$ rpki-client -vvf rpki.apnic.net/member_repository/A91C6064/52FEF73A297011EB91E9DE54C4F9AE02/NFMkWvnnaQX2mpDxzs2F6og_6hY.mft File: NFMkWvnnaQX2mpDxzs2F6og_6hY.mft (raw, json) Hash identifier: QwMLet6wXc4Vpul5+9G9NchglAIJddi6pJiX4GuSfAI= Subject key identifier: 87:B1:49:B1:8A:B1:93:0B:11:A8:10:73:0E:83:7A:5B:C5:E5:0B:FC Authority key identifier: 34:53:24:5A:F9:E7:69:05:F6:9A:90:F1:CE:CD:85:EA:88:3F:EA:16 Certificate issuer: /CN=A91C6064/serialNumber=3453245AF9E76905F69A90F1CECD85EA883FEA16 Certificate serial: 073A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NFMkWvnnaQX2mpDxzs2F6og_6hY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C6064/52FEF73A297011EB91E9DE54C4F9AE02/NFMkWvnnaQX2mpDxzs2F6og_6hY.mft Manifest number: 0733 Signing time: Thu 24 Apr 2025 21:33:34 +0000 Manifest this update: Thu 24 Apr 2025 21:33:33 +0000 Manifest next update: Thu 01 May 2025 21:33:33 +0000 Files and hashes: 1: NFMkWvnnaQX2mpDxzs2F6og_6hY.crl (hash: VrJrA6REgiPRM67XC8JzVjCesmsU8eEEMdjOzFthLEY=) 2: 0BAA4608297211EB99ECF956C4F9AE02.roa (hash: Pzy/lWlyEAOnnToKQdX1gv5KRRU1QsPgl9JiMWq4wxE=) 3: E9D321CEF2F611EE95E10935C4F9AE02.roa (hash: 0MDsliqtqRrojbtZYNkkZiieXi7syQdv9RVqPyRdcns=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C6064/52FEF73A297011EB91E9DE54C4F9AE02/NFMkWvnnaQX2mpDxzs2F6og_6hY.crl rsync://rpki.apnic.net/member_repository/A91C6064/52FEF73A297011EB91E9DE54C4F9AE02/NFMkWvnnaQX2mpDxzs2F6og_6hY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NFMkWvnnaQX2mpDxzs2F6og_6hY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 21:33:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1850 (0x73a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C6064, serialNumber=3453245AF9E76905F69A90F1CECD85EA883FEA16 Validity Not Before: Apr 24 21:33:33 2025 GMT Not After : May 1 21:33:33 2025 GMT Subject: CN=680aae2d-8fdf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:32:af:04:1e:d5:5f:45:9e:46:5e:6d:09:24: 7e:ba:c7:67:55:c2:91:78:a9:c7:ff:80:f9:9b:dc: cd:d3:44:d9:28:a7:98:c9:c7:e4:aa:af:7b:8c:51: af:b0:c6:3a:ad:73:a6:36:f4:84:8d:fc:a9:fb:1c: 27:71:ba:34:8b:8c:e3:85:a7:c8:ae:76:92:6f:36: 5a:e6:28:19:7b:68:bc:93:1d:51:90:72:b9:93:1d: f1:1e:6f:9f:72:9e:ac:02:9d:fd:3a:9e:67:5d:1a: 8a:36:e5:cf:1f:7d:45:82:c1:e8:da:bc:44:d3:99: 09:e6:d7:e7:30:a6:20:27:49:34:c7:12:a9:02:23: ec:1f:95:a3:be:75:42:ab:00:3e:72:5f:76:0b:e8: 44:d4:1e:46:40:19:80:bb:2a:b4:81:18:dd:3d:76: 0a:a1:d5:50:fe:d1:e5:37:d9:ff:aa:1f:7a:74:5e: 27:7d:2b:e2:b2:4d:eb:d4:8a:19:45:cf:da:2d:97: 2c:5c:ce:0a:97:de:15:d1:64:6e:b6:de:ea:b5:32: 70:a4:20:64:32:bd:f4:19:f6:2d:2c:c5:25:9f:85: b0:b6:79:ae:a9:cf:45:28:f8:dc:4f:68:99:a8:ce: 34:ce:1e:c2:a8:4d:f1:7f:0d:b9:c0:ac:5f:e7:71: d2:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:B1:49:B1:8A:B1:93:0B:11:A8:10:73:0E:83:7A:5B:C5:E5:0B:FC X509v3 Authority Key Identifier: keyid:34:53:24:5A:F9:E7:69:05:F6:9A:90:F1:CE:CD:85:EA:88:3F:EA:16 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C6064/52FEF73A297011EB91E9DE54C4F9AE02/NFMkWvnnaQX2mpDxzs2F6og_6hY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NFMkWvnnaQX2mpDxzs2F6og_6hY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C6064/52FEF73A297011EB91E9DE54C4F9AE02/NFMkWvnnaQX2mpDxzs2F6og_6hY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 11:69:b5:49:9f:8b:9b:5e:07:83:7b:d8:77:84:5c:18:97:81: 33:67:40:1c:d4:51:41:e8:4f:6b:97:62:6e:23:42:07:6d:79: b1:6b:0f:54:64:06:49:c5:c5:4b:ff:b6:6f:f5:60:b1:19:bd: 1d:22:86:a8:0c:d1:37:03:7d:85:4e:5c:3f:bc:1e:f4:86:d9: 4e:da:8e:6d:e4:74:d3:7f:a5:4c:15:8a:82:3a:5f:c0:aa:72: de:a9:6a:bc:9e:7e:ca:1c:e4:5e:c6:8d:f1:07:e9:eb:a7:c7: 5e:86:00:8b:eb:53:ee:06:9a:77:3f:b9:ca:44:e1:95:d3:e0: ff:00:48:50:1e:e3:8e:15:4c:d2:b3:e9:d3:25:63:93:0b:16: 9b:b5:f7:55:fc:6a:15:38:9a:7b:85:d3:b8:7b:df:f2:d9:02: 96:21:c8:27:fd:52:21:3e:7f:db:d8:dc:05:e5:40:34:62:fc: 72:2d:1a:de:8f:97:e9:0f:42:be:b3:f1:a2:5a:e2:14:a5:77: 61:36:f3:71:5b:be:41:2c:7e:bf:86:1b:46:b1:8f:94:7f:26: e1:2d:b8:bb:84:fd:50:b0:ef:d6:b2:0b:25:43:2e:7c:1a:ca: 5f:b2:00:45:f0:d5:eb:6a:54:93:8c:10:e8:fa:b5:8b:4d:b4: 8d:93:83:04 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBzowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzYwNjQxMTAvBgNVBAUTKDM0NTMyNDVBRjlFNzY5MDVGNjlBOTBGMUNFQ0Q4NUVB ODgzRkVBMTYwHhcNMjUwNDI0MjEzMzMzWhcNMjUwNTAxMjEzMzMzWjAYMRYwFAYD VQQDEw02ODBhYWUyZC04ZmRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyTKvBB7VX0WeRl5tCSR+usdnVcKReKnH/4D5m9zN00TZKKeYycfkqq97jFGv sMY6rXOmNvSEjfyp+xwncbo0i4zjhafIrnaSbzZa5igZe2i8kx1RkHK5kx3xHm+f cp6sAp39Op5nXRqKNuXPH31FgsHo2rxE05kJ5tfnMKYgJ0k0xxKpAiPsH5WjvnVC qwA+cl92C+hE1B5GQBmAuyq0gRjdPXYKodVQ/tHlN9n/qh96dF4nfSvisk3r1IoZ Rc/aLZcsXM4Kl94V0WRutt7qtTJwpCBkMr30GfYtLMUln4Wwtnmuqc9FKPjcT2iZ qM40zh7CqE3xfw25wKxf53HSTwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIexSbGK sZMLEagQcw6DelvF5Qv8MB8GA1UdIwQYMBaAFDRTJFr552kF9pqQ8c7NheqIP+oW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNjA2NC81MkZFRjczQTI5 NzAxMUVCOTFFOURFNTRDNEY5QUUwMi9ORk1rV3ZubmFRWDJtcER4enMyRjZvZ182 aFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05GTWtXdm5uYVFYMm1wRHh6czJGNm9nXzZoWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NjA2NC81MkZFRjczQTI5NzAxMUVCOTFFOURFNTRDNEY5QUUwMi9ORk1rV3ZubmFR WDJtcER4enMyRjZvZ182aFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQARabVJn4ubXgeDe9h3hFwYl4EzZ0Ac1FFB6E9rl2JuI0IHbXmxaw9U ZAZJxcVL/7Zv9WCxGb0dIoaoDNE3A32FTlw/vB70htlO2o5t5HTTf6VMFYqCOl/A qnLeqWq8nn7KHORexo3xB+nrp8dehgCL61PuBpp3P7nKROGV0+D/AEhQHuOOFUzS s+nTJWOTCxabtfdV/GoVOJp7hdO4e9/y2QKWIcgn/VIhPn/b2NwF5UA0YvxyLRre j5fpD0K+s/GiWuIUpXdhNvNxW75BLH6/hhtGsY+UfybhLbi7hP1QsO/WsgslQy58 GspfsgBF8NXralSTjBDo+rWLTbSNk4ME -----END CERTIFICATE-----Generated at Sat Apr 26 05:28:33 2025 by rpki-client