$ rpki-client -vvf rpki.apnic.net/member_repository/A91803DB/0DC35D3E8DD411E9BFE2C556C4F9AE02/Nu2LZ16nI4CFr6BsCT5UqdP9e2A.mft File: Nu2LZ16nI4CFr6BsCT5UqdP9e2A.mft (raw, json) Hash identifier: f5GUBMptR88UQfL+X7BfTP6YIBGOwLjBP1yusn5R7dU= Subject key identifier: 3B:63:D9:3F:F1:52:E0:29:57:07:14:0D:B1:59:96:B5:FD:E3:45:E5 Authority key identifier: 36:ED:8B:67:5E:A7:23:80:85:AF:A0:6C:09:3E:54:A9:D3:FD:7B:60 Certificate issuer: /CN=A91803DB/serialNumber=36ED8B675EA7238085AFA06C093E54A9D3FD7B60 Certificate serial: 1111 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nu2LZ16nI4CFr6BsCT5UqdP9e2A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91803DB/0DC35D3E8DD411E9BFE2C556C4F9AE02/Nu2LZ16nI4CFr6BsCT5UqdP9e2A.mft Manifest number: 0FB3 Signing time: Thu 24 Apr 2025 17:40:34 +0000 Manifest this update: Thu 24 Apr 2025 17:40:34 +0000 Manifest next update: Thu 01 May 2025 17:40:34 +0000 Files and hashes: 1: Nu2LZ16nI4CFr6BsCT5UqdP9e2A.crl (hash: 9WSFx7ITAI5P12Yiv74IGWv/eFWnQm8D+HDPAaBnppQ=) 2: A2745BFEC18411ECBE051C5CC4F9AE02.roa (hash: PrswZfri3dHxcodWDLz5zdIU9mo1iJZykEdVfIHeBvM=) 3: 4CF19A6EAEDC11EF99753F71C4F9AE02.roa (hash: Qn6g14AUkLu1btr8Er+hiQxzqayU2xntHB3orOLLw9E=) 4: ED397A542A1211EFBF48A87FC4F9AE02.roa (hash: tNirD4O5n/APlr4VXtRqMXUQrZa9HBGyAXXcJdhkx8g=) 5: 71043990C4D811EA88E6B21FC4F9AE02.roa (hash: 9vj0wFDRg2m924YSQRU+53hKJgFYHI/k3yYJ69FV68c=) 6: B969078EB94B11EB8CFABC23C4F9AE02.roa (hash: IEsW3GuxCVGYRu/1hhIjcdekM36PkMj/h8FdT1+soSo=) 7: EE0AC1B82A1211EFBF48A87FC4F9AE02.roa (hash: rO7clzQPDfrbQiofxJnNNd8hLM/5/riPsot/0I2BTXI=) 8: F3011EAAB88311EBB2078C50C4F9AE02.roa (hash: WDmBDJ69igHtzeCqQyvNDcFOZ8jROHQ7B6krkg7kRGE=) 9: C4A85FD48FE811E98B967A66C4F9AE02.roa (hash: aiooAIoivVql5FC+SCyKWbhdV5nV3qmBQRAodXfPFtU=) 10: 721709C63F6711EF879C2E11C4F9AE02.roa (hash: OxPA4uUHLc7fRUiKLbuvR0L7g6mPMW1qhFDN6e351sc=) 11: BB54CFD0B94411EBA1CDCA45C4F9AE02.roa (hash: JBQ6069Irn+Fo63UGqCMQV8Nmj1Wx+/dKLn5g7bFNNU=) 12: 5C4E5A6EB9E511EB9717B256C4F9AE02.roa (hash: b/LbIzPAU9coJXjT3umWz8BMDzmOcTsQApiNrqEbUbM=) 13: 49F4FFBA0A1C11EEA415BE0CC4F9AE02.roa (hash: Pqc1nBcb+JFkJlWub2Tew10ajFK81balankJIjxH0u0=) 14: C2356A948FE811E98B967A66C4F9AE02.roa (hash: lh6cNUm2NUCxz6vyJ9O8vhiCdo9/t7r94k2HgugqWk4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91803DB/0DC35D3E8DD411E9BFE2C556C4F9AE02/Nu2LZ16nI4CFr6BsCT5UqdP9e2A.crl rsync://rpki.apnic.net/member_repository/A91803DB/0DC35D3E8DD411E9BFE2C556C4F9AE02/Nu2LZ16nI4CFr6BsCT5UqdP9e2A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nu2LZ16nI4CFr6BsCT5UqdP9e2A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 17:40:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4369 (0x1111) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91803DB, serialNumber=36ED8B675EA7238085AFA06C093E54A9D3FD7B60 Validity Not Before: Apr 24 17:40:34 2025 GMT Not After : May 1 17:40:34 2025 GMT Subject: CN=680a7792-2fd2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:16:4a:92:85:da:12:33:25:8a:85:34:02:4b: ad:65:cc:05:58:8e:8a:87:81:6f:8d:7f:6b:1c:15: 25:16:23:b4:bc:4c:fb:0b:65:68:18:4d:b1:78:6d: ce:21:24:86:fd:80:2b:4c:a5:cb:06:62:25:c0:b1: 9c:ff:75:2a:58:ce:6e:aa:82:4c:90:4b:c3:a7:35: 56:e4:f4:99:9a:f9:d7:0b:95:a4:6f:99:90:aa:53: 67:29:88:47:45:35:df:7b:47:15:47:46:5a:28:fc: 46:e1:64:e5:4b:41:ff:7d:64:1e:86:dd:0b:a9:1d: 8d:d0:2e:07:84:c5:a6:08:c0:6e:06:6d:d2:d9:e5: 43:b3:fb:4a:fd:32:79:9b:2b:da:65:88:c8:8e:8a: d7:87:d6:33:69:f3:46:1b:eb:32:e1:a2:af:34:f1: 91:26:74:99:af:d7:dc:cf:55:d5:c2:04:0b:4f:5d: f2:f7:39:32:ec:34:6a:5f:bb:53:a8:47:e7:7d:24: 50:df:04:03:cc:a9:22:7b:c0:5f:52:3b:c4:1a:01: 55:ee:68:3d:b2:de:3f:06:f3:c2:3e:56:4e:e6:10: 80:da:51:43:8b:9c:b2:8f:80:e5:49:15:af:76:06: d1:f9:61:26:12:0f:68:16:e3:23:5c:7d:3a:35:da: cd:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:63:D9:3F:F1:52:E0:29:57:07:14:0D:B1:59:96:B5:FD:E3:45:E5 X509v3 Authority Key Identifier: keyid:36:ED:8B:67:5E:A7:23:80:85:AF:A0:6C:09:3E:54:A9:D3:FD:7B:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91803DB/0DC35D3E8DD411E9BFE2C556C4F9AE02/Nu2LZ16nI4CFr6BsCT5UqdP9e2A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nu2LZ16nI4CFr6BsCT5UqdP9e2A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91803DB/0DC35D3E8DD411E9BFE2C556C4F9AE02/Nu2LZ16nI4CFr6BsCT5UqdP9e2A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1d:d3:c0:e1:a3:1d:b9:c3:e3:3f:08:52:06:86:dc:98:60:df: ea:65:07:4e:a4:0a:66:d8:6a:96:8e:dc:9c:5b:85:73:03:3d: f0:50:aa:64:69:4b:2c:eb:aa:04:2c:fb:b0:58:6f:69:1c:c6: 