$ rpki-client -vvf rpki.apnic.net/member_repository/A9122219/82FE89CC3C3711EA873E1460C4F9AE02/0NL0WkbSZ2YBS3hgGaCagzSHPa0.mft File: 0NL0WkbSZ2YBS3hgGaCagzSHPa0.mft (raw, json) Hash identifier: kLsa9ALBWC4stknJcVTN8Ld8LqSZ02GK8t92KMBMay0= Subject key identifier: 3D:41:D6:58:A3:D4:54:6F:3E:01:78:58:09:FC:11:2F:3C:FD:CE:1B Authority key identifier: D0:D2:F4:5A:46:D2:67:66:01:4B:78:60:19:A0:9A:83:34:87:3D:AD Certificate issuer: /CN=A9122219/serialNumber=D0D2F45A46D26766014B786019A09A8334873DAD Certificate serial: 0B21 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0NL0WkbSZ2YBS3hgGaCagzSHPa0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9122219/82FE89CC3C3711EA873E1460C4F9AE02/0NL0WkbSZ2YBS3hgGaCagzSHPa0.mft Manifest number: 0B18 Signing time: Thu 24 Apr 2025 19:07:37 +0000 Manifest this update: Thu 24 Apr 2025 19:07:36 +0000 Manifest next update: Thu 01 May 2025 19:07:36 +0000 Files and hashes: 1: 0NL0WkbSZ2YBS3hgGaCagzSHPa0.crl (hash: mHms9+CdfSjpTbiZrsq3BmFqdbevNp3CeaX8TNJunbA=) 2: CD145D246E4E11EDBE02B065C4F9AE02.roa (hash: zSM1B8wSUB+mHKY/5kPPrFTVt9OokOjyYR65igDrdV4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9122219/82FE89CC3C3711EA873E1460C4F9AE02/0NL0WkbSZ2YBS3hgGaCagzSHPa0.crl rsync://rpki.apnic.net/member_repository/A9122219/82FE89CC3C3711EA873E1460C4F9AE02/0NL0WkbSZ2YBS3hgGaCagzSHPa0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0NL0WkbSZ2YBS3hgGaCagzSHPa0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 19:07:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2849 (0xb21) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9122219, serialNumber=D0D2F45A46D26766014B786019A09A8334873DAD Validity Not Before: Apr 24 19:07:36 2025 GMT Not After : May 1 19:07:36 2025 GMT Subject: CN=680a8bf8-9fe7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:60:1a:bc:b9:fa:88:66:ba:bd:65:6d:b9:78: a4:97:05:56:03:a4:ca:ce:a1:c6:d3:25:25:4d:bc: 1b:2a:c3:84:53:ea:31:72:d1:c2:b8:f6:27:b7:ee: bf:69:70:90:de:8d:d2:a7:14:77:64:5f:0b:df:5a: 72:cd:1a:97:d8:58:c5:33:7e:b4:3f:5c:32:8f:75: f8:5a:fe:6d:b9:2c:51:89:16:3a:bb:5a:90:d4:ba: ae:ce:9b:82:00:f0:17:18:28:79:65:2d:c7:ef:57: 20:2c:87:56:86:4f:5d:0d:f4:fa:49:55:6a:c4:bd: 30:f2:e2:99:59:55:2b:09:02:28:49:10:f9:3e:a9: b0:9c:0b:25:9d:2c:6a:db:a0:f3:3a:db:42:2e:c4: c6:f1:b1:bd:40:3e:b2:e1:23:af:f6:52:dd:3d:4f: 39:41:a6:c2:39:2e:91:57:b6:54:01:ff:8f:d5:9a: cf:a0:dc:d5:07:47:1d:16:cd:68:e6:99:0b:67:7c: 1b:8c:40:2b:79:d9:b2:2b:c6:b8:85:0e:8e:d6:b0: 9b:25:22:b3:e6:3e:64:47:cd:42:69:17:dd:bd:60: cb:e8:96:41:6d:4a:6a:52:8a:61:75:91:f8:ec:29: 64:0f:ca:c9:d9:89:1e:c6:39:05:c7:bb:30:ef:a8: 42:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:41:D6:58:A3:D4:54:6F:3E:01:78:58:09:FC:11:2F:3C:FD:CE:1B X509v3 Authority Key Identifier: keyid:D0:D2:F4:5A:46:D2:67:66:01:4B:78:60:19:A0:9A:83:34:87:3D:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9122219/82FE89CC3C3711EA873E1460C4F9AE02/0NL0WkbSZ2YBS3hgGaCagzSHPa0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0NL0WkbSZ2YBS3hgGaCagzSHPa0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9122219/82FE89CC3C3711EA873E1460C4F9AE02/0NL0WkbSZ2YBS3hgGaCagzSHPa0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1b:d3:92:63:18:a7:56:12:3c:0e:82:f2:c0:78:b2:ca:51:f9: da:24:f0:cb:40:fb:be:bd:00:b7:b6:f0:78:2f:39:88:d0:27: d1:07:f2:fd:a2:b9:dd:eb:26:df:96:41:24:9a:32:40:8d:aa: 31:c2:5c:f6:f0:ac:f7:a4:73:71:63:30:a0:63:ed:18:3e:79: b5:8b:04:cc:5e:6e:c7:38:5a:94:cc:83:01:89:c6:e0:b1:2b: 62:0a:3c:3c:d2:a8:ba:09:ad:b6:c8:21:09:5a:29:63:cd:6b: 06:34:48:23:c8:15:cc:cb:96:2d:ed:cc:16:7a:7d:69:e4:ac: 3d:13:e3:44:1c:1d:2f:3f:87:b6:63:51:e9:d1:cb:7d:b5:9a: 12:ef:7d:23:b3:78:af:31:0e:5e:09:83:d2:af:27:f1:06:de: 80:69:4b:19:80:e3:36:16:eb:55:9c:5e:99:e4:15:ff:06:cd: 88:a7:dd:1f:c8:89:50:ac:67:e8:59:7f:0a:3f:c3:fa:42:f8: cf:bc:57:e1:48:5f:ad:2a:11:9b:c4:4e:07:4d:81:f8:5e:5a: 23:84:e5:9a:58:8a:5e:0e:2e:96:75:70:0b:a0:63:b4:ef:70: 7e:aa:6b:66:3b:6a:f4:d0:05:cf:33:5e:37:25:12:b8:9c:f9: e2:d2:cd:f6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCyEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjIyMTkxMTAvBgNVBAUTKEQwRDJGNDVBNDZEMjY3NjYwMTRCNzg2MDE5QTA5QTgz MzQ4NzNEQUQwHhcNMjUwNDI0MTkwNzM2WhcNMjUwNTAxMTkwNzM2WjAYMRYwFAYD VQQDEw02ODBhOGJmOC05ZmU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmGAavLn6iGa6vWVtuXiklwVWA6TKzqHG0yUlTbwbKsOEU+oxctHCuPYnt+6/ aXCQ3o3SpxR3ZF8L31pyzRqX2FjFM360P1wyj3X4Wv5tuSxRiRY6u1qQ1LquzpuC APAXGCh5ZS3H71cgLIdWhk9dDfT6SVVqxL0w8uKZWVUrCQIoSRD5PqmwnAslnSxq 26DzOttCLsTG8bG9QD6y4SOv9lLdPU85QabCOS6RV7ZUAf+P1ZrPoNzVB0cdFs1o 5pkLZ3wbjEAredmyK8a4hQ6O1rCbJSKz5j5kR81CaRfdvWDL6JZBbUpqUophdZH4 7ClkD8rJ2YkexjkFx7sw76hCewIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD1B1lij 1FRvPgF4WAn8ES88/c4bMB8GA1UdIwQYMBaAFNDS9FpG0mdmAUt4YBmgmoM0hz2t MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMjIxOS84MkZFODlDQzND MzcxMUVBODczRTE0NjBDNEY5QUUwMi8wTkwwV2tiU1oyWUJTM2hnR2FDYWd6U0hQ YTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzBOTDBXa2JTWjJZQlMzaGdHYUNhZ3pTSFBhMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MjIxOS84MkZFODlDQzNDMzcxMUVBODczRTE0NjBDNEY5QUUwMi8wTkwwV2tiU1oy WUJTM2hnR2FDYWd6U0hQYTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAb05JjGKdWEjwOgvLAeLLKUfnaJPDLQPu+vQC3tvB4LzmI0CfRB/L9 ornd6ybflkEkmjJAjaoxwlz28Kz3pHNxYzCgY+0YPnm1iwTMXm7HOFqUzIMBicbg sStiCjw80qi6Ca22yCEJWiljzWsGNEgjyBXMy5Yt7cwWen1p5Kw9E+NEHB0vP4e2 Y1Hp0ct9tZoS730js3ivMQ5eCYPSryfxBt6AaUsZgOM2FutVnF6Z5BX/Bs2Ip90f yIlQrGfoWX8KP8P6QvjPvFfhSF+tKhGbxE4HTYH4XlojhOWaWIpeDi6WdXALoGO0 73B+qmtmO2r00AXPM143JRK4nPni0s32 -----END CERTIFICATE-----Generated at Sat Apr 26 16:57:24 2025 by rpki-client