$ rpki-client -vvf rpki.apnic.net/member_repository/A913F0DF/E5083648992811EEBBCAE87AC4F9AE02/nQi_OKDTi4yrfP2I9djE7WZ3jME.mft File: nQi_OKDTi4yrfP2I9djE7WZ3jME.mft (raw, json) Hash identifier: idTW2VzEo+7UsM8rZK0bzqf9El8yUZCyweR1itTsocA= Subject key identifier: 41:95:6E:60:07:02:6A:96:BA:15:24:FF:67:78:03:03:59:B6:58:0E Authority key identifier: 9D:08:BF:38:A0:D3:8B:8C:AB:7C:FD:88:F5:D8:C4:ED:66:77:8C:C1 Certificate issuer: /CN=A913F0DF/serialNumber=9D08BF38A0D38B8CAB7CFD88F5D8C4ED66778CC1 Certificate serial: 0106 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nQi_OKDTi4yrfP2I9djE7WZ3jME.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913F0DF/E5083648992811EEBBCAE87AC4F9AE02/nQi_OKDTi4yrfP2I9djE7WZ3jME.mft Manifest number: 0103 Signing time: Fri 25 Apr 2025 04:11:16 +0000 Manifest this update: Fri 25 Apr 2025 04:11:15 +0000 Manifest next update: Fri 02 May 2025 04:11:15 +0000 Files and hashes: 1: nQi_OKDTi4yrfP2I9djE7WZ3jME.crl (hash: M7D5DpICR3HFDoy5n04aZUBCZyC4UlTeeMMUQq6o9aY=) 2: 7C7AF8E6E67011EEB76DCB76C4F9AE02.roa (hash: tBwNVvJX12RI1rw1ArvMyaYybwsSqQmw1mHttd1wbm0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913F0DF/E5083648992811EEBBCAE87AC4F9AE02/nQi_OKDTi4yrfP2I9djE7WZ3jME.crl rsync://rpki.apnic.net/member_repository/A913F0DF/E5083648992811EEBBCAE87AC4F9AE02/nQi_OKDTi4yrfP2I9djE7WZ3jME.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nQi_OKDTi4yrfP2I9djE7WZ3jME.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 04:11:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 262 (0x106) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913F0DF, serialNumber=9D08BF38A0D38B8CAB7CFD88F5D8C4ED66778CC1 Validity Not Before: Apr 25 04:11:15 2025 GMT Not After : May 2 04:11:15 2025 GMT Subject: CN=680b0b64-e92b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:14:1c:06:20:ff:d0:1e:60:9f:d1:97:91:36: 10:54:66:5e:a3:87:0f:99:d9:f1:09:74:24:72:a8: 3b:e2:9c:41:ff:15:a6:3a:3f:9c:25:2e:7c:36:cb: 56:26:52:4d:fe:75:1b:d2:7f:a0:b3:6f:dd:71:6a: a7:a4:cd:04:73:d9:30:ee:3a:5a:c7:2f:a6:fd:33: 5d:a1:d9:97:06:b4:4e:f8:6f:7b:fe:15:46:3b:7a: 3f:4e:3a:c1:2a:31:82:a3:dd:d7:2c:05:f5:bf:1f: e9:17:8d:e4:65:cd:44:2b:2f:f0:c4:ff:66:28:ae: 5b:7e:30:36:76:88:3f:46:bf:9d:cf:16:13:4e:68: f6:db:ad:24:00:ba:98:62:71:ab:f5:6f:8b:9c:70: d9:18:d2:3b:6d:1f:6b:08:e0:7e:5e:87:92:4d:3a: e5:96:a3:b5:05:ad:ca:ca:24:16:98:54:35:98:3f: 45:40:be:73:ea:d5:0c:0f:1d:87:f2:24:77:e4:39: eb:9b:a2:5a:11:28:1f:df:29:b7:58:c6:7a:6c:3b: 1e:a2:30:d0:f6:f1:16:a5:73:81:be:7d:d1:10:7f: c4:3e:62:f8:45:b6:b7:3e:80:e6:59:bb:31:73:e1: 26:92:2a:cc:6d:3f:5e:52:ad:fe:18:f5:7b:77:ee: 50:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:95:6E:60:07:02:6A:96:BA:15:24:FF:67:78:03:03:59:B6:58:0E X509v3 Authority Key Identifier: keyid:9D:08:BF:38:A0:D3:8B:8C:AB:7C:FD:88:F5:D8:C4:ED:66:77:8C:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913F0DF/E5083648992811EEBBCAE87AC4F9AE02/nQi_OKDTi4yrfP2I9djE7WZ3jME.