$ rpki-client -vvf rpki.apnic.net/member_repository/A91C456F/D33FC82AA08411EC94AD2A37C4F9AE02/N6CiG7WFEffv59KwRIPtgLSgIzo.mft File: N6CiG7WFEffv59KwRIPtgLSgIzo.mft (raw, json) Hash identifier: qtc0lbod8PnHSorrx+YhRsuP1T7ckOBACwKPnEx8QEc= Subject key identifier: 31:33:AB:30:B3:A4:84:19:96:38:CD:3F:B0:14:9C:4C:B1:6F:57:83 Authority key identifier: 37:A0:A2:1B:B5:85:11:F7:EF:E7:D2:B0:44:83:ED:80:B4:A0:23:3A Certificate issuer: /CN=A91C456F/serialNumber=37A0A21BB58511F7EFE7D2B04483ED80B4A0233A Certificate serial: 0380 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N6CiG7WFEffv59KwRIPtgLSgIzo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C456F/D33FC82AA08411EC94AD2A37C4F9AE02/N6CiG7WFEffv59KwRIPtgLSgIzo.mft Manifest number: 037C Signing time: Fri 25 Apr 2025 00:40:08 +0000 Manifest this update: Fri 25 Apr 2025 00:40:07 +0000 Manifest next update: Fri 02 May 2025 00:40:07 +0000 Files and hashes: 1: N6CiG7WFEffv59KwRIPtgLSgIzo.crl (hash: rZTNnMkkXWscK2aHnaRsrCkdLZfJygIUgl5rE8IcsfA=) 2: AF95CCA0A08711EC88A88D39C4F9AE02.roa (hash: f88t3B3XEIrStaMOLBEX51aBDTSHx6vviz1RmYW+1Aw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C456F/D33FC82AA08411EC94AD2A37C4F9AE02/N6CiG7WFEffv59KwRIPtgLSgIzo.crl rsync://rpki.apnic.net/member_repository/A91C456F/D33FC82AA08411EC94AD2A37C4F9AE02/N6CiG7WFEffv59KwRIPtgLSgIzo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N6CiG7WFEffv59KwRIPtgLSgIzo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 00:40:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 896 (0x380) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C456F, serialNumber=37A0A21BB58511F7EFE7D2B04483ED80B4A0233A Validity Not Before: Apr 25 00:40:07 2025 GMT Not After : May 2 00:40:07 2025 GMT Subject: CN=680ad9e8-d36f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:ec:16:6a:ca:ae:d8:d9:ec:11:66:c7:7a:36: 01:a3:35:4d:a2:0f:db:aa:9c:47:f2:d2:e7:08:48: f4:46:94:94:68:20:8f:14:a6:50:62:46:43:fd:54: df:0d:8b:39:61:9d:d9:4d:c0:6f:17:14:b7:26:c5: 7a:f5:36:2e:d3:e3:7c:2e:f7:6c:92:d4:03:df:94: 3e:48:aa:71:60:e8:34:93:b8:d9:a6:08:ee:80:d2: 81:2e:5a:79:4d:1a:c3:28:b3:24:d1:12:64:27:bf: f1:87:17:a5:60:01:b1:13:59:23:0f:fe:e4:37:45: d0:66:fa:43:29:f2:bb:e8:18:af:bc:cd:25:6d:34: 77:06:bd:e7:25:ea:63:c8:10:4a:f1:ab:24:fd:f0: 9c:ce:24:8f:d0:8c:d5:43:6a:73:13:0a:7d:19:56: d8:26:82:85:0f:7b:5c:81:df:d5:81:e1:8d:dc:77: aa:9c:a4:65:96:1c:3c:68:5d:00:3a:90:e2:bd:26: a4:ed:f8:26:7e:19:e1:88:8c:f5:ac:b1:cd:4f:e5: bf:a7:a1:eb:7f:e6:67:27:ed:3f:98:91:cf:20:c7: fc:d6:27:83:d7:f9:b5:cc:88:4f:85:99:c3:27:a2: bc:73:5a:f9:7a:1d:05:0f:3d:61:10:61:00:de:87: 66:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:33:AB:30:B3:A4:84:19:96:38:CD:3F:B0:14:9C:4C:B1:6F:57:83 X509v3 Authority Key Identifier: keyid:37:A0:A2:1B:B5:85:11:F7:EF:E7:D2:B0:44:83:ED:80:B4:A0:23:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C456F/D33FC82AA08411EC94AD2A37C4F9AE02/N6CiG7WFEffv59KwRIPtgLSgIzo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N6CiG7WFEffv59KwRIPtgLSgIzo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C456F/D33FC82AA08411EC94AD2A37C4F9AE02/N6CiG7WFEffv59KwRIPtgLSgIzo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a1:94:30:7e:10:af:5e:87:1f:1e:12:c3:78:f9:47:0d:0b:34: fd:b5:88:54:9b:e6:c8:29:0e:a5:4f:c3:93:bc:54:41:e2:63: 3a:f7:8d:c4:ac:59:9d:2f:78:e7:7c:8b:e8:fc:a3:c3:c3:1e: 37:89:01:a0:06:a7:70:15:12:1f:62:f1:ab:32:3b:32:9a:aa: ea:cd:0f:a6:58:e0:ff:0c:10:b3:28:45:3a:fb:9a:0c:a7:b7: 67:74:a2:70:ea:15:f2:73:f5:a0:33:ac:5c:7f:f2:46:4d:eb: 60:6f:98:d7:31:9c:aa:02:03:1b:f8:60:da:00:8b:af:5a:8c: 52:4b:93:bf:d5:19:00:d1:94:1a:d8:fd:fe:13:69:b4:0e:a0: 6c:0f:75:a2:ef:17:72:23:62:36:e6:cb:e0:74:a3:4b:f6:ee: 0b:2f:e1:13:3d:f6:14:6b:8c:5d:40:6a:43:3c:02:44:f5:de: 4c:6d:46:b4:62:86:fc:8d:09:94:d6:3c:82:59:ba:ef:6d:eb: 53:23:0b:52:ab:94:f2:0c:f3:e1:d8:b1:46:92:ab:bb:cd:d8: b3:c9:7c:5a:a0:f8:a8:86:32:3c:e2:bd:81:5f:75:c9:5f:be: bb:c6:4f:77:af:5b:6e:53:b8:fa:dd:c7:e6:43:65:9d:30:39: 55:d5:2e:b7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA4AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzQ1NkYxMTAvBgNVBAUTKDM3QTBBMjFCQjU4NTExRjdFRkU3RDJCMDQ0ODNFRDgw QjRBMDIzM0EwHhcNMjUwNDI1MDA0MDA3WhcNMjUwNTAyMDA0MDA3WjAYMRYwFAYD VQQDEw02ODBhZDllOC1kMzZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuuwWasqu2NnsEWbHejYBozVNog/bqpxH8tLnCEj0RpSUaCCPFKZQYkZD/VTf DYs5YZ3ZTcBvFxS3JsV69TYu0+N8LvdsktQD35Q+SKpxYOg0k7jZpgjugNKBLlp5 TRrDKLMk0RJkJ7/xhxelYAGxE1kjD/7kN0XQZvpDKfK76BivvM0lbTR3Br3nJepj yBBK8ask/fCcziSP0IzVQ2pzEwp9GVbYJoKFD3tcgd/VgeGN3HeqnKRllhw8aF0A OpDivSak7fgmfhnhiIz1rLHNT+W/p6Hrf+ZnJ+0/mJHPIMf81ieD1/m1zIhPhZnD J6K8c1r5eh0FDz1hEGEA3odmVQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDEzqzCz pIQZljjNP7AUnEyxb1eDMB8GA1UdIwQYMBaAFDegohu1hRH37+fSsESD7YC0oCM6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNDU2Ri9EMzNGQzgyQUEw ODQxMUVDOTRBRDJBMzdDNEY5QUUwMi9ONkNpRzdXRkVmZnY1OUt3UklQdGdMU2dJ em8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL042Q2lHN1dGRWZmdjU5S3dSSVB0Z0xTZ0l6by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NDU2Ri9EMzNGQzgyQUEwODQxMUVDOTRBRDJBMzdDNEY5QUUwMi9ONkNpRzdXRkVm ZnY1OUt3UklQdGdMU2dJem8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQChlDB+EK9ehx8eEsN4+UcNCzT9tYhUm+bIKQ6lT8OTvFRB4mM6943E rFmdL3jnfIvo/KPDwx43iQGgBqdwFRIfYvGrMjsymqrqzQ+mWOD/DBCzKEU6+5oM p7dndKJw6hXyc/WgM6xcf/JGTetgb5jXMZyqAgMb+GDaAIuvWoxSS5O/1RkA0ZQa 2P3+E2m0DqBsD3Wi7xdyI2I25svgdKNL9u4LL+ETPfYUa4xdQGpDPAJE9d5MbUa0 Yob8jQmU1jyCWbrvbetTIwtSq5TyDPPh2LFGkqu7zdizyXxaoPiohjI84r2BX3XJ X767xk93r1tuU7j63cfmQ2WdMDlV1S63 -----END CERTIFICATE-----Generated at Sat Apr 26 04:19:09 2025 by rpki-client