$ rpki-client -vvf rpki.apnic.net/member_repository/A91CCD0C/819A023432CB11EF9EA0C96AC4F9AE02/NSwvQv_2bLhqacZ-5hurbhEVTss.mft File: NSwvQv_2bLhqacZ-5hurbhEVTss.mft (raw, json) Hash identifier: BhFGI7IaN17DrsKvoYQmkC6Udl03g0xuUjR/yeCJjOc= Subject key identifier: 59:D3:82:C3:F5:A1:70:BE:EE:89:96:39:25:D3:65:A7:D0:CB:BD:24 Authority key identifier: 35:2C:2F:42:FF:F6:6C:B8:6A:69:C6:7E:E6:1B:AB:6E:11:15:4E:CB Certificate issuer: /CN=A91CCD0C/serialNumber=352C2F42FFF66CB86A69C67EE61BAB6E11154ECB Certificate serial: A1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NSwvQv_2bLhqacZ-5hurbhEVTss.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CCD0C/819A023432CB11EF9EA0C96AC4F9AE02/NSwvQv_2bLhqacZ-5hurbhEVTss.mft Manifest number: 9F Signing time: Fri 25 Apr 2025 05:15:43 +0000 Manifest this update: Fri 25 Apr 2025 05:15:42 +0000 Manifest next update: Fri 02 May 2025 05:15:42 +0000 Files and hashes: 1: NSwvQv_2bLhqacZ-5hurbhEVTss.crl (hash: P0OeVd+uePcsO+o2iHYHr0Y2mbitDx5Z7Y+PNQnFPV0=) 2: E5BB4DB260E411EF83727F5CC4F9AE02.roa (hash: sjsLTuWeFwgevoPUUjQqWdyEX8OASo8b7yHbpb8l0pc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CCD0C/819A023432CB11EF9EA0C96AC4F9AE02/NSwvQv_2bLhqacZ-5hurbhEVTss.crl rsync://rpki.apnic.net/member_repository/A91CCD0C/819A023432CB11EF9EA0C96AC4F9AE02/NSwvQv_2bLhqacZ-5hurbhEVTss.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NSwvQv_2bLhqacZ-5hurbhEVTss.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 05:15:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 161 (0xa1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CCD0C, serialNumber=352C2F42FFF66CB86A69C67EE61BAB6E11154ECB Validity Not Before: Apr 25 05:15:42 2025 GMT Not After : May 2 05:15:42 2025 GMT Subject: CN=680b1a7f-eb74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:58:9e:62:4c:ac:8b:1e:b4:56:2f:63:6f:ea: fb:79:c2:04:b0:93:26:0e:6a:7b:0b:39:26:34:0c: bd:89:d2:1e:ac:bf:64:aa:88:8c:04:35:e6:87:0e: 92:4a:8e:44:bc:bb:43:f1:81:15:35:22:a4:7f:4c: 77:0a:87:58:0f:df:2e:bc:34:27:37:f5:2f:84:53: cb:83:5e:73:a0:b1:5d:43:64:d1:06:d1:52:87:ae: 32:5d:8d:7e:41:46:9c:76:19:74:00:21:17:80:29: 11:84:31:87:f9:fa:8f:9d:94:0a:09:9a:97:e9:68: 94:b8:62:81:ab:24:99:52:5d:ff:23:4a:0b:0c:80: 05:7b:b4:4f:1c:c4:3d:bf:59:0e:b4:b7:fe:31:ff: d9:b0:ed:bb:e1:18:25:8a:72:75:12:d2:fd:b1:f5: ae:9f:9c:11:4a:20:79:b8:f4:83:4f:f6:61:b4:ef: 03:f1:fa:6f:7d:a1:35:82:4a:58:fc:11:94:b8:da: 3c:d4:63:f2:a7:0f:15:69:5c:09:c9:48:ca:37:82: 93:c3:fc:0f:52:49:db:99:76:56:ef:85:ae:91:73: 66:9c:8c:d7:0e:95:c7:32:07:81:01:ff:b6:35:11: a6:90:b2:02:2e:a8:79:e5:df:55:8a:6c:bc:95:9d: b1:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:D3:82:C3:F5:A1:70:BE:EE:89:96:39:25:D3:65:A7:D0:CB:BD:24 X509v3 Authority Key Identifier: keyid:35:2C:2F:42:FF:F6:6C:B8:6A:69:C6:7E:E6:1B:AB:6E:11:15:4E:CB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CCD0C/819A023432CB11EF9EA0C96AC4F9AE02/NSwvQv_2bLhqacZ-5hurbhEVTss.