$ rpki-client -vvf rpki.apnic.net/member_repository/A91F2BA6/84DD79E08B7611EA91050743C4F9AE02/nuqkUJudasqRzaQCHxBekhA363Q.mft File: nuqkUJudasqRzaQCHxBekhA363Q.mft (raw, json) Hash identifier: YNYqw+d2r0x6JGNd3PtV1wU45FHn7vv3rrbNXL/DJ/E= Subject key identifier: 69:D1:89:C7:C6:D6:17:04:1E:CA:82:63:60:3F:00:9B:17:88:96:8B Authority key identifier: 9E:EA:A4:50:9B:9D:6A:CA:91:CD:A4:02:1F:10:5E:92:10:37:EB:74 Certificate issuer: /CN=A91F2BA6/serialNumber=9EEAA4509B9D6ACA91CDA4021F105E921037EB74 Certificate serial: 099D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nuqkUJudasqRzaQCHxBekhA363Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F2BA6/84DD79E08B7611EA91050743C4F9AE02/nuqkUJudasqRzaQCHxBekhA363Q.mft Manifest number: 0992 Signing time: Wed 14 May 2025 20:13:50 +0000 Manifest this update: Wed 14 May 2025 20:13:49 +0000 Manifest next update: Wed 21 May 2025 20:13:49 +0000 Files and hashes: 1: nuqkUJudasqRzaQCHxBekhA363Q.crl (hash: Vq01iPeUh533krGQu41s3engVmmMPKN2V1y5YeF66+I=) 2: 5A7E13CA8C2B11EA90152018C4F9AE02.roa (hash: mjCI51z49d/ZR6NIO/Fc5BsNeBRLESAiodQLOKBux1k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F2BA6/84DD79E08B7611EA91050743C4F9AE02/nuqkUJudasqRzaQCHxBekhA363Q.crl rsync://rpki.apnic.net/member_repository/A91F2BA6/84DD79E08B7611EA91050743C4F9AE02/nuqkUJudasqRzaQCHxBekhA363Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nuqkUJudasqRzaQCHxBekhA363Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 21 May 2025 20:13:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2461 (0x99d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F2BA6, serialNumber=9EEAA4509B9D6ACA91CDA4021F105E921037EB74 Validity Not Before: May 14 20:13:49 2025 GMT Not After : May 21 20:13:49 2025 GMT Subject: CN=6824f97e-f336 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:da:a7:6a:6f:82:d6:de:d5:ac:a0:f9:97:65: 48:14:c3:d3:77:f5:e6:a7:75:4d:59:2d:ca:31:bc: 3f:d4:ef:88:e7:34:1d:97:75:c5:dc:da:5b:02:29: f9:7f:3e:ab:37:0f:1f:81:17:cf:e7:80:e6:ac:07: 9b:42:fe:18:84:47:62:e4:5e:63:df:d7:1b:e8:1a: 97:96:17:0a:b8:87:ed:50:b1:c4:4b:42:d8:d4:e2: 9f:9b:af:b4:44:5c:f7:4e:ef:ca:f3:ba:40:e4:1b: a4:a4:4b:06:3a:b2:fc:9f:41:48:ed:9e:19:07:dd: 68:38:88:0f:70:26:3f:d5:f1:a9:75:07:42:21:58: d5:d9:76:1b:cd:aa:aa:cb:54:17:71:24:dc:db:df: e8:76:e8:ad:8d:3d:0a:01:ef:f8:5e:0c:2e:d7:1b: 9d:8d:d0:71:82:e8:6a:1d:46:80:2a:90:02:b5:c8: 10:b8:04:4f:87:b9:77:2c:75:dd:05:e4:b6:1e:75: d4:9d:be:75:7f:ab:93:c8:48:4a:3b:a1:bf:d9:0d: 8d:e6:dc:87:08:3e:7e:fe:c5:ce:5a:f9:40:fa:e3: 1c:96:a5:28:6d:e6:18:f0:83:e4:46:9b:88:d0:cb: 98:74:e3:7b:ac:8b:92:20:00:2a:1d:39:a6:a3:52: 71:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:D1:89:C7:C6:D6:17:04:1E:CA:82:63:60:3F:00:9B:17:88:96:8B X509v3 Authority Key Identifier: keyid:9E:EA:A4:50:9B:9D:6A:CA:91:CD:A4:02:1F:10:5E:92:10:37:EB:74 