$ rpki-client -vvf rpki.apnic.net/member_repository/A911BCDD/348AD8AC861311EEA8C95042C4F9AE02/nkKx9pFGDihG-nHwbcib8sdB25o.mft File: nkKx9pFGDihG-nHwbcib8sdB25o.mft (raw, json) Hash identifier: WC+pBZL+62XLds8xhLynrz5QXmlvw7Ff1kccHG9zCMQ= Subject key identifier: AF:62:F0:AF:D1:3E:C6:2E:ED:FB:60:9A:7F:86:99:82:1E:59:84:E4 Authority key identifier: 9E:42:B1:F6:91:46:0E:28:46:FA:71:F0:6D:C8:9B:F2:C7:41:DB:9A Certificate issuer: /CN=A911BCDD/serialNumber=9E42B1F691460E2846FA71F06DC89BF2C741DB9A Certificate serial: 0112 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nkKx9pFGDihG-nHwbcib8sdB25o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911BCDD/348AD8AC861311EEA8C95042C4F9AE02/nkKx9pFGDihG-nHwbcib8sdB25o.mft Manifest number: 010F Signing time: Fri 25 Apr 2025 04:00:52 +0000 Manifest this update: Fri 25 Apr 2025 04:00:51 +0000 Manifest next update: Fri 02 May 2025 04:00:51 +0000 Files and hashes: 1: nkKx9pFGDihG-nHwbcib8sdB25o.crl (hash: 4E+sZw/xSuL/ZbuZ+u9C+57gFCtMqSI5HhwIVPwrovI=) 2: 5ED417AE869011EEA9011A36C4F9AE02.roa (hash: secqQJuczQrOBoLhJh1bWX70I59NSlP/4Mk301elvvU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911BCDD/348AD8AC861311EEA8C95042C4F9AE02/nkKx9pFGDihG-nHwbcib8sdB25o.crl rsync://rpki.apnic.net/member_repository/A911BCDD/348AD8AC861311EEA8C95042C4F9AE02/nkKx9pFGDihG-nHwbcib8sdB25o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nkKx9pFGDihG-nHwbcib8sdB25o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 04:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 274 (0x112) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911BCDD, serialNumber=9E42B1F691460E2846FA71F06DC89BF2C741DB9A Validity Not Before: Apr 25 04:00:51 2025 GMT Not After : May 2 04:00:51 2025 GMT Subject: CN=680b08f3-70e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:17:fc:26:6d:de:d6:49:fd:6f:a3:fe:5f:02: 2d:26:1a:82:6f:98:4d:64:0e:62:05:a9:3f:f7:8b: c3:d6:3e:85:70:ad:44:8b:6d:d3:73:2b:1d:f6:c2: 01:80:18:66:c4:4e:5d:2d:83:66:17:d8:0c:f0:f7: b5:df:e7:df:3d:d6:d8:1f:50:4c:74:bb:23:e4:8b: a2:17:32:2c:05:d4:88:91:25:8c:2c:95:64:ba:c3: 25:d8:a3:f4:79:3a:ac:84:34:d7:d2:80:f0:6b:a1: e1:af:29:c9:bb:be:05:f2:a0:58:98:9c:62:9e:9c: 0a:55:8e:ce:ee:30:16:50:0c:cf:09:89:c1:f2:e6: d8:3e:5f:eb:3b:be:de:df:6a:1a:25:0d:7d:3c:0e: 20:07:b1:de:1d:47:4d:87:e0:4b:42:c1:ab:52:46: b3:c2:ec:88:cc:26:a0:68:b1:26:5b:62:83:27:34: 2f:b3:5e:e9:67:aa:bd:f3:2d:26:e7:6b:65:f6:5c: 0e:ce:87:1c:0f:63:50:b0:51:97:02:79:07:ec:21: fe:17:de:2f:14:7b:3a:b2:00:a4:ea:8b:1c:c5:87: c4:6d:53:41:90:8b:d0:32:7e:db:93:7b:e2:aa:cd: 63:cb:c1:6a:eb:d8:32:1f:4f:16:cd:9c:45:b2:ef: 4f:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:62:F0:AF:D1:3E:C6:2E:ED:FB:60:9A:7F:86:99:82:1E:59:84:E4 X509v3 Authority Key Identifier: keyid:9E:42:B1:F6:91:46:0E:28:46:FA:71:F0:6D:C8:9B:F2:C7:41:DB:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911BCDD/348AD8AC861311EEA8C95042C4F9AE02/nkKx9pFGDihG-nHwbcib8sdB25o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nkKx9pFGDihG-nHwbcib8sdB25o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911BCDD/348AD8AC861311EEA8C95042C4F9AE02/nkKx9pFGDihG-nHwbcib8sdB25o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 53:51:7f:0f:8c:65:1e:fb:30:ae:6a:4d:38:c8:35:cc:53:a9: b9:e9:ff:2a:b8:ca:a8:17:27:6c:b6:a9:44:27:f4:9b:fb:8c: 0f:f6:ea:44:06:80:52:81:77:6a:71:cd:14:89:b9:05:28:0b: 1d:d9:1f:d3:02:0c:5f:55:0c:11:02:63:d4:68:46:75:19:2f: 0a:7c:b6:fe:62:26:22:ef:40:d9:f0:cf:c8:17:e6:ea:f2:49: 74:75:20:2b:d4:bc:17:12:ed:7a:74:b9:3b:a4:5e:a8:82:ef: eb:cf:42:f4:3b:82:1f:0d:6e:62:c1:45:99:54:55:a1:54:e8: 46:ed:2e:01:cf:9a:30:f2:c3:fe:8a:c4:96:29:be:56:5a:1b: c5:6f:df:a5:d9:fe:bc:a7:0e:ad:f2:17:52:30:be:b1:7a:4f: 9f:3b:8b:08:32:e7:5b:d5:09:23:8e:b2:64:f0:bf:84:ed:85: 69:dd:b0:48:bd:c0:de:b9:e5:1b:dd:2c:1a:31:e9:d3:20:56: 51:3b:f2:43:85:75:42:30:87:59:28:f8:2e:5a:cd:5c:09:07: c7:3e:80:05:e7:eb:83:da:de:3b:c3:1b:63:cb:8d:67:94:10: 1a:07:62:70:f5:d7:6b:ea:17:29:96:42:db:e0:ee:c1:b1:cc: 8a:e7:80:d1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICARIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUJDREQxMTAvBgNVBAUTKDlFNDJCMUY2OTE0NjBFMjg0NkZBNzFGMDZEQzg5QkYy Qzc0MURCOUEwHhcNMjUwNDI1MDQwMDUxWhcNMjUwNTAyMDQwMDUxWjAYMRYwFAYD VQQDEw02ODBiMDhmMy03MGUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzBf8Jm3e1kn9b6P+XwItJhqCb5hNZA5iBak/94vD1j6FcK1Ei23Tcysd9sIB gBhmxE5dLYNmF9gM8Pe13+ffPdbYH1BMdLsj5IuiFzIsBdSIkSWMLJVkusMl2KP0 eTqshDTX0oDwa6HhrynJu74F8qBYmJxinpwKVY7O7jAWUAzPCYnB8ubYPl/rO77e 32oaJQ19PA4gB7HeHUdNh+BLQsGrUkazwuyIzCagaLEmW2KDJzQvs17pZ6q98y0m 52tl9lwOzoccD2NQsFGXAnkH7CH+F94vFHs6sgCk6oscxYfEbVNBkIvQMn7bk3vi qs1jy8Fq69gyH08WzZxFsu9PrQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK9i8K/R PsYu7ftgmn+GmYIeWYTkMB8GA1UdIwQYMBaAFJ5CsfaRRg4oRvpx8G3Im/LHQdua MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQkNERC8zNDhBRDhBQzg2 MTMxMUVFQThDOTUwNDJDNEY5QUUwMi9ua0t4OXBGR0RpaEctbkh3YmNpYjhzZEIy NW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25rS3g5cEZHRGloRy1uSHdiY2liOHNkQjI1by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QkNERC8zNDhBRDhBQzg2MTMxMUVFQThDOTUwNDJDNEY5QUUwMi9ua0t4OXBGR0Rp aEctbkh3YmNpYjhzZEIyNW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBTUX8PjGUe+zCuak04yDXMU6m56f8quMqoFydstqlEJ/Sb+4wP9upE BoBSgXdqcc0UibkFKAsd2R/TAgxfVQwRAmPUaEZ1GS8KfLb+YiYi70DZ8M/IF+bq 8kl0dSAr1LwXEu16dLk7pF6ogu/rz0L0O4IfDW5iwUWZVFWhVOhG7S4Bz5ow8sP+ isSWKb5WWhvFb9+l2f68pw6t8hdSML6xek+fO4sIMudb1QkjjrJk8L+E7YVp3bBI vcDeueUb3SwaMenTIFZRO/JDhXVCMIdZKPguWs1cCQfHPoAF5+uD2t47wxtjy41n lBAaB2Jw9ddr6hcplkLb4O7BscyK54DR -----END CERTIFICATE-----Generated at Sat Apr 26 04:23:05 2025 by rpki-client