$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9702/EF913D26E3AA11EA88F49560C4F9AE02/nmN2pfKqPix_9VKvuK9Q2sE9Sbc.mft File: nmN2pfKqPix_9VKvuK9Q2sE9Sbc.mft (raw, json) Hash identifier: qM6mZqvfNLlGhXvxTsqHudOPmkq92FP5VOrTdHla9go= Subject key identifier: E7:18:97:95:4F:54:99:25:D9:F9:95:F8:B9:C5:64:1C:F4:7E:61:84 Authority key identifier: 9E:63:76:A5:F2:AA:3E:2C:7F:F5:52:AF:B8:AF:50:DA:C1:3D:49:B7 Certificate issuer: /CN=A91C9702/serialNumber=9E6376A5F2AA3E2C7FF552AFB8AF50DAC13D49B7 Certificate serial: 07E3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nmN2pfKqPix_9VKvuK9Q2sE9Sbc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C9702/EF913D26E3AA11EA88F49560C4F9AE02/nmN2pfKqPix_9VKvuK9Q2sE9Sbc.mft Manifest number: 07D9 Signing time: Fri 04 Apr 2025 21:09:51 +0000 Manifest this update: Fri 04 Apr 2025 21:09:50 +0000 Manifest next update: Fri 11 Apr 2025 21:09:50 +0000 Files and hashes: 1: nmN2pfKqPix_9VKvuK9Q2sE9Sbc.crl (hash: 8zFVU98kzX0pKDVdPxnAxDwbjsuD1eofitfT8VB690U=) 2: 0BC9660CE3AC11EAAAC85761C4F9AE02.roa (hash: B/DuXQToKy4NJJ+8lbA6TjX/A2qM6LHM64/A3YRX7ts=) 3: 0C5564C2E3AC11EAAAC85761C4F9AE02.roa (hash: 5FYn5QVSBhm0XZoV+j+o/nzPJ0WO1FJiMFnDtdxaDwM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C9702/EF913D26E3AA11EA88F49560C4F9AE02/nmN2pfKqPix_9VKvuK9Q2sE9Sbc.crl rsync://rpki.apnic.net/member_repository/A91C9702/EF913D26E3AA11EA88F49560C4F9AE02/nmN2pfKqPix_9VKvuK9Q2sE9Sbc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nmN2pfKqPix_9VKvuK9Q2sE9Sbc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 21:09:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2019 (0x7e3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C9702 Validity Not Before: Apr 4 21:09:50 2025 GMT Not After : Apr 11 21:09:50 2025 GMT Subject: CN=67f04a9e-06c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:f4:6a:03:f7:b3:f3:44:f4:f2:de:f3:f6:07: 66:8b:95:1f:da:dd:3e:56:de:a0:a2:fe:6f:01:76: 89:e3:df:5c:9c:8f:3b:4c:77:15:7f:9b:09:0b:52: ae:93:3b:dd:8a:d2:bf:bb:4d:a4:f5:9e:44:87:64: c6:77:aa:3a:06:03:83:80:6a:8f:2b:82:a4:19:ae: 19:04:38:64:e3:96:a6:a0:81:67:16:30:6e:23:ca: 3a:59:ba:64:9c:d2:e9:8f:b5:a3:95:08:73:4f:48: d8:79:18:17:83:3a:fc:0c:5c:4a:a8:66:d2:bd:04: b9:08:29:cd:0e:12:79:d3:a1:5d:d2:d7:0a:ea:9e: 32:ac:30:ac:46:9b:80:55:05:4e:ab:19:33:e4:cc: a1:2e:5d:dd:35:b2:15:e9:18:7b:33:56:c8:f4:ae: 5c:34:d0:1e:7b:26:fe:65:47:32:d7:31:08:8b:f8: 24:84:df:3e:37:49:2b:a3:e9:ce:46:d0:68:78:00: df:63:94:e6:f8:d1:81:62:b3:55:7f:ca:cb:d9:e8: 82:ab:0f:2b:43:4f:42:2c:ab:42:6f:0e:58:79:38: da:f3:94:dd:d6:33:3c:01:e3:d7:d6:30:5e:09:c1: f3:bf:e1:c0:18:f3:d7:8c:4d:20:4e:ec:1f:5d:a3: 06:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:18:97:95:4F:54:99:25:D9:F9:95:F8:B9:C5:64:1C:F4:7E:61:84 X509v3 Authority Key Identifier: keyid:9E:63:76:A5:F2:AA:3E:2C:7F:F5:52:AF:B8:AF:50:DA:C1:3D:49:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C9702/EF913D26E3AA11EA88F49560C4F9AE02/nmN2pfKqPix_9VKvuK9Q2sE9Sbc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nmN2pfKqPix_9VKvuK9Q2sE9Sbc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9702/EF913D26E3AA11EA88F49560C4F9AE02/nmN2pfKqPix_9VKvuK9Q2sE9Sbc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 85:9f:99:ba:f3:fe:a6:23:86:2f:41:82:85:a8:88:52:ff:93: f9:4f:1c:87:b8:94:3a:38:e0:da:16:f5:37:e5:d7:a2:98:57: bb:9a:11:41:e1:58:d6:7a:60:8b:85:10:74:73:db:ac:e0:83: 9d:fc:af:45:f1:c0:a1:90:05:82:e8:16:25:ea:5b:fd:fe:32: f6:48:cf:6f:5c:da:31:41:1c:be:4f:5f:a9:c2:4f:02:55:3d: 42:39:03:2b:62:49:ca:2b:97:8d:c3:d1:2e:4e:ae:e0:14:04: 63:11:1a:3c:71:3f:92:0f:09:1b:0a:6d:8a:f7:a0:a3:0f:0f: 57:86:04:07:b5:b3:5e:4c:1b:31:f1:b3:1f:7b:0d:ce:a6:63: 1d:6e:1b:69:14:93:f4:cc:0c:54:37:74:05:83:d4:6a:ed:d6: f5:be:1f:bf:98:e6:87:14:52:c3:23:7f:f9:52:22:a6:9e:86: 9d:db:63:6f:19:ee:d5:fc:35:22:06:eb:54:2b:ae:41:73:25: 5b:e1:50:4e:88:12:aa:df:95:b1:34:9f:91:3f:27:e4:0a:f6: e3:59:23:33:82:1a:d4:48:30:1a:a7:b7:2e:65:9f:0d:16:49: e5:f2:58:c0:f8:8e:73:88:63:94:ec:ec:83:16:ed:a6:e2:fc: 90:ba:75:ee -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB+MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qzk3MDIxMTAvBgNVBAUTKDlFNjM3NkE1RjJBQTNFMkM3RkY1NTJBRkI4QUY1MERB QzEzRDQ5QjcwHhcNMjUwNDA0MjEwOTUwWhcNMjUwNDExMjEwOTUwWjAYMRYwFAYD VQQDEw02N2YwNGE5ZS0wNmM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwfRqA/ez80T08t7z9gdmi5Uf2t0+Vt6gov5vAXaJ499cnI87THcVf5sJC1Ku kzvditK/u02k9Z5Eh2TGd6o6BgODgGqPK4KkGa4ZBDhk45amoIFnFjBuI8o6Wbpk nNLpj7WjlQhzT0jYeRgXgzr8DFxKqGbSvQS5CCnNDhJ506Fd0tcK6p4yrDCsRpuA VQVOqxkz5MyhLl3dNbIV6Rh7M1bI9K5cNNAeeyb+ZUcy1zEIi/gkhN8+N0kro+nO RtBoeADfY5Tm+NGBYrNVf8rL2eiCqw8rQ09CLKtCbw5YeTja85Td1jM8AePX1jBe CcHzv+HAGPPXjE0gTuwfXaMGswIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOcYl5VP VJkl2fmV+LnFZBz0fmGEMB8GA1UdIwQYMBaAFJ5jdqXyqj4sf/VSr7ivUNrBPUm3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOTcwMi9FRjkxM0QyNkUz QUExMUVBODhGNDk1NjBDNEY5QUUwMi9ubU4ycGZLcVBpeF85Vkt2dUs5UTJzRTlT YmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25tTjJwZktxUGl4XzlWS3Z1SzlRMnNFOVNiYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD OTcwMi9FRjkxM0QyNkUzQUExMUVBODhGNDk1NjBDNEY5QUUwMi9ubU4ycGZLcVBp eF85Vkt2dUs5UTJzRTlTYmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCFn5m68/6mI4YvQYKFqIhS/5P5TxyHuJQ6OODaFvU35deimFe7mhFB 4VjWemCLhRB0c9us4IOd/K9F8cChkAWC6BYl6lv9/jL2SM9vXNoxQRy+T1+pwk8C VT1COQMrYknKK5eNw9EuTq7gFARjERo8cT+SDwkbCm2K96CjDw9XhgQHtbNeTBsx 8bMfew3OpmMdbhtpFJP0zAxUN3QFg9Rq7db1vh+/mOaHFFLDI3/5UiKmnoad22Nv Ge7V/DUiButUK65BcyVb4VBOiBKq35WxNJ+RPyfkCvbjWSMzghrUSDAap7cuZZ8N Fknl8ljA+I5ziGOU7OyDFu2m4vyQunXu -----END CERTIFICATE-----Generated at Sat Apr 5 05:45:48 2025 by rpki-client