$ rpki-client -vvf rpki.apnic.net/member_repository/A91D9B1B/F9FEE0463CF811EFA367C385C4F9AE02/01nlbdoAA8SD861qQMCA6Qy41HI.mft File: 01nlbdoAA8SD861qQMCA6Qy41HI.mft (raw, json) Hash identifier: FFxOgsIBntLbG2inSkCmpYdoYr1JRft39Udj1+WnPFA= Subject key identifier: FB:79:E5:C9:CF:29:67:6B:FE:41:01:60:29:C2:18:36:FA:47:1B:9C Authority key identifier: D3:59:E5:6D:DA:00:03:C4:83:F3:AD:6A:40:C0:80:E9:0C:B8:D4:72 Certificate issuer: /CN=A91D9B1B/serialNumber=D359E56DDA0003C483F3AD6A40C080E90CB8D472 Certificate serial: 95 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/01nlbdoAA8SD861qQMCA6Qy41HI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D9B1B/F9FEE0463CF811EFA367C385C4F9AE02/01nlbdoAA8SD861qQMCA6Qy41HI.mft Manifest number: 92 Signing time: Fri 11 Apr 2025 05:37:55 +0000 Manifest this update: Fri 11 Apr 2025 05:37:54 +0000 Manifest next update: Fri 18 Apr 2025 05:37:54 +0000 Files and hashes: 1: 01nlbdoAA8SD861qQMCA6Qy41HI.crl (hash: r8UB2mYE2HJi8Xf859NxOkfxMGvZ6AIRvF8+4vL7Wls=) 2: 97530E023D0911EFA33E4A38C4F9AE02.roa (hash: bWCEf7xphHzCuEdSJWfNIfntO4HJguemBgMtzB7ylYA=) 3: 573BE4DE3D0811EF84157B26C4F9AE02.roa (hash: nywG68ULgKtBcMdjYbgBHpATJxb1PptzCmatC6Dkc8Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D9B1B/F9FEE0463CF811EFA367C385C4F9AE02/01nlbdoAA8SD861qQMCA6Qy41HI.crl rsync://rpki.apnic.net/member_repository/A91D9B1B/F9FEE0463CF811EFA367C385C4F9AE02/01nlbdoAA8SD861qQMCA6Qy41HI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/01nlbdoAA8SD861qQMCA6Qy41HI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Apr 2025 05:37:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 149 (0x95) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D9B1B, serialNumber=D359E56DDA0003C483F3AD6A40C080E90CB8D472 Validity Not Before: Apr 11 05:37:54 2025 GMT Not After : Apr 18 05:37:54 2025 GMT Subject: CN=67f8aab2-e99a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:7f:32:8f:c3:7d:f7:ec:1a:f3:aa:3a:d7:5e: 6c:6e:43:f1:1f:dc:70:9c:f4:13:e9:f7:b6:f5:65: 19:10:fe:f9:44:84:02:18:cb:36:cf:ce:d5:cb:ea: f9:d9:2f:a4:54:b8:1f:52:ce:81:2c:b4:01:20:34: d5:c2:ef:f3:1e:64:8e:c9:8f:a1:42:2f:19:24:cb: 75:44:1b:74:a4:53:1b:0b:33:d9:4c:cf:0b:23:96: 05:05:3d:7b:72:8a:1b:ad:a5:3c:3a:05:5c:8b:da: 9d:be:ee:4f:9a:74:22:3e:a2:e0:fa:11:bc:a0:80: 10:7e:c1:81:fd:cd:cd:a0:44:2d:14:43:6f:c3:28: a1:cf:3c:9a:61:0a:db:37:73:01:1f:5e:1d:e4:51: 73:ac:68:b2:96:23:20:5a:c7:71:ec:b7:5c:6f:29: 7f:16:c5:44:13:27:46:ff:f9:e6:d4:20:4b:b5:f6: 05:4f:ad:7b:80:08:f7:84:d9:82:03:d7:01:e0:66: 5c:ce:4f:05:81:e4:d1:e1:73:a3:1d:e2:12:0e:3a: 5e:66:7e:25:1b:ac:9b:46:3b:b2:b8:db:b7:1e:1a: e5:32:08:b5:b7:f8:2c:4a:0a:17:83:39:27:8d:1b: c0:77:9a:34:f3:06:4e:64:e0:b5:38:06:92:b3:a5: 72:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:79:E5:C9:CF:29:67:6B:FE:41:01:60:29:C2:18:36:FA:47:1B:9C X509v3 Authority Key