$ rpki-client -vvf rpki.apnic.net/member_repository/A91C862F/D5E1DDEA965F11ECAD217376C4F9AE02/nLIZXrqiCWDa-IL7X0frVaGdIuw.mft File: nLIZXrqiCWDa-IL7X0frVaGdIuw.mft (raw, json) Hash identifier: LBHEC9aYvZb7NFUdy5F4wlqTVt98fRzR8gBkF3dO4Gg= Subject key identifier: A1:7E:48:8D:79:72:E6:D1:3E:4A:CA:F8:A5:F5:02:60:4A:24:0E:E5 Authority key identifier: 9C:B2:19:5E:BA:A2:09:60:DA:F8:82:FB:5F:47:EB:55:A1:9D:22:EC Certificate issuer: /CN=A91C862F/serialNumber=9CB2195EBAA20960DAF882FB5F47EB55A19D22EC Certificate serial: 03AD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nLIZXrqiCWDa-IL7X0frVaGdIuw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C862F/D5E1DDEA965F11ECAD217376C4F9AE02/nLIZXrqiCWDa-IL7X0frVaGdIuw.mft Manifest number: 03A5 Signing time: Tue 13 May 2025 00:33:48 +0000 Manifest this update: Tue 13 May 2025 00:33:47 +0000 Manifest next update: Tue 20 May 2025 00:33:47 +0000 Files and hashes: 1: nLIZXrqiCWDa-IL7X0frVaGdIuw.crl (hash: 2L70GsHcC/C0TvQ2pKAkfrrQfTLRs/DluYFBrZraRFw=) 2: 437E6F641A2A11ED8E5B3178C4F9AE02.roa (hash: W2t7cvkTvvu4tLiipq3paLT/+ja5H4MoySHQU+pxdNU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C862F/D5E1DDEA965F11ECAD217376C4F9AE02/nLIZXrqiCWDa-IL7X0frVaGdIuw.crl rsync://rpki.apnic.net/member_repository/A91C862F/D5E1DDEA965F11ECAD217376C4F9AE02/nLIZXrqiCWDa-IL7X0frVaGdIuw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nLIZXrqiCWDa-IL7X0frVaGdIuw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 00:33:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 941 (0x3ad) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C862F, serialNumber=9CB2195EBAA20960DAF882FB5F47EB55A19D22EC Validity Not Before: May 13 00:33:47 2025 GMT Not After : May 20 00:33:47 2025 GMT Subject: CN=6822936b-bcea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:e9:54:83:a2:db:48:9c:b6:4c:d3:15:1a:4d: b9:a8:2e:8a:bf:4e:c6:a2:7f:07:7a:9a:58:37:24: af:92:ca:22:31:40:db:15:1e:35:5e:7b:3c:5b:cb: 36:52:c8:91:eb:3f:1f:52:c0:bd:fb:7e:0a:e2:e9: 3b:0b:f3:42:d4:1b:11:d8:e0:08:a6:21:b7:7f:e5: d7:9b:ed:70:31:58:55:ee:49:78:58:70:dc:38:06: 60:06:6d:a5:02:36:05:e7:e5:f0:7f:84:ac:1f:df: 85:b5:f6:8d:2f:51:72:15:c7:6d:33:e6:f7:1a:f0: 94:64:cf:c6:04:fb:1d:a0:7f:98:d1:0d:03:b7:33: a4:6e:77:78:b7:c1:2e:c0:ad:82:33:39:3e:45:3f: 70:9b:ff:b5:8b:85:15:9b:50:b3:6e:c5:aa:45:be: 69:63:59:9b:2a:d2:c5:cc:66:d0:e6:d7:c5:aa:ff: 25:f3:2a:60:a3:82:76:c3:15:eb:bc:2a:0e:6c:79: b0:ac:70:85:f5:5e:6f:3b:ac:69:46:e4:a2:99:10: ca:ed:81:3b:4b:f0:80:84:97:34:51:b8:a6:32:dc: 9a:b4:fb:59:32:60:ec:4f:c0:0d:9c:98:d2:fa:9d: be:ff:fd:fa:a4:c8:30:4d:01:5b:7b:82:a5:02:e0: fb:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:7E:48:8D:79:72:E6:D1:3E:4A:CA:F8:A5:F5:02:60:4A:24:0E:E5 X509v3 Authority Key Identifier: keyid:9C:B2:19:5E:BA:A2:09:60:DA:F8:82:FB:5F:47:EB:55:A1:9D:22:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C862F/D5E1DDEA965F11ECAD217376C4F9AE02/nLIZXrqiCWDa-IL7X0frVaGdIuw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nLIZXrqiCWDa-IL7X0frVaGdIuw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C862F/D5E1DDEA965F11ECAD217376C4F9AE02/nLIZXrqiCWDa-IL7X0frVaGdIuw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 12:88:1c:d1:eb:f8:6a:70:8b:a7:72:98:70:ec:6e:91:4d:39: e9:f9:7f:39:2d:6a:52:75:9c:f1:91:36:e4:6b:2c:48:a2:96: 69:7f:48:99:fb:b2:39:7d:8e:75:dc:09:98:c5:28:7c:78:03: d6:30:59:54:99:46:b9:ba:e5:b3:62:7b:e2:df:24:aa:d5:72: d8:76:9e:0e:fd:fd:e9:93:c8:b8:00:8f:8b:3e:0f:3b:8e:6f: 96:f7:1b:68:0c:c6:7f:fa:2b:32:95:28:df:86:35:66:a6:43: 76:b8:44:bf:37:2e:9a:7c:38:9a:19:59:0d:f4:f0:41:be:0c: 81:e6:27:f2:cc:b0:8f:4b:ab:7c:b8:5c:d4:51:07:82:9a:e5: 48:68:19:94:4d:2b:7f:50:fb:dc:e6:3e:1a:db:64:27:18:0b: 53:fd:04:09:43:a2:d9:82:7e:0c:71:a9:33:4a:56:a3:aa:84: f8:21:bd:de:73:0a:96:c6:99:a5:a7:ae:52:fc:f3:c1:f6:a0: a0:85:af:fb:cf:9b:66:58:8f:91:f0:a3:b2:26:f6:0c:b9:f3: 24:df:7e:10:83:40:2b:fb:c0:c8:0b:37:36:84:ee:97:72:4d: df:d6:74:da:af:39:de:b6:ca:9f:7f:4b:75:f4:e1:83:ec:e9: 16:ba:2f:a8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA60wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qzg2MkYxMTAvBgNVBAUTKDlDQjIxOTVFQkFBMjA5NjBEQUY4ODJGQjVGNDdFQjU1 QTE5RDIyRUMwHhcNMjUwNTEzMDAzMzQ3WhcNMjUwNTIwMDAzMzQ3WjAYMRYwFAYD VQQDEw02ODIyOTM2Yi1iY2VhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvulUg6LbSJy2TNMVGk25qC6Kv07Gon8HeppYNySvksoiMUDbFR41Xns8W8s2 UsiR6z8fUsC9+34K4uk7C/NC1BsR2OAIpiG3f+XXm+1wMVhV7kl4WHDcOAZgBm2l AjYF5+Xwf4SsH9+FtfaNL1FyFcdtM+b3GvCUZM/GBPsdoH+Y0Q0DtzOkbnd4t8Eu wK2CMzk+RT9wm/+1i4UVm1CzbsWqRb5pY1mbKtLFzGbQ5tfFqv8l8ypgo4J2wxXr vCoObHmwrHCF9V5vO6xpRuSimRDK7YE7S/CAhJc0UbimMtyatPtZMmDsT8ANnJjS +p2+//36pMgwTQFbe4KlAuD7WwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKF+SI15 cubRPkrK+KX1AmBKJA7lMB8GA1UdIwQYMBaAFJyyGV66oglg2viC+19H61WhnSLs MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDODYyRi9ENUUxRERFQTk2 NUYxMUVDQUQyMTczNzZDNEY5QUUwMi9uTElaWHJxaUNXRGEtSUw3WDBmclZhR2RJ dXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25MSVpYcnFpQ1dEYS1JTDdYMGZyVmFHZEl1dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD ODYyRi9ENUUxRERFQTk2NUYxMUVDQUQyMTczNzZDNEY5QUUwMi9uTElaWHJxaUNX RGEtSUw3WDBmclZhR2RJdXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQASiBzR6/hqcIuncphw7G6RTTnp+X85LWpSdZzxkTbkayxIopZpf0iZ +7I5fY513AmYxSh8eAPWMFlUmUa5uuWzYnvi3ySq1XLYdp4O/f3pk8i4AI+LPg87 jm+W9xtoDMZ/+isylSjfhjVmpkN2uES/Ny6afDiaGVkN9PBBvgyB5ifyzLCPS6t8 uFzUUQeCmuVIaBmUTSt/UPvc5j4a22QnGAtT/QQJQ6LZgn4McakzSlajqoT4Ib3e cwqWxpmlp65S/PPB9qCgha/7z5tmWI+R8KOyJvYMufMk334Qg0Ar+8DICzc2hO6X ck3f1nTarznetsqff0t19OGD7OkWui+o -----END CERTIFICATE-----Generated at Tue May 13 14:47:59 2025 by rpki-client