$ rpki-client -vvf rpki.apnic.net/member_repository/A91F38FD/A5A6F37A61F811EE9F79401AC4F9AE02/nLXKgHLiac4FVaYAsheSDrnhrE8.mft File: nLXKgHLiac4FVaYAsheSDrnhrE8.mft (raw, json) Hash identifier: TGYnIUaARywSmA9Gergpf4jNj5Ak3zMAT+2oMgh8088= Subject key identifier: C4:DB:E8:06:A1:14:2F:4B:C7:F6:26:66:4C:4F:76:62:7C:24:62:07 Authority key identifier: 9C:B5:CA:80:72:E2:69:CE:05:55:A6:00:B2:17:92:0E:B9:E1:AC:4F Certificate issuer: /CN=A91F38FD/serialNumber=9CB5CA8072E269CE0555A600B217920EB9E1AC4F Certificate serial: 0126 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nLXKgHLiac4FVaYAsheSDrnhrE8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F38FD/A5A6F37A61F811EE9F79401AC4F9AE02/nLXKgHLiac4FVaYAsheSDrnhrE8.mft Manifest number: 011F Signing time: Sat 29 Mar 2025 04:14:05 +0000 Manifest this update: Sat 29 Mar 2025 04:14:04 +0000 Manifest next update: Sat 05 Apr 2025 04:14:04 +0000 Files and hashes: 1: nLXKgHLiac4FVaYAsheSDrnhrE8.crl (hash: PWCUviqMGjmbYYoEyClEPl5CnDMj0rmZVbeWmAWRrEs=) 2: 0B421064DD2411EFA5DECA6CC4F9AE02.roa (hash: iPG0hpzDRBKyvVm+6Qkbihdh+5UI+wgroCyFHLS8kTU=) 3: 36020660DD2411EF9F4FB925C4F9AE02.roa (hash: j9Po9H6BwdSd4+LJVOpstqA6CfVsNzASbprlAvb5WDg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F38FD/A5A6F37A61F811EE9F79401AC4F9AE02/nLXKgHLiac4FVaYAsheSDrnhrE8.crl rsync://rpki.apnic.net/member_repository/A91F38FD/A5A6F37A61F811EE9F79401AC4F9AE02/nLXKgHLiac4FVaYAsheSDrnhrE8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nLXKgHLiac4FVaYAsheSDrnhrE8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Apr 2025 04:14:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 294 (0x126) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F38FD Validity Not Before: Mar 29 04:14:04 2025 GMT Not After : Apr 5 04:14:04 2025 GMT Subject: CN=67e7738d-75c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:af:7f:ea:4b:aa:8e:96:c7:d3:47:b7:be:ae: 5c:4e:74:e9:37:4c:49:5a:4d:3a:7e:4c:7e:d8:bb: 06:d1:31:a7:7c:e8:99:e2:00:47:f5:65:3a:9a:75: bb:4a:45:56:ba:9c:1e:01:73:8a:5d:36:2e:e6:2b: 93:3e:6f:47:fe:79:6f:95:a5:ba:17:72:df:df:39: 08:07:b4:4e:a6:03:cb:6c:79:2f:d1:ca:2b:25:0f: 85:8f:9b:a0:a5:8f:cc:12:f6:c6:21:1d:ee:6d:52: c4:c1:60:ea:b9:91:c0:24:81:c7:48:61:d3:dd:8b: eb:a7:01:80:ba:de:a3:3d:80:cf:eb:ae:59:70:95: 1d:1a:da:61:41:a0:22:37:48:8d:1c:3e:ca:45:b0: 3f:09:64:cc:b9:40:93:59:ff:a9:44:c1:57:60:34: 1a:82:72:ed:4a:bd:00:76:be:de:cc:7a:ca:5f:2e: ea:75:4c:1c:b2:fb:97:c5:08:c8:19:d5:f6:13:42: d5:23:88:60:22:ea:83:d9:b8:dc:73:d9:93:ef:5d: 0b:1b:c3:e1:c8:cc:08:aa:7c:8a:2a:e2:69:79:69: 53:21:62:1e:f4:f4:1e:32:db:6f:fc:da:9c:c3:e6: b1:c7:b3:50:16:08:8b:52:9f:81:2d:aa:90:67:c6: 9c:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:DB:E8:06:A1:14:2F:4B:C7:F6:26:66:4C:4F:76:62:7C:24:62:07 X509v3 Authority Key Identifier: keyid:9C:B5:CA:80:72:E2:69:CE:05:55:A6:00:B2:17:92:0E:B9:E1:AC:4F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F38FD/A5A6F37A61F811EE9F79401AC4F9AE02/nLXKgHLiac4FVaYAsheSDrnhrE8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nLXKgHLiac4FVaYAsheSDrnhrE8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F38FD/A5A6F37A61F811EE9F79401AC4F9AE02/nLXKgHLiac4FVaYAsheSDrnhrE8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 88:00:db:27:52:f4:f5:b3:03:62:90:b5:4c:64:19:d6:50:61: 16:27:11:ae:0c:ec:b5:22:a9:a9:db:94:fd:0c:df:ab:aa:46: 04:eb:7d:49:d6:2d:54:2a:b0:72:ad:d3:f1:10:4a:6e:9b:8a: 48:95:35:21:77:64:3c:1c:bb:55:7f:52:3b:05:04:57:ed:7e: 26:3f:db:95:37:fc:44:4e:d5:72:dd:8d:5b:ae:d0:5d:f8:36: 75:17:1a:3b:cf:66:54:3f:25:ff:20:13:d1:50:60:23:dd:b6: cc:ab:91:85:e4:07:e9:b0:5b:eb:84:3e:8e:5a:db:87:f7:a1: af:e2:6a:3b:f6:56:d2:56:9b:85:f4:22:99:fe:aa:16:4d:f0: 40:7a:46:f9:b6:99:63:ee:e2:c0:01:b3:ac:aa:72:3f:d3:3a: ea:3e:a5:2d:37:7d:85:cc:3d:14:33:45:ad:19:f6:47:8e:9c: 46:b6:85:b0:05:cb:fe:bc:a8:11:be:55:04:26:51:89:9f:c4: c6:0c:41:eb:26:6d:55:d9:86:04:7e:49:03:4b:04:c8:01:ea: db:c5:9b:70:b1:d0:44:13:70:39:30:c2:1c:99:b6:00:cf:ca: bc:b9:9f:87:34:e4:52:be:29:fb:44:b2:84:d1:2e:ef:e6:31: 92:f0:4a:4f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjM4RkQxMTAvBgNVBAUTKDlDQjVDQTgwNzJFMjY5Q0UwNTU1QTYwMEIyMTc5MjBF QjlFMUFDNEYwHhcNMjUwMzI5MDQxNDA0WhcNMjUwNDA1MDQxNDA0WjAYMRYwFAYD VQQDEw02N2U3NzM4ZC03NWM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxq9/6kuqjpbH00e3vq5cTnTpN0xJWk06fkx+2LsG0TGnfOiZ4gBH9WU6mnW7 SkVWupweAXOKXTYu5iuTPm9H/nlvlaW6F3Lf3zkIB7ROpgPLbHkv0corJQ+Fj5ug pY/MEvbGIR3ubVLEwWDquZHAJIHHSGHT3YvrpwGAut6jPYDP665ZcJUdGtphQaAi N0iNHD7KRbA/CWTMuUCTWf+pRMFXYDQagnLtSr0Adr7ezHrKXy7qdUwcsvuXxQjI GdX2E0LVI4hgIuqD2bjcc9mT710LG8PhyMwIqnyKKuJpeWlTIWIe9PQeMttv/Nqc w+axx7NQFgiLUp+BLaqQZ8acyQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMTb6Aah FC9Lx/YmZkxPdmJ8JGIHMB8GA1UdIwQYMBaAFJy1yoBy4mnOBVWmALIXkg654axP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMzhGRC9BNUE2RjM3QTYx RjgxMUVFOUY3OTQwMUFDNEY5QUUwMi9uTFhLZ0hMaWFjNEZWYVlBc2hlU0Rybmhy RTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25MWEtnSExpYWM0RlZhWUFzaGVTRHJuaHJFOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MzhGRC9BNUE2RjM3QTYxRjgxMUVFOUY3OTQwMUFDNEY5QUUwMi9uTFhLZ0hMaWFj NEZWYVlBc2hlU0RybmhyRTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCIANsnUvT1swNikLVMZBnWUGEWJxGuDOy1Iqmp25T9DN+rqkYE631J 1i1UKrByrdPxEEpum4pIlTUhd2Q8HLtVf1I7BQRX7X4mP9uVN/xETtVy3Y1brtBd +DZ1Fxo7z2ZUPyX/IBPRUGAj3bbMq5GF5AfpsFvrhD6OWtuH96Gv4mo79lbSVpuF 9CKZ/qoWTfBAekb5tplj7uLAAbOsqnI/0zrqPqUtN32FzD0UM0WtGfZHjpxGtoWw Bcv+vKgRvlUEJlGJn8TGDEHrJm1V2YYEfkkDSwTIAerbxZtwsdBEE3A5MMIcmbYA z8q8uZ+HNORSvin7RLKE0S7v5jGS8EpP -----END CERTIFICATE-----Generated at Fri Apr 4 22:19:46 2025 by rpki-client