$ rpki-client -vvf rpki.apnic.net/member_repository/A91F2BA6/84DD79E08B7611EA91050743C4F9AE02/nuqkUJudasqRzaQCHxBekhA363Q.mft File: nuqkUJudasqRzaQCHxBekhA363Q.mft (raw, json) Hash identifier: ODL/q9/ZkbG53RvNC+LXEf7mQ5m+o1u2oLvmwV+DC64= Subject key identifier: AB:07:D3:FA:AA:9C:8E:11:B0:38:21:1E:4C:0A:13:2D:78:AC:60:B4 Authority key identifier: 9E:EA:A4:50:9B:9D:6A:CA:91:CD:A4:02:1F:10:5E:92:10:37:EB:74 Certificate issuer: /CN=A91F2BA6/serialNumber=9EEAA4509B9D6ACA91CDA4021F105E921037EB74 Certificate serial: 0993 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nuqkUJudasqRzaQCHxBekhA363Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F2BA6/84DD79E08B7611EA91050743C4F9AE02/nuqkUJudasqRzaQCHxBekhA363Q.mft Manifest number: 0988 Signing time: Thu 24 Apr 2025 20:00:58 +0000 Manifest this update: Thu 24 Apr 2025 20:00:58 +0000 Manifest next update: Thu 01 May 2025 20:00:58 +0000 Files and hashes: 1: nuqkUJudasqRzaQCHxBekhA363Q.crl (hash: /xlF9VfqWB8UbiFLw86HWjSNzwMGPjiAKsCdmL26tEs=) 2: 5A7E13CA8C2B11EA90152018C4F9AE02.roa (hash: mjCI51z49d/ZR6NIO/Fc5BsNeBRLESAiodQLOKBux1k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F2BA6/84DD79E08B7611EA91050743C4F9AE02/nuqkUJudasqRzaQCHxBekhA363Q.crl rsync://rpki.apnic.net/member_repository/A91F2BA6/84DD79E08B7611EA91050743C4F9AE02/nuqkUJudasqRzaQCHxBekhA363Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nuqkUJudasqRzaQCHxBekhA363Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 20:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2451 (0x993) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F2BA6, serialNumber=9EEAA4509B9D6ACA91CDA4021F105E921037EB74 Validity Not Before: Apr 24 20:00:58 2025 GMT Not After : May 1 20:00:58 2025 GMT Subject: CN=680a987a-d21b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:48:82:98:d7:1e:45:e8:d4:55:70:d7:11:4f: 24:de:7f:c9:6d:02:3b:5e:1f:fa:68:44:02:69:ad: 97:67:bd:d3:84:4c:fb:ac:23:b9:2c:49:4c:f0:be: 53:ba:48:d3:45:4e:8b:52:13:4f:3b:cd:1e:5d:4e: 17:44:78:04:91:a7:cc:47:55:9d:cb:09:78:2f:ab: 24:ae:bd:64:1c:a5:94:76:29:bc:f9:06:54:d0:91: 14:b2:c8:4a:96:6f:7c:33:8c:4b:8a:d2:a5:52:98: 16:d0:1f:e0:08:94:15:75:b0:8a:ec:a1:21:21:d7: f6:90:bb:19:93:31:62:24:ee:2b:dc:47:18:e3:2d: 53:76:c3:d0:05:0f:0a:98:cc:0f:8b:c7:27:4e:a0: 27:c4:a4:33:36:b7:4c:8f:b5:a9:bd:eb:50:57:d7: 43:a0:73:52:bd:4b:b7:89:97:f1:cd:26:ba:1b:85: df:1e:78:4d:81:6e:20:67:99:7b:5b:15:c1:71:34: 13:4d:74:5d:8c:9c:5e:52:49:7f:40:36:60:53:01: fd:ec:64:a3:57:6c:f5:2d:e1:92:a7:d9:2c:6d:c0: 6e:1a:29:23:0a:b2:bb:cf:22:9e:bb:1e:a4:92:5e: 47:7d:ab:3f:e3:2e:11:05:16:e1:bb:d8:aa:9c:eb: 2e:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:07:D3:FA:AA:9C:8E:11:B0:38:21:1E:4C:0A:13:2D:78:AC:60:B4 X509v3 Authority Key Identifier: keyid:9E:EA:A4:50:9B:9D:6A:CA:91:CD:A4:02:1F:10:5E:92:10:37:EB:74 