$ rpki-client -vvf rpki.apnic.net/member_repository/A91F38FD/A5A6F37A61F811EE9F79401AC4F9AE02/nLXKgHLiac4FVaYAsheSDrnhrE8.mft File: nLXKgHLiac4FVaYAsheSDrnhrE8.mft (raw, json) Hash identifier: shW3DcR8qQL733uDuGklS1AW5Otm3AzAj3IJ4Vedjf4= Subject key identifier: BF:48:7F:ED:AC:F4:59:B3:6B:42:E8:1F:AC:5A:BB:2C:BD:29:86:A8 Authority key identifier: 9C:B5:CA:80:72:E2:69:CE:05:55:A6:00:B2:17:92:0E:B9:E1:AC:4F Certificate issuer: /CN=A91F38FD/serialNumber=9CB5CA8072E269CE0555A600B217920EB9E1AC4F Certificate serial: 013E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nLXKgHLiac4FVaYAsheSDrnhrE8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F38FD/A5A6F37A61F811EE9F79401AC4F9AE02/nLXKgHLiac4FVaYAsheSDrnhrE8.mft Manifest number: 0137 Signing time: Thu 15 May 2025 03:55:13 +0000 Manifest this update: Thu 15 May 2025 03:55:12 +0000 Manifest next update: Thu 22 May 2025 03:55:12 +0000 Files and hashes: 1: nLXKgHLiac4FVaYAsheSDrnhrE8.crl (hash: WSeC/GTkFMsT3/zHwE6YmhKob5WtBFUrQW6UuEcKY3I=) 2: 0B421064DD2411EFA5DECA6CC4F9AE02.roa (hash: iPG0hpzDRBKyvVm+6Qkbihdh+5UI+wgroCyFHLS8kTU=) 3: 36020660DD2411EF9F4FB925C4F9AE02.roa (hash: j9Po9H6BwdSd4+LJVOpstqA6CfVsNzASbprlAvb5WDg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F38FD/A5A6F37A61F811EE9F79401AC4F9AE02/nLXKgHLiac4FVaYAsheSDrnhrE8.crl rsync://rpki.apnic.net/member_repository/A91F38FD/A5A6F37A61F811EE9F79401AC4F9AE02/nLXKgHLiac4FVaYAsheSDrnhrE8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nLXKgHLiac4FVaYAsheSDrnhrE8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 22 May 2025 03:55:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 318 (0x13e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F38FD, serialNumber=9CB5CA8072E269CE0555A600B217920EB9E1AC4F Validity Not Before: May 15 03:55:12 2025 GMT Not After : May 22 03:55:12 2025 GMT Subject: CN=682565a0-6a65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:e0:c5:ae:93:66:a8:a5:af:82:c7:39:46:43: ec:c8:c9:4d:cd:6a:b6:18:77:10:d6:8d:7c:07:e8: 9e:d5:6c:ef:bb:9b:4b:b7:25:77:16:64:0b:2a:30: 76:ce:be:40:41:d1:2b:a6:44:e5:19:47:b8:2e:12: 2f:49:8d:e8:97:b1:b7:be:31:45:ad:9d:c1:97:54: d9:36:f0:0e:83:4e:6c:2b:ad:2e:87:43:b7:9f:f7: 60:82:b7:3b:04:fb:d0:b7:2b:82:84:16:79:9f:29: 9d:cf:79:bf:01:02:c2:dd:d4:18:16:77:32:27:d4: 28:1d:ed:23:24:26:00:8c:b8:f2:68:5f:d9:3d:9a: b2:9a:26:ed:2f:93:10:74:ed:9f:bc:cb:84:5a:e9: a5:15:ed:24:f4:e4:2a:c1:51:fa:cf:17:db:08:63: 55:db:48:6e:7e:de:14:f4:e0:bc:50:32:a8:f4:c2: 8f:3a:eb:b8:26:2d:01:89:29:ba:4d:91:2d:49:fc: 25:15:fe:40:bc:4a:cb:fc:e5:05:22:e2:67:ec:cc: 18:3b:d2:de:e4:20:1e:01:be:b6:71:bf:75:ce:32: 35:9e:28:a7:e4:41:e2:5a:a0:4c:e1:dc:db:80:31: af:83:93:f3:39:84:0d:c7:83:35:b0:17:0b:37:7f: 3b:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:48:7F:ED:AC:F4:59:B3:6B:42:E8:1F:AC:5A:BB:2C:BD:29:86:A8 X509v3 Authority Key Identifier: keyid:9C:B5:CA:80:72:E2:69:CE:05:55:A6:00:B2:17:92:0E:B9:E1:AC:4F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F38FD/A5A6F37A61F811EE9F79401AC4F9AE02/nLXKgHLiac4FVaYAsheSDrnhrE8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nLXKgHLiac4FVaYAsheSDrnhrE8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F38FD/A5A6F37A61F811EE9F79401AC4F9AE02/nLXKgHLiac4FVaYAsheSDrnhrE8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4e:9c:6a:86:26:4e:93:2d:04:2c:c9:1a:ce:2f:24:9a:c5:49: da:7e:2a:21:09:34:9b:e3:81:31:52:6a:cc:43:37:0b:05:1f: aa:29:9b:b5:e2:29:82:0f:6e:d8:47:a2:7d:45:8b:af:84:92: e9:fb:d6:79:4a:03:9a:b7:9e:8d:b6:75:63:b0:37:7d:c7:1b: 7b:4b:ba:f2:98:5e:80:6c:29:9c:95:f3:3b:50:dd:59:62:ee: 14:b6:59:e8:93:ee:f0:ac:e4:b8:32:92:5a:c5:23:61:71:55: 09:78:0a:a0:29:07:89:59:d8:d8:92:b7:53:21:63:07:e8:93: ab:3b:4b:78:34:9c:de:fb:e4:ce:87:3a:f6:19:16:ea:33:1d: a5:4f:47:0e:66:16:73:33:62:c5:af:87:32:e0:cc:37:cc:30: 5a:1a:22:2b:31:b1:e1:7d:3f:ea:26:6a:b0:a8:97:a0:9a:43: a4:40:16:4e:23:2a:b1:82:7b:e2:64:38:97:56:3b:b8:91:07: f1:0b:fe:a9:74:2f:bd:77:dc:6e:bf:f5:cc:89:0a:33:16:6b: fa:f6:5c:fa:9f:f5:57:82:ac:14:7a:e3:dd:53:ba:c2:42:47: 38:6f:33:3e:62:19:a4:c3:b7:e9:d1:e1:b3:ed:a2:f6:f7:75: 0b:4b:30:98 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAT4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjM4RkQxMTAvBgNVBAUTKDlDQjVDQTgwNzJFMjY5Q0UwNTU1QTYwMEIyMTc5MjBF QjlFMUFDNEYwHhcNMjUwNTE1MDM1NTEyWhcNMjUwNTIyMDM1NTEyWjAYMRYwFAYD VQQDEw02ODI1NjVhMC02YTY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvODFrpNmqKWvgsc5RkPsyMlNzWq2GHcQ1o18B+ie1Wzvu5tLtyV3FmQLKjB2 zr5AQdErpkTlGUe4LhIvSY3ol7G3vjFFrZ3Bl1TZNvAOg05sK60uh0O3n/dggrc7 BPvQtyuChBZ5nymdz3m/AQLC3dQYFncyJ9QoHe0jJCYAjLjyaF/ZPZqymibtL5MQ dO2fvMuEWumlFe0k9OQqwVH6zxfbCGNV20huft4U9OC8UDKo9MKPOuu4Ji0BiSm6 TZEtSfwlFf5AvErL/OUFIuJn7MwYO9Le5CAeAb62cb91zjI1niin5EHiWqBM4dzb gDGvg5PzOYQNx4M1sBcLN387ZQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL9If+2s 9Fmza0LoH6xauyy9KYaoMB8GA1UdIwQYMBaAFJy1yoBy4mnOBVWmALIXkg654axP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMzhGRC9BNUE2RjM3QTYx RjgxMUVFOUY3OTQwMUFDNEY5QUUwMi9uTFhLZ0hMaWFjNEZWYVlBc2hlU0Rybmhy RTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25MWEtnSExpYWM0RlZhWUFzaGVTRHJuaHJFOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MzhGRC9BNUE2RjM3QTYxRjgxMUVFOUY3OTQwMUFDNEY5QUUwMi9uTFhLZ0hMaWFj NEZWYVlBc2hlU0RybmhyRTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBOnGqGJk6TLQQsyRrOLySaxUnafiohCTSb44ExUmrMQzcLBR+qKZu1 4imCD27YR6J9RYuvhJLp+9Z5SgOat56NtnVjsDd9xxt7S7rymF6AbCmclfM7UN1Z Yu4Utlnok+7wrOS4MpJaxSNhcVUJeAqgKQeJWdjYkrdTIWMH6JOrO0t4NJze++TO hzr2GRbqMx2lT0cOZhZzM2LFr4cy4Mw3zDBaGiIrMbHhfT/qJmqwqJegmkOkQBZO IyqxgnviZDiXVju4kQfxC/6pdC+9d9xuv/XMiQozFmv69lz6n/VXgqwUeuPdU7rC Qkc4bzM+Yhmkw7fp0eGz7aL293ULSzCY -----END CERTIFICATE-----Generated at Thu May 15 09:42:17 2025 by rpki-client