$ rpki-client -vvf rpki.apnic.net/member_repository/A91925D2/6DF602D078BF11EE93FFB764C4F9AE02/NFF8wp90Fp_XNqLCQGGfizMP3Z0.mft File: NFF8wp90Fp_XNqLCQGGfizMP3Z0.mft (raw, json) Hash identifier: pcB5gARpGo40JkWe1MIoGI1SWw1ypFKpFXLIAg1WLKM= Subject key identifier: E7:6E:10:78:A0:1A:8E:12:99:CE:F0:6C:DE:29:2F:65:18:82:CC:BF Authority key identifier: 34:51:7C:C2:9F:74:16:9F:D7:36:A2:C2:40:61:9F:8B:33:0F:DD:9D Certificate issuer: /CN=A91925D2/serialNumber=34517CC29F74169FD736A2C240619F8B330FDD9D Certificate serial: 0118 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NFF8wp90Fp_XNqLCQGGfizMP3Z0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91925D2/6DF602D078BF11EE93FFB764C4F9AE02/NFF8wp90Fp_XNqLCQGGfizMP3Z0.mft Manifest number: 0116 Signing time: Sun 27 Apr 2025 03:45:15 +0000 Manifest this update: Sun 27 Apr 2025 03:45:15 +0000 Manifest next update: Sun 04 May 2025 03:45:15 +0000 Files and hashes: 1: NFF8wp90Fp_XNqLCQGGfizMP3Z0.crl (hash: Np2/xurmAuUzZbvjCxX7pziFCr4K2xl+j0p+s9GXsmE=) 2: 2C4CD10078C011EE90D36F13C4F9AE02.roa (hash: +7GFnP4vXiPay7vN6IrJFOHX1SU8MW5paTRJSWnqDFI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91925D2/6DF602D078BF11EE93FFB764C4F9AE02/NFF8wp90Fp_XNqLCQGGfizMP3Z0.crl rsync://rpki.apnic.net/member_repository/A91925D2/6DF602D078BF11EE93FFB764C4F9AE02/NFF8wp90Fp_XNqLCQGGfizMP3Z0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NFF8wp90Fp_XNqLCQGGfizMP3Z0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 03:45:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 280 (0x118) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91925D2, serialNumber=34517CC29F74169FD736A2C240619F8B330FDD9D Validity Not Before: Apr 27 03:45:15 2025 GMT Not After : May 4 03:45:15 2025 GMT Subject: CN=680da84b-8e34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:61:7a:5b:43:6a:e1:eb:f2:6b:27:42:9a:ca: 64:b6:48:42:89:22:c4:c4:8b:bb:1f:46:f1:49:f8: 82:6d:4d:31:fb:b7:1c:25:60:5e:ea:90:ea:90:e0: 99:06:47:19:0d:b5:77:97:20:89:0f:96:be:18:d8: 51:45:33:79:3c:3f:da:98:c6:c1:90:6c:ca:0b:87: 8a:36:17:c1:61:02:dd:8e:83:24:69:d1:41:bf:ba: a2:da:a7:90:11:6e:ab:8d:c0:47:95:be:42:4d:10: 2e:77:45:39:ff:dc:78:47:07:ba:ea:a7:8e:e4:1c: 23:71:7d:de:72:3c:2a:cc:4a:dc:02:9e:c9:0a:8f: 34:b4:e5:01:4d:e9:82:0d:00:ac:c8:eb:ae:db:e7: 88:62:67:97:93:fd:28:91:18:4f:df:1c:93:b7:34: 78:c2:3b:43:ef:bc:74:05:18:69:e7:7f:64:ab:b3: 9d:41:50:cc:b1:2f:86:44:4e:8e:9e:c2:c0:d7:33: b8:20:09:9a:86:60:91:1c:dd:0d:40:65:fd:e3:f9: 2d:a5:63:5f:55:14:8c:29:85:25:d5:33:7a:eb:9e: 6e:8e:5b:3c:94:d9:3d:22:a2:74:58:93:cc:fd:84: ca:5c:b0:ed:05:f2:80:ca:78:72:be:86:af:6a:a2: a4:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:6E:10:78:A0:1A:8E:12:99:CE:F0:6C:DE:29:2F:65:18:82:CC:BF X509v3 Authority Key Identifier: keyid:34:51:7C:C2:9F:74:16:9F:D7:36:A2:C2:40:61:9F:8B:33:0F:DD:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91925D2/6DF602D078BF11EE93FFB764C4F9AE02/NFF8wp90Fp_XNqLCQGGfizMP3Z0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NFF8wp90Fp_XNqLCQGGfizMP3Z0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91925D2/6DF602D078BF11EE93FFB764C4F9AE02/NFF8wp90Fp_XNqLCQGGfizMP3Z0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0d:f9:9b:a5:f5:0f:d0:77:67:4f:ca:e2:38:87:22:ae:1c:53: 8a:cf:dc:23:e4:64:fa:7c:be:e8:79:c8:89:b4:54:aa:b1:45: 5a:f3:a9:c7:86:a6:a8:c7:c1:a7:8c:e6:46:5d:3b:17:f9:e8: 97:50:bf:32:fd:20:21:f7:e9:db:fa:d9:44:8a:bc:31:81:84: 59:7d:05:e5:b9:3d:6c:77:6d:1a:aa:aa:b9:bf:06:7f:ba:b3: 02:1e:20:85:35:95:a9:0c:27:50:c1:14:4e:cd:69:fe:75:3b: 6f:a2:d8:54:83:39:3e:2c:44:64:c3:20:a2:63:6f:f9:7d:3e: 1a:35:e3:39:ee:2a:2d:e3:8a:64:4a:92:42:72:b5:2a:22:b1: d6:e6:9e:08:87:84:56:e1:be:ba:66:2e:fb:e5:bd:e4:af:02: 98:e9:38:ce:ad:5e:bf:10:e3:8b:77:a2:a9:83:ea:e0:2d:c9: 35:8d:1b:b7:d0:79:ae:3f:2b:ce:b9:88:38:d3:b6:3f:cc:4f: 70:cc:ae:6b:52:80:fd:31:44:a4:04:b7:29:03:c4:42:d8:f7: 57:11:40:69:1b:c8:cc:47:ea:2a:f9:8a:cb:fa:65:45:d3:89: 7b:e0:f7:7a:35:de:22:ed:48:9d:28:2e:ae:ff:b4:b4:0f:76: bf:55:43:8c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICARgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTI1RDIxMTAvBgNVBAUTKDM0NTE3Q0MyOUY3NDE2OUZENzM2QTJDMjQwNjE5RjhC MzMwRkREOUQwHhcNMjUwNDI3MDM0NTE1WhcNMjUwNTA0MDM0NTE1WjAYMRYwFAYD VQQDEw02ODBkYTg0Yi04ZTM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3mF6W0Nq4evyaydCmspktkhCiSLExIu7H0bxSfiCbU0x+7ccJWBe6pDqkOCZ BkcZDbV3lyCJD5a+GNhRRTN5PD/amMbBkGzKC4eKNhfBYQLdjoMkadFBv7qi2qeQ EW6rjcBHlb5CTRAud0U5/9x4Rwe66qeO5BwjcX3ecjwqzErcAp7JCo80tOUBTemC DQCsyOuu2+eIYmeXk/0okRhP3xyTtzR4wjtD77x0BRhp539kq7OdQVDMsS+GRE6O nsLA1zO4IAmahmCRHN0NQGX94/ktpWNfVRSMKYUl1TN6655ujls8lNk9IqJ0WJPM /YTKXLDtBfKAynhyvoavaqKkqwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOduEHig Go4Smc7wbN4pL2UYgsy/MB8GA1UdIwQYMBaAFDRRfMKfdBaf1zaiwkBhn4szD92d MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MjVEMi82REY2MDJEMDc4 QkYxMUVFOTNGRkI3NjRDNEY5QUUwMi9ORkY4d3A5MEZwX1hOcUxDUUdHZml6TVAz WjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05GRjh3cDkwRnBfWE5xTENRR0dmaXpNUDNaMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MjVEMi82REY2MDJEMDc4QkYxMUVFOTNGRkI3NjRDNEY5QUUwMi9ORkY4d3A5MEZw X1hOcUxDUUdHZml6TVAzWjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAN+Zul9Q/Qd2dPyuI4hyKuHFOKz9wj5GT6fL7oeciJtFSqsUVa86nH hqaox8GnjOZGXTsX+eiXUL8y/SAh9+nb+tlEirwxgYRZfQXluT1sd20aqqq5vwZ/ urMCHiCFNZWpDCdQwRROzWn+dTtvothUgzk+LERkwyCiY2/5fT4aNeM57iot44pk SpJCcrUqIrHW5p4Ih4RW4b66Zi775b3krwKY6TjOrV6/EOOLd6Kpg+rgLck1jRu3 0HmuPyvOuYg407Y/zE9wzK5rUoD9MUSkBLcpA8RC2PdXEUBpG8jMR+oq+YrL+mVF 04l74Pd6Nd4i7UidKC6u/7S0D3a/VUOM -----END CERTIFICATE-----Generated at Mon Apr 28 12:28:37 2025 by rpki-client