$ rpki-client -vvf rpki.apnic.net/member_repository/A9123918/8EE71486B6C411EFB10EDE58C4F9AE02/ecf8XRpe7wspjgByMmq3Noa9_ng.mft File: ecf8XRpe7wspjgByMmq3Noa9_ng.mft (raw, json) Hash identifier: q0+hWgOo5qjGdTs5jba4Euf+dG3pxS+O3109TSTxBqc= Subject key identifier: C7:1A:27:8F:A7:BC:87:2B:BB:EE:67:9D:EA:B1:AE:4E:50:AB:0B:BB Authority key identifier: 79:C7:FC:5D:1A:5E:EF:0B:29:8E:00:72:32:6A:B7:36:86:BD:FE:78 Certificate issuer: /CN=A9123918/serialNumber=79C7FC5D1A5EEF0B298E0072326AB73686BDFE78 Certificate serial: 4C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ecf8XRpe7wspjgByMmq3Noa9_ng.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9123918/8EE71486B6C411EFB10EDE58C4F9AE02/ecf8XRpe7wspjgByMmq3Noa9_ng.mft Manifest number: 4A Signing time: Fri 25 Apr 2025 06:23:25 +0000 Manifest this update: Fri 25 Apr 2025 06:23:25 +0000 Manifest next update: Fri 02 May 2025 06:23:25 +0000 Files and hashes: 1: ecf8XRpe7wspjgByMmq3Noa9_ng.crl (hash: LpBZo2ZG8lVKc/LPo2vqTARypQODCEJZ+vyf42y6pUw=) 2: AD3C9B54BE2611EFA4133323C4F9AE02.roa (hash: 2/xqAVW2RjqNg3GXYQ9uSs72OTWvi6aXWMtqLBm8vdk=) 3: 345F7BDCF80C11EF831DA737C4F9AE02.roa (hash: dqTwEXk6/WsKatxBnEyYDrfeHsARE7OU6TqF9rX2NCc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9123918/8EE71486B6C411EFB10EDE58C4F9AE02/ecf8XRpe7wspjgByMmq3Noa9_ng.crl rsync://rpki.apnic.net/member_repository/A9123918/8EE71486B6C411EFB10EDE58C4F9AE02/ecf8XRpe7wspjgByMmq3Noa9_ng.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ecf8XRpe7wspjgByMmq3Noa9_ng.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 06:23:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76 (0x4c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9123918, serialNumber=79C7FC5D1A5EEF0B298E0072326AB73686BDFE78 Validity Not Before: Apr 25 06:23:25 2025 GMT Not After : May 2 06:23:25 2025 GMT Subject: CN=680b2a5d-3c05 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:fe:80:40:8a:ef:27:16:97:88:cb:cd:18:e8: 2c:91:25:ac:a6:f2:60:b4:ae:06:28:bf:8a:10:7e: 86:3b:04:02:2c:e4:fe:dd:fa:c3:1d:2d:36:05:51: f4:25:9c:a3:fb:07:22:e1:57:94:68:25:6c:0e:a2: 9d:9e:25:c2:21:a7:b6:36:19:08:73:8f:85:f6:a7: 61:7c:b8:5e:81:b2:19:17:ca:09:a4:05:0f:c3:15: 3b:18:80:98:94:12:24:0c:ce:f2:c9:71:b9:ee:70: 6c:ac:26:10:2e:dc:9f:2c:c3:80:56:1a:a0:5a:69: 00:f0:3e:36:96:af:c9:ce:77:3c:ef:9a:16:89:0c: ae:89:f8:6a:77:e6:1f:ab:90:6e:14:64:26:16:77: 0f:26:f0:78:83:06:6f:fe:d8:f6:d2:99:93:86:03: d6:0e:8f:f2:17:d6:09:e2:9f:91:f7:48:9d:9f:90: e2:eb:1a:03:d6:03:03:e5:3d:32:9c:58:72:24:a7: 67:93:11:ac:33:56:19:41:18:aa:ae:7a:8e:25:49: c2:14:9f:10:98:2a:a2:33:ef:40:a5:c5:b7:a3:c4: 53:e3:a3:81:15:99:36:2c:a7:72:36:f6:02:0d:49: dd:97:80:0b:c2:c4:f2:ee:78:8a:f7:65:85:48:17: 14:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:1A:27:8F:A7:BC:87:2B:BB:EE:67:9D:EA:B1:AE:4E:50:AB:0B:BB X509v3 Authority Key Identifier: keyid:79:C7:FC:5D:1A:5E:EF:0B:29:8E:00:72:32:6A:B7:36:86:BD:FE:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9123918/8EE71486B6C411EFB10EDE58C4F9AE02/ecf8XRpe7wspjgByMmq3Noa9_ng.