$ rpki-client -vvf rpki.apnic.net/member_repository/A91DD112/DABAB5DCD78F11EC97B59E62C4F9AE02/NuTjWeIN2mUTPhIaktbWrLHlMSM.mft File: NuTjWeIN2mUTPhIaktbWrLHlMSM.mft (raw, json) Hash identifier: S38p4+0Dlsr8/MHmg6+jguGE7CLC7apKO9hriewQB7w= Subject key identifier: EA:76:8C:8F:DF:45:2F:F0:E0:3D:F1:AB:A9:27:29:D7:C5:B1:E2:4A Authority key identifier: 36:E4:E3:59:E2:0D:DA:65:13:3E:12:1A:92:D6:D6:AC:B1:E5:31:23 Certificate issuer: /CN=A91DD112/serialNumber=36E4E359E20DDA65133E121A92D6D6ACB1E53123 Certificate serial: 02F1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NuTjWeIN2mUTPhIaktbWrLHlMSM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DD112/DABAB5DCD78F11EC97B59E62C4F9AE02/NuTjWeIN2mUTPhIaktbWrLHlMSM.mft Manifest number: 02EE Signing time: Fri 25 Apr 2025 01:03:47 +0000 Manifest this update: Fri 25 Apr 2025 01:03:46 +0000 Manifest next update: Fri 02 May 2025 01:03:46 +0000 Files and hashes: 1: NuTjWeIN2mUTPhIaktbWrLHlMSM.crl (hash: ETrhcFNW5Q4S3L1tsIEYy2SzCl/j4cgPlkNxkWGjv2Q=) 2: 0D09EE14D79411EC955CCA68C4F9AE02.roa (hash: C0oMAxQHsYdHAGjubReHZgymtUaTL7q6qGZom3tg5Ac=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DD112/DABAB5DCD78F11EC97B59E62C4F9AE02/NuTjWeIN2mUTPhIaktbWrLHlMSM.crl rsync://rpki.apnic.net/member_repository/A91DD112/DABAB5DCD78F11EC97B59E62C4F9AE02/NuTjWeIN2mUTPhIaktbWrLHlMSM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NuTjWeIN2mUTPhIaktbWrLHlMSM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 01:03:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 753 (0x2f1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DD112, serialNumber=36E4E359E20DDA65133E121A92D6D6ACB1E53123 Validity Not Before: Apr 25 01:03:46 2025 GMT Not After : May 2 01:03:46 2025 GMT Subject: CN=680adf72-3802 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:a7:41:36:7d:5f:78:27:f8:a6:09:4a:5e:27: 26:63:59:21:b2:16:9f:e2:47:49:63:83:8c:f2:f9: d4:be:47:40:b6:5e:b9:c6:f7:bf:d6:54:38:06:4b: a6:15:1f:c2:4d:a9:da:99:ab:dc:e3:ed:6f:cb:7a: ac:3a:07:7f:21:20:37:92:1e:e5:7a:5b:2e:bc:c1: 7d:6a:99:39:52:4f:19:82:ec:a2:fc:ec:df:ac:e7: b8:02:d4:f4:89:ff:82:c1:42:29:b1:bf:8e:57:2a: 76:4a:98:b8:fc:62:83:57:d7:93:38:04:86:bf:7b: 94:b2:67:45:94:d7:cc:ae:8f:d5:e5:3d:b4:55:18: fe:36:7b:7a:09:ad:0b:2d:45:89:bc:b4:c2:d2:05: 07:f5:96:7f:a2:bd:d3:eb:f8:98:38:32:99:30:3d: de:50:a0:75:f5:a4:28:b6:c7:3f:07:5b:a5:cb:2e: 18:bf:e6:bf:89:76:6f:45:90:d6:72:d2:f7:1d:76: 63:58:3f:77:ee:e3:a6:41:fb:7d:b8:70:65:ed:7a: 50:f8:e2:37:ff:b5:ed:27:07:a1:22:d5:95:79:81: 47:69:49:13:fc:1c:22:4d:f5:11:a9:32:54:47:49: b3:a0:64:b8:bf:fe:4f:d4:5d:61:b5:e1:f3:06:d5: 82:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:76:8C:8F:DF:45:2F:F0:E0:3D:F1:AB:A9:27:29:D7:C5:B1:E2:4A X509v3 Authority Key Identifier: keyid:36:E4:E3:59:E2:0D:DA:65:13:3E:12:1A:92:D6:D6:AC:B1:E5:31:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DD112/DABAB5DCD78F11EC97B59E62C4F9AE02/NuTjWeIN2mUTPhIaktbWrLHlMSM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NuTjWeIN2mUTPhIaktbWrLHlMSM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DD112/DABAB5DCD78F11EC97B59E62C4F9AE02/NuTjWeIN2mUTPhIaktbWrLHlMSM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8a:f1:1b:17:6a:07:45:a2:9f:ee:4e:e8:cb:0b:91:71:5b:09: 69:68:82:d2:62:8c:c3:d5:9c:b9:72:e1:89:3b:8e:96:02:e7: 19:9c:12:94:5a:6d:c1:13:60:51:8f:fa:90:a4:4d:e6:fe:70: 42:d8:b0:89:c2:02:57:12:3f:b6:bc:e8:26:9f:4d:19:c3:49: e5:78:b2:f9:37:69:a4:35:10:87:d1:64:93:b3:47:5f:87:e3: 50:39:21:5c:0d:a0:47:9c:5b:bc:72:41:8a:e0:35:51:44:f5: e7:1e:30:ae:7f:91:63:15:bf:0c:ba:3c:97:39:31:b7:85:69: d3:d5:3d:81:07:8a:41:ee:c5:d9:47:69:ce:23:1a:e1:d2:75: c0:9a:b2:99:0d:47:29:09:1d:63:a1:09:f4:f7:63:25:96:c1: 9c:90:32:2a:55:d5:cb:8b:33:ac:d1:e4:5b:a8:ae:57:5d:3f: 2b:8f:b9:b0:9d:2a:5b:27:ce:51:42:4f:c3:f0:f9:8b:30:47: 95:2d:e1:98:6e:be:68:29:68:5d:39:c7:8b:56:42:f6:ab:db: aa:ce:2e:b0:33:04:7c:84:32:ff:c1:f2:33:3b:30:11:2d:34: 3e:c5:b5:24:08:3d:87:63:37:6a:ff:2d:76:56:e9:e1:4c:23: cd:d3:56:8b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAvEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REQxMTIxMTAvBgNVBAUTKDM2RTRFMzU5RTIwRERBNjUxMzNFMTIxQTkyRDZENkFD QjFFNTMxMjMwHhcNMjUwNDI1MDEwMzQ2WhcNMjUwNTAyMDEwMzQ2WjAYMRYwFAYD VQQDEw02ODBhZGY3Mi0zODAyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqadBNn1feCf4pglKXicmY1khshaf4kdJY4OM8vnUvkdAtl65xve/1lQ4Bkum FR/CTanamavc4+1vy3qsOgd/ISA3kh7lelsuvMF9apk5Uk8Zguyi/OzfrOe4AtT0 if+CwUIpsb+OVyp2Spi4/GKDV9eTOASGv3uUsmdFlNfMro/V5T20VRj+Nnt6Ca0L LUWJvLTC0gUH9ZZ/or3T6/iYODKZMD3eUKB19aQotsc/B1ulyy4Yv+a/iXZvRZDW ctL3HXZjWD937uOmQft9uHBl7XpQ+OI3/7XtJwehItWVeYFHaUkT/BwiTfURqTJU R0mzoGS4v/5P1F1hteHzBtWC0QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOp2jI/f RS/w4D3xq6knKdfFseJKMB8GA1UdIwQYMBaAFDbk41niDdplEz4SGpLW1qyx5TEj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERDExMi9EQUJBQjVEQ0Q3 OEYxMUVDOTdCNTlFNjJDNEY5QUUwMi9OdVRqV2VJTjJtVVRQaElha3RiV3JMSGxN U00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL051VGpXZUlOMm1VVFBoSWFrdGJXckxIbE1TTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RDExMi9EQUJBQjVEQ0Q3OEYxMUVDOTdCNTlFNjJDNEY5QUUwMi9OdVRqV2VJTjJt VVRQaElha3RiV3JMSGxNU00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCK8RsXagdFop/uTujLC5FxWwlpaILSYozD1Zy5cuGJO46WAucZnBKU Wm3BE2BRj/qQpE3m/nBC2LCJwgJXEj+2vOgmn00Zw0nleLL5N2mkNRCH0WSTs0df h+NQOSFcDaBHnFu8ckGK4DVRRPXnHjCuf5FjFb8MujyXOTG3hWnT1T2BB4pB7sXZ R2nOIxrh0nXAmrKZDUcpCR1joQn092MllsGckDIqVdXLizOs0eRbqK5XXT8rj7mw nSpbJ85RQk/D8PmLMEeVLeGYbr5oKWhdOceLVkL2q9uqzi6wMwR8hDL/wfIzOzAR LTQ+xbUkCD2HYzdq/y12VunhTCPN01aL -----END CERTIFICATE-----Generated at Sat Apr 26 04:18:13 2025 by rpki-client