$ rpki-client -vvf rpki.apnic.net/member_repository/A91C6CAF/F3E0FAE4B6F411EEAC203810C4F9AE02/nwLaOrX7RTF1B8SAIc4Ki5NyVck.mft File: nwLaOrX7RTF1B8SAIc4Ki5NyVck.mft (raw, json) Hash identifier: FXkRc6hcVTXjwfFyYRIvFfsCaDsi3OZLwcQgPwCPLqE= Subject key identifier: 03:CF:55:C9:16:56:EF:4A:31:75:B0:E2:B5:59:DC:3F:CE:34:EC:B3 Authority key identifier: 9F:02:DA:3A:B5:FB:45:31:75:07:C4:80:21:CE:0A:8B:93:72:55:C9 Certificate issuer: /CN=A91C6CAF/serialNumber=9F02DA3AB5FB45317507C48021CE0A8B937255C9 Certificate serial: FB Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nwLaOrX7RTF1B8SAIc4Ki5NyVck.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C6CAF/F3E0FAE4B6F411EEAC203810C4F9AE02/nwLaOrX7RTF1B8SAIc4Ki5NyVck.mft Manifest number: F1 Signing time: Wed 09 Apr 2025 04:19:40 +0000 Manifest this update: Wed 09 Apr 2025 04:19:39 +0000 Manifest next update: Wed 16 Apr 2025 04:19:39 +0000 Files and hashes: 1: nwLaOrX7RTF1B8SAIc4Ki5NyVck.crl (hash: blV8Hjimr+XxxbGSPutK682Iep9PS+15S+ja3PIelYE=) 2: 09E42D1E921B11EF829E0041C4F9AE02.roa (hash: B4bx9kA0p4n5ASz52WYMBOS7rU+I5DT2fmWjDq/qssM=) 3: 51E59058921B11EFB656CB41C4F9AE02.roa (hash: ZDrCMxxOwwuqNF0Q4xD3EvKSvIiYcNvuSOn5SbIs2mk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C6CAF/F3E0FAE4B6F411EEAC203810C4F9AE02/nwLaOrX7RTF1B8SAIc4Ki5NyVck.crl rsync://rpki.apnic.net/member_repository/A91C6CAF/F3E0FAE4B6F411EEAC203810C4F9AE02/nwLaOrX7RTF1B8SAIc4Ki5NyVck.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nwLaOrX7RTF1B8SAIc4Ki5NyVck.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 16 Apr 2025 04:19:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 251 (0xfb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C6CAF Validity Not Before: Apr 9 04:19:39 2025 GMT Not After : Apr 16 04:19:39 2025 GMT Subject: CN=67f5f55b-d578 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:50:a2:97:72:24:8d:55:fc:c3:b9:48:3f:de: db:2b:12:53:3a:9c:b0:4a:bc:c9:df:82:c4:8d:91: 08:df:36:e5:76:4c:e0:d0:5c:6b:a5:de:74:84:76: 58:5c:a6:15:3a:bc:ea:e5:ea:9b:10:9b:e1:9f:ff: 15:07:09:1d:d4:94:b9:c8:67:a4:42:67:b1:70:73: 02:62:f6:97:1c:9b:3f:d5:10:1f:1c:a5:11:05:84: c1:5d:b6:94:db:9a:db:6b:dc:7b:23:9b:00:8c:db: 95:7c:88:7b:67:d7:32:cd:7a:c6:3e:07:5e:49:c5: a1:0b:90:ac:5d:ba:6a:41:de:33:d6:1d:69:03:73: af:9d:e5:46:62:ca:65:74:c4:3e:07:bf:eb:3d:58: fa:84:d1:af:cd:c7:6a:cd:51:33:5e:18:87:ef:73: 99:51:5d:ca:25:12:48:c2:49:6c:6a:f2:92:bd:f4: 89:db:d2:0f:10:ac:99:34:b1:71:ea:fd:7e:5c:ed: 99:a6:32:7a:0c:7c:a3:88:28:a6:65:aa:6c:d5:9a: be:c4:a0:62:50:77:1c:fc:03:22:63:67:23:50:b7: ca:37:d1:4f:85:c4:df:94:bc:ab:ae:11:e0:da:16: e0:67:e9:03:bb:24:d5:54:16:c7:67:d9:07:c8:a3: d4:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:CF:55:C9:16:56:EF:4A:31:75:B0:E2:B5:59:DC:3F:CE:34:EC:B3 X509v3 Authority Key Identifier: keyid:9F:02:DA:3A:B5:FB:45:31:75:07:C4:80:21:CE:0A:8B:93:72:55:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C6CAF/F3E0FAE4B6F411EEAC203810C4F9AE02/nwLaOrX7RTF1B8SAIc4Ki5NyVck.