$ rpki-client -vvf rpki.apnic.net/member_repository/A9122039/FB70DF6AFF2011EB8160AC51C4F9AE02/N02aLIMvI0S92MpAYxF5P2bUxzU.mft File: N02aLIMvI0S92MpAYxF5P2bUxzU.mft (raw, json) Hash identifier: jJwhhlEqGD69xQAtpda8Dv8KKKiVdwbj5zEy3nW+CCA= Subject key identifier: 31:9E:39:93:95:D4:74:7D:F3:33:45:CD:A3:3D:19:B9:99:5B:45:F6 Authority key identifier: 37:4D:9A:2C:83:2F:23:44:BD:D8:CA:40:63:11:79:3F:66:D4:C7:35 Certificate issuer: /CN=A9122039/serialNumber=374D9A2C832F2344BDD8CA406311793F66D4C735 Certificate serial: 0533 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N02aLIMvI0S92MpAYxF5P2bUxzU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9122039/FB70DF6AFF2011EB8160AC51C4F9AE02/N02aLIMvI0S92MpAYxF5P2bUxzU.mft Manifest number: 0521 Signing time: Thu 24 Apr 2025 23:22:46 +0000 Manifest this update: Thu 24 Apr 2025 23:22:46 +0000 Manifest next update: Thu 01 May 2025 23:22:46 +0000 Files and hashes: 1: N02aLIMvI0S92MpAYxF5P2bUxzU.crl (hash: mEdvCQnKDigFCcnr1tFsAm1DJroDiYqYPtdi2JgBZBc=) 2: AC3162143ED611EFA3523A6BC4F9AE02.roa (hash: zKaqQd3iJgLKWX9/7WECXgXE4p9Cwusvs6IFZGknjWw=) 3: 1FC8419E4B6F11EF98BA6B27C4F9AE02.roa (hash: 5Bhb6kl3vdn8fYxxshtaRagRNNeIbPt2YFCw1ehb0QI=) 4: BC5887A44B6E11EFA3355126C4F9AE02.roa (hash: mIo6Fk+1HKcj+3gplmKqRStq1177bdJCp9mw6ZHAc2E=) 5: 54E77A985F1F11EFA979694FC4F9AE02.roa (hash: d0OGg+KUHm/8K/0LGDoFYn0QqVu4VxbAlNDpkl0DNzM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9122039/FB70DF6AFF2011EB8160AC51C4F9AE02/N02aLIMvI0S92MpAYxF5P2bUxzU.crl rsync://rpki.apnic.net/member_repository/A9122039/FB70DF6AFF2011EB8160AC51C4F9AE02/N02aLIMvI0S92MpAYxF5P2bUxzU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N02aLIMvI0S92MpAYxF5P2bUxzU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 23:22:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1331 (0x533) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9122039, serialNumber=374D9A2C832F2344BDD8CA406311793F66D4C735 Validity Not Before: Apr 24 23:22:46 2025 GMT Not After : May 1 23:22:46 2025 GMT Subject: CN=680ac7c6-c0e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:0c:28:e8:b9:7e:dc:54:03:ba:ab:86:fd:c8: 95:07:f8:c8:66:fa:51:32:f6:eb:79:54:a4:9a:bd: 2f:12:c5:16:29:95:ae:91:af:45:07:9f:7a:f4:2d: 0e:87:d2:a2:c4:23:af:06:1f:3f:43:e5:fe:46:d1: c9:a7:c3:37:6f:24:58:95:96:27:76:9c:a5:6f:3f: 9f:03:d0:46:56:e8:79:ff:6e:1d:7a:45:95:14:b9: 10:e5:84:1b:5a:26:8d:a2:8a:50:ab:3d:9d:36:4b: b1:f8:3e:0b:c5:6f:14:8d:6a:d9:bc:cc:8b:ca:05: 52:0e:77:01:11:64:8f:d7:1e:6e:2f:f5:1c:1b:04: 66:e2:b0:8f:6f:36:db:14:c4:a4:42:b9:ae:1e:c4: 21:19:12:a9:d8:6d:72:d4:f6:28:83:7d:d2:cd:fa: 67:b7:21:2e:40:89:d6:5b:31:c1:de:4f:7a:a0:2e: 61:08:3c:38:91:98:c9:54:a3:68:81:96:f8:a1:69: 70:64:a1:7d:44:a5:4e:0e:a8:e7:e6:c8:35:95:9c: 5c:ca:af:31:14:ae:fc:7a:60:c7:5e:0c:95:94:91: ac:2a:0b:39:22:3b:0b:5e:68:ce:ae:be:f9:8d:29: 57:0d:03:b9:08:81:30:7d:a9:c8:93:ed:a6:47:f9: c8:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:9E:39:93:95:D4:74:7D:F3:33:45:CD:A3:3D:19:B9:99:5B:45:F6 