$ rpki-client -vvf rpki.apnic.net/member_repository/A91DD112/DABAB5DCD78F11EC97B59E62C4F9AE02/NuTjWeIN2mUTPhIaktbWrLHlMSM.mft File: NuTjWeIN2mUTPhIaktbWrLHlMSM.mft (raw, json) Hash identifier: zIsm6iNPHZS70Ray3AJeea7HlX5t7OfZhqHbVC9yE1Y= Subject key identifier: 7D:63:DD:1F:3E:A7:2E:A3:97:E9:F7:B3:29:8D:04:2E:1A:D7:E2:93 Authority key identifier: 36:E4:E3:59:E2:0D:DA:65:13:3E:12:1A:92:D6:D6:AC:B1:E5:31:23 Certificate issuer: /CN=A91DD112/serialNumber=36E4E359E20DDA65133E121A92D6D6ACB1E53123 Certificate serial: 02E6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NuTjWeIN2mUTPhIaktbWrLHlMSM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DD112/DABAB5DCD78F11EC97B59E62C4F9AE02/NuTjWeIN2mUTPhIaktbWrLHlMSM.mft Manifest number: 02E3 Signing time: Thu 03 Apr 2025 01:20:16 +0000 Manifest this update: Thu 03 Apr 2025 01:20:16 +0000 Manifest next update: Thu 10 Apr 2025 01:20:16 +0000 Files and hashes: 1: NuTjWeIN2mUTPhIaktbWrLHlMSM.crl (hash: SyyCWmTb6Wm04fyicce9HmvQ2Py3qNtvhMGb8dPkIPI=) 2: 0D09EE14D79411EC955CCA68C4F9AE02.roa (hash: C0oMAxQHsYdHAGjubReHZgymtUaTL7q6qGZom3tg5Ac=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DD112/DABAB5DCD78F11EC97B59E62C4F9AE02/NuTjWeIN2mUTPhIaktbWrLHlMSM.crl rsync://rpki.apnic.net/member_repository/A91DD112/DABAB5DCD78F11EC97B59E62C4F9AE02/NuTjWeIN2mUTPhIaktbWrLHlMSM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NuTjWeIN2mUTPhIaktbWrLHlMSM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Apr 2025 01:20:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 742 (0x2e6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DD112 Validity Not Before: Apr 3 01:20:16 2025 GMT Not After : Apr 10 01:20:16 2025 GMT Subject: CN=67ede250-3278 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:62:b6:23:01:83:1d:10:c4:e9:5d:77:02:b1: 67:60:1c:02:f1:04:bd:cb:36:f0:15:be:e3:eb:ed: 4f:83:31:66:b0:27:91:a7:65:6e:41:c6:c2:79:fa: 0b:15:0f:37:7d:c6:0b:f5:29:84:01:db:72:43:64: 63:81:fa:54:aa:24:09:d3:fc:99:11:24:ea:47:41: 7e:88:4f:10:da:8c:5c:fe:13:2a:a5:e6:cc:e4:86: 48:fc:37:0f:1c:68:c9:6a:11:09:2c:16:a7:93:d3: 06:bf:e7:56:d8:0c:ae:da:05:ad:7a:fa:e4:8e:33: 48:aa:c9:6e:31:67:31:07:d4:3a:e4:1d:26:e1:0e: 82:30:a1:44:45:88:c8:26:95:23:66:5c:e8:75:44: b6:9f:c5:13:af:d1:d0:03:cd:98:f0:ba:9f:c8:97: 1b:01:f4:7d:34:30:41:f1:93:32:de:29:07:11:74: 7c:e2:93:d0:e8:20:96:5b:4d:75:9c:a4:41:d9:4e: f0:43:42:f8:df:7a:56:14:74:c4:dc:58:bb:e5:00: 2c:cb:f7:54:6d:95:e8:fe:3e:74:06:99:8c:10:88: ed:69:07:8c:b5:de:ec:44:6e:04:c8:2f:05:a0:93: f3:81:86:3b:27:7c:1c:ae:a1:fc:7f:f3:39:f8:d8: b1:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:63:DD:1F:3E:A7:2E:A3:97:E9:F7:B3:29:8D:04:2E:1A:D7:E2:93 X509v3 Authority Key Identifier: