$ rpki-client -vvf rpki.apnic.net/member_repository/A91AB85A/185C39B603CD11ECABCE697BC4F9AE02/nZwAihKi96YP7_liJmsFAqHKC6I.mft File: nZwAihKi96YP7_liJmsFAqHKC6I.mft (raw, json) Hash identifier: SvE+WQAwloSZo4aEOssK/JwarKXCVmmSat0GB5l/+Tc= Subject key identifier: 14:76:C6:D6:F7:3E:65:C6:BF:FD:2D:5C:60:45:15:DF:F9:CC:36:B9 Authority key identifier: 9D:9C:00:8A:12:A2:F7:A6:0F:EF:F9:62:26:6B:05:02:A1:CA:0B:A2 Certificate issuer: /CN=A91AB85A/serialNumber=9D9C008A12A2F7A60FEFF962266B0502A1CA0BA2 Certificate serial: 0517 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nZwAihKi96YP7_liJmsFAqHKC6I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AB85A/185C39B603CD11ECABCE697BC4F9AE02/nZwAihKi96YP7_liJmsFAqHKC6I.mft Manifest number: 050F Signing time: Mon 12 May 2025 23:24:41 +0000 Manifest this update: Mon 12 May 2025 23:24:40 +0000 Manifest next update: Mon 19 May 2025 23:24:40 +0000 Files and hashes: 1: nZwAihKi96YP7_liJmsFAqHKC6I.crl (hash: UeaVLd07QP564rChlRk/J0ag4UoDkS5UymqWLTE7FSw=) 2: 46A2104603CF11ECA480B07CC4F9AE02.roa (hash: X8TS/dUIvy3XOI0UnJtA1d7RV1bb4SxZ7U2o6VOp3BA=) 3: 460AA4AE03CF11ECA480B07CC4F9AE02.roa (hash: Gk9zFIrI4hfeJ0HReT17DaXTFk6xr6upAecBQ6JDnHs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AB85A/185C39B603CD11ECABCE697BC4F9AE02/nZwAihKi96YP7_liJmsFAqHKC6I.crl rsync://rpki.apnic.net/member_repository/A91AB85A/185C39B603CD11ECABCE697BC4F9AE02/nZwAihKi96YP7_liJmsFAqHKC6I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nZwAihKi96YP7_liJmsFAqHKC6I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 23:24:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1303 (0x517) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AB85A, serialNumber=9D9C008A12A2F7A60FEFF962266B0502A1CA0BA2 Validity Not Before: May 12 23:24:40 2025 GMT Not After : May 19 23:24:40 2025 GMT Subject: CN=68228339-8e53 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:0f:a2:0a:3e:38:d0:ac:33:f3:e2:70:bb:d9: e0:83:f9:d4:49:e3:3a:fe:3b:3e:ff:ac:57:2d:82: 73:81:94:b7:61:e1:18:8b:c4:0c:29:57:1b:93:83: 1f:1e:fb:a1:c0:c7:90:4a:e5:5f:7b:86:79:aa:75: 9d:d9:ba:de:35:2a:b3:72:a7:4b:96:2f:f4:bd:d7: 8d:3f:75:1f:9c:60:fc:a8:89:e7:07:70:5a:8e:47: 0d:76:ed:0d:40:c4:91:c9:44:7d:29:ca:fc:9d:c7: b7:66:57:ec:bc:bb:81:d2:51:f9:c0:17:5e:83:11: a9:b4:26:77:bc:a9:28:4a:14:5c:7c:c5:9a:87:e3: 31:81:71:fb:ff:a0:2d:47:c2:72:83:45:a1:c9:45: dc:02:6e:28:34:ef:bb:5d:96:2d:d7:17:89:12:07: c6:e3:de:a7:b0:05:f9:24:9f:a2:bb:29:69:e6:1f: 30:0b:e8:aa:68:af:1e:e0:36:9d:09:a3:61:05:e5: 35:da:d2:8a:aa:00:78:33:d0:57:8b:56:78:04:ed: ae:d1:c2:68:61:fa:09:ed:bd:60:dc:6a:85:66:3a: be:ec:66:fd:c5:bf:fb:53:79:43:cd:f7:c7:8b:eb: d8:54:93:55:0c:07:31:d9:f8:92:cb:70:36:fb:17: 83:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:76:C6:D6:F7:3E:65:C6:BF:FD:2D:5C:60:45:15:DF:F9:CC:36:B9 X509v3 Authority Key Identifier: keyid:9D:9C:00:8A:12:A2:F7:A6:0F:EF:F9:62:26:6B:05:02:A1:CA:0B:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AB85A/185C39B603CD11ECABCE697BC4F9AE02/nZwAihKi96YP7_liJmsFAqHKC6I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nZwAihKi96YP7_liJmsFAqHKC6I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB85A/185C39B603CD11ECABCE697BC4F9AE02/nZwAihKi96YP7_liJmsFAqHKC6I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 18:aa:21:43:4c:78:e8:d4:25:9d:56:94:d5:33:2a:06:2d:14: 10:ed:87:c0:a9:3e:25:8f:97:52:88:00:3a:c8:17:c2:3f:d6: 38:43:be:1e:0a:55:fb:fb:2b:2d:74:a2:56:e2:41:ea:f0:98: 7d:c4:66:59:51:aa:3b:11:72:aa:6b:65:e9:18:40:00:df:3b: 08:9d:b4:b9:bb:78:4d:eb:60:0d:bb:18:84:9e:df:6c:1f:4b: ee:3f:05:17:3e:1f:7a:c8:50:38:d6:c3:b6:e2:2f:de:4a:ba: 63:74:2f:30:6e:dc:8f:a1:d8:73:cb:70:43:f7:7d:39:40:f5: 8b:a8:3c:c0:13:c9:bb:d6:e3:79:4b:5e:32:db:53:27:9d:21: 67:e9:88:44:97:31:8c:56:41:3b:ce:dd:9d:f5:9f:a0:98:60: 03:00:49:8d:79:2e:0a:63:3b:be:29:44:75:8a:1b:82:de:a2: 37:d4:b4:67:d4:66:7e:ab:10:1c:60:a5:d6:40:4f:6c:e1:ea: 11:dd:c0:d4:45:64:18:1e:86:74:3a:bc:2a:69:99:2f:c3:e5: 21:e5:5b:28:6c:50:00:0b:a8:a1:e3:4c:16:d1:b5:d6:62:19: 65:e0:70:85:da:78:0e:58:93:e9:3d:10:3e:dc:d1:63:f9:d4: a2:8c:3f:e9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBRcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUI4NUExMTAvBgNVBAUTKDlEOUMwMDhBMTJBMkY3QTYwRkVGRjk2MjI2NkIwNTAy QTFDQTBCQTIwHhcNMjUwNTEyMjMyNDQwWhcNMjUwNTE5MjMyNDQwWjAYMRYwFAYD VQQDEw02ODIyODMzOS04ZTUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvA+iCj440Kwz8+Jwu9ngg/nUSeM6/js+/6xXLYJzgZS3YeEYi8QMKVcbk4Mf HvuhwMeQSuVfe4Z5qnWd2breNSqzcqdLli/0vdeNP3UfnGD8qInnB3BajkcNdu0N QMSRyUR9Kcr8nce3ZlfsvLuB0lH5wBdegxGptCZ3vKkoShRcfMWah+MxgXH7/6At R8Jyg0WhyUXcAm4oNO+7XZYt1xeJEgfG496nsAX5JJ+iuylp5h8wC+iqaK8e4Dad CaNhBeU12tKKqgB4M9BXi1Z4BO2u0cJoYfoJ7b1g3GqFZjq+7Gb9xb/7U3lDzffH i+vYVJNVDAcx2fiSy3A2+xeD6QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBR2xtb3 PmXGv/0tXGBFFd/5zDa5MB8GA1UdIwQYMBaAFJ2cAIoSovemD+/5YiZrBQKhygui MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQjg1QS8xODVDMzlCNjAz Q0QxMUVDQUJDRTY5N0JDNEY5QUUwMi9uWndBaWhLaTk2WVA3X2xpSm1zRkFxSEtD NkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25ad0FpaEtpOTZZUDdfbGlKbXNGQXFIS0M2SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB Qjg1QS8xODVDMzlCNjAzQ0QxMUVDQUJDRTY5N0JDNEY5QUUwMi9uWndBaWhLaTk2 WVA3X2xpSm1zRkFxSEtDNkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAYqiFDTHjo1CWdVpTVMyoGLRQQ7YfAqT4lj5dSiAA6yBfCP9Y4Q74e ClX7+ystdKJW4kHq8Jh9xGZZUao7EXKqa2XpGEAA3zsInbS5u3hN62ANuxiEnt9s H0vuPwUXPh96yFA41sO24i/eSrpjdC8wbtyPodhzy3BD9305QPWLqDzAE8m71uN5 S14y21MnnSFn6YhElzGMVkE7zt2d9Z+gmGADAEmNeS4KYzu+KUR1ihuC3qI31LRn 1GZ+qxAcYKXWQE9s4eoR3cDURWQYHoZ0OrwqaZkvw+Uh5VsobFAAC6ih40wW0bXW Yhll4HCF2ngOWJPpPRA+3NFj+dSijD/p -----END CERTIFICATE-----Generated at Wed May 14 01:32:03 2025 by rpki-client