Identifier: keyid:D3:59:E5:6D:DA:00:03:C4:83:F3:AD:6A:40:C0:80:E9:0C:B8:D4:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D9B1B/F9FEE0463CF811EFA367C385C4F9AE02/01nlbdoAA8SD861qQMCA6Qy41HI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/01nlbdoAA8SD861qQMCA6Qy41HI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D9B1B/F9FEE0463CF811EFA367C385C4F9AE02/01nlbdoAA8SD861qQMCA6Qy41HI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 34:f0:3c:0e:88:63:53:1b:ce:01:48:08:bc:00:cc:53:79:93: 5a:77:3f:92:37:70:27:23:da:ec:da:5c:a4:05:32:1c:be:b4: d3:55:b5:98:12:e0:03:3f:a9:2d:38:43:da:57:e0:2b:fd:bb: 68:e3:85:e7:88:87:0e:cb:f3:44:0c:27:d7:ed:d7:6c:2a:f8: 25:e7:77:3f:9f:46:db:d8:46:4c:20:bd:01:e5:3b:2a:bb:35: be:72:66:df:f3:36:58:d4:d1:dc:64:c6:65:44:48:19:f7:98: 6f:27:c8:95:28:82:21:80:7a:53:ae:dd:b7:59:9c:f0:a5:67: 03:7f:18:22:d3:35:16:ee:05:96:e6:6b:cc:44:13:82:54:01: 6d:57:d1:d4:0b:d2:3d:5e:a2:66:a8:3c:87:8b:bb:9a:1d:ff: 0e:2e:d4:5f:48:2a:a8:ef:ba:19:dd:00:c1:72:98:45:47:63: 1f:97:6a:2f:1b:c4:99:42:75:7f:1e:67:a3:d4:9d:ed:91:91: d3:ab:bb:3c:73:df:48:aa:82:b1:ce:e5:a6:96:81:52:09:e7: a9:dc:69:50:20:72:68:5d:3d:90:e4:47:f9:e9:65:05:37:11: 31:42:3a:39:be:75:54:ad:5e:8b:95:85:25:0e:b3:8d:ee:04: c4:78:8e:19 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDlCMUIxMTAvBgNVBAUTKEQzNTlFNTZEREEwMDAzQzQ4M0YzQUQ2QTQwQzA4MEU5 MENCOEQ0NzIwHhcNMjUwNDExMDUzNzU0WhcNMjUwNDE4MDUzNzU0WjAYMRYwFAYD VQQDEw02N2Y4YWFiMi1lOTlhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz38yj8N99+wa86o6115sbkPxH9xwnPQT6fe29WUZEP75RIQCGMs2z87Vy+r5 2S+kVLgfUs6BLLQBIDTVwu/zHmSOyY+hQi8ZJMt1RBt0pFMbCzPZTM8LI5YFBT17 coobraU8OgVci9qdvu5PmnQiPqLg+hG8oIAQfsGB/c3NoEQtFENvwyihzzyaYQrb N3MBH14d5FFzrGiyliMgWsdx7Ldcbyl/FsVEEydG//nm1CBLtfYFT617gAj3hNmC A9cB4GZczk8FgeTR4XOjHeISDjpeZn4lG6ybRjuyuNu3HhrlMgi1t/gsSgoXgzkn jRvAd5o08wZOZOC1OAaSs6Vy1wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPt55cnP KWdr/kEBYCnCGDb6RxucMB8GA1UdIwQYMBaAFNNZ5W3aAAPEg/OtakDAgOkMuNRy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEOUIxQi9GOUZFRTA0NjND RjgxMUVGQTM2N0MzODVDNEY5QUUwMi8wMW5sYmRvQUE4U0Q4NjFxUU1DQTZReTQx SEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzAxbmxiZG9BQThTRDg2MXFRTUNBNlF5NDFISS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE OUIxQi9GOUZFRTA0NjNDRjgxMUVGQTM2N0MzODVDNEY5QUUwMi8wMW5sYmRvQUE4 U0Q4NjFxUU1DQTZReTQxSEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA08DwOiGNTG84BSAi8AMxTeZNadz+SN3AnI9rs2lykBTIcvrTTVbWY EuADP6ktOEPaV+Ar/bto44XniIcOy/NEDCfX7ddsKvgl53c/n0bb2EZMIL0B5Tsq uzW+cmbf8zZY1NHcZMZlREgZ95hvJ8iVKIIhgHpTrt23WZzwpWcDfxgi0zUW7gWW 5mvMRBOCVAFtV9HUC9I9XqJmqDyHi7uaHf8OLtRfSCqo77oZ3QDBcphFR2Mfl2ov G8SZQnV/Hmej1J3tkZHTq7s8c99IqoKxzuWmloFSCeep3GlQIHJoXT2Q5Ef56WUF NxExQjo5vnVUrV6LlYUlDrON7gTEeI4Z -----END CERTIFICATE-----Generated at Sun Apr 13 01:46:00 2025 by rpki-client