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F2BA6/84DD79E08B7611EA91050743C4F9AE02/nuqkUJudasqRzaQCHxBekhA363Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nuqkUJudasqRzaQCHxBekhA363Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F2BA6/84DD79E08B7611EA91050743C4F9AE02/nuqkUJudasqRzaQCHxBekhA363Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 18:cd:88:f7:70:21:63:29:b5:3b:a4:c7:0f:7a:39:85:89:cc: 6b:52:ad:9a:fc:d6:f9:33:7a:d8:31:6c:41:08:e4:25:c6:bc: 30:62:f9:a1:0e:4b:ab:c9:21:8c:ec:b8:1b:2f:fb:90:70:ab: 85:a1:b3:98:25:01:3f:85:05:47:43:3e:0d:53:bc:10:ef:a0: f2:fd:a3:56:67:e5:9d:a0:c4:3b:86:bb:a6:b6:9b:91:ca:2d: a0:d9:d2:dc:06:6d:4b:96:98:3e:59:c9:92:c1:93:92:c2:0f: 09:86:5e:52:67:ea:8b:7b:9f:92:a2:5c:f7:ec:4c:a5:3e:05: a2:59:90:d1:eb:a1:21:bc:60:8f:ec:2d:9a:92:34:79:09:cf: 00:1e:34:86:37:9c:7e:11:86:2c:36:f3:72:f6:eb:82:74:61: e4:67:03:f5:b9:0f:eb:11:d8:78:f5:9f:2a:b2:27:59:91:a6: fa:96:c8:68:92:c6:0e:4a:d4:36:e9:1d:0e:f2:d6:eb:6f:bb: 41:cc:38:3e:da:64:a9:7b:78:7d:04:a4:77:91:e2:62:5b:14: fb:a9:5c:1a:55:b9:7a:16:eb:1c:83:39:78:74:ea:86:72:6e: 02:28:8a:20:c2:01:56:06:7e:f9:d5:72:66:63:e7:38:5b:21: e1:c6:58:9e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCZ0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjJCQTYxMTAvBgNVBAUTKDlFRUFBNDUwOUI5RDZBQ0E5MUNEQTQwMjFGMTA1RTky MTAzN0VCNzQwHhcNMjUwNTE0MjAxMzQ5WhcNMjUwNTIxMjAxMzQ5WjAYMRYwFAYD VQQDEw02ODI0Zjk3ZS1mMzM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1tqnam+C1t7VrKD5l2VIFMPTd/Xmp3VNWS3KMbw/1O+I5zQdl3XF3NpbAin5 fz6rNw8fgRfP54DmrAebQv4YhEdi5F5j39cb6BqXlhcKuIftULHES0LY1OKfm6+0 RFz3Tu/K87pA5BukpEsGOrL8n0FI7Z4ZB91oOIgPcCY/1fGpdQdCIVjV2XYbzaqq y1QXcSTc29/oduitjT0KAe/4Xgwu1xudjdBxguhqHUaAKpACtcgQuARPh7l3LHXd BeS2HnXUnb51f6uTyEhKO6G/2Q2N5tyHCD5+/sXOWvlA+uMclqUobeYY8IPkRpuI 0MuYdON7rIuSIAAqHTmmo1JxPwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGnRicfG 1hcEHsqCY2A/AJsXiJaLMB8GA1UdIwQYMBaAFJ7qpFCbnWrKkc2kAh8QXpIQN+t0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMkJBNi84NERENzlFMDhC NzYxMUVBOTEwNTA3NDNDNEY5QUUwMi9udXFrVUp1ZGFzcVJ6YVFDSHhCZWtoQTM2 M1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL251cWtVSnVkYXNxUnphUUNIeEJla2hBMzYzUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MkJBNi84NERENzlFMDhCNzYxMUVBOTEwNTA3NDNDNEY5QUUwMi9udXFrVUp1ZGFz cVJ6YVFDSHhCZWtoQTM2M1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAYzYj3cCFjKbU7pMcPejmFicxrUq2a/Nb5M3rYMWxBCOQlxrwwYvmh DkurySGM7LgbL/uQcKuFobOYJQE/hQVHQz4NU7wQ76Dy/aNWZ+WdoMQ7hrumtpuR yi2g2dLcBm1Llpg+WcmSwZOSwg8Jhl5SZ+qLe5+Solz37EylPgWiWZDR66EhvGCP 7C2akjR5Cc8AHjSGN5x+EYYsNvNy9uuCdGHkZwP1uQ/rEdh49Z8qsidZkab6lsho ksYOStQ26R0O8tbrb7tBzDg+2mSpe3h9BKR3keJiWxT7qVwaVbl6Fuscgzl4dOqG cm4CKIogwgFWBn751XJmY+c4WyHhxlie -----END CERTIFICATE-----Generated at Fri May 16 17:46:20 2025 by rpki-client