$ rpki-client -vvf rpki.apnic.net/member_repository/A91A998A/522CB7347AE811EF9A4A4737C4F9AE02/nAcegU2AsQ4sofcemy5TXDkFy2U.mft File: nAcegU2AsQ4sofcemy5TXDkFy2U.mft (raw, json) Hash identifier: DJkZGk8Wo9gOCRvK8WdzCBVEjoBvA2/zRd/8t1YarzM= Subject key identifier: AC:4D:3D:C5:7F:6F:F5:35:3B:99:EF:39:8A:5E:9F:7A:3D:87:0E:FE Authority key identifier: 9C:07:1E:81:4D:80:B1:0E:2C:A1:F7:1E:9B:2E:53:5C:39:05:CB:65 Certificate issuer: /CN=A91A998A/serialNumber=9C071E814D80B10E2CA1F71E9B2E535C3905CB65 Certificate serial: 99 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nAcegU2AsQ4sofcemy5TXDkFy2U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A998A/522CB7347AE811EF9A4A4737C4F9AE02/nAcegU2AsQ4sofcemy5TXDkFy2U.mft Manifest number: 8A Signing time: Sun 11 May 2025 05:30:16 +0000 Manifest this update: Sun 11 May 2025 05:30:16 +0000 Manifest next update: Sun 18 May 2025 05:30:16 +0000 Files and hashes: 1: nAcegU2AsQ4sofcemy5TXDkFy2U.crl (hash: gydwo7NkBr7wO875nCaY7kugIL2HfYKcSZ/RCTdoQMM=) 2: B6DE83747AE811EF94E01B38C4F9AE02.roa (hash: NENKWBR9x0FYQGSayxsc772B6xcKqdDax7O0tt16MtA=) 3: F60E5BC87C8711EFB9EB5F5FC4F9AE02.roa (hash: HhvN0QQ/t1aifshxGL31iNmJ/1oYowbGlAhBK1OxOCQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A998A/522CB7347AE811EF9A4A4737C4F9AE02/nAcegU2AsQ4sofcemy5TXDkFy2U.crl rsync://rpki.apnic.net/member_repository/A91A998A/522CB7347AE811EF9A4A4737C4F9AE02/nAcegU2AsQ4sofcemy5TXDkFy2U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nAcegU2AsQ4sofcemy5TXDkFy2U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 May 2025 05:30:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 153 (0x99) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A998A, serialNumber=9C071E814D80B10E2CA1F71E9B2E535C3905CB65 Validity Not Before: May 11 05:30:16 2025 GMT Not After : May 18 05:30:16 2025 GMT Subject: CN=682035e8-5e7b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:51:6b:cd:8b:cf:9b:b4:8f:92:d7:4d:57:71: 28:a4:1e:85:e3:66:9b:28:ce:ca:06:9f:03:fa:7c: 24:ea:79:bd:c5:50:17:68:35:8d:c8:a0:0b:84:2d: 5c:70:5b:a5:41:d7:8b:5d:5f:6f:b0:29:f2:f3:ed: 57:d3:7f:dd:02:5a:82:00:44:97:58:02:5b:d4:aa: a6:79:63:c3:47:1f:77:34:fd:8e:e2:33:75:7c:07: 8c:02:9b:62:ab:58:e9:66:6b:76:ed:c0:9e:a0:43: 18:d6:88:e6:6d:ed:66:a3:69:be:93:63:41:44:d0: ce:f6:14:0f:ad:2b:9b:f5:d0:c6:18:74:f1:02:52: b8:f9:71:49:5b:95:ce:61:25:26:35:5c:fd:68:d6: 3c:2d:0e:60:6f:94:b1:52:0b:8a:93:3b:d9:7b:3a: 0a:bc:25:81:76:d6:1a:6d:7b:51:bb:97:9b:5e:b4: c2:46:b2:5a:bb:05:83:f1:e0:5b:c8:25:95:82:5a: 40:3e:0e:e1:6e:a6:a9:37:f0:d5:b3:2d:19:78:08: 5d:89:7d:89:39:39:3e:aa:08:f2:e7:a3:d7:7f:30: 49:d5:04:4f:b5:38:03:08:da:56:fd:ac:28:7d:5c: cd:fd:97:4d:5d:ba:18:36:05:ab:05:c9:0e:92:30: f7:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:4D:3D:C5:7F:6F:F5:35:3B:99:EF:39:8A:5E:9F:7A:3D:87:0E:FE X509v3 Authority Key