$ rpki-client -vvf rpki.apnic.net/member_repository/A9118FFA/0586068A2B7C11EF89E84144C4F9AE02/n-iB2L0yrRWre-e07E91IhJUbHY.mft File: n-iB2L0yrRWre-e07E91IhJUbHY.mft (raw, json) Hash identifier: c3dk+3jouQaVqrATXE6tADv6uIVlkqJ7j4Q5/9PHT5U= Subject key identifier: 9C:0D:53:6E:1B:2E:E9:15:B1:AF:51:6A:90:DA:2B:91:84:36:E8:16 Authority key identifier: 9F:E8:81:D8:BD:32:AD:15:AB:7B:E7:B4:EC:4F:75:22:12:54:6C:76 Certificate issuer: /CN=A9118FFA/serialNumber=9FE881D8BD32AD15AB7BE7B4EC4F752212546C76 Certificate serial: A9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n-iB2L0yrRWre-e07E91IhJUbHY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9118FFA/0586068A2B7C11EF89E84144C4F9AE02/n-iB2L0yrRWre-e07E91IhJUbHY.mft Manifest number: A5 Signing time: Fri 25 Apr 2025 05:12:01 +0000 Manifest this update: Fri 25 Apr 2025 05:12:00 +0000 Manifest next update: Fri 02 May 2025 05:12:00 +0000 Files and hashes: 1: n-iB2L0yrRWre-e07E91IhJUbHY.crl (hash: uRWeQyF1n6NgN7nbQmRYw4pE3oEngJa6sfRGYOKbBrs=) 2: 2C6BA5E82EB511EFBCC65925C4F9AE02.roa (hash: 9SfUJfJUPtuZxpNRWiY6Pmy+Ome8ao9OIJR1s6GbHE8=) 3: E80A0D282B9D11EFB61F1148C4F9AE02.roa (hash: F0SsWsfme5DR54sccnOQA0ilylY47//E27uoZDHPm3k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9118FFA/0586068A2B7C11EF89E84144C4F9AE02/n-iB2L0yrRWre-e07E91IhJUbHY.crl rsync://rpki.apnic.net/member_repository/A9118FFA/0586068A2B7C11EF89E84144C4F9AE02/n-iB2L0yrRWre-e07E91IhJUbHY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n-iB2L0yrRWre-e07E91IhJUbHY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 05:12:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 169 (0xa9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9118FFA, serialNumber=9FE881D8BD32AD15AB7BE7B4EC4F752212546C76 Validity Not Before: Apr 25 05:12:00 2025 GMT Not After : May 2 05:12:00 2025 GMT Subject: CN=680b19a0-6bc0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:93:6f:9f:59:8f:84:15:b8:70:32:8e:87:36: af:43:97:f3:0f:64:c2:8f:62:f2:27:22:3c:20:48: 80:41:95:c9:6e:12:1b:23:e8:9a:4b:b2:76:07:53: 2a:f5:cf:66:7f:3b:da:11:19:4d:6d:82:24:c6:f7: 9b:dd:ba:bb:02:58:cb:be:4e:08:a6:a2:83:dc:a1: cb:f8:23:b1:fc:f6:a0:a7:3a:3e:84:f7:e0:b7:2f: 4f:9e:bd:05:13:dd:25:ce:67:85:5a:12:26:13:a6: 9b:61:87:bd:ee:c4:ac:5b:87:bd:2f:9d:4c:99:8e: e6:d9:54:1e:ec:5d:a1:9a:b4:23:95:bd:02:d2:2c: 51:77:36:7c:87:0d:da:39:7d:af:f6:53:a3:6c:f6: cd:b8:85:80:83:ac:6a:f9:76:4e:5f:2a:e8:69:20: 82:9f:a0:56:22:29:59:35:a4:83:af:79:56:43:e1: f2:59:2e:9f:af:a6:a4:84:bc:cc:97:98:37:5a:42: a3:cf:42:3e:05:27:d7:da:78:d3:00:3b:d7:00:60: f8:5b:a8:c2:28:59:7c:b4:d9:97:97:53:f2:e9:70: 7e:41:34:6d:d8:bc:3e:b7:23:b7:90:28:1f:5d:4f: 81:32:6e:d0:2c:cd:13:74:77:4b:f8:d6:5b:a4:d5: d7:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:0D:53:6E:1B:2E:E9:15:B1:AF:51:6A:90:DA:2B:91:84:36:E8:16 X509v3 Authority Key