$ rpki-client -vvf rpki.apnic.net/member_repository/A91AB383/8CC2A9AADE7711EB8739EC11C4F9AE02/nCNR1FqX1x0D1rw4Wzfdm_uAz14.mft File: nCNR1FqX1x0D1rw4Wzfdm_uAz14.mft (raw, json) Hash identifier: cjO/dpqc9wn2J5mmf5dZ16TjeODhaCUB4DCF+VGvlaE= Subject key identifier: 82:CD:81:F2:2C:F7:43:F1:D5:62:A8:B2:24:CB:B8:CA:55:DF:A3:AD Authority key identifier: 9C:23:51:D4:5A:97:D7:1D:03:D6:BC:38:5B:37:DD:9B:FB:80:CF:5E Certificate issuer: /CN=A91AB383/serialNumber=9C2351D45A97D71D03D6BC385B37DD9BFB80CF5E Certificate serial: 058B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nCNR1FqX1x0D1rw4Wzfdm_uAz14.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AB383/8CC2A9AADE7711EB8739EC11C4F9AE02/nCNR1FqX1x0D1rw4Wzfdm_uAz14.mft Manifest number: 0575 Signing time: Thu 24 Apr 2025 23:09:00 +0000 Manifest this update: Thu 24 Apr 2025 23:09:00 +0000 Manifest next update: Thu 01 May 2025 23:09:00 +0000 Files and hashes: 1: nCNR1FqX1x0D1rw4Wzfdm_uAz14.crl (hash: CGxkGicCgkXoK0YZIxCu+nvMkiFeJ4IdJisXZqDHqbQ=) 2: 7AFB859484C711EF9740BE81C4F9AE02.roa (hash: JaP8DbxQir8/0bWtIBOnJ0xxJ2zmG81J8TY5KOYqo20=) 3: BA8EFE48E5D411EFA67E0112C4F9AE02.roa (hash: YM8s+3bT2BEwmeTkM6cVfT4A9yMiZXxziOwMzUAciWo=) 4: 12EDB8D284C711EFA075A16AC4F9AE02.roa (hash: iJ+3fFN0ePrtmOVIDHG94Bkp4m0H5KVuwmeRjgUmL3I=) 5: B5579BEA421911EC832A4A41C4F9AE02.roa (hash: ezrYPRz2mMJqogCAVE9iLagUvmStXqPt/J4TeogUnNU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AB383/8CC2A9AADE7711EB8739EC11C4F9AE02/nCNR1FqX1x0D1rw4Wzfdm_uAz14.crl rsync://rpki.apnic.net/member_repository/A91AB383/8CC2A9AADE7711EB8739EC11C4F9AE02/nCNR1FqX1x0D1rw4Wzfdm_uAz14.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nCNR1FqX1x0D1rw4Wzfdm_uAz14.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 23:08:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1419 (0x58b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AB383, serialNumber=9C2351D45A97D71D03D6BC385B37DD9BFB80CF5E Validity Not Before: Apr 24 23:09:00 2025 GMT Not After : May 1 23:09:00 2025 GMT Subject: CN=680ac48c-9c4d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:f3:ce:12:af:be:b7:08:1f:59:64:a4:da:5f: 7f:b7:21:37:b9:dd:b1:c1:89:dd:6d:27:ce:ca:f1: 75:f4:56:dd:f7:df:42:a2:6d:6c:9e:48:25:31:a1: b4:b9:63:28:09:87:b2:b6:d9:1c:76:4c:8f:5b:4c: 2b:34:48:47:b4:45:5e:90:87:eb:7f:22:68:5b:53: 27:35:45:5a:37:b0:0a:ac:26:32:e1:41:25:44:57: 5e:6e:1e:e6:58:2e:1e:f4:9d:57:2b:b8:aa:1a:28: 7e:8f:e7:78:2f:c6:c9:c0:6e:52:15:a8:88:59:f9: a0:42:45:7f:1c:6a:06:c4:ba:fb:a6:21:08:64:93: 55:d0:8e:58:3e:5e:c3:e2:38:83:d9:ac:fa:97:2b: 2f:c3:e5:3c:6a:a0:e2:f9:8a:64:11:57:2e:ba:77: 45:af:01:f4:31:2d:f3:45:3a:d0:2f:57:71:50:66: d4:60:8e:11:87:ec:f1:db:23:a8:43:f0:f9:98:4a: 0e:be:ca:cd:3f:eb:01:0b:9e:af:12:5f:18:cb:2a: fb:0c:c1:95:f9:c7:a7:b3:d9:36:7a:ae:ef:37:22: a5:58:88:1c:b2:16:97:8c:57:b9:41:5b:f2:cd:73: 62:33:c5:1e:c5:0f:22:73:63:e8:65:2f:8b:80:91: 03:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:CD:81:F2:2C:F7:43:F1:D5:62:A8:B2:24:CB:B8:CA:55:DF:A3:AD X509v3 Authority Key Identifier: keyid:9C:23:51:D4:5A:97:D7:1D:03:D6:BC:38:5B:37:DD:9B:FB:80:CF:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AB383/8CC2A9AADE7711EB8739EC11C4F9AE02/nCNR1FqX1x0D1rw4Wzfdm_uAz14.