$ rpki-client -vvf rpki.apnic.net/member_repository/A91D404F/D5D0FEB4CBF711EF869C904FC4F9AE02/_nzI0SyMuUDQbq7bWwrUPQUDYvE.mft File: _nzI0SyMuUDQbq7bWwrUPQUDYvE.mft (raw, json) Hash identifier: vGvxG3ABOXhLY9M72qUorBoFOmNtoCH8N/lYEzW1oo8= Subject key identifier: 82:94:F4:AE:13:F0:A4:63:9E:7B:17:71:54:BC:5B:73:8E:3E:A1:C3 Authority key identifier: FE:7C:C8:D1:2C:8C:B9:40:D0:6E:AE:DB:5B:0A:D4:3D:05:03:62:F1 Certificate issuer: /CN=A91D404F/serialNumber=FE7CC8D12C8CB940D06EAEDB5B0AD43D050362F1 Certificate serial: 42 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_nzI0SyMuUDQbq7bWwrUPQUDYvE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D404F/D5D0FEB4CBF711EF869C904FC4F9AE02/_nzI0SyMuUDQbq7bWwrUPQUDYvE.mft Manifest number: 41 Signing time: Fri 09 May 2025 06:28:05 +0000 Manifest this update: Fri 09 May 2025 06:28:04 +0000 Manifest next update: Fri 16 May 2025 06:28:04 +0000 Files and hashes: 1: _nzI0SyMuUDQbq7bWwrUPQUDYvE.crl (hash: T3sVMQ2c+co6Mq4IZ2u8InKT1dk3qgAw6G5iJykbRZo=) 2: F943DF74CBF711EFB86EC74FC4F9AE02.roa (hash: OQsiNqk/6UEhG+WoM7b9x1Qk45e1mg8EolKiz0N5DwU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D404F/D5D0FEB4CBF711EF869C904FC4F9AE02/_nzI0SyMuUDQbq7bWwrUPQUDYvE.crl rsync://rpki.apnic.net/member_repository/A91D404F/D5D0FEB4CBF711EF869C904FC4F9AE02/_nzI0SyMuUDQbq7bWwrUPQUDYvE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_nzI0SyMuUDQbq7bWwrUPQUDYvE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 16 May 2025 06:28:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66 (0x42) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D404F, serialNumber=FE7CC8D12C8CB940D06EAEDB5B0AD43D050362F1 Validity Not Before: May 9 06:28:04 2025 GMT Not After : May 16 06:28:04 2025 GMT Subject: CN=681da074-dc2c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:38:27:61:7b:76:04:af:ad:fa:60:4d:50:dd: 42:d0:4b:c1:c3:29:10:53:01:06:16:d4:21:7d:71: 63:db:c5:0e:dd:94:b1:08:a5:3a:b0:b2:30:99:f6: 8a:12:00:96:d9:b4:32:21:86:93:2e:99:b1:7c:19: bb:09:97:d3:ff:02:d6:a8:b6:95:69:db:e2:29:3e: c4:97:c1:af:97:dd:51:c5:2f:c9:d3:0c:bd:b9:70: eb:4a:8c:51:60:32:ee:23:6f:67:35:95:74:c8:13: 82:7c:b2:bc:62:6f:e9:e9:46:5c:69:d5:55:ea:4c: 40:68:36:a1:12:60:f4:82:a4:a7:f4:9a:a9:38:80: 08:36:55:d8:bf:4a:07:80:0e:01:5e:11:33:f4:89: e7:5a:15:a9:11:bd:7d:3a:fe:85:2a:60:bb:fa:52: 93:a7:6b:be:a1:9f:b9:01:48:fb:b5:e7:f2:59:b2: 85:78:63:53:67:28:1e:b4:35:f4:b2:12:09:a7:90: 39:07:93:e1:46:ee:39:7a:82:1e:18:ef:5a:83:f6: bf:f5:23:0f:2d:64:16:eb:62:b1:d9:0b:79:86:f9: f0:92:04:50:2a:3a:0d:86:5d:83:d4:12:36:93:cb: 49:45:34:80:87:55:89:81:9e:2a:58:5a:a5:42:b5: 67:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:94:F4:AE:13:F0:A4:63:9E:7B:17:71:54:BC:5B:73:8E:3E:A1:C3 X509v3 Authority Key Identifier: keyid:FE:7C:C8:D1:2C:8C:B9:40:D0:6E:AE:DB:5B:0A:D4:3D:05:03:62:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D404F/D5D0FEB4CBF711EF869C904FC4F9AE02/_nzI0SyMuUDQbq7bWwrUPQUDYvE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_nzI0SyMuUDQbq7bWwrUPQUDYvE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D404F/D5D0FEB4CBF711EF869C904FC4F9AE02/_nzI0SyMuUDQbq7bWwrUPQUDYvE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 92:1b:34:8b:a0:f3:c1:95:6a:3c:3d:a1:29:0a:14:b3:f3:17: 50:b8:07:ae:2d:5a:09:55:f5:3b:4d:d5:54:ab:70:25:02:24: 83:81:a8:ac:ab:2a:3d:c6:7e:4d:74:b5:1c:92:1a:4e:4e:21: 5a:60:44:7c:e3:3b:c9:8b:38:24:89:af:a7:09:0a:06:a8:05: d2:ee:7a:1a:20:46:99:0f:7a:23:9c:a7:b7:39:26:27:fc:08: e0:e1:76:b1:78:3a:2e:bb:ed:14:47:dc:d5:30:6a:c1:80:42: 11:0c:62:bd:3f:19:5f:0a:cf:85:34:ca:28:c4:e7:8d:fd:c6: 4e:e4:6e:b5:3c:bd:d0:1f:76:23:53:7a:34:04:2e:46:c3:ae: d3:ba:e9:56:f2:d3:58:51:80:dd:58:05:cf:fe:c8:69:34:de: 1d:de:45:55:56:53:1a:e4:2e:a4:2f:57:4a:e4:02:25:6c:b4: 8d:d0:ce:f2:83:1c:8b:70:5f:40:4c:9a:d8:af:5a:40:ba:7a: 9c:1c:98:6b:89:cb:34:b4:44:b0:e5:18:61:90:44:29:b7:4c: f0:a1:21:8a:76:8e:98:fc:f0:d4:c7:37:25:03:43:6c:d2:b6: 7a:07:89:cf:f1:9e:94:f4:c4:ea:f0:00:44:a6:5d:db:72:36: 08:4c:28:49 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBQjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE NDA0RjExMC8GA1UEBRMoRkU3Q0M4RDEyQzhDQjk0MEQwNkVBRURCNUIwQUQ0M0Qw NTAzNjJGMTAeFw0yNTA1MDkwNjI4MDRaFw0yNTA1MTYwNjI4MDRaMBgxFjAUBgNV BAMTDTY4MWRhMDc0LWRjMmMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDnOCdhe3YEr636YE1Q3ULQS8HDKRBTAQYW1CF9cWPbxQ7dlLEIpTqwsjCZ9ooS AJbZtDIhhpMumbF8GbsJl9P/AtaotpVp2+IpPsSXwa+X3VHFL8nTDL25cOtKjFFg Mu4jb2c1lXTIE4J8srxib+npRlxp1VXqTEBoNqESYPSCpKf0mqk4gAg2Vdi/SgeA DgFeETP0iedaFakRvX06/oUqYLv6UpOna76hn7kBSPu15/JZsoV4Y1NnKB60NfSy EgmnkDkHk+FG7jl6gh4Y71qD9r/1Iw8tZBbrYrHZC3mG+fCSBFAqOg2GXYPUEjaT y0lFNICHVYmBnipYWqVCtWcTAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUgpT0rhPw pGOeexdxVLxbc44+ocMwHwYDVR0jBBgwFoAU/nzI0SyMuUDQbq7bWwrUPQUDYvEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQ0MDRGL0Q1RDBGRUI0Q0JG NzExRUY4NjlDOTA0RkM0RjlBRTAyL19uekkwU3lNdVVEUWJxN2JXd3JVUFFVRFl2 RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvX256STBTeU11VURRYnE3Yld3clVQUVVEWXZFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQ0 MDRGL0Q1RDBGRUI0Q0JGNzExRUY4NjlDOTA0RkM0RjlBRTAyL19uekkwU3lNdVVE UWJxN2JXd3JVUFFVRFl2RS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJIbNIug88GVajw9oSkKFLPzF1C4B64tWglV9TtN1VSrcCUCJIOBqKyr Kj3Gfk10tRySGk5OIVpgRHzjO8mLOCSJr6cJCgaoBdLuehogRpkPeiOcp7c5Jif8 CODhdrF4Oi677RRH3NUwasGAQhEMYr0/GV8Kz4U0yijE5439xk7kbrU8vdAfdiNT ejQELkbDrtO66Vby01hRgN1YBc/+yGk03h3eRVVWUxrkLqQvV0rkAiVstI3QzvKD HItwX0BMmtivWkC6epwcmGuJyzS0RLDlGGGQRCm3TPChIYp2jpj88NTHNyUDQ2zS tnoHic/xnpT0xOrwAESmXdtyNghMKEk= -----END CERTIFICATE-----Generated at Sat May 10 04:50:27 2025 by rpki-client