$ rpki-client -vvf rpki.apnic.net/member_repository/A91AB85A/185C39B603CD11ECABCE697BC4F9AE02/nZwAihKi96YP7_liJmsFAqHKC6I.mft File: nZwAihKi96YP7_liJmsFAqHKC6I.mft (raw, json) Hash identifier: h8Pe/0ZceQVrP4pMw0hgrGDxUcBDfAyvzY2wyuOgI1o= Subject key identifier: F7:DA:E0:B9:4E:BE:09:9C:9B:F7:AD:4F:02:BA:F0:1C:24:A8:C3:B3 Authority key identifier: 9D:9C:00:8A:12:A2:F7:A6:0F:EF:F9:62:26:6B:05:02:A1:CA:0B:A2 Certificate issuer: /CN=A91AB85A/serialNumber=9D9C008A12A2F7A60FEFF962266B0502A1CA0BA2 Certificate serial: 0504 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nZwAihKi96YP7_liJmsFAqHKC6I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AB85A/185C39B603CD11ECABCE697BC4F9AE02/nZwAihKi96YP7_liJmsFAqHKC6I.mft Manifest number: 04FC Signing time: Fri 04 Apr 2025 23:46:49 +0000 Manifest this update: Fri 04 Apr 2025 23:46:48 +0000 Manifest next update: Fri 11 Apr 2025 23:46:48 +0000 Files and hashes: 1: nZwAihKi96YP7_liJmsFAqHKC6I.crl (hash: 8ys5TK0fSul24BQzobVMf5ihlE2lww6R+Xl4ngSvO+w=) 2: 46A2104603CF11ECA480B07CC4F9AE02.roa (hash: X8TS/dUIvy3XOI0UnJtA1d7RV1bb4SxZ7U2o6VOp3BA=) 3: 460AA4AE03CF11ECA480B07CC4F9AE02.roa (hash: Gk9zFIrI4hfeJ0HReT17DaXTFk6xr6upAecBQ6JDnHs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AB85A/185C39B603CD11ECABCE697BC4F9AE02/nZwAihKi96YP7_liJmsFAqHKC6I.crl rsync://rpki.apnic.net/member_repository/A91AB85A/185C39B603CD11ECABCE697BC4F9AE02/nZwAihKi96YP7_liJmsFAqHKC6I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nZwAihKi96YP7_liJmsFAqHKC6I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 23:46:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1284 (0x504) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AB85A Validity Not Before: Apr 4 23:46:48 2025 GMT Not After : Apr 11 23:46:48 2025 GMT Subject: CN=67f06f69-4d4a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:91:1a:a7:d2:54:b4:6d:1b:99:67:db:24:66: 91:69:8c:db:82:02:c3:2c:9d:3c:94:4c:c2:f8:d6: 22:f9:6b:12:dd:92:b2:9b:4d:1d:08:cf:a4:41:33: dc:2d:af:e7:14:b7:6e:63:0d:00:cf:1c:99:cc:5f: 4f:35:2c:63:ad:7b:d6:68:bc:ad:ef:fd:9c:74:1b: be:13:62:b7:bb:e3:6d:ff:28:a2:1c:ab:89:5a:05: f3:6f:28:d4:63:22:1a:86:97:5c:33:a9:ef:04:a9: df:f5:94:b1:a1:ca:0f:5c:12:ed:25:ad:5b:f5:08: ba:1e:b2:0d:cf:dd:55:ca:91:5f:2e:1a:c3:f1:f4: b9:b8:43:c0:93:a2:7b:d3:2b:61:82:91:ed:31:84: e3:0b:f5:89:89:50:25:43:a5:f5:1b:b9:2c:fb:d8: 90:66:8d:75:f0:6d:f4:73:02:4b:23:f4:5c:46:ca: eb:66:15:51:d6:c5:7d:8d:52:4a:15:34:b7:ed:66: ee:4e:4c:69:5a:02:76:08:2f:03:de:e0:82:1a:c6: 12:1b:23:9b:a8:c7:ef:8b:90:04:b1:8c:f3:80:7e: b0:92:38:f3:78:ed:cc:6d:c1:65:b1:13:74:f2:97: 07:59:ae:68:e6:c8:40:f7:41:2a:f3:d1:15:cf:df: c9:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:DA:E0:B9:4E:BE:09:9C:9B:F7:AD:4F:02:BA:F0:1C:24:A8:C3:B3 X509v3 Authority Key Identifier: keyid:9D:9C:00:8A:12:A2:F7:A6:0F:EF:F9:62:26:6B:05:02:A1:CA:0B:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AB85A/185C39B603CD11ECABCE697BC4F9AE02/nZwAihKi96YP7_liJmsFAqHKC6I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nZwAihKi96YP7_liJmsFAqHKC6I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB85A/185C39B603CD11ECABCE697BC4F9AE02/nZwAihKi96YP7_liJmsFAqHKC6I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 33:21:2e:a9:41:71:24:1b:37:1f:db:ea:2b:8c:f3:ea:ca:cd: 2e:45:41:dd:ff:87:da:42:69:fe:b4:e8:6a:68:16:80:50:20: a3:c3:4c:0b:c0:14:59:a7:e1:39:fb:a8:5b:dc:d9:6d:90:76: e1:05:84:e9:3e:50:e0:63:a7:9d:9b:9a:9c:ab:43:bc:10:2d: b7:08:b3:65:e4:3d:f9:47:83:fc:94:54:6d:9e:d0:b0:52:e7: 88:31:48:74:f0:1e:82:f5:96:c2:d5:da:b2:4f:83:a7:15:27: e1:7a:08:26:3d:ef:6f:c1:bc:71:c4:36:ce:50:80:c3:fc:d2: e8:98:4c:72:c9:fb:45:21:fc:9f:72:22:6f:91:11:39:46:62: 8e:5d:c9:51:1c:c7:1f:48:a8:75:e4:74:6d:09:e9:5e:ed:18: e4:60:4f:ec:43:05:43:8e:23:44:9c:90:e8:5d:01:a7:87:b3: 9c:26:70:ae:7d:c9:e8:54:7b:b7:36:2e:ea:4a:d8:fa:31:39: 27:9b:a9:b4:94:44:40:ac:b4:99:3e:ac:77:16:a1:58:a0:ad: ea:3c:c1:e9:6b:c8:12:0b:25:e4:bb:b0:6e:b2:73:38:9b:fd: 01:17:60:67:c6:4a:7e:f5:ee:2e:96:f5:b8:ef:38:f1:dd:38: dd:f7:28:f1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBQQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUI4NUExMTAvBgNVBAUTKDlEOUMwMDhBMTJBMkY3QTYwRkVGRjk2MjI2NkIwNTAy QTFDQTBCQTIwHhcNMjUwNDA0MjM0NjQ4WhcNMjUwNDExMjM0NjQ4WjAYMRYwFAYD VQQDEw02N2YwNmY2OS00ZDRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtJEap9JUtG0bmWfbJGaRaYzbggLDLJ08lEzC+NYi+WsS3ZKym00dCM+kQTPc La/nFLduYw0AzxyZzF9PNSxjrXvWaLyt7/2cdBu+E2K3u+Nt/yiiHKuJWgXzbyjU YyIahpdcM6nvBKnf9ZSxocoPXBLtJa1b9Qi6HrINz91VypFfLhrD8fS5uEPAk6J7 0ythgpHtMYTjC/WJiVAlQ6X1G7ks+9iQZo118G30cwJLI/RcRsrrZhVR1sV9jVJK FTS37WbuTkxpWgJ2CC8D3uCCGsYSGyObqMfvi5AEsYzzgH6wkjjzeO3MbcFlsRN0 8pcHWa5o5shA90Eq89EVz9/JWwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPfa4LlO vgmcm/etTwK68BwkqMOzMB8GA1UdIwQYMBaAFJ2cAIoSovemD+/5YiZrBQKhygui MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQjg1QS8xODVDMzlCNjAz Q0QxMUVDQUJDRTY5N0JDNEY5QUUwMi9uWndBaWhLaTk2WVA3X2xpSm1zRkFxSEtD NkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25ad0FpaEtpOTZZUDdfbGlKbXNGQXFIS0M2SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB Qjg1QS8xODVDMzlCNjAzQ0QxMUVDQUJDRTY5N0JDNEY5QUUwMi9uWndBaWhLaTk2 WVA3X2xpSm1zRkFxSEtDNkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAzIS6pQXEkGzcf2+orjPPqys0uRUHd/4faQmn+tOhqaBaAUCCjw0wL wBRZp+E5+6hb3NltkHbhBYTpPlDgY6edm5qcq0O8EC23CLNl5D35R4P8lFRtntCw UueIMUh08B6C9ZbC1dqyT4OnFSfheggmPe9vwbxxxDbOUIDD/NLomExyyftFIfyf ciJvkRE5RmKOXclRHMcfSKh15HRtCele7RjkYE/sQwVDjiNEnJDoXQGnh7OcJnCu fcnoVHu3Ni7qStj6MTknm6m0lERArLSZPqx3FqFYoK3qPMHpa8gSCyXku7BusnM4 m/0BF2Bnxkp+9e4ulvW47zjx3Tjd9yjx -----END CERTIFICATE-----Generated at Sun Apr 6 21:55:39 2025 by rpki-client