$ rpki-client -vvf rpki.apnic.net/member_repository/A91535A9/F41404E0195D11EF8E132F7BC4F9AE02/nm-wk8ALBix4zOEdID6XGh0H15U.mft File: nm-wk8ALBix4zOEdID6XGh0H15U.mft (raw, json) Hash identifier: wFdh/3DKcCEI2wHQSdlFysNbXQixN5y/RToUWx+URgo= Subject key identifier: 2C:3E:B9:C7:E1:2D:2A:8B:C5:6E:D3:2B:F5:2F:FE:07:97:05:07:22 Authority key identifier: 9E:6F:B0:93:C0:0B:06:2C:78:CC:E1:1D:20:3E:97:1A:1D:07:D7:95 Certificate issuer: /CN=A91535A9/serialNumber=9E6FB093C00B062C78CCE11D203E971A1D07D795 Certificate serial: AE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nm-wk8ALBix4zOEdID6XGh0H15U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91535A9/F41404E0195D11EF8E132F7BC4F9AE02/nm-wk8ALBix4zOEdID6XGh0H15U.mft Manifest number: AE Signing time: Fri 25 Apr 2025 05:04:11 +0000 Manifest this update: Fri 25 Apr 2025 05:04:11 +0000 Manifest next update: Fri 02 May 2025 05:04:11 +0000 Files and hashes: 1: nm-wk8ALBix4zOEdID6XGh0H15U.crl (hash: sGwH7tdPZZOWxEEvZHdPo3HknWX9TEFdsNB5EK1jSjQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91535A9/F41404E0195D11EF8E132F7BC4F9AE02/nm-wk8ALBix4zOEdID6XGh0H15U.crl rsync://rpki.apnic.net/member_repository/A91535A9/F41404E0195D11EF8E132F7BC4F9AE02/nm-wk8ALBix4zOEdID6XGh0H15U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nm-wk8ALBix4zOEdID6XGh0H15U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 05:04:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 174 (0xae) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91535A9, serialNumber=9E6FB093C00B062C78CCE11D203E971A1D07D795 Validity Not Before: Apr 25 05:04:11 2025 GMT Not After : May 2 05:04:11 2025 GMT Subject: CN=680b17cb-c504 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:2d:f4:8d:b9:ba:f3:88:ce:0f:38:41:52:b9: e7:8e:4c:92:4c:77:43:52:b4:04:45:1b:66:df:30: 0b:16:d8:be:e9:a5:c2:a7:23:97:4c:c2:14:ba:fd: 25:e7:75:c3:05:39:b2:e9:be:18:88:9f:59:41:b2: 44:89:b7:d4:e1:0a:ab:76:d2:01:1e:83:3b:c2:bf: 62:7c:34:15:c1:5b:a2:68:8a:6f:6d:69:f4:26:e5: db:05:e1:a8:e0:40:d1:24:24:f3:4b:67:30:5f:79: 71:96:99:10:d7:9c:02:04:5b:23:ba:10:c8:48:30: 1b:9b:0d:c0:04:61:42:23:17:d1:66:98:b0:53:50: d4:ed:5d:fe:00:63:cb:e8:0c:f9:46:3c:75:c2:1a: 88:56:8a:71:11:41:a0:d7:9d:e1:88:9c:35:c8:c7: e1:6b:3f:95:85:be:14:d7:ac:d3:e5:6c:14:f8:d5: a0:d6:ae:21:46:33:6f:c9:a5:15:0e:81:bc:44:80: e2:de:88:99:f5:5d:12:86:d3:75:2a:ce:ba:d9:c4: 3e:35:59:b2:0a:ae:61:91:24:a2:f5:13:0a:d1:03: 87:ce:2f:fa:6b:fa:b2:3d:06:58:69:a4:6d:9a:12: 64:72:70:99:6e:1f:49:f9:80:f9:3e:f3:8c:ec:dd: 61:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:3E:B9:C7:E1:2D:2A:8B:C5:6E:D3:2B:F5:2F:FE:07:97:05:07:22 X509v3 Authority Key Identifier: keyid:9E:6F:B0:93:C0:0B:06:2C:78:CC:E1:1D:20:3E:97:1A:1D:07:D7:95 