$ rpki-client -vvf rpki.apnic.net/member_repository/A919D656/93CB77AE6ACB11ED9B633B39C4F9AE02/Nhu6lAj6GbXpfYLN2_-y55u7oz8.mft File: Nhu6lAj6GbXpfYLN2_-y55u7oz8.mft (raw, json) Hash identifier: Abcm2TZv9YOnOW1izRQKTXtr0uuKkvaq1VZE+k62I1Y= Subject key identifier: 1C:8A:DC:F1:3C:FA:57:AE:97:8F:E9:66:FF:B5:49:84:17:19:F0:FC Authority key identifier: 36:1B:BA:94:08:FA:19:B5:E9:7D:82:CD:DB:FF:B2:E7:9B:BB:A3:3F Certificate issuer: /CN=A919D656/serialNumber=361BBA9408FA19B5E97D82CDDBFFB2E79BBBA33F Certificate serial: 01D8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nhu6lAj6GbXpfYLN2_-y55u7oz8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919D656/93CB77AE6ACB11ED9B633B39C4F9AE02/Nhu6lAj6GbXpfYLN2_-y55u7oz8.mft Manifest number: 01D3 Signing time: Sat 17 May 2025 02:31:50 +0000 Manifest this update: Sat 17 May 2025 02:31:50 +0000 Manifest next update: Sat 24 May 2025 02:31:50 +0000 Files and hashes: 1: Nhu6lAj6GbXpfYLN2_-y55u7oz8.crl (hash: FoLEoeGtqzZoEYi6oNfkToTmGIQPzwYoqxhCvAn676M=) 2: 00FFAB766ACF11EDBCC28E3CC4F9AE02.roa (hash: XpTSLigO4HKKd3j+0vvg/u/YVC83XW6OinlRQSFc3LQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919D656/93CB77AE6ACB11ED9B633B39C4F9AE02/Nhu6lAj6GbXpfYLN2_-y55u7oz8.crl rsync://rpki.apnic.net/member_repository/A919D656/93CB77AE6ACB11ED9B633B39C4F9AE02/Nhu6lAj6GbXpfYLN2_-y55u7oz8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nhu6lAj6GbXpfYLN2_-y55u7oz8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 24 May 2025 02:31:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 472 (0x1d8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919D656, serialNumber=361BBA9408FA19B5E97D82CDDBFFB2E79BBBA33F Validity Not Before: May 17 02:31:50 2025 GMT Not After : May 24 02:31:50 2025 GMT Subject: CN=6827f516-0e71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:80:bb:83:37:9a:05:33:f7:66:9d:e5:b8:bf: aa:a9:8d:83:56:4e:74:63:28:07:8d:6f:55:fe:ee: 3f:65:fe:c8:01:f2:07:ff:aa:3e:1f:1f:ef:a4:4d: 8a:6f:5f:85:93:21:5a:c6:e7:6f:42:ab:d0:d1:d5: d4:01:4c:41:ea:34:56:21:99:50:a2:67:01:c1:1e: 17:28:03:cd:a5:b0:b3:6f:52:1f:33:eb:d9:cf:4d: f4:83:34:dc:3a:4a:bf:ce:48:f2:c6:e4:12:4a:5d: 00:00:c9:bf:e8:f7:00:94:29:09:e4:11:2d:d4:60: e8:f7:40:36:ba:82:02:f7:06:42:cd:41:62:10:14: 7c:9f:da:07:00:5a:1f:0e:c5:14:5a:d4:2c:57:0b: 69:dd:4d:d9:33:d8:f7:13:15:99:e4:9a:79:79:89: e5:98:13:76:86:08:68:9c:a6:d9:d7:91:05:3b:f4: 69:35:4b:ec:34:3a:26:34:61:a4:69:07:23:68:dd: 5d:ad:9b:cd:ba:9c:1e:33:66:de:b9:84:db:db:0a: 0f:0d:c4:35:bb:4a:69:b0:21:95:fb:b2:be:d9:33: 0a:1b:69:76:6c:a4:04:ee:cc:46:9b:4f:39:a9:03: 3f:d9:8f:c0:bf:c1:b0:14:be:52:30:00:ee:65:4f: f6:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:8A:DC:F1:3C:FA:57:AE:97:8F:E9:66:FF:B5:49:84:17:19:F0:FC X509v3 Authority Key Identifier: keyid:36:1B:BA:94:08:FA:19:B5:E9:7D:82:CD:DB:FF:B2:E7:9B:BB:A3:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919D656/93CB77AE6ACB11ED9B633B39C4F9AE02/Nhu6lAj6GbXpfYLN2_-y55u7oz8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nhu6lAj6GbXpfYLN2_-y55u7oz8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919D656/93CB77AE6ACB11ED9B633B39C4F9AE02/Nhu6lAj6GbXpfYLN2_-y55u7oz8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 99:22:6c:94:83:59:12:4d:7b:c2:0f:55:5c:cf:d4:70:48:21: 84:69:63:0e:ce:8e:3e:16:e7:ea:c0:d6:44:85:5d:cc:9c:30: 74:a0:ae:c7:29:25:8b:f2:23:7b:f2:52:1a:26:eb:f2:c8:f9: b1:5e:4f:1e:c4:b7:5c:bd:87:b1:eb:2a:9e:17:2f:08:bb:c1: 5f:de:32:8d:3a:64:5e:b6:36:79:a0:d0:a0:a7:00:01:1f:0a: 38:1f:c3:19:b9:b0:3b:1a:d4:8d:46:b9:07:ee:2c:50:e5:5d: 97:45:6b:7d:66:c5:e6:dc:ff:b6:a4:cd:ad:53:6f:30:1e:ac: d3:87:5a:1e:7c:45:ae:b7:e6:43:5d:68:8e:53:c2:48:c8:23: ea:ab:71:1b:4d:06:8e:1a:6d:19:68:8f:81:06:61:3b:08:0e: e7:3a:42:c6:58:15:9a:9e:ad:29:da:47:ce:23:e9:35:2c:b4: 82:5c:6e:03:59:3b:21:97:58:d7:9f:46:71:bf:18:a9:36:aa: 32:89:75:a3:33:46:05:fa:8a:32:b0:ad:1c:8c:32:7a:7d:fd: 76:a2:17:fd:ef:25:db:62:fb:8e:2b:0f:3e:b9:f6:21:1d:5b: 02:e5:88:c8:84:3f:27:3b:43:f5:97:45:2e:ba:9d:03:40:3d: 45:6b:1d:a2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAdgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUQ2NTYxMTAvBgNVBAUTKDM2MUJCQTk0MDhGQTE5QjVFOTdEODJDRERCRkZCMkU3 OUJCQkEzM0YwHhcNMjUwNTE3MDIzMTUwWhcNMjUwNTI0MDIzMTUwWjAYMRYwFAYD VQQDEw02ODI3ZjUxNi0wZTcxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs4C7gzeaBTP3Zp3luL+qqY2DVk50YygHjW9V/u4/Zf7IAfIH/6o+Hx/vpE2K b1+FkyFaxudvQqvQ0dXUAUxB6jRWIZlQomcBwR4XKAPNpbCzb1IfM+vZz030gzTc Okq/zkjyxuQSSl0AAMm/6PcAlCkJ5BEt1GDo90A2uoIC9wZCzUFiEBR8n9oHAFof DsUUWtQsVwtp3U3ZM9j3ExWZ5Jp5eYnlmBN2hghonKbZ15EFO/RpNUvsNDomNGGk aQcjaN1drZvNupweM2beuYTb2woPDcQ1u0ppsCGV+7K+2TMKG2l2bKQE7sxGm085 qQM/2Y/Av8GwFL5SMADuZU/2kwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFByK3PE8 +leul4/pZv+1SYQXGfD8MB8GA1UdIwQYMBaAFDYbupQI+hm16X2Czdv/suebu6M/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RDY1Ni85M0NCNzdBRTZB Q0IxMUVEOUI2MzNCMzlDNEY5QUUwMi9OaHU2bEFqNkdiWHBmWUxOMl8teTU1dTdv ejguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05odTZsQWo2R2JYcGZZTE4yXy15NTV1N296OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RDY1Ni85M0NCNzdBRTZBQ0IxMUVEOUI2MzNCMzlDNEY5QUUwMi9OaHU2bEFqNkdi WHBmWUxOMl8teTU1dTdvejgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCZImyUg1kSTXvCD1Vcz9RwSCGEaWMOzo4+FufqwNZEhV3MnDB0oK7H KSWL8iN78lIaJuvyyPmxXk8exLdcvYex6yqeFy8Iu8Ff3jKNOmRetjZ5oNCgpwAB Hwo4H8MZubA7GtSNRrkH7ixQ5V2XRWt9ZsXm3P+2pM2tU28wHqzTh1oefEWut+ZD XWiOU8JIyCPqq3EbTQaOGm0ZaI+BBmE7CA7nOkLGWBWanq0p2kfOI+k1LLSCXG4D WTshl1jXn0ZxvxipNqoyiXWjM0YF+ooysK0cjDJ6ff12ohf97yXbYvuOKw8+ufYh HVsC5YjIhD8nO0P1l0Uuup0DQD1Fax2i -----END CERTIFICATE-----Generated at Sat May 17 12:56:20 2025 by rpki-client