$ rpki-client -vvf rpki.apnic.net/member_repository/A91EB002/E24F8234022E11EF856F5132C4F9AE02/nvPmBKY_LO9L3eN9yokNBFGWeuw.mft File: nvPmBKY_LO9L3eN9yokNBFGWeuw.mft (raw, json) Hash identifier: 6Jwgi0ewsN3B63ElEqBPZ8xT7SwG6kZ738Mwo3zzbF8= Subject key identifier: B6:9F:86:83:89:D7:FD:22:02:D7:65:56:79:BB:B9:31:5B:4F:BE:F0 Authority key identifier: 9E:F3:E6:04:A6:3F:2C:EF:4B:DD:E3:7D:CA:89:0D:04:51:96:7A:EC Certificate issuer: /CN=A91EB002/serialNumber=9EF3E604A63F2CEF4BDDE37DCA890D0451967AEC Certificate serial: CC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nvPmBKY_LO9L3eN9yokNBFGWeuw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EB002/E24F8234022E11EF856F5132C4F9AE02/nvPmBKY_LO9L3eN9yokNBFGWeuw.mft Manifest number: C5 Signing time: Fri 25 Apr 2025 04:55:29 +0000 Manifest this update: Fri 25 Apr 2025 04:55:29 +0000 Manifest next update: Fri 02 May 2025 04:55:29 +0000 Files and hashes: 1: nvPmBKY_LO9L3eN9yokNBFGWeuw.crl (hash: URYgwCdbH7vKP4amlz0yi9c4TS1edmbql7AmIVCvf1k=) 2: A8E08476F1BB11EF9C4FBD41C4F9AE02.roa (hash: wizBRHqAhxq5TDJd9ORO3aI0XD9YwCzlFRUIm/jjcVM=) 3: 5A65F048F19211EFA4D9CD34C4F9AE02.roa (hash: 00Gxu/B4q0Oej8/UcNpQ1rIkErXZo9wae3oYgISIoHo=) 4: C00BD754F1BB11EF8DC4E241C4F9AE02.roa (hash: gkdI4g/jCDkiZBNQ9fSbLl+77wcKcjbE4DlEqTCL5ew=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EB002/E24F8234022E11EF856F5132C4F9AE02/nvPmBKY_LO9L3eN9yokNBFGWeuw.crl rsync://rpki.apnic.net/member_repository/A91EB002/E24F8234022E11EF856F5132C4F9AE02/nvPmBKY_LO9L3eN9yokNBFGWeuw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nvPmBKY_LO9L3eN9yokNBFGWeuw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 04:55:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 204 (0xcc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EB002, serialNumber=9EF3E604A63F2CEF4BDDE37DCA890D0451967AEC Validity Not Before: Apr 25 04:55:29 2025 GMT Not After : May 2 04:55:29 2025 GMT Subject: CN=680b15c1-c1b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:b9:2f:ea:3f:0d:8d:19:88:37:30:de:b4:aa: c5:72:26:c7:fc:22:72:9d:22:d1:a1:6e:d8:46:fd: f4:7c:13:ba:ae:4c:ed:32:42:b0:de:6d:30:ae:bf: 32:cb:3b:c1:f2:fb:28:fa:be:a0:f7:78:20:a7:a8: ca:70:f9:17:53:78:93:de:e9:48:fd:f4:2e:9b:92: b7:a5:73:c4:1c:1f:32:59:d4:e6:29:e7:2a:67:8c: 41:ed:25:09:cf:ad:5d:db:d1:48:ec:9b:ce:d6:67: 43:48:14:6a:0c:9f:32:be:80:16:a8:9c:85:15:c3: d8:3e:28:38:0f:02:c4:fa:97:8d:1f:da:e1:c8:f7: c0:78:bc:3c:e8:63:45:54:b8:67:75:80:d4:cd:41: 9e:45:74:89:39:ec:47:ff:75:48:88:ce:b2:64:5e: 57:23:97:4b:e1:ab:30:22:4a:8f:29:0a:94:cf:81: 7e:37:67:fb:ec:6b:38:b6:79:ec:8a:17:4a:d9:9e: 33:6f:d0:34:25:2f:d0:f8:92:f6:02:4e:50:db:85: 06:6d:91:ae:e5:57:2c:0d:bd:1c:2e:90:1c:8a:d6: 2e:46:ab:74:51:d7:83:36:d2:cb:73:e3:35:56:51: cf:11:85:0d:d9:d8:b3:f9:74:38:98:53:85:80:b2: 6b:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:9F:86:83:89:D7:FD:22:02:D7:65:56:79:BB:B9:31:5B:4F:BE:F0 