$ rpki-client -vvf rpki.apnic.net/member_repository/A91D9B75/9C00202EF48811EBA8DB7D0CC4F9AE02/nLpHShuO1MGFZBkQLgnuXvUcSaU.mft File: nLpHShuO1MGFZBkQLgnuXvUcSaU.mft (raw, json) Hash identifier: xPUUbdl8qi9sD9xWe1+qQxBuKC6g0wzxIXCpU1dfYpc= Subject key identifier: 69:09:B9:DB:96:99:E1:2C:6B:74:7E:D0:6C:59:D5:7B:9D:DF:94:C2 Authority key identifier: 9C:BA:47:4A:1B:8E:D4:C1:85:64:19:10:2E:09:EE:5E:F5:1C:49:A5 Certificate issuer: /CN=A91D9B75/serialNumber=9CBA474A1B8ED4C1856419102E09EE5EF51C49A5 Certificate serial: 0547 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nLpHShuO1MGFZBkQLgnuXvUcSaU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D9B75/9C00202EF48811EBA8DB7D0CC4F9AE02/nLpHShuO1MGFZBkQLgnuXvUcSaU.mft Manifest number: 0537 Signing time: Thu 24 Apr 2025 23:17:09 +0000 Manifest this update: Thu 24 Apr 2025 23:17:08 +0000 Manifest next update: Thu 01 May 2025 23:17:08 +0000 Files and hashes: 1: nLpHShuO1MGFZBkQLgnuXvUcSaU.crl (hash: T+f1J0yxZ8rDZqYmVfQgl5Yo+YTKLdSs22513lVZ5n4=) 2: F1C60FA653DC11EC90927C4DC4F9AE02.roa (hash: 9qbFBS3HM4vcPosn8OSliCwGfWG2+6sVIf90uwZ9kCk=) 3: 5C5F31B09A2A11ECAEE8C819C4F9AE02.roa (hash: m6M1aJQP4A3gQ02xCkEHxQI8XaXpDculDx+d/2LUfO0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D9B75/9C00202EF48811EBA8DB7D0CC4F9AE02/nLpHShuO1MGFZBkQLgnuXvUcSaU.crl rsync://rpki.apnic.net/member_repository/A91D9B75/9C00202EF48811EBA8DB7D0CC4F9AE02/nLpHShuO1MGFZBkQLgnuXvUcSaU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nLpHShuO1MGFZBkQLgnuXvUcSaU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 23:17:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1351 (0x547) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D9B75, serialNumber=9CBA474A1B8ED4C1856419102E09EE5EF51C49A5 Validity Not Before: Apr 24 23:17:08 2025 GMT Not After : May 1 23:17:08 2025 GMT Subject: CN=680ac674-9a37 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:6a:52:02:b0:53:91:96:da:25:bf:03:fd:a0: 2f:92:fe:87:9a:24:20:57:d1:cd:4a:08:6f:81:97: fe:81:6d:ee:24:b1:67:71:3e:3a:99:0d:c3:43:09: d5:1b:03:1b:1e:04:77:68:98:84:71:38:0d:5a:99: d7:fa:4a:25:cf:ce:ed:f3:3f:06:c1:6b:2c:30:aa: a4:bd:a3:00:eb:ea:49:34:56:d7:04:7a:85:be:8f: f4:a3:48:dd:8d:0a:39:2d:29:21:87:4a:d7:12:98: 6c:6f:a3:3a:19:44:d3:9c:2e:10:b5:bc:28:1a:cc: 79:16:3b:28:85:e4:c2:5f:cd:9a:78:10:79:87:69: 03:d9:6f:44:9f:b4:fe:02:10:b7:35:c6:28:3d:18: 9f:2a:3e:d1:43:16:7a:76:f4:38:4d:85:d4:15:73: 34:fa:66:54:25:46:64:69:a2:a9:28:26:c1:dc:7d: 26:14:bd:1e:43:f6:b7:73:89:78:4d:32:2d:1d:8f: e4:3f:8a:df:63:d9:74:ff:39:22:15:81:17:fa:2f: c8:32:c5:f3:fd:01:74:dd:8f:0c:c9:93:c4:58:e2: eb:d3:e1:d1:ed:00:8e:60:c5:fa:2d:84:b8:13:c3: 3b:3a:5a:8a:e6:a0:47:e6:1d:90:d0:6b:44:a2:16: 6c:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:09:B9:DB:96:99:E1:2C:6B:74:7E:D0:6C:59:D5:7B:9D:DF:94:C2 X509v3 Authority Key Identifier: