$ rpki-client -vvf rpki.apnic.net/member_repository/A91889A4/27A25A5604FA11EE8D46E245C4F9AE02/_nQHcdbqABLeOHBW-Iy-3TbEqGA.mft File: _nQHcdbqABLeOHBW-Iy-3TbEqGA.mft (raw, json) Hash identifier: PSgoO7m2VfGbeLGOU6tlZFQYuwgGW31BNd7p+8TdPUM= Subject key identifier: E6:ED:CA:54:53:6B:23:41:2D:F8:2C:22:BE:58:F1:52:43:B7:11:3B Authority key identifier: FE:74:07:71:D6:EA:00:12:DE:38:70:56:F8:8C:BE:DD:36:C4:A8:60 Certificate issuer: /CN=A91889A4/serialNumber=FE740771D6EA0012DE387056F88CBEDD36C4A860 Certificate serial: 0165 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_nQHcdbqABLeOHBW-Iy-3TbEqGA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91889A4/27A25A5604FA11EE8D46E245C4F9AE02/_nQHcdbqABLeOHBW-Iy-3TbEqGA.mft Manifest number: 0162 Signing time: Fri 25 Apr 2025 03:05:47 +0000 Manifest this update: Fri 25 Apr 2025 03:05:47 +0000 Manifest next update: Fri 02 May 2025 03:05:47 +0000 Files and hashes: 1: _nQHcdbqABLeOHBW-Iy-3TbEqGA.crl (hash: hnyN9ImYytr8o8R7W8AXDnQyq+iO2zQoH7I+3zjQQP8=) 2: 37B318C0050111EEAFBCAE7EC4F9AE02.roa (hash: pZ0jtDypa9zbTRVdqPzNYcOmaqaH3zak3MFxphvTBnU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91889A4/27A25A5604FA11EE8D46E245C4F9AE02/_nQHcdbqABLeOHBW-Iy-3TbEqGA.crl rsync://rpki.apnic.net/member_repository/A91889A4/27A25A5604FA11EE8D46E245C4F9AE02/_nQHcdbqABLeOHBW-Iy-3TbEqGA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_nQHcdbqABLeOHBW-Iy-3TbEqGA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 03:05:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 357 (0x165) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91889A4, serialNumber=FE740771D6EA0012DE387056F88CBEDD36C4A860 Validity Not Before: Apr 25 03:05:47 2025 GMT Not After : May 2 03:05:47 2025 GMT Subject: CN=680afc0b-2f85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:94:2b:d0:e1:3d:b3:91:ef:87:0a:34:dd:55: bd:9e:69:71:41:2c:13:3a:8d:81:3a:50:ec:1b:c6: 64:2b:e4:c6:d2:5e:e8:5c:0f:ac:83:2a:57:23:63: 90:56:8b:69:5b:d5:8f:c1:38:c8:16:d8:21:df:62: e7:94:ce:f2:e4:1c:58:2e:c1:86:75:8d:96:3b:e7: 47:06:75:30:e4:b7:d6:5a:bb:e5:82:31:6d:b0:59: 85:6c:25:23:57:50:cf:d4:fc:12:ef:98:8f:b5:c7: 15:d3:54:b8:23:27:ad:30:0d:a9:6e:1c:25:b9:ea: 7d:da:23:e7:c7:2b:81:ea:b4:21:ae:ec:ec:93:fd: 4e:3b:03:22:ae:59:fe:55:33:95:b4:df:c8:94:9f: 5e:cb:16:31:12:20:cd:06:13:aa:a7:eb:fb:8f:cd: 85:ec:2d:ee:37:26:bb:27:3a:93:1c:41:60:7b:40: f4:ca:29:94:76:c5:9b:2b:17:d2:9e:fb:a7:98:04: 7a:9b:dd:12:2f:e8:79:e5:5f:8b:61:f9:ea:de:68: 8a:d3:cc:d6:c9:bd:11:4e:bb:5d:09:a9:37:4b:85: 95:3a:9c:6a:ae:15:21:e4:97:26:fd:c1:a1:ac:09: 24:df:d9:40:52:5f:50:85:bf:11:e8:e3:8f:e6:37: 3f:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:ED:CA:54:53:6B:23:41:2D:F8:2C:22:BE:58:F1:52:43:B7:11:3B X509v3 Authority Key Identifier: keyid:FE:74:07:71:D6:EA:00:12:DE:38:70:56:F8:8C:BE:DD:36:C4:A8:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91889A4/27A25A5604FA11EE8D46E245C4F9AE02/_nQHcdbqABLeOHBW-Iy-3TbEqGA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_nQHcdbqABLeOHBW-Iy-3TbEqGA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91889A4/27A25A5604FA11EE8D46E245C4F9AE02/_nQHcdbqABLeOHBW-Iy-3TbEqGA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2e:ab:44:19:5e:38:aa:4e:ce:ec:f1:42:9d:24:7a:63:21:8a: 14:7b:a1:85:ff:bc:64:22:36:31:0f:b6:3a:54:28:58:57:5a: b5:62:33:15:af:e3:8f:51:f0:5c:17:63:94:29:20:bc:a4:34: 98:9c:d6:ab:73:60:7b:af:81:4c:c8:a0:81:99:92:ae:25:cd: 66:eb:b9:16:71:79:58:46:34:2c:a3:0a:77:66:cb:78:b0:ad: 0c:3d:4d:91:10:04:b2:2d:3e:6f:81:a4:db:96:a1:d9:0e:7f: 60:1b:ad:91:d8:c7:82:a8:4f:ba:be:8a:0a:77:60:78:01:81: d2:df:ec:ba:fa:c2:d3:5f:8c:1f:2c:0f:f6:26:7f:40:47:6f: ba:a9:70:ba:ac:1a:12:c6:2b:9c:3b:23:24:10:1f:ec:3d:80: e3:02:bb:67:08:c8:57:06:79:78:3a:f2:c4:4d:cf:28:87:4d: c5:65:d6:64:9d:77:0a:3f:9a:97:09:af:de:47:b5:6d:c8:79: 12:b5:6a:94:99:8e:e0:77:e6:ea:d6:1a:9b:a5:57:65:fd:4a: 4f:c7:d8:a7:0d:6e:c3:68:c5:74:e6:4d:02:83:ea:a6:86:4b: 85:79:52:8b:8f:5c:7c:07:26:34:e4:7e:92:c6:53:c8:79:7b: f4:bf:08:27 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAWUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODg5QTQxMTAvBgNVBAUTKEZFNzQwNzcxRDZFQTAwMTJERTM4NzA1NkY4OENCRURE MzZDNEE4NjAwHhcNMjUwNDI1MDMwNTQ3WhcNMjUwNTAyMDMwNTQ3WjAYMRYwFAYD VQQDEw02ODBhZmMwYi0yZjg1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv5Qr0OE9s5Hvhwo03VW9nmlxQSwTOo2BOlDsG8ZkK+TG0l7oXA+sgypXI2OQ VotpW9WPwTjIFtgh32LnlM7y5BxYLsGGdY2WO+dHBnUw5LfWWrvlgjFtsFmFbCUj V1DP1PwS75iPtccV01S4IyetMA2pbhwluep92iPnxyuB6rQhruzsk/1OOwMirln+ VTOVtN/IlJ9eyxYxEiDNBhOqp+v7j82F7C3uNya7JzqTHEFge0D0yimUdsWbKxfS nvunmAR6m90SL+h55V+LYfnq3miK08zWyb0RTrtdCak3S4WVOpxqrhUh5Jcm/cGh rAkk39lAUl9Qhb8R6OOP5jc/FwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFObtylRT ayNBLfgsIr5Y8VJDtxE7MB8GA1UdIwQYMBaAFP50B3HW6gAS3jhwVviMvt02xKhg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4ODlBNC8yN0EyNUE1NjA0 RkExMUVFOEQ0NkUyNDVDNEY5QUUwMi9fblFIY2RicUFCTGVPSEJXLUl5LTNUYkVx R0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19uUUhjZGJxQUJMZU9IQlctSXktM1RiRXFHQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 ODlBNC8yN0EyNUE1NjA0RkExMUVFOEQ0NkUyNDVDNEY5QUUwMi9fblFIY2RicUFC TGVPSEJXLUl5LTNUYkVxR0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAuq0QZXjiqTs7s8UKdJHpjIYoUe6GF/7xkIjYxD7Y6VChYV1q1YjMV r+OPUfBcF2OUKSC8pDSYnNarc2B7r4FMyKCBmZKuJc1m67kWcXlYRjQsowp3Zst4 sK0MPU2REASyLT5vgaTblqHZDn9gG62R2MeCqE+6vooKd2B4AYHS3+y6+sLTX4wf LA/2Jn9AR2+6qXC6rBoSxiucOyMkEB/sPYDjArtnCMhXBnl4OvLETc8oh03FZdZk nXcKP5qXCa/eR7VtyHkStWqUmY7gd+bq1hqbpVdl/UpPx9inDW7DaMV05k0Cg+qm hkuFeVKLj1x8ByY05H6SxlPIeXv0vwgn -----END CERTIFICATE-----Generated at Sat Apr 26 04:35:46 2025 by rpki-client