$ rpki-client -vvf rpki.apnic.net/member_repository/A91DC46A/00500164943211E68C1B824AC4F9AE02/-NSmMtBplkxhoz5B1iQ9U1sAfVQ.mft File: -NSmMtBplkxhoz5B1iQ9U1sAfVQ.mft (raw, json) Hash identifier: Zc5TO06TVGOO7qWEbjxO8OeFqtvACVvAeB1HKtKI31E= Subject key identifier: 5E:5A:22:57:C5:67:33:C9:A3:D0:35:68:69:F2:F0:66:21:18:B5:45 Authority key identifier: F8:D4:A6:32:D0:69:96:4C:61:A3:3E:41:D6:24:3D:53:5B:00:7D:54 Certificate issuer: /CN=A91DC46A/serialNumber=F8D4A632D069964C61A33E41D6243D535B007D54 Certificate serial: 1E14 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-NSmMtBplkxhoz5B1iQ9U1sAfVQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DC46A/00500164943211E68C1B824AC4F9AE02/-NSmMtBplkxhoz5B1iQ9U1sAfVQ.mft Manifest number: 1DD7 Signing time: Fri 04 Apr 2025 16:10:00 +0000 Manifest this update: Fri 04 Apr 2025 16:09:59 +0000 Manifest next update: Fri 11 Apr 2025 16:09:59 +0000 Files and hashes: 1: -NSmMtBplkxhoz5B1iQ9U1sAfVQ.crl (hash: o27aU/SFbywtLnJNn5fIvB/SBU3UFK4hSCF3WD5eGUg=) 2: 527AA5C69F4F11EAA7970484C4F9AE02.roa (hash: zuUsKZCcjPOj5pM09o9z0mAoFhewcmu+fcIGUoGJ1jw=) 3: BD6571EEC0AC11EF8F832C34C4F9AE02.roa (hash: G/Ubv3z+VEdcNFiGQpNHf2mTf7Lsh6KdDEju5wCmKbw=) 4: C86831A80CB311EDB2750F60C4F9AE02.roa (hash: lSszTQ1c+gMLFVw7Gk7VDvJy/TEZ74hKfBC2kdiByE0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DC46A/00500164943211E68C1B824AC4F9AE02/-NSmMtBplkxhoz5B1iQ9U1sAfVQ.crl rsync://rpki.apnic.net/member_repository/A91DC46A/00500164943211E68C1B824AC4F9AE02/-NSmMtBplkxhoz5B1iQ9U1sAfVQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-NSmMtBplkxhoz5B1iQ9U1sAfVQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 16:09:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7700 (0x1e14) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DC46A Validity Not Before: Apr 4 16:09:59 2025 GMT Not After : Apr 11 16:09:59 2025 GMT Subject: CN=67f00458-604a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:42:45:d7:3f:fb:4e:d9:2b:00:a0:ab:f4:20: fb:e8:fd:88:b2:25:bf:1d:7c:f0:4f:6c:ed:ff:17: 70:c4:b0:86:19:d5:0e:6b:52:62:44:72:4c:0b:03: 32:a9:f0:f0:b6:45:01:7c:2b:a7:1e:8d:7a:6a:bb: b7:bf:87:b2:9a:2e:ad:f3:27:79:bd:64:0e:bc:4d: 45:c3:6e:b2:a4:e4:87:29:6f:dc:4b:a8:4c:d7:c6: 7b:80:52:98:e5:55:36:a9:59:de:98:01:09:9c:0e: af:9d:07:96:89:7f:5a:01:0c:61:05:5c:20:d2:5c: 54:1d:b0:5f:d2:0d:5c:c0:39:6d:71:65:ab:79:3e: 15:7c:a1:fb:eb:ef:ae:91:9f:4f:6b:81:d1:63:ce: 21:f5:e7:7c:ce:78:a2:56:ed:3f:99:82:4b:b4:72: 5c:11:98:81:22:97:46:3c:70:1e:2e:9c:98:27:11: f3:ba:76:52:26:94:34:e4:cb:32:46:13:71:73:87: bc:d0:9d:79:e4:51:13:5b:7a:31:58:86:8c:61:65: 66:6f:69:d0:77:f6:cf:2c:6e:f7:06:ad:9d:15:b2: fe:13:15:20:b5:31:a1:5d:d7:89:e5:05:88:f6:ff: 87:dc:3e:5b:32:67:17:dc:fe:67:6c:eb:3b:43:cd: c2:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:5A:22:57:C5:67:33:C9:A3:D0:35:68:69:F2:F0:66:21:18:B5:45 X509v3 Authority Key