$ rpki-client -vvf rpki.apnic.net/member_repository/A91B9385/73CF676A8A0B11EAA2964C0BC4F9AE02/Nb-dxVNaaDq2lad4JnhtPfnixbQ.mft File: Nb-dxVNaaDq2lad4JnhtPfnixbQ.mft (raw, json) Hash identifier: gejnaoNuFnSUbOPLzH6QkLkwdDgiOK8EliQMwkYSjec= Subject key identifier: 18:8C:99:EC:A1:08:D4:B2:C3:26:41:9A:5E:FA:88:AD:A3:F8:63:BE Authority key identifier: 35:BF:9D:C5:53:5A:68:3A:B6:95:A7:78:26:78:6D:3D:F9:E2:C5:B4 Certificate issuer: /CN=A91B9385/serialNumber=35BF9DC5535A683AB695A77826786D3DF9E2C5B4 Certificate serial: 097F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nb-dxVNaaDq2lad4JnhtPfnixbQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B9385/73CF676A8A0B11EAA2964C0BC4F9AE02/Nb-dxVNaaDq2lad4JnhtPfnixbQ.mft Manifest number: 0979 Signing time: Wed 02 Apr 2025 20:10:40 +0000 Manifest this update: Wed 02 Apr 2025 20:10:40 +0000 Manifest next update: Wed 09 Apr 2025 20:10:40 +0000 Files and hashes: 1: Nb-dxVNaaDq2lad4JnhtPfnixbQ.crl (hash: 0KFQD5IQeE2cf+mz8Q7rsLYIpb634LXxRI4E9nngYI8=) 2: 5197AD868A0D11EAA9BA2E0FC4F9AE02.roa (hash: AMJQ1+Gi+Yyv8xwV6R2XZnBmrwaFZwHHnnFnkWB/QsY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B9385/73CF676A8A0B11EAA2964C0BC4F9AE02/Nb-dxVNaaDq2lad4JnhtPfnixbQ.crl rsync://rpki.apnic.net/member_repository/A91B9385/73CF676A8A0B11EAA2964C0BC4F9AE02/Nb-dxVNaaDq2lad4JnhtPfnixbQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nb-dxVNaaDq2lad4JnhtPfnixbQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Apr 2025 20:10:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2431 (0x97f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B9385 Validity Not Before: Apr 2 20:10:40 2025 GMT Not After : Apr 9 20:10:40 2025 GMT Subject: CN=67ed99c0-cbec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:ff:ad:4f:86:64:0f:65:2f:cd:5a:e6:17:5e: f7:26:41:97:8f:6c:8b:a1:5c:1d:bb:fb:61:b1:95: 39:66:19:cc:91:79:de:53:21:62:5c:3d:c4:5b:18: 84:54:57:0f:45:57:20:d1:a0:1e:f8:81:3b:3b:2c: 6f:99:d5:1d:d4:9b:f9:44:d1:48:aa:61:f3:ff:82: 04:d2:81:58:13:b9:52:ab:df:86:1a:a7:ba:03:ee: 58:4f:de:ee:32:df:fd:91:2f:fe:c8:38:48:a8:a8: 66:af:d2:36:f5:c6:69:c7:51:da:46:c1:ba:76:6b: 0b:80:22:19:42:23:1c:a6:79:5d:8e:4c:e3:fd:50: 09:70:92:18:e0:29:1f:4f:66:2a:e1:59:72:15:e9: 10:cf:96:88:12:61:3e:51:6d:74:8b:cd:3f:10:e4: 28:17:9a:0b:bc:04:a5:90:7a:6b:75:88:a9:2b:c3: 2c:33:8a:d3:7b:63:55:16:85:1a:52:d0:7a:43:b8: d3:51:87:e7:ed:a4:44:bc:97:bc:d4:71:af:a7:ab: 63:d4:31:39:00:0d:b8:bd:25:68:f1:99:61:ae:d6: d9:fa:4d:7a:7b:46:aa:8f:ac:00:f2:76:9a:51:8d: 58:3e:5a:35:d4:18:0b:54:6e:fe:89:65:12:ed:0f: 6f:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:8C:99:EC:A1:08:D4:B2:C3:26:41:9A:5E:FA:88:AD:A3:F8:63:BE X509v3 Authority Key Identifier: keyid:35:BF:9D:C5:53:5A:68:3A:B6:95:A7:78:26:78:6D:3D:F9:E2:C5:B4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B9385/73CF676A8A0B11EAA2964C0BC4F9AE02/Nb-dxVNaaDq2lad4JnhtPfnixbQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nb-dxVNaaDq2lad4JnhtPfnixbQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B9385/73CF676A8A0B11EAA2964C0BC4F9AE02/Nb-dxVNaaDq2lad4JnhtPfnixbQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7f:f3:76:1c:5f:00:95:03:05:66:0b:58:59:52:bd:09:a2:ad: a4:99:b7:8a:b3:ca:c6:1c:d7:e6:5a:7f:fb:85:1c:35:f2:a9: 6b:8e:9e:72:06:7f:48:35:d3:4d:ae:56:0b:3f:8f:17:39:5c: 24:57:65:0c:d8:9a:29:fc:29:76:a0:01:b1:ba:f8:d2:f6:83: de:06:f7:5c:15:d7:68:99:7b:13:cf:52:34:f8:ea:60:4f:22: 20:25:e7:ce:29:63:cd:09:1e:c7:e6:fc:ff:9e:c4:f8:f5:32: a0:33:05:c2:b5:e2:fc:58:c4:38:b5:6e:94:25:92:74:93:7c: b4:d3:41:19:df:21:18:bc:92:0f:24:ed:90:ce:89:5e:35:4d: 04:64:35:b7:2c:69:6e:d0:d2:78:0d:7e:a3:77:76:f8:76:fe: 95:56:de:e3:cc:35:6b:f3:95:81:50:8d:7d:aa:9e:de:ab:b2: d6:d1:05:89:d8:7e:63:13:cf:87:f0:1f:95:d2:1e:03:07:75: 97:f4:7f:6f:ad:77:f8:d5:db:46:98:2e:9a:37:08:68:86:93: bb:dd:a2:11:c1:95:01:3b:d1:9d:cc:46:3d:ca:f9:7c:90:f0: 79:34:3c:18:01:d4:63:65:cd:0d:39:79:ae:98:c0:51:e4:31: 69:21:64:6b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCX8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjkzODUxMTAvBgNVBAUTKDM1QkY5REM1NTM1QTY4M0FCNjk1QTc3ODI2Nzg2RDNE RjlFMkM1QjQwHhcNMjUwNDAyMjAxMDQwWhcNMjUwNDA5MjAxMDQwWjAYMRYwFAYD VQQDEw02N2VkOTljMC1jYmVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzf+tT4ZkD2UvzVrmF173JkGXj2yLoVwdu/thsZU5ZhnMkXneUyFiXD3EWxiE VFcPRVcg0aAe+IE7OyxvmdUd1Jv5RNFIqmHz/4IE0oFYE7lSq9+GGqe6A+5YT97u Mt/9kS/+yDhIqKhmr9I29cZpx1HaRsG6dmsLgCIZQiMcpnldjkzj/VAJcJIY4Ckf T2Yq4VlyFekQz5aIEmE+UW10i80/EOQoF5oLvASlkHprdYipK8MsM4rTe2NVFoUa UtB6Q7jTUYfn7aREvJe81HGvp6tj1DE5AA24vSVo8ZlhrtbZ+k16e0aqj6wA8naa UY1YPlo11BgLVG7+iWUS7Q9vlQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBiMmeyh CNSywyZBml76iK2j+GO+MB8GA1UdIwQYMBaAFDW/ncVTWmg6tpWneCZ4bT354sW0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOTM4NS83M0NGNjc2QThB MEIxMUVBQTI5NjRDMEJDNEY5QUUwMi9OYi1keFZOYWFEcTJsYWQ0Sm5odFBmbml4 YlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05iLWR4Vk5hYURxMmxhZDRKbmh0UGZuaXhiUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC OTM4NS83M0NGNjc2QThBMEIxMUVBQTI5NjRDMEJDNEY5QUUwMi9OYi1keFZOYWFE cTJsYWQ0Sm5odFBmbml4YlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB/83YcXwCVAwVmC1hZUr0Joq2kmbeKs8rGHNfmWn/7hRw18qlrjp5y Bn9INdNNrlYLP48XOVwkV2UM2Jop/Cl2oAGxuvjS9oPeBvdcFddomXsTz1I0+Opg TyIgJefOKWPNCR7H5vz/nsT49TKgMwXCteL8WMQ4tW6UJZJ0k3y000EZ3yEYvJIP JO2QzoleNU0EZDW3LGlu0NJ4DX6jd3b4dv6VVt7jzDVr85WBUI19qp7eq7LW0QWJ 2H5jE8+H8B+V0h4DB3WX9H9vrXf41dtGmC6aNwhohpO73aIRwZUBO9GdzEY9yvl8 kPB5NDwYAdRjZc0NOXmumMBR5DFpIWRr -----END CERTIFICATE-----Generated at Fri Apr 4 22:01:46 2025 by rpki-client