$ rpki-client -vvf rpki.apnic.net/member_repository/A91813F1/D0CAF384BA5911EA904FF91DC4F9AE02/nv6qck1wjP6Cxra_Jwy7XdQwbyA.mft File: nv6qck1wjP6Cxra_Jwy7XdQwbyA.mft (raw, json) Hash identifier: q1JOdJkAm4ISXJ9c27lQOGPpkqkburTekvkCTQ1qd4w= Subject key identifier: 9A:BC:65:93:CD:D4:06:13:13:D6:A2:7D:2F:9C:89:E2:1A:B3:88:F2 Authority key identifier: 9E:FE:AA:72:4D:70:8C:FE:82:C6:B6:BF:27:0C:BB:5D:D4:30:6F:20 Certificate issuer: /CN=A91813F1/serialNumber=9EFEAA724D708CFE82C6B6BF270CBB5DD4306F20 Certificate serial: 08C6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nv6qck1wjP6Cxra_Jwy7XdQwbyA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91813F1/D0CAF384BA5911EA904FF91DC4F9AE02/nv6qck1wjP6Cxra_Jwy7XdQwbyA.mft Manifest number: 08A2 Signing time: Thu 24 Apr 2025 20:26:12 +0000 Manifest this update: Thu 24 Apr 2025 20:26:12 +0000 Manifest next update: Thu 01 May 2025 20:26:12 +0000 Files and hashes: 1: nv6qck1wjP6Cxra_Jwy7XdQwbyA.crl (hash: tKoJAQubbcsDCvSuWFxlUft8P45Jw+A0UR7xRpivDSQ=) 2: B7ACB272A25611EFACD47A47C4F9AE02.roa (hash: vLwsN6XlSbBFyRzXSCrEwO8DAZca1xs9SHlcyqnbxYE=) 3: 0A8890FE2F4C11EDB0375D6CC4F9AE02.roa (hash: sSNo+/dLUh/bje18BPzZPQTxMEMoTmVIKuRUAdfqRAo=) 4: 096864742F4C11EDB0375D6CC4F9AE02.roa (hash: jla9AG1gExZIQpCD/EW4q3Wp+FwlnerqSvxfxkw43CI=) 5: 0834FF2C2F4C11EDB0375D6CC4F9AE02.roa (hash: jsKgrIPw9kysznIIPdP3oqonMHQ5VwN13abO5ggVkg4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91813F1/D0CAF384BA5911EA904FF91DC4F9AE02/nv6qck1wjP6Cxra_Jwy7XdQwbyA.crl rsync://rpki.apnic.net/member_repository/A91813F1/D0CAF384BA5911EA904FF91DC4F9AE02/nv6qck1wjP6Cxra_Jwy7XdQwbyA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nv6qck1wjP6Cxra_Jwy7XdQwbyA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 20:26:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2246 (0x8c6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91813F1, serialNumber=9EFEAA724D708CFE82C6B6BF270CBB5DD4306F20 Validity Not Before: Apr 24 20:26:12 2025 GMT Not After : May 1 20:26:12 2025 GMT Subject: CN=680a9e64-87d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:cd:f5:16:55:52:bf:ef:97:da:9a:96:48:53: 79:73:8e:fd:d7:b5:f6:8d:49:dd:d2:ca:15:92:21: 99:49:a6:ec:2c:96:1a:27:e5:1c:96:01:0e:86:e2: 9f:23:8c:06:fe:8e:58:1f:fd:e7:35:07:d1:33:94: b8:0e:0e:ab:ff:59:dd:06:77:07:63:25:dc:ab:f4: 4a:ff:32:a9:fe:27:67:dd:38:ea:14:84:93:1e:16: 77:e9:d6:a0:57:98:31:0c:83:10:ce:91:e8:06:f8: 24:53:3b:fe:6d:0b:42:34:56:6a:49:80:13:70:f6: d7:27:30:3c:77:b8:c7:f1:4c:27:95:51:9a:54:99: a4:b9:3b:a6:3e:e4:f8:57:c2:8f:39:a9:9e:f8:15: 8d:b3:56:e3:3d:93:fe:65:50:af:a8:b3:0d:7c:ba: ad:7c:c4:ae:3e:60:92:e1:fb:19:5d:4f:a7:1b:93: 46:72:ff:dc:59:62:95:f9:64:62:97:bd:01:fd:bb: 84:46:ea:d8:f7:d8:bb:7b:2d:d7:66:82:02:51:75: 48:1e:12:0c:03:f0:67:ea:6e:76:07:15:59:0a:5e: 05:a2:69:a9:9e:2d:3f:49:8b:24:73:3c:1c:99:85: 0c:08:58:9c:a0:9e:fb:ec:e8:cf:39:31:ad:dd:e7: aa:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:BC:65:93:CD:D4:06:13:13:D6:A2:7D:2F:9C:89:E2:1A:B3:88:F2 