$ rpki-client -vvf rpki.apnic.net/member_repository/A91983A2/61C1A5786DBA11EA9563CB65C4F9AE02/NvLl_YZ1AzcwumM6RQCvVQIFnww.mft File: NvLl_YZ1AzcwumM6RQCvVQIFnww.mft (raw, json) Hash identifier: gNkd+8g0R96bPUL/FVb29r4v0z2eVXYNXfGWRIBkknI= Subject key identifier: 21:93:93:A8:19:1A:2A:70:A5:1C:3C:20:2A:AB:FA:02:FD:0E:EA:C2 Authority key identifier: 36:F2:E5:FD:86:75:03:37:30:BA:63:3A:45:00:AF:55:02:05:9F:0C Certificate issuer: /CN=A91983A2/serialNumber=36F2E5FD8675033730BA633A4500AF5502059F0C Certificate serial: 0A1D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NvLl_YZ1AzcwumM6RQCvVQIFnww.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91983A2/61C1A5786DBA11EA9563CB65C4F9AE02/NvLl_YZ1AzcwumM6RQCvVQIFnww.mft Manifest number: 0A18 Signing time: Sat 26 Apr 2025 19:35:30 +0000 Manifest this update: Sat 26 Apr 2025 19:35:30 +0000 Manifest next update: Sat 03 May 2025 19:35:30 +0000 Files and hashes: 1: NvLl_YZ1AzcwumM6RQCvVQIFnww.crl (hash: igaV0fTMOJb0saj68rmhEtz7XxiMvYK9h3ktKhxebM8=) 2: 57DF94FA6DBC11EAB10A1F6CC4F9AE02.roa (hash: 8IuCCJrlkn8DX5/stJkD0in4BPYiGVJv0wrZdIEdC4Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91983A2/61C1A5786DBA11EA9563CB65C4F9AE02/NvLl_YZ1AzcwumM6RQCvVQIFnww.crl rsync://rpki.apnic.net/member_repository/A91983A2/61C1A5786DBA11EA9563CB65C4F9AE02/NvLl_YZ1AzcwumM6RQCvVQIFnww.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NvLl_YZ1AzcwumM6RQCvVQIFnww.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 May 2025 19:35:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2589 (0xa1d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91983A2, serialNumber=36F2E5FD8675033730BA633A4500AF5502059F0C Validity Not Before: Apr 26 19:35:30 2025 GMT Not After : May 3 19:35:30 2025 GMT Subject: CN=680d3582-91e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:7c:5c:87:8d:15:28:e6:ee:60:32:5e:5f:8c: 55:9c:b5:ab:b7:74:81:45:bb:8d:fc:2a:4e:8c:1a: 51:cf:fe:a0:60:97:0c:0f:98:67:7f:05:79:60:b0: 53:68:ed:fd:20:a3:6e:2a:91:63:25:04:2e:69:81: 04:87:b8:19:9d:45:3a:4b:16:55:12:a7:73:ff:16: 51:e6:45:88:f8:82:87:35:a8:16:d8:36:ab:e4:e9: 43:fa:96:5b:83:da:1d:4f:ea:3a:fa:55:94:75:b3: 49:31:86:8b:22:1b:72:3f:13:97:ec:fa:f5:0f:d1: a7:01:4d:0e:8a:a1:f5:f2:62:15:34:26:a2:ba:3e: 2d:ea:0a:55:49:bc:95:0d:19:29:8f:1c:80:ea:28: 94:81:5d:40:74:83:97:59:24:b7:d3:1b:1e:35:70: 08:c2:73:e9:23:72:9d:aa:a6:4e:97:c7:81:e7:b3: 79:91:fc:9b:53:cd:ea:03:68:bc:96:ad:40:4d:83: 1e:56:33:28:d5:4c:3c:98:63:ed:87:35:57:48:43: 77:7b:e7:a6:e7:f7:7b:ec:e7:60:b0:f4:87:35:b0: 30:c7:07:76:ae:51:1d:d6:3e:9d:f3:82:b9:82:e8: 93:67:de:57:5a:0a:00:52:0e:74:40:68:50:cf:b6: 96:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:93:93:A8:19:1A:2A:70:A5:1C:3C:20:2A:AB:FA:02:FD:0E:EA:C2 X509v3 Authority Key Identifier: keyid:36:F2:E5:FD:86:75:03:37:30:BA:63:3A:45:00:AF:55:02:05:9F:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91983A2/61C1A5786DBA11EA9563CB65C4F9AE02/NvLl_YZ1AzcwumM6RQCvVQIFnww.