$ rpki-client -vvf rpki.apnic.net/member_repository/A91A1860/4222E664ACFF11ED81035733C4F9AE02/NfIQw_y-8NYqPeiPXz-iThGTdEw.mft File: NfIQw_y-8NYqPeiPXz-iThGTdEw.mft (raw, json) Hash identifier: jPs/bb1v6jrNAbZbEAEsE6xe7ZJQM/A0bD0EwuBS8zU= Subject key identifier: A3:B0:52:DE:33:86:69:12:F4:3B:7A:9A:08:BD:B0:0C:B7:EA:B0:DB Authority key identifier: 35:F2:10:C3:FC:BE:F0:D6:2A:3D:E8:8F:5F:3F:A2:4E:11:93:74:4C Certificate issuer: /CN=A91A1860/serialNumber=35F210C3FCBEF0D62A3DE88F5F3FA24E1193744C Certificate serial: 01A9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NfIQw_y-8NYqPeiPXz-iThGTdEw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A1860/4222E664ACFF11ED81035733C4F9AE02/NfIQw_y-8NYqPeiPXz-iThGTdEw.mft Manifest number: 01A6 Signing time: Thu 15 May 2025 02:43:21 +0000 Manifest this update: Thu 15 May 2025 02:43:20 +0000 Manifest next update: Thu 22 May 2025 02:43:20 +0000 Files and hashes: 1: NfIQw_y-8NYqPeiPXz-iThGTdEw.crl (hash: F/2p5jIKY7tEQNb8euoh0LuXV1q7oRdl2C/OLlGcadQ=) 2: 832503DCAD0311ED8DFD5339C4F9AE02.roa (hash: WkJCgrbBmelQA5c6twQaEqrtwUH2ZoyRfcoaWRVuiIU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A1860/4222E664ACFF11ED81035733C4F9AE02/NfIQw_y-8NYqPeiPXz-iThGTdEw.crl rsync://rpki.apnic.net/member_repository/A91A1860/4222E664ACFF11ED81035733C4F9AE02/NfIQw_y-8NYqPeiPXz-iThGTdEw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NfIQw_y-8NYqPeiPXz-iThGTdEw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 22 May 2025 02:43:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 425 (0x1a9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A1860, serialNumber=35F210C3FCBEF0D62A3DE88F5F3FA24E1193744C Validity Not Before: May 15 02:43:20 2025 GMT Not After : May 22 02:43:20 2025 GMT Subject: CN=682554c8-7ac5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:53:da:5f:ce:5a:49:39:96:5c:34:c2:e9:8c: 05:0e:b6:22:ec:87:eb:fa:78:1e:59:37:dd:97:4d: 7b:fe:ed:0a:41:b4:49:42:59:e4:a0:37:29:8e:fa: f4:9d:1d:0c:85:82:bf:3b:aa:96:3d:90:44:5c:4a: 3f:73:87:6d:13:ba:95:07:b3:0f:69:07:7f:f7:37: 03:e8:ee:b4:9d:7f:9f:22:bb:52:95:81:ae:9d:dd: ce:7e:b6:f5:8e:ff:9f:f3:34:35:ce:8a:43:c0:31: e8:53:74:ec:8c:54:0e:e2:f3:06:84:00:cb:9b:68: e8:1a:3f:91:53:c0:4f:e0:81:33:29:e6:25:70:9e: 17:be:3c:f4:06:63:fe:42:da:10:77:e6:97:6d:e2: cd:26:c3:d2:ea:10:89:5b:8e:5e:21:ce:fc:0b:19: 27:bc:f1:80:c5:f5:d3:94:c7:02:b5:b5:3f:f3:e2: b0:7a:50:ef:3e:87:38:c4:fe:b7:da:53:8d:b7:35: b4:45:3b:65:02:ad:25:4a:49:a7:40:1c:05:29:2c: 4d:05:90:a4:f6:75:05:21:91:8f:4e:79:1c:8a:ea: 30:4e:09:2d:d6:ca:92:ce:ce:95:8f:02:62:ac:35: 62:06:bf:de:01:30:a6:89:a6:cb:fc:73:66:e9:cc: 4a:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:B0:52:DE:33:86:69:12:F4:3B:7A:9A:08:BD:B0:0C:B7:EA:B0:DB X509v3 Authority Key Identifier: keyid:35:F2:10:C3:FC:BE:F0:D6:2A:3D:E8:8F:5F:3F:A2:4E:11:93:74:4C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A1860/4222E664ACFF11ED81035733C4F9AE02/NfIQw_y-8NYqPeiPXz-iThGTdEw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NfIQw_y-8NYqPeiPXz-iThGTdEw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A1860/4222E664ACFF11ED81035733C4F9AE02/NfIQw_y-8NYqPeiPXz-iThGTdEw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8e:f9:32:f5:c3:18:fd:da:72:ee:fa:a7:b2:ef:dd:06:0d:03: f9:c5:d0:18:96:f9:69:d2:9e:13:ac:e9:3f:1d:63:21:c2:60: 35:17:f9:7a:f9:b3:1c:2a:1e:9c:2c:77:d9:4b:f0:44:c6:af: 21:33:9f:fc:0b:eb:79:bc:b2:2e:d3:ea:a2:1d:57:2f:86:8c: 26:99:2a:dc:ca:1d:35:81:09:2c:5a:e5:29:e8:ef:d1:1b:92: 10:16:88:40:f9:1a:88:0a:44:83:24:d4:92:8f:1f:19:6f:90: 69:7a:8c:9b:c7:3a:5a:ae:51:75:71:58:d6:56:fd:7f:63:9a: 58:f3:28:62:4f:a6:7a:dc:de:cd:f9:0b:3a:f2:79:73:4f:11: 4b:3f:8c:b4:e7:6f:de:b9:84:a1:c7:f3:76:f7:3d:ba:c7:97: e2:2c:0b:3e:75:82:95:8f:a4:d7:c7:4c:e7:87:b1:49:21:6e: c4:f3:ba:b7:bd:9c:d0:f5:6a:7a:51:56:46:8a:7c:86:c5:3c: 65:9d:81:81:26:a8:7d:ac:71:b3:cf:61:0c:78:21:bb:0c:0c: 74:65:d3:ef:65:5b:1f:43:56:5a:2a:b5:e6:b0:12:f4:a7:17: 5d:d8:3a:a7:4b:4f:ce:f1:7a:32:7b:96:46:2b:c0:fd:2a:17: 70:9e:03:3f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAakwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTE4NjAxMTAvBgNVBAUTKDM1RjIxMEMzRkNCRUYwRDYyQTNERTg4RjVGM0ZBMjRF MTE5Mzc0NEMwHhcNMjUwNTE1MDI0MzIwWhcNMjUwNTIyMDI0MzIwWjAYMRYwFAYD VQQDEw02ODI1NTRjOC03YWM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr1PaX85aSTmWXDTC6YwFDrYi7Ifr+ngeWTfdl017/u0KQbRJQlnkoDcpjvr0 nR0MhYK/O6qWPZBEXEo/c4dtE7qVB7MPaQd/9zcD6O60nX+fIrtSlYGund3Ofrb1 jv+f8zQ1zopDwDHoU3TsjFQO4vMGhADLm2joGj+RU8BP4IEzKeYlcJ4Xvjz0BmP+ QtoQd+aXbeLNJsPS6hCJW45eIc78CxknvPGAxfXTlMcCtbU/8+KwelDvPoc4xP63 2lONtzW0RTtlAq0lSkmnQBwFKSxNBZCk9nUFIZGPTnkciuowTgkt1sqSzs6VjwJi rDViBr/eATCmiabL/HNm6cxKYQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKOwUt4z hmkS9Dt6mgi9sAy36rDbMB8GA1UdIwQYMBaAFDXyEMP8vvDWKj3oj18/ok4Rk3RM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMTg2MC80MjIyRTY2NEFD RkYxMUVEODEwMzU3MzNDNEY5QUUwMi9OZklRd195LThOWXFQZWlQWHotaVRoR1Rk RXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05mSVF3X3ktOE5ZcVBlaVBYei1pVGhHVGRFdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MTg2MC80MjIyRTY2NEFDRkYxMUVEODEwMzU3MzNDNEY5QUUwMi9OZklRd195LThO WXFQZWlQWHotaVRoR1RkRXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCO+TL1wxj92nLu+qey790GDQP5xdAYlvlp0p4TrOk/HWMhwmA1F/l6 +bMcKh6cLHfZS/BExq8hM5/8C+t5vLIu0+qiHVcvhowmmSrcyh01gQksWuUp6O/R G5IQFohA+RqICkSDJNSSjx8Zb5BpeoybxzparlF1cVjWVv1/Y5pY8yhiT6Z63N7N +Qs68nlzTxFLP4y052/euYShx/N29z26x5fiLAs+dYKVj6TXx0znh7FJIW7E87q3 vZzQ9Wp6UVZGinyGxTxlnYGBJqh9rHGzz2EMeCG7DAx0ZdPvZVsfQ1ZaKrXmsBL0 pxdd2DqnS0/O8Xoye5ZGK8D9KhdwngM/ -----END CERTIFICATE-----Generated at Fri May 16 19:13:45 2025 by rpki-client