D6:B4:5B:70:AF:80:99 Certificate issuer: /CN=A91A4C60/serialNumber=9EF9E4376E36653275C7963598D6B45B70AF8099 Certificate serial: 0E3C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nvnkN242ZTJ1x5Y1mNa0W3CvgJk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A4C60/B526FF74D84111E9A4521413C4F9AE02/nvnkN242ZTJ1x5Y1mNa0W3CvgJk.mft Manifest number: 0D94 Signing time: Fri 04 Apr 2025 18:10:18 +0000 Manifest this update: Fri 04 Apr 2025 18:10:18 +0000 Manifest next update: Fri 11 Apr 2025 18:10:18 +0000 Files and hashes: 1: nvnkN242ZTJ1x5Y1mNa0W3CvgJk.crl (hash: zKJDNh3xDU5pvNn6m8iXnAuat/wH4Sd8sfsDSxGKWr8=) 2: 7072DE7601C911EC9286E827C4F9AE02.roa (hash: 7msEvTLtFsUPExajJssY7rK4WVcg4LZn9GJ36tHnfps=) 3: 72EB65AAC96511EDB2A13779C4F9AE02.roa (hash: EKrxivQN/ugEIGuNskep3asGKS1SHAvX1FnHQ+xTspc=) 4: 88A00388193111EB9E0A6A49C4F9AE02.roa (hash: u3WzgpaL6M5sXXo26nPKh9UHSPFb46VhuO2Q5Fo8Shs=) 5: 81CDB96A53F111EB85FBFA19C4F9AE02.roa (hash: NWo/6+CZ9HQYfqESvTvUnv7ahdvIp39DlAFteKyJz6Y=) 6: 0741B84C2FFA11EB9544F785C4F9AE02.roa (hash: mTcIHah4w3Vjv+PUpTnmqnHZ/WWcS1sHh5BVs3GE+UQ=) 7: 12F0D72E7BC111EA8503D815C4F9AE02.roa (hash: xGtgEmqtoxW1ZnFqrfdXZFVQbRuwiMqE40Ohns82lks=) 8: 0D90C6C899BC11EEBF0F7411C4F9AE02.roa (hash: OqGy61SUyKNWplMZ7rgfQmmSj9+s8efrmcgKdf6cAJk=) 9: B6A7D6FCCAEA11EE8E1B2D36C4F9AE02.roa (hash: SXM3r93+JAbfUFOgTJZWpNNuc7IK/ZoNqCIsmPIym1s=) 10: 378C18A43D3D11EAA59A8012C4F9AE02.roa (hash: HNDIzi1kzv+rbEdjXVJF19/xDZWlePAah9JkFcYlECE=) 11: 9F71391C684F11EAB45B6F4FC4F9AE02.roa (hash: jVu5ZnLYMd3KFvMDPxIr2Kr82SJ5+hpIDGoI5dhGF7o=) 12: 60B3CD6EAF2E11EEBF12DF45C4F9AE02.roa (hash: 1e5MpWXXLnucpXgA7+/6NcCslKn9LXNV+RznqlHIuF0=) 13: D17A895C0C5D11EAB1A29D67C4F9AE02.roa (hash: EZcxncfNl0zD/tSncvn3SUo/vaEA9kPik+cwYMuomd0=) 14: 2152FB1650C511EAB566FE61C4F9AE02.roa (hash: qiruACIeUuWCHVE9fSq/awWWHhKH4G60m/pcIC2u5z8=) 15: 915FFF14A5AF11EAB039ED67C4F9AE02.roa (hash: 2jainDeXw/J702lQhxkzNdpAlcOPjELdE2rK7IEazhc=) 16: 03774914696211EC8A05D115C4F9AE02.roa (hash: /71jeZ/z/bjdOuocI7pJpODjcutgjWmyBXnbScV8x34=) 17: EDE3E1EE306D11EB9AEE3E86C4F9AE02.roa (hash: zfIXPPCdkOaknfqYs53DeFIT3TNh9PqHIQnfhYmK5wM=) 18: B07EF7408DDD11EA8B5F824BC4F9AE02.roa (hash: SBkKKnAR6IJ2hBnL0p0PNg19RBJEETP5xc3S8pI7apE=) 19: 45F4DDA265CF11EB9E3CFA6FC4F9AE02.roa (hash: IXKoMwA1CHlc+rwm36botjnh/fDCInGR5gYfUdLmCvQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A4C60/B526FF74D84111E9A4521413C4F9AE02/nvnkN242ZTJ1x5Y1mNa0W3CvgJk.crl rsync://rpki.apnic.net/member_repository/A91A4C60/B526FF74D84111E9A4521413C4F9AE02/nvnkN242ZTJ1x5Y1mNa0W3CvgJk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nvnkN242ZTJ1x5Y1mNa0W3CvgJk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 18:10:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3644 (0xe3c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A4C60 Validity Not Before: Apr 4 18:10:18 2025 GMT Not After : Apr 11 18:10:18 2025 GMT Subject: CN=67f0208a-80b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:88:c5:80:46:48:75:fb:8e:7e:f5:93:f7:9c: e2:af:9b:70:cb:62:0c:86:ec:cc:c0:54:3f:3e:34: c3:d5:42:ad:6a:57:b6:fd:45:7b:7c:9f:6d:30:ba: 08:fd:30:aa:36:b9:b5:f2:53:75:65:ac:9b:31:9d: 86:74:51:6b:6a:dc:6f:1f:61:33:fa:d8:1b:7d:8b: 33:e0:3e:16:64:9c:cd:f1:83:d9:68:a5:73:7b:ef: 1c:3a:ba:64:de:1b:84:ad:ee:d1:12:05:37:70:cb: 24:82:21:e5:55:f8:55:e2:f7:7d:97:a2:eb:dc:ae: 38:f7:34:8c:7c:95:7f:75:4a:b3:81:40:f8:7b:08: 8a:2a:16:0c:05:ab:7b:e4:75:ff:92:92:76:29:ac: 09:aa:63:d5:5e:29:0a:d2:2d:15:4e:b1:6c:26:c5: 86:92:fa:e8:f3:f9:eb:d2:79:3b:2a:c3:10:e7:b1: 62:e2:6c:f4:ae:1e:a5:31:18:af:9f:19:f8:96:a8: 77:2c:cd:24:2d:8e:87:a9:d8:7a:b3:d3:09:f3:86: bc:8d:03:b4:db:da:3d:6f:d2:1f:b5:fb:c0:94:7a: 92:a6:6f:7b:f3:79:7d:e5:ac:b0:f5:fa:2b:43:7b: 4c:c5:f9:ec:fc:61:b1:7a:c4:16:9e:a8:ff:a7:51: 9d:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:0D:58:0D:46:54:4C:81:ED:09:43:A2:89:D0:1B:90:A0:AA:B6:60 X509v3 Authority Key Identifier: keyid:9E:F9:E4:37:6E:36:65:32:75:C7:96:35:98:D6:B4:5B:70:AF:80:99 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A4C60/B526FF74D84111E9A4521413C4F9AE02/nvnkN242ZTJ1x5Y1mNa0W3CvgJk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nvnkN242ZTJ1x5Y1mNa0W3CvgJk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4C60/B526FF74D84111E9A4521413C4F9AE02/nvnkN242ZTJ1x5Y1mNa0W3CvgJk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b8:22:14:98:47:fa:a3:ee:17:57:20:4a:b3:33:b7:20:1f:27: 69:1e:e4:44:c6:8a:4e:42:28:46:fa:e8:e5:22:b9:e5:cf:04: 2f:59:01:0d:3d:23:b7:b6:09:bc:1b:5b:71:01:df:01:70:97: 