keyid:9C:BA:47:4A:1B:8E:D4:C1:85:64:19:10:2E:09:EE:5E:F5:1C:49:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D9B75/9C00202EF48811EBA8DB7D0CC4F9AE02/nLpHShuO1MGFZBkQLgnuXvUcSaU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nLpHShuO1MGFZBkQLgnuXvUcSaU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D9B75/9C00202EF48811EBA8DB7D0CC4F9AE02/nLpHShuO1MGFZBkQLgnuXvUcSaU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3e:9f:cc:f9:3d:bd:7a:b6:44:87:cb:a0:dd:f3:8b:ba:40:ba: a1:ae:89:33:58:5e:51:4b:1a:82:5d:af:c1:30:ca:0d:e5:c2: 7b:61:48:f8:fc:86:58:96:b3:a8:73:51:06:41:f4:43:93:24: fe:3a:6e:13:69:c1:da:82:72:5a:6d:8a:5b:d7:cc:df:8b:92: 60:96:42:ca:06:7a:b6:f6:dd:3d:42:41:32:fb:18:75:62:bc: 41:5d:ff:f5:69:a2:22:c0:36:ef:fa:c1:b2:5a:bb:9f:e6:30: d0:de:62:a0:de:4c:82:39:17:9a:e8:fb:c3:99:d0:52:6d:a7: c1:17:ff:5d:e1:a9:d9:bb:a3:52:9d:4e:3a:0f:67:f0:67:77: 19:40:ba:93:3e:e6:96:ab:79:61:c9:69:5d:e1:8e:af:d1:91: f3:13:62:21:e5:b4:e7:78:a8:9a:5d:98:cc:3e:60:bf:6e:54: ec:ce:fb:8a:f4:8b:3d:2b:e8:1a:ab:27:0d:44:3e:67:c6:b2: d8:a3:cb:d5:5f:eb:2b:80:0f:0e:d6:42:71:97:1e:7e:0c:97: 04:09:b1:7a:94:fe:6f:ae:0a:04:6f:81:63:9a:f4:f5:1a:e5: 56:68:c1:bc:db:77:af:93:6f:19:7f:1b:c5:a6:47:36:ae:0b: 22:78:cd:95 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBUcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDlCNzUxMTAvBgNVBAUTKDlDQkE0NzRBMUI4RUQ0QzE4NTY0MTkxMDJFMDlFRTVF RjUxQzQ5QTUwHhcNMjUwNDI0MjMxNzA4WhcNMjUwNTAxMjMxNzA4WjAYMRYwFAYD VQQDEw02ODBhYzY3NC05YTM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv2pSArBTkZbaJb8D/aAvkv6HmiQgV9HNSghvgZf+gW3uJLFncT46mQ3DQwnV GwMbHgR3aJiEcTgNWpnX+kolz87t8z8GwWssMKqkvaMA6+pJNFbXBHqFvo/0o0jd jQo5LSkhh0rXEphsb6M6GUTTnC4QtbwoGsx5FjsoheTCX82aeBB5h2kD2W9En7T+ AhC3NcYoPRifKj7RQxZ6dvQ4TYXUFXM0+mZUJUZkaaKpKCbB3H0mFL0eQ/a3c4l4 TTItHY/kP4rfY9l0/zkiFYEX+i/IMsXz/QF03Y8MyZPEWOLr0+HR7QCOYMX6LYS4 E8M7OlqK5qBH5h2Q0GtEohZsTwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGkJuduW meEsa3R+0GxZ1Xud35TCMB8GA1UdIwQYMBaAFJy6R0objtTBhWQZEC4J7l71HEml MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEOUI3NS85QzAwMjAyRUY0 ODgxMUVCQThEQjdEMENDNEY5QUUwMi9uTHBIU2h1TzFNR0ZaQmtRTGdudVh2VWNT YVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25McEhTaHVPMU1HRlpCa1FMZ251WHZVY1NhVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE OUI3NS85QzAwMjAyRUY0ODgxMUVCQThEQjdEMENDNEY5QUUwMi9uTHBIU2h1TzFN R0ZaQmtRTGdudVh2VWNTYVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA+n8z5Pb16tkSHy6Dd84u6QLqhrokzWF5RSxqCXa/BMMoN5cJ7YUj4 /IZYlrOoc1EGQfRDkyT+Om4TacHagnJabYpb18zfi5JglkLKBnq29t09QkEy+xh1 YrxBXf/1aaIiwDbv+sGyWruf5jDQ3mKg3kyCORea6PvDmdBSbafBF/9d4anZu6NS nU46D2fwZ3cZQLqTPuaWq3lhyWld4Y6v0ZHzE2Ih5bTneKiaXZjMPmC/blTszvuK 9Is9K+gaqycNRD5nxrLYo8vVX+srgA8O1kJxlx5+DJcECbF6lP5vrgoEb4FjmvT1 GuVWaMG823evk28ZfxvFpkc2rgsieM2V -----END CERTIFICATE-----Generated at Sat Apr 26 04:20:48 2025 by rpki-client