$ rpki-client -vvf rpki.apnic.net/member_repository/A91C2913/8B43B736FE4911EFA735AD6FC4F9AE02/MN_NyJLnPuJUZCgnQuKcVn6jzgM.mft File: MN_NyJLnPuJUZCgnQuKcVn6jzgM.mft (raw, json) Hash identifier: aqiL/z6RKApvoL6zAxokH5gLG9/yozZDwe5EwbJNLrw= Subject key identifier: B4:25:94:F9:F9:CC:34:EC:05:89:91:FB:0A:A2:07:83:86:7B:B2:90 Authority key identifier: 30:DF:CD:C8:92:E7:3E:E2:54:64:28:27:42:E2:9C:56:7E:A3:CE:03 Certificate issuer: /CN=A91C2913/serialNumber=30DFCDC892E73EE25464282742E29C567EA3CE03 Certificate serial: 12 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MN_NyJLnPuJUZCgnQuKcVn6jzgM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C2913/8B43B736FE4911EFA735AD6FC4F9AE02/MN_NyJLnPuJUZCgnQuKcVn6jzgM.mft Manifest number: 10 Signing time: Thu 03 Apr 2025 07:22:00 +0000 Manifest this update: Thu 03 Apr 2025 07:22:00 +0000 Manifest next update: Thu 10 Apr 2025 07:22:00 +0000 Files and hashes: 1: MN_NyJLnPuJUZCgnQuKcVn6jzgM.crl (hash: svZ5D1Uq7SN9OuKul4A8JBdgH7UfmAO/V1Eg4silVQ8=) 2: 7273BDA4FE4A11EF8A0EDD73C4F9AE02.roa (hash: aKDX+epsv+87CublFWvfDFPYgSLhuAtHebX+rfx7L+w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C2913/8B43B736FE4911EFA735AD6FC4F9AE02/MN_NyJLnPuJUZCgnQuKcVn6jzgM.crl rsync://rpki.apnic.net/member_repository/A91C2913/8B43B736FE4911EFA735AD6FC4F9AE02/MN_NyJLnPuJUZCgnQuKcVn6jzgM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MN_NyJLnPuJUZCgnQuKcVn6jzgM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Apr 2025 07:21:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18 (0x12) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C2913 Validity Not Before: Apr 3 07:22:00 2025 GMT Not After : Apr 10 07:22:00 2025 GMT Subject: CN=67ee3718-ae7a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:59:b1:24:ca:79:19:bb:33:f2:74:5d:ba:f3: a6:4e:e4:fc:26:0b:51:00:5b:1a:d9:2b:81:46:76: 9e:e3:da:db:fe:9d:dd:bd:fa:df:b2:57:00:83:cf: 59:dc:16:5f:7f:72:4a:81:9b:5a:a8:14:19:ca:9c: c9:f8:65:3e:5e:8d:e1:17:a8:2e:95:e9:fe:7d:09: cb:16:85:23:51:0b:4c:d1:de:12:6e:2e:d7:12:c6: d9:6e:07:fd:5d:2f:dd:bd:ed:3c:f7:ea:b3:a0:8c: e7:7f:48:16:86:e0:9b:23:b0:7d:47:a5:28:db:aa: 22:bd:f9:7e:7f:c7:4d:cb:5b:43:cc:04:90:c0:f9: fe:0e:81:4c:b5:e8:05:70:ec:34:2c:7a:70:6b:fc: 43:fd:93:f5:c2:e7:27:e1:43:ea:a3:56:27:3a:de: 2d:db:13:76:ca:b9:ea:b6:84:83:df:3f:6a:56:07: 56:d4:1d:e0:88:df:93:ed:38:b7:a3:71:c5:15:6c: a1:3d:96:11:c0:98:33:ee:31:d8:ce:2a:c8:2a:08: 53:7f:9a:70:0b:1e:32:ef:f4:eb:8b:ea:2a:b8:65: e4:8a:93:13:3b:28:d0:40:a2:c1:66:2e:81:a2:8f: b2:fb:16:e6:04:52:7c:e5:da:0a:fa:f0:8c:16:58: 79:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:25:94:F9:F9:CC:34:EC:05:89:91:FB:0A:A2:07:83:86:7B:B2:90 X509v3 Authority Key Identifier: keyid:30:DF:CD:C8:92:E7:3E:E2:54:64:28:27:42:E2:9C:56:7E:A3:CE:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C2913/8B43B736FE4911EFA735AD6FC4F9AE02/MN_NyJLnPuJUZCgnQuKcVn6jzgM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MN_NyJLnPuJUZCgnQuKcVn6jzgM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C2913/8B43B736FE4911EFA735AD6FC4F9AE02/MN_NyJLnPuJUZCgnQuKcVn6jzgM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 74:41:25:58:62:88:9a:a5:69:52:96:fc:0b:45:6d:57:c2:a4: 89:81:97:9d:20:70:bc:c0:37:db:e1:ac:a4:24:e0:ee:a5:0e: 4e:c0:81:37:12:7f:43:03:81:c0:3b:47:71:4d:e6:75:9b:d5: 73:9f:7d:e7:b5:89:ee:d7:ea:94:77:ee:45:de:9e:14:21:9f: f3:50:ff:47:0b:57:d1:7c:e7:06:d3:cf:45:b6:97:91:ff:fe: b4:ab:f7:46:79:a7:4b:96:6e:d6:37:99:26:30:15:db:13:8b: 6d:da:9d:9f:21:78:15:f2:8b:89:bb:9d:68:38:8e:28:1f:eb: 12:20:47:73:9d:af:5b:44:a9:46:44:84:e4:7d:94:16:3d:f4: 96:07:29:d8:6c:33:aa:34:b0:d1:15:4b:55:28:6d:b8:a8:ca: f1:ff:e8:f4:f4:52:fd:94:66:41:93:dc:fc:1e:97:33:3b:a5: c5:1a:0a:ee:98:b1:e0:9b:7d:f9:f3:64:c5:e5:b8:04:9b:29: d3:c4:3e:22:c4:6f:df:66:45:c4:6a:8e:01:25:79:7a:0e:ec: 89:c7:01:0b:c0:62:54:b9:68:13:27:5f:a9:88:6f:d4:e8:23: 43:8c:3d:80:29:b5:a4:e3:03:2c:8c:af:67:68:18:7a:db:bf: e9:d7:c3:3e -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBEjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD MjkxMzExMC8GA1UEBRMoMzBERkNEQzg5MkU3M0VFMjU0NjQyODI3NDJFMjlDNTY3 RUEzQ0UwMzAeFw0yNTA0MDMwNzIyMDBaFw0yNTA0MTAwNzIyMDBaMBgxFjAUBgNV BAMTDTY3ZWUzNzE4LWFlN2EwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCpWbEkynkZuzPydF2686ZO5PwmC1EAWxrZK4FGdp7j2tv+nd29+t+yVwCDz1nc Fl9/ckqBm1qoFBnKnMn4ZT5ejeEXqC6V6f59CcsWhSNRC0zR3hJuLtcSxtluB/1d L9297Tz36rOgjOd/SBaG4JsjsH1HpSjbqiK9+X5/x03LW0PMBJDA+f4OgUy16AVw 7DQsenBr/EP9k/XC5yfhQ+qjVic63i3bE3bKueq2hIPfP2pWB1bUHeCI35PtOLej ccUVbKE9lhHAmDPuMdjOKsgqCFN/mnALHjLv9OuL6iq4ZeSKkxM7KNBAosFmLoGi j7L7FuYEUnzl2gr68IwWWHnBAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUtCWU+fnM NOwFiZH7CqIHg4Z7spAwHwYDVR0jBBgwFoAUMN/NyJLnPuJUZCgnQuKcVn6jzgMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUMyOTEzLzhCNDNCNzM2RkU0 OTExRUZBNzM1QUQ2RkM0RjlBRTAyL01OX055SkxuUHVKVVpDZ25RdUtjVm42anpn TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvTU5fTnlKTG5QdUpVWkNnblF1S2NWbjZqemdNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUMy OTEzLzhCNDNCNzM2RkU0OTExRUZBNzM1QUQ2RkM0RjlBRTAyL01OX055SkxuUHVK VVpDZ25RdUtjVm42anpnTS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAHRBJVhiiJqlaVKW/AtFbVfCpImBl50gcLzAN9vhrKQk4O6lDk7AgTcS f0MDgcA7R3FN5nWb1XOffee1ie7X6pR37kXenhQhn/NQ/0cLV9F85wbTz0W2l5H/ /rSr90Z5p0uWbtY3mSYwFdsTi23anZ8heBXyi4m7nWg4jigf6xIgR3Odr1tEqUZE hOR9lBY99JYHKdhsM6o0sNEVS1UobbioyvH/6PT0Uv2UZkGT3PwelzM7pcUaCu6Y seCbffnzZMXluASbKdPEPiLEb99mRcRqjgEleXoO7InHAQvAYlS5aBMnX6mIb9To I0OMPYAptaTjAyyMr2doGHrbv+nXwz4= -----END CERTIFICATE-----Generated at Fri Apr 4 22:06:31 2025 by rpki-client