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nCNR1FqX1x0D1rw4Wzfdm_uAz14.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB383/8CC2A9AADE7711EB8739EC11C4F9AE02/nCNR1FqX1x0D1rw4Wzfdm_uAz14.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ad:b5:5a:9a:68:a6:9e:f8:d7:1b:c6:58:0b:44:4a:d8:94:a3: e2:2c:5b:d6:ba:93:ff:45:24:7a:13:1c:b8:5f:2e:12:0f:b8: a9:67:8c:1c:4e:4c:c1:b6:ca:4c:de:3d:d4:88:39:c3:6b:04: 05:82:ab:3b:05:3c:fb:e6:01:77:6b:39:36:eb:af:d3:e8:b9: 51:22:04:4a:a0:e9:15:81:be:f8:30:f7:5e:cf:1d:03:a7:de: 99:7e:98:a2:73:6e:21:c4:20:23:80:c0:d3:1f:c3:18:99:e8: ec:37:d7:e6:24:34:79:08:8f:a5:77:36:10:bf:fb:54:48:01: 3c:46:bd:0d:63:37:64:b0:ad:5a:14:bd:33:8f:ea:d1:a6:90: 8a:47:0c:05:b3:3c:48:e6:fa:15:33:4b:ac:fc:46:d3:b6:fd: 36:6f:e6:a7:d3:60:79:22:75:b1:9c:fb:4b:66:47:88:d9:6b: 1b:d4:c0:de:99:3e:42:ea:37:c4:28:fc:da:5e:f0:b4:f3:54: 32:d2:d9:37:26:f6:92:5b:9e:40:26:1f:0b:e3:87:60:46:c6: d6:1a:4b:40:e5:d9:0e:5e:f1:99:2b:83:f9:3b:a8:4d:5b:7c: 2a:08:cd:05:06:88:06:ee:5c:8c:23:b7:89:ab:75:dd:d1:53: 71:76:3d:3a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBYswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUIzODMxMTAvBgNVBAUTKDlDMjM1MUQ0NUE5N0Q3MUQwM0Q2QkMzODVCMzdERDlC RkI4MENGNUUwHhcNMjUwNDI0MjMwOTAwWhcNMjUwNTAxMjMwOTAwWjAYMRYwFAYD VQQDEw02ODBhYzQ4Yy05YzRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqfPOEq++twgfWWSk2l9/tyE3ud2xwYndbSfOyvF19Fbd999Com1snkglMaG0 uWMoCYeyttkcdkyPW0wrNEhHtEVekIfrfyJoW1MnNUVaN7AKrCYy4UElRFdebh7m WC4e9J1XK7iqGih+j+d4L8bJwG5SFaiIWfmgQkV/HGoGxLr7piEIZJNV0I5YPl7D 4jiD2az6lysvw+U8aqDi+YpkEVcuundFrwH0MS3zRTrQL1dxUGbUYI4Rh+zx2yOo Q/D5mEoOvsrNP+sBC56vEl8Yyyr7DMGV+cens9k2eq7vNyKlWIgcshaXjFe5QVvy zXNiM8UexQ8ic2PoZS+LgJEDbwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFILNgfIs 90Px1WKosiTLuMpV36OtMB8GA1UdIwQYMBaAFJwjUdRal9cdA9a8OFs33Zv7gM9e MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQjM4My84Q0MyQTlBQURF NzcxMUVCODczOUVDMTFDNEY5QUUwMi9uQ05SMUZxWDF4MEQxcnc0V3pmZG1fdUF6 MTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25DTlIxRnFYMXgwRDFydzRXemZkbV91QXoxNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QjM4My84Q0MyQTlBQURFNzcxMUVCODczOUVDMTFDNEY5QUUwMi9uQ05SMUZxWDF4 MEQxcnc0V3pmZG1fdUF6MTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCttVqaaKae+NcbxlgLRErYlKPiLFvWupP/RSR6Exy4Xy4SD7ipZ4wc TkzBtspM3j3UiDnDawQFgqs7BTz75gF3azk266/T6LlRIgRKoOkVgb74MPdezx0D p96Zfpiic24hxCAjgMDTH8MYmejsN9fmJDR5CI+ldzYQv/tUSAE8Rr0NYzdksK1a FL0zj+rRppCKRwwFszxI5voVM0us/EbTtv02b+an02B5InWxnPtLZkeI2Wsb1MDe mT5C6jfEKPzaXvC081Qy0tk3JvaSW55AJh8L44dgRsbWGktA5dkOXvGZK4P5O6hN W3wqCM0FBogG7lyMI7eJq3Xd0VNxdj06 -----END CERTIFICATE-----Generated at Sat Apr 26 04:20:10 2025 by rpki-client