$ rpki-client -vvf rpki.apnic.net/member_repository/A91DE10F/60EA5C2CB5D311E7B6A2DD5DC4F9AE02/NDyCcTdhxY6CRQ2UqleWffm0bxU.mft File: NDyCcTdhxY6CRQ2UqleWffm0bxU.mft (raw, json) Hash identifier: K5ddzR8qaRy4sjuna3KO30dtwkK8DKClbWNGvLncaBo= Subject key identifier: 47:2F:D0:D4:4A:49:11:46:F6:F8:A6:92:0B:EF:08:4B:61:4B:78:B1 Authority key identifier: 34:3C:82:71:37:61:C5:8E:82:45:0D:94:AA:57:96:7D:F9:B4:6F:15 Certificate issuer: /CN=A91DE10F/serialNumber=343C82713761C58E82450D94AA57967DF9B46F15 Certificate serial: 17F1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NDyCcTdhxY6CRQ2UqleWffm0bxU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DE10F/60EA5C2CB5D311E7B6A2DD5DC4F9AE02/NDyCcTdhxY6CRQ2UqleWffm0bxU.mft Manifest number: 17E8 Signing time: Fri 04 Apr 2025 16:37:48 +0000 Manifest this update: Fri 04 Apr 2025 16:37:48 +0000 Manifest next update: Fri 11 Apr 2025 16:37:48 +0000 Files and hashes: 1: NDyCcTdhxY6CRQ2UqleWffm0bxU.crl (hash: 6eVVfGHCBXHh7Rn6e2PxK46E+hr2EgXF1rcvyZlTCGQ=) 2: 31AA8496B62811E7882B893BC4F9AE02.roa (hash: TzvQgcIEdDiZ2vx98Eai/8pokoL7PkZgm06lLl+dtq8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DE10F/60EA5C2CB5D311E7B6A2DD5DC4F9AE02/NDyCcTdhxY6CRQ2UqleWffm0bxU.crl rsync://rpki.apnic.net/member_repository/A91DE10F/60EA5C2CB5D311E7B6A2DD5DC4F9AE02/NDyCcTdhxY6CRQ2UqleWffm0bxU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NDyCcTdhxY6CRQ2UqleWffm0bxU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 16:37:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6129 (0x17f1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DE10F Validity Not Before: Apr 4 16:37:48 2025 GMT Not After : Apr 11 16:37:48 2025 GMT Subject: CN=67f00adc-ab43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:6f:09:03:9c:e6:5c:68:79:65:99:2a:46:94: a3:6a:77:e1:cc:51:53:35:10:de:d0:80:e9:36:16: 04:c5:09:91:db:24:03:30:db:a0:94:49:88:5d:14: db:40:84:42:ca:29:b3:9c:7e:2e:94:28:7c:89:59: fb:7f:0c:aa:54:83:fa:56:35:f1:cc:48:11:3b:c8: 42:a4:81:2c:bd:43:79:06:a7:a7:4e:5c:17:fd:7c: e6:6c:f9:61:60:11:3e:53:21:3a:fc:28:52:07:92: cf:83:d6:72:bb:80:9c:ff:8a:c0:62:c0:7a:9e:e2: 87:58:54:19:72:72:59:e1:a0:8d:fa:0f:1e:c0:ba: c7:f3:c1:d8:d4:94:da:b0:cc:50:28:f9:41:9e:8d: 27:52:ba:c8:61:56:20:c8:d8:11:0b:fc:b8:2b:5d: f4:05:22:8c:36:62:b4:ce:90:6c:52:ff:e7:57:98: 0f:07:6a:af:8d:9f:7a:5c:78:7b:f2:7b:20:f5:14: c0:43:ed:c5:f4:77:29:1d:a3:31:4b:89:d3:3b:e7: 50:80:7a:23:c5:ad:14:76:13:c8:01:32:56:47:41: 36:8e:f9:95:d5:7e:32:99:1c:eb:4a:6b:70:5b:36: 2e:7f:8c:97:0f:0c:4a:5c:43:cd:13:a0:e3:bf:a0: cc:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:2F:D0:D4:4A:49:11:46:F6:F8:A6:92:0B:EF:08:4B:61:4B:78:B1 X509v3 Authority Key Identifier: keyid:34:3C:82:71:37:61:C5:8E:82:45:0D:94:AA:57:96:7D:F9:B4:6F:15 