1d:7e:b4:52:c8:ed:77:47:09:c0:4c:77:97:46:1f:31:0e:d9: fd:5c:77:a3:ad:b3:a4:6c:ea:dd:82:d5:67:68:e8:9f:eb:df: 60:03:72:74:9f:70:85:d4:69:67:5a:87:05:50:29:3b:2a:f3: 86:4c:56:6f:52:8d:06:de:50:b7:86:5e:70:00:c9:31:b9:52: 51:1e:40:98:16:c4:4d:d4:d3:18:23:34:48:cc:e2:91:f3:bb: b1:ec:a0:63:e0:02:4c:06:fd:c5:b0:ca:25:d3:68:20:cb:e2: 5b:4d:6a:ad:61:e9:62:76:fe:a6:b7:01:b3:e1:cb:e0:ce:c2: d0:a2:37:02:a7:8e:8f:b3:fd:46:28:40:9c:c3:82:c6:da:1e: 1b:7b:fd:06:33:4f:20:4f:34:fe:1d:2b:16:aa:56:95:c9:24: 2c:92:fe:40:29:c8:11:18:7d:4b:40:a1:2d:3e:c6:92:42:33: 45:a6:9e:71:1f:c7:70:12:0b:82:f0:93:5f:bd:74:be:bd:b7: 87:b7:17:d7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDjwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTRDNjAxMTAvBgNVBAUTKDlFRjlFNDM3NkUzNjY1MzI3NUM3OTYzNTk4RDZCNDVC NzBBRjgwOTkwHhcNMjUwNDA0MTgxMDE4WhcNMjUwNDExMTgxMDE4WjAYMRYwFAYD VQQDEw02N2YwMjA4YS04MGI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1YjFgEZIdfuOfvWT95zir5twy2IMhuzMwFQ/PjTD1UKtale2/UV7fJ9tMLoI /TCqNrm18lN1ZaybMZ2GdFFratxvH2Ez+tgbfYsz4D4WZJzN8YPZaKVze+8cOrpk 3huEre7REgU3cMskgiHlVfhV4vd9l6Lr3K449zSMfJV/dUqzgUD4ewiKKhYMBat7 5HX/kpJ2KawJqmPVXikK0i0VTrFsJsWGkvro8/nr0nk7KsMQ57Fi4mz0rh6lMRiv nxn4lqh3LM0kLY6Hqdh6s9MJ84a8jQO029o9b9IftfvAlHqSpm9783l95ayw9for Q3tMxfns/GGxesQWnqj/p1Gd8QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDcNWA1G VEyB7QlDoonQG5CgqrZgMB8GA1UdIwQYMBaAFJ755DduNmUydceWNZjWtFtwr4CZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNEM2MC9CNTI2RkY3NEQ4 NDExMUU5QTQ1MjE0MTNDNEY5QUUwMi9udm5rTjI0MlpUSjF4NVkxbU5hMFczQ3Zn SmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL252bmtOMjQyWlRKMXg1WTFtTmEwVzNDdmdKay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NEM2MC9CNTI2RkY3NEQ4NDExMUU5QTQ1MjE0MTNDNEY5QUUwMi9udm5rTjI0MlpU SjF4NVkxbU5hMFczQ3ZnSmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC4IhSYR/qj7hdXIEqzM7cgHydpHuRExopOQihG+ujlIrnlzwQvWQEN PSO3tgm8G1txAd8BcJcdfrRSyO13RwnATHeXRh8xDtn9XHejrbOkbOrdgtVnaOif 699gA3J0n3CF1GlnWocFUCk7KvOGTFZvUo0G3lC3hl5wAMkxuVJRHkCYFsRN1NMY IzRIzOKR87ux7KBj4AJMBv3FsMol02ggy+JbTWqtYelidv6mtwGz4cvgzsLQojcC p46Ps/1GKECcw4LG2h4be/0GM08gTzT+HSsWqlaVySQskv5AKcgRGH1LQKEtPsaS QjNFpp5xH8dwEguC8JNfvXS+vbeHtxfX -----END CERTIFICATE-----Generated at Fri Apr 4 22:30:03 2025 by rpki-client