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91535A9/F41404E0195D11EF8E132F7BC4F9AE02/nm-wk8ALBix4zOEdID6XGh0H15U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nm-wk8ALBix4zOEdID6XGh0H15U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91535A9/F41404E0195D11EF8E132F7BC4F9AE02/nm-wk8ALBix4zOEdID6XGh0H15U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 55:6b:25:83:a0:bf:dd:ef:c0:94:1f:27:c2:58:31:fb:e2:67: 8a:e4:10:26:ea:93:7a:83:ab:ce:9f:39:c4:9b:6c:2e:7e:a0: 2c:de:d7:cc:bb:14:74:c3:35:c8:04:33:a6:33:4d:f0:c3:0e: 53:2d:58:35:a4:aa:9c:f4:8a:cc:0d:79:2a:98:32:40:9a:02: d2:a9:0e:8f:b4:29:22:ab:86:5a:78:d7:0d:db:e4:a7:d0:db: 7f:22:22:46:bc:d8:28:84:62:42:ee:f2:e4:f4:53:be:17:f6: e5:7d:3a:93:13:29:4a:f5:48:cd:78:8c:1e:73:cb:b7:e1:3e: 1d:c6:b2:a0:8a:80:47:1e:d5:7a:b2:fa:d2:0c:de:8b:d4:a2: 25:c6:9e:64:77:e2:e7:17:f4:37:33:f4:43:ba:e6:6c:74:14: 34:89:76:0e:28:be:7e:fa:2c:1d:5d:fa:ed:68:20:51:7b:d9: 4e:d5:b1:4f:1c:21:11:06:84:da:9f:93:3a:d9:97:9a:a9:2e: 11:67:cf:9a:df:c0:4a:48:b3:99:c7:62:5f:13:be:e3:7f:06: bf:48:b9:69:2a:1f:27:31:fd:f1:2a:4e:27:c9:66:04:1f:79: 57:07:17:09:57:08:3b:9b:39:f5:3a:20:61:6c:f5:1c:ff:fb: 93:02:ed:af -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAK4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTM1QTkxMTAvBgNVBAUTKDlFNkZCMDkzQzAwQjA2MkM3OENDRTExRDIwM0U5NzFB MUQwN0Q3OTUwHhcNMjUwNDI1MDUwNDExWhcNMjUwNTAyMDUwNDExWjAYMRYwFAYD VQQDEw02ODBiMTdjYi1jNTA0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsi30jbm684jODzhBUrnnjkySTHdDUrQERRtm3zALFti+6aXCpyOXTMIUuv0l 53XDBTmy6b4YiJ9ZQbJEibfU4QqrdtIBHoM7wr9ifDQVwVuiaIpvbWn0JuXbBeGo 4EDRJCTzS2cwX3lxlpkQ15wCBFsjuhDISDAbmw3ABGFCIxfRZpiwU1DU7V3+AGPL 6Az5Rjx1whqIVopxEUGg153hiJw1yMfhaz+Vhb4U16zT5WwU+NWg1q4hRjNvyaUV DoG8RIDi3oiZ9V0ShtN1Ks662cQ+NVmyCq5hkSSi9RMK0QOHzi/6a/qyPQZYaaRt mhJkcnCZbh9J+YD5PvOM7N1hNwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCw+ucfh LSqLxW7TK/Uv/geXBQciMB8GA1UdIwQYMBaAFJ5vsJPACwYseMzhHSA+lxodB9eV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MzVBOS9GNDE0MDRFMDE5 NUQxMUVGOEUxMzJGN0JDNEY5QUUwMi9ubS13azhBTEJpeDR6T0VkSUQ2WEdoMEgx NVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25tLXdrOEFMQml4NHpPRWRJRDZYR2gwSDE1VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MzVBOS9GNDE0MDRFMDE5NUQxMUVGOEUxMzJGN0JDNEY5QUUwMi9ubS13azhBTEJp eDR6T0VkSUQ2WEdoMEgxNVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBVayWDoL/d78CUHyfCWDH74meK5BAm6pN6g6vOnznEm2wufqAs3tfM uxR0wzXIBDOmM03www5TLVg1pKqc9IrMDXkqmDJAmgLSqQ6PtCkiq4ZaeNcN2+Sn 0Nt/IiJGvNgohGJC7vLk9FO+F/blfTqTEylK9UjNeIwec8u34T4dxrKgioBHHtV6 svrSDN6L1KIlxp5kd+LnF/Q3M/RDuuZsdBQ0iXYOKL5++iwdXfrtaCBRe9lO1bFP HCERBoTan5M62ZeaqS4RZ8+a38BKSLOZx2JfE77jfwa/SLlpKh8nMf3xKk4nyWYE H3lXBxcJVwg7mzn1OiBhbPUc//uTAu2v -----END CERTIFICATE-----Generated at Sat Apr 26 17:07:06 2025 by rpki-client