$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA198/993F2090ABC411E6BD6BED14C4F9AE02/nhw1MdAEXqOJtoz_koagj7y72L0.mft File: nhw1MdAEXqOJtoz_koagj7y72L0.mft (raw, json) Hash identifier: KvpIjmfOyjpQ8k99fIjy60ETXFonxP3VLNwYuUbBvX8= Subject key identifier: 47:C3:CA:08:23:4C:3E:D8:EB:C4:B4:72:95:90:44:9C:CD:55:D7:1C Authority key identifier: 9E:1C:35:31:D0:04:5E:A3:89:B6:8C:FF:92:86:A0:8F:BC:BB:D8:BD Certificate issuer: /CN=A91EA198/serialNumber=9E1C3531D0045EA389B68CFF9286A08FBCBBD8BD Certificate serial: 1EC9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nhw1MdAEXqOJtoz_koagj7y72L0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EA198/993F2090ABC411E6BD6BED14C4F9AE02/nhw1MdAEXqOJtoz_koagj7y72L0.mft Manifest number: 1E00 Signing time: Fri 16 May 2025 16:21:21 +0000 Manifest this update: Fri 16 May 2025 16:21:21 +0000 Manifest next update: Fri 23 May 2025 16:21:21 +0000 Files and hashes: 1: nhw1MdAEXqOJtoz_koagj7y72L0.crl (hash: HiVjjrxQewMc2XxOv/Ks1QRexYGSYz7LB7y9WWUXs6I=) 2: EE375CF036BD11E7B9B7251EC4F9AE02.roa (hash: WQm0NEP8l4u4Yk4c6maTYK0oUZXH3BQgntJOjnk6iyg=) 3: 36D3DC38AA9311ECB5C88036C4F9AE02.roa (hash: 6AyDnzx5A4AjZFDON1usGiiqlcfarAtQyPrblWg9aSI=) 4: C81AC00EB14111EB959D4D3CC4F9AE02.roa (hash: PPz+jo2ZglJLUOgv0BMC7+AH2ZHmEK5hCIx98WW3CQI=) 5: 192418F6AA1811EA97BC574CC4F9AE02.roa (hash: 2NrY7syTQnT2b3fwQCo+pNk5LqubHVwUAREOnAdGVSc=) 6: AB549D62125711EF94D14874C4F9AE02.roa (hash: Q15x41gulDIattvR5E6BjIkzM60ANGTWvCg3RJWxG8c=) 7: FA4555AA93DC11EEB00AF628C4F9AE02.roa (hash: B0CVo9ry++sVZy/2rBP2AlbhG4hjHy12hERvlOOeEZ8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EA198/993F2090ABC411E6BD6BED14C4F9AE02/nhw1MdAEXqOJtoz_koagj7y72L0.crl rsync://rpki.apnic.net/member_repository/A91EA198/993F2090ABC411E6BD6BED14C4F9AE02/nhw1MdAEXqOJtoz_koagj7y72L0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nhw1MdAEXqOJtoz_koagj7y72L0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 23 May 2025 16:21:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7881 (0x1ec9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EA198, serialNumber=9E1C3531D0045EA389B68CFF9286A08FBCBBD8BD Validity Not Before: May 16 16:21:21 2025 GMT Not After : May 23 16:21:21 2025 GMT Subject: CN=68276601-4f9d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:d4:67:ad:f0:f7:e6:96:f8:5f:4e:60:f8:3f: bb:4c:6a:59:1d:04:08:bb:22:f0:d3:38:00:a5:4c: 4d:f7:ef:c3:cd:7b:2d:32:25:bb:d4:e3:69:4c:21: 8c:8c:c0:f5:15:16:a7:68:0a:83:5b:81:bb:70:98: ae:eb:7e:70:c2:f1:28:a4:31:47:e5:d1:2c:d9:40: fc:c4:7d:38:8c:6d:f2:70:cb:c6:c4:0b:51:c2:dd: 58:8c:ad:91:14:99:74:be:71:39:1e:29:6b:10:c7: 54:77:2c:a4:bf:34:a1:3c:24:00:c0:a5:93:86:25: 04:8e:a9:b2:1b:9d:25:0d:11:01:2f:76:dd:58:b8: df:c6:c7:48:85:72:e6:d6:c2:8c:4c:72:0b:e0:d6: 8e:32:66:cb:31:f3:82:06:45:9e:11:00:55:b1:69: 02:24:4c:38:43:88:d9:43:53:b2:bc:f5:b1:0c:28: c4:d0:0a:e4:11:b3:bd:5d:30:49:c9:3c:ec:ef:4b: 3b:06:6a:9b:5f:e4:5f:e0:92:e2:77:93:9d:d7:d1: 08:91:df:a3:fe:65:23:29:11:b6:37:6a:fe:bb:1d: 5f:20:dc:16:f7:3b:4d:94:5c:20:76:11:a4:9f:6b: 