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F2BA6/84DD79E08B7611EA91050743C4F9AE02/nuqkUJudasqRzaQCHxBekhA363Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nuqkUJudasqRzaQCHxBekhA363Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F2BA6/84DD79E08B7611EA91050743C4F9AE02/nuqkUJudasqRzaQCHxBekhA363Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5e:38:b5:b0:aa:e6:d0:d4:1a:0a:70:1a:31:53:66:47:83:b3: 0e:83:fe:fd:21:87:f8:2d:16:36:51:7d:be:42:98:bf:be:9f: e9:83:59:94:60:44:78:da:9b:6a:fd:70:3f:db:ab:17:94:08: cd:7c:1c:70:4f:f6:dd:82:40:26:e2:6a:f6:23:48:03:86:d2: 14:5b:22:95:b6:48:51:83:a2:e2:c9:98:96:20:64:e1:17:4c: 3f:b1:ee:14:c5:29:0d:13:3a:e3:97:c7:67:70:8d:43:75:8a: c2:06:9b:27:cd:87:8a:83:fb:6e:d2:e6:65:f0:48:02:41:31: 3d:9c:92:bc:82:26:96:c5:d5:3f:f0:f2:b2:63:e7:d8:b1:28: 99:85:1d:06:2e:7d:b4:06:da:1e:b8:03:6b:77:2b:38:30:c0: ed:da:ff:b5:ea:b1:86:7a:b4:ec:8d:1e:ca:9e:7d:2a:ac:f0: 90:88:d4:38:0a:da:96:db:72:7a:c2:a7:23:e7:42:0e:e1:50: b5:25:07:72:19:b3:bd:ce:3a:82:a8:c0:f9:d4:be:42:1d:ce: c2:76:20:40:36:50:3a:03:31:89:41:72:18:07:f2:cb:87:83: 2e:d9:db:36:c1:51:0c:dd:cc:42:4d:06:80:2a:0f:9a:05:f2: ac:6c:46:bd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCZMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjJCQTYxMTAvBgNVBAUTKDlFRUFBNDUwOUI5RDZBQ0E5MUNEQTQwMjFGMTA1RTky MTAzN0VCNzQwHhcNMjUwNDI0MjAwMDU4WhcNMjUwNTAxMjAwMDU4WjAYMRYwFAYD VQQDEw02ODBhOTg3YS1kMjFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2EiCmNceRejUVXDXEU8k3n/JbQI7Xh/6aEQCaa2XZ73ThEz7rCO5LElM8L5T ukjTRU6LUhNPO80eXU4XRHgEkafMR1Wdywl4L6skrr1kHKWUdim8+QZU0JEUsshK lm98M4xLitKlUpgW0B/gCJQVdbCK7KEhIdf2kLsZkzFiJO4r3EcY4y1TdsPQBQ8K mMwPi8cnTqAnxKQzNrdMj7WpvetQV9dDoHNSvUu3iZfxzSa6G4XfHnhNgW4gZ5l7 WxXBcTQTTXRdjJxeUkl/QDZgUwH97GSjV2z1LeGSp9ksbcBuGikjCrK7zyKeux6k kl5Hfas/4y4RBRbhu9iqnOsuTQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKsH0/qq nI4RsDghHkwKEy14rGC0MB8GA1UdIwQYMBaAFJ7qpFCbnWrKkc2kAh8QXpIQN+t0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMkJBNi84NERENzlFMDhC NzYxMUVBOTEwNTA3NDNDNEY5QUUwMi9udXFrVUp1ZGFzcVJ6YVFDSHhCZWtoQTM2 M1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL251cWtVSnVkYXNxUnphUUNIeEJla2hBMzYzUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MkJBNi84NERENzlFMDhCNzYxMUVBOTEwNTA3NDNDNEY5QUUwMi9udXFrVUp1ZGFz cVJ6YVFDSHhCZWtoQTM2M1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBeOLWwqubQ1BoKcBoxU2ZHg7MOg/79IYf4LRY2UX2+Qpi/vp/pg1mU YER42ptq/XA/26sXlAjNfBxwT/bdgkAm4mr2I0gDhtIUWyKVtkhRg6LiyZiWIGTh F0w/se4UxSkNEzrjl8dncI1DdYrCBpsnzYeKg/tu0uZl8EgCQTE9nJK8giaWxdU/ 8PKyY+fYsSiZhR0GLn20BtoeuANrdys4MMDt2v+16rGGerTsjR7Knn0qrPCQiNQ4 CtqW23J6wqcj50IO4VC1JQdyGbO9zjqCqMD51L5CHc7CdiBANlA6AzGJQXIYB/LL h4Mu2ds2wVEM3cxCTQaAKg+aBfKsbEa9 -----END CERTIFICATE-----Generated at Sat Apr 26 13:09:37 2025 by rpki-client