$ rpki-client -vvf rpki.apnic.net/member_repository/A91B1E8B/6291764445B611EF8AB30A31C4F9AE02/nTwzrLEQPnH6H_PmAT6dwxEiafw.mft File: nTwzrLEQPnH6H_PmAT6dwxEiafw.mft (raw, json) Hash identifier: wxEjohfCit2qe8U3g9Do1UzIlfpJzvfcEGPfYrQzais= Subject key identifier: C9:92:F0:53:E0:BD:CE:6A:77:96:CE:56:91:09:8A:36:99:43:87:F7 Authority key identifier: 9D:3C:33:AC:B1:10:3E:71:FA:1F:F3:E6:01:3E:9D:C3:11:22:69:FC Certificate issuer: /CN=A91B1E8B/serialNumber=9D3C33ACB1103E71FA1FF3E6013E9DC3112269FC Certificate serial: 8C Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nTwzrLEQPnH6H_PmAT6dwxEiafw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B1E8B/6291764445B611EF8AB30A31C4F9AE02/nTwzrLEQPnH6H_PmAT6dwxEiafw.mft Manifest number: 8A Signing time: Mon 07 Apr 2025 05:24:38 +0000 Manifest this update: Mon 07 Apr 2025 05:24:38 +0000 Manifest next update: Mon 14 Apr 2025 05:24:38 +0000 Files and hashes: 1: nTwzrLEQPnH6H_PmAT6dwxEiafw.crl (hash: VI0CjC5JTSadCA4NFvqS7X9i14mSC7cHyNu8OisA9FU=) 2: DD76C09AB16711EFBD483568C4F9AE02.roa (hash: lZ2oQ4wvz4evXveDE7LNoYJmc6E6jg/A59sR/rYBi6k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B1E8B/6291764445B611EF8AB30A31C4F9AE02/nTwzrLEQPnH6H_PmAT6dwxEiafw.crl rsync://rpki.apnic.net/member_repository/A91B1E8B/6291764445B611EF8AB30A31C4F9AE02/nTwzrLEQPnH6H_PmAT6dwxEiafw.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nTwzrLEQPnH6H_PmAT6dwxEiafw.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 14 Apr 2025 05:24:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 140 (0x8c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B1E8B Validity Not Before: Apr 7 05:24:38 2025 GMT Not After : Apr 14 05:24:38 2025 GMT Subject: CN=67f36196-7a8d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:5e:ca:e9:a5:a7:05:a0:c3:9e:a9:2d:6f:c3: de:93:1b:41:54:f6:fa:dc:33:2f:98:83:64:79:27: 54:9e:bb:cc:e1:65:6f:dc:79:2e:ba:1b:a5:59:35: 29:24:a4:5e:75:ce:14:e1:72:f6:b1:ec:60:3c:a7: 2b:0d:35:37:15:4f:ee:6e:57:be:df:2b:98:28:bf: 33:3d:02:0a:74:2f:1f:5e:5d:e3:3e:ba:5a:db:01: 61:1d:72:94:a4:b6:f9:fa:4b:17:82:67:51:28:3e: c0:e1:a3:bc:bc:18:ab:d0:b2:0b:de:75:e7:15:32: 73:05:f8:7d:15:81:8d:f3:47:94:82:65:48:6b:e8: 5f:5c:3a:0b:5b:ad:3c:89:10:85:5a:64:44:c0:0b: 75:69:a9:60:52:1b:8d:9e:8b:a6:bb:e6:af:dc:da: b9:e0:97:1b:b2:f4:f5:38:ba:a2:bf:22:7d:bd:a0: 1d:15:ef:dd:82:af:81:b1:d8:91:f0:49:3a:ce:d5: df:31:f8:08:fb:45:c9:f8:31:98:f8:5b:7e:6d:05: 99:98:90:fd:d8:2f:29:d6:c6:42:5a:e7:36:13:1d: 0a:15:d3:e4:6c:37:76:2a:29:59:8e:b6:e7:6a:03: 2e:ba:b6:56:b9:04:b3:aa:66:88:ce:99:26:cb:eb: 69:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:92:F0:53:E0:BD:CE:6A:77:96:CE:56:91:09:8A:36:99:43:87:F7 X509v3 Authority Key Identifier: