$ rpki-client -vvf rpki.apnic.net/member_repository/A91F9353/0875E64805C611EF89620A26C4F9AE02/rNBH0NiOJlfhLPkTAcFg8dPNLzM.mft File: rNBH0NiOJlfhLPkTAcFg8dPNLzM.mft (raw, json) Hash identifier: bCZvYSB2yxX5hZV32Zp+En7ZkQKCTiJC0FopXPgiCYI= Subject key identifier: A8:A7:DF:4F:22:76:AB:76:AB:81:41:CA:27:36:99:A4:D3:8B:F8:6A Authority key identifier: AC:D0:47:D0:D8:8E:26:57:E1:2C:F9:13:01:C1:60:F1:D3:CD:2F:33 Certificate issuer: /CN=A91F9353/serialNumber=ACD047D0D88E2657E12CF91301C160F1D3CD2F33 Certificate serial: E8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rNBH0NiOJlfhLPkTAcFg8dPNLzM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F9353/0875E64805C611EF89620A26C4F9AE02/rNBH0NiOJlfhLPkTAcFg8dPNLzM.mft Manifest number: D7 Signing time: Fri 25 Apr 2025 04:56:46 +0000 Manifest this update: Fri 25 Apr 2025 04:56:45 +0000 Manifest next update: Fri 02 May 2025 04:56:45 +0000 Files and hashes: 1: rNBH0NiOJlfhLPkTAcFg8dPNLzM.crl (hash: e2EfJ5YFBFf0ylHHpPW8LlQFd01g8fWcjvU/fTytblU=) 2: 3285ADDAA9D911EF9F30DA47C4F9AE02.roa (hash: u80/WP/FyzFGjNMk1YFjGdFPVtQyAbLjV6K7I70DeS4=) 3: DD267C66316511EFB284A421C4F9AE02.roa (hash: fBqSW8jISb6HiF16XH44dQP540yVqiuhIc6mypavGXQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F9353/0875E64805C611EF89620A26C4F9AE02/rNBH0NiOJlfhLPkTAcFg8dPNLzM.crl rsync://rpki.apnic.net/member_repository/A91F9353/0875E64805C611EF89620A26C4F9AE02/rNBH0NiOJlfhLPkTAcFg8dPNLzM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rNBH0NiOJlfhLPkTAcFg8dPNLzM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 04:56:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 232 (0xe8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F9353, serialNumber=ACD047D0D88E2657E12CF91301C160F1D3CD2F33 Validity Not Before: Apr 25 04:56:45 2025 GMT Not After : May 2 04:56:45 2025 GMT Subject: CN=680b160d-c514 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:b9:42:2f:d5:29:6d:4f:ad:9b:69:e0:71:d1: af:1a:2d:db:f0:12:92:2a:6e:b5:e9:65:5e:0e:50: c2:59:be:b1:5c:19:52:b5:c8:c9:46:20:fd:c8:64: 63:c7:45:f8:f5:27:77:d7:ec:5e:49:3b:67:5f:dd: ea:db:8e:3c:17:8c:6b:f6:cf:30:fa:43:28:26:27: 77:96:56:ed:c7:32:31:46:00:29:a6:98:8f:aa:e7: 1f:c1:4f:38:1f:0b:17:79:2b:dd:95:55:b4:45:42: 93:f6:8f:3d:5f:4a:a8:73:56:9a:d0:7a:0e:dd:30: 2f:25:38:7a:03:37:aa:98:0c:38:b4:d3:f0:fb:b3: 0b:f7:22:c1:cb:a3:57:8d:39:88:62:47:0a:9d:a5: f1:e1:0b:d1:b8:68:84:05:46:a8:72:14:f1:8d:cf: c7:c0:f7:86:df:c8:7a:d3:99:02:bf:3d:b4:e3:d7: 63:92:70:86:a1:24:16:3e:34:43:67:c3:fe:77:de: 90:6a:4a:01:f5:b6:77:fc:78:a9:48:03:a5:7f:27: 61:3e:83:ef:51:9a:31:d3:98:40:4e:9a:cb:1b:02: 38:04:ea:f9:c1:a6:da:9b:e0:79:4e:61:bd:69:2b: 5e:54:7b:be:eb:9e:3b:b8:5f:e5:f3:6d:c8:ad:f9: 88:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:A7:DF:4F:22:76:AB:76:AB:81:41:CA:27:36:99:A4:D3:8B:F8:6A X509v3 Authority Key