07:f0:70:e3:93:51:31:4b:e3:8e:9c:96:3f:17:3e: 6f:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:C3:CA:08:23:4C:3E:D8:EB:C4:B4:72:95:90:44:9C:CD:55:D7:1C X509v3 Authority Key Identifier: keyid:9E:1C:35:31:D0:04:5E:A3:89:B6:8C:FF:92:86:A0:8F:BC:BB:D8:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EA198/993F2090ABC411E6BD6BED14C4F9AE02/nhw1MdAEXqOJtoz_koagj7y72L0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nhw1MdAEXqOJtoz_koagj7y72L0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA198/993F2090ABC411E6BD6BED14C4F9AE02/nhw1MdAEXqOJtoz_koagj7y72L0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8d:58:0a:85:0e:e5:4b:06:82:aa:28:72:c4:75:3c:8b:56:8c: 57:93:e7:18:eb:93:9a:29:ac:26:59:fb:d8:c2:00:9c:c1:4c: b8:41:ae:66:07:ea:19:ca:92:6e:34:9a:40:b3:8c:8d:bc:6a: 3f:99:20:d6:b7:57:8a:45:8f:6a:83:d0:77:08:c5:08:48:b7: 86:de:d7:06:f9:7b:7f:57:ba:b1:27:95:84:33:16:74:c2:e2: f4:89:5c:1f:50:23:50:69:50:ea:5e:1f:a3:99:35:23:64:c8: c4:20:e5:2a:77:a2:de:00:9b:d9:68:3b:80:20:72:a0:e6:59: c8:6f:8a:a5:02:7b:6e:fd:3b:b7:fc:61:75:ee:3d:8b:b1:4f: 26:c0:92:96:11:7f:17:0b:5c:5b:07:de:25:98:79:ae:9d:b2: 20:e9:aa:7c:0c:22:80:dd:b7:77:1c:e9:1d:f9:8f:64:aa:6d: 66:c1:1c:09:a8:c1:bb:ff:fb:b1:fa:67:ec:e1:4d:52:99:e5: 9d:25:5c:c1:c3:ee:88:ea:00:58:06:a4:5c:d3:ae:46:68:cb: e3:2e:e7:f4:34:37:28:3a:7a:2e:fd:40:05:be:c8:d6:5b:4a: da:77:20:b3:33:02:f3:9d:c4:96:f0:7d:80:74:36:91:6c:73: ba:ef:aa:e0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHskwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUExOTgxMTAvBgNVBAUTKDlFMUMzNTMxRDAwNDVFQTM4OUI2OENGRjkyODZBMDhG QkNCQkQ4QkQwHhcNMjUwNTE2MTYyMTIxWhcNMjUwNTIzMTYyMTIxWjAYMRYwFAYD VQQDEw02ODI3NjYwMS00ZjlkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv9RnrfD35pb4X05g+D+7TGpZHQQIuyLw0zgApUxN9+/DzXstMiW71ONpTCGM jMD1FRanaAqDW4G7cJiu635wwvEopDFH5dEs2UD8xH04jG3ycMvGxAtRwt1YjK2R FJl0vnE5HilrEMdUdyykvzShPCQAwKWThiUEjqmyG50lDREBL3bdWLjfxsdIhXLm 1sKMTHIL4NaOMmbLMfOCBkWeEQBVsWkCJEw4Q4jZQ1OyvPWxDCjE0ArkEbO9XTBJ yTzs70s7BmqbX+Rf4JLid5Od19EIkd+j/mUjKRG2N2r+ux1fINwW9ztNlFwgdhGk n2sH8HDjk1ExS+OOnJY/Fz5vTwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEfDyggj TD7Y68S0cpWQRJzNVdccMB8GA1UdIwQYMBaAFJ4cNTHQBF6jibaM/5KGoI+8u9i9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQTE5OC85OTNGMjA5MEFC QzQxMUU2QkQ2QkVEMTRDNEY5QUUwMi9uaHcxTWRBRVhxT0p0b3pfa29hZ2o3eTcy TDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25odzFNZEFFWHFPSnRvel9rb2Fnajd5NzJMMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QTE5OC85OTNGMjA5MEFCQzQxMUU2QkQ2QkVEMTRDNEY5QUUwMi9uaHcxTWRBRVhx T0p0b3pfa29hZ2o3eTcyTDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCNWAqFDuVLBoKqKHLEdTyLVoxXk+cY65OaKawmWfvYwgCcwUy4Qa5m B+oZypJuNJpAs4yNvGo/mSDWt1eKRY9qg9B3CMUISLeG3tcG+Xt/V7qxJ5WEMxZ0 wuL0iVwfUCNQaVDqXh+jmTUjZMjEIOUqd6LeAJvZaDuAIHKg5lnIb4qlAntu/Tu3 /GF17j2LsU8mwJKWEX8XC1xbB94lmHmunbIg6ap8DCKA3bd3HOkd+Y9kqm1mwRwJ qMG7//ux+mfs4U1SmeWdJVzBw+6I6gBYBqRc065GaMvjLuf0NDcoOnou/UAFvsjW W0radyCzMwLzncSW8H2AdDaRbHO676rg -----END CERTIFICATE-----Generated at Fri May 16 21:45:28 2025 by rpki-client