$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4B39/FEF549E8AF1611EE8C48A74DC4F9AE02/nMiKhtCzfs7o1XZX75l4lTJoDN8.mft File: nMiKhtCzfs7o1XZX75l4lTJoDN8.mft (raw, json) Hash identifier: N1P6A581HBA66Q2vxjopu2d0Ut0Rjf/nWS0bvY5A00k= Subject key identifier: 06:FA:66:21:96:94:13:45:C8:09:9E:F7:90:39:CD:84:FE:22:21:7D Authority key identifier: 9C:C8:8A:86:D0:B3:7E:CE:E8:D5:76:57:EF:99:78:95:32:68:0C:DF Certificate issuer: /CN=A91A4B39/serialNumber=9CC88A86D0B37ECEE8D57657EF99789532680CDF Certificate serial: FD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nMiKhtCzfs7o1XZX75l4lTJoDN8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A4B39/FEF549E8AF1611EE8C48A74DC4F9AE02/nMiKhtCzfs7o1XZX75l4lTJoDN8.mft Manifest number: FA Signing time: Fri 25 Apr 2025 04:18:17 +0000 Manifest this update: Fri 25 Apr 2025 04:18:17 +0000 Manifest next update: Fri 02 May 2025 04:18:17 +0000 Files and hashes: 1: nMiKhtCzfs7o1XZX75l4lTJoDN8.crl (hash: 0Kepi0yiWYS5Y/bA45QwCMmquHPK4xnrN7anrTwXqgg=) 2: AA778F4CAF8A11EEB167DB64C4F9AE02.roa (hash: fgJGtU/PUtSjCXondPTJa4miuZo+FHMCntsgLV0Tifg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A4B39/FEF549E8AF1611EE8C48A74DC4F9AE02/nMiKhtCzfs7o1XZX75l4lTJoDN8.crl rsync://rpki.apnic.net/member_repository/A91A4B39/FEF549E8AF1611EE8C48A74DC4F9AE02/nMiKhtCzfs7o1XZX75l4lTJoDN8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nMiKhtCzfs7o1XZX75l4lTJoDN8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 04:18:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 253 (0xfd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A4B39, serialNumber=9CC88A86D0B37ECEE8D57657EF99789532680CDF Validity Not Before: Apr 25 04:18:17 2025 GMT Not After : May 2 04:18:17 2025 GMT Subject: CN=680b0d09-f048 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:5a:2e:3a:3d:98:35:59:5a:86:d5:bc:6a:96: 02:ae:38:0e:04:02:07:cf:c3:9a:0c:6f:10:a6:90: f1:77:3e:41:b6:08:38:77:f2:1b:22:89:e1:0e:41: 84:f2:24:90:60:7e:a7:b9:c7:7c:da:1f:11:06:9f: d6:21:c5:22:96:43:9a:23:55:b9:6d:1a:9f:ed:ed: df:91:1e:0f:57:5c:a6:f5:b9:73:0a:6c:c4:ce:8e: 5b:d4:65:c9:63:55:eb:3d:44:d7:58:09:cb:44:d7: d6:37:b6:97:27:f8:31:d9:45:16:0f:ed:a9:02:d9: 0b:5f:60:2e:2e:68:23:58:d7:fc:cb:9b:90:8c:44: d2:c8:94:d9:29:d2:00:72:be:ba:32:8c:b5:35:03: 41:9f:6f:91:aa:5a:ed:07:c6:89:ab:2f:7b:53:67: 67:a8:73:68:99:d7:28:32:16:78:ad:e4:af:d5:87: a2:3f:2f:38:7a:9b:e6:a7:03:36:cd:1f:41:9f:cb: 41:42:89:d6:97:ea:7f:d7:39:98:51:dc:41:d0:21: e7:e2:21:4d:d9:98:55:3a:ab:af:59:70:1a:c4:19: b8:37:12:c2:22:66:f7:31:43:a8:ef:a8:e0:c1:86: b9:e9:8c:52:e1:12:02:84:68:56:de:20:93:29:00: cf:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:FA:66:21:96:94:13:45:C8:09:9E:F7:90:39:CD:84:FE:22:21:7D X509v3 Authority Key Identifier: keyid:9C:C8:8A:86:D0:B3:7E:CE:E8:D5:76:57:EF:99:78:95:32:68:0C:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A4B39/FEF549E8AF1611EE8C48A74DC4F9AE02/nMiKhtCzfs7o1XZX75l4lTJoDN8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nMiKhtCzfs7o1XZX75l4lTJoDN8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4B39/FEF549E8AF1611EE8C48A74DC4F9AE02/nMiKhtCzfs7o1XZX75l4lTJoDN8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 81:2d:33:44:86:1a:34:89:75:09:ee:f6:42:5b:5f:97:22:d4: bf:1b:26:8c:30:d0:a8:66:f5:61:5f:d6:9b:e8:f6:f5:f6:51: 20:bd:14:a5:58:59:7a:57:40:9d:ba:f9:eb:fa:2d:06:f5:cc: e5:7e:40:31:c7:07:d3:3b:8e:53:ea:fe:26:a2:96:a9:17:5b: a4:29:45:5e:1d:16:5d:e8:29:d9:7a:67:b0:db:46:54:fc:a5: af:eb:17:67:92:73:ac:bd:58:28:d2:0c:2b:a8:42:e3:9e:49: c5:1d:f8:f0:a1:f2:d8:9d:7c:a7:fe:2b:1f:39:94:0f:48:ed: 96:bc:bb:4b:78:5f:51:9c:14:82:f8:fe:55:9b:de:e5:61:b0: c9:06:af:e3:9b:f7:01:59:0a:ea:71:8a:b1:78:58:d2:7e:ad: 2d:d2:d9:ad:d4:3c:33:45:85:4c:a4:b4:99:3c:f9:9e:36:42: ae:11:68:d5:ba:64:27:41:b4:7f:38:f3:37:5a:69:3b:80:60: 7f:d0:70:fc:b3:04:8b:12:e6:d7:44:af:ee:b2:d1:a0:68:09: bb:f5:26:f8:7d:7a:9b:53:99:9e:51:75:b9:df:60:67:28:f4: 8c:93:a6:b7:c7:d1:91:55:33:2f:4c:9d:5a:7d:5d:75:b5:b8: 3c:e3:12:fe -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAP0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTRCMzkxMTAvBgNVBAUTKDlDQzg4QTg2RDBCMzdFQ0VFOEQ1NzY1N0VGOTk3ODk1 MzI2ODBDREYwHhcNMjUwNDI1MDQxODE3WhcNMjUwNTAyMDQxODE3WjAYMRYwFAYD VQQDEw02ODBiMGQwOS1mMDQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxFouOj2YNVlahtW8apYCrjgOBAIHz8OaDG8QppDxdz5Btgg4d/IbIonhDkGE 8iSQYH6nucd82h8RBp/WIcUilkOaI1W5bRqf7e3fkR4PV1ym9blzCmzEzo5b1GXJ Y1XrPUTXWAnLRNfWN7aXJ/gx2UUWD+2pAtkLX2AuLmgjWNf8y5uQjETSyJTZKdIA cr66Moy1NQNBn2+RqlrtB8aJqy97U2dnqHNomdcoMhZ4reSv1YeiPy84epvmpwM2 zR9Bn8tBQonWl+p/1zmYUdxB0CHn4iFN2ZhVOquvWXAaxBm4NxLCImb3MUOo76jg wYa56YxS4RIChGhW3iCTKQDPTQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAb6ZiGW lBNFyAme95A5zYT+IiF9MB8GA1UdIwQYMBaAFJzIiobQs37O6NV2V++ZeJUyaAzf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNEIzOS9GRUY1NDlFOEFG MTYxMUVFOEM0OEE3NERDNEY5QUUwMi9uTWlLaHRDemZzN28xWFpYNzVsNGxUSm9E TjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25NaUtodEN6ZnM3bzFYWlg3NWw0bFRKb0ROOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NEIzOS9GRUY1NDlFOEFGMTYxMUVFOEM0OEE3NERDNEY5QUUwMi9uTWlLaHRDemZz N28xWFpYNzVsNGxUSm9ETjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCBLTNEhho0iXUJ7vZCW1+XItS/GyaMMNCoZvVhX9ab6Pb19lEgvRSl WFl6V0Cduvnr+i0G9czlfkAxxwfTO45T6v4mopapF1ukKUVeHRZd6CnZemew20ZU /KWv6xdnknOsvVgo0gwrqELjnknFHfjwofLYnXyn/isfOZQPSO2WvLtLeF9RnBSC +P5Vm97lYbDJBq/jm/cBWQrqcYqxeFjSfq0t0tmt1DwzRYVMpLSZPPmeNkKuEWjV umQnQbR/OPM3Wmk7gGB/0HD8swSLEubXRK/ustGgaAm79Sb4fXqbU5meUXW532Bn KPSMk6a3x9GRVTMvTJ1afV11tbg84xL+ -----END CERTIFICATE-----Generated at Sat Apr 26 04:20:53 2025 by rpki-client