$ rpki-client -vvf rpki.apnic.net/member_repository/A91B1F27/F77C109AFBA511ED88D0C96DC4F9AE02/nC3RgnBi24kuOEZaEK_kkWg1wCc.mft File: nC3RgnBi24kuOEZaEK_kkWg1wCc.mft (raw, json) Hash identifier: sDSMveUKpTILLgZNPYINujH5WQv+E2OxejyR+5j8WK0= Subject key identifier: 87:CF:3F:D2:83:23:C7:8B:71:A3:B3:25:9E:E7:CE:45:2B:7B:B4:68 Authority key identifier: 9C:2D:D1:82:70:62:DB:89:2E:38:46:5A:10:AF:E4:91:68:35:C0:27 Certificate issuer: /CN=A91B1F27/serialNumber=9C2DD1827062DB892E38465A10AFE4916835C027 Certificate serial: 016B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nC3RgnBi24kuOEZaEK_kkWg1wCc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B1F27/F77C109AFBA511ED88D0C96DC4F9AE02/nC3RgnBi24kuOEZaEK_kkWg1wCc.mft Manifest number: 0168 Signing time: Fri 25 Apr 2025 03:02:54 +0000 Manifest this update: Fri 25 Apr 2025 03:02:54 +0000 Manifest next update: Fri 02 May 2025 03:02:54 +0000 Files and hashes: 1: nC3RgnBi24kuOEZaEK_kkWg1wCc.crl (hash: 6mFDCvtGQfqPIovHEKFY6qm1qhaYVU5s17TNBMWhCvI=) 2: ED31BA0AFBAE11ED977DEA10C4F9AE02.roa (hash: sZ1Qc0QixkblDQbEZ18gwDagCIypsTqT+SHpNFgumsQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B1F27/F77C109AFBA511ED88D0C96DC4F9AE02/nC3RgnBi24kuOEZaEK_kkWg1wCc.crl rsync://rpki.apnic.net/member_repository/A91B1F27/F77C109AFBA511ED88D0C96DC4F9AE02/nC3RgnBi24kuOEZaEK_kkWg1wCc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nC3RgnBi24kuOEZaEK_kkWg1wCc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 03:02:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 363 (0x16b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B1F27, serialNumber=9C2DD1827062DB892E38465A10AFE4916835C027 Validity Not Before: Apr 25 03:02:54 2025 GMT Not After : May 2 03:02:54 2025 GMT Subject: CN=680afb5e-24ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:2f:c6:37:46:64:db:93:34:1a:4d:e8:93:66: 0e:a0:51:20:64:3a:af:31:bd:24:63:4d:2c:8c:3d: b5:d1:ec:3a:bd:85:96:5f:69:ff:b8:37:a7:ef:ee: 6d:22:eb:3f:2a:b2:99:81:25:97:c4:f8:8c:3e:8a: d1:ca:34:60:7f:e5:00:fd:04:c0:0d:35:19:cc:05: 1e:41:22:7a:50:3a:54:98:41:e0:12:8b:1b:83:ea: 5e:9e:e1:f1:84:ea:76:a4:43:9d:05:81:d4:1a:8a: 98:bf:ae:0e:55:59:07:b9:c8:84:d3:60:d4:25:15: 96:5a:06:a4:9f:6b:91:ae:3c:c4:28:b7:e1:0a:eb: 7a:40:7b:fc:d4:1c:77:9b:9a:9f:76:56:93:df:eb: 9a:ab:e4:59:2e:a2:92:a5:a6:40:cf:b2:48:db:b3: d6:cd:79:5f:fe:c5:5b:4b:45:aa:28:25:b6:fe:27: 79:8e:da:18:84:e5:4c:34:ee:e9:1d:a4:b1:3e:0b: 1b:55:b1:e0:72:bb:c2:5f:23:8f:1b:94:a7:2d:47: 02:de:63:54:55:29:e9:69:55:5a:c3:4b:05:91:95: 72:4f:eb:b5:d6:f8:70:46:f2:c2:1f:4c:5a:bc:02: 32:95:88:e9:77:09:0b:0b:fd:e3:53:2f:68:09:f2: 64:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:CF:3F:D2:83:23:C7:8B:71:A3:B3:25:9E:E7:CE:45:2B:7B:B4:68 X509v3 Authority Key Identifier: keyid:9C:2D:D1:82:70:62:DB:89:2E:38:46:5A:10:AF:E4:91:68:35:C0:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B1F27/F77C109AFBA511ED88D0C96DC4F9AE02/nC3RgnBi24kuOEZaEK_kkWg1wCc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nC3RgnBi24kuOEZaEK_kkWg1wCc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B1F27/F77C109AFBA511ED88D0C96DC4F9AE02/nC3RgnBi24kuOEZaEK_kkWg1wCc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c2:be:d7:2f:ff:f7:8a:c8:66:28:33:dd:7f:a4:7d:9d:6b:fe: 5b:4c:d0:41:93:fd:51:40:43:41:2c:76:3b:86:45:30:de:7c: ff:c0:fe:c2:e4:b2:b5:fd:4c:63:97:07:99:79:d2:9d:be:90: f5:02:db:26:25:9e:aa:05:82:56:ff:19:35:57:2a:ae:52:45: d6:83:63:e3:03:2b:71:83:ca:f6:d1:10:67:7c:5c:69:cb:cb: 91:de:bb:74:0b:23:c5:3f:e5:76:4a:b3:a6:50:bb:29:7e:e3: 36:bf:14:e8:ea:9a:0d:6f:31:b3:0e:5d:b5:d0:01:20:fe:f6: 46:82:c8:3e:27:08:f9:0d:73:21:f6:ea:c7:36:f9:ba:bb:e7: 42:e6:9c:9e:f5:07:e3:f8:f3:16:b7:ef:6b:1a:b1:19:3c:5f: d4:0e:2a:9e:89:0e:14:ec:a5:05:b2:48:93:96:29:6c:ac:83: 16:5f:26:19:e0:64:6a:72:6c:42:dd:f1:9a:fc:dc:a3:19:c9: 7d:fa:e3:88:a9:46:c4:de:ed:85:62:1e:e3:89:40:c2:30:1d: 32:ee:c6:ed:d0:ff:72:15:51:23:33:5f:55:78:35:5e:39:60: ae:33:74:74:de:04:25:03:f5:a9:96:bc:44:82:61:94:8e:69: 49:63:6e:5b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAWswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjFGMjcxMTAvBgNVBAUTKDlDMkREMTgyNzA2MkRCODkyRTM4NDY1QTEwQUZFNDkx NjgzNUMwMjcwHhcNMjUwNDI1MDMwMjU0WhcNMjUwNTAyMDMwMjU0WjAYMRYwFAYD VQQDEw02ODBhZmI1ZS0yNGVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6C/GN0Zk25M0Gk3ok2YOoFEgZDqvMb0kY00sjD210ew6vYWWX2n/uDen7+5t Ius/KrKZgSWXxPiMPorRyjRgf+UA/QTADTUZzAUeQSJ6UDpUmEHgEosbg+penuHx hOp2pEOdBYHUGoqYv64OVVkHuciE02DUJRWWWgakn2uRrjzEKLfhCut6QHv81Bx3 m5qfdlaT3+uaq+RZLqKSpaZAz7JI27PWzXlf/sVbS0WqKCW2/id5jtoYhOVMNO7p HaSxPgsbVbHgcrvCXyOPG5SnLUcC3mNUVSnpaVVaw0sFkZVyT+u11vhwRvLCH0xa vAIylYjpdwkLC/3jUy9oCfJkKQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIfPP9KD I8eLcaOzJZ7nzkUre7RoMB8GA1UdIwQYMBaAFJwt0YJwYtuJLjhGWhCv5JFoNcAn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMUYyNy9GNzdDMTA5QUZC QTUxMUVEODhEMEM5NkRDNEY5QUUwMi9uQzNSZ25CaTI0a3VPRVphRUtfa2tXZzF3 Q2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25DM1JnbkJpMjRrdU9FWmFFS19ra1dnMXdDYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MUYyNy9GNzdDMTA5QUZCQTUxMUVEODhEMEM5NkRDNEY5QUUwMi9uQzNSZ25CaTI0 a3VPRVphRUtfa2tXZzF3Q2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDCvtcv//eKyGYoM91/pH2da/5bTNBBk/1RQENBLHY7hkUw3nz/wP7C 5LK1/UxjlweZedKdvpD1AtsmJZ6qBYJW/xk1VyquUkXWg2PjAytxg8r20RBnfFxp y8uR3rt0CyPFP+V2SrOmULspfuM2vxTo6poNbzGzDl210AEg/vZGgsg+Jwj5DXMh 9urHNvm6u+dC5pye9Qfj+PMWt+9rGrEZPF/UDiqeiQ4U7KUFskiTlilsrIMWXyYZ 4GRqcmxC3fGa/NyjGcl9+uOIqUbE3u2FYh7jiUDCMB0y7sbt0P9yFVEjM19VeDVe OWCuM3R03gQlA/WplrxEgmGUjmlJY25b -----END CERTIFICATE-----Generated at Sat Apr 26 04:22:02 2025 by rpki-client