$ rpki-client -vvf rpki.apnic.net/member_repository/A91B2EDE/55CB2E041AB411F085DD694AC4F9AE02/nbJYwXCyMilNhj9g0twBI82q54k.mft File: nbJYwXCyMilNhj9g0twBI82q54k.mft (raw, json) Hash identifier: Fahja4HG/mVRd+TrQbdSLCEaPc0wdFlL5kuCGy3+Nic= Subject key identifier: 77:20:1E:4A:3A:D7:13:1D:C5:1A:0F:10:16:85:2D:DD:D1:4D:D8:AD Authority key identifier: 9D:B2:58:C1:70:B2:32:29:4D:86:3F:60:D2:DC:01:23:CD:AA:E7:89 Certificate issuer: /CN=A91B2EDE/serialNumber=9DB258C170B232294D863F60D2DC0123CDAAE789 Certificate serial: 08 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nbJYwXCyMilNhj9g0twBI82q54k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B2EDE/55CB2E041AB411F085DD694AC4F9AE02/nbJYwXCyMilNhj9g0twBI82q54k.mft Manifest number: 07 Signing time: Fri 25 Apr 2025 07:09:43 +0000 Manifest this update: Fri 25 Apr 2025 07:09:42 +0000 Manifest next update: Fri 02 May 2025 07:09:42 +0000 Files and hashes: 1: nbJYwXCyMilNhj9g0twBI82q54k.crl (hash: KRBO87UCCVOKqDr//NmPhYByg41WwDL/WKAihhCw9yw=) 2: 13EB65D41AB511F0A1F0A34BC4F9AE02.roa (hash: iKgDiBxh8hSyzd66755SfVRSPJ3sBmQyaloJnZ/1JF8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B2EDE/55CB2E041AB411F085DD694AC4F9AE02/nbJYwXCyMilNhj9g0twBI82q54k.crl rsync://rpki.apnic.net/member_repository/A91B2EDE/55CB2E041AB411F085DD694AC4F9AE02/nbJYwXCyMilNhj9g0twBI82q54k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nbJYwXCyMilNhj9g0twBI82q54k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 07:09:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8 (0x8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B2EDE, serialNumber=9DB258C170B232294D863F60D2DC0123CDAAE789 Validity Not Before: Apr 25 07:09:42 2025 GMT Not After : May 2 07:09:42 2025 GMT Subject: CN=680b3537-a501 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:01:43:05:01:48:f8:aa:d8:32:2d:46:08:59: 7b:ca:df:4c:c9:6d:3e:07:f1:cc:9e:b5:e8:2c:1a: 55:f6:21:0d:db:2c:eb:56:c4:6d:b2:c0:48:24:5b: 48:e3:12:b3:15:61:66:fb:1c:10:ad:77:00:98:50: 9b:bd:67:6f:11:64:64:76:8d:6c:d3:95:46:4b:36: 4b:3a:24:25:30:e3:42:27:e5:04:e2:4f:36:64:4e: 5a:22:82:ee:21:38:55:aa:c5:26:49:76:c8:9c:77: 92:0a:25:8a:e5:3b:c8:37:1b:5c:35:90:16:10:ca: 8e:a3:3b:15:4c:23:a5:c8:7b:92:62:c8:b4:2f:33: 46:33:45:3b:ba:24:d5:58:9e:ff:7c:1f:ef:0a:5a: bf:d8:7a:0f:c0:4b:29:79:76:73:80:0d:bc:56:ce: 88:21:c3:59:bd:dd:bd:9b:af:c3:fb:16:d4:27:20: 12:5e:05:80:9c:0a:af:1c:12:42:1b:d9:b7:cf:62: 33:b2:5e:6f:16:98:20:13:bb:a4:7f:a9:2e:1b:c7: b8:7e:58:23:9d:6e:46:9b:e6:3d:09:34:63:25:d3: ab:73:16:5b:e5:01:78:e5:dc:ae:ba:07:18:0c:34: e9:bd:ec:fe:52:8d:de:13:88:7d:02:6d:9f:a0:2e: 29:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:20:1E:4A:3A:D7:13:1D:C5:1A:0F:10:16:85:2D:DD:D1:4D:D8:AD X509v3 Authority Key Identifier: keyid:9D:B2:58:C1:70:B2:32:29:4D:86:3F:60:D2:DC:01:23:CD:AA:E7:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B2EDE/55CB2E041AB411F085DD694AC4F9AE02/nbJYwXCyMilNhj9g0twBI82q54k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nbJYwXCyMilNhj9g0twBI82q54k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B2EDE/55CB2E041AB411F085DD694AC4F9AE02/nbJYwXCyMilNhj9g0twBI82q54k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 40:43:f2:8b:c9:25:2c:ec:ac:d9:82:85:e3:1d:65:04:8b:cf: a9:89:ab:c0:68:72:62:da:81:a5:20:de:c7:7d:2f:ad:ea:a5: 96:0b:10:ce:9d:27:10:92:15:93:11:61:d2:b1:a7:63:cc:6c: f6:df:54:ed:13:3c:1a:06:d3:09:cd:3d:07:54:6e:58:71:f9: fc:9d:0e:2f:97:4b:78:f3:bf:8b:c4:46:93:28:9e:7b:72:d2: b8:8b:f9:86:14:d8:80:81:ff:ef:56:99:5d:dc:00:a6:1a:a4: 31:82:6a:59:c8:8c:92:98:18:36:c4:6e:b9:86:cf:0f:d2:b9: 7b:b2:32:47:0b:2c:9d:0a:3b:22:ce:49:5a:4c:64:2f:6b:54: 23:dc:8f:6b:c1:67:62:f5:91:56:e3:65:d6:71:9c:cc:5f:30: 77:f1:61:0b:93:e0:e7:58:eb:5e:36:3c:99:56:ac:0e:d3:ef: 10:c4:8e:d8:d1:21:75:24:e3:30:e8:61:4c:4b:11:af:c4:95: c4:13:48:5d:ac:0d:92:e6:e2:86:eb:9e:59:2e:3a:32:f6:94: 62:6a:14:e5:78:9c:a5:6c:5f:02:4b:c3:37:f6:68:03:a8:d5: 1e:81:27:a5:6a:e3:51:06:ab:5e:e3:d3:f5:21:ba:3a:fa:f7: 45:68:80:e8 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBCDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC MkVERTExMC8GA1UEBRMoOURCMjU4QzE3MEIyMzIyOTREODYzRjYwRDJEQzAxMjND REFBRTc4OTAeFw0yNTA0MjUwNzA5NDJaFw0yNTA1MDIwNzA5NDJaMBgxFjAUBgNV BAMTDTY4MGIzNTM3LWE1MDEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDCAUMFAUj4qtgyLUYIWXvK30zJbT4H8cyetegsGlX2IQ3bLOtWxG2ywEgkW0jj ErMVYWb7HBCtdwCYUJu9Z28RZGR2jWzTlUZLNks6JCUw40In5QTiTzZkTloigu4h OFWqxSZJdsicd5IKJYrlO8g3G1w1kBYQyo6jOxVMI6XIe5JiyLQvM0YzRTu6JNVY nv98H+8KWr/Yeg/ASyl5dnOADbxWzoghw1m93b2br8P7FtQnIBJeBYCcCq8cEkIb 2bfPYjOyXm8WmCATu6R/qS4bx7h+WCOdbkab5j0JNGMl06tzFlvlAXjl3K66BxgM NOm97P5Sjd4TiH0CbZ+gLikpAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUdyAeSjrX Ex3FGg8QFoUt3dFN2K0wHwYDVR0jBBgwFoAUnbJYwXCyMilNhj9g0twBI82q54kw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUIyRURFLzU1Q0IyRTA0MUFC NDExRjA4NURENjk0QUM0RjlBRTAyL25iSll3WEN5TWlsTmhqOWcwdHdCSTgycTU0 ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvbmJKWXdYQ3lNaWxOaGo5ZzB0d0JJODJxNTRrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUIy RURFLzU1Q0IyRTA0MUFCNDExRjA4NURENjk0QUM0RjlBRTAyL25iSll3WEN5TWls TmhqOWcwdHdCSTgycTU0ay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAEBD8ovJJSzsrNmCheMdZQSLz6mJq8BocmLagaUg3sd9L63qpZYLEM6d JxCSFZMRYdKxp2PMbPbfVO0TPBoG0wnNPQdUblhx+fydDi+XS3jzv4vERpMonnty 0riL+YYU2ICB/+9WmV3cAKYapDGCalnIjJKYGDbEbrmGzw/SuXuyMkcLLJ0KOyLO SVpMZC9rVCPcj2vBZ2L1kVbjZdZxnMxfMHfxYQuT4OdY6142PJlWrA7T7xDEjtjR IXUk4zDoYUxLEa/ElcQTSF2sDZLm4obrnlkuOjL2lGJqFOV4nKVsXwJLwzf2aAOo 1R6BJ6Vq41EGq17j0/Uhujr690VogOg= -----END CERTIFICATE-----Generated at Sat Apr 26 05:00:46 2025 by rpki-client