Identifier: keyid:F8:D4:A6:32:D0:69:96:4C:61:A3:3E:41:D6:24:3D:53:5B:00:7D:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DC46A/00500164943211E68C1B824AC4F9AE02/-NSmMtBplkxhoz5B1iQ9U1sAfVQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-NSmMtBplkxhoz5B1iQ9U1sAfVQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC46A/00500164943211E68C1B824AC4F9AE02/-NSmMtBplkxhoz5B1iQ9U1sAfVQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0e:12:50:5d:1e:2b:e3:20:1a:c6:b6:2d:db:7c:99:79:62:e2: e3:65:ac:62:bd:56:49:a9:74:bb:33:ae:fb:20:cc:0c:00:ff: 59:6b:1a:37:08:4b:d2:47:0b:c8:02:d8:de:0f:f0:2b:39:26: 61:50:5a:10:40:2d:01:39:ad:83:d2:4d:74:1d:d4:bb:c3:9f: b8:c0:60:8d:f9:73:da:33:69:85:07:c4:20:05:3b:58:50:33: 5f:3d:59:e6:61:a2:5b:d9:e5:4a:49:f8:c1:c2:c1:0c:25:cd: 46:a1:97:b9:32:98:ec:9d:76:5e:83:c4:e0:af:10:62:a3:4a: 85:92:ce:1d:f4:d6:1e:94:b8:0b:46:b1:6c:91:e1:bc:66:76: 07:69:dd:f8:a2:b8:ce:2d:29:75:75:bb:8d:31:9c:f6:bd:60: 78:10:8a:e2:19:86:94:5d:00:5f:99:4f:23:dd:e1:41:ca:97: b5:88:ac:2e:22:c3:0a:b8:88:21:d1:3a:20:d8:38:56:46:40: a6:34:62:18:16:2c:fd:9f:ad:7b:42:ea:49:98:d2:73:a0:80: 86:37:70:d4:4d:9f:bb:60:0e:12:df:32:aa:a7:ae:a5:75:bb: fe:6d:fa:c0:af:f1:ce:56:19:05:40:fe:af:31:bf:84:3d:2f: 1e:91:6a:d1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHhQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REM0NkExMTAvBgNVBAUTKEY4RDRBNjMyRDA2OTk2NEM2MUEzM0U0MUQ2MjQzRDUz NUIwMDdENTQwHhcNMjUwNDA0MTYwOTU5WhcNMjUwNDExMTYwOTU5WjAYMRYwFAYD VQQDEw02N2YwMDQ1OC02MDRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxEJF1z/7TtkrAKCr9CD76P2IsiW/HXzwT2zt/xdwxLCGGdUOa1JiRHJMCwMy qfDwtkUBfCunHo16aru3v4eymi6t8yd5vWQOvE1Fw26ypOSHKW/cS6hM18Z7gFKY 5VU2qVnemAEJnA6vnQeWiX9aAQxhBVwg0lxUHbBf0g1cwDltcWWreT4VfKH76++u kZ9Pa4HRY84h9ed8zniiVu0/mYJLtHJcEZiBIpdGPHAeLpyYJxHzunZSJpQ05Msy RhNxc4e80J155FETW3oxWIaMYWVmb2nQd/bPLG73Bq2dFbL+ExUgtTGhXdeJ5QWI 9v+H3D5bMmcX3P5nbOs7Q83CawIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF5aIlfF ZzPJo9A1aGny8GYhGLVFMB8GA1UdIwQYMBaAFPjUpjLQaZZMYaM+QdYkPVNbAH1U MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQzQ2QS8wMDUwMDE2NDk0 MzIxMUU2OEMxQjgyNEFDNEY5QUUwMi8tTlNtTXRCcGxreGhvejVCMWlROVUxc0Fm VlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1OU21NdEJwbGt4aG96NUIxaVE5VTFzQWZWUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QzQ2QS8wMDUwMDE2NDk0MzIxMUU2OEMxQjgyNEFDNEY5QUUwMi8tTlNtTXRCcGxr eGhvejVCMWlROVUxc0FmVlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAOElBdHivjIBrGti3bfJl5YuLjZaxivVZJqXS7M677IMwMAP9Zaxo3 CEvSRwvIAtjeD/ArOSZhUFoQQC0BOa2D0k10HdS7w5+4wGCN+XPaM2mFB8QgBTtY UDNfPVnmYaJb2eVKSfjBwsEMJc1GoZe5MpjsnXZeg8TgrxBio0qFks4d9NYelLgL RrFskeG8ZnYHad34orjOLSl1dbuNMZz2vWB4EIriGYaUXQBfmU8j3eFBype1iKwu IsMKuIgh0Tog2DhWRkCmNGIYFiz9n617QupJmNJzoICGN3DUTZ+7YA4S3zKqp66l dbv+bfrAr/HOVhkFQP6vMb+EPS8ekWrR -----END CERTIFICATE-----Generated at Fri Apr 4 22:36:59 2025 by rpki-client