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DE10F/60EA5C2CB5D311E7B6A2DD5DC4F9AE02/NDyCcTdhxY6CRQ2UqleWffm0bxU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NDyCcTdhxY6CRQ2UqleWffm0bxU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DE10F/60EA5C2CB5D311E7B6A2DD5DC4F9AE02/NDyCcTdhxY6CRQ2UqleWffm0bxU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7c:df:73:04:89:fa:ec:3e:12:11:06:ef:33:b0:7d:d3:45:35: 0c:3d:dc:57:1f:fa:3f:c7:1c:b9:19:e5:42:e8:b6:ff:22:c6: 71:bc:a1:9a:74:3e:0a:16:a8:13:33:c4:2f:1d:5f:63:85:18: 55:e0:b9:96:ad:cd:b1:7e:21:87:08:23:a1:9a:d6:a7:64:5c: c7:82:ea:19:c9:6d:74:8d:84:55:84:63:64:65:2c:c1:d9:5b: 76:be:e7:24:59:6f:21:24:1e:50:39:d6:01:ae:19:76:31:c4: 68:40:5f:7e:45:a6:d3:f9:17:99:7b:12:0d:49:91:07:d9:4c: a1:84:fe:42:38:f4:86:42:c7:8d:d8:9c:ed:ad:21:63:3d:39: ab:db:d6:d2:9b:a7:f5:81:e5:30:41:92:73:fc:02:4e:18:68: 07:8e:84:fa:65:fc:e5:24:f1:0d:f7:a9:60:54:40:fd:55:bc: 46:21:94:bc:2a:48:44:0d:2d:b3:de:ea:53:86:0e:20:d0:7d: 54:b9:6e:63:fe:87:26:e6:82:e1:63:a1:9f:6b:a9:b1:ad:42: 8f:0d:b5:52:c3:26:80:79:64:18:b7:b7:9b:77:88:87:4d:d6: 4c:e3:9c:e7:1c:73:0f:b6:34:e7:a3:08:a9:4b:94:18:4d:b7: cf:da:cc:2d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICF/EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REUxMEYxMTAvBgNVBAUTKDM0M0M4MjcxMzc2MUM1OEU4MjQ1MEQ5NEFBNTc5NjdE RjlCNDZGMTUwHhcNMjUwNDA0MTYzNzQ4WhcNMjUwNDExMTYzNzQ4WjAYMRYwFAYD VQQDEw02N2YwMGFkYy1hYjQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu28JA5zmXGh5ZZkqRpSjanfhzFFTNRDe0IDpNhYExQmR2yQDMNuglEmIXRTb QIRCyimznH4ulCh8iVn7fwyqVIP6VjXxzEgRO8hCpIEsvUN5BqenTlwX/XzmbPlh YBE+UyE6/ChSB5LPg9Zyu4Cc/4rAYsB6nuKHWFQZcnJZ4aCN+g8ewLrH88HY1JTa sMxQKPlBno0nUrrIYVYgyNgRC/y4K130BSKMNmK0zpBsUv/nV5gPB2qvjZ96XHh7 8nsg9RTAQ+3F9HcpHaMxS4nTO+dQgHojxa0UdhPIATJWR0E2jvmV1X4ymRzrSmtw WzYuf4yXDwxKXEPNE6Djv6DMGQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEcv0NRK SRFG9vimkgvvCEthS3ixMB8GA1UdIwQYMBaAFDQ8gnE3YcWOgkUNlKpXln35tG8V MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERTEwRi82MEVBNUMyQ0I1 RDMxMUU3QjZBMkRENURDNEY5QUUwMi9ORHlDY1RkaHhZNkNSUTJVcWxlV2ZmbTBi eFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05EeUNjVGRoeFk2Q1JRMlVxbGVXZmZtMGJ4VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RTEwRi82MEVBNUMyQ0I1RDMxMUU3QjZBMkRENURDNEY5QUUwMi9ORHlDY1RkaHhZ NkNSUTJVcWxlV2ZmbTBieFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB833MEifrsPhIRBu8zsH3TRTUMPdxXH/o/xxy5GeVC6Lb/IsZxvKGa dD4KFqgTM8QvHV9jhRhV4LmWrc2xfiGHCCOhmtanZFzHguoZyW10jYRVhGNkZSzB 2Vt2vuckWW8hJB5QOdYBrhl2McRoQF9+RabT+ReZexINSZEH2UyhhP5COPSGQseN 2JztrSFjPTmr29bSm6f1geUwQZJz/AJOGGgHjoT6ZfzlJPEN96lgVED9VbxGIZS8 KkhEDS2z3upThg4g0H1UuW5j/ocm5oLhY6Gfa6mxrUKPDbVSwyaAeWQYt7ebd4iH TdZM45znHHMPtjTnowipS5QYTbfP2swt -----END CERTIFICATE-----Generated at Fri Apr 4 22:01:45 2025 by rpki-client