$ rpki-client -vvf rpki.apnic.net/member_repository/A91CFC1C/3C142B1657FE11EEAA553060C4F9AE02/NkXNkOP0PAEtqzvzly6GvJTd1FQ.mft File: NkXNkOP0PAEtqzvzly6GvJTd1FQ.mft (raw, json) Hash identifier: vVJefEfptqOE3D66ODm8155FdwdEgkHWTGTMBUIvWZU= Subject key identifier: 32:3D:B7:DA:72:6C:7E:C9:60:D5:0C:DC:80:90:24:B1:F0:C5:C7:49 Authority key identifier: 36:45:CD:90:E3:F4:3C:01:2D:AB:3B:F3:97:2E:86:BC:94:DD:D4:54 Certificate issuer: /CN=A91CFC1C/serialNumber=3645CD90E3F43C012DAB3BF3972E86BC94DDD454 Certificate serial: 0124 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NkXNkOP0PAEtqzvzly6GvJTd1FQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CFC1C/3C142B1657FE11EEAA553060C4F9AE02/NkXNkOP0PAEtqzvzly6GvJTd1FQ.mft Manifest number: 011F Signing time: Sat 29 Mar 2025 04:10:09 +0000 Manifest this update: Sat 29 Mar 2025 04:10:08 +0000 Manifest next update: Sat 05 Apr 2025 04:10:08 +0000 Files and hashes: 1: NkXNkOP0PAEtqzvzly6GvJTd1FQ.crl (hash: v2f+8aHs5AvDCrsu+b8ZiTBLjSijX5+NZ2kNYyHF+L8=) 2: E69E92582C4A11EF91F6202DC4F9AE02.roa (hash: uDYRjWDNbbuer7nADrVfw+s2rVnYHfiATUhAxlq32S0=) 3: B390F78E5CB611EE97D70B78C4F9AE02.roa (hash: LoclVr/421CJQL/D+2O/iwx9gXkx3/NwzPPfEEt2ocM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CFC1C/3C142B1657FE11EEAA553060C4F9AE02/NkXNkOP0PAEtqzvzly6GvJTd1FQ.crl rsync://rpki.apnic.net/member_repository/A91CFC1C/3C142B1657FE11EEAA553060C4F9AE02/NkXNkOP0PAEtqzvzly6GvJTd1FQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NkXNkOP0PAEtqzvzly6GvJTd1FQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Apr 2025 04:10:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 292 (0x124) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CFC1C Validity Not Before: Mar 29 04:10:08 2025 GMT Not After : Apr 5 04:10:08 2025 GMT Subject: CN=67e772a1-abab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:24:34:9e:b1:a1:6f:f2:f0:f2:4a:46:64:05: 82:1b:1d:5b:61:8d:6b:30:a8:7d:f6:da:89:82:aa: b3:84:9b:2c:04:a1:82:36:70:d2:f7:61:d3:09:8d: 56:b2:17:a7:19:a4:49:cb:67:cc:89:e1:f2:1e:04: 78:1b:34:56:a3:3f:1b:3b:5d:c2:26:c4:c0:f8:c2: 31:0c:e7:9a:fd:03:38:ca:f4:6c:8b:70:7c:6a:bc: f2:ea:04:b0:6a:ef:05:39:7a:59:f0:76:1e:7d:e4: 4e:cb:3f:36:d0:74:52:26:ac:e6:48:42:8d:1b:c9: 85:14:01:b7:4b:dd:c5:03:0c:12:34:4b:41:35:8a: 8d:31:4e:6c:bf:22:31:c3:71:98:bd:52:71:d1:42: 0d:00:d0:83:98:fe:f7:61:59:f0:fb:20:a9:83:ef: 94:c6:2e:5d:b8:d5:bc:14:ed:56:65:0c:59:3b:e8: a8:f2:0e:eb:66:6d:02:84:1e:2f:6a:39:a9:00:bc: 1c:39:86:ed:6d:d9:0c:73:f0:aa:6d:7b:6d:5d:91: 4b:a3:3f:6f:71:f1:f7:97:fd:ad:0d:e3:34:15:ee: 73:ee:ec:d4:bb:30:b3:4f:4b:20:27:2c:6b:63:a5: 1b:c8:50:4a:98:76:e3:bc:1e:0d:9e:a6:ce:81:f2: 06:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:3D:B7:DA:72:6C:7E:C9:60:D5:0C:DC:80:90:24:B1:F0:C5:C7:49 X509v3 Authority Key Identifier: keyid:36:45:CD:90:E3:F4:3C:01:2D:AB:3B:F3:97:2E:86:BC:94:DD:D4:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CFC1C/3C142B1657FE11EEAA553060C4F9AE02/NkXNkOP0PAEtqzvzly6GvJTd1FQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NkXNkOP0PAEtqzvzly6GvJTd1FQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CFC1C/3C142B1657FE11EEAA553060C4F9AE02/NkXNkOP0PAEtqzvzly6GvJTd1FQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 28:df:4b:2d:98:98:08:5b:c4:42:cc:d6:1f:5d:57:7a:86:04: 40:14:b8:8c:fe:df:2b:cb:21:a4:90:27:63:79:c2:d5:57:ef: 34:9f:5b:bb:20:48:db:5d:9b:57:7d:28:01:af:76:5b:a6:d6: 2b:0d:a6:43:b7:bf:6f:b6:e3:f9:4f:5e:d1:e2:69:21:04:dc: 8d:40:27:79:92:9d:49:ad:1a:1f:6b:ad:9d:da:0d:83:2c:b6: 5f:74:05:e9:87:b3:8b:fd:a4:c7:82:6e:59:ae:5a:50:df:98: 52:44:01:ad:8f:db:42:c3:cd:fc:6a:87:06:51:2b:21:4f:9c: 20:7a:2a:09:ed:9f:b6:b2:7a:5d:96:96:c9:d1:60:ec:af:0e: f6:b5:99:06:39:ab:ec:41:90:08:32:fc:c2:4c:c9:90:aa:ae: 7f:77:31:58:6f:1f:96:be:46:34:2c:f9:bc:49:27:6c:5c:64: 6b:7d:19:cb:09:4d:7a:8e:28:6f:a4:2c:c6:7a:30:0f:e7:a9: cc:23:75:de:3d:48:74:8d:07:63:fa:9a:52:62:7e:b3:00:1c: a9:bd:92:2f:26:dd:3a:00:d3:f4:ea:9a:3f:cd:14:86:e6:11: b7:54:5c:8b:df:d2:38:97:75:06:4e:f6:12:47:f6:a1:f9:f9: 7a:e3:88:2d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0ZDMUMxMTAvBgNVBAUTKDM2NDVDRDkwRTNGNDNDMDEyREFCM0JGMzk3MkU4NkJD OTREREQ0NTQwHhcNMjUwMzI5MDQxMDA4WhcNMjUwNDA1MDQxMDA4WjAYMRYwFAYD VQQDEw02N2U3NzJhMS1hYmFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxyQ0nrGhb/Lw8kpGZAWCGx1bYY1rMKh99tqJgqqzhJssBKGCNnDS92HTCY1W shenGaRJy2fMieHyHgR4GzRWoz8bO13CJsTA+MIxDOea/QM4yvRsi3B8arzy6gSw au8FOXpZ8HYefeROyz820HRSJqzmSEKNG8mFFAG3S93FAwwSNEtBNYqNMU5svyIx w3GYvVJx0UINANCDmP73YVnw+yCpg++Uxi5duNW8FO1WZQxZO+io8g7rZm0ChB4v ajmpALwcOYbtbdkMc/CqbXttXZFLoz9vcfH3l/2tDeM0Fe5z7uzUuzCzT0sgJyxr Y6UbyFBKmHbjvB4NnqbOgfIGxwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDI9t9py bH7JYNUM3ICQJLHwxcdJMB8GA1UdIwQYMBaAFDZFzZDj9DwBLas785cuhryU3dRU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRkMxQy8zQzE0MkIxNjU3 RkUxMUVFQUE1NTMwNjBDNEY5QUUwMi9Oa1hOa09QMFBBRXRxenZ6bHk2R3ZKVGQx RlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05rWE5rT1AwUEFFdHF6dnpseTZHdkpUZDFGUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RkMxQy8zQzE0MkIxNjU3RkUxMUVFQUE1NTMwNjBDNEY5QUUwMi9Oa1hOa09QMFBB RXRxenZ6bHk2R3ZKVGQxRlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAo30stmJgIW8RCzNYfXVd6hgRAFLiM/t8ryyGkkCdjecLVV+80n1u7 IEjbXZtXfSgBr3ZbptYrDaZDt79vtuP5T17R4mkhBNyNQCd5kp1JrRofa62d2g2D LLZfdAXph7OL/aTHgm5ZrlpQ35hSRAGtj9tCw838aocGUSshT5wgeioJ7Z+2snpd lpbJ0WDsrw72tZkGOavsQZAIMvzCTMmQqq5/dzFYbx+WvkY0LPm8SSdsXGRrfRnL CU16jihvpCzGejAP56nMI3XePUh0jQdj+ppSYn6zABypvZIvJt06ANP06po/zRSG 5hG3VFyL39I4l3UGTvYSR/ah+fl644gt -----END CERTIFICATE-----Generated at Fri Apr 4 22:09:28 2025 by rpki-client