$ rpki-client -vvf rpki.apnic.net/member_repository/A91C6CAF/F3E0FAE4B6F411EEAC203810C4F9AE02/nwLaOrX7RTF1B8SAIc4Ki5NyVck.mft File: nwLaOrX7RTF1B8SAIc4Ki5NyVck.mft (raw, json) Hash identifier: JCDFsVVt7PZGOOB6yhDQrvitZWv2OqzipqSxKLFPwFk= Subject key identifier: 7A:5D:6E:E7:B9:71:9E:1B:36:FE:0A:37:C4:6D:C4:71:AC:45:DD:9D Authority key identifier: 9F:02:DA:3A:B5:FB:45:31:75:07:C4:80:21:CE:0A:8B:93:72:55:C9 Certificate issuer: /CN=A91C6CAF/serialNumber=9F02DA3AB5FB45317507C48021CE0A8B937255C9 Certificate serial: 0103 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nwLaOrX7RTF1B8SAIc4Ki5NyVck.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C6CAF/F3E0FAE4B6F411EEAC203810C4F9AE02/nwLaOrX7RTF1B8SAIc4Ki5NyVck.mft Manifest number: F9 Signing time: Fri 25 Apr 2025 04:22:59 +0000 Manifest this update: Fri 25 Apr 2025 04:22:59 +0000 Manifest next update: Fri 02 May 2025 04:22:59 +0000 Files and hashes: 1: nwLaOrX7RTF1B8SAIc4Ki5NyVck.crl (hash: vFSlmL9JByLHV9GoJBiK9oZCE9FMWt6Fc83SU73bFj0=) 2: 09E42D1E921B11EF829E0041C4F9AE02.roa (hash: B4bx9kA0p4n5ASz52WYMBOS7rU+I5DT2fmWjDq/qssM=) 3: 51E59058921B11EFB656CB41C4F9AE02.roa (hash: ZDrCMxxOwwuqNF0Q4xD3EvKSvIiYcNvuSOn5SbIs2mk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C6CAF/F3E0FAE4B6F411EEAC203810C4F9AE02/nwLaOrX7RTF1B8SAIc4Ki5NyVck.crl rsync://rpki.apnic.net/member_repository/A91C6CAF/F3E0FAE4B6F411EEAC203810C4F9AE02/nwLaOrX7RTF1B8SAIc4Ki5NyVck.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nwLaOrX7RTF1B8SAIc4Ki5NyVck.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 04:22:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 259 (0x103) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C6CAF, serialNumber=9F02DA3AB5FB45317507C48021CE0A8B937255C9 Validity Not Before: Apr 25 04:22:59 2025 GMT Not After : May 2 04:22:59 2025 GMT Subject: CN=680b0e23-28f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:dc:21:99:9e:ec:25:ec:96:45:b1:99:dd:fa: de:5a:e2:13:2e:4e:ad:dd:46:e1:f0:6a:4b:52:75: 90:c4:c9:b1:a9:33:c4:a3:3e:8c:6c:8a:bd:bf:44: c9:2a:83:17:6b:0b:57:a5:09:be:3c:d0:cb:53:90: 7e:d1:7c:fa:73:e2:99:64:cd:5f:49:83:09:ea:1c: 02:2a:9b:35:04:8f:5a:de:1e:f5:5c:46:83:0d:31: 39:c3:f8:30:49:9b:f3:1b:1d:c0:bc:82:88:c9:35: ce:78:f6:8c:75:43:2a:4d:03:0e:a0:c7:8d:f0:33: dd:dd:71:00:16:35:d1:84:40:4b:61:d6:3e:2c:da: 78:7e:cb:45:dd:4a:ff:40:31:7a:c5:01:55:ca:86: 6c:f6:c2:80:8b:55:f0:43:40:42:d6:73:63:21:f6: 91:cc:3f:c4:c6:0f:c4:4b:ff:5b:69:73:89:8d:87: d6:40:35:72:2d:74:70:6c:f5:71:ca:93:7f:c4:8f: 04:d8:45:1f:28:ef:cc:37:41:68:3a:b5:ed:58:34: 72:74:17:15:1e:26:71:33:55:6a:f5:f3:9b:80:e8: 7b:81:62:12:9f:7c:f1:cf:e2:9f:6b:8c:f8:c9:66: c6:ca:42:86:d2:b8:04:c5:93:36:75:d6:a7:b9:8e: 93:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:5D:6E:E7:B9:71:9E:1B:36:FE:0A:37:C4:6D:C4:71:AC:45:DD:9D X509v3 Authority Key Identifier: keyid:9F:02:DA:3A:B5:FB:45:31:75:07:C4:80:21:CE:0A:8B:93:72:55:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C6CAF/F3E0FAE4B6F411EEAC203810C4F9AE02/nwLaOrX7RTF1B8SAIc4Ki5NyVck.