$ rpki-client -vvf rpki.apnic.net/member_repository/A91CFC1C/3C142B1657FE11EEAA553060C4F9AE02/NkXNkOP0PAEtqzvzly6GvJTd1FQ.mft File: NkXNkOP0PAEtqzvzly6GvJTd1FQ.mft (raw, json) Hash identifier: APDXWxEWhkuyPsD70wRQ24JYWFDAWDERO5EWbExmOCI= Subject key identifier: C1:44:A7:3E:E9:EA:97:CB:D9:2E:0B:46:20:B1:20:10:89:E7:2E:42 Authority key identifier: 36:45:CD:90:E3:F4:3C:01:2D:AB:3B:F3:97:2E:86:BC:94:DD:D4:54 Certificate issuer: /CN=A91CFC1C/serialNumber=3645CD90E3F43C012DAB3BF3972E86BC94DDD454 Certificate serial: 0132 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NkXNkOP0PAEtqzvzly6GvJTd1FQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CFC1C/3C142B1657FE11EEAA553060C4F9AE02/NkXNkOP0PAEtqzvzly6GvJTd1FQ.mft Manifest number: 012D Signing time: Fri 25 Apr 2025 03:40:57 +0000 Manifest this update: Fri 25 Apr 2025 03:40:56 +0000 Manifest next update: Fri 02 May 2025 03:40:56 +0000 Files and hashes: 1: NkXNkOP0PAEtqzvzly6GvJTd1FQ.crl (hash: xdjigIN/Gh7MwwJ03Ou8MEJEzmpdYLHq/kIShCqKp5g=) 2: E69E92582C4A11EF91F6202DC4F9AE02.roa (hash: uDYRjWDNbbuer7nADrVfw+s2rVnYHfiATUhAxlq32S0=) 3: B390F78E5CB611EE97D70B78C4F9AE02.roa (hash: LoclVr/421CJQL/D+2O/iwx9gXkx3/NwzPPfEEt2ocM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CFC1C/3C142B1657FE11EEAA553060C4F9AE02/NkXNkOP0PAEtqzvzly6GvJTd1FQ.crl rsync://rpki.apnic.net/member_repository/A91CFC1C/3C142B1657FE11EEAA553060C4F9AE02/NkXNkOP0PAEtqzvzly6GvJTd1FQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NkXNkOP0PAEtqzvzly6GvJTd1FQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 03:40:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 306 (0x132) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CFC1C, serialNumber=3645CD90E3F43C012DAB3BF3972E86BC94DDD454 Validity Not Before: Apr 25 03:40:56 2025 GMT Not After : May 2 03:40:56 2025 GMT Subject: CN=680b0448-bb73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:3c:cc:59:ef:ef:01:05:5a:59:d4:e1:7a:5f: 11:51:0d:66:ec:0a:fd:e3:fb:cc:1b:a2:01:25:34: f2:7c:45:4e:45:61:b3:6a:bd:85:63:ae:45:33:6e: a8:ad:03:07:63:44:fc:16:6b:66:07:bd:34:2b:79: 89:59:01:b4:ee:4e:9b:44:07:8a:05:dc:96:a6:51: 99:bc:36:cf:c3:77:1f:df:73:64:24:91:b7:d3:74: 88:3b:75:8d:23:85:34:ca:6e:77:f7:e9:2c:22:87: 49:bc:85:4b:6d:68:32:bb:4f:8e:6a:a0:d8:96:31: fe:a1:2a:75:91:ef:bd:4c:c4:95:86:80:51:56:61: 20:6b:dc:45:11:88:57:cd:51:84:5a:c2:84:0d:c3: a1:90:61:d2:f5:c4:4a:32:71:be:67:d6:11:bb:fa: e3:e3:ca:f5:ca:21:3d:26:7e:87:51:00:ee:70:bb: 24:b7:24:ee:a5:6d:b6:d0:4c:84:19:5a:7d:af:1f: 2a:d0:bb:ff:37:e8:ab:67:c2:ea:9f:9f:07:4a:c0: d7:b0:f2:fd:e0:16:e1:bf:41:ca:a7:e1:03:88:78: 7b:18:65:e9:37:ee:69:df:54:a8:fe:aa:a3:75:54: fb:f3:e5:a4:53:8c:60:23:68:cf:dd:e5:e1:79:df: be:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:44:A7:3E:E9:EA:97:CB:D9:2E:0B:46:20:B1:20:10:89:E7:2E:42 X509v3 Authority Key Identifier: keyid:36:45:CD:90:E3:F4:3C:01:2D:AB:3B:F3:97:2E:86:BC:94:DD:D4:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CFC1C/3C142B1657FE11EEAA553060C4F9AE02/NkXNkOP0PAEtqzvzly6GvJTd1FQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NkXNkOP0PAEtqzvzly6GvJTd1FQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CFC1C/3C142B1657FE11EEAA553060C4F9AE02/NkXNkOP0PAEtqzvzly6GvJTd1FQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 16:7f:b0:3f:7e:83:4c:a1:72:07:78:31:ab:19:25:dd:89:97: 07:8e:58:4c:73:a2:66:1c:bf:20:53:13:4d:bd:aa:c3:ae:be: 01:c4:c1:14:04:7a:ca:11:31:59:e7:57:ac:5a:1c:05:d9:1b: 26:93:f9:37:22:d3:09:db:07:4b:ea:ee:f5:66:15:d6:5c:28: aa:88:6a:e6:07:f6:5f:c7:92:a1:96:fd:cd:44:bd:87:63:54: 77:03:10:58:e8:ef:95:4e:0f:d2:d1:84:d7:af:96:84:57:78: 9a:fc:f4:a5:36:fb:64:47:60:be:3c:b0:29:63:42:7c:e6:0d: f0:c8:a8:bc:8f:ee:c5:70:92:45:e1:d1:3c:11:a3:e2:83:82: 64:22:b8:67:27:f6:43:58:ee:ef:20:2f:48:8d:18:9d:58:ef: be:da:6b:d6:3f:d5:63:b4:14:a3:62:84:37:0b:6e:5e:e1:93: af:2c:09:fb:2a:fc:aa:0a:ef:a6:a4:ad:8e:10:63:fd:f1:55: 09:b9:5a:af:2c:a5:fa:00:de:6e:ba:8c:4a:5d:43:a4:66:27: b8:5d:9a:0e:09:a0:72:94:6d:00:5d:23:7b:a9:46:73:0a:35: ac:95:4b:e7:a0:4a:b7:f4:f1:c2:a6:14:d0:10:ac:3a:be:6c: 0a:af:8c:3b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICATIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0ZDMUMxMTAvBgNVBAUTKDM2NDVDRDkwRTNGNDNDMDEyREFCM0JGMzk3MkU4NkJD OTREREQ0NTQwHhcNMjUwNDI1MDM0MDU2WhcNMjUwNTAyMDM0MDU2WjAYMRYwFAYD VQQDEw02ODBiMDQ0OC1iYjczMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAozzMWe/vAQVaWdThel8RUQ1m7Ar94/vMG6IBJTTyfEVORWGzar2FY65FM26o rQMHY0T8FmtmB700K3mJWQG07k6bRAeKBdyWplGZvDbPw3cf33NkJJG303SIO3WN I4U0ym539+ksIodJvIVLbWgyu0+OaqDYljH+oSp1ke+9TMSVhoBRVmEga9xFEYhX zVGEWsKEDcOhkGHS9cRKMnG+Z9YRu/rj48r1yiE9Jn6HUQDucLsktyTupW220EyE GVp9rx8q0Lv/N+irZ8Lqn58HSsDXsPL94Bbhv0HKp+EDiHh7GGXpN+5p31So/qqj dVT78+WkU4xgI2jP3eXhed++PwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMFEpz7p 6pfL2S4LRiCxIBCJ5y5CMB8GA1UdIwQYMBaAFDZFzZDj9DwBLas785cuhryU3dRU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRkMxQy8zQzE0MkIxNjU3 RkUxMUVFQUE1NTMwNjBDNEY5QUUwMi9Oa1hOa09QMFBBRXRxenZ6bHk2R3ZKVGQx RlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05rWE5rT1AwUEFFdHF6dnpseTZHdkpUZDFGUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RkMxQy8zQzE0MkIxNjU3RkUxMUVFQUE1NTMwNjBDNEY5QUUwMi9Oa1hOa09QMFBB RXRxenZ6bHk2R3ZKVGQxRlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAWf7A/foNMoXIHeDGrGSXdiZcHjlhMc6JmHL8gUxNNvarDrr4BxMEU BHrKETFZ51esWhwF2Rsmk/k3ItMJ2wdL6u71ZhXWXCiqiGrmB/Zfx5Khlv3NRL2H Y1R3AxBY6O+VTg/S0YTXr5aEV3ia/PSlNvtkR2C+PLApY0J85g3wyKi8j+7FcJJF 4dE8EaPig4JkIrhnJ/ZDWO7vIC9IjRidWO++2mvWP9VjtBSjYoQ3C25e4ZOvLAn7 KvyqCu+mpK2OEGP98VUJuVqvLKX6AN5uuoxKXUOkZie4XZoOCaBylG0AXSN7qUZz CjWslUvnoEq39PHCphTQEKw6vmwKr4w7 -----END CERTIFICATE-----Generated at Sat Apr 26 14:10:40 2025 by rpki-client