X509v3 Authority Key Identifier: keyid:9E:FE:AA:72:4D:70:8C:FE:82:C6:B6:BF:27:0C:BB:5D:D4:30:6F:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91813F1/D0CAF384BA5911EA904FF91DC4F9AE02/nv6qck1wjP6Cxra_Jwy7XdQwbyA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nv6qck1wjP6Cxra_Jwy7XdQwbyA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91813F1/D0CAF384BA5911EA904FF91DC4F9AE02/nv6qck1wjP6Cxra_Jwy7XdQwbyA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 03:69:f5:4a:7b:a6:32:12:29:18:f3:14:4a:29:ee:b9:63:11: 54:02:38:d1:e7:fe:19:ea:da:6c:06:e4:81:60:43:e3:c4:9f: 03:79:5f:58:38:1b:1c:1b:10:c3:2c:3a:37:82:5a:5b:6f:f4: 60:e1:3e:89:53:2d:f7:2b:eb:a6:41:eb:e3:3e:b6:36:01:28: c6:4d:69:29:cc:24:aa:3c:2c:6e:3d:26:b1:90:f1:a4:ac:bc: 72:76:98:49:cb:89:71:c1:4f:5e:aa:9d:ee:ee:ec:81:06:34: 4d:23:c8:71:9f:e4:3a:9b:e9:6e:c4:bd:80:0b:db:82:62:34: 3b:81:2f:8e:44:b6:d2:a6:e7:9d:d7:80:4e:57:3d:f2:2c:f1: c7:7e:95:85:92:76:b1:02:02:1e:52:4c:cb:2c:17:db:aa:66: 76:94:18:2a:84:86:37:5f:08:d7:af:1e:c1:cf:8c:56:74:dd: a2:08:ac:5d:d4:08:bb:ed:12:59:1c:b2:4b:a4:18:5e:6d:4a: 90:78:6a:6c:fc:ac:c1:93:64:fd:fd:1c:eb:31:8c:51:71:84: 07:10:1c:85:8e:07:61:f9:10:c9:18:c0:3a:a9:d0:17:02:58: 7f:46:0f:74:61:03:38:e0:25:19:0f:b6:8c:fd:1b:d0:89:96: b6:22:10:b5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCMYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODEzRjExMTAvBgNVBAUTKDlFRkVBQTcyNEQ3MDhDRkU4MkM2QjZCRjI3MENCQjVE RDQzMDZGMjAwHhcNMjUwNDI0MjAyNjEyWhcNMjUwNTAxMjAyNjEyWjAYMRYwFAYD VQQDEw02ODBhOWU2NC04N2QxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAws31FlVSv++X2pqWSFN5c47917X2jUnd0soVkiGZSabsLJYaJ+UclgEOhuKf I4wG/o5YH/3nNQfRM5S4Dg6r/1ndBncHYyXcq/RK/zKp/idn3TjqFISTHhZ36dag V5gxDIMQzpHoBvgkUzv+bQtCNFZqSYATcPbXJzA8d7jH8UwnlVGaVJmkuTumPuT4 V8KPOame+BWNs1bjPZP+ZVCvqLMNfLqtfMSuPmCS4fsZXU+nG5NGcv/cWWKV+WRi l70B/buERurY99i7ey3XZoICUXVIHhIMA/Bn6m52BxVZCl4Fommpni0/SYskczwc mYUMCFicoJ777OjPOTGt3eeqMQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJq8ZZPN 1AYTE9aifS+cieIas4jyMB8GA1UdIwQYMBaAFJ7+qnJNcIz+gsa2vycMu13UMG8g MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MTNGMS9EMENBRjM4NEJB NTkxMUVBOTA0RkY5MURDNEY5QUUwMi9udjZxY2sxd2pQNkN4cmFfSnd5N1hkUXdi eUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL252NnFjazF3alA2Q3hyYV9Kd3k3WGRRd2J5QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MTNGMS9EMENBRjM4NEJBNTkxMUVBOTA0RkY5MURDNEY5QUUwMi9udjZxY2sxd2pQ NkN4cmFfSnd5N1hkUXdieUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQADafVKe6YyEikY8xRKKe65YxFUAjjR5/4Z6tpsBuSBYEPjxJ8DeV9Y OBscGxDDLDo3glpbb/Rg4T6JUy33K+umQevjPrY2ASjGTWkpzCSqPCxuPSaxkPGk rLxydphJy4lxwU9eqp3u7uyBBjRNI8hxn+Q6m+luxL2AC9uCYjQ7gS+ORLbSpued 14BOVz3yLPHHfpWFknaxAgIeUkzLLBfbqmZ2lBgqhIY3XwjXrx7Bz4xWdN2iCKxd 1Ai77RJZHLJLpBhebUqQeGps/KzBk2T9/RzrMYxRcYQHEByFjgdh+RDJGMA6qdAX Alh/Rg90YQM44CUZD7aM/RvQiZa2IhC1 -----END CERTIFICATE-----Generated at Sat Apr 26 12:39:43 2025 by rpki-client