$ rpki-client -vvf rpki.apnic.net/member_repository/A9118A69/C62011D60CE811EF9EFDA31BC4F9AE02/NQcxtmBE00o9LadYm9gzHRRf5Jg.mft File: NQcxtmBE00o9LadYm9gzHRRf5Jg.mft (raw, json) Hash identifier: JH32UduHXlS4gkhL03CqbgrjS7PErGwVtVXumBvuQhY= Subject key identifier: AB:7A:23:34:5A:3F:5C:7F:7A:50:49:C0:45:88:54:5A:D9:DC:CC:B7 Authority key identifier: 35:07:31:B6:60:44:D3:4A:3D:2D:A7:58:9B:D8:33:1D:14:5F:E4:98 Certificate issuer: /CN=A9118A69/serialNumber=350731B66044D34A3D2DA7589BD8331D145FE498 Certificate serial: B7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NQcxtmBE00o9LadYm9gzHRRf5Jg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9118A69/C62011D60CE811EF9EFDA31BC4F9AE02/NQcxtmBE00o9LadYm9gzHRRf5Jg.mft Manifest number: B5 Signing time: Fri 25 Apr 2025 04:59:28 +0000 Manifest this update: Fri 25 Apr 2025 04:59:28 +0000 Manifest next update: Fri 02 May 2025 04:59:28 +0000 Files and hashes: 1: NQcxtmBE00o9LadYm9gzHRRf5Jg.crl (hash: DTNUJu5qPO8Ukg2DGX/SpCat0yTpMzP2uGWXa9CJadA=) 2: 7036FFF00E9611EF8B4CB827C4F9AE02.roa (hash: Bv5PsAPlsXup053SqORErIKD7VS3IvYR+Xy+2uhjxJk=) 3: 6FC4A52C0E9611EF8B4CB827C4F9AE02.roa (hash: nHcMgveoHAwIifxJIS7PevVsDeef3KJmiIvXrtXar+Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9118A69/C62011D60CE811EF9EFDA31BC4F9AE02/NQcxtmBE00o9LadYm9gzHRRf5Jg.crl rsync://rpki.apnic.net/member_repository/A9118A69/C62011D60CE811EF9EFDA31BC4F9AE02/NQcxtmBE00o9LadYm9gzHRRf5Jg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NQcxtmBE00o9LadYm9gzHRRf5Jg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 04:59:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 183 (0xb7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9118A69, serialNumber=350731B66044D34A3D2DA7589BD8331D145FE498 Validity Not Before: Apr 25 04:59:28 2025 GMT Not After : May 2 04:59:28 2025 GMT Subject: CN=680b16b0-fa78 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:43:c9:1e:af:77:09:db:c3:8b:aa:3d:25:37: c7:9a:36:38:19:4b:16:55:64:fd:05:d8:bb:f1:0f: 9a:0b:f5:87:62:91:e6:06:26:45:d2:f3:e5:5d:25: 8d:07:31:2b:f8:29:e2:28:76:9e:a4:4c:cd:ff:a7: 58:9e:5d:80:49:51:64:51:e8:60:e7:ff:28:60:2e: b2:9d:5b:2c:8e:14:b1:45:c5:66:5d:8e:9a:bc:11: 35:27:d5:3f:58:c6:b4:37:d6:4b:27:da:8d:a7:2e: 82:91:8d:c8:a1:a6:c1:91:16:14:7f:40:52:56:5d: b0:e1:f3:3e:fd:82:f8:a3:3c:2a:cc:25:a7:b1:42: 98:bb:c2:de:cf:4a:44:32:20:01:33:10:cd:4e:05: a3:ed:ad:b2:a4:a0:08:69:3f:c3:ba:29:d9:f3:ca: ce:2b:1f:df:66:45:56:28:6d:11:3c:e1:15:59:bd: 2c:bf:0b:67:92:5b:99:c3:3d:00:86:48:16:99:46: 5f:20:28:c9:c7:36:9e:14:ed:f4:11:a6:d4:dc:5a: 4b:95:7c:29:d0:ec:92:7a:43:ec:ff:a8:ae:8c:9e: 72:ca:00:97:cf:eb:70:75:04:1a:ac:2d:14:03:e5: 8d:92:dc:dd:1a:55:e6:65:89:e1:64:c7:cc:5d:14: f2:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:7A:23:34:5A:3F:5C:7F:7A:50:49:C0:45:88:54:5A:D9:DC:CC:B7 X509v3 Authority Key