$ rpki-client -vvf rpki.apnic.net/member_repository/A91EF19E/A93E993E340D11E49EC98163C4F9AE02/nh8Zp-GNi87SPvLtqxnoVDjn8Io.mft File: nh8Zp-GNi87SPvLtqxnoVDjn8Io.mft (raw, json) Hash identifier: VtJBGLKicWmSeEXFycibmDm8tdPR4yYnDSNjVDHs2xU= Subject key identifier: D8:32:AB:D5:42:6C:15:52:5A:8D:58:7F:19:A9:16:F9:55:CB:ED:62 Authority key identifier: 9E:1F:19:A7:E1:8D:8B:CE:D2:3E:F2:ED:AB:19:E8:54:38:E7:F0:8A Certificate issuer: /CN=A91EF19E/serialNumber=9E1F19A7E18D8BCED23EF2EDAB19E85438E7F08A Certificate serial: 29EB Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nh8Zp-GNi87SPvLtqxnoVDjn8Io.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EF19E/A93E993E340D11E49EC98163C4F9AE02/nh8Zp-GNi87SPvLtqxnoVDjn8Io.mft Manifest number: 29E1 Signing time: Fri 04 Apr 2025 14:23:24 +0000 Manifest this update: Fri 04 Apr 2025 14:23:23 +0000 Manifest next update: Fri 11 Apr 2025 14:23:23 +0000 Files and hashes: 1: nh8Zp-GNi87SPvLtqxnoVDjn8Io.crl (hash: O3p/raCD7qtwBiJqWDz+5EyfKtC4QHOsG/HyizCA26E=) 2: F9722F8255C411E9A0FEF781C4F9AE02.roa (hash: 7nXeTuR6Lk+Z8nTiU9kBUgYIuWYLSQwBB8CP9oDRsnE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EF19E/A93E993E340D11E49EC98163C4F9AE02/nh8Zp-GNi87SPvLtqxnoVDjn8Io.crl rsync://rpki.apnic.net/member_repository/A91EF19E/A93E993E340D11E49EC98163C4F9AE02/nh8Zp-GNi87SPvLtqxnoVDjn8Io.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nh8Zp-GNi87SPvLtqxnoVDjn8Io.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 14:23:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10731 (0x29eb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EF19E Validity Not Before: Apr 4 14:23:23 2025 GMT Not After : Apr 11 14:23:23 2025 GMT Subject: CN=67efeb5c-2227 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:4c:1f:e4:a0:90:3d:58:ed:c7:cc:19:bc:00: 2f:7f:90:7c:f9:1e:8a:f5:c1:ce:2c:f9:30:05:0d: c4:6c:e8:3c:ef:38:d4:c0:73:e6:a2:d0:d9:15:ad: cc:20:16:4d:aa:5f:e2:ea:76:c0:ac:4c:66:c4:65: 83:58:49:86:d6:9a:46:c3:bc:10:ca:1a:3b:23:4d: eb:d6:f3:9d:cc:19:d7:84:24:28:f8:d7:62:49:ca: ff:2b:83:b0:57:c2:be:d8:e9:7f:04:cb:8e:39:5b: 45:e3:7a:ac:82:d2:bc:19:b7:fa:ee:32:06:30:3d: ae:68:da:a4:c5:a1:f3:c8:0e:7c:53:92:0c:c8:57: 18:2e:47:f3:5c:b5:f2:67:81:24:e3:31:53:0f:c2: ce:9e:74:bb:f9:ae:6f:e4:69:6f:69:1a:a6:3b:a5: 35:c1:dd:a6:b6:71:c6:ac:3f:02:4c:e3:c5:e4:7e: 2e:2a:8d:cd:1f:17:70:85:5b:59:2a:54:2d:1c:6d: 87:6b:9b:fc:09:54:53:31:f4:62:77:5e:e1:41:78: cf:c2:30:04:b0:57:bb:a1:33:80:9f:f0:60:7d:b2: 62:56:a5:a7:22:55:21:72:d0:93:47:fe:ed:cc:8b: ec:63:78:b7:6d:01:e2:5d:70:bc:47:c4:6a:6c:3b: fc:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:32:AB:D5:42:6C:15:52:5A:8D:58:7F:19:A9:16:F9:55:CB:ED:62 X509v3 Authority Key Identifier: keyid:9E:1F:19:A7:E1:8D:8B:CE:D2:3E:F2:ED:AB:19:E8:54:38:E7:F0:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EF19E/A93E993E340D11E49EC98163C4F9AE02/nh8Zp-GNi87SPvLtqxnoVDjn8Io.