1f:63:f8:14:43:b7:18:ce:ec:90:5d:12:91:4c:cf:67:0d:1d: 59:00:4d:69:fc:1f:78:df:88:a5:ea:84:b9:51:45:ce:c8:0f: 32:c1:e4:15:90:dd:4b:fe:da:a2:88:fa:9d:47:46:8b:47:62: 8f:d1:69:a2:73:95:dd:24:08:37:13:f1:b0:17:53:ac:28:e0: 91:b5:a5:6d:64:37:a3:72:03:29:5f:ac:7e:51:72:1b:06:ca: a5:18:d6:61:02:b3:66:d9:83:f7:67:1c:93:8d:00:e5:f3:3e: 5d:34:92:90:ef:63:92:71:e4:a0:70:0c:72:7f:25:64:8a:c8: d3:fd:21:d0:44:4c:cc:20:d1:49:d1:4a:a0:d1:2b:51:66:f5: be:3e:cc:a2:2e:d7:4d:bb:b9:8c:fc:74:3e:b2:c2:0d:3d:ef: e2:97:a6:3c:77:b3:c5:22:5c:1a:e2:b4:fd:76:f7:ad:81:81: c6:32:f0:7f:41:9c:4b:8d:57:1b:57:52:2f:5d:18:3f:f9:77: 8e:9b:a5:c9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEREwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODAzREIxMTAvBgNVBAUTKDM2RUQ4QjY3NUVBNzIzODA4NUFGQTA2QzA5M0U1NEE5 RDNGRDdCNjAwHhcNMjUwNDI0MTc0MDM0WhcNMjUwNTAxMTc0MDM0WjAYMRYwFAYD VQQDEw02ODBhNzc5Mi0yZmQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuRZKkoXaEjMlioU0AkutZcwFWI6Kh4FvjX9rHBUlFiO0vEz7C2VoGE2xeG3O ISSG/YArTKXLBmIlwLGc/3UqWM5uqoJMkEvDpzVW5PSZmvnXC5Wkb5mQqlNnKYhH RTXfe0cVR0ZaKPxG4WTlS0H/fWQeht0LqR2N0C4HhMWmCMBuBm3S2eVDs/tK/TJ5 myvaZYjIjorXh9YzafNGG+sy4aKvNPGRJnSZr9fcz1XVwgQLT13y9zky7DRqX7tT qEfnfSRQ3wQDzKkie8BfUjvEGgFV7mg9st4/BvPCPlZO5hCA2lFDi5yyj4DlSRWv dgbR+WEmEg9oFuMjXH06NdrN6QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDtj2T/x UuApVwcUDbFZlrX940XlMB8GA1UdIwQYMBaAFDbti2depyOAha+gbAk+VKnT/Xtg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MDNEQi8wREMzNUQzRThE RDQxMUU5QkZFMkM1NTZDNEY5QUUwMi9OdTJMWjE2bkk0Q0ZyNkJzQ1Q1VXFkUDll MkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL051MkxaMTZuSTRDRnI2QnNDVDVVcWRQOWUyQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MDNEQi8wREMzNUQzRThERDQxMUU5QkZFMkM1NTZDNEY5QUUwMi9OdTJMWjE2bkk0 Q0ZyNkJzQ1Q1VXFkUDllMkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAd08Dhox25w+M/CFIGhtyYYN/qZQdOpApm2GqWjtycW4VzAz3wUKpk aUss66oELPuwWG9pHMYfY/gUQ7cYzuyQXRKRTM9nDR1ZAE1p/B9434il6oS5UUXO yA8yweQVkN1L/tqiiPqdR0aLR2KP0Wmic5XdJAg3E/GwF1OsKOCRtaVtZDejcgMp X6x+UXIbBsqlGNZhArNm2YP3ZxyTjQDl8z5dNJKQ72OSceSgcAxyfyVkisjT/SHQ REzMINFJ0Uqg0StRZvW+PsyiLtdNu7mM/HQ+ssINPe/il6Y8d7PFIlwa4rT9dvet gYHGMvB/QZxLjVcbV1IvXRg/+XeOm6XJ -----END CERTIFICATE-----Generated at Sat Apr 26 17:19:42 2025 by rpki-client