Identifier: keyid:9F:E8:81:D8:BD:32:AD:15:AB:7B:E7:B4:EC:4F:75:22:12:54:6C:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9118FFA/0586068A2B7C11EF89E84144C4F9AE02/n-iB2L0yrRWre-e07E91IhJUbHY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n-iB2L0yrRWre-e07E91IhJUbHY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9118FFA/0586068A2B7C11EF89E84144C4F9AE02/n-iB2L0yrRWre-e07E91IhJUbHY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7c:4c:ad:88:ca:e9:4d:c3:ae:4d:1e:22:d6:94:64:0a:23:1d: 09:6c:9a:46:37:e5:03:34:ce:46:41:21:69:5f:5f:0d:5b:ab: 31:3f:a6:c9:35:8b:41:7e:a7:de:fa:a9:aa:cf:8f:4f:0b:73: 18:0d:a4:f1:6d:59:11:d6:fd:dc:ca:02:44:e4:c7:f0:98:01: 27:73:a5:50:4e:9f:91:af:f7:5b:0c:9e:2f:b2:4d:2c:2a:58: 65:ae:87:39:39:3c:6f:95:83:2c:cb:90:97:d8:63:af:6a:98: 42:e6:7a:da:07:62:15:c6:8a:04:c6:f4:54:1a:a9:cf:c6:d8: f1:90:66:01:99:22:ea:ed:54:72:77:03:49:94:b3:e4:7c:ad: 76:2f:8d:9f:d2:3d:47:cf:a2:45:f5:f6:8f:77:17:19:f3:59: 8a:cf:13:ba:8c:fe:1f:8f:bc:ab:54:5b:1f:7d:e6:f4:75:b7: 54:ee:b3:ab:da:8a:b9:17:c5:45:ae:f3:6f:e7:fe:73:17:c5: e0:30:e2:72:90:6b:5c:e9:78:4b:d8:97:19:34:48:e5:68:70: 2a:b4:a8:ad:34:f1:0d:00:18:59:31:c4:bd:75:7c:41:3a:04: ee:2c:ea:dc:1c:11:5a:c2:47:66:87:64:f2:22:0b:18:8c:04: 0c:cb:13:46 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MThGRkExMTAvBgNVBAUTKDlGRTg4MUQ4QkQzMkFEMTVBQjdCRTdCNEVDNEY3NTIy MTI1NDZDNzYwHhcNMjUwNDI1MDUxMjAwWhcNMjUwNTAyMDUxMjAwWjAYMRYwFAYD VQQDEw02ODBiMTlhMC02YmMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9ZNvn1mPhBW4cDKOhzavQ5fzD2TCj2LyJyI8IEiAQZXJbhIbI+iaS7J2B1Mq 9c9mfzvaERlNbYIkxveb3bq7AljLvk4IpqKD3KHL+COx/Pagpzo+hPfgty9Pnr0F E90lzmeFWhImE6abYYe97sSsW4e9L51MmY7m2VQe7F2hmrQjlb0C0ixRdzZ8hw3a OX2v9lOjbPbNuIWAg6xq+XZOXyroaSCCn6BWIilZNaSDr3lWQ+HyWS6fr6akhLzM l5g3WkKjz0I+BSfX2njTADvXAGD4W6jCKFl8tNmXl1Py6XB+QTRt2Lw+tyO3kCgf XU+BMm7QLM0TdHdL+NZbpNXXewIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJwNU24b LukVsa9RapDaK5GENugWMB8GA1UdIwQYMBaAFJ/ogdi9Mq0Vq3vntOxPdSISVGx2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOEZGQS8wNTg2MDY4QTJC N0MxMUVGODlFODQxNDRDNEY5QUUwMi9uLWlCMkwweXJSV3JlLWUwN0U5MUloSlVi SFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL24taUIyTDB5clJXcmUtZTA3RTkxSWhKVWJIWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx OEZGQS8wNTg2MDY4QTJCN0MxMUVGODlFODQxNDRDNEY5QUUwMi9uLWlCMkwweXJS V3JlLWUwN0U5MUloSlViSFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB8TK2IyulNw65NHiLWlGQKIx0JbJpGN+UDNM5GQSFpX18NW6sxP6bJ NYtBfqfe+qmqz49PC3MYDaTxbVkR1v3cygJE5MfwmAEnc6VQTp+Rr/dbDJ4vsk0s Klhlroc5OTxvlYMsy5CX2GOvaphC5nraB2IVxooExvRUGqnPxtjxkGYBmSLq7VRy dwNJlLPkfK12L42f0j1Hz6JF9faPdxcZ81mKzxO6jP4fj7yrVFsffeb0dbdU7rOr 2oq5F8VFrvNv5/5zF8XgMOJykGtc6XhL2JcZNEjlaHAqtKitNPENABhZMcS9dXxB OgTuLOrcHBFawkdmh2TyIgsYjAQMyxNG -----END CERTIFICATE-----Generated at Sat Apr 26 04:35:03 2025 by rpki-client