$ rpki-client -vvf rpki.apnic.net/member_repository/A91CCD0C/819A023432CB11EF9EA0C96AC4F9AE02/NSwvQv_2bLhqacZ-5hurbhEVTss.mft File: NSwvQv_2bLhqacZ-5hurbhEVTss.mft (raw, json) Hash identifier: KvKdQsUzz8O3j5xKvm5Ndq2AoJR9qVLF5mySLJMlq1g= Subject key identifier: 15:C2:82:CC:02:19:D5:DD:92:B6:CF:B8:B6:5B:95:6D:A2:AD:6B:19 Authority key identifier: 35:2C:2F:42:FF:F6:6C:B8:6A:69:C6:7E:E6:1B:AB:6E:11:15:4E:CB Certificate issuer: /CN=A91CCD0C/serialNumber=352C2F42FFF66CB86A69C67EE61BAB6E11154ECB Certificate serial: 93 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NSwvQv_2bLhqacZ-5hurbhEVTss.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CCD0C/819A023432CB11EF9EA0C96AC4F9AE02/NSwvQv_2bLhqacZ-5hurbhEVTss.mft Manifest number: 91 Signing time: Sat 29 Mar 2025 05:46:12 +0000 Manifest this update: Sat 29 Mar 2025 05:46:11 +0000 Manifest next update: Sat 05 Apr 2025 05:46:11 +0000 Files and hashes: 1: NSwvQv_2bLhqacZ-5hurbhEVTss.crl (hash: LeHMnSbbDD0pzxPDJpxG4ZyE8BCtNVNEMvR/M8dc+Ds=) 2: E5BB4DB260E411EF83727F5CC4F9AE02.roa (hash: sjsLTuWeFwgevoPUUjQqWdyEX8OASo8b7yHbpb8l0pc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CCD0C/819A023432CB11EF9EA0C96AC4F9AE02/NSwvQv_2bLhqacZ-5hurbhEVTss.crl rsync://rpki.apnic.net/member_repository/A91CCD0C/819A023432CB11EF9EA0C96AC4F9AE02/NSwvQv_2bLhqacZ-5hurbhEVTss.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NSwvQv_2bLhqacZ-5hurbhEVTss.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Apr 2025 05:08:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 147 (0x93) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CCD0C Validity Not Before: Mar 29 05:46:11 2025 GMT Not After : Apr 5 05:46:11 2025 GMT Subject: CN=67e78923-f03f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:38:ba:5d:45:c4:be:8b:b7:12:d9:1e:5b:d5: d9:4f:01:85:6f:7e:66:a5:c4:64:ec:64:05:58:e0: 1e:2d:c8:e8:3c:ef:f4:93:13:cb:5a:4e:84:53:95: dc:50:0e:6b:2c:4c:dc:a0:49:a5:6a:84:2e:2d:ed: 2a:96:04:00:a0:e6:1c:9a:47:37:75:ca:59:73:83: 8d:e2:90:31:ec:63:2e:d7:17:e3:65:3d:6d:37:db: 2d:b6:34:00:26:20:4e:ed:6c:84:0d:67:a0:e6:78: 6b:d8:92:7b:40:e0:48:5a:42:33:da:7a:05:71:0e: e5:60:7e:97:a1:e2:5b:9e:22:89:9e:6d:58:1f:5c: b7:a5:4d:79:a9:cb:c5:19:e6:d7:03:5a:66:04:25: a9:6d:7d:3d:42:19:51:5e:41:ff:93:18:b5:fb:eb: a8:75:5e:c6:c3:62:ae:a4:eb:9a:de:b0:9e:5f:3f: 7b:87:96:ce:6d:1b:b1:26:0e:14:4a:22:ed:33:18: f2:7d:f1:a9:c2:51:59:2c:e1:7c:32:05:c0:cb:68: ca:86:a5:a9:02:10:ef:c8:fc:f8:b4:4d:dc:cf:d7: 5a:60:d9:71:2b:92:47:ff:34:de:28:58:ea:f8:41: ee:57:62:5c:a8:ec:9f:2f:86:39:e0:4a:57:3b:3b: 9a:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:C2:82:CC:02:19:D5:DD:92:B6:CF:B8:B6:5B:95:6D:A2:AD:6B:19 X509v3 Authority Key Identifier: keyid:35:2C:2F:42:FF:F6:6C:B8:6A:69:C6:7E:E6:1B:AB:6E:11:15:4E:CB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CCD0C/819A023432CB11EF9EA0C96AC4F9AE02/NSwvQv_2bLhqacZ-5hurbhEVTss.