$ rpki-client -vvf rpki.apnic.net/member_repository/A911B5B4/709F7A26B82911E993738A09C4F9AE02/nflMM9P2R649kTYeHxcsIGhvWYk.mft File: nflMM9P2R649kTYeHxcsIGhvWYk.mft (raw, json) Hash identifier: sqC+ypb3rnoT653F/0GsRMRugod2jpzXfpzeJxlYiBM= Subject key identifier: D0:00:33:88:60:AE:81:34:D9:6B:83:F8:2D:7A:0B:A2:10:AC:6D:26 Authority key identifier: 9D:F9:4C:33:D3:F6:47:AE:3D:91:36:1E:1F:17:2C:20:68:6F:59:89 Certificate issuer: /CN=A911B5B4/serialNumber=9DF94C33D3F647AE3D91361E1F172C20686F5989 Certificate serial: 0DE2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nflMM9P2R649kTYeHxcsIGhvWYk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911B5B4/709F7A26B82911E993738A09C4F9AE02/nflMM9P2R649kTYeHxcsIGhvWYk.mft Manifest number: 0DBF Signing time: Thu 24 Apr 2025 17:52:51 +0000 Manifest this update: Thu 24 Apr 2025 17:52:51 +0000 Manifest next update: Thu 01 May 2025 17:52:51 +0000 Files and hashes: 1: nflMM9P2R649kTYeHxcsIGhvWYk.crl (hash: mr16XYubi827+tReMrOqh8pIb/E1Sz+d06UAwK/EuUY=) 2: 46B27CC6B82A11E9843DEE0AC4F9AE02.roa (hash: 8a6WJtEg8FJ5eHnpvgMwqod0UL5e0zTS0SwjCaK0jd4=) 3: 9E78AEC4C78E11EBB4983F5BC4F9AE02.roa (hash: kN9kZZVIv74yYHGXDsanuB3xPPBPu4OVgy2TpSGU+PU=) 4: 47E67066B82A11E9843DEE0AC4F9AE02.roa (hash: YggXfy20kvjf1iFOsIwuuVFkMi74/bpO/23VT4jrnTE=) 5: 9F8B79C2C78E11EBB4983F5BC4F9AE02.roa (hash: n/ZkcBxXbOU1wyzDS48DMJkcfdrM8k6k+BibFqk5ai8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911B5B4/709F7A26B82911E993738A09C4F9AE02/nflMM9P2R649kTYeHxcsIGhvWYk.crl rsync://rpki.apnic.net/member_repository/A911B5B4/709F7A26B82911E993738A09C4F9AE02/nflMM9P2R649kTYeHxcsIGhvWYk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nflMM9P2R649kTYeHxcsIGhvWYk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 17:52:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3554 (0xde2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911B5B4, serialNumber=9DF94C33D3F647AE3D91361E1F172C20686F5989 Validity Not Before: Apr 24 17:52:51 2025 GMT Not After : May 1 17:52:51 2025 GMT Subject: CN=680a7a73-8e47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:c0:5e:c3:ac:59:7b:70:c6:4c:77:0d:bb:41: d0:80:36:d8:4b:90:4d:bb:99:ec:0d:8f:8e:b8:7a: 3f:40:15:c6:25:af:99:11:5f:be:44:15:46:34:cd: a1:7a:9f:39:fe:af:2c:b3:ca:76:51:ee:a3:ee:81: 59:6c:08:05:2e:c6:18:ae:0a:37:28:57:cf:4b:16: 48:f7:b6:0b:9d:bb:a4:3a:ab:8e:67:28:49:fd:ac: 7c:92:d3:d3:a9:4b:5b:35:29:56:45:eb:6e:02:58: bc:84:66:88:ac:37:dd:9d:4d:e8:d7:2a:76:e5:a3: 64:7a:3a:cc:71:17:df:e7:38:51:aa:e7:fa:2d:f7: 31:e0:09:4b:74:f9:0a:1b:5e:05:dc:b3:f7:5a:a5: 6d:8b:ca:13:7c:58:30:d1:ed:4a:7a:5e:f4:6a:9d: 71:66:a8:2e:42:1e:45:86:eb:3a:c0:a9:bf:0b:76: 63:36:70:c5:e0:4f:68:a2:e6:dd:61:09:8a:b8:88: be:f7:25:10:ff:c9:b7:f9:3d:10:65:d7:f1:75:b8: 1b:bb:63:31:aa:93:0a:ed:e2:e7:05:cd:18:20:fe: d0:7e:5e:68:ec:b1:23:57:3a:f1:be:37:d7:d3:f1: ab:f1:f5:d8:45:c8:d3:23:95:c4:fe:af:49:d9:da: f7:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:00:33:88:60:AE:81:34:D9:6B:83:F8:2D:7A:0B:A2:10:AC:6D:26 