$ rpki-client -vvf rpki.apnic.net/member_repository/A91EBF76/A6DE097C852311EBB7E9F383C4F9AE02/0NbEemjLQdEG6wQtcma5y7_Bpzs.mft File: 0NbEemjLQdEG6wQtcma5y7_Bpzs.mft (raw, json) Hash identifier: /8HqP95MGWRCIaFJrMTnY4NPJCThOuzcdhb4TmE5yy4= Subject key identifier: 00:CE:FC:FE:93:6C:FE:86:11:1B:4E:71:1C:E0:8A:7E:B1:DE:EB:0F Authority key identifier: D0:D6:C4:7A:68:CB:41:D1:06:EB:04:2D:72:66:B9:CB:BF:C1:A7:3B Certificate issuer: /CN=A91EBF76/serialNumber=D0D6C47A68CB41D106EB042D7266B9CBBFC1A73B Certificate serial: 0642 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0NbEemjLQdEG6wQtcma5y7_Bpzs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EBF76/A6DE097C852311EBB7E9F383C4F9AE02/0NbEemjLQdEG6wQtcma5y7_Bpzs.mft Manifest number: 063D Signing time: Fri 04 Apr 2025 22:41:22 +0000 Manifest this update: Fri 04 Apr 2025 22:41:22 +0000 Manifest next update: Fri 11 Apr 2025 22:41:22 +0000 Files and hashes: 1: 0NbEemjLQdEG6wQtcma5y7_Bpzs.crl (hash: cAS5MIq7EqzTEEfxE4LdI3dnCY0bfZXYD1aj29q+/V8=) 2: 5FBDA400853011EBA1AF1D76C4F9AE02.roa (hash: av1fp+B0Rvyyl/M+tQ87N6LBAVDY2pJUK/6gF5bMDYg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EBF76/A6DE097C852311EBB7E9F383C4F9AE02/0NbEemjLQdEG6wQtcma5y7_Bpzs.crl rsync://rpki.apnic.net/member_repository/A91EBF76/A6DE097C852311EBB7E9F383C4F9AE02/0NbEemjLQdEG6wQtcma5y7_Bpzs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0NbEemjLQdEG6wQtcma5y7_Bpzs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 22:41:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1602 (0x642) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EBF76 Validity Not Before: Apr 4 22:41:22 2025 GMT Not After : Apr 11 22:41:22 2025 GMT Subject: CN=67f06012-be47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:ca:cf:4c:08:1c:63:6c:97:c7:b6:14:a4:2c: bd:0d:ad:86:df:c0:83:70:9b:d0:88:e8:68:8e:0e: 87:bf:48:4e:36:52:97:d5:d2:e4:f9:76:17:12:f7: 3a:d9:cd:2f:da:18:33:d9:d1:f7:01:01:7c:cd:d4: 54:07:45:6b:4c:7c:16:6a:78:56:73:23:20:b9:12: 04:1c:95:bf:4e:65:b0:4e:7d:77:78:8f:08:f9:0c: 4f:cc:2d:1d:72:78:ea:f4:f6:32:f7:fe:bf:36:1f: 52:2b:75:f8:77:80:4e:fe:f8:ad:53:7f:0f:86:f4: f2:e2:2b:56:fe:69:ed:16:a3:45:d5:bd:5a:5d:9c: 42:87:e5:8c:91:93:14:08:8a:dc:dc:8e:e7:80:74: fd:d9:1f:9d:35:ed:4b:33:0e:57:89:dc:89:2c:61: e3:00:f4:ca:67:29:02:2d:ef:08:af:e2:ff:02:64: d6:20:11:36:0e:26:32:8f:3b:c9:2c:0c:70:85:b5: 63:c3:2f:c2:ce:7b:8c:08:f7:d7:1d:5a:6c:e7:0f: 67:81:43:08:18:59:6c:15:fc:a9:86:f0:6b:41:ed: 5a:47:d5:57:90:78:b4:e3:3c:c6:02:99:ee:e1:d6: bb:99:a0:a2:c0:ee:a2:c4:5b:27:bf:80:af:c2:49: 79:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:CE:FC:FE:93:6C:FE:86:11:1B:4E:71:1C:E0:8A:7E:B1:DE:EB:0F X509v3 Authority Key Identifier: keyid:D0:D6:C4:7A:68:CB:41:D1:06:EB:04:2D:72:66:B9:CB:BF:C1:A7:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EBF76/A6DE097C852311EBB7E9F383C4F9AE02/0NbEemjLQdEG6wQtcma5y7_Bpzs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0NbEemjLQdEG6wQtcma5y7_Bpzs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EBF76/A6DE097C852311EBB7E9F383C4F9AE02/0NbEemjLQdEG6wQtcma5y7_Bpzs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7f:2b:ed:9d:50:6f:70:31:35:b6:55:ab:55:20:06:0b:b9:ad: 88:da:a3:cb:c9:29:4e:ab:16:e2:a5:16:ab:ee:91:70:6e:34: 69:06:b1:c2:f7:3c:62:73:7e:a8:4f:0e:f4:46:42:05:21:fc: e1:bb:93:e8:1a:3c:8b:17:5a:7a:8e:37:90:31:13:35:41:06: 21:13:87:27:9d:33:78:f1:6e:44:aa:45:b1:54:ec:12:ea:35: fd:e6:c8:ea:98:2a:72:b8:ed:ee:83:9f:1e:bb:fa:6f:80:2e: 5a:5c:16:51:0a:79:d6:8c:40:14:ce:37:b5:e0:30:be:1b:47: 25:68:6d:dc:c6:93:91:5e:f8:fd:09:7b:0c:19:19:7c:d2:0c: f8:bd:ff:49:fd:67:cc:9c:20:fb:a5:12:2f:3a:43:7e:36:72: b7:e9:f8:e7:a3:00:bf:57:f8:51:ac:e9:28:89:87:28:5d:5d: ae:eb:29:c2:df:ec:7e:71:1d:da:70:e4:56:7a:ca:d4:83:4c: bf:4e:f1:fe:c3:78:da:63:46:66:98:4f:a4:cd:b3:45:bb:21: d7:45:04:bb:51:b1:66:85:b0:b9:6d:c1:d5:30:ec:0e:28:b6: d5:71:a0:cc:99:07:44:d8:89:4e:a5:65:13:86:ca:14:99:53: db:fa:01:b3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBkIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUJGNzYxMTAvBgNVBAUTKEQwRDZDNDdBNjhDQjQxRDEwNkVCMDQyRDcyNjZCOUNC QkZDMUE3M0IwHhcNMjUwNDA0MjI0MTIyWhcNMjUwNDExMjI0MTIyWjAYMRYwFAYD VQQDEw02N2YwNjAxMi1iZTQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwcrPTAgcY2yXx7YUpCy9Da2G38CDcJvQiOhojg6Hv0hONlKX1dLk+XYXEvc6 2c0v2hgz2dH3AQF8zdRUB0VrTHwWanhWcyMguRIEHJW/TmWwTn13eI8I+QxPzC0d cnjq9PYy9/6/Nh9SK3X4d4BO/vitU38PhvTy4itW/mntFqNF1b1aXZxCh+WMkZMU CIrc3I7ngHT92R+dNe1LMw5XidyJLGHjAPTKZykCLe8Ir+L/AmTWIBE2DiYyjzvJ LAxwhbVjwy/CznuMCPfXHVps5w9ngUMIGFlsFfyphvBrQe1aR9VXkHi04zzGApnu 4da7maCiwO6ixFsnv4Cvwkl56wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFADO/P6T bP6GERtOcRzgin6x3usPMB8GA1UdIwQYMBaAFNDWxHpoy0HRBusELXJmucu/wac7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQkY3Ni9BNkRFMDk3Qzg1 MjMxMUVCQjdFOUYzODNDNEY5QUUwMi8wTmJFZW1qTFFkRUc2d1F0Y21hNXk3X0Jw enMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzBOYkVlbWpMUWRFRzZ3UXRjbWE1eTdfQnB6cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QkY3Ni9BNkRFMDk3Qzg1MjMxMUVCQjdFOUYzODNDNEY5QUUwMi8wTmJFZW1qTFFk RUc2d1F0Y21hNXk3X0JwenMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB/K+2dUG9wMTW2VatVIAYLua2I2qPLySlOqxbipRar7pFwbjRpBrHC 9zxic36oTw70RkIFIfzhu5PoGjyLF1p6jjeQMRM1QQYhE4cnnTN48W5EqkWxVOwS 6jX95sjqmCpyuO3ug58eu/pvgC5aXBZRCnnWjEAUzje14DC+G0claG3cxpORXvj9 CXsMGRl80gz4vf9J/WfMnCD7pRIvOkN+NnK36fjnowC/V/hRrOkoiYcoXV2u6ynC 3+x+cR3acORWesrUg0y/TvH+w3jaY0ZmmE+kzbNFuyHXRQS7UbFmhbC5bcHVMOwO KLbVcaDMmQdE2IlOpWUThsoUmVPb+gGz -----END CERTIFICATE-----Generated at Sat Apr 5 07:14:23 2025 by rpki-client