$ rpki-client -vvf rpki.apnic.net/member_repository/A91142EA/F5332D7E84C311E6B9821A81C4F9AE02/Ny8cd2Gx3cgyjFC60O7tzZny5PI.mft File: Ny8cd2Gx3cgyjFC60O7tzZny5PI.mft (raw, json) Hash identifier: G/ig6Np9/T0AhM4fFokU0C/PJNquvDynM6i6xHN8KPs= Subject key identifier: 8C:4A:0A:23:D5:2C:E1:C4:76:19:EF:92:4F:1A:A5:0C:76:03:2F:89 Authority key identifier: 37:2F:1C:77:61:B1:DD:C8:32:8C:50:BA:D0:EE:ED:CD:99:F2:E4:F2 Certificate issuer: /CN=A91142EA/serialNumber=372F1C7761B1DDC8328C50BAD0EEEDCD99F2E4F2 Certificate serial: 017F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ny8cd2Gx3cgyjFC60O7tzZny5PI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91142EA/F5332D7E84C311E6B9821A81C4F9AE02/Ny8cd2Gx3cgyjFC60O7tzZny5PI.mft Manifest number: 1F23 Signing time: Thu 24 Apr 2025 16:05:53 +0000 Manifest this update: Thu 24 Apr 2025 16:05:53 +0000 Manifest next update: Thu 01 May 2025 16:05:53 +0000 Files and hashes: 1: Ny8cd2Gx3cgyjFC60O7tzZny5PI.crl (hash: uHzGjeMS4O2tm3LCJE8VjmclEGIlSaGBaGh5sGe7Y3w=) 2: 9FD12146ED7211ED8A92041CC4F9AE02.roa (hash: oRm2blLyiJS/QAfKc6f3YExIUJkkRHUJrPUQp9W2Q+s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91142EA/F5332D7E84C311E6B9821A81C4F9AE02/Ny8cd2Gx3cgyjFC60O7tzZny5PI.crl rsync://rpki.apnic.net/member_repository/A91142EA/F5332D7E84C311E6B9821A81C4F9AE02/Ny8cd2Gx3cgyjFC60O7tzZny5PI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ny8cd2Gx3cgyjFC60O7tzZny5PI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 16:05:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 383 (0x17f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91142EA, serialNumber=372F1C7761B1DDC8328C50BAD0EEEDCD99F2E4F2 Validity Not Before: Apr 24 16:05:53 2025 GMT Not After : May 1 16:05:53 2025 GMT Subject: CN=680a6161-0659 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:40:6f:57:ef:9d:56:02:1a:ff:3d:f2:49:a0: 11:aa:08:56:bb:f9:02:25:26:4e:a5:16:ae:5a:9c: ce:93:ff:32:43:a3:9d:c6:54:96:8b:99:4c:e2:69: 3c:b7:6b:eb:d7:f0:ba:5c:82:3c:2a:db:e2:7b:30: 89:c2:17:d9:37:48:12:01:bd:cb:de:99:26:96:71: ba:e6:02:c9:c2:a7:05:4a:2f:07:60:e2:b8:52:fd: 4d:7d:fe:45:f3:da:e7:9b:b0:68:d3:76:b2:04:53: 06:9a:bd:8b:a2:67:70:7b:19:0c:d1:67:ed:06:99: 39:e5:b5:4e:02:af:45:62:50:23:47:db:9f:88:6c: 43:73:81:44:4a:20:1f:23:47:19:94:b6:25:61:c5: dc:b6:01:48:6d:94:07:10:fd:36:47:28:30:58:2b: cc:3a:db:64:e7:be:71:bf:e7:19:a5:75:78:f6:34: 75:dc:5e:03:ff:cf:55:1b:b4:c4:fe:2c:cc:11:f0: 4f:be:76:a0:ed:04:29:43:04:30:2c:1f:1f:36:27: 77:70:0b:8f:31:79:8f:a4:22:ab:c7:f8:82:44:02: a4:fd:0e:fa:18:68:15:e2:0b:81:06:80:13:2c:77: 3d:10:00:a9:11:5e:ce:ba:6c:e0:85:ea:e0:78:de: 53:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:4A:0A:23:D5:2C:E1:C4:76:19:EF:92:4F:1A:A5:0C:76:03:2F:89 X509v3 Authority Key Identifier: keyid:37:2F:1C:77:61:B1:DD:C8:32:8C:50:BA:D0:EE:ED:CD:99:F2:E4:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91142EA/F5332D7E84C311E6B9821A81C4F9AE02/Ny8cd2Gx3cgyjFC60O7tzZny5PI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ny8cd2Gx3cgyjFC60O7tzZny5PI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91142EA/F5332D7E84C311E6B9821A81C4F9AE02/Ny8cd2Gx3cgyjFC60O7tzZny5PI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9b:7c:eb:64:50:85:08:01:ef:f8:24:b2:1e:85:f9:56:f7:03: 1f:f2:54:de:62:e4:6f:aa:8b:97:45:80:63:53:ad:bd:ba:9a: 3d:61:4c:c4:ed:54:c7:5d:e3:a8:c1:fc:cb:dd:d2:0c:2e:dc: 6e:0f:cd:1e:fb:5c:6a:f6:c5:7c:8a:aa:b6:fc:e3:8d:13:47: f2:ee:1d:d9:e5:71:f6:2a:28:d1:4d:bd:b2:16:45:25:3e:f5: 8f:6b:86:92:50:a8:e7:ac:64:80:f8:22:d6:46:89:a0:b2:f8: 5b:28:d1:d7:5e:c0:c3:31:ea:df:0d:96:e8:6d:33:a6:ed:1c: d2:e5:03:b1:4b:b5:51:15:c6:ec:ef:23:13:da:c9:6a:4b:e0: 08:f8:eb:ba:1f:54:4b:82:22:f3:cc:53:ba:70:1f:41:41:73: c9:05:e6:67:37:0c:bd:9c:a9:ad:86:bd:2c:ba:db:c8:38:22: b7:b7:81:a6:4c:3a:67:11:10:ef:a0:e5:ec:35:00:15:31:e1: 6f:b9:8b:c3:15:8d:04:be:89:37:07:d2:bb:03:ba:89:13:9a: 3e:40:61:d0:60:d2:23:fd:64:03:f9:bd:eb:12:af:be:a5:f6: d0:72:a6:44:6a:f1:f1:64:fd:cd:9e:39:68:a5:3f:3d:03:87: 09:c4:77:4d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAX8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTQyRUExMTAvBgNVBAUTKDM3MkYxQzc3NjFCMUREQzgzMjhDNTBCQUQwRUVFRENE OTlGMkU0RjIwHhcNMjUwNDI0MTYwNTUzWhcNMjUwNTAxMTYwNTUzWjAYMRYwFAYD VQQDEw02ODBhNjE2MS0wNjU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA00BvV++dVgIa/z3ySaARqghWu/kCJSZOpRauWpzOk/8yQ6OdxlSWi5lM4mk8 t2vr1/C6XII8KtviezCJwhfZN0gSAb3L3pkmlnG65gLJwqcFSi8HYOK4Uv1Nff5F 89rnm7Bo03ayBFMGmr2LomdwexkM0WftBpk55bVOAq9FYlAjR9ufiGxDc4FESiAf I0cZlLYlYcXctgFIbZQHEP02RygwWCvMOttk575xv+cZpXV49jR13F4D/89VG7TE /izMEfBPvnag7QQpQwQwLB8fNid3cAuPMXmPpCKrx/iCRAKk/Q76GGgV4guBBoAT LHc9EACpEV7OumzghergeN5TUwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIxKCiPV LOHEdhnvkk8apQx2Ay+JMB8GA1UdIwQYMBaAFDcvHHdhsd3IMoxQutDu7c2Z8uTy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNDJFQS9GNTMzMkQ3RTg0 QzMxMUU2Qjk4MjFBODFDNEY5QUUwMi9OeThjZDJHeDNjZ3lqRkM2ME83dHpabnk1 UEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL055OGNkMkd4M2NneWpGQzYwTzd0elpueTVQSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NDJFQS9GNTMzMkQ3RTg0QzMxMUU2Qjk4MjFBODFDNEY5QUUwMi9OeThjZDJHeDNj Z3lqRkM2ME83dHpabnk1UEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCbfOtkUIUIAe/4JLIehflW9wMf8lTeYuRvqouXRYBjU629upo9YUzE 7VTHXeOowfzL3dIMLtxuD80e+1xq9sV8iqq2/OONE0fy7h3Z5XH2KijRTb2yFkUl PvWPa4aSUKjnrGSA+CLWRomgsvhbKNHXXsDDMerfDZbobTOm7RzS5QOxS7VRFcbs 7yMT2slqS+AI+Ou6H1RLgiLzzFO6cB9BQXPJBeZnNwy9nKmthr0sutvIOCK3t4Gm TDpnERDvoOXsNQAVMeFvuYvDFY0Evok3B9K7A7qJE5o+QGHQYNIj/WQD+b3rEq++ pfbQcqZEavHxZP3NnjlopT89A4cJxHdN -----END CERTIFICATE-----Generated at Sat Apr 26 04:33:09 2025 by rpki-client