X509v3 Authority Key Identifier: keyid:37:4D:9A:2C:83:2F:23:44:BD:D8:CA:40:63:11:79:3F:66:D4:C7:35 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9122039/FB70DF6AFF2011EB8160AC51C4F9AE02/N02aLIMvI0S92MpAYxF5P2bUxzU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N02aLIMvI0S92MpAYxF5P2bUxzU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9122039/FB70DF6AFF2011EB8160AC51C4F9AE02/N02aLIMvI0S92MpAYxF5P2bUxzU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 74:36:82:2f:86:7a:b7:9f:1a:c1:2f:0d:f5:2a:08:78:46:64: 19:d9:58:97:af:3b:ec:65:6c:cb:75:27:f5:e8:d8:86:3b:c1: 61:5f:6a:ef:eb:70:a7:1a:6e:d3:ed:ad:f0:02:d7:10:bd:f4: 10:2b:4d:cd:f8:5d:36:14:71:d4:11:44:43:a2:11:54:6b:33: 53:67:e4:61:fd:f1:14:b3:ac:6e:03:76:d4:74:fe:53:17:18: 6b:a3:b9:4b:46:a5:1a:f2:c0:41:8d:94:5e:99:79:83:61:e2: 5e:f8:bc:49:d2:2f:69:e9:6b:40:ef:62:bb:30:c3:e5:92:54: b7:e1:eb:ee:7c:4f:56:6d:cc:47:51:2b:c1:48:40:28:e7:32: 6a:6a:13:f1:c7:ea:19:10:55:6a:a3:3b:ff:8a:fd:f3:c1:14: 3b:81:13:9d:f6:36:b7:89:7e:a0:f4:fb:e6:04:21:a3:36:1f: b5:cc:ac:72:0c:55:d7:ea:b7:7d:e4:58:b8:68:2e:8e:ee:e4: fd:e4:83:73:c4:97:0f:5f:59:69:94:c2:7e:83:e0:a5:68:bf: 2a:49:55:04:d3:34:fe:90:00:5f:f9:f4:e5:9c:8a:23:59:40: 0a:c8:23:c4:eb:dc:6d:56:0b:13:31:8d:34:a8:a4:19:5b:ab: 39:99:2e:3c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBTMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjIwMzkxMTAvBgNVBAUTKDM3NEQ5QTJDODMyRjIzNDRCREQ4Q0E0MDYzMTE3OTNG NjZENEM3MzUwHhcNMjUwNDI0MjMyMjQ2WhcNMjUwNTAxMjMyMjQ2WjAYMRYwFAYD VQQDEw02ODBhYzdjNi1jMGU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2wwo6Ll+3FQDuquG/ciVB/jIZvpRMvbreVSkmr0vEsUWKZWuka9FB5969C0O h9KixCOvBh8/Q+X+RtHJp8M3byRYlZYndpylbz+fA9BGVuh5/24dekWVFLkQ5YQb WiaNoopQqz2dNkux+D4LxW8UjWrZvMyLygVSDncBEWSP1x5uL/UcGwRm4rCPbzbb FMSkQrmuHsQhGRKp2G1y1PYog33SzfpntyEuQInWWzHB3k96oC5hCDw4kZjJVKNo gZb4oWlwZKF9RKVODqjn5sg1lZxcyq8xFK78emDHXgyVlJGsKgs5IjsLXmjOrr75 jSlXDQO5CIEwfanIk+2mR/nIhwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDGeOZOV 1HR98zNFzaM9GbmZW0X2MB8GA1UdIwQYMBaAFDdNmiyDLyNEvdjKQGMReT9m1Mc1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMjAzOS9GQjcwREY2QUZG MjAxMUVCODE2MEFDNTFDNEY5QUUwMi9OMDJhTElNdkkwUzkyTXBBWXhGNVAyYlV4 elUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL04wMmFMSU12STBTOTJNcEFZeEY1UDJiVXh6VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MjAzOS9GQjcwREY2QUZGMjAxMUVCODE2MEFDNTFDNEY5QUUwMi9OMDJhTElNdkkw UzkyTXBBWXhGNVAyYlV4elUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB0NoIvhnq3nxrBLw31Kgh4RmQZ2ViXrzvsZWzLdSf16NiGO8FhX2rv 63CnGm7T7a3wAtcQvfQQK03N+F02FHHUEURDohFUazNTZ+Rh/fEUs6xuA3bUdP5T Fxhro7lLRqUa8sBBjZRemXmDYeJe+LxJ0i9p6WtA72K7MMPlklS34evufE9WbcxH USvBSEAo5zJqahPxx+oZEFVqozv/iv3zwRQ7gROd9ja3iX6g9PvmBCGjNh+1zKxy DFXX6rd95Fi4aC6O7uT95INzxJcPX1lplMJ+g+ClaL8qSVUE0zT+kABf+fTlnIoj WUAKyCPE69xtVgsTMY00qKQZW6s5mS48 -----END CERTIFICATE-----Generated at Sat Apr 26 17:19:47 2025 by rpki-client