$ rpki-client -vvf rpki.apnic.net/member_repository/A91F8357/14A78F2CDF8A11EF87472B74C4F9AE02/Nh-touCojPKH9M5sw7RGLJEzC_w.mft File: Nh-touCojPKH9M5sw7RGLJEzC_w.mft (raw, json) Hash identifier: UW8BLBEWPDVhfbBtZY25MljrD3E56ysUTH2H3rEgG8U= Subject key identifier: B9:7D:45:DC:FB:66:2E:8A:E4:67:A6:D3:57:71:FD:10:A1:2D:33:8D Authority key identifier: 36:1F:AD:A2:E0:A8:8C:F2:87:F4:CE:6C:C3:B4:46:2C:91:33:0B:FC Certificate issuer: /CN=A91F8357/serialNumber=361FADA2E0A88CF287F4CE6CC3B4462C91330BFC Certificate serial: 42 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Nh-touCojPKH9M5sw7RGLJEzC_w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F8357/14A78F2CDF8A11EF87472B74C4F9AE02/Nh-touCojPKH9M5sw7RGLJEzC_w.mft Manifest number: 3D Signing time: Thu 15 May 2025 06:52:10 +0000 Manifest this update: Thu 15 May 2025 06:52:09 +0000 Manifest next update: Thu 22 May 2025 06:52:09 +0000 Files and hashes: 1: Nh-touCojPKH9M5sw7RGLJEzC_w.crl (hash: vb/IEHhLXhitsqXhaLJ3QKZDYJNlJkbFPJWic9aCdVQ=) 2: 89E51722DF9011EFB2CE892EC4F9AE02.roa (hash: KpVW4cQhj8alBR7jcPtqJ2dq3s1eufaG57nwvRNG5IA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F8357/14A78F2CDF8A11EF87472B74C4F9AE02/Nh-touCojPKH9M5sw7RGLJEzC_w.crl rsync://rpki.apnic.net/member_repository/A91F8357/14A78F2CDF8A11EF87472B74C4F9AE02/Nh-touCojPKH9M5sw7RGLJEzC_w.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Nh-touCojPKH9M5sw7RGLJEzC_w.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 22 May 2025 06:52:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66 (0x42) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F8357, serialNumber=361FADA2E0A88CF287F4CE6CC3B4462C91330BFC Validity Not Before: May 15 06:52:09 2025 GMT Not After : May 22 06:52:09 2025 GMT Subject: CN=68258f19-0d8a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:46:41:0d:8b:aa:73:85:f4:95:bd:5e:f5:e7: f4:c0:17:2b:8f:f7:bc:17:00:9a:82:7a:72:a6:fa: 49:02:5f:f9:84:35:f4:9d:ab:43:9d:4f:3c:01:8b: 84:f4:a6:5f:3c:a2:09:72:60:56:20:ca:72:10:6b: db:a8:43:0d:23:e4:b1:21:b3:d2:49:7d:72:00:08: 3b:03:44:4a:e3:99:42:c7:ef:2b:f1:e2:f7:1a:08: ae:0d:df:88:9d:90:47:4b:3d:7c:4d:3e:3b:3b:ec: d3:25:86:59:c4:77:fb:d0:5c:6d:75:a3:02:7b:49: ef:32:2d:d5:48:6e:ae:f3:93:74:5f:36:6e:d4:fb: 1c:f8:18:3a:15:f3:47:d3:35:91:7e:2a:3f:72:66: e8:da:aa:8d:d4:07:91:2d:44:16:47:cd:65:ac:69: 17:36:88:43:f2:af:75:42:79:26:f2:e1:94:ac:47: 9d:c3:9c:a3:1e:1d:4e:93:cd:c9:cf:56:04:a2:97: 8b:88:4a:c9:88:61:1b:2b:97:16:ea:23:c4:c1:2a: 85:97:24:44:e3:d9:0d:b7:90:e1:0c:0c:0c:e9:27: e7:49:6f:29:8f:97:f1:47:ca:2e:c6:29:29:44:8d: 1c:11:13:f4:9a:18:41:24:8f:07:27:65:bf:12:f5: b3:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:7D:45:DC:FB:66:2E:8A:E4:67:A6:D3:57:71:FD:10:A1:2D:33:8D X509v3 Authority Key Identifier: keyid:36:1F:AD:A2:E0:A8:8C:F2:87:F4:CE:6C:C3:B4:46:2C:91:33:0B:FC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F8357/14A78F2CDF8A11EF87472B74C4F9AE02/Nh-touCojPKH9M5sw7RGLJEzC_w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Nh-touCojPKH9M5sw7RGLJEzC_w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8357/14A78F2CDF8A11EF87472B74C4F9AE02/Nh-touCojPKH9M5sw7RGLJEzC_w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6a:a2:ad:ab:8e:be:82:a0:c8:51:65:6f:0d:fc:c8:89:24:5b: b0:2e:7d:64:b3:f7:d2:61:79:d5:88:29:46:b6:26:2c:e2:90: da:d3:3f:3b:2d:1c:d0:98:a0:5a:ac:87:1c:1c:a2:ef:14:19: 89:40:06:24:b5:ce:21:e2:57:8d:1e:14:d7:47:08:4f:4f:0a: d2:45:48:31:5a:f1:e5:68:f0:a2:e8:f0:36:ef:21:40:a3:aa: e2:dc:75:3f:20:ad:d7:fc:9d:a3:7e:dc:c6:f5:5f:db:9a:8d: a5:b8:c8:16:59:77:11:3a:32:dc:ab:fa:c4:d7:5e:3b:42:7d: 1b:51:80:ee:c2:e8:fc:06:89:36:a5:b8:ee:8d:b7:04:76:82: 15:ba:dc:ef:bf:42:c9:8e:82:ec:85:43:4d:14:4d:09:5f:e0: b2:a7:71:74:b8:be:bb:a4:71:4e:a8:16:be:9e:1a:12:56:b8: 1b:65:5f:38:fe:a6:95:4d:fb:b3:80:e7:56:c6:ab:ae:42:6b: 6e:0e:90:45:e2:b6:fc:84:97:8b:2e:ae:4a:1b:be:dc:b9:cd: 73:b9:04:7d:e5:68:1c:d4:2b:c2:af:07:bf:6e:d1:b3:7c:ff: f9:2a:2c:94:63:12:b3:9a:21:62:76:ea:5f:eb:a0:18:71:67: c7:46:60:4a -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBQjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG ODM1NzExMC8GA1UEBRMoMzYxRkFEQTJFMEE4OENGMjg3RjRDRTZDQzNCNDQ2MkM5 MTMzMEJGQzAeFw0yNTA1MTUwNjUyMDlaFw0yNTA1MjIwNjUyMDlaMBgxFjAUBgNV BAMTDTY4MjU4ZjE5LTBkOGEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC0RkENi6pzhfSVvV715/TAFyuP97wXAJqCenKm+kkCX/mENfSdq0OdTzwBi4T0 pl88oglyYFYgynIQa9uoQw0j5LEhs9JJfXIACDsDRErjmULH7yvx4vcaCK4N34id kEdLPXxNPjs77NMlhlnEd/vQXG11owJ7Se8yLdVIbq7zk3RfNm7U+xz4GDoV80fT NZF+Kj9yZujaqo3UB5EtRBZHzWWsaRc2iEPyr3VCeSby4ZSsR53DnKMeHU6TzcnP VgSil4uISsmIYRsrlxbqI8TBKoWXJETj2Q23kOEMDAzpJ+dJbymPl/FHyi7GKSlE jRwRE/SaGEEkjwcnZb8S9bPnAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUuX1F3Ptm LorkZ6bTV3H9EKEtM40wHwYDVR0jBBgwFoAUNh+touCojPKH9M5sw7RGLJEzC/ww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUY4MzU3LzE0QTc4RjJDREY4 QTExRUY4NzQ3MkI3NEM0RjlBRTAyL05oLXRvdUNvalBLSDlNNXN3N1JHTEpFekNf dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvTmgtdG91Q29qUEtIOU01c3c3UkdMSkV6Q193LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUY4 MzU3LzE0QTc4RjJDREY4QTExRUY4NzQ3MkI3NEM0RjlBRTAyL05oLXRvdUNvalBL SDlNNXN3N1JHTEpFekNfdy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAGqirauOvoKgyFFlbw38yIkkW7AufWSz99JhedWIKUa2JizikNrTPzst HNCYoFqshxwcou8UGYlABiS1ziHiV40eFNdHCE9PCtJFSDFa8eVo8KLo8DbvIUCj quLcdT8grdf8naN+3Mb1X9uajaW4yBZZdxE6Mtyr+sTXXjtCfRtRgO7C6PwGiTal uO6NtwR2ghW63O+/QsmOguyFQ00UTQlf4LKncXS4vrukcU6oFr6eGhJWuBtlXzj+ ppVN+7OA51bGq65Ca24OkEXitvyEl4surkobvty5zXO5BH3laBzUK8KvB79u0bN8 //kqLJRjErOaIWJ26l/roBhxZ8dGYEo= -----END CERTIFICATE-----Generated at Fri May 16 08:43:51 2025 by rpki-client