$ rpki-client -vvf rpki.apnic.net/member_repository/A91DE10F/60EA5C2CB5D311E7B6A2DD5DC4F9AE02/NDyCcTdhxY6CRQ2UqleWffm0bxU.mft File: NDyCcTdhxY6CRQ2UqleWffm0bxU.mft (raw, json) Hash identifier: gL66vaYcAoQt3vk104Ir3vOSGbp+kspJ4HhCJMYAzY8= Subject key identifier: 72:AE:D6:79:19:FD:C7:5F:64:E4:82:6A:03:F5:3D:CB:CE:F5:F3:97 Authority key identifier: 34:3C:82:71:37:61:C5:8E:82:45:0D:94:AA:57:96:7D:F9:B4:6F:15 Certificate issuer: /CN=A91DE10F/serialNumber=343C82713761C58E82450D94AA57967DF9B46F15 Certificate serial: 1804 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NDyCcTdhxY6CRQ2UqleWffm0bxU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DE10F/60EA5C2CB5D311E7B6A2DD5DC4F9AE02/NDyCcTdhxY6CRQ2UqleWffm0bxU.mft Manifest number: 17FB Signing time: Mon 12 May 2025 16:28:47 +0000 Manifest this update: Mon 12 May 2025 16:28:47 +0000 Manifest next update: Mon 19 May 2025 16:28:47 +0000 Files and hashes: 1: NDyCcTdhxY6CRQ2UqleWffm0bxU.crl (hash: SNxXDoNLPeuUoBmWfNHCjK6OjdVNc4g9VyCV17yQ89I=) 2: 31AA8496B62811E7882B893BC4F9AE02.roa (hash: TzvQgcIEdDiZ2vx98Eai/8pokoL7PkZgm06lLl+dtq8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DE10F/60EA5C2CB5D311E7B6A2DD5DC4F9AE02/NDyCcTdhxY6CRQ2UqleWffm0bxU.crl rsync://rpki.apnic.net/member_repository/A91DE10F/60EA5C2CB5D311E7B6A2DD5DC4F9AE02/NDyCcTdhxY6CRQ2UqleWffm0bxU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NDyCcTdhxY6CRQ2UqleWffm0bxU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 16:28:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6148 (0x1804) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DE10F, serialNumber=343C82713761C58E82450D94AA57967DF9B46F15 Validity Not Before: May 12 16:28:47 2025 GMT Not After : May 19 16:28:47 2025 GMT Subject: CN=682221bf-1b4c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:b4:25:da:d0:eb:3a:ac:e5:f9:0d:70:e9:9f: e6:b3:68:3b:a2:af:c2:79:13:c2:dd:53:cb:58:39: 09:32:0f:db:66:55:89:e1:9d:b0:84:55:24:5b:4e: df:47:ae:bf:1b:2a:bc:3f:f4:a3:52:3b:e9:a0:ab: cf:65:ae:03:e5:5b:f3:0d:ee:68:7a:d5:4c:e4:78: ed:ca:8e:e7:64:eb:9c:f5:65:24:ef:0a:b2:73:60: 0d:cb:5f:d1:a2:cd:f9:2b:22:e7:b3:69:da:be:af: 2d:48:83:bd:49:f6:15:4f:9d:43:94:ab:05:6f:13: f0:11:08:7d:75:a7:b5:45:1e:96:62:16:b6:db:bf: 36:74:97:b6:20:ad:00:ca:b9:24:1d:b3:d1:b7:36: 4c:04:9c:92:20:cf:1e:f3:64:2d:34:eb:f9:f6:e2: f3:b4:25:eb:d6:54:43:eb:a7:df:15:3a:b4:fa:c6: 68:51:e3:17:67:90:44:6e:6c:75:97:91:3b:6d:95: 86:13:29:c1:58:5d:22:ba:ba:c8:fe:b5:da:b0:8c: 8b:68:8a:e4:b7:65:94:f9:e8:4a:f9:8d:39:7b:5a: 8c:dd:13:b3:b7:5c:e7:25:80:28:c2:db:89:ee:26: 52:19:60:dc:bf:23:ae:5f:6f:8f:ec:70:a1:ef:f7: b8:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:AE:D6:79:19:FD:C7:5F:64:E4:82:6A:03:F5:3D:CB:CE:F5:F3:97 X509v3 Authority Key Identifier: keyid:34:3C:82:71:37:61:C5:8E:82:45:0D:94:AA:57:96:7D:F9:B4:6F:15 