$ rpki-client -vvf rpki.apnic.net/member_repository/A91B35BB/5789B1A43C0011EAB8179734C4F9AE02/NfWNhhxBvf6ka4xykLGqxnDnzBs.mft File: NfWNhhxBvf6ka4xykLGqxnDnzBs.mft (raw, json) Hash identifier: q5LzNadTnkq7Vp5EpNTgGJbe2YHRCAAnEUY6/xEMTTw= Subject key identifier: 77:3D:FF:58:8E:22:35:56:48:D3:A4:6A:3F:17:24:DC:54:7D:FB:49 Authority key identifier: 35:F5:8D:86:1C:41:BD:FE:A4:6B:8C:72:90:B1:AA:C6:70:E7:CC:1B Certificate issuer: /CN=A91B35BB/serialNumber=35F58D861C41BDFEA46B8C7290B1AAC670E7CC1B Certificate serial: 0B33 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NfWNhhxBvf6ka4xykLGqxnDnzBs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B35BB/5789B1A43C0011EAB8179734C4F9AE02/NfWNhhxBvf6ka4xykLGqxnDnzBs.mft Manifest number: 0B24 Signing time: Fri 16 May 2025 19:25:28 +0000 Manifest this update: Fri 16 May 2025 19:25:28 +0000 Manifest next update: Fri 23 May 2025 19:25:28 +0000 Files and hashes: 1: NfWNhhxBvf6ka4xykLGqxnDnzBs.crl (hash: L9VdiB47Eu75aT8vhzjuNNb4lDgg7f+qo+zA8tVAQ8w=) 2: 902F47663C0111EAB6CB9936C4F9AE02.roa (hash: W5+kOWbZGS14ELyZcRgsnHDoDEprTMY6BAsrjTgD1lM=) 3: 8F9F2F823C0111EAB6CB9936C4F9AE02.roa (hash: IHsFYOv59LECoaCivBqfgQOGspVwczVXXfHkd/E13QQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B35BB/5789B1A43C0011EAB8179734C4F9AE02/NfWNhhxBvf6ka4xykLGqxnDnzBs.crl rsync://rpki.apnic.net/member_repository/A91B35BB/5789B1A43C0011EAB8179734C4F9AE02/NfWNhhxBvf6ka4xykLGqxnDnzBs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NfWNhhxBvf6ka4xykLGqxnDnzBs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 23 May 2025 19:25:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2867 (0xb33) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B35BB, serialNumber=35F58D861C41BDFEA46B8C7290B1AAC670E7CC1B Validity Not Before: May 16 19:25:28 2025 GMT Not After : May 23 19:25:28 2025 GMT Subject: CN=68279128-a8d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:0c:b9:5a:6a:3f:aa:b3:60:4c:6b:b6:6d:87: ac:cb:36:25:f8:16:a4:56:ba:52:e8:06:42:81:fa: 4f:e2:78:5c:60:1c:2c:49:8c:54:81:be:74:7f:b1: b7:ab:98:e9:c4:e1:6d:ea:6b:8f:55:6a:46:1b:b5: 8a:53:91:5b:12:4f:d7:35:81:03:4e:78:21:6c:c6: fe:33:30:99:8e:69:ed:08:df:d1:e2:38:33:c1:24: 56:01:91:01:2e:00:47:38:4f:c4:d0:2a:7f:7b:fe: 47:43:e9:ee:08:5d:62:bc:31:e4:5e:50:33:fe:be: fe:0b:45:ab:03:55:57:31:c2:42:20:28:dc:1e:3e: 34:50:df:52:14:32:ac:ea:85:7e:e7:6e:80:65:31: b3:84:eb:34:50:8d:cc:d6:8b:45:49:f0:ef:bb:4d: 2c:cb:46:9f:97:ec:5f:a6:08:10:e0:10:ff:eb:8c: 32:9b:d3:17:c7:36:0b:87:c0:f3:0e:1d:d3:70:d2: cf:af:99:78:e6:8c:58:89:9f:16:79:8f:b7:6d:99: 18:00:00:4f:05:9c:b0:25:a4:86:0f:32:16:d9:c9: c0:61:c6:13:5e:73:28:d0:cc:5e:31:33:76:6b:cd: bb:7c:fc:f7:9b:3e:b9:06:2d:64:16:fc:a1:bc:77: 88:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:3D:FF:58:8E:22:35:56:48:D3:A4:6A:3F:17:24:DC:54:7D:FB:49 X509v3 Authority Key Identifier: keyid:35:F5:8D:86:1C:41:BD:FE:A4:6B:8C:72:90:B1:AA:C6:70:E7:CC:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B35BB/5789B1A43C0011EAB8179734C4F9AE02/NfWNhhxBvf6ka4xykLGqxnDnzBs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NfWNhhxBvf6ka4xykLGqxnDnzBs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B35BB/5789B1A43C0011EAB8179734C4F9AE02/NfWNhhxBvf6ka4xykLGqxnDnzBs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 17:62:80:8d:0d:a2:e4:91:73:bf:5a:15:b4:a0:95:3f:52:fc: 34:3d:f4:1b:bc:f4:b7:25:cb:43:90:36:17:e5:6c:29:42:f7: 5f:bd:c7:49:13:ae:1a:51:09:9c:ce:ee:52:3b:56:58:af:09: 34:cf:c0:d2:be:09:75:d6:cc:be:33:ff:3e:a0:ac:d7:0f:5c: de:ff:1f:49:dd:97:dc:8a:fd:5c:b7:f3:85:e7:70:ef:74:f4: 69:5d:c4:5a:af:37:d6:d5:15:99:59:fc:1f:24:e0:85:a8:59: 92:3a:c6:4b:b1:c8:63:f9:04:16:a0:b2:39:73:a2:cb:6f:10: 83:86:76:ec:66:ae:33:c6:78:13:d9:1b:88:29:0a:cc:4c:ad: e2:6e:7c:3d:98:4f:ed:10:32:fc:b9:04:23:55:b3:14:33:57: 67:ad:2d:5f:20:5f:54:64:be:14:ad:4f:23:40:4a:ad:de:26: df:2c:60:82:33:99:e0:f3:8b:c9:d0:54:12:ce:bb:95:fb:e9: 8f:39:f7:4b:89:90:58:04:8a:d4:02:a1:5e:1d:fa:3a:07:bd: 50:8b:33:9d:c2:83:6a:22:c8:92:a5:80:84:0c:92:7b:a1:12: eb:fe:8c:9d:e2:85:c0:0b:26:c8:a9:84:eb:fe:08:9d:05:02: f4:6c:c6:76 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCzMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjM1QkIxMTAvBgNVBAUTKDM1RjU4RDg2MUM0MUJERkVBNDZCOEM3MjkwQjFBQUM2 NzBFN0NDMUIwHhcNMjUwNTE2MTkyNTI4WhcNMjUwNTIzMTkyNTI4WjAYMRYwFAYD VQQDEw02ODI3OTEyOC1hOGQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmAy5Wmo/qrNgTGu2bYesyzYl+BakVrpS6AZCgfpP4nhcYBwsSYxUgb50f7G3 q5jpxOFt6muPVWpGG7WKU5FbEk/XNYEDTnghbMb+MzCZjmntCN/R4jgzwSRWAZEB LgBHOE/E0Cp/e/5HQ+nuCF1ivDHkXlAz/r7+C0WrA1VXMcJCICjcHj40UN9SFDKs 6oV+526AZTGzhOs0UI3M1otFSfDvu00sy0afl+xfpggQ4BD/64wym9MXxzYLh8Dz Dh3TcNLPr5l45oxYiZ8WeY+3bZkYAABPBZywJaSGDzIW2cnAYcYTXnMo0MxeMTN2 a827fPz3mz65Bi1kFvyhvHeIhQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHc9/1iO IjVWSNOkaj8XJNxUfftJMB8GA1UdIwQYMBaAFDX1jYYcQb3+pGuMcpCxqsZw58wb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMzVCQi81Nzg5QjFBNDND MDAxMUVBQjgxNzk3MzRDNEY5QUUwMi9OZldOaGh4QnZmNmthNHh5a0xHcXhuRG56 QnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05mV05oaHhCdmY2a2E0eHlrTEdxeG5EbnpCcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MzVCQi81Nzg5QjFBNDNDMDAxMUVBQjgxNzk3MzRDNEY5QUUwMi9OZldOaGh4QnZm NmthNHh5a0xHcXhuRG56QnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAXYoCNDaLkkXO/WhW0oJU/Uvw0PfQbvPS3JctDkDYX5WwpQvdfvcdJ E64aUQmczu5SO1ZYrwk0z8DSvgl11sy+M/8+oKzXD1ze/x9J3Zfciv1ct/OF53Dv dPRpXcRarzfW1RWZWfwfJOCFqFmSOsZLschj+QQWoLI5c6LLbxCDhnbsZq4zxngT 2RuIKQrMTK3ibnw9mE/tEDL8uQQjVbMUM1dnrS1fIF9UZL4UrU8jQEqt3ibfLGCC M5ng84vJ0FQSzruV++mPOfdLiZBYBIrUAqFeHfo6B71QizOdwoNqIsiSpYCEDJJ7 oRLr/oyd4oXACybIqYTr/gidBQL0bMZ2 -----END CERTIFICATE-----Generated at Sat May 17 18:05:34 2025 by rpki-client