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NSwvQv_2bLhqacZ-5hurbhEVTss.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CCD0C/819A023432CB11EF9EA0C96AC4F9AE02/NSwvQv_2bLhqacZ-5hurbhEVTss.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9e:dd:05:05:4e:d7:d1:c2:12:12:bf:65:9f:33:ec:92:46:b7: c6:94:73:71:55:52:e2:37:f8:a5:e3:8b:ab:fb:c1:57:26:e9: e6:9d:2d:36:43:e5:7b:f4:95:ab:e5:3e:87:97:20:35:40:81: 09:68:90:5c:1d:1a:12:a0:20:9a:6a:11:aa:f3:8a:29:42:03: 7b:cd:3d:e7:62:71:cd:ab:a9:33:fd:15:72:d4:d4:6c:7d:d7: fc:5f:59:ac:23:28:38:76:47:c4:fc:97:68:41:25:2b:70:ef: 2a:2b:8a:20:9e:7c:27:3a:2d:10:99:d9:e5:dd:f6:0a:00:0e: a4:1b:c1:97:65:fb:f4:b8:41:82:9b:ed:45:f1:57:72:5c:ab: c1:3e:7c:44:44:d8:a4:19:03:b5:e6:4c:de:2a:72:25:e2:6a: 09:46:b1:a5:96:30:d5:ef:66:24:a1:59:6d:58:23:5e:72:5f: 2f:92:08:96:1a:c1:b0:d6:3a:30:7a:7f:ab:56:a1:23:c8:05: bd:87:a5:9a:db:f6:54:04:29:08:dc:ae:d3:9f:34:5e:64:3a: 93:28:20:29:ce:74:6c:3c:76:8b:a8:1d:53:f9:81:19:36:25: 72:3b:d6:e2:1a:ef:d8:c8:af:dc:b0:5f:ae:95:96:fe:4a:ad: 90:fb:d8:66 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0NEMEMxMTAvBgNVBAUTKDM1MkMyRjQyRkZGNjZDQjg2QTY5QzY3RUU2MUJBQjZF MTExNTRFQ0IwHhcNMjUwMzI5MDU0NjExWhcNMjUwNDA1MDU0NjExWjAYMRYwFAYD VQQDEw02N2U3ODkyMy1mMDNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0Di6XUXEvou3EtkeW9XZTwGFb35mpcRk7GQFWOAeLcjoPO/0kxPLWk6EU5Xc UA5rLEzcoEmlaoQuLe0qlgQAoOYcmkc3dcpZc4ON4pAx7GMu1xfjZT1tN9sttjQA JiBO7WyEDWeg5nhr2JJ7QOBIWkIz2noFcQ7lYH6XoeJbniKJnm1YH1y3pU15qcvF GebXA1pmBCWpbX09QhlRXkH/kxi1++uodV7Gw2KupOua3rCeXz97h5bObRuxJg4U SiLtMxjyffGpwlFZLOF8MgXAy2jKhqWpAhDvyPz4tE3cz9daYNlxK5JH/zTeKFjq +EHuV2JcqOyfL4Y54EpXOzuaDQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBXCgswC GdXdkrbPuLZblW2irWsZMB8GA1UdIwQYMBaAFDUsL0L/9my4amnGfuYbq24RFU7L MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQ0QwQy84MTlBMDIzNDMy Q0IxMUVGOUVBMEM5NkFDNEY5QUUwMi9OU3d2UXZfMmJMaHFhY1otNWh1cmJoRVZU c3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05Td3ZRdl8yYkxocWFjWi01aHVyYmhFVlRzcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD Q0QwQy84MTlBMDIzNDMyQ0IxMUVGOUVBMEM5NkFDNEY5QUUwMi9OU3d2UXZfMmJM aHFhY1otNWh1cmJoRVZUc3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCe3QUFTtfRwhISv2WfM+ySRrfGlHNxVVLiN/il44ur+8FXJunmnS02 Q+V79JWr5T6HlyA1QIEJaJBcHRoSoCCaahGq84opQgN7zT3nYnHNq6kz/RVy1NRs fdf8X1msIyg4dkfE/JdoQSUrcO8qK4ognnwnOi0Qmdnl3fYKAA6kG8GXZfv0uEGC m+1F8VdyXKvBPnxERNikGQO15kzeKnIl4moJRrGlljDV72YkoVltWCNecl8vkgiW GsGw1jowen+rVqEjyAW9h6Wa2/ZUBCkI3K7TnzReZDqTKCApznRsPHaLqB1T+YEZ NiVyO9biGu/YyK/csF+ulZb+Sq2Q+9hm -----END CERTIFICATE-----Generated at Fri Apr 4 22:10:40 2025 by rpki-client