$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9D5D/DD6F28720A8B11EABCF9CE52C4F9AE02/Ny2TbjjYucsfcBIhn_ghcrkL7lg.mft File: Ny2TbjjYucsfcBIhn_ghcrkL7lg.mft (raw, json) Hash identifier: C33YZqys+W8T5OUWssAiBDWD+nTsNiMPn2XpuL9JsY4= Subject key identifier: A9:FC:65:B3:C2:88:6B:2C:A3:29:B2:30:DB:30:76:9E:38:8E:ED:D5 Authority key identifier: 37:2D:93:6E:38:D8:B9:CB:1F:70:12:21:9F:F8:21:72:B9:0B:EE:58 Certificate issuer: /CN=A91C9D5D/serialNumber=372D936E38D8B9CB1F7012219FF82172B90BEE58 Certificate serial: 0C1B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ny2TbjjYucsfcBIhn_ghcrkL7lg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C9D5D/DD6F28720A8B11EABCF9CE52C4F9AE02/Ny2TbjjYucsfcBIhn_ghcrkL7lg.mft Manifest number: 0C13 Signing time: Thu 24 Apr 2025 18:32:23 +0000 Manifest this update: Thu 24 Apr 2025 18:32:23 +0000 Manifest next update: Thu 01 May 2025 18:32:23 +0000 Files and hashes: 1: Ny2TbjjYucsfcBIhn_ghcrkL7lg.crl (hash: ahdFKZTaj+Xl3/uVOWyeQVpzBEmnsbX5y9PUxewbWBA=) 2: A0E062260A8C11EAB25FD253C4F9AE02.roa (hash: 7xX6rH7i12z21iTWC8vTwBT7bsP1fB8No9Xtvt+ZVCA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C9D5D/DD6F28720A8B11EABCF9CE52C4F9AE02/Ny2TbjjYucsfcBIhn_ghcrkL7lg.crl rsync://rpki.apnic.net/member_repository/A91C9D5D/DD6F28720A8B11EABCF9CE52C4F9AE02/Ny2TbjjYucsfcBIhn_ghcrkL7lg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ny2TbjjYucsfcBIhn_ghcrkL7lg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 18:32:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3099 (0xc1b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C9D5D, serialNumber=372D936E38D8B9CB1F7012219FF82172B90BEE58 Validity Not Before: Apr 24 18:32:23 2025 GMT Not After : May 1 18:32:23 2025 GMT Subject: CN=680a83b7-c85f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:16:5e:45:b4:4f:2f:ea:90:69:05:b2:bf:63: f0:3b:25:c7:c2:3d:36:7c:57:ac:8e:56:37:a6:f3: 22:25:ae:88:88:96:d5:49:1f:5b:d5:94:af:fd:68: 3d:d2:d0:bc:1b:ec:67:13:ca:bb:13:31:67:a6:1c: a8:33:9d:d5:f9:77:f3:bd:ad:82:28:c4:e4:65:ea: 2f:f1:12:ff:f2:0f:d0:0b:85:22:0e:c7:ac:97:c6: 32:ef:c3:9d:26:26:a3:ef:a3:5b:83:fb:d1:09:24: dd:eb:d8:5d:81:aa:98:0c:6e:60:98:65:49:fa:27: d5:24:1d:2d:1a:a9:17:f1:d8:b2:5e:56:c1:d6:b8: a9:2d:11:fb:38:88:76:c8:13:21:63:ed:b6:fc:9f: f1:9b:23:07:47:6c:54:21:c3:80:4c:20:40:99:3d: 14:64:ab:7f:dc:4b:f4:7d:4f:bb:d8:ca:82:8c:b3: b4:fc:c6:6a:c3:b3:c7:67:55:65:e9:04:5c:55:a0: c1:bc:0a:a7:c3:16:bc:f1:50:eb:01:f6:bb:a7:78: 3c:9b:85:55:c8:c4:af:13:55:65:9f:2f:b6:54:bc: cf:40:65:0e:e8:7f:91:01:1e:c6:b3:0e:c4:68:39: 4c:77:5e:39:5e:ba:f5:bf:40:6d:45:1c:5f:0d:56: 82:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:FC:65:B3:C2:88:6B:2C:A3:29:B2:30:DB:30:76:9E:38:8E:ED:D5 X509v3 Authority Key Identifier: keyid:37:2D:93:6E:38:D8:B9:CB:1F:70:12:21:9F:F8:21:72:B9:0B:EE:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C9D5D/DD6F28720A8B11EABCF9CE52C4F9AE02/Ny2TbjjYucsfcBIhn_ghcrkL7lg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ny2TbjjYucsfcBIhn_ghcrkL7lg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9D5D/DD6F28720A8B11EABCF9CE52C4F9AE02/Ny2TbjjYucsfcBIhn_ghcrkL7lg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 44:2b:ec:0a:fe:a9:4e:d0:2b:f8:df:81:96:77:d9:ef:32:b3: 08:7a:f8:2a:ff:76:0b:63:78:46:f5:11:a9:b6:da:c2:2c:18: b4:0c:0a:2b:68:4b:7c:cc:dd:6c:36:c2:91:fe:6d:8c:85:29: b4:2d:4d:e1:38:4c:b6:ce:ca:21:09:27:f4:09:11:ea:50:aa: e6:5a:be:84:34:fc:b4:9a:ee:be:3e:34:a8:29:1f:03:a6:a7: 4c:c5:fe:6a:c8:6d:c2:61:29:a8:13:3e:2d:39:3b:46:bd:1d: a2:a7:e8:64:82:ab:ef:3c:68:a8:9f:dc:bf:31:22:23:1d:15: de:56:00:55:62:3b:8e:71:81:70:d4:3f:99:73:0a:84:fd:85: 50:d8:c0:a9:5a:ef:58:61:f0:f9:1a:6d:e0:6c:bf:b3:e6:29: 38:94:72:b2:29:6a:a2:c6:2b:81:f1:be:34:d7:3d:8b:3e:85: ef:ad:3a:a1:ac:80:89:1e:1f:ed:60:cc:43:c4:d7:f3:9f:5b: 4f:8d:6d:fa:8c:c2:24:0c:7b:8e:c5:71:d5:f1:0f:8d:81:09: 44:0f:b0:3b:f8:cf:5f:21:ae:1c:64:65:2c:07:48:ff:02:ad: c5:bf:82:e3:34:52:9c:e8:16:28:0a:3e:65:27:c4:ce:e8:70: c4:d6:72:36 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDBswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzlENUQxMTAvBgNVBAUTKDM3MkQ5MzZFMzhEOEI5Q0IxRjcwMTIyMTlGRjgyMTcy QjkwQkVFNTgwHhcNMjUwNDI0MTgzMjIzWhcNMjUwNTAxMTgzMjIzWjAYMRYwFAYD VQQDEw02ODBhODNiNy1jODVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzxZeRbRPL+qQaQWyv2PwOyXHwj02fFesjlY3pvMiJa6IiJbVSR9b1ZSv/Wg9 0tC8G+xnE8q7EzFnphyoM53V+Xfzva2CKMTkZeov8RL/8g/QC4UiDsesl8Yy78Od Jiaj76Nbg/vRCSTd69hdgaqYDG5gmGVJ+ifVJB0tGqkX8diyXlbB1ripLRH7OIh2 yBMhY+22/J/xmyMHR2xUIcOATCBAmT0UZKt/3Ev0fU+72MqCjLO0/MZqw7PHZ1Vl 6QRcVaDBvAqnwxa88VDrAfa7p3g8m4VVyMSvE1Vlny+2VLzPQGUO6H+RAR7Gsw7E aDlMd145Xrr1v0BtRRxfDVaClwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKn8ZbPC iGssoymyMNswdp44ju3VMB8GA1UdIwQYMBaAFDctk2442LnLH3ASIZ/4IXK5C+5Y MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOUQ1RC9ERDZGMjg3MjBB OEIxMUVBQkNGOUNFNTJDNEY5QUUwMi9OeTJUYmpqWXVjc2ZjQklobl9naGNya0w3 bGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL055MlRiampZdWNzZmNCSWhuX2doY3JrTDdsZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD OUQ1RC9ERDZGMjg3MjBBOEIxMUVBQkNGOUNFNTJDNEY5QUUwMi9OeTJUYmpqWXVj c2ZjQklobl9naGNya0w3bGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBEK+wK/qlO0Cv434GWd9nvMrMIevgq/3YLY3hG9RGpttrCLBi0DAor aEt8zN1sNsKR/m2MhSm0LU3hOEy2zsohCSf0CRHqUKrmWr6ENPy0mu6+PjSoKR8D pqdMxf5qyG3CYSmoEz4tOTtGvR2ip+hkgqvvPGion9y/MSIjHRXeVgBVYjuOcYFw 1D+ZcwqE/YVQ2MCpWu9YYfD5Gm3gbL+z5ik4lHKyKWqixiuB8b401z2LPoXvrTqh rICJHh/tYMxDxNfzn1tPjW36jMIkDHuOxXHV8Q+NgQlED7A7+M9fIa4cZGUsB0j/ Aq3Fv4LjNFKc6BYoCj5lJ8TO6HDE1nI2 -----END CERTIFICATE-----Generated at Sat Apr 26 04:30:50 2025 by rpki-client