$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4B39/FEF549E8AF1611EE8C48A74DC4F9AE02/nMiKhtCzfs7o1XZX75l4lTJoDN8.mft File: nMiKhtCzfs7o1XZX75l4lTJoDN8.mft (raw, json) Hash identifier: ifI71DPKY406uc1sus5K9mhugOR6WsQlEJim88HllLk= Subject key identifier: B7:C4:6A:09:A6:B8:7D:85:BC:68:56:EA:0F:1C:6B:7C:09:68:A7:8C Authority key identifier: 9C:C8:8A:86:D0:B3:7E:CE:E8:D5:76:57:EF:99:78:95:32:68:0C:DF Certificate issuer: /CN=A91A4B39/serialNumber=9CC88A86D0B37ECEE8D57657EF99789532680CDF Certificate serial: 0104 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nMiKhtCzfs7o1XZX75l4lTJoDN8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A4B39/FEF549E8AF1611EE8C48A74DC4F9AE02/nMiKhtCzfs7o1XZX75l4lTJoDN8.mft Manifest number: 0101 Signing time: Fri 09 May 2025 04:12:43 +0000 Manifest this update: Fri 09 May 2025 04:12:42 +0000 Manifest next update: Fri 16 May 2025 04:12:42 +0000 Files and hashes: 1: nMiKhtCzfs7o1XZX75l4lTJoDN8.crl (hash: heG0eKjhbqYMTUZUhyrSXOh6zbloyO5ScCL5vofvMvg=) 2: AA778F4CAF8A11EEB167DB64C4F9AE02.roa (hash: fgJGtU/PUtSjCXondPTJa4miuZo+FHMCntsgLV0Tifg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A4B39/FEF549E8AF1611EE8C48A74DC4F9AE02/nMiKhtCzfs7o1XZX75l4lTJoDN8.crl rsync://rpki.apnic.net/member_repository/A91A4B39/FEF549E8AF1611EE8C48A74DC4F9AE02/nMiKhtCzfs7o1XZX75l4lTJoDN8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nMiKhtCzfs7o1XZX75l4lTJoDN8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 16 May 2025 04:12:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 260 (0x104) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A4B39, serialNumber=9CC88A86D0B37ECEE8D57657EF99789532680CDF Validity Not Before: May 9 04:12:42 2025 GMT Not After : May 16 04:12:42 2025 GMT Subject: CN=681d80ba-a230 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:60:83:9a:42:a8:7f:d1:bd:b6:7a:98:ab:77: 34:c9:fe:6b:a8:61:d8:41:95:e2:54:2f:5d:42:98: 3c:e4:be:d3:ef:f3:6e:4f:a3:d4:f6:57:b7:18:65: 2e:c9:e3:97:f9:4a:d4:f7:96:b1:b5:84:d7:6d:eb: 81:9c:ff:65:a9:75:8e:e6:30:59:b3:59:91:0a:7d: 99:93:cb:d3:13:21:51:ad:94:28:1b:4a:8e:2f:28: 63:f6:e6:f1:e9:a0:b9:d3:05:02:65:9d:58:07:be: c6:50:59:f3:8f:98:cf:57:13:8f:0a:82:69:1b:22: ae:bb:90:3c:de:28:f3:e9:c8:01:26:ce:e0:a4:04: 0c:2d:3c:ce:a6:d9:73:0a:a1:fd:f1:39:0a:9a:19: ff:98:0d:57:fb:3b:ff:93:db:7b:64:15:7a:5b:98: a6:72:57:ac:b2:40:ff:45:e2:85:f3:24:75:c1:76: 2e:cb:7e:ac:4f:6e:a1:5f:b9:7f:30:23:08:11:38: b2:8f:b6:fa:be:1a:7c:8c:01:37:07:03:81:85:94: 16:aa:cb:a1:87:05:d5:60:76:18:66:5b:cb:36:67: a7:fa:fa:a3:34:93:6c:a6:c9:fa:bc:60:5f:24:ad: c3:fb:de:9d:3c:44:28:1a:98:78:a9:28:8a:0e:5b: 04:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:C4:6A:09:A6:B8:7D:85:BC:68:56:EA:0F:1C:6B:7C:09:68:A7:8C X509v3 Authority Key Identifier: keyid:9C:C8:8A:86:D0:B3:7E:CE:E8:D5:76:57:EF:99:78:95:32:68:0C:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A4B39/FEF549E8AF1611EE8C48A74DC4F9AE02/nMiKhtCzfs7o1XZX75l4lTJoDN8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nMiKhtCzfs7o1XZX75l4lTJoDN8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4B39/FEF549E8AF1611EE8C48A74DC4F9AE02/nMiKhtCzfs7o1XZX75l4lTJoDN8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 58:5c:d7:74:a8:d0:e1:c7:55:00:94:a9:43:a5:d9:c5:6d:67: ae:cf:10:ef:76:67:01:c4:42:e2:6a:ce:66:5d:07:a6:1c:c4: c1:07:7f:76:5a:dd:6f:79:4b:42:7a:c1:0f:a1:d1:6b:4c:ba: 48:13:d4:84:ec:8d:16:ea:fc:82:7d:24:8e:0d:7d:ae:1c:cf: 34:e5:4c:af:ef:79:91:c6:66:4c:8e:d0:4c:9a:9c:71:b5:ac: fe:46:1d:6e:a0:34:6e:93:8c:bf:8e:14:84:04:4d:24:1b:64: 1e:f5:b2:d3:59:a9:6a:1d:e3:8a:1b:6a:e0:96:1d:e3:04:24: 95:2e:7f:94:4a:e5:d9:47:4f:66:f9:19:02:bc:42:40:f9:34: 8a:b5:cb:b3:fd:7b:f5:c1:ae:40:80:17:07:1e:55:87:74:07: 6c:c8:54:c7:43:73:ff:8f:33:38:7a:52:3e:74:d8:b4:83:73: 6c:3e:eb:e5:2b:17:af:a2:3b:32:60:eb:68:02:dc:d7:09:0d: 3b:f4:11:54:b0:67:a6:52:e8:f7:7a:f4:97:96:9a:d6:56:ae: dc:d3:38:1b:59:1f:c2:64:2a:a5:07:b1:a3:39:7a:68:33:ad: ad:f1:fe:ed:3c:3d:10:19:7a:0e:84:54:7b:6e:6d:01:83:77: ac:6f:7a:cd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTRCMzkxMTAvBgNVBAUTKDlDQzg4QTg2RDBCMzdFQ0VFOEQ1NzY1N0VGOTk3ODk1 MzI2ODBDREYwHhcNMjUwNTA5MDQxMjQyWhcNMjUwNTE2MDQxMjQyWjAYMRYwFAYD VQQDEw02ODFkODBiYS1hMjMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvmCDmkKof9G9tnqYq3c0yf5rqGHYQZXiVC9dQpg85L7T7/NuT6PU9le3GGUu yeOX+UrU95axtYTXbeuBnP9lqXWO5jBZs1mRCn2Zk8vTEyFRrZQoG0qOLyhj9ubx 6aC50wUCZZ1YB77GUFnzj5jPVxOPCoJpGyKuu5A83ijz6cgBJs7gpAQMLTzOptlz CqH98TkKmhn/mA1X+zv/k9t7ZBV6W5imclesskD/ReKF8yR1wXYuy36sT26hX7l/ MCMIETiyj7b6vhp8jAE3BwOBhZQWqsuhhwXVYHYYZlvLNmen+vqjNJNspsn6vGBf JK3D+96dPEQoGph4qSiKDlsEWwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLfEagmm uH2FvGhW6g8ca3wJaKeMMB8GA1UdIwQYMBaAFJzIiobQs37O6NV2V++ZeJUyaAzf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNEIzOS9GRUY1NDlFOEFG MTYxMUVFOEM0OEE3NERDNEY5QUUwMi9uTWlLaHRDemZzN28xWFpYNzVsNGxUSm9E TjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25NaUtodEN6ZnM3bzFYWlg3NWw0bFRKb0ROOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NEIzOS9GRUY1NDlFOEFGMTYxMUVFOEM0OEE3NERDNEY5QUUwMi9uTWlLaHRDemZz N28xWFpYNzVsNGxUSm9ETjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBYXNd0qNDhx1UAlKlDpdnFbWeuzxDvdmcBxELias5mXQemHMTBB392 Wt1veUtCesEPodFrTLpIE9SE7I0W6vyCfSSODX2uHM805Uyv73mRxmZMjtBMmpxx taz+Rh1uoDRuk4y/jhSEBE0kG2Qe9bLTWalqHeOKG2rglh3jBCSVLn+USuXZR09m +RkCvEJA+TSKtcuz/Xv1wa5AgBcHHlWHdAdsyFTHQ3P/jzM4elI+dNi0g3NsPuvl KxevojsyYOtoAtzXCQ079BFUsGemUuj3evSXlprWVq7c0zgbWR/CZCqlB7GjOXpo M62t8f7tPD0QGXoOhFR7bm0Bg3esb3rN -----END CERTIFICATE-----Generated at Sat May 10 10:35:07 2025 by rpki-client