$ rpki-client -vvf rpki.apnic.net/member_repository/A91113E7/9D3A20002F5611EFA23E5A23C4F9AE02/nWx1DOA5PCAKv4pnHB8sIGoMtHE.mft File: nWx1DOA5PCAKv4pnHB8sIGoMtHE.mft (raw, json) Hash identifier: sNVrFGRw5Li4uexkA0XaYwlyfiwvH7MrYL0PmPa4TwE= Subject key identifier: 58:C2:5D:B9:C3:87:E4:33:45:C8:14:B8:C6:74:A1:90:58:2C:99:91 Authority key identifier: 9D:6C:75:0C:E0:39:3C:20:0A:BF:8A:67:1C:1F:2C:20:6A:0C:B4:71 Certificate issuer: /CN=A91113E7/serialNumber=9D6C750CE0393C200ABF8A671C1F2C206A0CB471 Certificate serial: 9F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nWx1DOA5PCAKv4pnHB8sIGoMtHE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91113E7/9D3A20002F5611EFA23E5A23C4F9AE02/nWx1DOA5PCAKv4pnHB8sIGoMtHE.mft Manifest number: 9E Signing time: Fri 25 Apr 2025 05:13:35 +0000 Manifest this update: Fri 25 Apr 2025 05:13:34 +0000 Manifest next update: Fri 02 May 2025 05:13:34 +0000 Files and hashes: 1: nWx1DOA5PCAKv4pnHB8sIGoMtHE.crl (hash: Fzq1t2XNpLwzdT6WlVerySRUFdTWsEdQOJAFrXeUi2c=) 2: 6375B8642F5811EF93FCF427C4F9AE02.roa (hash: qL2lFwzQsNJvHM1X7F1IcBH5Nn+NnL8ACspFUTuHDlA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91113E7/9D3A20002F5611EFA23E5A23C4F9AE02/nWx1DOA5PCAKv4pnHB8sIGoMtHE.crl rsync://rpki.apnic.net/member_repository/A91113E7/9D3A20002F5611EFA23E5A23C4F9AE02/nWx1DOA5PCAKv4pnHB8sIGoMtHE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nWx1DOA5PCAKv4pnHB8sIGoMtHE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 05:13:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 159 (0x9f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91113E7, serialNumber=9D6C750CE0393C200ABF8A671C1F2C206A0CB471 Validity Not Before: Apr 25 05:13:34 2025 GMT Not After : May 2 05:13:34 2025 GMT Subject: CN=680b19fe-58ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fe:06:69:a0:02:c1:38:01:da:34:f6:2d:75:6f: 39:11:f0:e7:26:10:16:82:93:6e:db:3f:8b:ca:26: bf:67:a6:80:23:bb:17:5f:73:29:fb:10:74:31:e5: 8c:ff:70:6a:da:24:0a:af:e6:f3:47:8f:50:0a:15: 71:54:8f:b3:d6:ab:0d:80:f5:08:22:d9:dd:24:b6: bf:90:08:d2:b5:64:e5:c5:4d:51:d6:f1:fc:b8:69: 98:92:bc:60:0a:21:c9:6c:48:1f:f9:73:c4:ce:3c: fa:b2:7f:38:28:03:2d:95:69:b9:fa:ca:f9:66:1b: 17:79:7b:5f:db:3b:da:ed:29:51:67:17:69:1b:b9: 24:20:c7:5d:cd:3b:e9:a7:68:43:2e:30:76:f1:7b: a4:08:ac:19:e4:a1:a0:80:85:52:c7:c1:a4:42:80: 5b:1e:95:08:11:c8:bd:28:aa:d5:cf:0a:5c:d6:5f: 4a:c0:72:c6:aa:a9:ab:7a:c5:55:99:be:e1:8d:eb: 17:71:81:7d:42:41:ac:e4:2e:8b:32:1c:26:db:10: d5:aa:62:3c:85:1e:78:3d:95:12:3e:9d:0c:e1:5d: 6c:3d:14:c4:cd:89:ca:ad:8d:d6:35:d8:41:03:94: b6:f0:83:41:0d:96:d8:e2:cf:f2:3a:9d:1e:99:d3: 2c:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:C2:5D:B9:C3:87:E4:33:45:C8:14:B8:C6:74:A1:90:58:2C:99:91 X509v3 Authority Key Identifier: keyid:9D:6C:75:0C:E0:39:3C:20:0A:BF:8A:67:1C:1F:2C:20:6A:0C:B4:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91113E7/9D3A20002F5611EFA23E5A23C4F9AE02/nWx1DOA5PCAKv4pnHB8sIGoMtHE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nWx1DOA5PCAKv4pnHB8sIGoMtHE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91113E7/9D3A20002F5611EFA23E5A23C4F9AE02/nWx1DOA5PCAKv4pnHB8sIGoMtHE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 71:3b:e1:cc:d7:3f:2f:d9:55:81:d2:1b:7c:33:dd:1c:f5:42: 61:bd:00:29:01:23:7b:2e:b0:e4:e4:e9:49:aa:bc:b5:a5:51: e8:52:86:29:6d:f9:7e:27:54:b5:a4:01:86:d0:64:3a:47:ce: 37:35:f0:50:00:8e:8c:c0:dd:29:a6:9e:27:bc:68:4e:05:8e: f4:e1:d5:62:35:fd:d0:bc:f2:cc:dc:f5:66:4f:40:9f:66:12: a1:31:ef:80:46:ed:19:8b:a2:62:7c:ed:3d:0d:b0:9e:0d:28: 96:67:e0:d5:7e:4f:a9:3e:36:9f:43:01:26:00:79:9e:85:91: 8c:3a:27:bc:5c:48:ad:a1:13:bd:3e:18:72:7f:50:dc:da:76: 18:49:e6:28:10:f2:55:d3:3a:07:cc:d3:1e:43:1a:49:d0:e5: 2d:78:55:02:6f:7b:49:ac:33:20:3a:9d:d5:e4:78:f7:b7:24: d1:cd:1e:99:e5:3b:38:2f:8e:88:56:c5:a1:93:99:c1:d8:e3: 17:8d:65:fb:ec:51:b5:8b:29:30:2d:76:bc:dd:5a:fe:49:5f: 41:e8:77:09:e2:6d:ef:f1:7c:e9:ca:11:0b:fd:d2:56:96:cc: 0d:1b:8f:7d:99:0a:43:a7:2b:71:25:b8:1f:e6:3b:f6:67:bf: dd:65:1e:0b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJ8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTEzRTcxMTAvBgNVBAUTKDlENkM3NTBDRTAzOTNDMjAwQUJGOEE2NzFDMUYyQzIw NkEwQ0I0NzEwHhcNMjUwNDI1MDUxMzM0WhcNMjUwNTAyMDUxMzM0WjAYMRYwFAYD VQQDEw02ODBiMTlmZS01OGNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA/gZpoALBOAHaNPYtdW85EfDnJhAWgpNu2z+Lyia/Z6aAI7sXX3Mp+xB0MeWM /3Bq2iQKr+bzR49QChVxVI+z1qsNgPUIItndJLa/kAjStWTlxU1R1vH8uGmYkrxg CiHJbEgf+XPEzjz6sn84KAMtlWm5+sr5ZhsXeXtf2zva7SlRZxdpG7kkIMddzTvp p2hDLjB28XukCKwZ5KGggIVSx8GkQoBbHpUIEci9KKrVzwpc1l9KwHLGqqmresVV mb7hjesXcYF9QkGs5C6LMhwm2xDVqmI8hR54PZUSPp0M4V1sPRTEzYnKrY3WNdhB A5S28INBDZbY4s/yOp0emdMsBQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFjCXbnD h+QzRcgUuMZ0oZBYLJmRMB8GA1UdIwQYMBaAFJ1sdQzgOTwgCr+KZxwfLCBqDLRx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMTNFNy85RDNBMjAwMDJG NTYxMUVGQTIzRTVBMjNDNEY5QUUwMi9uV3gxRE9BNVBDQUt2NHBuSEI4c0lHb010 SEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25XeDFET0E1UENBS3Y0cG5IQjhzSUdvTXRIRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MTNFNy85RDNBMjAwMDJGNTYxMUVGQTIzRTVBMjNDNEY5QUUwMi9uV3gxRE9BNVBD QUt2NHBuSEI4c0lHb010SEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBxO+HM1z8v2VWB0ht8M90c9UJhvQApASN7LrDk5OlJqry1pVHoUoYp bfl+J1S1pAGG0GQ6R843NfBQAI6MwN0ppp4nvGhOBY704dViNf3QvPLM3PVmT0Cf ZhKhMe+ARu0Zi6JifO09DbCeDSiWZ+DVfk+pPjafQwEmAHmehZGMOie8XEitoRO9 Phhyf1Dc2nYYSeYoEPJV0zoHzNMeQxpJ0OUteFUCb3tJrDMgOp3V5Hj3tyTRzR6Z 5Ts4L46IVsWhk5nB2OMXjWX77FG1iykwLXa83Vr+SV9B6HcJ4m3v8XzpyhEL/dJW lswNG499mQpDpytxJbgf5jv2Z7/dZR4L -----END CERTIFICATE-----Generated at Sat Apr 26 04:20:53 2025 by rpki-client