$ rpki-client -vvf rpki.apnic.net/member_repository/A91B9385/73CF676A8A0B11EAA2964C0BC4F9AE02/Nb-dxVNaaDq2lad4JnhtPfnixbQ.mft File: Nb-dxVNaaDq2lad4JnhtPfnixbQ.mft (raw, json) Hash identifier: UqU4nP6BEly1G5+kgUcJG7Z8R+Yp4Vi5Aaq/msJfV2s= Subject key identifier: 00:9D:F3:D7:53:BF:58:F9:52:98:FE:C5:89:61:EF:83:FC:90:2E:BA Authority key identifier: 35:BF:9D:C5:53:5A:68:3A:B6:95:A7:78:26:78:6D:3D:F9:E2:C5:B4 Certificate issuer: /CN=A91B9385/serialNumber=35BF9DC5535A683AB695A77826786D3DF9E2C5B4 Certificate serial: 0994 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nb-dxVNaaDq2lad4JnhtPfnixbQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B9385/73CF676A8A0B11EAA2964C0BC4F9AE02/Nb-dxVNaaDq2lad4JnhtPfnixbQ.mft Manifest number: 098E Signing time: Mon 12 May 2025 19:56:10 +0000 Manifest this update: Mon 12 May 2025 19:56:10 +0000 Manifest next update: Mon 19 May 2025 19:56:10 +0000 Files and hashes: 1: Nb-dxVNaaDq2lad4JnhtPfnixbQ.crl (hash: JJcGXmbhTyaY8jLVDA1TwSgI5r5yHurPLGC/esOVicM=) 2: 5197AD868A0D11EAA9BA2E0FC4F9AE02.roa (hash: AMJQ1+Gi+Yyv8xwV6R2XZnBmrwaFZwHHnnFnkWB/QsY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B9385/73CF676A8A0B11EAA2964C0BC4F9AE02/Nb-dxVNaaDq2lad4JnhtPfnixbQ.crl rsync://rpki.apnic.net/member_repository/A91B9385/73CF676A8A0B11EAA2964C0BC4F9AE02/Nb-dxVNaaDq2lad4JnhtPfnixbQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nb-dxVNaaDq2lad4JnhtPfnixbQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 19:56:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2452 (0x994) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B9385, serialNumber=35BF9DC5535A683AB695A77826786D3DF9E2C5B4 Validity Not Before: May 12 19:56:10 2025 GMT Not After : May 19 19:56:10 2025 GMT Subject: CN=6822525a-441b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:d4:c4:04:4d:f0:25:43:f1:9a:e3:d3:84:01: f6:f6:6a:fc:1e:9f:2f:77:e2:8c:92:ca:64:d0:1e: 18:11:47:e7:e1:76:86:e2:8b:25:c8:f7:a0:0d:d1: 02:be:d0:3a:fc:71:17:99:d0:95:c7:80:47:0e:29: 9f:9e:43:eb:10:37:82:8a:30:5a:4b:e0:96:45:dd: 1d:6e:70:d2:fb:fe:88:91:7f:d4:9a:49:51:f7:5d: c4:44:28:c4:f3:16:96:2b:42:aa:fb:02:c1:86:bb: 88:29:43:bc:ca:ea:bc:df:8e:ab:2c:3d:bf:45:4a: a2:aa:28:12:6e:ab:fa:7f:93:57:d1:8e:1c:2c:af: 7b:7b:05:71:ff:9d:9b:66:83:8c:c4:9f:b9:48:84: 2d:4e:13:9a:ed:14:33:8e:1f:a9:e5:37:92:b4:9a: 71:1f:f7:38:60:ec:4e:b7:1e:11:5e:a4:58:02:f9: 84:1d:2d:8e:ae:f4:10:56:df:19:f2:2b:b2:52:bc: 23:f7:b4:fc:d4:82:53:35:3a:6d:8d:1a:fb:8f:b0: 92:82:4e:27:7d:4c:16:18:84:be:d2:62:55:f8:25: cd:35:61:ed:6e:fa:5c:ee:96:76:e7:bc:2e:24:76: 40:07:2b:f5:85:eb:9b:01:c8:b3:f1:2c:93:5f:b3: 1c:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:9D:F3:D7:53:BF:58:F9:52:98:FE:C5:89:61:EF:83:FC:90:2E:BA X509v3 Authority Key Identifier: