$ rpki-client -vvf rpki.apnic.net/member_repository/A91EEAD3/D6231A321E2D11EF83D95229C4F9AE02/N0X7n36iweJS0pvv2GphV3YNiMA.mft File: N0X7n36iweJS0pvv2GphV3YNiMA.mft (raw, json) Hash identifier: JXX0/zGLeJ4k+a1wA0FBrG0x5is+9w6AXMtW/IFw2mU= Subject key identifier: 4F:79:7C:92:CA:D3:87:76:B9:FB:9C:95:EE:8C:2E:AF:D6:1C:D7:39 Authority key identifier: 37:45:FB:9F:7E:A2:C1:E2:52:D2:9B:EF:D8:6A:61:57:76:0D:88:C0 Certificate issuer: /CN=A91EEAD3/serialNumber=3745FB9F7EA2C1E252D29BEFD86A6157760D88C0 Certificate serial: B1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N0X7n36iweJS0pvv2GphV3YNiMA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EEAD3/D6231A321E2D11EF83D95229C4F9AE02/N0X7n36iweJS0pvv2GphV3YNiMA.mft Manifest number: AE Signing time: Fri 25 Apr 2025 05:06:19 +0000 Manifest this update: Fri 25 Apr 2025 05:06:18 +0000 Manifest next update: Fri 02 May 2025 05:06:18 +0000 Files and hashes: 1: N0X7n36iweJS0pvv2GphV3YNiMA.crl (hash: cDmLkUxKFWfIVE9dSL2Y8/OWQCoxRXzuIgJ02URiV9s=) 2: E989DE0C1E2E11EFB8D12A2BC4F9AE02.roa (hash: PkN1Jtt374CIHLZsHPqXl9liocYOPeAQiQHQB34mvOQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EEAD3/D6231A321E2D11EF83D95229C4F9AE02/N0X7n36iweJS0pvv2GphV3YNiMA.crl rsync://rpki.apnic.net/member_repository/A91EEAD3/D6231A321E2D11EF83D95229C4F9AE02/N0X7n36iweJS0pvv2GphV3YNiMA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N0X7n36iweJS0pvv2GphV3YNiMA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 05:06:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 177 (0xb1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EEAD3, serialNumber=3745FB9F7EA2C1E252D29BEFD86A6157760D88C0 Validity Not Before: Apr 25 05:06:18 2025 GMT Not After : May 2 05:06:18 2025 GMT Subject: CN=680b184b-1341 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:67:8d:8d:c9:cd:a7:2e:2c:9a:b4:3f:40:83: 86:0d:23:cd:b0:4a:ba:67:2b:fa:56:41:94:c3:dc: 84:08:d2:d5:74:0e:28:9d:b6:db:8d:04:52:89:a8: 84:ec:83:94:df:7a:40:f7:7b:af:84:4e:93:13:30: bf:b8:08:2b:c6:f3:19:79:96:b2:38:15:ed:3a:72: 03:ca:d0:9d:1c:40:1e:0c:fb:d6:0b:96:29:65:82: af:e2:25:26:f7:df:22:de:12:54:86:35:89:7a:77: 2e:39:4f:e3:2d:a7:05:a4:46:2b:c1:b0:44:54:4d: 64:ce:3b:4f:23:71:e9:42:5b:f8:40:1b:74:54:9e: ff:8e:c2:28:9e:a1:ea:c8:e2:8b:f1:39:c7:6c:db: 49:a5:26:17:26:47:a4:33:8b:38:e6:25:57:02:ff: 46:5e:42:03:7b:d5:89:08:dd:b4:7e:44:54:48:af: 27:d0:24:c5:d0:c8:5c:95:7a:a5:5b:2a:55:70:56: 1d:f3:a6:5d:ce:96:d5:a7:d0:9c:3c:ce:35:32:5e: 9c:b2:92:7c:ab:bb:d9:ab:72:e6:62:9b:73:1b:5c: cc:37:4e:1b:2f:19:12:05:95:ed:4d:0b:dc:e0:4f: 8e:e1:c1:7c:f0:ca:7e:0a:00:82:1b:ca:a2:4a:21: e9:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:79:7C:92:CA:D3:87:76:B9:FB:9C:95:EE:8C:2E:AF:D6:1C:D7:39 X509v3 Authority Key Identifier: keyid:37:45:FB:9F:7E:A2:C1:E2:52:D2:9B:EF:D8:6A:61:57:76:0D:88:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EEAD3/D6231A321E2D11EF83D95229C4F9AE02/N0X7n36iweJS0pvv2GphV3YNiMA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N0X7n36iweJS0pvv2GphV3YNiMA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EEAD3/D6231A321E2D11EF83D95229C4F9AE02/N0X7n36iweJS0pvv2GphV3YNiMA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 37:dd:42:9d:50:54:b1:c3:dc:f2:19:fa:70:8e:ec:c7:9b:01: 7f:f1:96:e2:16:ec:e1:8f:ff:d0:2a:cb:fe:e9:7d:aa:f1:c6: 88:a1:cf:4e:11:09:46:f8:da:35:58:b5:ff:cb:a9:71:4a:41: 27:00:62:38:63:62:14:7f:43:78:bf:17:0d:f8:63:e0:bb:66: 31:f2:0d:37:b7:c0:dd:fe:58:41:d2:82:f1:38:86:e6:4d:f4: 02:98:df:00:58:2e:dd:5f:70:30:79:b4:80:9d:98:d1:86:82: 73:49:ef:0f:fb:6a:72:d0:8e:30:8e:9f:78:87:06:5f:76:6f: 43:f5:9e:6f:dc:59:40:62:d9:90:14:54:94:03:d2:a8:35:b2: 7a:37:f2:2c:4c:35:44:ca:f3:a7:06:11:04:ac:94:9b:cb:d4: 3d:60:ac:bc:fb:94:02:16:1f:c4:f9:f8:c1:65:39:b2:67:a1: 1b:2b:24:7d:d6:f8:80:d2:4e:a5:8e:98:1e:60:65:1f:ae:dd: 42:8c:16:cc:31:d9:68:53:60:24:97:78:d7:cd:a2:25:eb:09: 7c:4a:b4:50:74:c8:f3:ff:6c:e9:df:22:7a:90:d1:df:82:6f: 92:20:7f:f5:1a:fd:69:76:f5:ac:ad:fe:11:c0:aa:71:fd:85: cb:d7:86:ac -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUVBRDMxMTAvBgNVBAUTKDM3NDVGQjlGN0VBMkMxRTI1MkQyOUJFRkQ4NkE2MTU3 NzYwRDg4QzAwHhcNMjUwNDI1MDUwNjE4WhcNMjUwNTAyMDUwNjE4WjAYMRYwFAYD VQQDEw02ODBiMTg0Yi0xMzQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA02eNjcnNpy4smrQ/QIOGDSPNsEq6Zyv6VkGUw9yECNLVdA4onbbbjQRSiaiE 7IOU33pA93uvhE6TEzC/uAgrxvMZeZayOBXtOnIDytCdHEAeDPvWC5YpZYKv4iUm 998i3hJUhjWJencuOU/jLacFpEYrwbBEVE1kzjtPI3HpQlv4QBt0VJ7/jsIonqHq yOKL8TnHbNtJpSYXJkekM4s45iVXAv9GXkIDe9WJCN20fkRUSK8n0CTF0MhclXql WypVcFYd86ZdzpbVp9CcPM41Ml6cspJ8q7vZq3LmYptzG1zMN04bLxkSBZXtTQvc 4E+O4cF88Mp+CgCCG8qiSiHpLQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE95fJLK 04d2ufucle6MLq/WHNc5MB8GA1UdIwQYMBaAFDdF+59+osHiUtKb79hqYVd2DYjA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRUFEMy9ENjIzMUEzMjFF MkQxMUVGODNEOTUyMjlDNEY5QUUwMi9OMFg3bjM2aXdlSlMwcHZ2MkdwaFYzWU5p TUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL04wWDduMzZpd2VKUzBwdnYyR3BoVjNZTmlNQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RUFEMy9ENjIzMUEzMjFFMkQxMUVGODNEOTUyMjlDNEY5QUUwMi9OMFg3bjM2aXdl SlMwcHZ2MkdwaFYzWU5pTUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA33UKdUFSxw9zyGfpwjuzHmwF/8ZbiFuzhj//QKsv+6X2q8caIoc9O EQlG+No1WLX/y6lxSkEnAGI4Y2IUf0N4vxcN+GPgu2Yx8g03t8Dd/lhB0oLxOIbm TfQCmN8AWC7dX3AwebSAnZjRhoJzSe8P+2py0I4wjp94hwZfdm9D9Z5v3FlAYtmQ FFSUA9KoNbJ6N/IsTDVEyvOnBhEErJSby9Q9YKy8+5QCFh/E+fjBZTmyZ6EbKyR9 1viA0k6ljpgeYGUfrt1CjBbMMdloU2Akl3jXzaIl6wl8SrRQdMjz/2zp3yJ6kNHf gm+SIH/1Gv1pdvWsrf4RwKpx/YXL14as -----END CERTIFICATE-----Generated at Sat Apr 26 12:25:48 2025 by rpki-client