$ rpki-client -vvf rpki.apnic.net/member_repository/A91F9749/99D17D96BF9B11ECAD3C0A30C4F9AE02/NebIf2uhtlE6EnD23BNt23ETZFc.mft File: NebIf2uhtlE6EnD23BNt23ETZFc.mft (raw, json) Hash identifier: X8xum7xUBKhV50Q1VXZXIJEuJ8Rp/r/RBTwoZyVIotM= Subject key identifier: 26:9F:D4:50:DE:71:87:EA:1B:65:E3:4D:3A:DA:20:47:63:02:35:D2 Authority key identifier: 35:E6:C8:7F:6B:A1:B6:51:3A:12:70:F6:DC:13:6D:DB:71:13:64:57 Certificate issuer: /CN=A91F9749/serialNumber=35E6C87F6BA1B6513A1270F6DC136DDB71136457 Certificate serial: 032F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NebIf2uhtlE6EnD23BNt23ETZFc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F9749/99D17D96BF9B11ECAD3C0A30C4F9AE02/NebIf2uhtlE6EnD23BNt23ETZFc.mft Manifest number: 032B Signing time: Fri 25 Apr 2025 00:51:37 +0000 Manifest this update: Fri 25 Apr 2025 00:51:37 +0000 Manifest next update: Fri 02 May 2025 00:51:37 +0000 Files and hashes: 1: NebIf2uhtlE6EnD23BNt23ETZFc.crl (hash: ghCKF/t8D4SaaUVDZiuEridYIvck+AWZUiRrXpiR7rI=) 2: 97B81DD6BF9F11ECAB5B1239C4F9AE02.roa (hash: WBPEzwrRJmEQao59jsv0p03EV57EGiVD2LS1uQaSE9s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F9749/99D17D96BF9B11ECAD3C0A30C4F9AE02/NebIf2uhtlE6EnD23BNt23ETZFc.crl rsync://rpki.apnic.net/member_repository/A91F9749/99D17D96BF9B11ECAD3C0A30C4F9AE02/NebIf2uhtlE6EnD23BNt23ETZFc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NebIf2uhtlE6EnD23BNt23ETZFc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 00:51:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 815 (0x32f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F9749, serialNumber=35E6C87F6BA1B6513A1270F6DC136DDB71136457 Validity Not Before: Apr 25 00:51:37 2025 GMT Not After : May 2 00:51:37 2025 GMT Subject: CN=680adc99-4b4d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:5a:c8:ee:55:90:e3:33:87:3d:2e:2b:27:92: 95:77:1f:72:51:32:cc:0f:f1:4d:7c:55:4c:5f:f1: 70:81:b9:67:f9:46:cb:ac:13:0e:f2:6a:b3:0d:9d: 9a:e6:f2:73:b8:da:24:cc:78:ca:7e:bd:38:13:77: aa:f6:0d:78:6d:35:1c:0f:6e:8e:34:35:a5:78:8f: 40:7c:30:51:a1:62:5c:2e:93:a5:1a:6e:a0:7a:72: 7a:dd:af:3d:ec:28:9e:d3:b9:83:f4:90:6a:91:14: 4c:c3:a8:cc:78:6d:d6:09:c4:32:5d:cf:de:82:8d: c0:0e:60:6d:22:50:2f:72:71:53:f1:fd:f3:0f:34: c4:19:66:fe:9d:06:75:c9:0d:6b:db:ab:41:cf:8b: f9:e0:da:53:54:a4:92:ac:f6:20:d0:9f:4d:3d:2d: 2f:73:a2:af:c3:f2:bc:a2:c8:97:9e:b5:cd:69:78: ea:01:02:3b:0e:51:69:63:0d:e8:fd:29:0f:0a:f7: 22:3c:a2:ad:b8:2f:da:ee:b7:80:cd:39:26:e8:4f: 88:ce:8c:85:50:02:10:65:ed:bf:a7:50:68:51:7a: 43:99:0e:b9:06:21:99:1e:7c:9f:23:34:8e:9c:e0: c5:f8:ad:a9:87:b4:1f:d8:2d:7b:42:fd:d9:51:ff: 95:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:9F:D4:50:DE:71:87:EA:1B:65:E3:4D:3A:DA:20:47:63:02:35:D2 X509v3 Authority Key Identifier: keyid:35:E6:C8:7F:6B:A1:B6:51:3A:12:70:F6:DC:13:6D:DB:71:13:64:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F9749/99D17D96BF9B11ECAD3C0A30C4F9AE02/NebIf2uhtlE6EnD23BNt23ETZFc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NebIf2uhtlE6EnD23BNt23ETZFc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F9749/99D17D96BF9B11ECAD3C0A30C4F9AE02/NebIf2uhtlE6EnD23BNt23ETZFc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3f:d7:fe:6b:13:31:47:ff:5a:92:13:91:91:54:7c:04:f5:18: e4:e8:c1:37:1f:f6:a9:2c:02:8c:44:25:22:87:6d:a7:12:14: 46:e3:5a:08:8d:40:03:a5:63:d5:2c:88:10:03:db:2c:4a:a1: db:be:03:da:43:01:05:72:5f:b9:dc:72:e3:97:ef:21:b0:f9: 80:b4:3c:d1:cb:08:18:7c:18:20:53:e3:ef:a5:dc:8b:7b:55: 07:5b:b5:89:16:0d:0a:69:e1:ed:f3:b4:2f:9e:e9:94:1a:87: ad:b6:5e:a7:d2:01:c7:9d:f5:be:ae:f8:9e:7d:0c:a2:bb:76: b5:06:54:a6:96:ef:d2:1a:92:7e:60:73:7f:42:a9:eb:b8:2c: fd:0b:4b:f4:00:cd:83:f7:3a:0d:7c:a7:d3:53:73:9d:65:05: 78:ac:eb:94:45:de:c1:8a:80:c8:e9:99:a2:b3:18:6f:ca:04: 9c:4f:35:2c:f8:21:5f:d3:9e:b7:12:cb:75:c3:b3:5f:fc:9c: 7c:c9:c6:4d:ae:3d:09:55:c4:86:4a:37:0d:81:9d:9a:da:23: b1:87:f9:3a:f8:a9:57:5d:93:06:5f:7f:99:6e:bb:52:ae:d0: 33:b2:74:b6:c3:7e:32:bb:55:3e:a2:28:3d:97:a9:62:94:ad: 91:f4:58:22 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAy8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Rjk3NDkxMTAvBgNVBAUTKDM1RTZDODdGNkJBMUI2NTEzQTEyNzBGNkRDMTM2RERC NzExMzY0NTcwHhcNMjUwNDI1MDA1MTM3WhcNMjUwNTAyMDA1MTM3WjAYMRYwFAYD VQQDEw02ODBhZGM5OS00YjRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyFrI7lWQ4zOHPS4rJ5KVdx9yUTLMD/FNfFVMX/Fwgbln+UbLrBMO8mqzDZ2a 5vJzuNokzHjKfr04E3eq9g14bTUcD26ONDWleI9AfDBRoWJcLpOlGm6genJ63a89 7Cie07mD9JBqkRRMw6jMeG3WCcQyXc/ego3ADmBtIlAvcnFT8f3zDzTEGWb+nQZ1 yQ1r26tBz4v54NpTVKSSrPYg0J9NPS0vc6Kvw/K8osiXnrXNaXjqAQI7DlFpYw3o /SkPCvciPKKtuC/a7reAzTkm6E+IzoyFUAIQZe2/p1BoUXpDmQ65BiGZHnyfIzSO nODF+K2ph7Qf2C17Qv3ZUf+VOQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCaf1FDe cYfqG2XjTTraIEdjAjXSMB8GA1UdIwQYMBaAFDXmyH9robZROhJw9twTbdtxE2RX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGOTc0OS85OUQxN0Q5NkJG OUIxMUVDQUQzQzBBMzBDNEY5QUUwMi9OZWJJZjJ1aHRsRTZFbkQyM0JOdDIzRVRa RmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05lYklmMnVodGxFNkVuRDIzQk50MjNFVFpGYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG OTc0OS85OUQxN0Q5NkJGOUIxMUVDQUQzQzBBMzBDNEY5QUUwMi9OZWJJZjJ1aHRs RTZFbkQyM0JOdDIzRVRaRmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA/1/5rEzFH/1qSE5GRVHwE9Rjk6ME3H/apLAKMRCUih22nEhRG41oI jUADpWPVLIgQA9ssSqHbvgPaQwEFcl+53HLjl+8hsPmAtDzRywgYfBggU+PvpdyL e1UHW7WJFg0KaeHt87QvnumUGoettl6n0gHHnfW+rviefQyiu3a1BlSmlu/SGpJ+ YHN/QqnruCz9C0v0AM2D9zoNfKfTU3OdZQV4rOuURd7BioDI6ZmisxhvygScTzUs +CFf0563Est1w7Nf/Jx8ycZNrj0JVcSGSjcNgZ2a2iOxh/k6+KlXXZMGX3+ZbrtS rtAzsnS2w34yu1U+oig9l6lilK2R9Fgi -----END CERTIFICATE-----Generated at Sat Apr 26 04:21:54 2025 by rpki-client