$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9702/EF913D26E3AA11EA88F49560C4F9AE02/nmN2pfKqPix_9VKvuK9Q2sE9Sbc.mft File: nmN2pfKqPix_9VKvuK9Q2sE9Sbc.mft (raw, json) Hash identifier: j0YDf0rxMUjKBqJFDzWiAih0lpErRTx9xKBNDuH7/1Y= Subject key identifier: 6F:10:BD:F3:00:B1:20:B0:41:E2:35:21:F3:32:C2:6B:E7:B0:BF:BD Authority key identifier: 9E:63:76:A5:F2:AA:3E:2C:7F:F5:52:AF:B8:AF:50:DA:C1:3D:49:B7 Certificate issuer: /CN=A91C9702/serialNumber=9E6376A5F2AA3E2C7FF552AFB8AF50DAC13D49B7 Certificate serial: 07ED Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nmN2pfKqPix_9VKvuK9Q2sE9Sbc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C9702/EF913D26E3AA11EA88F49560C4F9AE02/nmN2pfKqPix_9VKvuK9Q2sE9Sbc.mft Manifest number: 07E3 Signing time: Thu 24 Apr 2025 20:49:32 +0000 Manifest this update: Thu 24 Apr 2025 20:49:32 +0000 Manifest next update: Thu 01 May 2025 20:49:32 +0000 Files and hashes: 1: nmN2pfKqPix_9VKvuK9Q2sE9Sbc.crl (hash: k94p6nhZKUqsdv2SzXXTxyv9uSkI7OPyS9gxdBPjfu4=) 2: 0BC9660CE3AC11EAAAC85761C4F9AE02.roa (hash: B/DuXQToKy4NJJ+8lbA6TjX/A2qM6LHM64/A3YRX7ts=) 3: 0C5564C2E3AC11EAAAC85761C4F9AE02.roa (hash: 5FYn5QVSBhm0XZoV+j+o/nzPJ0WO1FJiMFnDtdxaDwM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C9702/EF913D26E3AA11EA88F49560C4F9AE02/nmN2pfKqPix_9VKvuK9Q2sE9Sbc.crl rsync://rpki.apnic.net/member_repository/A91C9702/EF913D26E3AA11EA88F49560C4F9AE02/nmN2pfKqPix_9VKvuK9Q2sE9Sbc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nmN2pfKqPix_9VKvuK9Q2sE9Sbc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 20:49:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2029 (0x7ed) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C9702, serialNumber=9E6376A5F2AA3E2C7FF552AFB8AF50DAC13D49B7 Validity Not Before: Apr 24 20:49:32 2025 GMT Not After : May 1 20:49:32 2025 GMT Subject: CN=680aa3dc-798d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:0b:fe:aa:62:34:4f:17:6d:e2:23:ed:39:fe: 72:c9:b8:b2:d1:23:2c:98:cd:58:d9:32:94:2b:ce: 00:9a:b7:59:25:15:c7:76:57:ac:9f:6a:ce:40:b4: 30:28:56:02:f7:e3:e4:dd:72:18:6f:42:23:f4:3f: 48:00:c0:42:52:3d:7d:50:d8:65:05:5f:38:3a:f3: 3f:e9:de:0d:82:3e:8b:2b:b8:7e:b6:da:70:10:9c: ef:3b:31:6c:98:68:4c:b4:e2:30:0a:76:7d:fd:ea: 32:f3:0f:3d:ee:28:08:60:fa:14:a5:69:8d:dd:2e: fe:5b:3d:a7:7e:9f:c3:33:d2:b4:fc:2f:38:52:0c: 92:47:14:e2:5d:a5:a8:6e:40:90:46:de:40:46:7b: db:a6:4f:f4:d7:0f:86:ce:ce:d6:99:05:2b:d5:f6: fa:5b:e5:7a:ed:54:15:08:98:08:b7:b6:f8:45:bf: 45:20:d8:c7:ac:97:fb:c1:1c:c6:d8:cd:08:ed:47: b6:78:f5:08:a6:7b:9a:d3:84:ea:5e:4f:71:e2:25: 82:89:04:1a:66:39:74:34:c1:64:0f:1a:76:63:a1: ce:81:36:2f:4e:1c:5a:81:48:d8:ae:36:b0:21:bc: ac:7b:f8:b6:6e:f4:36:c7:dd:3e:72:5b:f5:61:21: bf:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:10:BD:F3:00:B1:20:B0:41:E2:35:21:F3:32:C2:6B:E7:B0:BF:BD X509v3 Authority Key Identifier: keyid:9E:63:76:A5:F2:AA:3E:2C:7F:F5:52:AF:B8:AF:50:DA:C1:3D:49:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C9702/EF913D26E3AA11EA88F49560C4F9AE02/nmN2pfKqPix_9VKvuK9Q2sE9Sbc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nmN2pfKqPix_9VKvuK9Q2sE9Sbc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9702/EF913D26E3AA11EA88F49560C4F9AE02/nmN2pfKqPix_9VKvuK9Q2sE9Sbc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 35:7e:c6:8a:bc:71:a2:6d:cb:5a:a1:71:29:51:b7:a2:73:92: f8:cf:7d:bc:9e:be:18:d5:53:e1:3a:6b:e1:2b:60:23:18:30: 48:09:64:bc:6d:7f:b6:a1:ea:7c:60:72:2f:4c:6d:b4:71:75: 13:44:55:b2:80:7d:df:e2:e0:5e:a3:98:88:fa:59:28:b8:7f: 35:b5:cf:f0:56:de:5f:30:a4:bf:47:6d:0b:eb:90:70:aa:c1: ae:67:45:fc:fd:bc:19:92:a6:c6:43:70:63:58:14:ad:b8:9a: c2:65:bb:74:1f:7c:12:fc:b3:cf:3b:b4:e2:e2:42:b6:72:06: fc:79:2e:cc:2d:8f:5e:10:a7:47:00:0e:90:46:1b:a6:a8:e6: ef:d6:1e:35:57:99:53:0f:12:c7:eb:e8:54:1c:c3:5b:8d:5a: 6a:e2:40:da:a9:3a:2b:cc:84:54:c3:69:6d:3d:62:0d:48:59: 2d:cd:19:f0:9d:0d:bc:cc:ee:d6:32:60:02:1d:8f:95:db:dc: f3:bf:97:0e:2a:34:bb:7a:38:ec:f8:19:68:01:75:95:51:50: 9d:48:e0:f3:82:c4:10:2e:d6:62:b2:d2:34:08:0e:54:ae:68: 70:54:12:ed:1f:0f:03:0c:ae:51:9a:58:5d:6f:2c:ae:b5:ad: 94:27:fc:5f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB+0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qzk3MDIxMTAvBgNVBAUTKDlFNjM3NkE1RjJBQTNFMkM3RkY1NTJBRkI4QUY1MERB QzEzRDQ5QjcwHhcNMjUwNDI0MjA0OTMyWhcNMjUwNTAxMjA0OTMyWjAYMRYwFAYD VQQDEw02ODBhYTNkYy03OThkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwQv+qmI0Txdt4iPtOf5yybiy0SMsmM1Y2TKUK84AmrdZJRXHdlesn2rOQLQw KFYC9+Pk3XIYb0Ij9D9IAMBCUj19UNhlBV84OvM/6d4Ngj6LK7h+ttpwEJzvOzFs mGhMtOIwCnZ9/eoy8w897igIYPoUpWmN3S7+Wz2nfp/DM9K0/C84UgySRxTiXaWo bkCQRt5ARnvbpk/01w+Gzs7WmQUr1fb6W+V67VQVCJgIt7b4Rb9FINjHrJf7wRzG 2M0I7Ue2ePUIpnua04TqXk9x4iWCiQQaZjl0NMFkDxp2Y6HOgTYvThxagUjYrjaw Ibyse/i2bvQ2x90+clv1YSG/jQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG8QvfMA sSCwQeI1IfMywmvnsL+9MB8GA1UdIwQYMBaAFJ5jdqXyqj4sf/VSr7ivUNrBPUm3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOTcwMi9FRjkxM0QyNkUz QUExMUVBODhGNDk1NjBDNEY5QUUwMi9ubU4ycGZLcVBpeF85Vkt2dUs5UTJzRTlT YmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25tTjJwZktxUGl4XzlWS3Z1SzlRMnNFOVNiYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD OTcwMi9FRjkxM0QyNkUzQUExMUVBODhGNDk1NjBDNEY5QUUwMi9ubU4ycGZLcVBp eF85Vkt2dUs5UTJzRTlTYmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA1fsaKvHGibctaoXEpUbeic5L4z328nr4Y1VPhOmvhK2AjGDBICWS8 bX+2oep8YHIvTG20cXUTRFWygH3f4uBeo5iI+lkouH81tc/wVt5fMKS/R20L65Bw qsGuZ0X8/bwZkqbGQ3BjWBStuJrCZbt0H3wS/LPPO7Ti4kK2cgb8eS7MLY9eEKdH AA6QRhumqObv1h41V5lTDxLH6+hUHMNbjVpq4kDaqTorzIRUw2ltPWINSFktzRnw nQ28zO7WMmACHY+V29zzv5cOKjS7ejjs+BloAXWVUVCdSODzgsQQLtZistI0CA5U rmhwVBLtHw8DDK5Rmlhdbyyuta2UJ/xf -----END CERTIFICATE-----Generated at Sat Apr 26 03:42:18 2025 by rpki-client