$ rpki-client -vvf rpki.apnic.net/member_repository/A913647F/C21C7CF686DB11EFBA4D5F26C4F9AE02/Nnh5oLhd2Dc2N4g3k_Ve6zsiHc8.mft File: Nnh5oLhd2Dc2N4g3k_Ve6zsiHc8.mft (raw, json) Hash identifier: RQLWcpQNbz1IncwsUb9Ui27jPrgpbNgiHuGQh+dbW9U= Subject key identifier: 35:8E:BB:73:EC:7F:71:70:28:F6:CD:7F:D4:DE:91:A1:1C:4A:F3:11 Authority key identifier: 36:78:79:A0:B8:5D:D8:37:36:37:88:37:93:F5:5E:EB:3B:22:1D:CF Certificate issuer: /CN=A913647F/serialNumber=367879A0B85DD8373637883793F55EEB3B221DCF Certificate serial: 70 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nnh5oLhd2Dc2N4g3k_Ve6zsiHc8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913647F/C21C7CF686DB11EFBA4D5F26C4F9AE02/Nnh5oLhd2Dc2N4g3k_Ve6zsiHc8.mft Manifest number: 6F Signing time: Fri 09 May 2025 05:53:32 +0000 Manifest this update: Fri 09 May 2025 05:53:32 +0000 Manifest next update: Fri 16 May 2025 05:53:32 +0000 Files and hashes: 1: Nnh5oLhd2Dc2N4g3k_Ve6zsiHc8.crl (hash: GZrSRgtjekqPGuo+Ip/yH+PlyhmrQXr9amFvfwrWFjc=) 2: FD3934BC86E211EF8CF27626C4F9AE02.roa (hash: q92cRpTpYuTn7sZTn7J75VBEAOI5W+lV4dg/tHrggGA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913647F/C21C7CF686DB11EFBA4D5F26C4F9AE02/Nnh5oLhd2Dc2N4g3k_Ve6zsiHc8.crl rsync://rpki.apnic.net/member_repository/A913647F/C21C7CF686DB11EFBA4D5F26C4F9AE02/Nnh5oLhd2Dc2N4g3k_Ve6zsiHc8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nnh5oLhd2Dc2N4g3k_Ve6zsiHc8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 16 May 2025 05:53:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 112 (0x70) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913647F, serialNumber=367879A0B85DD8373637883793F55EEB3B221DCF Validity Not Before: May 9 05:53:32 2025 GMT Not After : May 16 05:53:32 2025 GMT Subject: CN=681d985c-e535 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:2f:51:30:6f:62:73:29:e9:92:de:d4:6a:17: 03:fd:f2:b2:88:53:5d:d9:66:5d:10:2f:02:d5:4d: 63:29:22:6e:5a:e9:3e:d8:87:aa:80:6e:7a:a0:71: f5:d3:2a:fd:05:f4:ff:0a:d8:db:bc:d6:1f:20:be: e3:c2:4f:e4:ab:48:fa:03:d1:32:8c:58:ed:d7:bb: 28:aa:47:eb:b6:50:00:b8:a6:8d:14:cf:64:37:64: d7:d0:6d:79:c2:b7:e1:08:5e:da:82:ea:20:4e:40: d4:7e:bc:6f:61:b0:03:c2:ef:c9:65:b9:27:c9:91: 8f:53:01:e5:59:91:57:85:d7:cf:4e:be:4a:e1:b2: 07:43:50:30:17:ee:da:43:a4:8e:e0:f6:de:3f:a3: a9:23:af:87:9e:3f:ac:4a:0a:d4:ca:79:33:86:eb: 47:16:2d:34:7a:ac:27:c9:01:f5:f4:ed:61:81:4b: 1a:ba:be:96:d8:2c:8d:00:d2:cc:6f:34:2a:bf:39: 24:1e:02:80:d0:c5:0d:10:4b:a1:29:11:65:45:58: 2c:46:1e:68:50:49:62:90:2f:94:30:93:e6:e3:d8: 35:c7:2f:44:e9:13:cc:35:ce:93:6d:69:d0:e0:77: 45:16:c3:7d:2c:07:dc:c3:4a:f2:40:7d:3c:c4:20: 25:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:8E:BB:73:EC:7F:71:70:28:F6:CD:7F:D4:DE:91:A1:1C:4A:F3:11 X509v3 Authority Key Identifier: keyid:36:78:79:A0:B8:5D:D8:37:36:37:88:37:93:F5:5E:EB:3B:22:1D:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913647F/C21C7CF686DB11EFBA4D5F26C4F9AE02/Nnh5oLhd2Dc2N4g3k_Ve6zsiHc8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nnh5oLhd2Dc2N4g3k_Ve6zsiHc8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913647F/C21C7CF686DB11EFBA4D5F26C4F9AE02/Nnh5oLhd2Dc2N4g3k_Ve6zsiHc8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 90:9f:3b:e5:df:c2:d3:0c:a9:e2:2c:0b:ef:01:76:c6:57:f1: 64:ff:7f:d3:fa:06:28:f6:c5:8a:e4:e0:ed:38:6d:ea:58:b8: c0:0e:34:b8:9f:cf:b9:ce:be:03:af:b5:d4:54:97:ee:01:da: 00:65:1c:8f:39:a6:35:4f:25:41:cb:1f:76:5c:4d:ac:80:ca: 10:92:e0:95:98:73:76:d6:8d:ea:28:43:34:e8:fa:e8:18:3d: e5:30:9d:75:1d:63:21:e5:10:4f:67:5d:c0:5b:d6:12:58:e3: 88:34:c1:f4:85:c5:69:cc:e7:c6:91:ac:39:aa:89:fe:7b:a4: 0c:a8:70:72:be:e8:a2:ad:2a:9f:e7:9a:aa:13:fa:29:bf:f1: 59:03:ce:94:15:79:e4:ed:b4:1c:2f:dd:f8:89:cb:84:89:a4: f7:55:ec:3c:45:4b:c1:9b:84:11:02:e4:20:8e:f4:a2:9a:99: 71:a9:f2:5d:46:f2:52:36:b9:12:90:17:ef:b7:9b:64:21:5a: 7b:55:4e:e2:6c:53:8f:ce:2d:88:15:01:81:d9:69:f6:14:b8: f9:e4:4f:0c:64:ef:3c:82:67:a7:97:f6:a5:3b:83:b1:f4:cd: bb:98:a8:b3:77:85:12:b7:9a:fe:98:c2:6b:71:1b:1f:5b:dd: 0c:f1:d3:58 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBcDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz NjQ3RjExMC8GA1UEBRMoMzY3ODc5QTBCODVERDgzNzM2Mzc4ODM3OTNGNTVFRUIz QjIyMURDRjAeFw0yNTA1MDkwNTUzMzJaFw0yNTA1MTYwNTUzMzJaMBgxFjAUBgNV BAMTDTY4MWQ5ODVjLWU1MzUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCaL1Ewb2JzKemS3tRqFwP98rKIU13ZZl0QLwLVTWMpIm5a6T7Yh6qAbnqgcfXT Kv0F9P8K2Nu81h8gvuPCT+SrSPoD0TKMWO3XuyiqR+u2UAC4po0Uz2Q3ZNfQbXnC t+EIXtqC6iBOQNR+vG9hsAPC78lluSfJkY9TAeVZkVeF189OvkrhsgdDUDAX7tpD pI7g9t4/o6kjr4eeP6xKCtTKeTOG60cWLTR6rCfJAfX07WGBSxq6vpbYLI0A0sxv NCq/OSQeAoDQxQ0QS6EpEWVFWCxGHmhQSWKQL5Qwk+bj2DXHL0TpE8w1zpNtadDg d0UWw30sB9zDSvJAfTzEICWZAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUNY67c+x/ cXAo9s1/1N6RoRxK8xEwHwYDVR0jBBgwFoAUNnh5oLhd2Dc2N4g3k/Ve6zsiHc8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM2NDdGL0MyMUM3Q0Y2ODZE QjExRUZCQTRENUYyNkM0RjlBRTAyL05uaDVvTGhkMkRjMk40ZzNrX1ZlNnpzaUhj OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvTm5oNW9MaGQyRGMyTjRnM2tfVmU2enNpSGM4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM2 NDdGL0MyMUM3Q0Y2ODZEQjExRUZCQTRENUYyNkM0RjlBRTAyL05uaDVvTGhkMkRj Mk40ZzNrX1ZlNnpzaUhjOC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJCfO+XfwtMMqeIsC+8BdsZX8WT/f9P6Bij2xYrk4O04bepYuMAONLif z7nOvgOvtdRUl+4B2gBlHI85pjVPJUHLH3ZcTayAyhCS4JWYc3bWjeooQzTo+ugY PeUwnXUdYyHlEE9nXcBb1hJY44g0wfSFxWnM58aRrDmqif57pAyocHK+6KKtKp/n mqoT+im/8VkDzpQVeeTttBwv3fiJy4SJpPdV7DxFS8GbhBEC5CCO9KKamXGp8l1G 8lI2uRKQF++3m2QhWntVTuJsU4/OLYgVAYHZafYUuPnkTwxk7zyCZ6eX9qU7g7H0 zbuYqLN3hRK3mv6YwmtxGx9b3Qzx01g= -----END CERTIFICATE-----Generated at Fri May 9 23:46:46 2025 by rpki-client