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ecf8XRpe7wspjgByMmq3Noa9_ng.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9123918/8EE71486B6C411EFB10EDE58C4F9AE02/ecf8XRpe7wspjgByMmq3Noa9_ng.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8c:de:95:2a:cf:f2:57:fa:51:93:17:75:bc:89:5a:f7:6b:85: e5:54:b3:aa:09:24:3e:85:49:d3:85:0a:14:10:ca:fa:1e:db: 96:6c:69:77:f8:71:21:60:0d:d8:8e:f0:17:bf:dd:f2:3c:45: 89:41:1f:a9:07:03:66:9c:e9:77:e0:a0:18:a3:3f:e7:bf:bb: c9:12:0b:d3:b2:8b:02:f0:b8:9a:da:34:39:63:95:4f:c0:db: af:19:d9:7e:9d:d9:88:98:da:ea:6a:7e:6b:8d:94:70:ed:db: ec:e5:12:b2:7a:19:5e:a8:37:95:65:c5:4a:32:15:02:fb:55: a7:c8:95:bd:f7:00:7d:60:2d:49:4c:ef:80:a5:82:58:46:11: ae:b3:d9:aa:ca:2e:35:d5:e7:06:33:a4:76:97:b8:c9:ae:4a: 54:ef:df:f4:25:83:30:db:ba:19:14:16:2e:30:fc:71:e9:64: a7:98:b3:c2:39:04:d6:be:fb:2f:e6:26:22:f9:0e:bd:f8:62: ee:7c:5c:51:b0:21:41:1c:b8:20:55:b4:b1:ac:0e:03:37:59: 5e:b9:ce:97:3f:81:78:55:99:40:c7:56:81:1b:64:d3:dd:da: bf:d5:03:0d:c3:05:9e:b5:e0:62:36:10:4f:07:64:89:6d:ee: 0a:0e:9c:9e -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBTDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy MzkxODExMC8GA1UEBRMoNzlDN0ZDNUQxQTVFRUYwQjI5OEUwMDcyMzI2QUI3MzY4 NkJERkU3ODAeFw0yNTA0MjUwNjIzMjVaFw0yNTA1MDIwNjIzMjVaMBgxFjAUBgNV BAMTDTY4MGIyYTVkLTNjMDUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDb/oBAiu8nFpeIy80Y6CyRJaym8mC0rgYov4oQfoY7BAIs5P7d+sMdLTYFUfQl nKP7ByLhV5RoJWwOop2eJcIhp7Y2GQhzj4X2p2F8uF6BshkXygmkBQ/DFTsYgJiU EiQMzvLJcbnucGysJhAu3J8sw4BWGqBaaQDwPjaWr8nOdzzvmhaJDK6J+Gp35h+r kG4UZCYWdw8m8HiDBm/+2PbSmZOGA9YOj/IX1gnin5H3SJ2fkOLrGgPWAwPlPTKc WHIkp2eTEawzVhlBGKqueo4lScIUnxCYKqIz70ClxbejxFPjo4EVmTYsp3I29gIN Sd2XgAvCxPLueIr3ZYVIFxRVAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUxxonj6e8 hyu77med6rGuTlCrC7swHwYDVR0jBBgwFoAUecf8XRpe7wspjgByMmq3Noa9/ngw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTIzOTE4LzhFRTcxNDg2QjZD NDExRUZCMTBFREU1OEM0RjlBRTAyL2VjZjhYUnBlN3dzcGpnQnlNbXEzTm9hOV9u Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvZWNmOFhScGU3d3NwamdCeU1tcTNOb2E5X25nLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTIz OTE4LzhFRTcxNDg2QjZDNDExRUZCMTBFREU1OEM0RjlBRTAyL2VjZjhYUnBlN3dz cGpnQnlNbXEzTm9hOV9uZy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAIzelSrP8lf6UZMXdbyJWvdrheVUs6oJJD6FSdOFChQQyvoe25ZsaXf4 cSFgDdiO8Be/3fI8RYlBH6kHA2ac6XfgoBijP+e/u8kSC9OyiwLwuJraNDljlU/A 268Z2X6d2YiY2upqfmuNlHDt2+zlErJ6GV6oN5VlxUoyFQL7VafIlb33AH1gLUlM 74ClglhGEa6z2arKLjXV5wYzpHaXuMmuSlTv3/QlgzDbuhkUFi4w/HHpZKeYs8I5 BNa++y/mJiL5Dr34Yu58XFGwIUEcuCBVtLGsDgM3WV65zpc/gXhVmUDHVoEbZNPd 2r/VAw3DBZ614GI2EE8HZIlt7goOnJ4= -----END CERTIFICATE-----Generated at Sat Apr 26 04:27:25 2025 by rpki-client