$ rpki-client -vvf rpki.apnic.net/member_repository/A91DE8B4/4A65EAC8EE8011EAA0F82C5CC4F9AE02/nqyDVo7Oh3xUuSMNY52kTzgNIeU.mft File: nqyDVo7Oh3xUuSMNY52kTzgNIeU.mft (raw, json) Hash identifier: QP8BeT2CGEdKuvPycb++W9zmyzjWeXoeJ1ZfBkQ17bg= Subject key identifier: F2:90:70:9E:62:34:E7:20:9D:6A:35:F9:5C:36:16:B0:6D:35:95:4C Authority key identifier: 9E:AC:83:56:8E:CE:87:7C:54:B9:23:0D:63:9D:A4:4F:38:0D:21:E5 Certificate issuer: /CN=A91DE8B4/serialNumber=9EAC83568ECE877C54B9230D639DA44F380D21E5 Certificate serial: 07C4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nqyDVo7Oh3xUuSMNY52kTzgNIeU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DE8B4/4A65EAC8EE8011EAA0F82C5CC4F9AE02/nqyDVo7Oh3xUuSMNY52kTzgNIeU.mft Manifest number: 07BE Signing time: Wed 02 Apr 2025 21:04:55 +0000 Manifest this update: Wed 02 Apr 2025 21:04:54 +0000 Manifest next update: Wed 09 Apr 2025 21:04:54 +0000 Files and hashes: 1: nqyDVo7Oh3xUuSMNY52kTzgNIeU.crl (hash: HnLoQPNIBjK2loz3uOz2Z+c5dIsKAKTlnPtegZBQnrk=) 2: 149009E6EE8111EAABC5C05CC4F9AE02.roa (hash: ZuNx07Xi3l7zK6QE18qPa3KdYreh+VNjcsKw+zEu9qY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DE8B4/4A65EAC8EE8011EAA0F82C5CC4F9AE02/nqyDVo7Oh3xUuSMNY52kTzgNIeU.crl rsync://rpki.apnic.net/member_repository/A91DE8B4/4A65EAC8EE8011EAA0F82C5CC4F9AE02/nqyDVo7Oh3xUuSMNY52kTzgNIeU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nqyDVo7Oh3xUuSMNY52kTzgNIeU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Apr 2025 21:04:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1988 (0x7c4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DE8B4 Validity Not Before: Apr 2 21:04:54 2025 GMT Not After : Apr 9 21:04:54 2025 GMT Subject: CN=67eda677-0fa6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:de:97:9b:b3:01:c5:bc:35:fd:6e:e7:62:d0: 07:4a:f6:59:8b:97:1e:60:39:52:fa:75:f8:25:5f: f8:37:49:46:c2:da:bc:53:b7:3c:7b:2b:47:74:b7: ab:33:db:95:6b:79:a5:58:5a:d1:fa:62:42:af:44: 67:9e:c1:7b:bd:b4:2f:43:d9:da:cd:64:88:81:6d: fa:bc:ee:10:f5:95:b4:0b:f0:6e:99:f2:36:ba:48: 04:48:a7:98:39:57:52:4b:68:6b:02:d6:78:7e:1c: f2:02:32:3c:f8:fe:65:52:52:35:d7:f5:fd:f6:33: 99:90:73:27:75:99:9a:84:82:92:3e:db:c8:b0:84: 08:90:ae:33:d1:66:e6:53:aa:36:f7:a8:7c:d0:3f: 32:81:48:ce:a5:6a:a6:26:0f:83:2f:55:ee:c2:fb: b0:4a:7d:8f:b4:e6:31:8c:43:56:9d:55:a5:d6:a4: 37:53:1b:86:55:9d:b1:91:d5:18:44:49:b7:0e:d7: 3d:8f:42:83:0d:6e:a3:af:19:b5:72:68:8a:6f:e4: 55:14:d9:b2:0b:41:34:3b:53:99:70:e0:ec:31:b2: af:e5:65:9d:13:93:e1:61:5f:34:43:47:e4:46:98: 78:c8:46:9e:55:25:3b:da:d8:46:6e:5a:22:5c:5b: 0e:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:90:70:9E:62:34:E7:20:9D:6A:35:F9:5C:36:16:B0:6D:35:95:4C X509v3 Authority Key Identifier: keyid:9E:AC:83:56:8E:CE:87:7C:54:B9:23:0D:63:9D:A4:4F:38:0D:21:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DE8B4/4A65EAC8EE8011EAA0F82C5CC4F9AE02/nqyDVo7Oh3xUuSMNY52kTzgNIeU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nqyDVo7Oh3xUuSMNY52kTzgNIeU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DE8B4/4A65EAC8EE8011EAA0F82C5CC4F9AE02/nqyDVo7Oh3xUuSMNY52kTzgNIeU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3d:1e:cd:53:36:93:48:94:8e:55:d3:f2:1d:9a:f8:fb:a1:ec: c2:1b:e7:24:84:5c:6c:cf:4f:bd:86:d3:4f:68:23:8a:d2:88: 2c:ea:45:33:ef:fb:f5:bb:6a:3f:23:1b:c9:e9:62:8d:77:ac: a9:57:e3:50:67:b3:9b:8a:1b:2c:13:36:8f:be:b7:bf:c7:2f: b3:34:0e:49:d9:b8:25:e2:98:f3:47:16:4d:78:34:2b:6a:e6: 6f:70:a5:2f:89:f5:0b:2f:d9:44:23:a7:c1:fe:57:3e:45:dd: 7e:12:13:d9:da:79:45:20:12:0e:2c:19:0b:1b:70:ed:93:42: fb:0b:39:93:01:d5:c8:e7:d6:38:73:2a:3f:9e:c5:79:7b:17: dc:16:c5:29:e9:3a:82:9d:44:30:ce:eb:84:7a:35:95:bc:77: 32:5f:23:c4:c9:1e:fa:69:84:ee:f1:e2:85:c9:f9:48:ac:06: 9f:dd:00:d7:8e:b9:a7:3b:f0:cc:e3:e0:30:0f:51:7d:f9:f0: 40:49:d0:d6:26:d4:5a:59:bd:75:00:a0:41:27:70:de:35:5f: 49:e8:86:c3:6b:19:e5:c7:11:ef:3c:a6:e0:9c:59:b7:e7:0e: ce:5d:95:53:f0:f7:76:5a:14:c7:ff:c9:f8:32:da:8a:89:e6: 89:cf:02:61 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB8QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REU4QjQxMTAvBgNVBAUTKDlFQUM4MzU2OEVDRTg3N0M1NEI5MjMwRDYzOURBNDRG MzgwRDIxRTUwHhcNMjUwNDAyMjEwNDU0WhcNMjUwNDA5MjEwNDU0WjAYMRYwFAYD VQQDEw02N2VkYTY3Ny0wZmE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq96Xm7MBxbw1/W7nYtAHSvZZi5ceYDlS+nX4JV/4N0lGwtq8U7c8eytHdLer M9uVa3mlWFrR+mJCr0RnnsF7vbQvQ9nazWSIgW36vO4Q9ZW0C/BumfI2ukgESKeY OVdSS2hrAtZ4fhzyAjI8+P5lUlI11/X99jOZkHMndZmahIKSPtvIsIQIkK4z0Wbm U6o296h80D8ygUjOpWqmJg+DL1XuwvuwSn2PtOYxjENWnVWl1qQ3UxuGVZ2xkdUY REm3Dtc9j0KDDW6jrxm1cmiKb+RVFNmyC0E0O1OZcODsMbKv5WWdE5PhYV80Q0fk Rph4yEaeVSU72thGbloiXFsOMwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPKQcJ5i NOcgnWo1+Vw2FrBtNZVMMB8GA1UdIwQYMBaAFJ6sg1aOzod8VLkjDWOdpE84DSHl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERThCNC80QTY1RUFDOEVF ODAxMUVBQTBGODJDNUNDNEY5QUUwMi9ucXlEVm83T2gzeFV1U01OWTUya1R6Z05J ZVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25xeURWbzdPaDN4VXVTTU5ZNTJrVHpnTkllVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RThCNC80QTY1RUFDOEVFODAxMUVBQTBGODJDNUNDNEY5QUUwMi9ucXlEVm83T2gz eFV1U01OWTUya1R6Z05JZVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA9Hs1TNpNIlI5V0/Idmvj7oezCG+ckhFxsz0+9htNPaCOK0ogs6kUz 7/v1u2o/IxvJ6WKNd6ypV+NQZ7ObihssEzaPvre/xy+zNA5J2bgl4pjzRxZNeDQr auZvcKUvifULL9lEI6fB/lc+Rd1+EhPZ2nlFIBIOLBkLG3Dtk0L7CzmTAdXI59Y4 cyo/nsV5exfcFsUp6TqCnUQwzuuEejWVvHcyXyPEyR76aYTu8eKFyflIrAaf3QDX jrmnO/DM4+AwD1F9+fBASdDWJtRaWb11AKBBJ3DeNV9J6IbDaxnlxxHvPKbgnFm3 5w7OXZVT8Pd2WhTH/8n4MtqKieaJzwJh -----END CERTIFICATE-----Generated at Fri Apr 4 18:32:11 2025 by rpki-client