$ rpki-client -vvf rpki.apnic.net/member_repository/A91B190F/BFA96FAA7BEC11EF999FBC19C4F9AE02/nGj0A_AkAXvdJtbdDSAnpAK58oE.mft File: nGj0A_AkAXvdJtbdDSAnpAK58oE.mft (raw, json) Hash identifier: r+kqxIBnOFVq7qMY9pP/iLSmThSeHH0qqkjptnh1wMc= Subject key identifier: 57:45:E6:69:14:71:08:68:0D:8A:72:41:48:8E:7B:F8:65:95:41:F3 Authority key identifier: 9C:68:F4:03:F0:24:01:7B:DD:26:D6:DD:0D:20:27:A4:02:B9:F2:81 Certificate issuer: /CN=A91B190F/serialNumber=9C68F403F024017BDD26D6DD0D2027A402B9F281 Certificate serial: 6F Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nGj0A_AkAXvdJtbdDSAnpAK58oE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B190F/BFA96FAA7BEC11EF999FBC19C4F9AE02/nGj0A_AkAXvdJtbdDSAnpAK58oE.mft Manifest number: 6E Signing time: Fri 25 Apr 2025 05:51:45 +0000 Manifest this update: Fri 25 Apr 2025 05:51:44 +0000 Manifest next update: Fri 02 May 2025 05:51:44 +0000 Files and hashes: 1: nGj0A_AkAXvdJtbdDSAnpAK58oE.crl (hash: akHfh7f9e9+01DIPuQ4fv+GR89/ilszB3uubnsrDsCQ=) 2: 262A51D67BED11EF9BAF751AC4F9AE02.roa (hash: Se4X5BCi6S9clBdJBFWLU+YP4g35YhqfcEGf60R+i8s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B190F/BFA96FAA7BEC11EF999FBC19C4F9AE02/nGj0A_AkAXvdJtbdDSAnpAK58oE.crl rsync://rpki.apnic.net/member_repository/A91B190F/BFA96FAA7BEC11EF999FBC19C4F9AE02/nGj0A_AkAXvdJtbdDSAnpAK58oE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nGj0A_AkAXvdJtbdDSAnpAK58oE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 05:51:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 111 (0x6f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B190F, serialNumber=9C68F403F024017BDD26D6DD0D2027A402B9F281 Validity Not Before: Apr 25 05:51:44 2025 GMT Not After : May 2 05:51:44 2025 GMT Subject: CN=680b22f1-e34e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:1d:c4:56:fc:98:a0:93:35:3e:42:79:ad:b8: d0:ad:41:1f:5e:7b:d7:67:43:37:a5:cf:b0:b6:ca: 3a:a1:1d:c7:b7:a5:15:fc:5b:aa:cd:1d:53:97:b6: d5:00:e1:95:f7:4e:e3:af:d1:9e:57:24:f2:05:ed: c9:b3:36:6e:9b:69:0c:99:5f:20:f0:8a:2e:81:56: ad:e1:71:de:81:64:07:70:88:aa:8e:67:ca:d2:3a: 06:cb:0c:64:f0:78:3b:ab:89:cb:ac:bd:48:56:e4: 10:3d:9c:59:db:ca:3f:18:cd:c6:98:4c:1b:16:f6: be:fc:0c:72:86:f1:ea:30:8f:43:bc:09:88:56:db: 64:9a:29:d8:63:98:2c:63:6d:c0:24:ab:12:a9:49: 9f:a7:0a:a8:e1:86:82:f0:e5:8a:88:22:5a:ab:67: 0c:0f:4b:62:a7:1b:b7:a0:72:6f:8d:44:fc:e3:cd: b4:49:a7:bd:10:85:23:ad:3e:40:ef:e2:49:07:97: 55:b7:80:ec:31:c5:f5:f6:5a:43:52:ef:36:d2:4e: 30:44:15:2f:12:fe:a9:86:fc:98:2b:1c:4b:66:66: 90:ad:58:be:06:1e:79:14:f7:65:74:28:bc:51:65: 5d:ca:e1:9b:59:d0:06:ec:80:f2:8b:e4:37:b8:3b: f6:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:45:E6:69:14:71:08:68:0D:8A:72:41:48:8E:7B:F8:65:95:41:F3 X509v3 Authority Key Identifier: keyid:9C:68:F4:03:F0:24:01:7B:DD:26:D6:DD:0D:20:27:A4:02:B9:F2:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B190F/BFA96FAA7BEC11EF999FBC19C4F9AE02/nGj0A_AkAXvdJtbdDSAnpAK58oE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nGj0A_AkAXvdJtbdDSAnpAK58oE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B190F/BFA96FAA7BEC11EF999FBC19C4F9AE02/nGj0A_AkAXvdJtbdDSAnpAK58oE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1a:f3:3f:88:cb:c9:92:5c:e8:df:84:f0:51:00:8c:7d:8f:05: 9a:4d:aa:52:54:a9:af:85:b3:6c:40:ef:24:89:a6:b2:01:90: 00:ca:3e:cd:cf:45:9e:e2:a7:76:d1:22:60:ff:c7:3d:6a:0c: 4e:5c:e0:8d:e5:87:4b:25:fb:49:94:3e:49:29:91:fd:1e:80: f4:4b:1d:3f:e3:c8:c3:58:51:82:bb:f4:17:bf:20:df:27:78: a8:00:5f:97:2e:8f:12:8e:8e:4f:87:a7:55:7a:8d:c1:15:a5: fd:e9:50:1e:87:db:2c:3d:f7:5d:26:80:dc:aa:9c:98:ea:52: cd:94:8f:38:51:70:4d:de:50:42:58:84:d6:68:8a:2a:f8:be: 55:1f:d9:94:5c:ca:6b:a7:29:15:cb:2d:e7:da:80:57:e1:6b: b0:31:a5:8f:7f:72:19:00:d4:b9:a6:e2:78:8e:02:8a:e6:4d: 9c:f0:77:4e:04:b5:e8:9f:85:8d:3e:f2:00:5f:5f:68:a6:e2: 98:7d:97:89:58:15:4a:2b:f4:00:ce:70:02:ac:5d:4b:83:de: d9:21:df:a0:c6:9b:80:b6:a3:32:c0:c4:7c:f6:37:5a:9b:eb: 7d:4c:0b:c6:47:46:55:b2:05:7a:35:4d:05:f6:d4:c6:ab:c9: 63:d4:eb:3f -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBbzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC MTkwRjExMC8GA1UEBRMoOUM2OEY0MDNGMDI0MDE3QkREMjZENkREMEQyMDI3QTQw MkI5RjI4MTAeFw0yNTA0MjUwNTUxNDRaFw0yNTA1MDIwNTUxNDRaMBgxFjAUBgNV BAMTDTY4MGIyMmYxLWUzNGUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDJHcRW/JigkzU+QnmtuNCtQR9ee9dnQzelz7C2yjqhHce3pRX8W6rNHVOXttUA 4ZX3TuOv0Z5XJPIF7cmzNm6baQyZXyDwii6BVq3hcd6BZAdwiKqOZ8rSOgbLDGTw eDuricusvUhW5BA9nFnbyj8YzcaYTBsW9r78DHKG8eowj0O8CYhW22SaKdhjmCxj bcAkqxKpSZ+nCqjhhoLw5YqIIlqrZwwPS2KnG7egcm+NRPzjzbRJp70QhSOtPkDv 4kkHl1W3gOwxxfX2WkNS7zbSTjBEFS8S/qmG/JgrHEtmZpCtWL4GHnkU92V0KLxR ZV3K4ZtZ0AbsgPKL5De4O/bbAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUV0XmaRRx CGgNinJBSI57+GWVQfMwHwYDVR0jBBgwFoAUnGj0A/AkAXvdJtbdDSAnpAK58oEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUIxOTBGL0JGQTk2RkFBN0JF QzExRUY5OTlGQkMxOUM0RjlBRTAyL25HajBBX0FrQVh2ZEp0YmREU0FucEFLNThv RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvbkdqMEFfQWtBWHZkSnRiZERTQW5wQUs1OG9FLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUIx OTBGL0JGQTk2RkFBN0JFQzExRUY5OTlGQkMxOUM0RjlBRTAyL25HajBBX0FrQVh2 ZEp0YmREU0FucEFLNThvRS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBABrzP4jLyZJc6N+E8FEAjH2PBZpNqlJUqa+Fs2xA7ySJprIBkADKPs3P RZ7ip3bRImD/xz1qDE5c4I3lh0sl+0mUPkkpkf0egPRLHT/jyMNYUYK79Be/IN8n eKgAX5cujxKOjk+Hp1V6jcEVpf3pUB6H2yw9910mgNyqnJjqUs2UjzhRcE3eUEJY hNZoiir4vlUf2ZRcymunKRXLLefagFfha7AxpY9/chkA1Lmm4niOAormTZzwd04E teifhY0+8gBfX2im4ph9l4lYFUor9ADOcAKsXUuD3tkh36DGm4C2ozLAxHz2N1qb 631MC8ZHRlWyBXo1TQX21MaryWPU6z8= -----END CERTIFICATE-----Generated at Sat Apr 26 14:10:52 2025 by rpki-client