Identifier: keyid:9C:07:1E:81:4D:80:B1:0E:2C:A1:F7:1E:9B:2E:53:5C:39:05:CB:65 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A998A/522CB7347AE811EF9A4A4737C4F9AE02/nAcegU2AsQ4sofcemy5TXDkFy2U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nAcegU2AsQ4sofcemy5TXDkFy2U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A998A/522CB7347AE811EF9A4A4737C4F9AE02/nAcegU2AsQ4sofcemy5TXDkFy2U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 22:6c:c1:d0:8f:9d:68:bb:02:f2:38:79:cd:55:84:73:c2:75: 49:e0:f5:f4:0b:a5:3e:51:e4:8f:26:e9:7d:c9:57:6e:4a:54: b6:4e:27:2b:a7:fd:73:1a:63:81:fe:8b:b0:70:01:ab:14:a8: e5:83:17:b9:7d:76:24:04:79:5b:dd:84:03:db:2b:0a:f5:1e: 07:d6:7f:d1:7f:a4:eb:9f:13:49:47:a8:89:4f:d1:67:15:37: 9b:17:78:1f:b1:1c:b0:16:6e:fc:3a:cb:cc:36:7c:9a:0e:d1: 09:7d:b4:45:ae:10:01:9b:76:b0:0a:16:3d:84:9d:aa:91:be: 73:05:4f:e3:e8:f8:6c:29:89:99:c1:fc:15:1b:dc:e5:3d:70: 14:92:f4:2b:f1:6d:38:48:31:91:d3:4b:84:c9:72:17:e4:be: 60:8e:31:f9:cf:69:68:10:7c:8e:50:95:60:a9:6a:f3:98:d5: 90:ad:ba:d4:de:a6:e9:a0:b1:50:9c:e3:1f:fa:91:ea:8d:13: 9a:a2:32:c7:76:9a:1b:77:d2:e7:41:05:e4:c9:02:ea:13:6b: 38:f8:be:3c:ad:7b:9b:4d:b9:b8:54:bd:30:33:13:0e:f8:24: 65:c1:20:73:31:12:a9:c7:86:b3:60:47:ae:73:84:99:9c:ba: 5f:11:22:93 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTk5OEExMTAvBgNVBAUTKDlDMDcxRTgxNEQ4MEIxMEUyQ0ExRjcxRTlCMkU1MzVD MzkwNUNCNjUwHhcNMjUwNTExMDUzMDE2WhcNMjUwNTE4MDUzMDE2WjAYMRYwFAYD VQQDEw02ODIwMzVlOC01ZTdiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyFFrzYvPm7SPktdNV3EopB6F42abKM7KBp8D+nwk6nm9xVAXaDWNyKALhC1c cFulQdeLXV9vsCny8+1X03/dAlqCAESXWAJb1KqmeWPDRx93NP2O4jN1fAeMApti q1jpZmt27cCeoEMY1ojmbe1mo2m+k2NBRNDO9hQPrSub9dDGGHTxAlK4+XFJW5XO YSUmNVz9aNY8LQ5gb5SxUguKkzvZezoKvCWBdtYabXtRu5ebXrTCRrJauwWD8eBb yCWVglpAPg7hbqapN/DVsy0ZeAhdiX2JOTk+qgjy56PXfzBJ1QRPtTgDCNpW/awo fVzN/ZdNXboYNgWrBckOkjD3+QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKxNPcV/ b/U1O5nvOYpen3o9hw7+MB8GA1UdIwQYMBaAFJwHHoFNgLEOLKH3HpsuU1w5Bctl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBOTk4QS81MjJDQjczNDdB RTgxMUVGOUE0QTQ3MzdDNEY5QUUwMi9uQWNlZ1UyQXNRNHNvZmNlbXk1VFhEa0Z5 MlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25BY2VnVTJBc1E0c29mY2VteTVUWERrRnkyVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB OTk4QS81MjJDQjczNDdBRTgxMUVGOUE0QTQ3MzdDNEY5QUUwMi9uQWNlZ1UyQXNR NHNvZmNlbXk1VFhEa0Z5MlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAibMHQj51ouwLyOHnNVYRzwnVJ4PX0C6U+UeSPJul9yVduSlS2Ticr p/1zGmOB/ouwcAGrFKjlgxe5fXYkBHlb3YQD2ysK9R4H1n/Rf6TrnxNJR6iJT9Fn FTebF3gfsRywFm78OsvMNnyaDtEJfbRFrhABm3awChY9hJ2qkb5zBU/j6PhsKYmZ wfwVG9zlPXAUkvQr8W04SDGR00uEyXIX5L5gjjH5z2loEHyOUJVgqWrzmNWQrbrU 3qbpoLFQnOMf+pHqjROaojLHdpobd9LnQQXkyQLqE2s4+L48rXubTbm4VL0wMxMO +CRlwSBzMRKpx4azYEeuc4SZnLpfESKT -----END CERTIFICATE-----Generated at Mon May 12 19:55:49 2025 by rpki-client