X509v3 Authority Key Identifier: keyid:9D:F9:4C:33:D3:F6:47:AE:3D:91:36:1E:1F:17:2C:20:68:6F:59:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911B5B4/709F7A26B82911E993738A09C4F9AE02/nflMM9P2R649kTYeHxcsIGhvWYk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nflMM9P2R649kTYeHxcsIGhvWYk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911B5B4/709F7A26B82911E993738A09C4F9AE02/nflMM9P2R649kTYeHxcsIGhvWYk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7e:d5:08:ad:7f:5d:76:5d:c3:8a:67:d0:bd:c3:fd:e2:ef:40: cc:54:be:f0:7c:39:ce:29:cb:b0:00:f0:57:b3:eb:9e:0b:13: 3f:79:07:3b:19:fe:22:ff:64:fa:e5:1d:34:35:af:ff:8f:0d: 5b:2a:01:ba:88:bf:44:b4:56:85:74:28:01:c7:3e:39:ad:dc: 2f:44:4c:27:29:d3:a5:f7:74:6c:dc:20:d3:b2:fc:77:99:13: d2:16:56:5b:b1:48:d0:b3:66:ff:bf:b3:be:88:48:2b:6c:15: 67:c2:b8:22:e8:2a:af:9e:6d:c9:32:bf:74:17:ff:61:49:a5: 5b:2b:13:07:90:50:60:62:18:ce:05:ae:e0:89:b2:5c:99:a1: b4:79:f9:13:ec:e4:31:ab:d2:bf:a6:02:2f:a3:c3:cc:1a:21: 49:21:03:5e:ac:36:7f:b6:81:40:3b:4b:e2:2f:16:69:00:97: 98:9b:39:c7:8f:e9:68:4f:d0:27:cc:37:75:a5:06:db:75:89: 9c:c8:4e:13:13:41:4c:78:26:b5:70:da:03:3d:fb:39:b9:19: 6f:db:9d:56:cb:b0:21:a7:2a:f5:60:bb:9d:b7:ab:2a:d8:79: f7:a6:e3:a3:f0:15:07:28:14:6d:a5:29:40:8a:f2:db:40:ed: 3f:8f:c1:10 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDeIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUI1QjQxMTAvBgNVBAUTKDlERjk0QzMzRDNGNjQ3QUUzRDkxMzYxRTFGMTcyQzIw Njg2RjU5ODkwHhcNMjUwNDI0MTc1MjUxWhcNMjUwNTAxMTc1MjUxWjAYMRYwFAYD VQQDEw02ODBhN2E3My04ZTQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAscBew6xZe3DGTHcNu0HQgDbYS5BNu5nsDY+OuHo/QBXGJa+ZEV++RBVGNM2h ep85/q8ss8p2Ue6j7oFZbAgFLsYYrgo3KFfPSxZI97YLnbukOquOZyhJ/ax8ktPT qUtbNSlWRetuAli8hGaIrDfdnU3o1yp25aNkejrMcRff5zhRquf6Lfcx4AlLdPkK G14F3LP3WqVti8oTfFgw0e1Kel70ap1xZqguQh5Fhus6wKm/C3ZjNnDF4E9ooubd YQmKuIi+9yUQ/8m3+T0QZdfxdbgbu2MxqpMK7eLnBc0YIP7Qfl5o7LEjVzrxvjfX 0/Gr8fXYRcjTI5XE/q9J2dr3yQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNAAM4hg roE02WuD+C16C6IQrG0mMB8GA1UdIwQYMBaAFJ35TDPT9keuPZE2Hh8XLCBob1mJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQjVCNC83MDlGN0EyNkI4 MjkxMUU5OTM3MzhBMDlDNEY5QUUwMi9uZmxNTTlQMlI2NDlrVFllSHhjc0lHaHZX WWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25mbE1NOVAyUjY0OWtUWWVIeGNzSUdodldZay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QjVCNC83MDlGN0EyNkI4MjkxMUU5OTM3MzhBMDlDNEY5QUUwMi9uZmxNTTlQMlI2 NDlrVFllSHhjc0lHaHZXWWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB+1Qitf112XcOKZ9C9w/3i70DMVL7wfDnOKcuwAPBXs+ueCxM/eQc7 Gf4i/2T65R00Na//jw1bKgG6iL9EtFaFdCgBxz45rdwvREwnKdOl93Rs3CDTsvx3 mRPSFlZbsUjQs2b/v7O+iEgrbBVnwrgi6Cqvnm3JMr90F/9hSaVbKxMHkFBgYhjO Ba7gibJcmaG0efkT7OQxq9K/pgIvo8PMGiFJIQNerDZ/toFAO0viLxZpAJeYmznH j+loT9AnzDd1pQbbdYmcyE4TE0FMeCa1cNoDPfs5uRlv251Wy7Ahpyr1YLudt6sq 2Hn3puOj8BUHKBRtpSlAivLbQO0/j8EQ -----END CERTIFICATE-----Generated at Sat Apr 26 04:32:37 2025 by rpki-client