$ rpki-client -vvf rpki.apnic.net/member_repository/A91D9B1B/F9FEE0463CF811EFA367C385C4F9AE02/01nlbdoAA8SD861qQMCA6Qy41HI.mft File: 01nlbdoAA8SD861qQMCA6Qy41HI.mft (raw, json) Hash identifier: +GDDqCvCoGGNtJo4F+cXN6cuEseOUG6oo4ZtcS+SLIo= Subject key identifier: 7A:DE:6B:F5:CB:AF:FD:05:75:75:DA:CD:93:87:F3:5F:BE:B3:96:44 Authority key identifier: D3:59:E5:6D:DA:00:03:C4:83:F3:AD:6A:40:C0:80:E9:0C:B8:D4:72 Certificate issuer: /CN=A91D9B1B/serialNumber=D359E56DDA0003C483F3AD6A40C080E90CB8D472 Certificate serial: 9C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/01nlbdoAA8SD861qQMCA6Qy41HI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D9B1B/F9FEE0463CF811EFA367C385C4F9AE02/01nlbdoAA8SD861qQMCA6Qy41HI.mft Manifest number: 99 Signing time: Fri 25 Apr 2025 05:20:42 +0000 Manifest this update: Fri 25 Apr 2025 05:20:41 +0000 Manifest next update: Fri 02 May 2025 05:20:41 +0000 Files and hashes: 1: 01nlbdoAA8SD861qQMCA6Qy41HI.crl (hash: 8SZ7t2qoO5Q+BQFICw6bV38Tlp7Nq+LPM2ugXH/8cUY=) 2: 97530E023D0911EFA33E4A38C4F9AE02.roa (hash: bWCEf7xphHzCuEdSJWfNIfntO4HJguemBgMtzB7ylYA=) 3: 573BE4DE3D0811EF84157B26C4F9AE02.roa (hash: nywG68ULgKtBcMdjYbgBHpATJxb1PptzCmatC6Dkc8Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D9B1B/F9FEE0463CF811EFA367C385C4F9AE02/01nlbdoAA8SD861qQMCA6Qy41HI.crl rsync://rpki.apnic.net/member_repository/A91D9B1B/F9FEE0463CF811EFA367C385C4F9AE02/01nlbdoAA8SD861qQMCA6Qy41HI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/01nlbdoAA8SD861qQMCA6Qy41HI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 05:20:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 156 (0x9c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D9B1B, serialNumber=D359E56DDA0003C483F3AD6A40C080E90CB8D472 Validity Not Before: Apr 25 05:20:41 2025 GMT Not After : May 2 05:20:41 2025 GMT Subject: CN=680b1baa-edc3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:72:4e:4b:b6:6f:35:db:cf:a5:f0:db:3b:d1: 09:41:b3:43:0d:e8:75:89:7e:6b:e5:32:29:e6:f0: 89:06:ee:6f:fc:31:83:df:1b:9a:5d:43:e9:29:54: 53:5e:49:63:07:92:7e:ef:2e:e7:7a:61:b5:43:b2: 29:a2:53:d3:3d:3d:9c:76:5b:97:fc:49:61:f8:c5: 6f:c0:06:38:ad:9a:38:b0:3d:b7:18:f5:43:7f:4d: a9:0e:24:b8:b9:a5:4c:be:ff:7e:b7:3c:6a:a5:c8: b0:d7:78:ee:10:9f:fe:5d:17:8a:0c:71:ae:63:16: f3:e5:3d:97:48:11:8f:a7:2e:95:86:62:94:d6:89: 9e:71:fc:d3:ed:01:b8:05:bf:80:a4:e5:1e:3a:24: 9b:39:2d:c1:ac:00:35:2e:5b:78:c0:8f:cc:0f:7a: f6:66:0f:1f:96:43:fd:a2:d9:22:0c:48:ea:5b:e4: 44:09:9b:4b:46:95:f1:43:14:1c:48:8a:d5:20:37: ea:d6:c2:cf:73:0d:34:9e:ef:22:e0:df:ba:a5:a0: 81:a2:26:5e:9d:6a:81:44:85:4c:6a:6e:9f:ec:50: 18:5f:a2:90:20:68:d8:10:aa:9d:35:0b:65:05:ae: 1a:53:ac:d2:80:89:cc:fa:4a:b0:6e:55:5f:73:34: 42:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:DE:6B:F5:CB:AF:FD:05:75:75:DA:CD:93:87:F3:5F:BE:B3:96:44 X509v3 Authority Key