X509v3 Authority Key Identifier: keyid:9E:F3:E6:04:A6:3F:2C:EF:4B:DD:E3:7D:CA:89:0D:04:51:96:7A:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EB002/E24F8234022E11EF856F5132C4F9AE02/nvPmBKY_LO9L3eN9yokNBFGWeuw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nvPmBKY_LO9L3eN9yokNBFGWeuw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EB002/E24F8234022E11EF856F5132C4F9AE02/nvPmBKY_LO9L3eN9yokNBFGWeuw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 92:ab:d6:7a:8b:be:b1:be:0e:f8:d1:31:ce:a1:3f:53:a4:ac: 70:83:a6:8f:74:1b:fb:26:83:95:d6:de:8a:f1:dc:bf:44:73: 9b:9d:3b:9d:cb:c1:27:6c:a4:c7:52:6d:d0:94:a7:b4:4b:19: 5c:9c:38:53:67:9e:78:50:5a:6b:2e:10:f0:22:63:d6:f8:eb: cd:b8:65:ee:c1:23:de:ce:cd:15:48:67:db:a8:bf:4a:97:b3: 42:f7:93:1f:b6:d2:a8:66:37:36:e3:60:0b:d8:c5:72:81:3f: 10:71:c0:c7:b5:9d:2a:e5:ff:a9:dc:14:79:e8:b7:6b:fe:6e: c7:17:99:fc:f9:3b:e4:82:77:90:80:b8:ea:ac:1c:af:f4:5b: 6a:27:f6:8a:ff:4d:15:4f:c9:ec:42:b5:85:f4:ab:75:fe:06: 23:bd:e6:be:17:61:a8:e9:70:e8:c9:bb:9b:88:87:ad:af:e7: dd:01:ff:ae:99:0b:d2:7f:0b:15:66:0a:66:e5:68:64:3d:d7: 8e:36:56:3e:30:d1:d3:f3:b8:e4:cd:1d:4b:40:02:cc:1e:f5: 40:ab:9e:c9:42:2a:77:bd:a8:59:59:b0:f2:ed:5a:50:f8:4b: 11:4a:36:74:51:82:29:95:02:3f:79:6e:af:64:58:10:0c:19: cb:74:05:ab -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUIwMDIxMTAvBgNVBAUTKDlFRjNFNjA0QTYzRjJDRUY0QkRERTM3RENBODkwRDA0 NTE5NjdBRUMwHhcNMjUwNDI1MDQ1NTI5WhcNMjUwNTAyMDQ1NTI5WjAYMRYwFAYD VQQDEw02ODBiMTVjMS1jMWIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwbkv6j8NjRmINzDetKrFcibH/CJynSLRoW7YRv30fBO6rkztMkKw3m0wrr8y yzvB8vso+r6g93ggp6jKcPkXU3iT3ulI/fQum5K3pXPEHB8yWdTmKecqZ4xB7SUJ z61d29FI7JvO1mdDSBRqDJ8yvoAWqJyFFcPYPig4DwLE+peNH9rhyPfAeLw86GNF VLhndYDUzUGeRXSJOexH/3VIiM6yZF5XI5dL4aswIkqPKQqUz4F+N2f77Gs4tnns ihdK2Z4zb9A0JS/Q+JL2Ak5Q24UGbZGu5VcsDb0cLpAcitYuRqt0UdeDNtLLc+M1 VlHPEYUN2diz+XQ4mFOFgLJr4wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLafhoOJ 1/0iAtdlVnm7uTFbT77wMB8GA1UdIwQYMBaAFJ7z5gSmPyzvS93jfcqJDQRRlnrs MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQjAwMi9FMjRGODIzNDAy MkUxMUVGODU2RjUxMzJDNEY5QUUwMi9udlBtQktZX0xPOUwzZU45eW9rTkJGR1dl dXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL252UG1CS1lfTE85TDNlTjl5b2tOQkZHV2V1dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QjAwMi9FMjRGODIzNDAyMkUxMUVGODU2RjUxMzJDNEY5QUUwMi9udlBtQktZX0xP OUwzZU45eW9rTkJGR1dldXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCSq9Z6i76xvg740THOoT9TpKxwg6aPdBv7JoOV1t6K8dy/RHObnTud y8EnbKTHUm3QlKe0SxlcnDhTZ554UFprLhDwImPW+OvNuGXuwSPezs0VSGfbqL9K l7NC95MfttKoZjc242AL2MVygT8QccDHtZ0q5f+p3BR56Ldr/m7HF5n8+TvkgneQ gLjqrByv9FtqJ/aK/00VT8nsQrWF9Kt1/gYjvea+F2Go6XDoybubiIetr+fdAf+u mQvSfwsVZgpm5WhkPdeONlY+MNHT87jkzR1LQALMHvVAq57JQip3vahZWbDy7VpQ +EsRSjZ0UYIplQI/eW6vZFgQDBnLdAWr -----END CERTIFICATE-----Generated at Sat Apr 26 13:57:17 2025 by rpki-client