keyid:35:BF:9D:C5:53:5A:68:3A:B6:95:A7:78:26:78:6D:3D:F9:E2:C5:B4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B9385/73CF676A8A0B11EAA2964C0BC4F9AE02/Nb-dxVNaaDq2lad4JnhtPfnixbQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nb-dxVNaaDq2lad4JnhtPfnixbQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B9385/73CF676A8A0B11EAA2964C0BC4F9AE02/Nb-dxVNaaDq2lad4JnhtPfnixbQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 23:a5:11:6c:df:cf:70:4e:df:f3:70:90:88:04:7b:97:08:2e: ab:f1:ea:2e:6e:53:b9:e8:b8:ac:07:72:a0:58:18:d3:8b:34: ba:06:13:65:45:12:25:af:9f:09:8e:e6:81:ae:2d:e7:9e:77: 20:c0:48:05:1f:16:bd:62:ef:97:71:87:a7:90:36:0c:18:79: 52:ea:58:a7:f4:52:0d:bb:bc:06:f7:f1:28:2c:d2:b5:f9:1c: ae:bb:dc:90:bf:fe:1e:f0:5d:c1:23:b6:7a:38:7e:1b:2f:f7: 49:b4:b7:0b:30:5b:c7:aa:43:ea:01:ea:2b:5d:7c:e4:3f:50: 84:b0:9f:64:bd:7c:e0:23:f6:8f:0b:59:dc:f2:74:28:10:4e: d8:01:35:3b:19:54:cc:65:b6:df:e3:be:2f:87:77:d0:eb:94: 6c:8c:fd:68:4a:bb:4c:a4:e2:9d:d5:44:fd:25:2d:5b:bb:50: 31:64:81:b8:d8:55:51:29:34:68:94:62:48:43:0b:77:be:ad: b0:0e:7e:59:fc:08:1e:44:a8:22:ea:dc:15:64:b7:1e:21:74: 80:c6:2f:cf:c5:16:99:0e:60:88:ea:57:6b:9d:f7:26:5c:8a: 64:c8:94:68:21:91:a1:59:12:08:d7:b3:e1:4f:0c:9c:be:e3: 88:c4:77:b6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCZQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjkzODUxMTAvBgNVBAUTKDM1QkY5REM1NTM1QTY4M0FCNjk1QTc3ODI2Nzg2RDNE RjlFMkM1QjQwHhcNMjUwNTEyMTk1NjEwWhcNMjUwNTE5MTk1NjEwWjAYMRYwFAYD VQQDEw02ODIyNTI1YS00NDFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwdTEBE3wJUPxmuPThAH29mr8Hp8vd+KMkspk0B4YEUfn4XaG4oslyPegDdEC vtA6/HEXmdCVx4BHDimfnkPrEDeCijBaS+CWRd0dbnDS+/6IkX/UmklR913ERCjE 8xaWK0Kq+wLBhruIKUO8yuq8346rLD2/RUqiqigSbqv6f5NX0Y4cLK97ewVx/52b ZoOMxJ+5SIQtThOa7RQzjh+p5TeStJpxH/c4YOxOtx4RXqRYAvmEHS2OrvQQVt8Z 8iuyUrwj97T81IJTNTptjRr7j7CSgk4nfUwWGIS+0mJV+CXNNWHtbvpc7pZ257wu JHZAByv1heubAciz8SyTX7McdwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFACd89dT v1j5Upj+xYlh74P8kC66MB8GA1UdIwQYMBaAFDW/ncVTWmg6tpWneCZ4bT354sW0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOTM4NS83M0NGNjc2QThB MEIxMUVBQTI5NjRDMEJDNEY5QUUwMi9OYi1keFZOYWFEcTJsYWQ0Sm5odFBmbml4 YlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05iLWR4Vk5hYURxMmxhZDRKbmh0UGZuaXhiUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC OTM4NS83M0NGNjc2QThBMEIxMUVBQTI5NjRDMEJDNEY5QUUwMi9OYi1keFZOYWFE cTJsYWQ0Sm5odFBmbml4YlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAjpRFs389wTt/zcJCIBHuXCC6r8eoublO56LisB3KgWBjTizS6BhNl RRIlr58JjuaBri3nnncgwEgFHxa9Yu+XcYenkDYMGHlS6lin9FINu7wG9/EoLNK1 +Ryuu9yQv/4e8F3BI7Z6OH4bL/dJtLcLMFvHqkPqAeorXXzkP1CEsJ9kvXzgI/aP C1nc8nQoEE7YATU7GVTMZbbf474vh3fQ65RsjP1oSrtMpOKd1UT9JS1bu1AxZIG4 2FVRKTRolGJIQwt3vq2wDn5Z/AgeRKgi6twVZLceIXSAxi/PxRaZDmCI6ldrnfcm XIpkyJRoIZGhWRII17PhTwycvuOIxHe2 -----END CERTIFICATE-----Generated at Tue May 13 04:55:06 2025 by rpki-client