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nQi_OKDTi4yrfP2I9djE7WZ3jME.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913F0DF/E5083648992811EEBBCAE87AC4F9AE02/nQi_OKDTi4yrfP2I9djE7WZ3jME.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ad:91:05:d3:cd:9b:62:aa:df:a3:b2:ee:a8:c4:ec:8a:4e:15: ae:67:ed:66:9d:ae:9a:3b:49:98:51:0f:e9:30:39:65:d5:77: 53:d9:32:52:a0:f7:ce:c5:85:05:f9:61:b6:8e:b6:bd:a2:b1: 30:21:af:f7:7d:11:be:3c:26:fb:7b:b4:38:d0:46:d4:9e:0d: 9d:1b:e6:da:12:2a:fd:03:fc:cb:48:42:f2:35:47:a9:e9:9d: 8e:1f:bd:2b:4d:4f:44:3c:53:7f:7c:17:b6:ec:9f:68:0a:ff: 25:44:03:da:de:d6:de:8b:e5:ca:26:4a:c1:41:e2:50:34:39: 1a:88:bc:80:3a:cb:50:57:16:de:41:1e:c5:30:ac:5e:2b:a5: bb:15:a4:2f:87:a3:db:fc:d3:67:ad:e4:92:da:c4:e7:d7:ea: ac:1e:b8:11:4a:ea:ab:cd:3c:f6:74:0f:11:3a:05:87:20:6e: 45:3b:7c:c6:5c:e7:8a:36:38:0a:ba:1a:3f:dd:7b:41:1d:92: 1b:50:a7:9f:e5:ad:59:ad:50:6a:00:49:1b:22:54:d2:e0:65: 7c:25:f9:8b:d8:9d:55:43:79:5d:0b:24:c0:4b:c1:c2:b2:db: 74:71:37:5f:32:22:9e:90:94:64:f5:55:66:f5:39:41:d8:8b: c8:64:27:97 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0YwREYxMTAvBgNVBAUTKDlEMDhCRjM4QTBEMzhCOENBQjdDRkQ4OEY1RDhDNEVE NjY3NzhDQzEwHhcNMjUwNDI1MDQxMTE1WhcNMjUwNTAyMDQxMTE1WjAYMRYwFAYD VQQDEw02ODBiMGI2NC1lOTJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzRQcBiD/0B5gn9GXkTYQVGZeo4cPmdnxCXQkcqg74pxB/xWmOj+cJS58NstW JlJN/nUb0n+gs2/dcWqnpM0Ec9kw7jpaxy+m/TNdodmXBrRO+G97/hVGO3o/TjrB KjGCo93XLAX1vx/pF43kZc1EKy/wxP9mKK5bfjA2dog/Rr+dzxYTTmj2260kALqY YnGr9W+LnHDZGNI7bR9rCOB+XoeSTTrllqO1Ba3KyiQWmFQ1mD9FQL5z6tUMDx2H 8iR35Dnrm6JaESgf3ym3WMZ6bDseojDQ9vEWpXOBvn3REH/EPmL4Rba3PoDmWbsx c+EmkirMbT9eUq3+GPV7d+5Q6wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEGVbmAH AmqWuhUk/2d4AwNZtlgOMB8GA1UdIwQYMBaAFJ0Ivzig04uMq3z9iPXYxO1md4zB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRjBERi9FNTA4MzY0ODk5 MjgxMUVFQkJDQUU4N0FDNEY5QUUwMi9uUWlfT0tEVGk0eXJmUDJJOWRqRTdXWjNq TUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25RaV9PS0RUaTR5cmZQMkk5ZGpFN1daM2pNRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RjBERi9FNTA4MzY0ODk5MjgxMUVFQkJDQUU4N0FDNEY5QUUwMi9uUWlfT0tEVGk0 eXJmUDJJOWRqRTdXWjNqTUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCtkQXTzZtiqt+jsu6oxOyKThWuZ+1mna6aO0mYUQ/pMDll1XdT2TJS oPfOxYUF+WG2jra9orEwIa/3fRG+PCb7e7Q40EbUng2dG+baEir9A/zLSELyNUep 6Z2OH70rTU9EPFN/fBe27J9oCv8lRAPa3tbei+XKJkrBQeJQNDkaiLyAOstQVxbe QR7FMKxeK6W7FaQvh6Pb/NNnreSS2sTn1+qsHrgRSuqrzTz2dA8ROgWHIG5FO3zG XOeKNjgKuho/3XtBHZIbUKef5a1ZrVBqAEkbIlTS4GV8JfmL2J1VQ3ldCyTAS8HC stt0cTdfMiKekJRk9VVm9TlB2IvIZCeX -----END CERTIFICATE-----Generated at Sat Apr 26 05:00:36 2025 by rpki-client