$ rpki-client -vvf rpki.apnic.net/member_repository/A91C456F/D33FC82AA08411EC94AD2A37C4F9AE02/N6CiG7WFEffv59KwRIPtgLSgIzo.mft File: N6CiG7WFEffv59KwRIPtgLSgIzo.mft (raw, json) Hash identifier: E1svx+7NVAYixdc5XncZREoBhYM7McQ+wBAoIr9azpM= Subject key identifier: CA:47:15:DF:34:03:B5:67:E1:74:DB:73:B6:9F:4D:57:D8:B1:69:22 Authority key identifier: 37:A0:A2:1B:B5:85:11:F7:EF:E7:D2:B0:44:83:ED:80:B4:A0:23:3A Certificate issuer: /CN=A91C456F/serialNumber=37A0A21BB58511F7EFE7D2B04483ED80B4A0233A Certificate serial: 0376 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N6CiG7WFEffv59KwRIPtgLSgIzo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C456F/D33FC82AA08411EC94AD2A37C4F9AE02/N6CiG7WFEffv59KwRIPtgLSgIzo.mft Manifest number: 0372 Signing time: Sat 05 Apr 2025 01:04:33 +0000 Manifest this update: Sat 05 Apr 2025 01:04:32 +0000 Manifest next update: Sat 12 Apr 2025 01:04:32 +0000 Files and hashes: 1: N6CiG7WFEffv59KwRIPtgLSgIzo.crl (hash: 63BieXPsz3+URu1BadgDVd6dg48O8FLkWZhAYBscVGA=) 2: AF95CCA0A08711EC88A88D39C4F9AE02.roa (hash: f88t3B3XEIrStaMOLBEX51aBDTSHx6vviz1RmYW+1Aw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C456F/D33FC82AA08411EC94AD2A37C4F9AE02/N6CiG7WFEffv59KwRIPtgLSgIzo.crl rsync://rpki.apnic.net/member_repository/A91C456F/D33FC82AA08411EC94AD2A37C4F9AE02/N6CiG7WFEffv59KwRIPtgLSgIzo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N6CiG7WFEffv59KwRIPtgLSgIzo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 01:04:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 886 (0x376) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C456F Validity Not Before: Apr 5 01:04:32 2025 GMT Not After : Apr 12 01:04:32 2025 GMT Subject: CN=67f081a1-9184 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:84:23:66:be:0a:fa:8c:f9:97:87:8a:12:32: ff:59:16:bb:f7:b0:ea:32:d2:23:16:e3:1a:da:a5: 7c:d5:9e:39:ce:19:9b:4c:ef:08:48:da:3b:f6:a9: 9b:d2:43:fd:75:03:4a:23:d6:e1:18:9b:8d:ea:e3: dd:f0:ec:53:fd:de:61:59:c3:17:88:66:dd:38:00: 09:2c:d5:0a:62:70:37:21:40:b1:c9:64:35:ee:ad: ea:27:ee:2f:88:45:8c:f6:60:95:88:34:59:a9:fe: cb:5c:f3:27:0f:be:45:9d:f4:07:79:21:4e:7e:0f: 25:62:c0:fa:6a:53:0e:fa:e9:13:a7:d5:df:5b:cf: b7:7f:83:c7:4b:ec:a9:3b:02:08:37:95:7a:5c:b5: 41:ad:55:d5:f2:23:e9:f3:a3:b7:e4:54:da:b3:a8: ed:1a:e4:dd:7d:01:84:c1:db:f9:c6:0d:8e:9d:c9: 8e:01:52:68:24:04:ee:2e:df:ce:b7:36:96:ae:a0: fa:f2:4f:6d:67:8a:b3:a1:f6:64:bd:78:72:26:8e: 78:be:78:15:ce:87:9b:d9:6d:2e:eb:38:fb:db:cb: ac:08:53:e1:8d:08:e3:db:5f:74:23:99:54:4f:28: d0:c2:9a:a3:3b:88:58:16:47:3e:d4:b4:4a:c4:63: 5c:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:47:15:DF:34:03:B5:67:E1:74:DB:73:B6:9F:4D:57:D8:B1:69:22 X509v3 Authority Key Identifier: keyid:37:A0:A2:1B:B5:85:11:F7:EF:E7:D2:B0:44:83:ED:80:B4:A0:23:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C456F/D33FC82AA08411EC94AD2A37C4F9AE02/N6CiG7WFEffv59KwRIPtgLSgIzo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N6CiG7WFEffv59KwRIPtgLSgIzo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C456F/D33FC82AA08411EC94AD2A37C4F9AE02/N6CiG7WFEffv59KwRIPtgLSgIzo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 58:87:4e:e6:90:9a:98:83:4c:33:3b:12:4f:f1:80:65:24:b9: 50:63:59:cc:ef:e2:9b:00:47:01:09:54:24:e8:ed:73:8b:a7: ea:37:60:e2:a2:50:fb:41:9a:6e:eb:47:d3:56:52:bf:55:eb: c1:bc:bd:dc:12:ba:30:f5:c8:64:dd:89:03:4f:a5:bf:1c:37: 51:ad:67:d8:53:15:74:af:87:9c:77:2c:55:c2:ce:38:21:9a: c4:5d:30:bb:5e:26:c8:07:6a:d9:60:6a:2b:06:6d:e7:96:1c: 1e:96:14:63:de:78:80:6e:3c:4d:03:57:ff:8a:e8:1b:f7:1c: 1e:a6:38:eb:d9:27:0d:9b:17:e1:9c:4d:2a:bc:e6:5b:94:b9: c7:68:68:f4:f9:fa:e1:80:77:17:b7:3a:fa:a0:46:9a:4f:c8: 93:f5:3e:37:3f:d0:f9:82:a5:6d:63:b9:ba:28:33:dc:1f:f4: b0:61:13:62:15:d5:af:e0:c9:d9:40:44:11:03:03:cd:c9:74: eb:ea:58:2d:e0:32:ae:de:97:e4:8e:39:dc:8f:89:d7:8e:a2: 03:05:3c:43:fd:06:bb:a2:f7:46:59:09:0b:4d:9d:73:4a:ca: 02:d1:6f:26:8f:99:4e:25:09:31:3f:c8:d1:92:1f:1e:e0:53: 27:ab:f4:46 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA3YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzQ1NkYxMTAvBgNVBAUTKDM3QTBBMjFCQjU4NTExRjdFRkU3RDJCMDQ0ODNFRDgw QjRBMDIzM0EwHhcNMjUwNDA1MDEwNDMyWhcNMjUwNDEyMDEwNDMyWjAYMRYwFAYD VQQDEw02N2YwODFhMS05MTg0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA64QjZr4K+oz5l4eKEjL/WRa797DqMtIjFuMa2qV81Z45zhmbTO8ISNo79qmb 0kP9dQNKI9bhGJuN6uPd8OxT/d5hWcMXiGbdOAAJLNUKYnA3IUCxyWQ17q3qJ+4v iEWM9mCViDRZqf7LXPMnD75FnfQHeSFOfg8lYsD6alMO+ukTp9XfW8+3f4PHS+yp OwIIN5V6XLVBrVXV8iPp86O35FTas6jtGuTdfQGEwdv5xg2OncmOAVJoJATuLt/O tzaWrqD68k9tZ4qzofZkvXhyJo54vngVzoeb2W0u6zj728usCFPhjQjj2190I5lU TyjQwpqjO4hYFkc+1LRKxGNcSwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMpHFd80 A7Vn4XTbc7afTVfYsWkiMB8GA1UdIwQYMBaAFDegohu1hRH37+fSsESD7YC0oCM6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNDU2Ri9EMzNGQzgyQUEw ODQxMUVDOTRBRDJBMzdDNEY5QUUwMi9ONkNpRzdXRkVmZnY1OUt3UklQdGdMU2dJ em8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL042Q2lHN1dGRWZmdjU5S3dSSVB0Z0xTZ0l6by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NDU2Ri9EMzNGQzgyQUEwODQxMUVDOTRBRDJBMzdDNEY5QUUwMi9ONkNpRzdXRkVm ZnY1OUt3UklQdGdMU2dJem8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBYh07mkJqYg0wzOxJP8YBlJLlQY1nM7+KbAEcBCVQk6O1zi6fqN2Di olD7QZpu60fTVlK/VevBvL3cErow9chk3YkDT6W/HDdRrWfYUxV0r4ecdyxVws44 IZrEXTC7XibIB2rZYGorBm3nlhwelhRj3niAbjxNA1f/iugb9xwepjjr2ScNmxfh nE0qvOZblLnHaGj0+frhgHcXtzr6oEaaT8iT9T43P9D5gqVtY7m6KDPcH/SwYRNi FdWv4MnZQEQRAwPNyXTr6lgt4DKu3pfkjjncj4nXjqIDBTxD/Qa7ovdGWQkLTZ1z SsoC0W8mj5lOJQkxP8jRkh8e4FMnq/RG -----END CERTIFICATE-----Generated at Sat Apr 5 12:35:07 2025 by rpki-client