keyid:9D:3C:33:AC:B1:10:3E:71:FA:1F:F3:E6:01:3E:9D:C3:11:22:69:FC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B1E8B/6291764445B611EF8AB30A31C4F9AE02/nTwzrLEQPnH6H_PmAT6dwxEiafw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nTwzrLEQPnH6H_PmAT6dwxEiafw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B1E8B/6291764445B611EF8AB30A31C4F9AE02/nTwzrLEQPnH6H_PmAT6dwxEiafw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 98:1e:74:61:02:6f:37:a6:c7:78:0e:4c:a6:a0:bb:02:74:70: 8d:c7:a6:47:fe:4c:5a:b8:2b:37:0c:85:6f:40:79:18:48:75: d3:2b:01:4d:22:b1:2f:24:c4:64:4a:23:e9:83:ac:bd:11:9f: 03:db:7c:80:c9:7f:6a:25:0b:43:a1:f5:d2:ad:ef:67:de:8a: 28:94:05:5e:f5:18:de:9d:ba:04:81:07:bd:6e:97:34:b5:a4: b7:65:0a:99:0a:05:84:56:43:f5:5f:1b:70:0f:31:d9:ae:ac: 45:b7:3f:48:75:a0:31:63:ba:b7:05:26:ba:ce:c5:b7:3a:c9: 86:78:66:20:8d:82:43:5b:6a:d6:c9:fa:67:82:61:45:18:46: 48:d2:9e:0f:c9:ed:41:0e:6a:47:2c:d3:cd:39:1f:ae:1b:37: ba:1a:aa:30:be:9c:68:7d:42:0e:59:e5:99:34:47:70:94:6c: 36:04:3a:ca:d8:db:0e:05:0b:87:96:8a:97:87:25:c5:97:81: 68:99:95:13:27:fa:ad:c1:b2:34:10:04:7f:93:6c:3c:9b:6d: a1:5a:4d:64:7d:91:6c:d3:ee:21:99:df:36:d9:93:60:82:33: 02:5a:06:2b:bc:72:77:40:f6:a9:84:a5:d9:55:62:71:51:23: f5:16:bf:c6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjFFOEIxMTAvBgNVBAUTKDlEM0MzM0FDQjExMDNFNzFGQTFGRjNFNjAxM0U5REMz MTEyMjY5RkMwHhcNMjUwNDA3MDUyNDM4WhcNMjUwNDE0MDUyNDM4WjAYMRYwFAYD VQQDEw02N2YzNjE5Ni03YThkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3F7K6aWnBaDDnqktb8PekxtBVPb63DMvmINkeSdUnrvM4WVv3HkuuhulWTUp JKRedc4U4XL2sexgPKcrDTU3FU/uble+3yuYKL8zPQIKdC8fXl3jPrpa2wFhHXKU pLb5+ksXgmdRKD7A4aO8vBir0LIL3nXnFTJzBfh9FYGN80eUgmVIa+hfXDoLW608 iRCFWmREwAt1aalgUhuNnoumu+av3Nq54JcbsvT1OLqivyJ9vaAdFe/dgq+BsdiR 8Ek6ztXfMfgI+0XJ+DGY+Ft+bQWZmJD92C8p1sZCWuc2Ex0KFdPkbDd2KilZjrbn agMuurZWuQSzqmaIzpkmy+tpbQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMmS8FPg vc5qd5bOVpEJijaZQ4f3MB8GA1UdIwQYMBaAFJ08M6yxED5x+h/z5gE+ncMRImn8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMUU4Qi82MjkxNzY0NDQ1 QjYxMUVGOEFCMzBBMzFDNEY5QUUwMi9uVHd6ckxFUVBuSDZIX1BtQVQ2ZHd4RWlh ZncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL25Ud3pyTEVRUG5INkhfUG1BVDZkd3hFaWFmdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MUU4Qi82MjkxNzY0NDQ1QjYxMUVGOEFCMzBBMzFDNEY5QUUwMi9uVHd6ckxFUVBu SDZIX1BtQVQ2ZHd4RWlhZncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCYHnRhAm83psd4DkymoLsCdHCNx6ZH/kxauCs3DIVvQHkYSHXTKwFN IrEvJMRkSiPpg6y9EZ8D23yAyX9qJQtDofXSre9n3ooolAVe9RjenboEgQe9bpc0 taS3ZQqZCgWEVkP1XxtwDzHZrqxFtz9IdaAxY7q3BSa6zsW3OsmGeGYgjYJDW2rW yfpngmFFGEZI0p4Pye1BDmpHLNPNOR+uGze6GqowvpxofUIOWeWZNEdwlGw2BDrK 2NsOBQuHloqXhyXFl4FomZUTJ/qtwbI0EAR/k2w8m22hWk1kfZFs0+4hmd822ZNg gjMCWgYrvHJ3QPaphKXZVWJxUSP1Fr/G -----END CERTIFICATE-----Generated at Mon Apr 7 17:32:48 2025 by rpki-client