$ rpki-client -vvf rpki.apnic.net/member_repository/A91B927E/CCD6ED1C68DF11EA97B15524C4F9AE02/NG3w702Lxjw4JNbkkAZ0YyVHsIo.mft File: NG3w702Lxjw4JNbkkAZ0YyVHsIo.mft (raw, json) Hash identifier: WiiVH/GeY5E4KsHw33Sk4ko3h3UaF1b15oLC7WfetIQ= Subject key identifier: A6:75:BF:0F:6C:6D:FF:9E:58:58:44:AC:58:DE:45:70:9D:0E:B8:AB Authority key identifier: 34:6D:F0:EF:4D:8B:C6:3C:38:24:D6:E4:90:06:74:63:25:47:B0:8A Certificate issuer: /CN=A91B927E/serialNumber=346DF0EF4D8BC63C3824D6E4900674632547B08A Certificate serial: 0A23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NG3w702Lxjw4JNbkkAZ0YyVHsIo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B927E/CCD6ED1C68DF11EA97B15524C4F9AE02/NG3w702Lxjw4JNbkkAZ0YyVHsIo.mft Manifest number: 10F1 Signing time: Wed 02 Apr 2025 19:49:49 +0000 Manifest this update: Wed 02 Apr 2025 19:49:48 +0000 Manifest next update: Wed 09 Apr 2025 19:49:48 +0000 Files and hashes: 1: NG3w702Lxjw4JNbkkAZ0YyVHsIo.crl (hash: Ip39ES4yICQyyIrW9uPNqWwEtVHn7pJgAEhvz9BzOa0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B927E/CCD6ED1C68DF11EA97B15524C4F9AE02/NG3w702Lxjw4JNbkkAZ0YyVHsIo.crl rsync://rpki.apnic.net/member_repository/A91B927E/CCD6ED1C68DF11EA97B15524C4F9AE02/NG3w702Lxjw4JNbkkAZ0YyVHsIo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NG3w702Lxjw4JNbkkAZ0YyVHsIo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Apr 2025 19:49:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2595 (0xa23) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B927E Validity Not Before: Apr 2 19:49:48 2025 GMT Not After : Apr 9 19:49:48 2025 GMT Subject: CN=67ed94dd-7f3c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:dc:e9:fc:50:1d:99:f0:d7:3c:43:f5:34:de: 3e:f4:66:ca:f3:06:b0:0b:4c:f1:d5:cf:c4:db:79: 40:65:b9:ec:9a:39:b9:68:90:93:a3:ed:b8:0e:ed: 7f:82:94:33:71:6a:cb:b6:35:72:8a:f8:7b:6e:cf: e3:07:f6:c1:ce:58:90:f2:12:e2:21:95:f0:9e:9e: 63:1b:8f:0b:f7:a2:fe:1f:7e:65:59:a7:c3:98:d4: 95:13:a3:30:3d:99:89:66:20:32:f2:0f:e9:d1:be: ac:fe:33:49:21:6b:51:9a:94:ae:32:d6:92:1f:cb: c0:51:1c:5e:8b:cd:27:0c:d1:a1:3c:c9:03:3e:b7: ef:c1:21:0b:12:51:2b:0d:ac:b9:49:a8:b1:32:04: 91:49:32:c0:65:7a:b5:32:8c:72:c4:06:61:81:69: 51:18:16:1f:1c:85:28:11:68:8a:8d:6a:96:01:e4: 21:29:1b:00:64:97:0c:4f:02:de:cc:11:03:e7:e6: 78:75:4c:d1:ff:1b:b3:d9:07:54:be:12:c7:f9:9b: 07:bc:90:7e:ce:a6:0b:de:8f:b0:ba:4a:fc:ad:81: da:b8:88:93:b8:83:13:67:36:1f:ca:77:a2:08:11: 73:7d:18:6a:e3:71:c3:94:81:97:d3:f6:12:29:e8: 73:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:75:BF:0F:6C:6D:FF:9E:58:58:44:AC:58:DE:45:70:9D:0E:B8:AB X509v3 Authority Key Identifier: keyid:34:6D:F0:EF:4D:8B:C6:3C:38:24:D6:E4:90:06:74:63:25:47:B0:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B927E/CCD6ED1C68DF11EA97B15524C4F9AE02/NG3w702Lxjw4JNbkkAZ0YyVHsIo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NG3w702Lxjw4JNbkkAZ0YyVHsIo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B927E/CCD6ED1C68DF11EA97B15524C4F9AE02/NG3w702Lxjw4JNbkkAZ0YyVHsIo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 73:0b:4c:39:2a:6c:77:75:ac:42:c0:b6:86:62:21:38:c2:02: 74:f3:cd:fe:d5:35:7c:77:61:ea:5e:2d:07:28:bb:41:22:25: 26:67:ab:83:8d:e2:d3:72:7f:f3:95:4e:01:5d:b0:39:e7:4f: 98:51:1f:1b:26:46:6b:91:ab:83:71:9f:98:13:41:6e:3d:6d: 21:23:c7:0a:e6:bd:1a:21:ff:d9:16:e3:bf:13:46:6f:07:da: 9d:76:78:1d:9f:28:64:26:4a:e0:ac:2a:36:7b:22:d1:45:8c: 8c:13:f7:5b:b0:99:2b:8e:fb:e6:f1:23:fb:42:62:ec:54:69: 63:8d:be:a2:de:73:55:f5:ce:bc:ae:42:4a:8b:7e:39:c0:29: 7d:79:e3:e9:e8:f4:60:08:65:4a:7d:1d:de:64:ac:7d:b8:38: 25:31:e9:b5:e2:3c:69:7d:9c:3d:f4:ea:71:f4:0e:8e:21:6e: 61:77:76:80:02:9c:66:96:a0:60:4a:a0:00:4b:91:52:ca:e5: 4f:ec:46:ee:0c:47:b4:c8:88:49:98:03:a1:2e:9f:56:ee:ae: fc:c3:f0:5b:20:1c:26:50:a0:8b:b3:af:76:14:d5:bb:df:2c: f0:5c:1c:b8:af:e0:c8:90:f3:11:de:ff:1d:f7:73:87:d8:4d: 9b:40:d5:fd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCiMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjkyN0UxMTAvBgNVBAUTKDM0NkRGMEVGNEQ4QkM2M0MzODI0RDZFNDkwMDY3NDYz MjU0N0IwOEEwHhcNMjUwNDAyMTk0OTQ4WhcNMjUwNDA5MTk0OTQ4WjAYMRYwFAYD VQQDEw02N2VkOTRkZC03ZjNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAntzp/FAdmfDXPEP1NN4+9GbK8wawC0zx1c/E23lAZbnsmjm5aJCTo+24Du1/ gpQzcWrLtjVyivh7bs/jB/bBzliQ8hLiIZXwnp5jG48L96L+H35lWafDmNSVE6Mw PZmJZiAy8g/p0b6s/jNJIWtRmpSuMtaSH8vAURxei80nDNGhPMkDPrfvwSELElEr Day5SaixMgSRSTLAZXq1MoxyxAZhgWlRGBYfHIUoEWiKjWqWAeQhKRsAZJcMTwLe zBED5+Z4dUzR/xuz2QdUvhLH+ZsHvJB+zqYL3o+wukr8rYHauIiTuIMTZzYfynei CBFzfRhq43HDlIGX0/YSKehzRQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKZ1vw9s bf+eWFhErFjeRXCdDrirMB8GA1UdIwQYMBaAFDRt8O9Ni8Y8OCTW5JAGdGMlR7CK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOTI3RS9DQ0Q2RUQxQzY4 REYxMUVBOTdCMTU1MjRDNEY5QUUwMi9ORzN3NzAyTHhqdzRKTmJra0FaMFl5Vkhz SW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05HM3c3MDJMeGp3NEpOYmtrQVowWXlWSHNJby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC OTI3RS9DQ0Q2RUQxQzY4REYxMUVBOTdCMTU1MjRDNEY5QUUwMi9ORzN3NzAyTHhq dzRKTmJra0FaMFl5VkhzSW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBzC0w5Kmx3daxCwLaGYiE4wgJ0883+1TV8d2HqXi0HKLtBIiUmZ6uD jeLTcn/zlU4BXbA550+YUR8bJkZrkauDcZ+YE0FuPW0hI8cK5r0aIf/ZFuO/E0Zv B9qddngdnyhkJkrgrCo2eyLRRYyME/dbsJkrjvvm8SP7QmLsVGljjb6i3nNV9c68 rkJKi345wCl9eePp6PRgCGVKfR3eZKx9uDglMem14jxpfZw99Opx9A6OIW5hd3aA ApxmlqBgSqAAS5FSyuVP7EbuDEe0yIhJmAOhLp9W7q78w/BbIBwmUKCLs692FNW7 3yzwXBy4r+DIkPMR3v8d93OH2E2bQNX9 -----END CERTIFICATE-----Generated at Fri Apr 4 22:00:29 2025 by rpki-client