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NvLl_YZ1AzcwumM6RQCvVQIFnww.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91983A2/61C1A5786DBA11EA9563CB65C4F9AE02/NvLl_YZ1AzcwumM6RQCvVQIFnww.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6f:92:b5:42:bf:24:62:31:45:8e:1d:26:8f:67:cc:06:f3:74: 89:a5:b9:c1:f3:b8:f4:7a:00:00:06:43:26:d2:8d:09:35:94: d2:5f:8c:8b:fa:43:52:9c:ae:34:69:74:0f:eb:60:cd:11:77: dd:24:33:94:d5:4e:f0:25:43:1c:49:ad:54:43:a7:44:b6:c9: 17:fb:cc:2b:56:e6:23:fe:af:25:47:81:31:56:f4:69:2a:c7: 10:8a:e3:79:e9:25:2c:6a:73:19:94:2e:66:92:82:2a:33:5f: 81:34:03:96:75:42:74:fe:8e:35:40:da:58:2a:48:f9:d9:5b: de:e6:ec:1d:e7:63:4f:68:42:c3:c9:f8:c2:11:c2:ea:2d:b5: 4d:1e:0f:71:f5:56:de:8e:05:4f:39:c3:c0:1e:19:cf:36:ff: 4f:87:c2:ff:88:ff:5a:7a:0b:4a:8a:c0:3b:09:22:1b:e0:cb: 24:84:ab:30:8e:51:9e:b2:05:6c:04:09:3e:53:e9:b1:9a:b9: 21:26:ca:76:24:59:5d:8a:c6:67:f7:1a:f3:1d:f9:63:9c:18: 64:cd:e1:bb:55:30:f9:8a:a5:7e:93:68:16:3e:74:a3:b5:12: 08:f6:2b:12:30:c4:84:54:7e:aa:4f:c4:ca:f0:0b:70:b6:a5: 4a:d2:a8:97 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCh0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTgzQTIxMTAvBgNVBAUTKDM2RjJFNUZEODY3NTAzMzczMEJBNjMzQTQ1MDBBRjU1 MDIwNTlGMEMwHhcNMjUwNDI2MTkzNTMwWhcNMjUwNTAzMTkzNTMwWjAYMRYwFAYD VQQDEw02ODBkMzU4Mi05MWUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA23xch40VKObuYDJeX4xVnLWrt3SBRbuN/CpOjBpRz/6gYJcMD5hnfwV5YLBT aO39IKNuKpFjJQQuaYEEh7gZnUU6SxZVEqdz/xZR5kWI+IKHNagW2Dar5OlD+pZb g9odT+o6+lWUdbNJMYaLIhtyPxOX7Pr1D9GnAU0OiqH18mIVNCaiuj4t6gpVSbyV DRkpjxyA6iiUgV1AdIOXWSS30xseNXAIwnPpI3KdqqZOl8eB57N5kfybU83qA2i8 lq1ATYMeVjMo1Uw8mGPthzVXSEN3e+em5/d77OdgsPSHNbAwxwd2rlEd1j6d84K5 guiTZ95XWgoAUg50QGhQz7aWAwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCGTk6gZ GipwpRw8ICqr+gL9DurCMB8GA1UdIwQYMBaAFDby5f2GdQM3MLpjOkUAr1UCBZ8M MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5ODNBMi82MUMxQTU3ODZE QkExMUVBOTU2M0NCNjVDNEY5QUUwMi9OdkxsX1laMUF6Y3d1bU02UlFDdlZRSUZu d3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL052TGxfWVoxQXpjd3VtTTZSUUN2VlFJRm53dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 ODNBMi82MUMxQTU3ODZEQkExMUVBOTU2M0NCNjVDNEY5QUUwMi9OdkxsX1laMUF6 Y3d1bU02UlFDdlZRSUZud3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBvkrVCvyRiMUWOHSaPZ8wG83SJpbnB87j0egAABkMm0o0JNZTSX4yL +kNSnK40aXQP62DNEXfdJDOU1U7wJUMcSa1UQ6dEtskX+8wrVuYj/q8lR4ExVvRp KscQiuN56SUsanMZlC5mkoIqM1+BNAOWdUJ0/o41QNpYKkj52Vve5uwd52NPaELD yfjCEcLqLbVNHg9x9VbejgVPOcPAHhnPNv9Ph8L/iP9aegtKisA7CSIb4MskhKsw jlGesgVsBAk+U+mxmrkhJsp2JFldisZn9xrzHfljnBhkzeG7VTD5iqV+k2gWPnSj tRII9isSMMSEVH6qT8TK8AtwtqVK0qiX -----END CERTIFICATE-----Generated at Mon Apr 28 09:14:40 2025 by rpki-client