Identifier: keyid:D3:59:E5:6D:DA:00:03:C4:83:F3:AD:6A:40:C0:80:E9:0C:B8:D4:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D9B1B/F9FEE0463CF811EFA367C385C4F9AE02/01nlbdoAA8SD861qQMCA6Qy41HI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/01nlbdoAA8SD861qQMCA6Qy41HI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D9B1B/F9FEE0463CF811EFA367C385C4F9AE02/01nlbdoAA8SD861qQMCA6Qy41HI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8e:60:f0:33:97:5a:1a:f2:fa:86:8b:c1:a7:50:72:b9:71:49: 66:20:34:57:c3:43:14:d0:e9:ea:89:c7:93:cd:04:65:11:68: 04:36:68:97:c6:dc:14:65:53:d3:9a:19:63:f7:27:97:d1:17: 7a:be:73:34:af:7c:3b:25:81:9a:a3:ec:8c:93:39:2b:1c:5a: 14:fb:40:1a:58:18:f6:99:98:d8:d0:3d:67:de:71:60:4c:07: ec:30:0e:c3:52:1a:32:5d:39:3b:db:b0:62:43:ed:71:85:4e: 0b:12:38:a6:06:5d:db:d1:52:18:fc:74:61:8d:10:bf:2a:e2: a3:28:87:95:34:fb:b4:f4:18:f1:a2:90:8c:44:69:9f:d2:c5: f4:c9:7c:ff:ca:44:62:fc:f5:64:68:80:e4:2c:74:9e:bc:97: 4e:ce:73:4b:3a:63:65:d6:6e:ed:7a:83:38:b3:92:d9:e8:89: 0f:d8:2c:ca:c8:ca:0f:18:fe:ab:40:b1:f4:67:26:b5:77:cf: 32:01:f9:db:74:44:ba:f8:7c:ec:10:70:2b:90:7b:04:5d:5e: 51:f6:14:f3:73:1d:31:ae:c9:e1:97:ef:92:2c:81:30:14:4d: 61:7b:85:ac:17:88:59:48:fe:f3:d0:87:1e:05:bf:f0:56:78: 63:51:92:4b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDlCMUIxMTAvBgNVBAUTKEQzNTlFNTZEREEwMDAzQzQ4M0YzQUQ2QTQwQzA4MEU5 MENCOEQ0NzIwHhcNMjUwNDI1MDUyMDQxWhcNMjUwNTAyMDUyMDQxWjAYMRYwFAYD VQQDEw02ODBiMWJhYS1lZGMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyXJOS7ZvNdvPpfDbO9EJQbNDDeh1iX5r5TIp5vCJBu5v/DGD3xuaXUPpKVRT XkljB5J+7y7nemG1Q7IpolPTPT2cdluX/Elh+MVvwAY4rZo4sD23GPVDf02pDiS4 uaVMvv9+tzxqpciw13juEJ/+XReKDHGuYxbz5T2XSBGPpy6VhmKU1omecfzT7QG4 Bb+ApOUeOiSbOS3BrAA1Llt4wI/MD3r2Zg8flkP9otkiDEjqW+RECZtLRpXxQxQc SIrVIDfq1sLPcw00nu8i4N+6paCBoiZenWqBRIVMam6f7FAYX6KQIGjYEKqdNQtl Ba4aU6zSgInM+kqwblVfczRCZQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHrea/XL r/0FdXXazZOH81++s5ZEMB8GA1UdIwQYMBaAFNNZ5W3aAAPEg/OtakDAgOkMuNRy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEOUIxQi9GOUZFRTA0NjND RjgxMUVGQTM2N0MzODVDNEY5QUUwMi8wMW5sYmRvQUE4U0Q4NjFxUU1DQTZReTQx SEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzAxbmxiZG9BQThTRDg2MXFRTUNBNlF5NDFISS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE OUIxQi9GOUZFRTA0NjNDRjgxMUVGQTM2N0MzODVDNEY5QUUwMi8wMW5sYmRvQUE4 U0Q4NjFxUU1DQTZReTQxSEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCOYPAzl1oa8vqGi8GnUHK5cUlmIDRXw0MU0OnqiceTzQRlEWgENmiX xtwUZVPTmhlj9yeX0Rd6vnM0r3w7JYGao+yMkzkrHFoU+0AaWBj2mZjY0D1n3nFg TAfsMA7DUhoyXTk727BiQ+1xhU4LEjimBl3b0VIY/HRhjRC/KuKjKIeVNPu09Bjx opCMRGmf0sX0yXz/ykRi/PVkaIDkLHSevJdOznNLOmNl1m7teoM4s5LZ6IkP2CzK yMoPGP6rQLH0Zya1d88yAfnbdES6+HzsEHArkHsEXV5R9hTzcx0xrsnhl++SLIEw FE1he4WsF4hZSP7z0IceBb/wVnhjUZJL -----END CERTIFICATE-----Generated at Sat Apr 26 05:01:24 2025 by rpki-client