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NSwvQv_2bLhqacZ-5hurbhEVTss.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CCD0C/819A023432CB11EF9EA0C96AC4F9AE02/NSwvQv_2bLhqacZ-5hurbhEVTss.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 61:46:80:ce:64:4c:e9:2f:e3:28:de:57:db:b7:b3:8e:85:d9: f7:1b:f1:fb:06:d4:34:35:64:cc:c5:7a:5f:df:0f:bc:fc:80: d8:80:c0:90:1f:49:c2:ef:27:a6:89:00:18:67:20:b6:25:6d: da:60:8e:90:ab:6e:20:32:36:ae:7a:6f:88:e1:c5:29:23:5d: ef:b9:8d:8d:d4:8b:77:17:76:63:da:1b:16:1e:b5:ed:22:47: d3:f2:34:ce:92:d1:1f:14:e2:70:0a:cf:a2:d2:2f:03:24:b8: 6f:82:5c:3e:b5:eb:d8:a8:a3:12:69:2c:52:3e:0b:f8:e5:2a: e6:bc:1e:22:1b:b9:dc:3c:17:55:c0:6a:d9:34:92:bc:27:f9: 84:fd:13:b3:d4:39:fb:99:62:b7:24:ca:03:b1:48:5f:ce:01: 4b:cf:34:24:d6:b4:30:df:f3:96:f0:64:42:de:b5:4c:82:76: 43:38:c9:fe:1e:53:45:c7:05:a8:0b:c7:9d:92:2c:a5:50:cf: a5:e7:70:0f:16:84:58:94:c9:00:f8:6b:4b:3c:0e:f1:95:80: bc:2c:08:a3:51:ec:1b:74:df:20:53:e8:61:f5:34:40:ad:14: 48:12:97:6e:40:46:17:7b:b7:05:52:4b:8c:1c:7c:61:13:98: 94:f6:b7:f8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0NEMEMxMTAvBgNVBAUTKDM1MkMyRjQyRkZGNjZDQjg2QTY5QzY3RUU2MUJBQjZF MTExNTRFQ0IwHhcNMjUwNDI1MDUxNTQyWhcNMjUwNTAyMDUxNTQyWjAYMRYwFAYD VQQDEw02ODBiMWE3Zi1lYjc0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwVieYkysix60Vi9jb+r7ecIEsJMmDmp7CzkmNAy9idIerL9kqoiMBDXmhw6S So5EvLtD8YEVNSKkf0x3CodYD98uvDQnN/UvhFPLg15zoLFdQ2TRBtFSh64yXY1+ QUacdhl0ACEXgCkRhDGH+fqPnZQKCZqX6WiUuGKBqySZUl3/I0oLDIAFe7RPHMQ9 v1kOtLf+Mf/ZsO274RglinJ1EtL9sfWun5wRSiB5uPSDT/ZhtO8D8fpvfaE1gkpY /BGUuNo81GPypw8VaVwJyUjKN4KTw/wPUknbmXZW74WukXNmnIzXDpXHMgeBAf+2 NRGmkLICLqh55d9Vimy8lZ2xRwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFnTgsP1 oXC+7omWOSXTZafQy70kMB8GA1UdIwQYMBaAFDUsL0L/9my4amnGfuYbq24RFU7L MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQ0QwQy84MTlBMDIzNDMy Q0IxMUVGOUVBMEM5NkFDNEY5QUUwMi9OU3d2UXZfMmJMaHFhY1otNWh1cmJoRVZU c3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05Td3ZRdl8yYkxocWFjWi01aHVyYmhFVlRzcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD Q0QwQy84MTlBMDIzNDMyQ0IxMUVGOUVBMEM5NkFDNEY5QUUwMi9OU3d2UXZfMmJM aHFhY1otNWh1cmJoRVZUc3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBhRoDOZEzpL+Mo3lfbt7OOhdn3G/H7BtQ0NWTMxXpf3w+8/IDYgMCQ H0nC7yemiQAYZyC2JW3aYI6Qq24gMjauem+I4cUpI13vuY2N1It3F3Zj2hsWHrXt IkfT8jTOktEfFOJwCs+i0i8DJLhvglw+tevYqKMSaSxSPgv45SrmvB4iG7ncPBdV wGrZNJK8J/mE/ROz1Dn7mWK3JMoDsUhfzgFLzzQk1rQw3/OW8GRC3rVMgnZDOMn+ HlNFxwWoC8edkiylUM+l53APFoRYlMkA+GtLPA7xlYC8LAijUewbdN8gU+hh9TRA rRRIEpduQEYXe7cFUkuMHHxhE5iU9rf4 -----END CERTIFICATE-----Generated at Sat Apr 26 16:56:52 2025 by rpki-client