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nh8Zp-GNi87SPvLtqxnoVDjn8Io.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EF19E/A93E993E340D11E49EC98163C4F9AE02/nh8Zp-GNi87SPvLtqxnoVDjn8Io.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 72:61:e6:50:fa:f3:39:c0:6d:6b:d2:e6:bc:44:8b:ac:0f:6c: 87:17:4a:91:d5:39:fe:d2:92:c1:1e:5c:d7:90:56:77:58:7f: 41:65:fe:95:8b:a1:11:08:e6:87:aa:d6:ef:35:a9:68:16:e1: d6:ef:f2:8d:5f:e8:d2:d8:65:b0:d5:ce:65:ca:44:69:5c:9e: 04:64:ad:4b:a4:da:09:d0:a2:a6:69:bf:33:bf:22:12:15:78: ee:42:87:5d:8e:07:5c:ad:33:b6:f9:61:1c:56:d6:4c:1c:a9: d0:bb:17:a8:ef:6f:72:a0:7b:22:33:54:88:6a:6a:cc:44:99: 16:e1:4b:a3:f4:54:71:08:55:4c:c9:75:28:c8:e0:88:0f:73: ea:02:64:6d:72:a7:7e:09:b1:12:70:57:dc:c2:c2:e0:d2:97: 1c:eb:a9:09:c4:8a:be:d9:41:e6:2b:44:b9:0e:30:e0:12:fa: 14:f2:0f:2d:b7:40:cc:58:5f:7f:7d:01:bc:0e:46:e6:2f:30: 81:13:d3:bd:91:ee:48:94:2a:42:d7:f6:76:29:4a:f6:7b:4d: db:91:8d:fd:f8:7a:77:3c:94:6b:ea:80:33:1f:b9:c6:39:2f: da:e6:b9:67:9c:9d:d9:6f:53:9f:b9:ae:d4:5f:c9:af:4d:4f: ca:8e:11:69 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICKeswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUYxOUUxMTAvBgNVBAUTKDlFMUYxOUE3RTE4RDhCQ0VEMjNFRjJFREFCMTlFODU0 MzhFN0YwOEEwHhcNMjUwNDA0MTQyMzIzWhcNMjUwNDExMTQyMzIzWjAYMRYwFAYD VQQDEw02N2VmZWI1Yy0yMjI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwEwf5KCQPVjtx8wZvAAvf5B8+R6K9cHOLPkwBQ3EbOg87zjUwHPmotDZFa3M IBZNql/i6nbArExmxGWDWEmG1ppGw7wQyho7I03r1vOdzBnXhCQo+NdiScr/K4Ow V8K+2Ol/BMuOOVtF43qsgtK8Gbf67jIGMD2uaNqkxaHzyA58U5IMyFcYLkfzXLXy Z4Ek4zFTD8LOnnS7+a5v5GlvaRqmO6U1wd2mtnHGrD8CTOPF5H4uKo3NHxdwhVtZ KlQtHG2Ha5v8CVRTMfRid17hQXjPwjAEsFe7oTOAn/BgfbJiVqWnIlUhctCTR/7t zIvsY3i3bQHiXXC8R8RqbDv8GQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNgyq9VC bBVSWo1YfxmpFvlVy+1iMB8GA1UdIwQYMBaAFJ4fGafhjYvO0j7y7asZ6FQ45/CK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRjE5RS9BOTNFOTkzRTM0 MEQxMUU0OUVDOTgxNjNDNEY5QUUwMi9uaDhacC1HTmk4N1NQdkx0cXhub1ZEam44 SW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL25oOFpwLUdOaTg3U1B2THRxeG5vVkRqbjhJby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RjE5RS9BOTNFOTkzRTM0MEQxMUU0OUVDOTgxNjNDNEY5QUUwMi9uaDhacC1HTmk4 N1NQdkx0cXhub1ZEam44SW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQByYeZQ+vM5wG1r0ua8RIusD2yHF0qR1Tn+0pLBHlzXkFZ3WH9BZf6V i6ERCOaHqtbvNaloFuHW7/KNX+jS2GWw1c5lykRpXJ4EZK1LpNoJ0KKmab8zvyIS FXjuQoddjgdcrTO2+WEcVtZMHKnQuxeo729yoHsiM1SIamrMRJkW4Uuj9FRxCFVM yXUoyOCID3PqAmRtcqd+CbEScFfcwsLg0pcc66kJxIq+2UHmK0S5DjDgEvoU8g8t t0DMWF9/fQG8DkbmLzCBE9O9ke5IlCpC1/Z2KUr2e03bkY39+Hp3PJRr6oAzH7nG OS/a5rlnnJ3Zb1Ofua7UX8mvTU/KjhFp -----END CERTIFICATE-----Generated at Sat Apr 5 23:46:45 2025 by rpki-client