$ rpki-client -vvf rpki.apnic.net/member_repository/A91C5413/DF99A1E87BE811EB9A092342C4F9AE02/Nmw2U-SHXe9etk-Yko-v0w_uiHg.mft File: Nmw2U-SHXe9etk-Yko-v0w_uiHg.mft (raw, json) Hash identifier: nOjduQ99NQCkvtkJ4iafg8fI15+dgvLPzVhgHNo/uBM= Subject key identifier: 66:DE:D7:DB:CD:2C:9C:1F:DC:E9:BB:A0:2E:36:2E:95:79:AC:04:88 Authority key identifier: 36:6C:36:53:E4:87:5D:EF:5E:B6:4F:98:92:8F:AF:D3:0F:EE:88:78 Certificate issuer: /CN=A91C5413/serialNumber=366C3653E4875DEF5EB64F98928FAFD30FEE8878 Certificate serial: 0672 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nmw2U-SHXe9etk-Yko-v0w_uiHg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C5413/DF99A1E87BE811EB9A092342C4F9AE02/Nmw2U-SHXe9etk-Yko-v0w_uiHg.mft Manifest number: 07F1 Signing time: Thu 08 May 2025 22:11:01 +0000 Manifest this update: Thu 08 May 2025 22:11:01 +0000 Manifest next update: Thu 15 May 2025 22:11:01 +0000 Files and hashes: 1: Nmw2U-SHXe9etk-Yko-v0w_uiHg.crl (hash: Oc4YZJrgZIlQwhWZVcT6ba0WIawmf2hk1idwyVQssSI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C5413/DF99A1E87BE811EB9A092342C4F9AE02/Nmw2U-SHXe9etk-Yko-v0w_uiHg.crl rsync://rpki.apnic.net/member_repository/A91C5413/DF99A1E87BE811EB9A092342C4F9AE02/Nmw2U-SHXe9etk-Yko-v0w_uiHg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nmw2U-SHXe9etk-Yko-v0w_uiHg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 15 May 2025 22:11:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1650 (0x672) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C5413, serialNumber=366C3653E4875DEF5EB64F98928FAFD30FEE8878 Validity Not Before: May 8 22:11:01 2025 GMT Not After : May 15 22:11:01 2025 GMT Subject: CN=681d2bf5-2392 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:46:e8:8c:59:5d:6c:39:b3:69:1c:cb:74:74: da:15:c2:49:33:ba:67:02:67:bb:f6:01:57:3a:c4: 1b:3e:23:23:2b:53:3b:5f:b8:9a:81:bf:d4:9c:1d: 3b:82:6f:93:8d:4f:f5:c9:75:ea:4d:77:ee:1b:a8: 84:5f:e4:4a:0d:cb:22:84:9e:ad:f8:e1:e2:97:76: 58:1b:3a:59:82:47:ac:00:37:81:00:d2:55:51:f9: a9:72:65:9d:3e:66:22:fb:5b:26:29:81:04:90:89: b4:9a:35:a6:2a:a9:31:c5:06:e2:2f:19:00:5e:11: 8f:37:f0:b3:63:04:21:6e:92:0a:83:95:cc:a7:b2: 76:99:6d:97:a7:d2:88:b1:c8:5e:2e:57:c0:33:21: 5f:d8:5c:33:04:d6:f6:6f:cb:51:5b:d2:b7:ec:fc: f0:88:95:d5:88:39:52:d1:2b:b8:6b:68:4e:93:f8: 55:fa:20:42:26:5b:fc:3d:7e:56:6f:11:95:f8:e9: 9a:a7:0d:3f:3f:69:ff:2b:29:9c:6e:f8:7f:74:41: d0:7f:57:bd:c9:80:6a:0c:c8:3a:fa:43:71:ad:35: ba:5a:3c:48:bd:00:58:ba:b9:96:be:85:e9:c1:78: 95:a6:0b:06:df:a8:25:c5:b3:b5:cb:f6:3b:33:26: 14:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:DE:D7:DB:CD:2C:9C:1F:DC:E9:BB:A0:2E:36:2E:95:79:AC:04:88 X509v3 Authority Key Identifier: keyid:36:6C:36:53:E4:87:5D:EF:5E:B6:4F:98:92:8F:AF:D3:0F:EE:88:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C5413/DF99A1E87BE811EB9A092342C4F9AE02/Nmw2U-SHXe9etk-Yko-v0w_uiHg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nmw2U-SHXe9etk-Yko-v0w_uiHg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C5413/DF99A1E87BE811EB9A092342C4F9AE02/Nmw2U-SHXe9etk-Yko-v0w_uiHg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 48:eb:f2:df:fe:b8:4b:3a:b1:bf:b1:7c:b3:7d:4c:30:1d:57: ef:c9:9a:b7:fb:0c:c5:3c:28:85:bd:4d:9a:36:04:9d:45:bc: d5:5b:e0:2d:cd:c6:1c:0f:4f:d0:24:ec:c7:2f:20:ae:09:c8: 75:86:e0:da:c7:3b:86:5a:84:4a:09:5c:ec:e4:6c:55:72:38: 3f:63:91:d6:cd:29:1a:cf:64:06:a4:03:ab:04:45:ad:6a:f2: e6:76:a6:79:4c:71:cd:88:2d:5f:a7:bb:f1:5c:6b:da:f0:27: 58:78:f4:d8:4d:c6:bb:28:ed:df:32:a1:91:83:a6:bd:ee:ec: 2f:d0:c1:94:d9:11:e0:31:14:01:27:4c:17:d9:5b:fc:78:24: ea:12:2c:11:56:ef:e6:24:4a:ed:97:c5:4a:89:2c:a0:18:61: b6:f5:2a:38:74:aa:63:8d:93:4d:e4:1d:f6:0a:5c:05:a8:17: 86:f9:90:7f:6d:15:7b:a6:61:ce:4f:6e:c4:a0:9d:99:af:05: 2b:08:2c:62:13:aa:63:8e:69:d1:f3:93:8d:8a:57:ad:c4:ca: c0:fc:f5:e4:be:48:ed:c3:27:63:8c:a3:25:7d:62:6e:76:de: 60:5a:0f:7a:80:13:fa:1b:26:77:61:53:1a:31:14:15:d8:10: e5:80:19:45 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBnIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzU0MTMxMTAvBgNVBAUTKDM2NkMzNjUzRTQ4NzVERUY1RUI2NEY5ODkyOEZBRkQz MEZFRTg4NzgwHhcNMjUwNTA4MjIxMTAxWhcNMjUwNTE1MjIxMTAxWjAYMRYwFAYD VQQDEw02ODFkMmJmNS0yMzkyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlkbojFldbDmzaRzLdHTaFcJJM7pnAme79gFXOsQbPiMjK1M7X7iagb/UnB07 gm+TjU/1yXXqTXfuG6iEX+RKDcsihJ6t+OHil3ZYGzpZgkesADeBANJVUfmpcmWd PmYi+1smKYEEkIm0mjWmKqkxxQbiLxkAXhGPN/CzYwQhbpIKg5XMp7J2mW2Xp9KI scheLlfAMyFf2FwzBNb2b8tRW9K37PzwiJXViDlS0Su4a2hOk/hV+iBCJlv8PX5W bxGV+Omapw0/P2n/Kymcbvh/dEHQf1e9yYBqDMg6+kNxrTW6WjxIvQBYurmWvoXp wXiVpgsG36glxbO1y/Y7MyYUrQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGbe19vN LJwf3Om7oC42LpV5rASIMB8GA1UdIwQYMBaAFDZsNlPkh13vXrZPmJKPr9MP7oh4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNTQxMy9ERjk5QTFFODdC RTgxMUVCOUEwOTIzNDJDNEY5QUUwMi9ObXcyVS1TSFhlOWV0ay1Za28tdjB3X3Vp SGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05tdzJVLVNIWGU5ZXRrLVlrby12MHdfdWlIZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NTQxMy9ERjk5QTFFODdCRTgxMUVCOUEwOTIzNDJDNEY5QUUwMi9ObXcyVS1TSFhl OWV0ay1Za28tdjB3X3VpSGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBI6/Lf/rhLOrG/sXyzfUwwHVfvyZq3+wzFPCiFvU2aNgSdRbzVW+At zcYcD0/QJOzHLyCuCch1huDaxzuGWoRKCVzs5GxVcjg/Y5HWzSkaz2QGpAOrBEWt avLmdqZ5THHNiC1fp7vxXGva8CdYePTYTca7KO3fMqGRg6a97uwv0MGU2RHgMRQB J0wX2Vv8eCTqEiwRVu/mJErtl8VKiSygGGG29So4dKpjjZNN5B32ClwFqBeG+ZB/ bRV7pmHOT27EoJ2ZrwUrCCxiE6pjjmnR85ONiletxMrA/PXkvkjtwydjjKMlfWJu dt5gWg96gBP6GyZ3YVMaMRQV2BDlgBlF -----END CERTIFICATE-----Generated at Sat May 10 16:40:07 2025 by rpki-client