$ rpki-client -vvf rpki.apnic.net/member_repository/A91F9B3A/7DEAE734F3A311E7B5D09C71C4F9AE02/nhW8ueM67e2saArIyYFuEVkFyiw.mft File: nhW8ueM67e2saArIyYFuEVkFyiw.mft (raw, json) Hash identifier: YTKaPfpalm+YH3QcMwPof2TjFAfmZ8+EXEVYdI+jzfM= Subject key identifier: 70:CE:A9:5B:85:BC:5D:88:C6:9D:25:5D:DC:A9:1F:A4:69:B1:05:24 Authority key identifier: 9E:15:BC:B9:E3:3A:ED:ED:AC:68:0A:C8:C9:81:6E:11:59:05:CA:2C Certificate issuer: /CN=A91F9B3A/serialNumber=9E15BCB9E33AEDEDAC680AC8C9816E115905CA2C Certificate serial: 16D7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nhW8ueM67e2saArIyYFuEVkFyiw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F9B3A/7DEAE734F3A311E7B5D09C71C4F9AE02/nhW8ueM67e2saArIyYFuEVkFyiw.mft Manifest number: 16CA Signing time: Sat 10 May 2025 16:34:32 +0000 Manifest this update: Sat 10 May 2025 16:34:32 +0000 Manifest next update: Sat 17 May 2025 16:34:32 +0000 Files and hashes: 1: nhW8ueM67e2saArIyYFuEVkFyiw.crl (hash: wNicrdMFmN8nQJ2z9Vj0oAVJ97Mnddat7ZPNDDBSeF4=) 2: 7A7A6AC6234311EA90D15227C4F9AE02.roa (hash: inLOYpzfiQRyaW4Jx9DTFdqEkju4HPJ5ZYoO4gNZ1PI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F9B3A/7DEAE734F3A311E7B5D09C71C4F9AE02/nhW8ueM67e2saArIyYFuEVkFyiw.crl rsync://rpki.apnic.net/member_repository/A91F9B3A/7DEAE734F3A311E7B5D09C71C4F9AE02/nhW8ueM67e2saArIyYFuEVkFyiw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nhW8ueM67e2saArIyYFuEVkFyiw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 16:34:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5847 (0x16d7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F9B3A, serialNumber=9E15BCB9E33AEDEDAC680AC8C9816E115905CA2C Validity Not Before: May 10 16:34:32 2025 GMT Not After : May 17 16:34:32 2025 GMT Subject: CN=681f8018-5929 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:69:46:2f:e1:18:a0:5c:b1:9d:5f:c6:27:7e: 5b:81:e9:ec:b9:fc:a9:5a:43:8c:20:c5:fb:2c:96: fa:63:32:b7:fc:83:ad:4e:b9:a8:8c:26:33:7e:8f: 30:59:c5:48:df:59:a1:28:43:72:55:ec:19:e8:2e: 4d:a5:17:78:06:79:a2:94:64:6e:2e:3c:a3:5b:55: 05:7d:17:90:c0:89:ee:a0:04:1f:91:7b:db:c2:cd: 85:9d:94:90:10:13:1b:c1:4e:c2:15:24:51:e8:34: fe:d8:96:f8:a3:9d:d6:25:f2:44:60:6f:ef:6e:cf: 3c:9d:04:5f:b4:88:28:0c:01:26:08:23:d1:aa:31: 85:a6:18:30:28:1b:4e:fd:4b:fa:09:91:14:1e:99: 52:c1:f9:55:83:44:4e:26:e0:20:22:73:ae:36:0e: 24:43:bc:77:ce:bb:74:19:ad:b0:23:72:59:9d:38: c2:16:3e:a5:fb:b0:b2:55:46:85:fd:c5:04:ac:a8: 16:f6:b2:89:fa:97:a4:d9:7d:cf:44:70:47:a2:36: f3:70:f6:11:de:e7:1a:8c:4f:d9:8e:1e:07:d0:91: e7:fe:40:e5:90:f8:bd:27:cb:5d:38:cc:58:6f:e1: 7e:03:23:a4:fd:f8:7e:85:b5:23:e6:27:70:52:da: 58:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:CE:A9:5B:85:BC:5D:88:C6:9D:25:5D:DC:A9:1F:A4:69:B1:05:24 X509v3 Authority Key Identifier: keyid:9E:15:BC:B9:E3:3A:ED:ED:AC:68:0A:C8:C9:81:6E:11:59:05:CA:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F9B3A/7DEAE734F3A311E7B5D09C71C4F9AE02/nhW8ueM67e2saArIyYFuEVkFyiw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nhW8ueM67e2saArIyYFuEVkFyiw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F9B3A/7DEAE734F3A311E7B5D09C71C4F9AE02/nhW8ueM67e2saArIyYFuEVkFyiw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0f:b7:53:8c:7d:7b:a9:19:c7:f4:20:34:5a:c6:de:d0:00:cd: 24:27:18:ba:68:f1:dc:71:2c:9d:55:30:5d:e9:75:60:6f:9b: 76:af:25:44:79:bf:57:c8:79:69:db:f8:e3:d7:4b:0a:37:43: 21:f4:89:65:2c:67:a0:14:92:f7:24:79:7a:79:ba:4a:d6:e5: de:ce:17:9c:fa:0e:36:38:7d:78:60:a8:d5:4b:5b:51:75:47: 27:de:0a:84:a0:8d:11:27:80:82:61:f5:9b:db:fe:c9:a3:06: 26:69:8a:c4:0b:a2:37:a8:f4:ca:1b:eb:67:07:d9:ee:c5:ef: a9:f4:7b:33:58:1c:b7:4d:92:29:45:38:20:9c:0b:53:b5:b2: db:8c:e9:c4:ee:05:fc:b8:7d:ba:ae:27:bb:74:c3:c6:cf:46: 2e:ba:8f:38:3d:df:5d:77:d6:7b:a6:7f:ba:09:30:cc:29:20: db:b4:10:eb:bb:12:57:32:71:f5:67:a3:67:a9:3d:c9:73:13: f1:27:96:f6:2e:43:64:98:0b:5d:4c:0d:6e:62:f0:94:1e:bb: 68:b3:13:76:b2:ea:e3:9b:2f:b8:0c:74:39:78:88:5e:3a:8f: a3:7e:34:1f:6f:98:14:44:28:5f:6d:c5:2c:a3:b1:70:04:25: 85:72:43:36 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFtcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjlCM0ExMTAvBgNVBAUTKDlFMTVCQ0I5RTMzQUVERURBQzY4MEFDOEM5ODE2RTEx NTkwNUNBMkMwHhcNMjUwNTEwMTYzNDMyWhcNMjUwNTE3MTYzNDMyWjAYMRYwFAYD VQQDEw02ODFmODAxOC01OTI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvGlGL+EYoFyxnV/GJ35bgensufypWkOMIMX7LJb6YzK3/IOtTrmojCYzfo8w WcVI31mhKENyVewZ6C5NpRd4BnmilGRuLjyjW1UFfReQwInuoAQfkXvbws2FnZSQ EBMbwU7CFSRR6DT+2Jb4o53WJfJEYG/vbs88nQRftIgoDAEmCCPRqjGFphgwKBtO /Uv6CZEUHplSwflVg0ROJuAgInOuNg4kQ7x3zrt0Ga2wI3JZnTjCFj6l+7CyVUaF /cUErKgW9rKJ+pek2X3PRHBHojbzcPYR3ucajE/Zjh4H0JHn/kDlkPi9J8tdOMxY b+F+AyOk/fh+hbUj5idwUtpYAQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHDOqVuF vF2Ixp0lXdypH6RpsQUkMB8GA1UdIwQYMBaAFJ4VvLnjOu3trGgKyMmBbhFZBcos MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGOUIzQS83REVBRTczNEYz QTMxMUU3QjVEMDlDNzFDNEY5QUUwMi9uaFc4dWVNNjdlMnNhQXJJeVlGdUVWa0Z5 aXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25oVzh1ZU02N2Uyc2FBckl5WUZ1RVZrRnlpdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG OUIzQS83REVBRTczNEYzQTMxMUU3QjVEMDlDNzFDNEY5QUUwMi9uaFc4dWVNNjdl MnNhQXJJeVlGdUVWa0Z5aXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAPt1OMfXupGcf0IDRaxt7QAM0kJxi6aPHccSydVTBd6XVgb5t2ryVE eb9XyHlp2/jj10sKN0Mh9IllLGegFJL3JHl6ebpK1uXezhec+g42OH14YKjVS1tR dUcn3gqEoI0RJ4CCYfWb2/7JowYmaYrEC6I3qPTKG+tnB9nuxe+p9HszWBy3TZIp RTggnAtTtbLbjOnE7gX8uH26rie7dMPGz0Yuuo84Pd9dd9Z7pn+6CTDMKSDbtBDr uxJXMnH1Z6NnqT3JcxPxJ5b2LkNkmAtdTA1uYvCUHrtosxN2surjmy+4DHQ5eIhe Oo+jfjQfb5gURChfbcUso7FwBCWFckM2 -----END CERTIFICATE-----Generated at Mon May 12 04:32:52 2025 by rpki-client