$ rpki-client -vvf rpki.apnic.net/member_repository/A91F9749/99D17D96BF9B11ECAD3C0A30C4F9AE02/NebIf2uhtlE6EnD23BNt23ETZFc.mft File: NebIf2uhtlE6EnD23BNt23ETZFc.mft (raw, json) Hash identifier: 75svqqz/TicPMjGMcHzgm1Q9Vswc9QanWIhm4pqw2wQ= Subject key identifier: AE:E3:33:C0:5D:12:83:20:6A:FA:35:80:9C:85:EF:D1:40:27:5D:9D Authority key identifier: 35:E6:C8:7F:6B:A1:B6:51:3A:12:70:F6:DC:13:6D:DB:71:13:64:57 Certificate issuer: /CN=A91F9749/serialNumber=35E6C87F6BA1B6513A1270F6DC136DDB71136457 Certificate serial: 0324 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NebIf2uhtlE6EnD23BNt23ETZFc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F9749/99D17D96BF9B11ECAD3C0A30C4F9AE02/NebIf2uhtlE6EnD23BNt23ETZFc.mft Manifest number: 0320 Signing time: Thu 03 Apr 2025 01:08:13 +0000 Manifest this update: Thu 03 Apr 2025 01:08:13 +0000 Manifest next update: Thu 10 Apr 2025 01:08:13 +0000 Files and hashes: 1: NebIf2uhtlE6EnD23BNt23ETZFc.crl (hash: xLJ/XeCJNCbYHG1dyQ4w8dRrZKrKN8kvQmE2ANmyUTU=) 2: 97B81DD6BF9F11ECAB5B1239C4F9AE02.roa (hash: WBPEzwrRJmEQao59jsv0p03EV57EGiVD2LS1uQaSE9s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F9749/99D17D96BF9B11ECAD3C0A30C4F9AE02/NebIf2uhtlE6EnD23BNt23ETZFc.crl rsync://rpki.apnic.net/member_repository/A91F9749/99D17D96BF9B11ECAD3C0A30C4F9AE02/NebIf2uhtlE6EnD23BNt23ETZFc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NebIf2uhtlE6EnD23BNt23ETZFc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Apr 2025 01:08:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 804 (0x324) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F9749 Validity Not Before: Apr 3 01:08:13 2025 GMT Not After : Apr 10 01:08:13 2025 GMT Subject: CN=67eddf7d-8781 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:db:60:1f:5b:54:bb:9a:ae:04:e7:cd:3c:45: 64:b8:7e:98:bf:b9:05:e2:82:5b:0d:bb:87:58:46: 33:a2:a6:68:47:c3:2b:5e:f1:c7:56:c8:89:5f:b4: 29:d9:20:62:1a:46:ca:7c:90:0f:80:ad:df:1b:8b: db:0f:ec:95:33:fd:83:10:1a:1b:bc:06:a3:4b:c4: f5:61:2a:2f:17:cd:47:8f:13:86:8b:36:29:f6:2d: 7b:90:df:75:b8:1d:2f:02:e3:53:1c:3e:eb:a9:1e: 2e:a7:6a:c3:07:cd:e4:af:d5:c0:32:f7:4a:5e:06: 7e:d0:6b:0f:3d:6a:1f:91:88:af:80:0f:01:c2:27: 3a:c2:bd:96:b1:3f:b8:e9:d7:c5:4d:0b:b3:b0:89: 9c:98:d7:04:b0:b4:d6:9a:7f:62:80:be:b0:39:9a: 25:7f:b7:db:3e:e7:ac:e8:94:ad:54:1e:f7:74:90: 62:0a:22:3e:de:a0:a9:11:de:e7:56:f1:5a:f8:17: dd:99:c7:96:c3:03:cb:e9:ce:cb:b7:3f:06:f1:76: ff:ee:34:ab:f2:e5:81:07:70:44:12:34:c2:90:4a: 36:e4:e1:a9:01:d8:ee:1a:0a:f0:39:4b:fb:d9:b7: 79:70:5e:78:bf:9b:8c:38:d7:68:03:68:7c:be:4b: a5:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:E3:33:C0:5D:12:83:20:6A:FA:35:80:9C:85:EF:D1:40:27:5D:9D X509v3 Authority Key Identifier: keyid:35:E6:C8:7F:6B:A1:B6:51:3A:12:70:F6:DC:13:6D:DB:71:13:64:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F9749/99D17D96BF9B11ECAD3C0A30C4F9AE02/NebIf2uhtlE6EnD23BNt23ETZFc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NebIf2uhtlE6EnD23BNt23ETZFc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F9749/99D17D96BF9B11ECAD3C0A30C4F9AE02/NebIf2uhtlE6EnD23BNt23ETZFc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 91:05:ac:2c:68:bb:8e:5c:43:49:c3:44:fa:ea:8c:ae:05:c4: b4:6c:ec:ee:5e:55:74:77:01:76:b1:e2:21:2b:99:24:68:cd: 12:69:37:80:1f:3d:3a:19:dd:dd:66:6b:5a:25:d5:89:91:78: 43:4a:da:15:3c:c3:6d:a6:91:dc:f4:d6:94:d0:5e:28:de:c0: 7c:80:4f:55:e8:53:cc:eb:39:68:be:0e:30:0f:bd:4a:b6:fe: b3:71:29:16:20:f1:72:0f:db:b2:1e:69:ff:12:38:8e:68:35: ba:92:d6:3f:e2:a4:c5:33:a6:7c:bf:b8:9f:be:27:14:44:32: f7:71:41:19:0d:0f:23:d9:41:b5:6c:89:25:3b:67:19:f1:09: 07:75:27:f8:47:53:7e:2d:74:7c:0e:77:b0:76:87:a1:41:ce: 88:f7:0b:2d:88:16:c8:62:f2:89:47:5a:5a:48:0d:24:a4:bf: ef:17:af:f9:92:64:cb:1e:f6:0d:06:f2:24:b1:6e:26:7a:1c: 89:e5:64:86:ba:de:20:0b:92:bd:c1:fd:e3:8a:95:3c:c8:de: 81:40:8a:92:60:27:e6:1f:98:6a:19:e5:6d:05:e9:ab:1d:0e: 6c:86:c5:14:ca:86:5c:36:55:bd:0e:2e:44:e3:b4:b4:a9:bc: 5c:a2:8d:f9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAyQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Rjk3NDkxMTAvBgNVBAUTKDM1RTZDODdGNkJBMUI2NTEzQTEyNzBGNkRDMTM2RERC NzExMzY0NTcwHhcNMjUwNDAzMDEwODEzWhcNMjUwNDEwMDEwODEzWjAYMRYwFAYD VQQDEw02N2VkZGY3ZC04NzgxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxdtgH1tUu5quBOfNPEVkuH6Yv7kF4oJbDbuHWEYzoqZoR8MrXvHHVsiJX7Qp 2SBiGkbKfJAPgK3fG4vbD+yVM/2DEBobvAajS8T1YSovF81HjxOGizYp9i17kN91 uB0vAuNTHD7rqR4up2rDB83kr9XAMvdKXgZ+0GsPPWofkYivgA8Bwic6wr2WsT+4 6dfFTQuzsImcmNcEsLTWmn9igL6wOZolf7fbPues6JStVB73dJBiCiI+3qCpEd7n VvFa+BfdmceWwwPL6c7Ltz8G8Xb/7jSr8uWBB3BEEjTCkEo25OGpAdjuGgrwOUv7 2bd5cF54v5uMONdoA2h8vkulZwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK7jM8Bd EoMgavo1gJyF79FAJ12dMB8GA1UdIwQYMBaAFDXmyH9robZROhJw9twTbdtxE2RX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGOTc0OS85OUQxN0Q5NkJG OUIxMUVDQUQzQzBBMzBDNEY5QUUwMi9OZWJJZjJ1aHRsRTZFbkQyM0JOdDIzRVRa RmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05lYklmMnVodGxFNkVuRDIzQk50MjNFVFpGYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG OTc0OS85OUQxN0Q5NkJGOUIxMUVDQUQzQzBBMzBDNEY5QUUwMi9OZWJJZjJ1aHRs RTZFbkQyM0JOdDIzRVRaRmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCRBawsaLuOXENJw0T66oyuBcS0bOzuXlV0dwF2seIhK5kkaM0SaTeA Hz06Gd3dZmtaJdWJkXhDStoVPMNtppHc9NaU0F4o3sB8gE9V6FPM6zlovg4wD71K tv6zcSkWIPFyD9uyHmn/EjiOaDW6ktY/4qTFM6Z8v7ifvicURDL3cUEZDQ8j2UG1 bIklO2cZ8QkHdSf4R1N+LXR8DnewdoehQc6I9wstiBbIYvKJR1paSA0kpL/vF6/5 kmTLHvYNBvIksW4mehyJ5WSGut4gC5K9wf3jipU8yN6BQIqSYCfmH5hqGeVtBemr HQ5shsUUyoZcNlW9Di5E47S0qbxcoo35 -----END CERTIFICATE-----Generated at Fri Apr 4 21:19:17 2025 by rpki-client