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DE10F/60EA5C2CB5D311E7B6A2DD5DC4F9AE02/NDyCcTdhxY6CRQ2UqleWffm0bxU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NDyCcTdhxY6CRQ2UqleWffm0bxU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DE10F/60EA5C2CB5D311E7B6A2DD5DC4F9AE02/NDyCcTdhxY6CRQ2UqleWffm0bxU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 90:01:d5:5b:bd:1c:92:ff:6c:61:0c:a7:86:bd:c4:3a:c9:56: 9e:91:af:a2:c2:65:09:55:b6:2f:67:fa:52:ca:e4:3a:53:d5: a3:0a:c3:d9:17:31:bc:b1:10:a7:a9:8d:d4:2c:38:28:64:07: 79:d5:64:ab:85:86:4a:d2:e9:91:14:3c:3f:b3:18:13:74:1c: 44:73:08:95:63:98:8c:c5:65:61:da:9b:49:c9:ef:41:f4:2f: 99:cb:2d:d3:cd:af:49:58:b6:a0:98:02:2d:a6:ee:7b:e8:48: 86:65:35:ed:56:d7:1f:d8:dd:21:a8:b1:38:aa:a8:4b:2d:99: 18:52:c1:d8:de:74:27:46:bb:d6:cd:47:c9:fa:6a:cf:ef:38: f4:64:15:9c:ac:fe:39:d4:e6:22:85:4f:b7:fe:40:85:b7:3a: 16:83:55:f7:f6:9d:ff:0a:c7:54:84:a8:05:8f:1b:31:93:0b: e4:6b:03:7f:b9:b7:ef:b3:bd:ea:61:05:32:97:3e:0e:97:fa: 2a:cd:47:ae:27:45:d6:c3:58:09:ed:9b:4e:3b:b4:ba:d3:64: eb:13:62:0d:fa:8c:04:09:1c:8f:8b:fe:62:73:9e:84:bb:e0: eb:80:f0:91:bf:bb:3b:f7:c2:af:17:22:73:85:ba:c3:47:e0: 6f:f7:e5:73 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGAQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REUxMEYxMTAvBgNVBAUTKDM0M0M4MjcxMzc2MUM1OEU4MjQ1MEQ5NEFBNTc5NjdE RjlCNDZGMTUwHhcNMjUwNTEyMTYyODQ3WhcNMjUwNTE5MTYyODQ3WjAYMRYwFAYD VQQDEw02ODIyMjFiZi0xYjRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsrQl2tDrOqzl+Q1w6Z/ms2g7oq/CeRPC3VPLWDkJMg/bZlWJ4Z2whFUkW07f R66/Gyq8P/SjUjvpoKvPZa4D5VvzDe5oetVM5Hjtyo7nZOuc9WUk7wqyc2ANy1/R os35KyLns2navq8tSIO9SfYVT51DlKsFbxPwEQh9dae1RR6WYha22782dJe2IK0A yrkkHbPRtzZMBJySIM8e82QtNOv59uLztCXr1lRD66ffFTq0+sZoUeMXZ5BEbmx1 l5E7bZWGEynBWF0iurrI/rXasIyLaIrkt2WU+ehK+Y05e1qM3ROzt1znJYAowtuJ 7iZSGWDcvyOuX2+P7HCh7/e4nwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHKu1nkZ /cdfZOSCagP1PcvO9fOXMB8GA1UdIwQYMBaAFDQ8gnE3YcWOgkUNlKpXln35tG8V MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERTEwRi82MEVBNUMyQ0I1 RDMxMUU3QjZBMkRENURDNEY5QUUwMi9ORHlDY1RkaHhZNkNSUTJVcWxlV2ZmbTBi eFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05EeUNjVGRoeFk2Q1JRMlVxbGVXZmZtMGJ4VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RTEwRi82MEVBNUMyQ0I1RDMxMUU3QjZBMkRENURDNEY5QUUwMi9ORHlDY1RkaHhZ NkNSUTJVcWxlV2ZmbTBieFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCQAdVbvRyS/2xhDKeGvcQ6yVaeka+iwmUJVbYvZ/pSyuQ6U9WjCsPZ FzG8sRCnqY3ULDgoZAd51WSrhYZK0umRFDw/sxgTdBxEcwiVY5iMxWVh2ptJye9B 9C+Zyy3Tza9JWLagmAItpu576EiGZTXtVtcf2N0hqLE4qqhLLZkYUsHY3nQnRrvW zUfJ+mrP7zj0ZBWcrP451OYihU+3/kCFtzoWg1X39p3/CsdUhKgFjxsxkwvkawN/ ubfvs73qYQUylz4Ol/oqzUeuJ0XWw1gJ7ZtOO7S602TrE2IN+owECRyPi/5ic56E u+DrgPCRv7s798KvFyJzhbrDR+Bv9+Vz -----END CERTIFICATE-----Generated at Tue May 13 11:29:43 2025 by rpki-client