$ rpki-client -vvf rpki.apnic.net/member_repository/A91925D2/6DF602D078BF11EE93FFB764C4F9AE02/NFF8wp90Fp_XNqLCQGGfizMP3Z0.mft File: NFF8wp90Fp_XNqLCQGGfizMP3Z0.mft (raw, json) Hash identifier: KBfVCipflrKPNTYwfh/c0qRya88O5/11yVFBoGd8UZA= Subject key identifier: B4:0F:1A:B5:61:F1:BC:25:72:35:E0:7F:6B:10:4C:BA:80:B9:09:14 Authority key identifier: 34:51:7C:C2:9F:74:16:9F:D7:36:A2:C2:40:61:9F:8B:33:0F:DD:9D Certificate issuer: /CN=A91925D2/serialNumber=34517CC29F74169FD736A2C240619F8B330FDD9D Certificate serial: 0120 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NFF8wp90Fp_XNqLCQGGfizMP3Z0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91925D2/6DF602D078BF11EE93FFB764C4F9AE02/NFF8wp90Fp_XNqLCQGGfizMP3Z0.mft Manifest number: 011E Signing time: Tue 13 May 2025 03:56:44 +0000 Manifest this update: Tue 13 May 2025 03:56:43 +0000 Manifest next update: Tue 20 May 2025 03:56:43 +0000 Files and hashes: 1: NFF8wp90Fp_XNqLCQGGfizMP3Z0.crl (hash: jFEaXcCedP4KGs6nINfbEmYs7DOuDKXVf+co17nkotk=) 2: 2C4CD10078C011EE90D36F13C4F9AE02.roa (hash: +7GFnP4vXiPay7vN6IrJFOHX1SU8MW5paTRJSWnqDFI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91925D2/6DF602D078BF11EE93FFB764C4F9AE02/NFF8wp90Fp_XNqLCQGGfizMP3Z0.crl rsync://rpki.apnic.net/member_repository/A91925D2/6DF602D078BF11EE93FFB764C4F9AE02/NFF8wp90Fp_XNqLCQGGfizMP3Z0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NFF8wp90Fp_XNqLCQGGfizMP3Z0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 03:56:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 288 (0x120) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91925D2, serialNumber=34517CC29F74169FD736A2C240619F8B330FDD9D Validity Not Before: May 13 03:56:43 2025 GMT Not After : May 20 03:56:43 2025 GMT Subject: CN=6822c2fb-899f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:7d:a9:07:67:5d:18:08:65:0e:c1:cc:bb:29: 50:48:15:c4:b3:20:5c:ed:ab:01:df:29:15:e2:f7: 4b:90:67:c7:07:e1:d9:12:7c:5c:01:49:bd:77:4b: 95:00:21:0c:d8:d4:9e:c3:6e:59:e1:82:ae:9d:d1: 6c:ef:c1:49:ea:08:4c:94:5a:4b:5d:b7:69:a3:05: a6:87:41:44:46:2e:0f:3b:c5:6a:36:0b:cf:ee:68: a9:d0:11:f0:85:e0:cf:eb:5a:a4:67:47:f9:d5:71: 3e:24:c8:40:30:f3:83:4d:b2:af:ba:fd:f2:74:e5: 07:83:93:b6:61:19:a8:a6:6b:3b:7f:12:65:76:f5: 45:ea:a0:a4:30:e3:56:1e:d4:39:3b:fa:f9:24:03: 4e:36:16:d6:ad:93:fd:ad:ef:b1:76:dc:f8:c9:0e: 3d:20:f5:6b:4b:47:5b:76:1c:24:e8:8c:d6:a5:d8: 55:31:8e:07:87:30:b3:f9:6d:cd:2b:ef:46:81:54: db:10:92:07:6b:a3:f5:b7:4d:e4:52:a0:89:db:3c: 24:b7:c6:12:50:2b:cb:d7:c3:97:55:9a:79:11:2b: 04:cd:18:16:1d:c1:f3:f1:11:83:81:50:3b:84:d2: 50:95:e7:fb:4e:83:fa:2f:94:eb:a9:03:94:a9:fc: a7:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:0F:1A:B5:61:F1:BC:25:72:35:E0:7F:6B:10:4C:BA:80:B9:09:14 X509v3 Authority Key Identifier: keyid:34:51:7C:C2:9F:74:16:9F:D7:36:A2:C2:40:61:9F:8B:33:0F:DD:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91925D2/6DF602D078BF11EE93FFB764C4F9AE02/NFF8wp90Fp_XNqLCQGGfizMP3Z0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NFF8wp90Fp_XNqLCQGGfizMP3Z0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91925D2/6DF602D078BF11EE93FFB764C4F9AE02/NFF8wp90Fp_XNqLCQGGfizMP3Z0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 35:5c:37:2d:87:c2:c7:47:78:25:45:37:05:16:b3:80:0d:7c: f6:00:56:8a:7e:d5:e6:f4:cb:7c:cd:99:e0:c3:8d:82:94:84: ce:d9:8a:b5:42:e8:19:ac:0b:8a:f0:3b:d2:22:06:25:b5:a8: 4d:d0:52:f3:c9:e9:12:b7:21:59:36:31:82:9f:03:62:7f:1d: be:11:83:a2:78:b2:de:0d:e2:c2:75:ca:6b:be:0e:e7:27:3b: 6e:8e:95:45:64:b8:77:c6:b5:09:9d:1f:67:b7:f0:17:8a:22: be:3c:b6:cc:dd:7c:82:bc:9e:74:77:0a:0c:d5:32:02:0f:37: 85:a9:24:8e:cd:fe:ec:d5:57:58:fe:b0:4f:d6:e1:c6:90:2f: 00:cb:a2:6f:20:81:7d:fd:1c:a0:a6:14:71:fe:2c:db:3e:a0: 18:68:a0:d2:2d:4d:7f:74:0d:cd:aa:f5:54:ab:d3:b5:35:55: 2e:c8:5a:d7:ba:49:89:6b:b7:19:fd:e4:5f:eb:33:40:34:58: 82:de:12:e9:53:37:a7:2d:8e:02:50:19:25:41:4a:fb:c2:66: 1d:53:e2:70:76:af:cd:fc:76:d5:52:85:4d:c4:61:a5:7e:09: 37:19:c8:fe:be:52:a8:0e:2e:d5:4a:42:9e:45:03:ca:92:e2: e3:3d:ad:d5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTI1RDIxMTAvBgNVBAUTKDM0NTE3Q0MyOUY3NDE2OUZENzM2QTJDMjQwNjE5RjhC MzMwRkREOUQwHhcNMjUwNTEzMDM1NjQzWhcNMjUwNTIwMDM1NjQzWjAYMRYwFAYD VQQDEw02ODIyYzJmYi04OTlmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAkn2pB2ddGAhlDsHMuylQSBXEsyBc7asB3ykV4vdLkGfHB+HZEnxcAUm9d0uV ACEM2NSew25Z4YKundFs78FJ6ghMlFpLXbdpowWmh0FERi4PO8VqNgvP7mip0BHw heDP61qkZ0f51XE+JMhAMPODTbKvuv3ydOUHg5O2YRmopms7fxJldvVF6qCkMONW HtQ5O/r5JANONhbWrZP9re+xdtz4yQ49IPVrS0dbdhwk6IzWpdhVMY4HhzCz+W3N K+9GgVTbEJIHa6P1t03kUqCJ2zwkt8YSUCvL18OXVZp5ESsEzRgWHcHz8RGDgVA7 hNJQlef7ToP6L5TrqQOUqfynJQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLQPGrVh 8bwlcjXgf2sQTLqAuQkUMB8GA1UdIwQYMBaAFDRRfMKfdBaf1zaiwkBhn4szD92d MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MjVEMi82REY2MDJEMDc4 QkYxMUVFOTNGRkI3NjRDNEY5QUUwMi9ORkY4d3A5MEZwX1hOcUxDUUdHZml6TVAz WjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05GRjh3cDkwRnBfWE5xTENRR0dmaXpNUDNaMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MjVEMi82REY2MDJEMDc4QkYxMUVFOTNGRkI3NjRDNEY5QUUwMi9ORkY4d3A5MEZw X1hOcUxDUUdHZml6TVAzWjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA1XDcth8LHR3glRTcFFrOADXz2AFaKftXm9Mt8zZngw42ClITO2Yq1 QugZrAuK8DvSIgYltahN0FLzyekStyFZNjGCnwNifx2+EYOieLLeDeLCdcprvg7n JztujpVFZLh3xrUJnR9nt/AXiiK+PLbM3XyCvJ50dwoM1TICDzeFqSSOzf7s1VdY /rBP1uHGkC8Ay6JvIIF9/RygphRx/izbPqAYaKDSLU1/dA3NqvVUq9O1NVUuyFrX ukmJa7cZ/eRf6zNANFiC3hLpUzenLY4CUBklQUr7wmYdU+Jwdq/N/HbVUoVNxGGl fgk3Gcj+vlKoDi7VSkKeRQPKkuLjPa3V -----END CERTIFICATE-----Generated at Wed May 14 12:10:26 2025 by rpki-client