$ rpki-client -vvf rpki.apnic.net/member_repository/A91F9B3A/7DEAE734F3A311E7B5D09C71C4F9AE02/nhW8ueM67e2saArIyYFuEVkFyiw.mft File: nhW8ueM67e2saArIyYFuEVkFyiw.mft (raw, json) Hash identifier: Mo/CGCUn0jcwzVvA6p57w8XbYGmlXql9/7OrtoDKTnw= Subject key identifier: B1:35:6D:FF:20:CB:66:53:27:6B:F8:6A:04:03:73:41:58:BB:CE:43 Authority key identifier: 9E:15:BC:B9:E3:3A:ED:ED:AC:68:0A:C8:C9:81:6E:11:59:05:CA:2C Certificate issuer: /CN=A91F9B3A/serialNumber=9E15BCB9E33AEDEDAC680AC8C9816E115905CA2C Certificate serial: 16CF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nhW8ueM67e2saArIyYFuEVkFyiw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F9B3A/7DEAE734F3A311E7B5D09C71C4F9AE02/nhW8ueM67e2saArIyYFuEVkFyiw.mft Manifest number: 16C2 Signing time: Thu 24 Apr 2025 16:41:12 +0000 Manifest this update: Thu 24 Apr 2025 16:41:12 +0000 Manifest next update: Thu 01 May 2025 16:41:12 +0000 Files and hashes: 1: nhW8ueM67e2saArIyYFuEVkFyiw.crl (hash: 5eV0peVKRtOKs+7dbK6ohJwePKKMvgMJfbD9gliIcco=) 2: 7A7A6AC6234311EA90D15227C4F9AE02.roa (hash: inLOYpzfiQRyaW4Jx9DTFdqEkju4HPJ5ZYoO4gNZ1PI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F9B3A/7DEAE734F3A311E7B5D09C71C4F9AE02/nhW8ueM67e2saArIyYFuEVkFyiw.crl rsync://rpki.apnic.net/member_repository/A91F9B3A/7DEAE734F3A311E7B5D09C71C4F9AE02/nhW8ueM67e2saArIyYFuEVkFyiw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nhW8ueM67e2saArIyYFuEVkFyiw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 16:41:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5839 (0x16cf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F9B3A, serialNumber=9E15BCB9E33AEDEDAC680AC8C9816E115905CA2C Validity Not Before: Apr 24 16:41:12 2025 GMT Not After : May 1 16:41:12 2025 GMT Subject: CN=680a69a8-46d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:87:e6:6b:2d:d1:76:44:4b:af:65:d5:45:61: 02:b1:9e:81:56:8b:92:e7:76:6a:70:ce:8c:8c:24: 4f:8e:57:d0:e8:61:53:06:15:d4:84:08:ac:4b:81: 92:70:3d:94:e4:1d:48:99:96:be:5f:5d:33:c4:f8: eb:1c:a5:1f:a4:3a:c3:49:78:73:16:dc:22:f4:6a: 5d:35:87:e7:d2:f6:5d:f9:0d:26:b4:33:f2:be:3e: 54:83:8a:bf:16:3c:c9:78:d6:54:da:30:c3:d8:35: ce:b3:44:dc:37:f2:c1:dd:bb:a8:b4:db:9e:0d:9e: c8:39:22:f4:03:8b:4e:a7:e0:3b:65:1d:7d:a9:9e: 0b:dd:5f:70:54:fd:48:2d:2f:b0:1c:c0:e2:b3:ab: f4:f7:2d:99:d7:d8:85:35:f3:00:d7:1f:2d:29:ea: c5:2e:dd:53:b8:00:35:a0:ef:52:95:0d:31:49:c1: 5a:ea:a2:55:b5:fb:02:e9:56:fe:f1:3b:68:c7:d6: 9f:4e:50:25:2c:8a:67:2e:a6:e3:2f:37:a5:9f:a1: b2:52:15:cb:a6:f3:5c:02:b0:18:c5:33:33:be:57: c7:65:ec:bd:d7:d3:5a:38:81:de:4f:f3:14:9f:08: 20:88:c1:a0:01:d2:73:cb:e1:19:a3:ca:a0:91:d7: 27:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:35:6D:FF:20:CB:66:53:27:6B:F8:6A:04:03:73:41:58:BB:CE:43 X509v3 Authority Key Identifier: