$ rpki-client -vvf rpki.apnic.net/member_repository/A91C6064/52FEF73A297011EB91E9DE54C4F9AE02/NFMkWvnnaQX2mpDxzs2F6og_6hY.mft File: NFMkWvnnaQX2mpDxzs2F6og_6hY.mft (raw, json) Hash identifier: 07ljgUwkx7DZSARpekyQB/MMsBlvNVTsAnxnt20bL5c= Subject key identifier: 39:C3:F2:8C:50:77:56:4A:6B:D2:DA:20:80:99:6D:38:D2:8F:91:7A Authority key identifier: 34:53:24:5A:F9:E7:69:05:F6:9A:90:F1:CE:CD:85:EA:88:3F:EA:16 Certificate issuer: /CN=A91C6064/serialNumber=3453245AF9E76905F69A90F1CECD85EA883FEA16 Certificate serial: 072F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NFMkWvnnaQX2mpDxzs2F6og_6hY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C6064/52FEF73A297011EB91E9DE54C4F9AE02/NFMkWvnnaQX2mpDxzs2F6og_6hY.mft Manifest number: 0728 Signing time: Wed 02 Apr 2025 21:47:05 +0000 Manifest this update: Wed 02 Apr 2025 21:47:04 +0000 Manifest next update: Wed 09 Apr 2025 21:47:04 +0000 Files and hashes: 1: NFMkWvnnaQX2mpDxzs2F6og_6hY.crl (hash: zG1xYnrhEKRYFrDknsvpgii4VU16fNhC1OtmwV5XXJQ=) 2: 0BAA4608297211EB99ECF956C4F9AE02.roa (hash: Pzy/lWlyEAOnnToKQdX1gv5KRRU1QsPgl9JiMWq4wxE=) 3: E9D321CEF2F611EE95E10935C4F9AE02.roa (hash: 0MDsliqtqRrojbtZYNkkZiieXi7syQdv9RVqPyRdcns=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C6064/52FEF73A297011EB91E9DE54C4F9AE02/NFMkWvnnaQX2mpDxzs2F6og_6hY.crl rsync://rpki.apnic.net/member_repository/A91C6064/52FEF73A297011EB91E9DE54C4F9AE02/NFMkWvnnaQX2mpDxzs2F6og_6hY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NFMkWvnnaQX2mpDxzs2F6og_6hY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Apr 2025 21:47:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1839 (0x72f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C6064 Validity Not Before: Apr 2 21:47:04 2025 GMT Not After : Apr 9 21:47:04 2025 GMT Subject: CN=67edb059-9e8e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:07:39:d5:52:56:84:09:59:22:4c:c9:01:96: bd:22:21:cd:8b:88:41:d9:71:ef:75:83:17:c8:b8: 2d:02:a9:06:e4:d5:64:f6:aa:30:ad:ab:c0:d9:bf: 4a:8f:79:16:30:2f:3f:eb:2d:e7:38:23:20:c6:69: 6f:8a:d7:69:89:e2:14:d5:3c:9f:2f:44:c7:34:4b: e0:c3:da:7f:ae:dd:da:9d:45:fd:ac:fa:7b:e0:b6: ea:5d:7d:53:c1:34:5b:6b:8d:aa:63:ed:3e:df:90: 65:d4:82:8e:c6:f3:20:0e:6c:6b:a4:e1:8a:74:cb: 5e:f0:3d:6d:de:26:fa:a1:14:82:6d:82:61:d7:b8: d9:fd:5c:da:b0:6d:ed:d5:8d:2d:22:5e:76:3c:46: 05:18:60:64:8d:46:5f:d3:be:50:ec:20:d5:43:e1: 86:f3:3e:f3:c0:d1:1d:3e:10:79:e2:5b:83:c0:2e: 86:d5:d2:90:5e:59:9d:38:35:3a:bb:1b:f8:39:34: c9:b0:89:4b:66:53:bb:82:6a:1f:4e:e7:dd:40:60: 53:6b:7f:3b:5b:e3:a0:f6:83:1c:1e:ee:d1:cd:39: 2e:5a:d4:b3:87:07:1e:9b:c7:96:ab:8a:18:2d:7d: 96:1a:df:e9:8b:cc:ad:9e:00:9e:6f:ec:21:46:44: b6:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:C3:F2:8C:50:77:56:4A:6B:D2:DA:20:80:99:6D:38:D2:8F:91:7A X509v3 Authority Key Identifier: keyid:34:53:24:5A:F9:E7:69:05:F6:9A:90:F1:CE:CD:85:EA:88:3F:EA:16 