$ rpki-client -vvf rpki.apnic.net/member_repository/A913647F/C21C7CF686DB11EFBA4D5F26C4F9AE02/Nnh5oLhd2Dc2N4g3k_Ve6zsiHc8.mft File: Nnh5oLhd2Dc2N4g3k_Ve6zsiHc8.mft (raw, json) Hash identifier: 66xwDVCr2mJ3YurvOf5aNLV6xPOmY5Xsxy8pfkVCVPw= Subject key identifier: 41:93:B8:CA:8A:47:79:77:6B:A4:3E:A3:16:7F:14:58:15:62:BB:16 Authority key identifier: 36:78:79:A0:B8:5D:D8:37:36:37:88:37:93:F5:5E:EB:3B:22:1D:CF Certificate issuer: /CN=A913647F/serialNumber=367879A0B85DD8373637883793F55EEB3B221DCF Certificate serial: 69 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nnh5oLhd2Dc2N4g3k_Ve6zsiHc8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913647F/C21C7CF686DB11EFBA4D5F26C4F9AE02/Nnh5oLhd2Dc2N4g3k_Ve6zsiHc8.mft Manifest number: 68 Signing time: Fri 25 Apr 2025 05:57:07 +0000 Manifest this update: Fri 25 Apr 2025 05:57:06 +0000 Manifest next update: Fri 02 May 2025 05:57:06 +0000 Files and hashes: 1: Nnh5oLhd2Dc2N4g3k_Ve6zsiHc8.crl (hash: b47FjL+beAOYeOqbom+13Nn3SbdV68vQzmySWgQYlDA=) 2: FD3934BC86E211EF8CF27626C4F9AE02.roa (hash: q92cRpTpYuTn7sZTn7J75VBEAOI5W+lV4dg/tHrggGA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913647F/C21C7CF686DB11EFBA4D5F26C4F9AE02/Nnh5oLhd2Dc2N4g3k_Ve6zsiHc8.crl rsync://rpki.apnic.net/member_repository/A913647F/C21C7CF686DB11EFBA4D5F26C4F9AE02/Nnh5oLhd2Dc2N4g3k_Ve6zsiHc8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nnh5oLhd2Dc2N4g3k_Ve6zsiHc8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 05:57:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 105 (0x69) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913647F, serialNumber=367879A0B85DD8373637883793F55EEB3B221DCF Validity Not Before: Apr 25 05:57:06 2025 GMT Not After : May 2 05:57:06 2025 GMT Subject: CN=680b2433-b26e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:98:ca:5b:18:ae:da:e3:8e:d2:c6:69:ef:10: eb:a3:6d:d3:46:de:04:27:7f:8e:a5:17:ad:0b:1b: 53:23:98:69:b9:06:37:d3:53:56:e7:8e:d9:43:84: 31:1b:58:44:02:6d:cd:f8:6f:44:b3:0f:12:51:14: a7:15:e2:fe:2c:b2:e8:81:55:ce:9b:6a:e8:5a:34: 4c:b5:1a:59:f7:d7:d3:46:01:9c:2d:1b:69:2c:51: 85:65:cf:c6:7d:aa:c1:0d:4d:fc:d5:11:2e:17:b0: e6:d2:81:7f:52:8f:13:78:96:10:07:c2:04:ea:a8: b4:62:32:df:56:2c:8f:03:d7:e0:3e:ba:24:eb:5e: 76:8f:9f:15:50:c1:f4:9e:55:c9:17:55:18:33:32: d5:7a:9b:27:ec:f3:09:c4:c3:22:17:15:bf:a9:26: f6:e3:1a:7a:70:15:3a:6e:16:0e:6d:ff:ee:3b:f7: 9e:76:b0:84:63:e1:2e:12:aa:bc:6e:db:f4:62:49: 26:2c:29:4e:5a:43:c7:8b:6f:0a:dd:27:97:be:9c: 6e:02:10:cf:25:c7:a4:c7:ac:cf:e3:31:7a:a2:32: 5d:3f:f9:c2:27:a2:bc:46:bd:c2:ef:50:28:25:6c: e2:74:fd:00:58:43:60:1a:83:18:6c:3f:d7:ed:d9: 7d:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:93:B8:CA:8A:47:79:77:6B:A4:3E:A3:16:7F:14:58:15:62:BB:16 X509v3 Authority Key Identifier: keyid:36:78:79:A0:B8:5D:D8:37:36:37:88:37:93:F5:5E:EB:3B:22:1D:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913647F/C21C7CF686DB11EFBA4D5F26C4F9AE02/Nnh5oLhd2Dc2N4g3k_Ve6zsiHc8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nnh5oLhd2Dc2N4g3k_Ve6zsiHc8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913647F/C21C7CF686DB11EFBA4D5F26C4F9AE02/Nnh5oLhd2Dc2N4g3k_Ve6zsiHc8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2b:6e:04:68:38:51:3b:a5:30:d4:4a:44:f0:6d:1b:da:74:a0: 99:f3:5f:dd:e1:13:86:33:83:98:91:b6:d5:b4:f0:f9:0c:bd: b9:54:7a:81:d7:08:c2:4b:3a:24:02:ca:c5:86:7e:58:d2:7b: 37:3a:27:fe:62:9b:07:ce:e8:bc:e2:24:01:52:e3:5f:59:89: 3d:af:f7:58:92:58:e0:ac:2e:38:7e:ef:ab:ef:d4:07:24:65: cb:9a:88:97:6a:9b:59:35:e2:c8:b6:ee:8b:e9:aa:45:34:d2: 5b:f0:c1:71:8a:91:a9:25:8a:04:be:d8:4a:91:37:38:46:3d: 98:2c:b9:b7:3c:d5:10:53:02:c6:84:e8:f2:0e:46:7b:42:70: 36:e1:f9:ed:bc:97:9a:e8:dc:fb:72:07:f0:10:b7:39:31:0d: 40:9d:3e:9b:21:f2:59:d1:ea:3a:74:2d:a1:0b:91:99:39:bb: d8:82:06:87:93:86:26:32:a7:e8:77:b4:00:c9:ed:ee:52:c7: 2c:4e:d2:c2:58:02:7b:dc:e4:a3:6c:2f:fc:ab:af:a3:b1:1c: 6f:31:ae:68:ff:b2:f6:66:ad:f4:80:40:13:28:86:02:a7:b4: 1b:38:0a:49:4c:f4:ab:d0:86:4e:50:75:cf:ec:15:57:20:aa: 9d:ca:fb:b6 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBaTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz NjQ3RjExMC8GA1UEBRMoMzY3ODc5QTBCODVERDgzNzM2Mzc4ODM3OTNGNTVFRUIz QjIyMURDRjAeFw0yNTA0MjUwNTU3MDZaFw0yNTA1MDIwNTU3MDZaMBgxFjAUBgNV BAMTDTY4MGIyNDMzLWIyNmUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQClmMpbGK7a447SxmnvEOujbdNG3gQnf46lF60LG1MjmGm5BjfTU1bnjtlDhDEb WEQCbc34b0SzDxJRFKcV4v4ssuiBVc6bauhaNEy1Gln319NGAZwtG2ksUYVlz8Z9 qsENTfzVES4XsObSgX9SjxN4lhAHwgTqqLRiMt9WLI8D1+A+uiTrXnaPnxVQwfSe VckXVRgzMtV6myfs8wnEwyIXFb+pJvbjGnpwFTpuFg5t/+479552sIRj4S4Sqrxu 2/RiSSYsKU5aQ8eLbwrdJ5e+nG4CEM8lx6THrM/jMXqiMl0/+cInorxGvcLvUCgl bOJ0/QBYQ2AagxhsP9ft2X0pAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUQZO4yopH eXdrpD6jFn8UWBViuxYwHwYDVR0jBBgwFoAUNnh5oLhd2Dc2N4g3k/Ve6zsiHc8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM2NDdGL0MyMUM3Q0Y2ODZE QjExRUZCQTRENUYyNkM0RjlBRTAyL05uaDVvTGhkMkRjMk40ZzNrX1ZlNnpzaUhj OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvTm5oNW9MaGQyRGMyTjRnM2tfVmU2enNpSGM4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM2 NDdGL0MyMUM3Q0Y2ODZEQjExRUZCQTRENUYyNkM0RjlBRTAyL05uaDVvTGhkMkRj Mk40ZzNrX1ZlNnpzaUhjOC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBACtuBGg4UTulMNRKRPBtG9p0oJnzX93hE4Yzg5iRttW08PkMvblUeoHX CMJLOiQCysWGfljSezc6J/5imwfO6LziJAFS419ZiT2v91iSWOCsLjh+76vv1Ack ZcuaiJdqm1k14si27ovpqkU00lvwwXGKkakligS+2EqRNzhGPZgsubc81RBTAsaE 6PIORntCcDbh+e28l5ro3PtyB/AQtzkxDUCdPpsh8lnR6jp0LaELkZk5u9iCBoeT hiYyp+h3tADJ7e5SxyxO0sJYAnvc5KNsL/yrr6OxHG8xrmj/svZmrfSAQBMohgKn tBs4CklM9KvQhk5Qdc/sFVcgqp3K+7Y= -----END CERTIFICATE-----Generated at Sat Apr 26 04:19:54 2025 by rpki-client