Identifier: keyid:AC:D0:47:D0:D8:8E:26:57:E1:2C:F9:13:01:C1:60:F1:D3:CD:2F:33 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F9353/0875E64805C611EF89620A26C4F9AE02/rNBH0NiOJlfhLPkTAcFg8dPNLzM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rNBH0NiOJlfhLPkTAcFg8dPNLzM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F9353/0875E64805C611EF89620A26C4F9AE02/rNBH0NiOJlfhLPkTAcFg8dPNLzM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 81:d6:3b:c1:4e:52:1c:4c:95:47:8d:b8:a7:e0:6e:ba:7b:f2: ff:78:ab:44:37:1a:d0:66:88:0c:af:64:bb:00:ef:c2:88:5f: 40:7d:57:96:83:f6:de:75:59:82:11:c4:68:d0:75:2f:36:c6: 20:26:8a:da:b7:a2:df:e8:94:40:bb:57:6f:6b:2d:39:89:5e: 9f:2d:99:8a:93:e2:44:e2:a2:29:9c:2c:63:20:8d:d2:82:d4: 96:09:77:94:f8:13:cb:a6:dd:c4:35:4b:6c:92:87:0e:bf:b3: db:7e:b7:6c:ba:df:bf:c8:d2:0e:79:fc:3f:fa:20:af:d9:b9: af:d9:36:3a:a9:c3:b3:ff:97:44:1d:61:09:ad:18:44:48:7b: 20:19:7c:d3:10:f7:53:44:42:d9:5f:dd:4d:c7:db:1c:b2:81: 9f:36:84:6c:c0:ae:ad:9b:b6:27:9b:0a:f9:85:ad:f2:07:ca: 6f:9c:97:85:41:38:69:7d:7b:f2:e9:5f:f3:cf:02:bd:df:36: 9a:47:85:dc:fb:f5:a5:84:19:54:b7:3b:a2:a2:9b:8c:f5:8f: c4:77:33:5c:70:9f:3e:4d:b2:0c:d6:4f:27:ca:73:24:2f:5d: c1:6c:c1:f9:19:d1:a5:13:22:32:4f:c7:0c:bc:e0:01:83:24: d8:04:58:28 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjkzNTMxMTAvBgNVBAUTKEFDRDA0N0QwRDg4RTI2NTdFMTJDRjkxMzAxQzE2MEYx RDNDRDJGMzMwHhcNMjUwNDI1MDQ1NjQ1WhcNMjUwNTAyMDQ1NjQ1WjAYMRYwFAYD VQQDEw02ODBiMTYwZC1jNTE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzblCL9UpbU+tm2ngcdGvGi3b8BKSKm616WVeDlDCWb6xXBlStcjJRiD9yGRj x0X49Sd31+xeSTtnX93q2448F4xr9s8w+kMoJid3llbtxzIxRgApppiPqucfwU84 HwsXeSvdlVW0RUKT9o89X0qoc1aa0HoO3TAvJTh6AzeqmAw4tNPw+7ML9yLBy6NX jTmIYkcKnaXx4QvRuGiEBUaochTxjc/HwPeG38h605kCvz2049djknCGoSQWPjRD Z8P+d96QakoB9bZ3/HipSAOlfydhPoPvUZox05hATprLGwI4BOr5wabam+B5TmG9 aSteVHu+6547uF/l823IrfmIxwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKin308i dqt2q4FByic2maTTi/hqMB8GA1UdIwQYMBaAFKzQR9DYjiZX4Sz5EwHBYPHTzS8z MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGOTM1My8wODc1RTY0ODA1 QzYxMUVGODk2MjBBMjZDNEY5QUUwMi9yTkJIME5pT0psZmhMUGtUQWNGZzhkUE5M ek0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JOQkgwTmlPSmxmaExQa1RBY0ZnOGRQTkx6TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG OTM1My8wODc1RTY0ODA1QzYxMUVGODk2MjBBMjZDNEY5QUUwMi9yTkJIME5pT0ps ZmhMUGtUQWNGZzhkUE5Mek0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCB1jvBTlIcTJVHjbin4G66e/L/eKtENxrQZogMr2S7AO/CiF9AfVeW g/bedVmCEcRo0HUvNsYgJorat6Lf6JRAu1dvay05iV6fLZmKk+JE4qIpnCxjII3S gtSWCXeU+BPLpt3ENUtskocOv7Pbfrdsut+/yNIOefw/+iCv2bmv2TY6qcOz/5dE HWEJrRhESHsgGXzTEPdTRELZX91Nx9scsoGfNoRswK6tm7Ynmwr5ha3yB8pvnJeF QThpfXvy6V/zzwK93zaaR4Xc+/WlhBlUtzuiopuM9Y/EdzNccJ8+TbIM1k8nynMk L13BbMH5GdGlEyIyT8cMvOABgyTYBFgo -----END CERTIFICATE-----Generated at Sat Apr 26 04:35:12 2025 by rpki-client