$ rpki-client -vvf rpki.apnic.net/member_repository/A91CAA4E/55E9795AA94F11E8AA0C900EC4F9AE02/nE_-Zd6jUjPTnocCI4VlV03tRm4.mft File: nE_-Zd6jUjPTnocCI4VlV03tRm4.mft (raw, json) Hash identifier: YQ3jriECCsr3lcEKWUv8WVhEfAwWzH8Cs1RpmfHcHR8= Subject key identifier: 08:D5:EC:9A:77:3C:06:20:8E:F6:FF:12:94:D4:5C:C3:E2:BD:BB:1E Authority key identifier: 9C:4F:FE:65:DE:A3:52:33:D3:9E:87:02:23:85:65:57:4D:ED:46:6E Certificate issuer: /CN=A91CAA4E/serialNumber=9C4FFE65DEA35233D39E8702238565574DED466E Certificate serial: 0714 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nE_-Zd6jUjPTnocCI4VlV03tRm4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CAA4E/55E9795AA94F11E8AA0C900EC4F9AE02/nE_-Zd6jUjPTnocCI4VlV03tRm4.mft Manifest number: 1A22 Signing time: Thu 24 Apr 2025 17:02:43 +0000 Manifest this update: Thu 24 Apr 2025 17:02:42 +0000 Manifest next update: Thu 01 May 2025 17:02:42 +0000 Files and hashes: 1: nE_-Zd6jUjPTnocCI4VlV03tRm4.crl (hash: PjxdHOIm7zWTH8tjsz4mznyMtGb6n4eML8OUEVlYchY=) 2: FFFE92D29CE611EE883A672FC4F9AE02.roa (hash: GWwckZ18h6sa8xUJU0MBnoisjDnt082CFlW4eSRU0Y4=) 3: 653DCD9ADEE811EF9DE2374CC4F9AE02.roa (hash: Mazx36+KDEkICPeaUfwJ/FcwJ2wGDeNl/2eEhKXlMWc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CAA4E/55E9795AA94F11E8AA0C900EC4F9AE02/nE_-Zd6jUjPTnocCI4VlV03tRm4.crl rsync://rpki.apnic.net/member_repository/A91CAA4E/55E9795AA94F11E8AA0C900EC4F9AE02/nE_-Zd6jUjPTnocCI4VlV03tRm4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nE_-Zd6jUjPTnocCI4VlV03tRm4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 17:02:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1812 (0x714) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CAA4E, serialNumber=9C4FFE65DEA35233D39E8702238565574DED466E Validity Not Before: Apr 24 17:02:42 2025 GMT Not After : May 1 17:02:42 2025 GMT Subject: CN=680a6eb2-487a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:16:c9:db:7b:24:fa:8d:65:a5:2f:d5:24:02: b8:d8:d0:5d:1d:35:b7:a8:25:13:9b:f7:07:94:d1: 56:4a:db:ed:5e:a7:67:83:e2:60:9c:7a:74:ac:fc: f6:b8:90:47:17:2e:53:8c:61:a0:db:56:13:97:34: a2:d8:d7:d3:d4:57:3e:3d:ce:95:24:81:dd:19:54: 82:47:b7:fd:63:86:5b:33:27:a7:6c:c4:e0:c7:17: c3:62:44:d5:00:bd:79:8c:f8:ce:b1:e1:ee:f0:4f: bd:61:24:1e:7d:d8:f1:09:8a:3e:e6:18:95:d3:dd: 6e:cd:97:3b:53:29:6c:57:1b:10:e5:9d:3d:f0:26: a2:e5:0b:e4:e8:43:fb:53:a4:a5:63:ef:de:90:85: 13:15:c7:d1:07:dd:ef:4e:e1:b2:27:a5:2a:ad:07: dc:c1:f2:bc:93:46:df:87:7d:00:5c:b5:bc:84:dd: 08:9f:f8:c7:d0:57:dd:ba:3a:e1:d7:c7:8c:f1:0b: f4:39:ea:7a:0b:6b:36:93:7e:61:02:85:44:0b:82: c0:27:60:3d:b4:40:0e:06:4f:a0:33:a0:37:ec:f1: ba:db:bd:c5:20:37:24:b9:f0:d0:1f:65:cd:d4:fe: 1c:69:64:8d:34:6a:b1:6a:1a:53:1b:0f:8e:be:8a: da:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:D5:EC:9A:77:3C:06:20:8E:F6:FF:12:94:D4:5C:C3:E2:BD:BB:1E X509v3 Authority Key Identifier: keyid:9C:4F:FE:65:DE:A3:52:33:D3:9E:87:02:23:85:65:57:4D:ED:46:6E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CAA4E/55E9795AA94F11E8AA0C900EC4F9AE02/nE_-Zd6jUjPTnocCI4VlV03tRm4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nE_-Zd6jUjPTnocCI4VlV03tRm4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CAA4E/55E9795AA94F11E8AA0C900EC4F9AE02/nE_-Zd6jUjPTnocCI4VlV03tRm4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 18:4a:11:67:aa:b3:a4:41:4c:3b:23:b5:14:b6:80:a4:3b:9c: fc:01:df:92:0c:d8:de:ad:b5:b7:b4:cd:90:66:6e:1e:48:7c: bb:d2:38:74:3c:2c:2f:4c:4c:9b:6a:d9:f4:3b:52:16:ae:35: 1f:06:12:c5:99:b9:d9:9d:6d:09:37:63:8b:0e:ad:00:f5:e3: 2b:c9:26:72:3d:dd:b2:1d:93:92:ff:94:93:97:81:3d:7c:21: 87:5c:7c:95:db:5b:d5:6b:5a:6a:8f:24:5c:83:89:b0:5f:e1: b6:a8:98:33:23:9c:6d:8f:9b:6b:fe:fc:61:8a:b3:f7:aa:19: 60:1a:de:27:66:fb:23:b0:5c:71:e4:0c:44:95:61:85:48:20: ac:ee:3e:84:3d:5a:c8:3b:6d:6f:4a:b6:c9:b9:e5:ac:18:cb: 81:9a:c9:ef:81:0d:2c:d5:21:d8:1c:6f:85:7a:e5:0d:e6:1b: f5:53:9b:b1:41:77:b1:d1:0f:7a:52:26:19:27:7d:55:42:e1: a6:f6:4c:08:83:8f:39:0c:f8:39:cd:a5:90:19:7a:75:5a:85: da:05:a8:6c:61:89:17:c7:2c:c1:5c:da:a6:ff:d1:25:0d:48: 58:15:da:85:78:3b:1d:cd:20:86:ec:35:3f:55:39:7b:2d:f3: 7d:71:ee:14 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBxQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0FBNEUxMTAvBgNVBAUTKDlDNEZGRTY1REVBMzUyMzNEMzlFODcwMjIzODU2NTU3 NERFRDQ2NkUwHhcNMjUwNDI0MTcwMjQyWhcNMjUwNTAxMTcwMjQyWjAYMRYwFAYD VQQDEw02ODBhNmViMi00ODdhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArhbJ23sk+o1lpS/VJAK42NBdHTW3qCUTm/cHlNFWStvtXqdng+JgnHp0rPz2 uJBHFy5TjGGg21YTlzSi2NfT1Fc+Pc6VJIHdGVSCR7f9Y4ZbMyenbMTgxxfDYkTV AL15jPjOseHu8E+9YSQefdjxCYo+5hiV091uzZc7UylsVxsQ5Z098Cai5Qvk6EP7 U6SlY+/ekIUTFcfRB93vTuGyJ6UqrQfcwfK8k0bfh30AXLW8hN0In/jH0Ffdujrh 18eM8Qv0Oep6C2s2k35hAoVEC4LAJ2A9tEAOBk+gM6A37PG6273FIDckufDQH2XN 1P4caWSNNGqxahpTGw+OvoraCwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAjV7Jp3 PAYgjvb/EpTUXMPivbseMB8GA1UdIwQYMBaAFJxP/mXeo1Iz056HAiOFZVdN7UZu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQUE0RS81NUU5Nzk1QUE5 NEYxMUU4QUEwQzkwMEVDNEY5QUUwMi9uRV8tWmQ2alVqUFRub2NDSTRWbFYwM3RS bTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25FXy1aZDZqVWpQVG5vY0NJNFZsVjAzdFJtNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QUE0RS81NUU5Nzk1QUE5NEYxMUU4QUEwQzkwMEVDNEY5QUUwMi9uRV8tWmQ2alVq UFRub2NDSTRWbFYwM3RSbTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAYShFnqrOkQUw7I7UUtoCkO5z8Ad+SDNjerbW3tM2QZm4eSHy70jh0 PCwvTEybatn0O1IWrjUfBhLFmbnZnW0JN2OLDq0A9eMrySZyPd2yHZOS/5STl4E9 fCGHXHyV21vVa1pqjyRcg4mwX+G2qJgzI5xtj5tr/vxhirP3qhlgGt4nZvsjsFxx 5AxElWGFSCCs7j6EPVrIO21vSrbJueWsGMuBmsnvgQ0s1SHYHG+FeuUN5hv1U5ux QXex0Q96UiYZJ31VQuGm9kwIg485DPg5zaWQGXp1WoXaBahsYYkXxyzBXNqm/9El DUhYFdqFeDsdzSCG7DU/VTl7LfN9ce4U -----END CERTIFICATE-----Generated at Sat Apr 26 07:52:37 2025 by rpki-client