keyid:36:E4:E3:59:E2:0D:DA:65:13:3E:12:1A:92:D6:D6:AC:B1:E5:31:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DD112/DABAB5DCD78F11EC97B59E62C4F9AE02/NuTjWeIN2mUTPhIaktbWrLHlMSM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NuTjWeIN2mUTPhIaktbWrLHlMSM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DD112/DABAB5DCD78F11EC97B59E62C4F9AE02/NuTjWeIN2mUTPhIaktbWrLHlMSM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 75:ee:9a:d7:37:fe:03:6a:c3:07:7d:85:69:ca:82:06:fe:74: fe:fc:7c:15:0b:06:7e:1c:e2:fa:2b:9c:e5:2e:18:d6:5e:41: 2a:76:d1:80:0d:0f:c4:bb:51:49:cc:f2:e4:17:15:57:42:a0: 15:89:bd:93:71:9c:d7:76:71:5a:28:20:00:80:61:f6:ea:1b: 3b:48:49:86:bc:b3:8d:a7:58:ec:0a:78:1b:7e:00:61:4e:12: 1c:f2:d2:b8:ed:9a:06:bf:23:33:2f:13:79:3f:54:91:52:c1: f2:4a:4c:c4:4b:6e:40:89:8a:35:a9:2e:fc:7b:37:a1:bb:ce: 9f:4a:f8:3c:30:8b:7d:1b:5e:d9:5e:3e:7a:b8:ac:73:4f:b4: 1b:ac:69:e2:50:5e:09:9d:93:dd:c3:0b:22:42:79:90:c3:21: 63:66:d6:76:7a:4f:bf:97:b2:c2:0f:9f:74:d5:f0:a3:81:e4: 24:fc:f1:d1:e5:49:02:b6:77:9a:bf:9e:da:06:b1:98:69:69: 97:a1:f0:a5:ee:54:2a:16:5a:09:8f:81:ce:2e:f1:7d:4a:7b: 4f:02:7d:aa:b4:1f:bc:62:98:d2:53:9a:06:17:18:4d:7e:86: cc:aa:3a:dc:0d:4e:5c:9e:80:80:a7:df:30:55:cb:5f:17:75: 36:a2:ce:c6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAuYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REQxMTIxMTAvBgNVBAUTKDM2RTRFMzU5RTIwRERBNjUxMzNFMTIxQTkyRDZENkFD QjFFNTMxMjMwHhcNMjUwNDAzMDEyMDE2WhcNMjUwNDEwMDEyMDE2WjAYMRYwFAYD VQQDEw02N2VkZTI1MC0zMjc4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtWK2IwGDHRDE6V13ArFnYBwC8QS9yzbwFb7j6+1PgzFmsCeRp2VuQcbCefoL FQ83fcYL9SmEAdtyQ2RjgfpUqiQJ0/yZESTqR0F+iE8Q2oxc/hMqpebM5IZI/DcP HGjJahEJLBank9MGv+dW2Ayu2gWtevrkjjNIqsluMWcxB9Q65B0m4Q6CMKFERYjI JpUjZlzodUS2n8UTr9HQA82Y8LqfyJcbAfR9NDBB8ZMy3ikHEXR84pPQ6CCWW011 nKRB2U7wQ0L433pWFHTE3Fi75QAsy/dUbZXo/j50BpmMEIjtaQeMtd7sRG4EyC8F oJPzgYY7J3wcrqH8f/M5+NixzwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH1j3R8+ py6jl+n3symNBC4a1+KTMB8GA1UdIwQYMBaAFDbk41niDdplEz4SGpLW1qyx5TEj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERDExMi9EQUJBQjVEQ0Q3 OEYxMUVDOTdCNTlFNjJDNEY5QUUwMi9OdVRqV2VJTjJtVVRQaElha3RiV3JMSGxN U00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL051VGpXZUlOMm1VVFBoSWFrdGJXckxIbE1TTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RDExMi9EQUJBQjVEQ0Q3OEYxMUVDOTdCNTlFNjJDNEY5QUUwMi9OdVRqV2VJTjJt VVRQaElha3RiV3JMSGxNU00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB17prXN/4DasMHfYVpyoIG/nT+/HwVCwZ+HOL6K5zlLhjWXkEqdtGA DQ/Eu1FJzPLkFxVXQqAVib2TcZzXdnFaKCAAgGH26hs7SEmGvLONp1jsCngbfgBh ThIc8tK47ZoGvyMzLxN5P1SRUsHySkzES25AiYo1qS78ezehu86fSvg8MIt9G17Z Xj56uKxzT7QbrGniUF4JnZPdwwsiQnmQwyFjZtZ2ek+/l7LCD5901fCjgeQk/PHR 5UkCtneav57aBrGYaWmXofCl7lQqFloJj4HOLvF9SntPAn2qtB+8YpjSU5oGFxhN fobMqjrcDU5cnoCAp98wVctfF3U2os7G -----END CERTIFICATE-----Generated at Fri Apr 4 21:42:31 2025 by rpki-client