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nwLaOrX7RTF1B8SAIc4Ki5NyVck.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C6CAF/F3E0FAE4B6F411EEAC203810C4F9AE02/nwLaOrX7RTF1B8SAIc4Ki5NyVck.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 74:c6:f2:e2:b8:84:f4:db:72:6a:d0:17:4f:a9:60:aa:7e:dc: 65:11:69:28:99:30:80:a9:d5:58:21:eb:2e:a7:c7:36:ef:ce: 4b:ac:8e:45:b5:ef:9f:ba:eb:99:27:a6:82:c5:91:0e:6d:c8: eb:52:46:15:03:83:f0:ea:a4:29:02:f5:2a:c9:de:5e:19:d5: 32:e9:b4:75:4a:17:ab:a0:bd:1a:51:45:db:e6:bb:c9:c3:5a: ea:d1:ea:da:00:89:48:02:c3:24:5c:04:86:46:e8:b7:63:a4: d0:6a:ae:1a:0a:1b:5e:4c:29:27:fa:8e:6d:22:4b:d0:15:fc: 99:dc:c8:22:91:47:72:84:fd:ee:a3:5b:4a:62:84:e0:cd:70: de:24:b3:65:21:d0:3f:26:01:a8:df:77:65:0d:c6:53:93:b8: 41:45:20:68:64:fd:b2:89:75:47:24:24:50:82:6a:9a:27:04: f7:a7:fb:9f:32:4a:a1:a1:70:1a:b7:ab:5b:21:f4:b9:42:1f: 5d:58:e9:a0:91:88:64:fc:81:04:6a:85:ed:cd:50:ab:99:78: ca:73:9a:70:e3:5a:1c:5f:97:12:9b:a0:07:82:6f:e7:c6:05: f8:48:4c:0d:5a:58:ec:54:95:cd:a2:7f:dc:7a:ed:bd:ea:53: 3b:29:06:68 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzZDQUYxMTAvBgNVBAUTKDlGMDJEQTNBQjVGQjQ1MzE3NTA3QzQ4MDIxQ0UwQThC OTM3MjU1QzkwHhcNMjUwNDA5MDQxOTM5WhcNMjUwNDE2MDQxOTM5WjAYMRYwFAYD VQQDEw02N2Y1ZjU1Yi1kNTc4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw1Cil3IkjVX8w7lIP97bKxJTOpywSrzJ34LEjZEI3zbldkzg0Fxrpd50hHZY XKYVOrzq5eqbEJvhn/8VBwkd1JS5yGekQmexcHMCYvaXHJs/1RAfHKURBYTBXbaU 25rba9x7I5sAjNuVfIh7Z9cyzXrGPgdeScWhC5CsXbpqQd4z1h1pA3OvneVGYspl dMQ+B7/rPVj6hNGvzcdqzVEzXhiH73OZUV3KJRJIwklsavKSvfSJ29IPEKyZNLFx 6v1+XO2ZpjJ6DHyjiCimZaps1Zq+xKBiUHcc/AMiY2cjULfKN9FPhcTflLyrrhHg 2hbgZ+kDuyTVVBbHZ9kHyKPUiwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAPPVckW Vu9KMXWw4rVZ3D/ONOyzMB8GA1UdIwQYMBaAFJ8C2jq1+0UxdQfEgCHOCouTclXJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNkNBRi9GM0UwRkFFNEI2 RjQxMUVFQUMyMDM4MTBDNEY5QUUwMi9ud0xhT3JYN1JURjFCOFNBSWM0S2k1TnlW Y2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL253TGFPclg3UlRGMUI4U0FJYzRLaTVOeVZjay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NkNBRi9GM0UwRkFFNEI2RjQxMUVFQUMyMDM4MTBDNEY5QUUwMi9ud0xhT3JYN1JU RjFCOFNBSWM0S2k1TnlWY2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB0xvLiuIT023Jq0BdPqWCqftxlEWkomTCAqdVYIesup8c2785LrI5F te+fuuuZJ6aCxZEObcjrUkYVA4Pw6qQpAvUqyd5eGdUy6bR1SheroL0aUUXb5rvJ w1rq0eraAIlIAsMkXASGRui3Y6TQaq4aChteTCkn+o5tIkvQFfyZ3MgikUdyhP3u o1tKYoTgzXDeJLNlIdA/JgGo33dlDcZTk7hBRSBoZP2yiXVHJCRQgmqaJwT3p/uf MkqhoXAat6tbIfS5Qh9dWOmgkYhk/IEEaoXtzVCrmXjKc5pw41ocX5cSm6AHgm/n xgX4SEwNWljsVJXNon/ceu296lM7KQZo -----END CERTIFICATE-----Generated at Fri Apr 11 00:38:15 2025 by rpki-client