$ rpki-client -vvf rpki.apnic.net/member_repository/A91D9B75/9C00202EF48811EBA8DB7D0CC4F9AE02/nLpHShuO1MGFZBkQLgnuXvUcSaU.mft File: nLpHShuO1MGFZBkQLgnuXvUcSaU.mft (raw, json) Hash identifier: ONNLL8gF2/hIRvhT8x8irqzB9LDJ92z8sISjE9VfvtM= Subject key identifier: C0:56:B3:2C:18:FD:F0:4D:D5:ED:8D:7C:3B:F4:41:F9:CD:E0:FF:7D Authority key identifier: 9C:BA:47:4A:1B:8E:D4:C1:85:64:19:10:2E:09:EE:5E:F5:1C:49:A5 Certificate issuer: /CN=A91D9B75/serialNumber=9CBA474A1B8ED4C1856419102E09EE5EF51C49A5 Certificate serial: 0544 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nLpHShuO1MGFZBkQLgnuXvUcSaU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D9B75/9C00202EF48811EBA8DB7D0CC4F9AE02/nLpHShuO1MGFZBkQLgnuXvUcSaU.mft Manifest number: 0534 Signing time: Fri 18 Apr 2025 23:30:39 +0000 Manifest this update: Fri 18 Apr 2025 23:30:39 +0000 Manifest next update: Fri 25 Apr 2025 23:30:39 +0000 Files and hashes: 1: nLpHShuO1MGFZBkQLgnuXvUcSaU.crl (hash: qJ0QHrybiOzK6/v50mE1ovW/nDkUSRK0itbVrSUgmJ4=) 2: F1C60FA653DC11EC90927C4DC4F9AE02.roa (hash: 9qbFBS3HM4vcPosn8OSliCwGfWG2+6sVIf90uwZ9kCk=) 3: 5C5F31B09A2A11ECAEE8C819C4F9AE02.roa (hash: m6M1aJQP4A3gQ02xCkEHxQI8XaXpDculDx+d/2LUfO0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D9B75/9C00202EF48811EBA8DB7D0CC4F9AE02/nLpHShuO1MGFZBkQLgnuXvUcSaU.crl rsync://rpki.apnic.net/member_repository/A91D9B75/9C00202EF48811EBA8DB7D0CC4F9AE02/nLpHShuO1MGFZBkQLgnuXvUcSaU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nLpHShuO1MGFZBkQLgnuXvUcSaU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Apr 2025 23:30:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1348 (0x544) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D9B75, serialNumber=9CBA474A1B8ED4C1856419102E09EE5EF51C49A5 Validity Not Before: Apr 18 23:30:39 2025 GMT Not After : Apr 25 23:30:39 2025 GMT Subject: CN=6802e09f-2827 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:22:a5:ca:9e:ad:3c:34:8d:2e:5c:db:d6:fa: d5:f8:ec:ea:68:2b:4b:81:10:98:1f:59:4e:0e:83: fb:ef:a3:c3:7d:21:f9:7a:d1:2f:bc:c3:f4:1b:7d: 2c:f8:c1:e2:17:98:bb:16:0e:d5:6a:9d:75:6f:89: c2:6c:02:a6:98:45:29:c2:e2:35:73:08:be:50:ee: 77:b1:09:80:06:e1:76:d5:53:3f:68:0f:e8:c4:20: 3c:fc:e8:bb:49:2f:60:52:cc:46:48:04:b1:92:5c: 63:1b:51:53:76:d6:3f:b4:48:0e:e2:87:e3:2c:54: 16:87:5a:7f:d2:e9:e3:7e:d8:4d:09:d9:4d:09:63: 19:fb:b3:93:af:9e:83:98:1e:80:11:0d:c3:5e:72: a3:d6:d4:cf:48:46:28:36:e2:0c:51:90:4a:53:8e: 1e:14:44:77:f3:7a:b3:c8:54:cc:2a:d3:a1:07:11: 80:9d:87:65:08:8e:11:3b:a0:cf:dd:c8:73:bd:ba: ec:29:52:50:d8:c7:53:c9:9e:30:3a:79:6a:38:c2: 2d:af:d8:35:42:8a:9a:60:63:fd:43:4e:38:49:03: a4:e6:5d:73:bf:fa:8a:79:4a:11:b0:53:14:7a:51: ee:9b:69:ea:39:ad:0c:14:e5:44:4f:9a:31:2c:59: 48:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:56:B3:2C:18:FD:F0:4D:D5:ED:8D:7C:3B:F4:41:F9:CD:E0:FF:7D X509v3 Authority Key Identifier: keyid:9C:BA:47:4A:1B:8E:D4:C1:85:64:19:10:2E:09:EE:5E:F5:1C:49:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D9B75/9C00202EF48811EBA8DB7D0CC4F9AE02/nLpHShuO1MGFZBkQLgnuXvUcSaU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nLpHShuO1MGFZBkQLgnuXvUcSaU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D9B75/9C00202EF48811EBA8DB7D0CC4F9AE02/nLpHShuO1MGFZBkQLgnuXvUcSaU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6d:20:70:1d:80:1b:b3:af:1b:25:b5:f5:9e:29:c2:55:76:7b: 3c:fd:09:0b:39:c5:c6:98:18:60:20:05:fa:b9:5c:a5:b8:b6: 8c:64:5a:e1:10:29:39:ae:06:e1:ba:01:96:2d:3d:20:02:5d: e5:0b:56:6d:73:51:a1:da:b7:19:93:89:d1:62:e7:79:0c:23: ea:43:10:8e:be:ce:ea:8f:e0:45:d9:ad:0a:f4:a0:9b:d8:c4: 66:85:14:b3:eb:ef:38:8d:61:d8:31:77:25:35:cf:00:84:51: bd:e3:74:4e:b8:a3:70:31:cf:2b:d2:d5:2c:d6:d1:06:71:b6: af:24:b7:29:ec:82:8d:37:43:7c:73:00:91:f8:0c:66:fb:fc: df:a2:53:7c:a4:9d:f6:19:cc:fc:66:8a:1c:1f:51:1a:0a:d5: 23:ea:30:d9:07:17:0d:5b:e9:5a:f8:0b:ce:45:6c:3f:68:7c: f5:32:95:d3:56:8f:c9:a7:98:a7:13:e2:59:63:62:a5:57:7f: e9:5f:58:44:ea:2a:cb:97:58:60:9d:8a:b5:7d:dc:14:f7:13: f6:09:93:0e:2f:44:ff:2b:f8:91:89:48:15:21:59:73:93:7f: c6:45:1c:29:b8:6d:0b:b1:ec:ee:22:11:fc:15:41:89:cd:ee: 11:50:c8:b1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBUQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDlCNzUxMTAvBgNVBAUTKDlDQkE0NzRBMUI4RUQ0QzE4NTY0MTkxMDJFMDlFRTVF RjUxQzQ5QTUwHhcNMjUwNDE4MjMzMDM5WhcNMjUwNDI1MjMzMDM5WjAYMRYwFAYD VQQDEw02ODAyZTA5Zi0yODI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7SKlyp6tPDSNLlzb1vrV+OzqaCtLgRCYH1lODoP776PDfSH5etEvvMP0G30s +MHiF5i7Fg7Vap11b4nCbAKmmEUpwuI1cwi+UO53sQmABuF21VM/aA/oxCA8/Oi7 SS9gUsxGSASxklxjG1FTdtY/tEgO4ofjLFQWh1p/0unjfthNCdlNCWMZ+7OTr56D mB6AEQ3DXnKj1tTPSEYoNuIMUZBKU44eFER383qzyFTMKtOhBxGAnYdlCI4RO6DP 3chzvbrsKVJQ2MdTyZ4wOnlqOMItr9g1QoqaYGP9Q044SQOk5l1zv/qKeUoRsFMU elHum2nqOa0MFOVET5oxLFlIAwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMBWsywY /fBN1e2NfDv0QfnN4P99MB8GA1UdIwQYMBaAFJy6R0objtTBhWQZEC4J7l71HEml MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEOUI3NS85QzAwMjAyRUY0 ODgxMUVCQThEQjdEMENDNEY5QUUwMi9uTHBIU2h1TzFNR0ZaQmtRTGdudVh2VWNT YVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25McEhTaHVPMU1HRlpCa1FMZ251WHZVY1NhVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE OUI3NS85QzAwMjAyRUY0ODgxMUVCQThEQjdEMENDNEY5QUUwMi9uTHBIU2h1TzFN R0ZaQmtRTGdudVh2VWNTYVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBtIHAdgBuzrxsltfWeKcJVdns8/QkLOcXGmBhgIAX6uVyluLaMZFrh ECk5rgbhugGWLT0gAl3lC1Ztc1Gh2rcZk4nRYud5DCPqQxCOvs7qj+BF2a0K9KCb 2MRmhRSz6+84jWHYMXclNc8AhFG943ROuKNwMc8r0tUs1tEGcbavJLcp7IKNN0N8 cwCR+Axm+/zfolN8pJ32Gcz8ZoocH1EaCtUj6jDZBxcNW+la+AvORWw/aHz1MpXT Vo/Jp5inE+JZY2KlV3/pX1hE6irLl1hgnYq1fdwU9xP2CZMOL0T/K/iRiUgVIVlz k3/GRRwpuG0LsezuIhH8FUGJze4RUMix -----END CERTIFICATE-----Generated at Sat Apr 19 07:15:19 2025 by rpki-client