$ rpki-client -vvf rpki.apnic.net/member_repository/A91B9385/73CF676A8A0B11EAA2964C0BC4F9AE02/Nb-dxVNaaDq2lad4JnhtPfnixbQ.mft File: Nb-dxVNaaDq2lad4JnhtPfnixbQ.mft (raw, json) Hash identifier: 0hS9C1BRwLZMD4eQQNfxus5Uws6n/nDJQ0GSVgjOlJQ= Subject key identifier: B8:B5:E6:0E:D5:A2:32:14:59:BC:86:21:E9:73:CB:BA:D7:14:59:CD Authority key identifier: 35:BF:9D:C5:53:5A:68:3A:B6:95:A7:78:26:78:6D:3D:F9:E2:C5:B4 Certificate issuer: /CN=A91B9385/serialNumber=35BF9DC5535A683AB695A77826786D3DF9E2C5B4 Certificate serial: 098A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nb-dxVNaaDq2lad4JnhtPfnixbQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B9385/73CF676A8A0B11EAA2964C0BC4F9AE02/Nb-dxVNaaDq2lad4JnhtPfnixbQ.mft Manifest number: 0984 Signing time: Thu 24 Apr 2025 19:59:56 +0000 Manifest this update: Thu 24 Apr 2025 19:59:56 +0000 Manifest next update: Thu 01 May 2025 19:59:56 +0000 Files and hashes: 1: Nb-dxVNaaDq2lad4JnhtPfnixbQ.crl (hash: lzQcf/YVt4IcVXXCyKtix1xjmVQh0DmQwzpGMUD8Xis=) 2: 5197AD868A0D11EAA9BA2E0FC4F9AE02.roa (hash: AMJQ1+Gi+Yyv8xwV6R2XZnBmrwaFZwHHnnFnkWB/QsY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B9385/73CF676A8A0B11EAA2964C0BC4F9AE02/Nb-dxVNaaDq2lad4JnhtPfnixbQ.crl rsync://rpki.apnic.net/member_repository/A91B9385/73CF676A8A0B11EAA2964C0BC4F9AE02/Nb-dxVNaaDq2lad4JnhtPfnixbQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nb-dxVNaaDq2lad4JnhtPfnixbQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 19:59:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2442 (0x98a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B9385, serialNumber=35BF9DC5535A683AB695A77826786D3DF9E2C5B4 Validity Not Before: Apr 24 19:59:56 2025 GMT Not After : May 1 19:59:56 2025 GMT Subject: CN=680a983c-bf54 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:c3:4f:e8:64:bf:e1:41:32:00:dc:7c:d6:8b: a7:f6:f4:bc:9a:be:e0:d6:47:42:f4:f8:bb:69:0b: e0:80:52:3d:84:71:d2:17:2d:e3:43:a4:bb:aa:fd: 5c:9d:46:30:e7:9e:1d:0b:2a:95:41:45:7a:7f:67: 69:70:56:2d:08:7f:c2:0a:02:b4:e8:2c:9b:04:cd: b0:60:8f:4f:a7:41:fc:cf:a3:77:61:d8:08:91:07: 14:b5:84:c7:1a:41:96:03:8b:94:e7:f6:5f:70:08: ce:a8:6f:24:27:e7:42:c7:84:40:c6:5f:7b:f4:77: 1c:1e:e1:00:1e:33:37:04:89:33:dd:37:a4:18:11: e9:e6:2b:c9:2e:9a:c6:71:92:66:6f:0b:25:ac:de: 13:0b:5d:e1:3c:24:13:6f:b3:18:1c:df:2e:9e:73: ee:26:5b:21:68:b9:c1:48:e3:91:d0:82:77:be:81: bb:f4:a8:29:53:3e:54:8a:ae:a2:85:66:d0:47:25: 78:49:84:69:dc:86:97:e5:5c:b9:17:72:59:92:b0: 1d:5e:b2:8e:5c:15:14:27:0f:9d:fd:9c:9e:63:48: 92:16:cc:eb:bd:c0:2a:fb:a3:e0:56:c3:86:a0:a5: a8:d8:38:73:7f:9c:f5:ab:0b:9f:60:50:3b:0f:81: 38:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:B5:E6:0E:D5:A2:32:14:59:BC:86:21:E9:73:CB:BA:D7:14:59:CD X509v3 Authority Key Identifier: keyid:35:BF:9D:C5:53:5A:68:3A:B6:95:A7:78:26:78:6D:3D:F9:E2:C5:B4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B9385/73CF676A8A0B11EAA2964C0BC4F9AE02/Nb-dxVNaaDq2lad4JnhtPfnixbQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nb-dxVNaaDq2lad4JnhtPfnixbQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B9385/73CF676A8A0B11EAA2964C0BC4F9AE02/Nb-dxVNaaDq2lad4JnhtPfnixbQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 52:3d:c0:99:e1:09:45:81:c8:c6:b5:d0:1e:23:9a:50:59:05: c6:97:f4:79:7f:3d:c3:27:d6:10:b9:85:c4:78:f1:d7:fb:0f: 5c:af:65:8b:40:1b:5d:47:4d:a2:91:18:97:8e:cb:40:a6:0a: 69:7b:9e:d5:f3:fa:6c:75:b8:a5:7b:5d:c1:8b:5d:42:20:0d: 7a:24:4d:08:4f:19:02:95:ef:f2:e2:f9:a8:2b:bb:a3:15:41: c7:1f:04:2e:b9:ac:c1:3c:44:ab:10:7e:7e:9b:0b:b5:69:48: 98:1d:e9:24:0b:ec:1a:68:9b:39:3b:4a:7e:d0:66:ea:09:2a: 63:d3:69:af:26:f0:31:dc:44:ef:8d:ed:56:29:ab:5c:1f:d4: e5:d6:78:77:e1:ab:6a:f4:3a:8c:01:58:ee:5e:d3:1f:e4:7c: cd:5a:9b:57:37:d8:ca:d3:19:ac:70:23:3e:d5:66:cc:0e:95: cc:a3:20:8b:53:16:f6:6b:3c:9f:d8:72:b0:19:16:8c:0f:e1: 95:18:b1:86:a7:2f:8f:97:79:ee:d1:c8:df:74:73:a7:bb:ba: 25:3c:b9:2e:1f:ea:78:6e:53:aa:97:b6:20:39:34:71:8b:f8: 07:8d:ee:12:bd:1a:ea:bf:21:e2:45:ee:9e:28:f7:ff:73:96: 5d:c8:95:f1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCYowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjkzODUxMTAvBgNVBAUTKDM1QkY5REM1NTM1QTY4M0FCNjk1QTc3ODI2Nzg2RDNE RjlFMkM1QjQwHhcNMjUwNDI0MTk1OTU2WhcNMjUwNTAxMTk1OTU2WjAYMRYwFAYD VQQDEw02ODBhOTgzYy1iZjU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA78NP6GS/4UEyANx81oun9vS8mr7g1kdC9Pi7aQvggFI9hHHSFy3jQ6S7qv1c nUYw554dCyqVQUV6f2dpcFYtCH/CCgK06CybBM2wYI9Pp0H8z6N3YdgIkQcUtYTH GkGWA4uU5/ZfcAjOqG8kJ+dCx4RAxl979HccHuEAHjM3BIkz3TekGBHp5ivJLprG cZJmbwslrN4TC13hPCQTb7MYHN8unnPuJlshaLnBSOOR0IJ3voG79KgpUz5Uiq6i hWbQRyV4SYRp3IaX5Vy5F3JZkrAdXrKOXBUUJw+d/ZyeY0iSFszrvcAq+6PgVsOG oKWo2Dhzf5z1qwufYFA7D4E49QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLi15g7V ojIUWbyGIelzy7rXFFnNMB8GA1UdIwQYMBaAFDW/ncVTWmg6tpWneCZ4bT354sW0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOTM4NS83M0NGNjc2QThB MEIxMUVBQTI5NjRDMEJDNEY5QUUwMi9OYi1keFZOYWFEcTJsYWQ0Sm5odFBmbml4 YlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05iLWR4Vk5hYURxMmxhZDRKbmh0UGZuaXhiUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC OTM4NS83M0NGNjc2QThBMEIxMUVBQTI5NjRDMEJDNEY5QUUwMi9OYi1keFZOYWFE cTJsYWQ0Sm5odFBmbml4YlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBSPcCZ4QlFgcjGtdAeI5pQWQXGl/R5fz3DJ9YQuYXEePHX+w9cr2WL QBtdR02ikRiXjstApgppe57V8/psdbile13Bi11CIA16JE0ITxkCle/y4vmoK7uj FUHHHwQuuazBPESrEH5+mwu1aUiYHekkC+waaJs5O0p+0GbqCSpj02mvJvAx3ETv je1WKatcH9Tl1nh34atq9DqMAVjuXtMf5HzNWptXN9jK0xmscCM+1WbMDpXMoyCL Uxb2azyf2HKwGRaMD+GVGLGGpy+Pl3nu0cjfdHOnu7olPLkuH+p4blOql7YgOTRx i/gHje4SvRrqvyHiRe6eKPf/c5ZdyJXx -----END CERTIFICATE-----Generated at Sat Apr 26 13:49:07 2025 by rpki-client