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C6064/52FEF73A297011EB91E9DE54C4F9AE02/NFMkWvnnaQX2mpDxzs2F6og_6hY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NFMkWvnnaQX2mpDxzs2F6og_6hY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C6064/52FEF73A297011EB91E9DE54C4F9AE02/NFMkWvnnaQX2mpDxzs2F6og_6hY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 54:f1:bf:71:89:3e:aa:13:46:0b:ea:f2:47:66:8e:e4:47:bd: ea:c6:9f:90:9d:79:80:3d:4e:3e:4c:54:dd:e1:7a:63:8a:a6: 61:b2:4a:2b:2b:b7:ec:c7:09:2f:a5:2b:66:b2:9b:fc:55:b4: cd:05:43:bc:fc:92:6b:74:45:da:ba:bc:cd:18:b0:8f:c4:37: c3:46:c7:13:8a:7e:bb:c4:fc:7b:ea:44:95:52:db:24:6c:5b: ff:1b:a3:0e:83:e3:bf:de:66:d7:9a:9e:16:55:0b:c1:32:17: f0:cd:0d:14:0b:aa:3a:6f:7d:52:03:64:7f:32:a6:1e:32:36: ec:dc:36:2d:51:58:00:fc:ea:22:24:db:fe:1a:3e:d8:fc:e5: d2:ca:86:5f:f6:7e:cb:f1:fb:47:8d:41:4e:19:d3:0f:e5:61: ba:80:b0:11:11:be:a9:d1:ae:00:be:a6:07:da:95:1d:42:16: aa:68:2b:d3:51:3c:7c:f0:61:7b:a2:3e:60:ce:47:dd:1a:cc: 7a:c5:0a:5c:82:31:3e:1d:a4:cc:d5:e5:e3:9f:4f:12:71:17: cd:54:6a:f4:d2:da:d5:3b:43:a5:2a:78:44:77:93:af:d2:bc: 1c:99:56:a7:91:0e:06:77:ea:2a:6a:ab:7e:47:40:23:9f:f3: 5f:2b:d6:20 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBy8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzYwNjQxMTAvBgNVBAUTKDM0NTMyNDVBRjlFNzY5MDVGNjlBOTBGMUNFQ0Q4NUVB ODgzRkVBMTYwHhcNMjUwNDAyMjE0NzA0WhcNMjUwNDA5MjE0NzA0WjAYMRYwFAYD VQQDEw02N2VkYjA1OS05ZThlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsQc51VJWhAlZIkzJAZa9IiHNi4hB2XHvdYMXyLgtAqkG5NVk9qowravA2b9K j3kWMC8/6y3nOCMgxmlvitdpieIU1TyfL0THNEvgw9p/rt3anUX9rPp74LbqXX1T wTRba42qY+0+35Bl1IKOxvMgDmxrpOGKdMte8D1t3ib6oRSCbYJh17jZ/VzasG3t 1Y0tIl52PEYFGGBkjUZf075Q7CDVQ+GG8z7zwNEdPhB54luDwC6G1dKQXlmdODU6 uxv4OTTJsIlLZlO7gmofTufdQGBTa387W+Og9oMcHu7RzTkuWtSzhwcem8eWq4oY LX2WGt/pi8ytngCeb+whRkS2mQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDnD8oxQ d1ZKa9LaIICZbTjSj5F6MB8GA1UdIwQYMBaAFDRTJFr552kF9pqQ8c7NheqIP+oW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNjA2NC81MkZFRjczQTI5 NzAxMUVCOTFFOURFNTRDNEY5QUUwMi9ORk1rV3ZubmFRWDJtcER4enMyRjZvZ182 aFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05GTWtXdm5uYVFYMm1wRHh6czJGNm9nXzZoWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NjA2NC81MkZFRjczQTI5NzAxMUVCOTFFOURFNTRDNEY5QUUwMi9ORk1rV3ZubmFR WDJtcER4enMyRjZvZ182aFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBU8b9xiT6qE0YL6vJHZo7kR73qxp+QnXmAPU4+TFTd4XpjiqZhskor K7fsxwkvpStmspv8VbTNBUO8/JJrdEXaurzNGLCPxDfDRscTin67xPx76kSVUtsk bFv/G6MOg+O/3mbXmp4WVQvBMhfwzQ0UC6o6b31SA2R/MqYeMjbs3DYtUVgA/Ooi JNv+Gj7Y/OXSyoZf9n7L8ftHjUFOGdMP5WG6gLAREb6p0a4AvqYH2pUdQhaqaCvT UTx88GF7oj5gzkfdGsx6xQpcgjE+HaTM1eXjn08ScRfNVGr00trVO0OlKnhEd5Ov 0rwcmVankQ4Gd+oqaqt+R0Ajn/NfK9Yg -----END CERTIFICATE-----Generated at Fri Apr 4 22:32:11 2025 by rpki-client