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nwLaOrX7RTF1B8SAIc4Ki5NyVck.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C6CAF/F3E0FAE4B6F411EEAC203810C4F9AE02/nwLaOrX7RTF1B8SAIc4Ki5NyVck.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b4:01:dd:4b:95:41:15:84:d1:0c:31:8c:36:73:4a:19:ad:27: ff:71:22:bd:14:eb:20:d8:c6:4a:26:01:75:c8:bf:b2:e7:08: 76:63:88:d9:e5:12:82:f7:37:b8:bb:62:fc:9a:e4:ce:fe:1d: 29:ac:24:3a:e6:e1:06:00:ab:74:c3:d3:c8:77:02:68:6d:42: 73:65:46:19:e8:13:de:28:81:2b:3e:a0:4e:0b:8a:be:5c:e4: fb:19:57:e0:c7:66:e9:9a:84:77:7b:56:f5:17:68:7e:bc:0e: 9a:20:3a:21:dc:11:e0:d8:53:21:9e:68:e5:70:64:e3:25:71: 67:bf:44:2f:f2:24:a9:1d:1d:79:ff:5d:6f:3b:1d:02:d4:39: 30:8c:9a:62:d1:cf:44:1c:c4:65:25:b1:c4:2c:e3:b7:2f:01: 60:1a:0a:dd:02:0b:2c:d4:14:01:d7:94:8a:73:a5:31:83:f8: f2:cd:50:66:5a:f7:b2:11:dc:70:6a:58:76:53:17:2d:af:4e: 8b:e1:67:1a:37:9e:ea:a0:2b:bc:eb:c8:a9:23:d0:1e:eb:78: 1c:67:15:d2:31:a4:c8:f4:d9:8c:cc:aa:2e:4a:46:ce:44:66: 72:8e:c9:c3:61:ba:1b:5d:a1:56:7a:19:2e:36:fd:db:b2:56: ff:58:a2:9b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzZDQUYxMTAvBgNVBAUTKDlGMDJEQTNBQjVGQjQ1MzE3NTA3QzQ4MDIxQ0UwQThC OTM3MjU1QzkwHhcNMjUwNDI1MDQyMjU5WhcNMjUwNTAyMDQyMjU5WjAYMRYwFAYD VQQDEw02ODBiMGUyMy0yOGY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA29whmZ7sJeyWRbGZ3freWuITLk6t3Ubh8GpLUnWQxMmxqTPEoz6MbIq9v0TJ KoMXawtXpQm+PNDLU5B+0Xz6c+KZZM1fSYMJ6hwCKps1BI9a3h71XEaDDTE5w/gw SZvzGx3AvIKIyTXOePaMdUMqTQMOoMeN8DPd3XEAFjXRhEBLYdY+LNp4fstF3Ur/ QDF6xQFVyoZs9sKAi1XwQ0BC1nNjIfaRzD/Exg/ES/9baXOJjYfWQDVyLXRwbPVx ypN/xI8E2EUfKO/MN0FoOrXtWDRydBcVHiZxM1Vq9fObgOh7gWISn3zxz+Kfa4z4 yWbGykKG0rgExZM2ddanuY6TxwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHpdbue5 cZ4bNv4KN8RtxHGsRd2dMB8GA1UdIwQYMBaAFJ8C2jq1+0UxdQfEgCHOCouTclXJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNkNBRi9GM0UwRkFFNEI2 RjQxMUVFQUMyMDM4MTBDNEY5QUUwMi9ud0xhT3JYN1JURjFCOFNBSWM0S2k1TnlW Y2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL253TGFPclg3UlRGMUI4U0FJYzRLaTVOeVZjay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NkNBRi9GM0UwRkFFNEI2RjQxMUVFQUMyMDM4MTBDNEY5QUUwMi9ud0xhT3JYN1JU RjFCOFNBSWM0S2k1TnlWY2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC0Ad1LlUEVhNEMMYw2c0oZrSf/cSK9FOsg2MZKJgF1yL+y5wh2Y4jZ 5RKC9ze4u2L8muTO/h0prCQ65uEGAKt0w9PIdwJobUJzZUYZ6BPeKIErPqBOC4q+ XOT7GVfgx2bpmoR3e1b1F2h+vA6aIDoh3BHg2FMhnmjlcGTjJXFnv0Qv8iSpHR15 /11vOx0C1DkwjJpi0c9EHMRlJbHELOO3LwFgGgrdAgss1BQB15SKc6Uxg/jyzVBm WveyEdxwalh2Uxctr06L4WcaN57qoCu868ipI9Ae63gcZxXSMaTI9NmMzKouSkbO RGZyjsnDYbobXaFWehkuNv3bslb/WKKb -----END CERTIFICATE-----Generated at Sat Apr 26 17:02:45 2025 by rpki-client