keyid:9E:15:BC:B9:E3:3A:ED:ED:AC:68:0A:C8:C9:81:6E:11:59:05:CA:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F9B3A/7DEAE734F3A311E7B5D09C71C4F9AE02/nhW8ueM67e2saArIyYFuEVkFyiw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nhW8ueM67e2saArIyYFuEVkFyiw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F9B3A/7DEAE734F3A311E7B5D09C71C4F9AE02/nhW8ueM67e2saArIyYFuEVkFyiw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 01:cc:17:e2:93:74:45:fd:cb:8e:00:71:ae:1c:74:90:03:88: e1:ec:09:ec:b2:bd:80:da:32:19:b3:a2:0a:a4:67:ab:3e:6e: d9:20:8b:4d:1c:d4:cf:42:69:41:df:69:33:c2:8f:f4:f7:49: 07:b4:04:8c:f1:7b:2f:c2:8e:c0:bd:a8:8d:cc:b9:48:52:65: 93:f4:40:ae:26:ac:47:a0:f5:68:23:08:d3:b7:48:53:14:50: 07:34:43:29:90:2a:16:16:85:55:19:99:01:0b:02:64:48:f8: bd:19:8e:fd:2d:de:71:c5:8b:6b:be:de:95:40:c0:13:d3:18: ad:f7:5e:99:91:c8:9d:ab:df:c6:71:12:38:70:45:d7:da:22: b2:1e:85:31:24:9d:ec:37:fc:ef:b7:f4:f6:80:33:a5:f7:cd: 24:42:ca:67:45:23:28:f4:ac:29:24:7b:d8:09:4e:83:84:9e: 65:7e:c2:10:be:9a:13:80:99:7f:5a:0f:47:94:7f:73:7f:57: 4b:c0:85:18:c1:e3:9b:64:99:ac:44:e2:d1:7c:71:93:6e:e9: 66:8b:52:9f:f4:e0:9b:50:e8:7d:37:43:77:ba:2f:9a:04:f6: f7:52:d2:ca:61:ff:07:6b:4e:30:43:8f:16:c2:0f:91:b0:79: 3e:e3:3d:de -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFs8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjlCM0ExMTAvBgNVBAUTKDlFMTVCQ0I5RTMzQUVERURBQzY4MEFDOEM5ODE2RTEx NTkwNUNBMkMwHhcNMjUwNDI0MTY0MTEyWhcNMjUwNTAxMTY0MTEyWjAYMRYwFAYD VQQDEw02ODBhNjlhOC00NmQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsYfmay3RdkRLr2XVRWECsZ6BVouS53ZqcM6MjCRPjlfQ6GFTBhXUhAisS4GS cD2U5B1ImZa+X10zxPjrHKUfpDrDSXhzFtwi9GpdNYfn0vZd+Q0mtDPyvj5Ug4q/ FjzJeNZU2jDD2DXOs0TcN/LB3buotNueDZ7IOSL0A4tOp+A7ZR19qZ4L3V9wVP1I LS+wHMDis6v09y2Z19iFNfMA1x8tKerFLt1TuAA1oO9SlQ0xScFa6qJVtfsC6Vb+ 8Ttox9afTlAlLIpnLqbjLzeln6GyUhXLpvNcArAYxTMzvlfHZey919NaOIHeT/MU nwggiMGgAdJzy+EZo8qgkdcn3wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLE1bf8g y2ZTJ2v4agQDc0FYu85DMB8GA1UdIwQYMBaAFJ4VvLnjOu3trGgKyMmBbhFZBcos MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGOUIzQS83REVBRTczNEYz QTMxMUU3QjVEMDlDNzFDNEY5QUUwMi9uaFc4dWVNNjdlMnNhQXJJeVlGdUVWa0Z5 aXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25oVzh1ZU02N2Uyc2FBckl5WUZ1RVZrRnlpdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG OUIzQS83REVBRTczNEYzQTMxMUU3QjVEMDlDNzFDNEY5QUUwMi9uaFc4dWVNNjdl MnNhQXJJeVlGdUVWa0Z5aXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQABzBfik3RF/cuOAHGuHHSQA4jh7Anssr2A2jIZs6IKpGerPm7ZIItN HNTPQmlB32kzwo/090kHtASM8Xsvwo7AvaiNzLlIUmWT9ECuJqxHoPVoIwjTt0hT FFAHNEMpkCoWFoVVGZkBCwJkSPi9GY79Ld5xxYtrvt6VQMAT0xit916Zkcidq9/G cRI4cEXX2iKyHoUxJJ3sN/zvt/T2gDOl980kQspnRSMo9KwpJHvYCU6DhJ5lfsIQ vpoTgJl/Wg9HlH9zf1dLwIUYweObZJmsROLRfHGTbulmi1Kf9OCbUOh9N0N3ui+a BPb3UtLKYf8Ha04wQ48Wwg+RsHk+4z3e -----END CERTIFICATE-----Generated at Sat Apr 26 05:05:24 2025 by rpki-client