Identifier: keyid:35:07:31:B6:60:44:D3:4A:3D:2D:A7:58:9B:D8:33:1D:14:5F:E4:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9118A69/C62011D60CE811EF9EFDA31BC4F9AE02/NQcxtmBE00o9LadYm9gzHRRf5Jg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NQcxtmBE00o9LadYm9gzHRRf5Jg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9118A69/C62011D60CE811EF9EFDA31BC4F9AE02/NQcxtmBE00o9LadYm9gzHRRf5Jg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 20:a9:b2:e1:cc:21:4f:70:22:c9:ea:74:12:40:51:11:84:e0: 83:85:17:20:a4:73:31:49:37:d9:82:ec:2c:ee:d7:1e:bd:35: 50:cd:68:b9:96:9e:0b:15:8b:43:56:29:a0:93:5e:80:60:13: 2f:bc:8b:d5:27:95:69:94:a6:b5:e0:1d:16:a1:17:b6:7a:5a: 5b:46:45:2e:94:8d:07:b3:9c:68:3a:98:69:d9:19:9c:67:39: 4d:bb:68:9c:fc:a0:f3:9c:a1:c1:e2:78:d7:dd:17:7d:24:99: d3:9d:0a:1e:85:b8:99:4f:78:22:e3:34:96:2f:6c:4f:f7:1e: 7b:85:d9:1e:d5:44:a0:94:5f:3d:b7:e0:4a:13:76:bb:e4:f7: 30:ac:06:4c:aa:bd:1c:be:8b:c4:fd:2a:a1:bc:c5:52:3b:99: 08:ce:e6:59:13:a2:71:18:36:54:2c:40:e6:00:9d:e4:28:1b: 73:7a:cf:a2:1f:e3:52:a4:c8:a3:64:65:7a:7d:16:08:17:ed: 02:69:6c:22:f8:39:cc:2b:bb:d1:50:62:62:65:56:e4:e9:8d: fd:5b:74:de:b2:ef:fa:4f:2d:f0:e7:50:55:de:61:34:c5:31: 73:a8:53:2c:dd:0b:0e:a0:64:eb:ef:74:65:b4:86:2e:70:0c: 9b:93:9c:33 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MThBNjkxMTAvBgNVBAUTKDM1MDczMUI2NjA0NEQzNEEzRDJEQTc1ODlCRDgzMzFE MTQ1RkU0OTgwHhcNMjUwNDI1MDQ1OTI4WhcNMjUwNTAyMDQ1OTI4WjAYMRYwFAYD VQQDEw02ODBiMTZiMC1mYTc4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp0PJHq93CdvDi6o9JTfHmjY4GUsWVWT9Bdi78Q+aC/WHYpHmBiZF0vPlXSWN BzEr+CniKHaepEzN/6dYnl2ASVFkUehg5/8oYC6ynVssjhSxRcVmXY6avBE1J9U/ WMa0N9ZLJ9qNpy6CkY3IoabBkRYUf0BSVl2w4fM+/YL4ozwqzCWnsUKYu8Lez0pE MiABMxDNTgWj7a2ypKAIaT/DuinZ88rOKx/fZkVWKG0RPOEVWb0svwtnkluZwz0A hkgWmUZfICjJxzaeFO30EabU3FpLlXwp0OySekPs/6iujJ5yygCXz+twdQQarC0U A+WNktzdGlXmZYnhZMfMXRTyawIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKt6IzRa P1x/elBJwEWIVFrZ3My3MB8GA1UdIwQYMBaAFDUHMbZgRNNKPS2nWJvYMx0UX+SY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOEE2OS9DNjIwMTFENjBD RTgxMUVGOUVGREEzMUJDNEY5QUUwMi9OUWN4dG1CRTAwbzlMYWRZbTlnekhSUmY1 SmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05RY3h0bUJFMDBvOUxhZFltOWd6SFJSZjVKZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx OEE2OS9DNjIwMTFENjBDRTgxMUVGOUVGREEzMUJDNEY5QUUwMi9OUWN4dG1CRTAw bzlMYWRZbTlnekhSUmY1SmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAgqbLhzCFPcCLJ6nQSQFERhOCDhRcgpHMxSTfZguws7tcevTVQzWi5 lp4LFYtDVimgk16AYBMvvIvVJ5VplKa14B0WoRe2elpbRkUulI0Hs5xoOphp2Rmc ZzlNu2ic/KDznKHB4njX3Rd9JJnTnQoehbiZT3gi4zSWL2xP9x57hdke1USglF89 t+BKE3a75PcwrAZMqr0cvovE/SqhvMVSO5kIzuZZE6JxGDZULEDmAJ3kKBtzes+i H+NSpMijZGV6fRYIF+0CaWwi+DnMK7vRUGJiZVbk6Y39W3Tesu/6Ty3w51BV3mE0 xTFzqFMs3QsOoGTr73RltIYucAybk5wz -----END CERTIFICATE-----Generated at Sat Apr 26 18:21:05 2025 by rpki-client