$ rpki-client -vvf rpki.apnic.net/member_repository/A91538E7/BF404A5A026711EB8E1C301AC4F9AE02/nB8zLBJVRXgs4gxu9nGvHT_JN0s.mft File: nB8zLBJVRXgs4gxu9nGvHT_JN0s.mft (raw, json) Hash identifier: yYljo91y6+ytuqEGv31FddyV+GYYz2W3hc0HRIMklio= Subject key identifier: B3:E2:FD:D2:58:00:F9:AB:4F:12:1A:39:15:5F:E3:C7:95:E3:83:0C Authority key identifier: 9C:1F:33:2C:12:55:45:78:2C:E2:0C:6E:F6:71:AF:1D:3F:C9:37:4B Certificate issuer: /CN=A91538E7/serialNumber=9C1F332C125545782CE20C6EF671AF1D3FC9374B Certificate serial: 07A6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nB8zLBJVRXgs4gxu9nGvHT_JN0s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91538E7/BF404A5A026711EB8E1C301AC4F9AE02/nB8zLBJVRXgs4gxu9nGvHT_JN0s.mft Manifest number: 07A0 Signing time: Fri 16 May 2025 21:33:14 +0000 Manifest this update: Fri 16 May 2025 21:33:13 +0000 Manifest next update: Fri 23 May 2025 21:33:13 +0000 Files and hashes: 1: nB8zLBJVRXgs4gxu9nGvHT_JN0s.crl (hash: qgGNSceKyAxoVtNkDTNPklHQ8Nu8lcqOBlvSZHqs780=) 2: 5ABF5FB0026911EBB480261FC4F9AE02.roa (hash: f+tqP307alHmtL4Nv8/Sj5RxK8BZomyv0PqPMhlVuTE=) 3: 83B284AEB54F11EF8F5EE86FC4F9AE02.roa (hash: DfjAP4F+b7VdurvxdjrAlhP/yG1ojER19VQC4yTE15s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91538E7/BF404A5A026711EB8E1C301AC4F9AE02/nB8zLBJVRXgs4gxu9nGvHT_JN0s.crl rsync://rpki.apnic.net/member_repository/A91538E7/BF404A5A026711EB8E1C301AC4F9AE02/nB8zLBJVRXgs4gxu9nGvHT_JN0s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nB8zLBJVRXgs4gxu9nGvHT_JN0s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 23 May 2025 21:33:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1958 (0x7a6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91538E7, serialNumber=9C1F332C125545782CE20C6EF671AF1D3FC9374B Validity Not Before: May 16 21:33:13 2025 GMT Not After : May 23 21:33:13 2025 GMT Subject: CN=6827af19-bc43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:09:3a:92:90:2d:c1:57:93:66:32:7a:6c:8f: 7e:aa:c0:84:21:78:fe:33:84:67:3c:d4:f0:e3:85: 32:32:fc:a2:d7:44:f1:a6:ed:b8:a0:d1:01:4a:a0: f2:7a:25:a2:3a:fc:11:96:32:a5:88:dd:dd:b0:7a: e0:bd:53:60:73:aa:db:e4:ad:89:c1:d0:0d:64:aa: 8e:03:35:89:71:53:87:45:88:2e:06:86:68:54:42: 9a:3e:6f:ed:44:ee:95:ec:d0:a8:63:cd:42:78:47: 97:b1:73:1d:b5:91:43:94:75:b2:66:9c:8a:e3:dd: d0:ea:56:ba:2c:70:c5:d0:cf:ef:1a:fb:53:cf:b8: 93:58:05:61:c8:c8:48:95:1f:b3:c1:72:f4:d7:f4: c7:88:8d:cc:da:9e:01:b0:c0:c8:70:df:d0:57:0c: 0a:26:71:01:46:b1:d1:d7:f3:40:18:be:11:ed:f2: 71:7e:69:d5:61:f9:95:d0:37:60:5b:0b:e5:e8:da: ac:07:7d:15:ab:6d:a3:1f:6d:aa:34:44:1a:46:e0: a7:82:ba:f1:7d:59:34:b8:a9:21:08:fd:43:69:9f: b8:3b:e4:84:b0:d8:a1:b9:54:d6:9f:09:e1:2d:b8: 53:9e:2c:38:09:00:3f:43:d4:50:c5:6d:b6:e3:97: 07:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:E2:FD:D2:58:00:F9:AB:4F:12:1A:39:15:5F:E3:C7:95:E3:83:0C X509v3 Authority Key Identifier: keyid:9C:1F:33:2C:12:55:45:78:2C:E2:0C:6E:F6:71:AF:1D:3F:C9:37:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91538E7/BF404A5A026711EB8E1C301AC4F9AE02/nB8zLBJVRXgs4gxu9nGvHT_JN0s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nB8zLBJVRXgs4gxu9nGvHT_JN0s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91538E7/BF404A5A026711EB8E1C301AC4F9AE02/nB8zLBJVRXgs4gxu9nGvHT_JN0s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6a:0f:89:7e:9e:2a:4d:80:49:65:ab:e9:c8:bb:7e:54:d3:5c: 9a:75:ed:82:ab:23:e7:53:46:a2:79:4d:8c:b8:55:d4:c0:e2: 5e:55:52:b1:f0:4a:44:a7:97:23:60:75:55:26:67:c0:e2:30: 7f:f8:d2:56:2e:a6:f6:24:77:4c:22:b9:ac:c9:4b:a7:3f:01: 1c:2d:27:cb:85:c8:09:7c:35:04:d5:c0:30:3d:a9:82:73:c2: 4b:6b:2f:e4:70:39:02:84:e1:9d:19:fb:14:09:b4:f4:34:a1: 89:54:96:ff:81:b3:12:1c:d0:40:97:61:9a:8e:48:47:d1:63: 6f:66:28:12:c9:a0:94:b2:d3:26:a1:fd:1d:eb:d4:2d:d9:1f: d3:26:94:98:75:06:f9:ea:27:90:b3:c6:15:3f:bb:11:83:9f: d6:dd:83:2f:4b:9f:2f:8d:87:18:d3:40:12:17:c9:85:ae:99: 84:ab:b4:82:d2:10:be:62:83:a3:ee:ab:b3:85:98:fc:9b:50: 26:18:74:4c:a5:3e:10:c8:36:95:15:e8:13:26:39:9d:95:ee: 07:4e:f3:72:36:4e:9b:bc:f9:0f:a2:23:12:a7:69:fe:c2:03: 17:fc:80:e2:8b:15:a7:85:d2:39:0d:ee:bb:4b:df:f9:b4:e2: d9:12:2b:1e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB6YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTM4RTcxMTAvBgNVBAUTKDlDMUYzMzJDMTI1NTQ1NzgyQ0UyMEM2RUY2NzFBRjFE M0ZDOTM3NEIwHhcNMjUwNTE2MjEzMzEzWhcNMjUwNTIzMjEzMzEzWjAYMRYwFAYD VQQDEw02ODI3YWYxOS1iYzQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArQk6kpAtwVeTZjJ6bI9+qsCEIXj+M4RnPNTw44UyMvyi10Txpu24oNEBSqDy eiWiOvwRljKliN3dsHrgvVNgc6rb5K2JwdANZKqOAzWJcVOHRYguBoZoVEKaPm/t RO6V7NCoY81CeEeXsXMdtZFDlHWyZpyK493Q6la6LHDF0M/vGvtTz7iTWAVhyMhI lR+zwXL01/THiI3M2p4BsMDIcN/QVwwKJnEBRrHR1/NAGL4R7fJxfmnVYfmV0Ddg Wwvl6NqsB30Vq22jH22qNEQaRuCngrrxfVk0uKkhCP1DaZ+4O+SEsNihuVTWnwnh LbhTniw4CQA/Q9RQxW2245cH1QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLPi/dJY APmrTxIaORVf48eV44MMMB8GA1UdIwQYMBaAFJwfMywSVUV4LOIMbvZxrx0/yTdL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MzhFNy9CRjQwNEE1QTAy NjcxMUVCOEUxQzMwMUFDNEY5QUUwMi9uQjh6TEJKVlJYZ3M0Z3h1OW5HdkhUX0pO MHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25COHpMQkpWUlhnczRneHU5bkd2SFRfSk4wcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MzhFNy9CRjQwNEE1QTAyNjcxMUVCOEUxQzMwMUFDNEY5QUUwMi9uQjh6TEJKVlJY Z3M0Z3h1OW5HdkhUX0pOMHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBqD4l+nipNgEllq+nIu35U01yade2CqyPnU0aieU2MuFXUwOJeVVKx 8EpEp5cjYHVVJmfA4jB/+NJWLqb2JHdMIrmsyUunPwEcLSfLhcgJfDUE1cAwPamC c8JLay/kcDkChOGdGfsUCbT0NKGJVJb/gbMSHNBAl2GajkhH0WNvZigSyaCUstMm of0d69Qt2R/TJpSYdQb56ieQs8YVP7sRg5/W3YMvS58vjYcY00ASF8mFrpmEq7SC 0hC+YoOj7quzhZj8m1AmGHRMpT4QyDaVFegTJjmdle4HTvNyNk6bvPkPoiMSp2n+ wgMX/IDiixWnhdI5De67S9/5tOLZEise -----END CERTIFICATE-----Generated at Sat May 17 02:31:22 2025 by rpki-client