$ rpki-client -vvf rpki.apnic.net/member_repository/A91DE8B4/4A65EAC8EE8011EAA0F82C5CC4F9AE02/nqyDVo7Oh3xUuSMNY52kTzgNIeU.mft File: nqyDVo7Oh3xUuSMNY52kTzgNIeU.mft (raw, json) Hash identifier: hkKs823+QKCHJUQbTz0aV7Ci20oGKOppIPHCo4VyClk= Subject key identifier: 39:FD:7A:AB:88:75:CA:ED:EA:3A:09:40:D7:41:C9:8C:5A:11:E9:A2 Authority key identifier: 9E:AC:83:56:8E:CE:87:7C:54:B9:23:0D:63:9D:A4:4F:38:0D:21:E5 Certificate issuer: /CN=A91DE8B4/serialNumber=9EAC83568ECE877C54B9230D639DA44F380D21E5 Certificate serial: 07D9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nqyDVo7Oh3xUuSMNY52kTzgNIeU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DE8B4/4A65EAC8EE8011EAA0F82C5CC4F9AE02/nqyDVo7Oh3xUuSMNY52kTzgNIeU.mft Manifest number: 07D3 Signing time: Wed 14 May 2025 21:08:08 +0000 Manifest this update: Wed 14 May 2025 21:08:07 +0000 Manifest next update: Wed 21 May 2025 21:08:07 +0000 Files and hashes: 1: nqyDVo7Oh3xUuSMNY52kTzgNIeU.crl (hash: nBn18TRKnyMlZeVwWx+M6HdfkdSQuA2/q31kBdLvRkc=) 2: 149009E6EE8111EAABC5C05CC4F9AE02.roa (hash: ZuNx07Xi3l7zK6QE18qPa3KdYreh+VNjcsKw+zEu9qY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DE8B4/4A65EAC8EE8011EAA0F82C5CC4F9AE02/nqyDVo7Oh3xUuSMNY52kTzgNIeU.crl rsync://rpki.apnic.net/member_repository/A91DE8B4/4A65EAC8EE8011EAA0F82C5CC4F9AE02/nqyDVo7Oh3xUuSMNY52kTzgNIeU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nqyDVo7Oh3xUuSMNY52kTzgNIeU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 21 May 2025 21:08:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2009 (0x7d9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DE8B4, serialNumber=9EAC83568ECE877C54B9230D639DA44F380D21E5 Validity Not Before: May 14 21:08:07 2025 GMT Not After : May 21 21:08:07 2025 GMT Subject: CN=68250637-ede9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:c3:09:9f:85:a7:d7:5f:ff:03:bd:4d:a7:ae: 3f:56:7f:4b:08:76:e0:97:97:1d:53:5a:47:3a:26: b4:ff:c2:7b:67:50:6c:29:69:0b:71:35:71:82:20: 38:d5:ec:8e:4f:66:c0:8d:cb:99:59:20:a1:39:d6: ad:03:ec:ad:aa:cf:45:10:2d:f0:7e:77:69:d6:b5: d7:ad:32:a1:de:aa:a8:c0:05:45:e7:71:ad:59:3c: 3d:2f:c9:e4:cd:f0:50:64:ff:11:28:7f:77:46:81: 55:1d:ab:2e:bf:7e:c7:4b:1b:93:01:b4:0a:d8:9f: 95:3f:da:42:d4:1e:dc:01:30:13:3a:79:6a:30:e2: 31:76:a0:f1:d8:6a:7e:99:ce:9a:f0:75:40:ea:5b: b0:b8:f0:15:e7:71:03:93:88:b5:9a:e4:f2:d7:4e: 39:12:fa:7b:c2:3d:7f:47:44:2f:6f:63:d6:53:ac: c2:cc:26:0f:0d:57:97:d2:fb:25:bc:bd:f1:91:e1: ce:98:58:3e:38:20:59:6a:9d:85:dc:83:c2:de:7e: e7:6c:11:75:8e:04:48:c3:9f:e0:95:ea:d8:6c:59: 9c:46:89:e7:b6:61:6e:1d:ef:fe:6e:59:79:62:4b: a7:9b:16:16:11:4d:c3:f1:f6:8f:2f:af:03:ce:83: 25:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:FD:7A:AB:88:75:CA:ED:EA:3A:09:40:D7:41:C9:8C:5A:11:E9:A2 X509v3 Authority Key Identifier: keyid:9E:AC:83:56:8E:CE:87:7C:54:B9:23:0D:63:9D:A4:4F:38:0D:21:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DE8B4/4A65EAC8EE8011EAA0F82C5CC4F9AE02/nqyDVo7Oh3xUuSMNY52kTzgNIeU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nqyDVo7Oh3xUuSMNY52kTzgNIeU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DE8B4/4A65EAC8EE8011EAA0F82C5CC4F9AE02/nqyDVo7Oh3xUuSMNY52kTzgNIeU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 49:39:4e:49:aa:0c:c4:bb:b2:2d:0b:0d:54:a8:a3:f5:00:11: b0:de:04:dc:0e:63:75:1f:17:01:86:be:84:7a:fc:86:5a:83: 83:00:0d:3c:b4:c1:e0:83:54:b9:b3:d3:b8:05:af:e6:03:78: 84:76:78:8c:87:9f:aa:8e:5b:95:0e:c4:10:85:62:4d:5a:5b: 05:1a:ec:d0:89:4c:86:b8:a4:e9:9b:9a:13:54:30:4e:59:d1: ff:2f:2a:f9:d8:44:f1:74:a9:28:49:c4:a0:a5:f5:a0:a4:76: 55:d0:05:c1:de:bb:e8:bd:8a:60:a7:06:9b:0d:e8:6b:41:94: bf:a7:16:a4:a3:8c:98:fc:5c:9e:e9:54:78:17:d5:16:5c:8d: 31:91:57:64:b9:68:30:03:50:ec:b7:40:41:75:10:d3:6b:b0: ab:1e:55:81:ea:a5:d7:de:ac:53:86:99:14:de:90:df:2e:32: 07:51:8c:e6:4f:9a:c1:f4:8b:e2:75:73:e8:7d:53:a0:45:85: fb:cf:3a:74:f0:74:c5:f6:35:88:bb:6c:4b:c7:65:3c:e0:34: 1d:5c:5f:1e:36:0c:ab:bd:c4:80:7f:02:3b:3b:65:5e:17:a5: ea:ec:8b:9d:0c:55:5d:8b:2b:f7:68:f4:67:ae:2a:a3:89:a5: ff:f3:78:d6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB9kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REU4QjQxMTAvBgNVBAUTKDlFQUM4MzU2OEVDRTg3N0M1NEI5MjMwRDYzOURBNDRG MzgwRDIxRTUwHhcNMjUwNTE0MjEwODA3WhcNMjUwNTIxMjEwODA3WjAYMRYwFAYD VQQDEw02ODI1MDYzNy1lZGU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlsMJn4Wn11//A71Np64/Vn9LCHbgl5cdU1pHOia0/8J7Z1BsKWkLcTVxgiA4 1eyOT2bAjcuZWSChOdatA+ytqs9FEC3wfndp1rXXrTKh3qqowAVF53GtWTw9L8nk zfBQZP8RKH93RoFVHasuv37HSxuTAbQK2J+VP9pC1B7cATATOnlqMOIxdqDx2Gp+ mc6a8HVA6luwuPAV53EDk4i1muTy1045Evp7wj1/R0Qvb2PWU6zCzCYPDVeX0vsl vL3xkeHOmFg+OCBZap2F3IPC3n7nbBF1jgRIw5/glerYbFmcRonntmFuHe/+bll5 YkunmxYWEU3D8faPL68DzoMlvQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDn9equI dcrt6joJQNdByYxaEemiMB8GA1UdIwQYMBaAFJ6sg1aOzod8VLkjDWOdpE84DSHl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERThCNC80QTY1RUFDOEVF ODAxMUVBQTBGODJDNUNDNEY5QUUwMi9ucXlEVm83T2gzeFV1U01OWTUya1R6Z05J ZVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25xeURWbzdPaDN4VXVTTU5ZNTJrVHpnTkllVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RThCNC80QTY1RUFDOEVFODAxMUVBQTBGODJDNUNDNEY5QUUwMi9ucXlEVm83T2gz eFV1U01OWTUya1R6Z05JZVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBJOU5JqgzEu7ItCw1UqKP1ABGw3gTcDmN1HxcBhr6EevyGWoODAA08 tMHgg1S5s9O4Ba/mA3iEdniMh5+qjluVDsQQhWJNWlsFGuzQiUyGuKTpm5oTVDBO WdH/Lyr52ETxdKkoScSgpfWgpHZV0AXB3rvovYpgpwabDehrQZS/pxako4yY/Fye 6VR4F9UWXI0xkVdkuWgwA1Dst0BBdRDTa7CrHlWB6qXX3qxThpkU3pDfLjIHUYzm T5rB9IvidXPofVOgRYX7zzp08HTF9jWIu2xLx2U84DQdXF8eNgyrvcSAfwI7O2Ve F6Xq7IudDFVdiyv3aPRnriqjiaX/83jW -----END CERTIFICATE-----Generated at Fri May 16 11:54:01 2025 by rpki-client