$ rpki-client -vvf rpki.apnic.net/member_repository/A91EBF76/A6DE097C852311EBB7E9F383C4F9AE02/0NbEemjLQdEG6wQtcma5y7_Bpzs.mft File: 0NbEemjLQdEG6wQtcma5y7_Bpzs.mft (raw, json) Hash identifier: 9jHmddpzDGzFYKTMP5pT61LpFSoOl1g3bFzaSJvNzFI= Subject key identifier: 43:77:F0:AB:FA:41:14:DB:D9:E1:F7:47:37:ED:F2:C6:FC:2C:EA:0C Authority key identifier: D0:D6:C4:7A:68:CB:41:D1:06:EB:04:2D:72:66:B9:CB:BF:C1:A7:3B Certificate issuer: /CN=A91EBF76/serialNumber=D0D6C47A68CB41D106EB042D7266B9CBBFC1A73B Certificate serial: 064C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0NbEemjLQdEG6wQtcma5y7_Bpzs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EBF76/A6DE097C852311EBB7E9F383C4F9AE02/0NbEemjLQdEG6wQtcma5y7_Bpzs.mft Manifest number: 0647 Signing time: Thu 24 Apr 2025 22:19:35 +0000 Manifest this update: Thu 24 Apr 2025 22:19:35 +0000 Manifest next update: Thu 01 May 2025 22:19:35 +0000 Files and hashes: 1: 0NbEemjLQdEG6wQtcma5y7_Bpzs.crl (hash: 8jwqGjCUFT0rFZpURVUqh/eQIUpG1Yh95MFXTwc5Nno=) 2: 5FBDA400853011EBA1AF1D76C4F9AE02.roa (hash: av1fp+B0Rvyyl/M+tQ87N6LBAVDY2pJUK/6gF5bMDYg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EBF76/A6DE097C852311EBB7E9F383C4F9AE02/0NbEemjLQdEG6wQtcma5y7_Bpzs.crl rsync://rpki.apnic.net/member_repository/A91EBF76/A6DE097C852311EBB7E9F383C4F9AE02/0NbEemjLQdEG6wQtcma5y7_Bpzs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0NbEemjLQdEG6wQtcma5y7_Bpzs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 22:19:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1612 (0x64c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EBF76, serialNumber=D0D6C47A68CB41D106EB042D7266B9CBBFC1A73B Validity Not Before: Apr 24 22:19:35 2025 GMT Not After : May 1 22:19:35 2025 GMT Subject: CN=680ab8f7-bf8c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:10:18:74:fd:9c:82:96:50:05:2b:1c:6c:ee: 7b:a8:76:bb:ca:b9:c8:45:e1:ae:da:60:4d:76:9c: 85:1e:7e:fb:d6:23:4a:b5:8c:cc:18:ad:66:a9:18: 95:71:b2:de:5a:b1:ce:f6:e2:e1:ad:21:fc:fa:5c: 30:86:d8:70:55:6e:c9:a6:1b:d9:7b:44:da:87:96: 96:18:6d:cb:76:9a:eb:a1:86:c7:9e:41:97:db:aa: aa:8d:cc:bd:29:c3:13:36:fb:e6:d8:ed:5a:ff:22: f2:f7:ea:24:79:55:64:48:0d:14:d0:22:f0:0b:d0: fd:2c:88:a1:12:20:81:80:26:33:ce:4c:46:33:7d: cc:87:bc:c1:19:b3:a9:ee:2a:e1:63:d2:2b:03:e2: 8b:b4:fa:dd:f6:ef:fd:89:7c:e8:b4:bf:b8:d0:ed: 8c:37:5d:ce:4e:75:bb:43:4a:6c:91:d0:d2:b4:25: e7:61:79:f0:e1:34:bd:24:4d:f4:9d:77:80:f9:bf: a5:08:39:a9:39:e0:dd:4b:c5:f8:f1:2b:cf:40:a7: c2:e7:b3:12:23:37:14:62:88:47:fb:b1:90:bd:a6: 53:0b:41:fe:d2:09:fd:2f:fe:93:eb:65:91:15:e1: 5d:91:3b:a0:f0:60:04:42:7c:0f:d6:07:ed:74:a8: cb:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:77:F0:AB:FA:41:14:DB:D9:E1:F7:47:37:ED:F2:C6:FC:2C:EA:0C X509v3 Authority Key Identifier: keyid:D0:D6:C4:7A:68:CB:41:D1:06:EB:04:2D:72:66:B9:CB:BF:C1:A7:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EBF76/A6DE097C852311EBB7E9F383C4F9AE02/0NbEemjLQdEG6wQtcma5y7_Bpzs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0NbEemjLQdEG6wQtcma5y7_Bpzs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EBF76/A6DE097C852311EBB7E9F383C4F9AE02/0NbEemjLQdEG6wQtcma5y7_Bpzs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption aa:7c:1d:f5:6c:54:d4:f4:a8:21:68:93:c3:f9:10:bd:19:fd: f3:a9:28:6c:6d:db:8d:3a:2b:7e:38:11:f0:3c:59:dd:95:19: 46:f1:c8:0d:fa:ab:c3:65:d5:86:3c:f4:2c:31:d9:88:ff:12: d9:1c:2f:d8:64:c2:05:4d:d9:3f:3c:32:58:71:c8:1f:49:43: 9b:e5:00:89:03:57:2c:c2:67:01:e2:19:31:7b:d5:0a:ec:5a: 6f:c0:e4:08:de:75:65:49:02:15:e9:7f:6a:6e:e0:f5:0f:81: 64:d8:3d:59:60:48:e1:2c:3a:ec:57:5e:e5:36:e9:2a:cf:11: 59:b8:40:a5:aa:ac:da:4d:bc:c4:db:be:63:25:27:cd:b7:68: 0c:02:c1:e9:f9:4e:3c:f2:88:96:5f:86:7e:98:49:d0:c1:44: 82:32:af:58:0f:fb:cb:cc:33:c0:db:6b:6d:c3:3b:61:cd:ff: 72:15:e3:83:5d:64:6c:4d:68:04:82:40:23:62:ad:5d:2d:4c: f8:55:52:34:79:de:b1:25:ae:2b:d2:04:17:44:60:c7:e7:0a: 8a:c9:fd:d0:8a:7a:79:d6:fb:d8:33:83:32:f3:90:a8:67:38: a3:8a:e8:85:d9:c4:01:4c:89:90:a7:cd:86:67:b8:3b:02:76: 49:44:89:a8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBkwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUJGNzYxMTAvBgNVBAUTKEQwRDZDNDdBNjhDQjQxRDEwNkVCMDQyRDcyNjZCOUNC QkZDMUE3M0IwHhcNMjUwNDI0MjIxOTM1WhcNMjUwNTAxMjIxOTM1WjAYMRYwFAYD VQQDEw02ODBhYjhmNy1iZjhjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzBAYdP2cgpZQBSscbO57qHa7yrnIReGu2mBNdpyFHn771iNKtYzMGK1mqRiV cbLeWrHO9uLhrSH8+lwwhthwVW7JphvZe0Tah5aWGG3LdprroYbHnkGX26qqjcy9 KcMTNvvm2O1a/yLy9+okeVVkSA0U0CLwC9D9LIihEiCBgCYzzkxGM33Mh7zBGbOp 7irhY9IrA+KLtPrd9u/9iXzotL+40O2MN13OTnW7Q0pskdDStCXnYXnw4TS9JE30 nXeA+b+lCDmpOeDdS8X48SvPQKfC57MSIzcUYohH+7GQvaZTC0H+0gn9L/6T62WR FeFdkTug8GAEQnwP1gftdKjLgQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEN38Kv6 QRTb2eH3Rzft8sb8LOoMMB8GA1UdIwQYMBaAFNDWxHpoy0HRBusELXJmucu/wac7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQkY3Ni9BNkRFMDk3Qzg1 MjMxMUVCQjdFOUYzODNDNEY5QUUwMi8wTmJFZW1qTFFkRUc2d1F0Y21hNXk3X0Jw enMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzBOYkVlbWpMUWRFRzZ3UXRjbWE1eTdfQnB6cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QkY3Ni9BNkRFMDk3Qzg1MjMxMUVCQjdFOUYzODNDNEY5QUUwMi8wTmJFZW1qTFFk RUc2d1F0Y21hNXk3X0JwenMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCqfB31bFTU9KghaJPD+RC9Gf3zqShsbduNOit+OBHwPFndlRlG8cgN +qvDZdWGPPQsMdmI/xLZHC/YZMIFTdk/PDJYccgfSUOb5QCJA1cswmcB4hkxe9UK 7FpvwOQI3nVlSQIV6X9qbuD1D4Fk2D1ZYEjhLDrsV17lNukqzxFZuEClqqzaTbzE 275jJSfNt2gMAsHp+U488oiWX4Z+mEnQwUSCMq9YD/vLzDPA22ttwzthzf9yFeOD XWRsTWgEgkAjYq1dLUz4VVI0ed6xJa4r0gQXRGDH5wqKyf3Qinp51vvYM4My85Co ZzijiuiF2cQBTImQp82GZ7g7AnZJRImo -----END CERTIFICATE-----Generated at Sat Apr 26 04:31:40 2025 by rpki-client