$ rpki-client -vvf rpki.apnic.net/member_repository/A919D656/93CB77AE6ACB11ED9B633B39C4F9AE02/Nhu6lAj6GbXpfYLN2_-y55u7oz8.mft File: Nhu6lAj6GbXpfYLN2_-y55u7oz8.mft (raw, json) Hash identifier: xiRyRHiKTR87vOp+b+jixqNtxoUfhW5qLW7yQIUjRhE= Subject key identifier: 75:6D:21:23:9D:DB:53:EE:72:37:40:77:AA:FD:FC:3F:AE:37:A3:5D Authority key identifier: 36:1B:BA:94:08:FA:19:B5:E9:7D:82:CD:DB:FF:B2:E7:9B:BB:A3:3F Certificate issuer: /CN=A919D656/serialNumber=361BBA9408FA19B5E97D82CDDBFFB2E79BBBA33F Certificate serial: 01CD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nhu6lAj6GbXpfYLN2_-y55u7oz8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919D656/93CB77AE6ACB11ED9B633B39C4F9AE02/Nhu6lAj6GbXpfYLN2_-y55u7oz8.mft Manifest number: 01C8 Signing time: Fri 25 Apr 2025 02:06:42 +0000 Manifest this update: Fri 25 Apr 2025 02:06:42 +0000 Manifest next update: Fri 02 May 2025 02:06:42 +0000 Files and hashes: 1: Nhu6lAj6GbXpfYLN2_-y55u7oz8.crl (hash: dXCUAZ7rrZfh0HoZKI+sVzmSns8m+3NlnZVsfvod2a0=) 2: 00FFAB766ACF11EDBCC28E3CC4F9AE02.roa (hash: XpTSLigO4HKKd3j+0vvg/u/YVC83XW6OinlRQSFc3LQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919D656/93CB77AE6ACB11ED9B633B39C4F9AE02/Nhu6lAj6GbXpfYLN2_-y55u7oz8.crl rsync://rpki.apnic.net/member_repository/A919D656/93CB77AE6ACB11ED9B633B39C4F9AE02/Nhu6lAj6GbXpfYLN2_-y55u7oz8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nhu6lAj6GbXpfYLN2_-y55u7oz8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 02:06:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 461 (0x1cd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919D656, serialNumber=361BBA9408FA19B5E97D82CDDBFFB2E79BBBA33F Validity Not Before: Apr 25 02:06:42 2025 GMT Not After : May 2 02:06:42 2025 GMT Subject: CN=680aee32-6863 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:fd:af:b8:2b:c2:0a:98:57:19:40:1e:90:14: ce:96:2c:64:e8:f2:9a:87:f4:cf:68:9b:0a:37:f8: 4a:28:a8:87:ac:78:b2:02:81:06:63:2d:24:84:7b: 61:ec:72:cd:26:73:9f:7a:7d:88:75:71:ca:4a:56: fa:75:db:9e:f8:a6:d7:86:7e:d8:7d:80:38:79:59: 69:9a:a6:37:a9:85:3b:b3:18:b9:4f:75:fa:4d:35: 98:d4:df:42:0e:32:cc:4b:14:0c:98:22:fc:e7:02: ea:08:86:e4:d7:b0:84:a8:50:1a:12:92:f4:95:77: 91:d8:4d:da:19:80:ff:7c:b6:cc:a2:38:dc:cb:ac: 7e:0b:ca:d4:ea:6d:6b:90:f7:29:d0:14:ed:a6:06: be:60:e6:8f:12:c2:ff:56:05:5c:89:77:e5:3e:54: d5:5a:12:8d:eb:50:1c:73:c0:fd:b1:46:8b:b7:a9: e8:37:4b:2a:2e:e3:36:b8:6e:fe:4b:ca:e3:d5:dd: 45:85:64:6f:59:3b:30:87:6b:31:d5:3d:88:30:13: 59:51:5e:11:54:e7:b3:76:37:b6:c4:f8:c7:8b:5c: da:7a:da:3f:de:38:27:24:fe:8f:83:ff:14:fc:8b: 1e:d4:c2:73:70:e2:61:65:4d:68:60:cf:c3:95:5f: 4d:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:6D:21:23:9D:DB:53:EE:72:37:40:77:AA:FD:FC:3F:AE:37:A3:5D X509v3 Authority Key Identifier: keyid:36:1B:BA:94:08:FA:19:B5:E9:7D:82:CD:DB:FF:B2:E7:9B:BB:A3:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919D656/93CB77AE6ACB11ED9B633B39C4F9AE02/Nhu6lAj6GbXpfYLN2_-y55u7oz8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nhu6lAj6GbXpfYLN2_-y55u7oz8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919D656/93CB77AE6ACB11ED9B633B39C4F9AE02/Nhu6lAj6GbXpfYLN2_-y55u7oz8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5f:c2:65:3f:4b:03:8e:6a:9b:68:57:ea:27:44:4f:21:90:9b: a2:13:89:38:1a:0f:c4:e3:f4:86:77:38:97:41:bc:f0:e5:54: 1d:44:e8:46:72:5d:c3:ff:70:8f:76:9c:44:6c:5a:60:9a:1b: 29:04:f4:0e:02:61:91:01:0a:b4:05:36:10:54:f7:a8:14:fb: 81:b6:24:8b:4c:53:fe:98:c0:89:99:86:15:23:4d:97:3c:b3: 6b:33:08:8f:c5:aa:9c:65:ff:a6:f6:37:c8:cf:a1:f1:31:d1: e6:c3:fa:e6:fe:56:25:13:0b:37:32:93:28:93:56:ea:50:8b: 79:4f:c2:24:55:9b:0f:76:44:7b:fb:13:de:9f:df:42:52:82: cc:92:b8:ad:d9:29:1d:c6:7d:c7:33:72:96:04:27:49:d6:8d: f8:54:97:d5:94:7f:0a:b6:75:a4:d9:19:c1:46:48:ea:b2:7e: 86:9e:d3:49:29:87:4f:11:33:8f:af:05:2e:0b:71:9c:15:b1: 5c:1a:01:0c:36:98:f5:67:8c:2a:d0:ab:01:d5:3f:6e:4d:e8: f4:05:b5:65:8b:fe:aa:97:85:9d:ef:72:49:3d:2b:00:36:fd: cc:9c:a4:dc:d8:a5:37:3e:c9:2f:83:ed:ed:34:7c:05:95:b2: fe:76:7e:4f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAc0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUQ2NTYxMTAvBgNVBAUTKDM2MUJCQTk0MDhGQTE5QjVFOTdEODJDRERCRkZCMkU3 OUJCQkEzM0YwHhcNMjUwNDI1MDIwNjQyWhcNMjUwNTAyMDIwNjQyWjAYMRYwFAYD VQQDEw02ODBhZWUzMi02ODYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnv2vuCvCCphXGUAekBTOlixk6PKah/TPaJsKN/hKKKiHrHiyAoEGYy0khHth 7HLNJnOfen2IdXHKSlb6ddue+KbXhn7YfYA4eVlpmqY3qYU7sxi5T3X6TTWY1N9C DjLMSxQMmCL85wLqCIbk17CEqFAaEpL0lXeR2E3aGYD/fLbMojjcy6x+C8rU6m1r kPcp0BTtpga+YOaPEsL/VgVciXflPlTVWhKN61Acc8D9sUaLt6noN0sqLuM2uG7+ S8rj1d1FhWRvWTswh2sx1T2IMBNZUV4RVOezdje2xPjHi1zaeto/3jgnJP6Pg/8U /Ise1MJzcOJhZU1oYM/DlV9NwQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHVtISOd 21PucjdAd6r9/D+uN6NdMB8GA1UdIwQYMBaAFDYbupQI+hm16X2Czdv/suebu6M/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RDY1Ni85M0NCNzdBRTZB Q0IxMUVEOUI2MzNCMzlDNEY5QUUwMi9OaHU2bEFqNkdiWHBmWUxOMl8teTU1dTdv ejguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05odTZsQWo2R2JYcGZZTE4yXy15NTV1N296OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RDY1Ni85M0NCNzdBRTZBQ0IxMUVEOUI2MzNCMzlDNEY5QUUwMi9OaHU2bEFqNkdi WHBmWUxOMl8teTU1dTdvejgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBfwmU/SwOOaptoV+onRE8hkJuiE4k4Gg/E4/SGdziXQbzw5VQdROhG cl3D/3CPdpxEbFpgmhspBPQOAmGRAQq0BTYQVPeoFPuBtiSLTFP+mMCJmYYVI02X PLNrMwiPxaqcZf+m9jfIz6HxMdHmw/rm/lYlEws3MpMok1bqUIt5T8IkVZsPdkR7 +xPen99CUoLMkrit2Skdxn3HM3KWBCdJ1o34VJfVlH8KtnWk2RnBRkjqsn6GntNJ KYdPETOPrwUuC3GcFbFcGgEMNpj1Z4wq0KsB1T9uTej0BbVli/6ql4Wd73JJPSsA Nv3MnKTc2KU3Pskvg+3tNHwFlbL+dn5P -----END CERTIFICATE-----Generated at Sat Apr 26 13:11:48 2025 by rpki-client