$ rpki-client -vvf rpki.apnic.net/member_repository/A91F9353/0875E64805C611EF89620A26C4F9AE02/rNBH0NiOJlfhLPkTAcFg8dPNLzM.mft File: rNBH0NiOJlfhLPkTAcFg8dPNLzM.mft (raw, json) Hash identifier: g/f2QakgeKIBvoVka4JNeXI5cAKMObqPKX83b/4aDvE= Subject key identifier: 73:16:1C:97:83:F1:43:9C:C1:5A:C7:BE:9C:29:14:AD:98:25:A7:B6 Authority key identifier: AC:D0:47:D0:D8:8E:26:57:E1:2C:F9:13:01:C1:60:F1:D3:CD:2F:33 Certificate issuer: /CN=A91F9353/serialNumber=ACD047D0D88E2657E12CF91301C160F1D3CD2F33 Certificate serial: E0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rNBH0NiOJlfhLPkTAcFg8dPNLzM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F9353/0875E64805C611EF89620A26C4F9AE02/rNBH0NiOJlfhLPkTAcFg8dPNLzM.mft Manifest number: CF Signing time: Thu 10 Apr 2025 05:40:48 +0000 Manifest this update: Thu 10 Apr 2025 05:40:47 +0000 Manifest next update: Thu 17 Apr 2025 05:40:47 +0000 Files and hashes: 1: rNBH0NiOJlfhLPkTAcFg8dPNLzM.crl (hash: Ud1Zfsob78vqDsCNzgNCbubnt9bbXgYEg2Wq5IVYOL0=) 2: 3285ADDAA9D911EF9F30DA47C4F9AE02.roa (hash: u80/WP/FyzFGjNMk1YFjGdFPVtQyAbLjV6K7I70DeS4=) 3: DD267C66316511EFB284A421C4F9AE02.roa (hash: fBqSW8jISb6HiF16XH44dQP540yVqiuhIc6mypavGXQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F9353/0875E64805C611EF89620A26C4F9AE02/rNBH0NiOJlfhLPkTAcFg8dPNLzM.crl rsync://rpki.apnic.net/member_repository/A91F9353/0875E64805C611EF89620A26C4F9AE02/rNBH0NiOJlfhLPkTAcFg8dPNLzM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rNBH0NiOJlfhLPkTAcFg8dPNLzM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 17 Apr 2025 05:40:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 224 (0xe0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F9353 Validity Not Before: Apr 10 05:40:47 2025 GMT Not After : Apr 17 05:40:47 2025 GMT Subject: CN=67f759df-8b3f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:81:6d:cf:24:4c:6f:48:c2:cd:67:d2:b2:aa: d3:bb:96:27:ea:a4:8b:d6:ed:cf:ea:74:94:68:24: b6:50:0d:75:67:79:e5:99:76:29:51:03:e3:8a:df: 1e:dd:bc:84:65:9b:53:8a:c9:9d:f7:98:92:dd:6a: bf:8f:69:3e:a0:13:52:a5:3e:b5:fd:fc:dd:c8:fa: fc:43:6d:2b:6d:39:b4:b2:f4:dc:d9:03:dd:5d:40: b8:46:42:b8:0d:dd:a9:1a:8d:63:f9:3e:c7:76:20: 4a:50:bd:b0:21:9c:64:37:80:b6:f4:4e:33:b3:ae: 1f:52:6d:1a:3b:b0:45:7d:46:c0:17:3f:80:0b:06: 94:ef:1b:8d:11:f5:f8:24:9d:eb:0b:cb:1a:17:fa: 63:52:79:0c:7c:2b:5a:7b:94:3d:c8:1f:1d:a1:6b: 17:3d:e9:f0:6d:ed:58:3b:80:3e:06:d3:53:12:3e: ec:98:50:d7:aa:de:7d:56:88:40:64:7b:b2:ec:d4: 12:12:95:32:ae:d4:ae:d2:1f:a1:3f:43:73:09:db: 28:03:f0:f5:8b:e5:1d:b6:18:c8:5b:86:2e:63:d9: 70:56:68:94:52:76:09:c0:1d:ec:58:89:36:4e:35: 2b:f8:7b:2f:4a:db:5a:5c:e7:51:01:29:f7:14:f1: aa:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:16:1C:97:83:F1:43:9C:C1:5A:C7:BE:9C:29:14:AD:98:25:A7:B6 X509v3 Authority Key Identifier: keyid:AC:D0:47:D0:D8:8E:26:57:E1:2C:F9:13:01:C1:60:F1:D3:CD:2F:33 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F9353/0875E64805C611EF89620A26C4F9AE02/rNBH0NiOJlfhLPkTAcFg8dPNLzM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rNBH0NiOJlfhLPkTAcFg8dPNLzM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F9353/0875E64805C611EF89620A26C4F9AE02/rNBH0NiOJlfhLPkTAcFg8dPNLzM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6a:f5:13:c7:6b:a9:a6:7d:f8:3a:5a:8a:30:92:01:7b:a5:5f: f4:04:47:c3:06:5d:4b:da:9c:60:fd:90:a7:34:f4:b3:98:ec: 65:a8:64:39:5e:e4:c7:5f:89:92:52:2e:e5:49:5b:86:5c:f7: 81:d1:83:a9:88:64:67:62:32:83:c1:92:eb:07:d2:da:4b:f5: 87:ae:af:58:27:ed:16:61:e7:e7:b5:79:47:12:a2:bb:6a:77: 1d:63:72:af:9a:95:b4:31:4a:22:bc:b5:37:2f:6f:97:23:7b: 35:df:c2:35:14:f9:a4:67:7d:28:05:87:c2:64:de:ff:a5:c4: c6:ba:9c:4b:6d:7e:8a:be:04:23:1b:4c:e6:3f:3d:b5:ae:0f: 0f:96:c0:b2:58:de:b9:7f:1b:d8:2a:11:dc:53:f7:f6:fc:1d: dd:8a:69:68:4d:5e:60:b7:33:68:7a:c9:fb:21:a3:81:03:07: 27:94:fd:02:b6:ac:c8:e6:e6:90:54:27:77:ef:79:d0:8d:00: f7:d3:29:f1:8e:b6:8d:01:ce:a3:6d:6b:93:58:3f:87:b8:97: bf:9f:f3:aa:98:d2:aa:02:79:29:91:8c:d5:0d:3c:70:38:b4: 51:c0:90:2d:bb:19:36:17:94:39:2d:52:26:96:26:07:7c:5e: a9:f6:74:45 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjkzNTMxMTAvBgNVBAUTKEFDRDA0N0QwRDg4RTI2NTdFMTJDRjkxMzAxQzE2MEYx RDNDRDJGMzMwHhcNMjUwNDEwMDU0MDQ3WhcNMjUwNDE3MDU0MDQ3WjAYMRYwFAYD VQQDEw02N2Y3NTlkZi04YjNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0oFtzyRMb0jCzWfSsqrTu5Yn6qSL1u3P6nSUaCS2UA11Z3nlmXYpUQPjit8e 3byEZZtTismd95iS3Wq/j2k+oBNSpT61/fzdyPr8Q20rbTm0svTc2QPdXUC4RkK4 Dd2pGo1j+T7HdiBKUL2wIZxkN4C29E4zs64fUm0aO7BFfUbAFz+ACwaU7xuNEfX4 JJ3rC8saF/pjUnkMfCtae5Q9yB8doWsXPenwbe1YO4A+BtNTEj7smFDXqt59VohA ZHuy7NQSEpUyrtSu0h+hP0NzCdsoA/D1i+UdthjIW4YuY9lwVmiUUnYJwB3sWIk2 TjUr+HsvSttaXOdRASn3FPGqkQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHMWHJeD 8UOcwVrHvpwpFK2YJae2MB8GA1UdIwQYMBaAFKzQR9DYjiZX4Sz5EwHBYPHTzS8z MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGOTM1My8wODc1RTY0ODA1 QzYxMUVGODk2MjBBMjZDNEY5QUUwMi9yTkJIME5pT0psZmhMUGtUQWNGZzhkUE5M ek0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JOQkgwTmlPSmxmaExQa1RBY0ZnOGRQTkx6TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG OTM1My8wODc1RTY0ODA1QzYxMUVGODk2MjBBMjZDNEY5QUUwMi9yTkJIME5pT0ps ZmhMUGtUQWNGZzhkUE5Mek0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBq9RPHa6mmffg6WoowkgF7pV/0BEfDBl1L2pxg/ZCnNPSzmOxlqGQ5 XuTHX4mSUi7lSVuGXPeB0YOpiGRnYjKDwZLrB9LaS/WHrq9YJ+0WYefntXlHEqK7 ancdY3KvmpW0MUoivLU3L2+XI3s138I1FPmkZ30oBYfCZN7/pcTGupxLbX6KvgQj G0zmPz21rg8PlsCyWN65fxvYKhHcU/f2/B3dimloTV5gtzNoesn7IaOBAwcnlP0C tqzI5uaQVCd373nQjQD30ynxjraNAc6jbWuTWD+HuJe/n/OqmNKqAnkpkYzVDTxw OLRRwJAtuxk2F5Q5LVImliYHfF6p9nRF -----END CERTIFICATE-----Generated at Thu Apr 10 21:55:52 2025 by rpki-client