$ rpki-client -vvf rpki.apnic.net/member_repository/A91B2472/E62B735A481911EFB8BE4534C4F9AE02/nlE6zE17kAFKhn-1KviSKeALpKw.mft File: nlE6zE17kAFKhn-1KviSKeALpKw.mft (raw, json) Hash identifier: NWIwlySTV6/eJgNfJpgJ/kH9hHny3MxsMc31dv/9Oq0= Subject key identifier: B0:B2:E4:A0:75:09:93:A3:7B:F8:42:9F:F4:00:66:C8:D6:A0:18:1D Authority key identifier: 9E:51:3A:CC:4D:7B:90:01:4A:86:7F:B5:2A:F8:92:29:E0:0B:A4:AC Certificate issuer: /CN=A91B2472/serialNumber=9E513ACC4D7B90014A867FB52AF89229E00BA4AC Certificate serial: 9D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nlE6zE17kAFKhn-1KviSKeALpKw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B2472/E62B735A481911EFB8BE4534C4F9AE02/nlE6zE17kAFKhn-1KviSKeALpKw.mft Manifest number: 9A Signing time: Tue 13 May 2025 05:31:37 +0000 Manifest this update: Tue 13 May 2025 05:31:37 +0000 Manifest next update: Tue 20 May 2025 05:31:37 +0000 Files and hashes: 1: nlE6zE17kAFKhn-1KviSKeALpKw.crl (hash: SIQPXGxi4ETEkw4pOAeJUBmd5HIECDDERmMqLFYDRKo=) 2: 1B4BDA5C48B011EF9D34415EC4F9AE02.roa (hash: /fW0UzdpOpiVi/4bzpgP5X5TzlzFOgXdGZfbyGjzbdE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B2472/E62B735A481911EFB8BE4534C4F9AE02/nlE6zE17kAFKhn-1KviSKeALpKw.crl rsync://rpki.apnic.net/member_repository/A91B2472/E62B735A481911EFB8BE4534C4F9AE02/nlE6zE17kAFKhn-1KviSKeALpKw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nlE6zE17kAFKhn-1KviSKeALpKw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 05:31:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 157 (0x9d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B2472, serialNumber=9E513ACC4D7B90014A867FB52AF89229E00BA4AC Validity Not Before: May 13 05:31:37 2025 GMT Not After : May 20 05:31:37 2025 GMT Subject: CN=6822d939-f995 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:38:20:fd:c7:8e:ba:59:5e:6e:45:9a:fc:ae: c4:9d:fc:d7:5d:bd:84:7e:36:37:d4:71:c7:15:88: 2b:d8:15:91:18:db:7c:d8:91:a8:02:98:f0:9e:28: 45:40:b0:00:e6:3c:4f:6e:6a:b6:3d:96:6a:7a:07: 10:28:31:f9:74:12:a6:b4:93:58:a7:80:dc:b0:9c: 7a:ca:60:fc:e7:49:55:6e:88:73:fc:02:51:68:83: c8:e5:04:1a:84:ad:39:2c:22:9e:2f:54:92:58:06: 80:2d:b3:9a:3d:77:a7:11:dd:c6:33:de:98:3f:ae: 2b:e4:67:f7:d7:47:a5:27:f8:e2:10:f6:d2:23:65: ed:58:1f:08:0a:4e:13:0a:b4:01:c9:0a:85:5a:00: f0:1e:cf:03:50:17:08:08:93:84:14:cf:bd:ff:d5: 4d:10:83:d0:2a:fb:43:b8:a3:db:62:e3:b4:5c:d8: d6:06:3b:8e:3c:6c:7d:59:48:28:dd:b3:fb:20:45: 1b:55:3e:40:03:7e:f1:84:56:3a:25:3a:0d:13:79: aa:a5:98:f6:3e:0b:ca:3a:11:aa:47:d4:d2:5b:8c: 53:b9:85:ff:a6:fb:1d:35:5e:13:80:d5:9d:49:8b: a1:a1:28:56:43:b5:21:00:4a:1c:e1:7a:28:d9:b1: 96:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:B2:E4:A0:75:09:93:A3:7B:F8:42:9F:F4:00:66:C8:D6:A0:18:1D X509v3 Authority Key Identifier: keyid:9E:51:3A:CC:4D:7B:90:01:4A:86:7F:B5:2A:F8:92:29:E0:0B:A4:AC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B2472/E62B735A481911EFB8BE4534C4F9AE02/nlE6zE17kAFKhn-1KviSKeALpKw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nlE6zE17kAFKhn-1KviSKeALpKw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B2472/E62B735A481911EFB8BE4534C4F9AE02/nlE6zE17kAFKhn-1KviSKeALpKw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5f:0e:56:c8:a9:41:f7:65:21:19:a3:e7:90:45:02:10:86:40: b1:10:23:dc:da:ec:f6:96:81:f8:1b:8d:6a:4d:4f:e8:eb:22: f3:83:43:c4:fa:94:1b:8f:4f:6e:e8:da:75:19:5d:85:b9:25: af:24:a6:20:fd:06:73:66:f8:f4:e8:47:8f:83:6e:90:92:9c: 91:57:46:6e:a1:50:d4:77:73:06:e5:d3:5e:e0:75:f7:24:e9: 54:fd:f2:f9:72:78:66:03:3a:7a:38:ba:f8:a6:21:87:d6:83: 49:04:38:82:ea:b0:c2:d9:92:f3:1f:00:50:03:49:57:32:dc: b7:31:05:b1:f5:74:91:32:a6:6d:55:3c:74:fd:e4:32:5a:01: e0:bf:e3:8b:45:da:c2:06:56:17:b3:88:c4:c4:95:20:29:ba: 45:52:aa:97:50:3c:25:95:51:87:8e:fb:50:9c:26:8e:d2:8b: 5f:0c:dc:53:a4:20:44:2c:4d:c1:3d:dd:72:8c:92:56:57:41: d3:d6:89:d0:0a:d9:ac:e1:20:f0:cd:98:df:ec:06:51:e7:e1: 13:a3:8c:3a:40:9c:df:9a:f9:a6:b2:8a:d7:76:31:4a:3f:24: e5:e4:f4:50:69:fb:8d:57:36:0f:5b:54:fa:e7:49:f0:cf:47: 7b:0b:9c:84 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJ0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjI0NzIxMTAvBgNVBAUTKDlFNTEzQUNDNEQ3QjkwMDE0QTg2N0ZCNTJBRjg5MjI5 RTAwQkE0QUMwHhcNMjUwNTEzMDUzMTM3WhcNMjUwNTIwMDUzMTM3WjAYMRYwFAYD VQQDEw02ODIyZDkzOS1mOTk1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvDgg/ceOullebkWa/K7EnfzXXb2EfjY31HHHFYgr2BWRGNt82JGoApjwnihF QLAA5jxPbmq2PZZqegcQKDH5dBKmtJNYp4DcsJx6ymD850lVbohz/AJRaIPI5QQa hK05LCKeL1SSWAaALbOaPXenEd3GM96YP64r5Gf310elJ/jiEPbSI2XtWB8ICk4T CrQByQqFWgDwHs8DUBcICJOEFM+9/9VNEIPQKvtDuKPbYuO0XNjWBjuOPGx9WUgo 3bP7IEUbVT5AA37xhFY6JToNE3mqpZj2PgvKOhGqR9TSW4xTuYX/pvsdNV4TgNWd SYuhoShWQ7UhAEoc4Xoo2bGWOwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLCy5KB1 CZOje/hCn/QAZsjWoBgdMB8GA1UdIwQYMBaAFJ5ROsxNe5ABSoZ/tSr4kingC6Ss MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMjQ3Mi9FNjJCNzM1QTQ4 MTkxMUVGQjhCRTQ1MzRDNEY5QUUwMi9ubEU2ekUxN2tBRktobi0xS3ZpU0tlQUxw S3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25sRTZ6RTE3a0FGS2huLTFLdmlTS2VBTHBLdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MjQ3Mi9FNjJCNzM1QTQ4MTkxMUVGQjhCRTQ1MzRDNEY5QUUwMi9ubEU2ekUxN2tB Rktobi0xS3ZpU0tlQUxwS3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBfDlbIqUH3ZSEZo+eQRQIQhkCxECPc2uz2loH4G41qTU/o6yLzg0PE +pQbj09u6Np1GV2FuSWvJKYg/QZzZvj06EePg26QkpyRV0ZuoVDUd3MG5dNe4HX3 JOlU/fL5cnhmAzp6OLr4piGH1oNJBDiC6rDC2ZLzHwBQA0lXMty3MQWx9XSRMqZt VTx0/eQyWgHgv+OLRdrCBlYXs4jExJUgKbpFUqqXUDwllVGHjvtQnCaO0otfDNxT pCBELE3BPd1yjJJWV0HT1onQCtms4SDwzZjf7AZR5+ETo4w6QJzfmvmmsorXdjFK PyTl5PRQafuNVzYPW1T650nwz0d7C5yE -----END CERTIFICATE-----Generated at Wed May 14 15:01:27 2025 by rpki-client