$ rpki-client -vvf rpki.apnic.net/member_repository/A912BCAC/0152258E82F411EE9ED1F611C4F9AE02/nL4Q18HdRLflkLUHi_xPhs-Nslo.mft File: nL4Q18HdRLflkLUHi_xPhs-Nslo.mft (raw, json) Hash identifier: 90tZU8+SVhyLHRDECFFycmDe6vjyFJUdsavIRabEvTM= Subject key identifier: 8F:FE:FD:36:73:E2:DA:83:AB:D6:25:B2:DC:30:BC:13:79:78:C9:8D Authority key identifier: 9C:BE:10:D7:C1:DD:44:B7:E5:90:B5:07:8B:FC:4F:86:CF:8D:B2:5A Certificate issuer: /CN=A912BCAC/serialNumber=9CBE10D7C1DD44B7E590B5078BFC4F86CF8DB25A Certificate serial: 0118 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nL4Q18HdRLflkLUHi_xPhs-Nslo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912BCAC/0152258E82F411EE9ED1F611C4F9AE02/nL4Q18HdRLflkLUHi_xPhs-Nslo.mft Manifest number: 0114 Signing time: Fri 25 Apr 2025 03:59:15 +0000 Manifest this update: Fri 25 Apr 2025 03:59:15 +0000 Manifest next update: Fri 02 May 2025 03:59:15 +0000 Files and hashes: 1: nL4Q18HdRLflkLUHi_xPhs-Nslo.crl (hash: SXEEuSxagkjESEL0P6TcmlDl4wLsqP9UwZTfUwWLvfo=) 2: 43C5BAA282F411EE99AAAB12C4F9AE02.roa (hash: rYwGjsQBpShXvyi5oxowpgOp3gdk00xJnm3EoG1TD+c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912BCAC/0152258E82F411EE9ED1F611C4F9AE02/nL4Q18HdRLflkLUHi_xPhs-Nslo.crl rsync://rpki.apnic.net/member_repository/A912BCAC/0152258E82F411EE9ED1F611C4F9AE02/nL4Q18HdRLflkLUHi_xPhs-Nslo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nL4Q18HdRLflkLUHi_xPhs-Nslo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 03:59:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 280 (0x118) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912BCAC, serialNumber=9CBE10D7C1DD44B7E590B5078BFC4F86CF8DB25A Validity Not Before: Apr 25 03:59:15 2025 GMT Not After : May 2 03:59:15 2025 GMT Subject: CN=680b0893-34cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:1a:7b:c1:3f:ff:d0:bf:b0:3c:9c:df:a1:61: 62:a6:dc:5f:47:26:8e:3c:1d:a9:94:64:2e:14:db: c8:1a:58:9e:32:3f:ab:2c:69:6b:4a:9c:5c:1d:a8: 95:97:af:0d:c2:33:ad:23:b6:14:42:ee:15:6e:78: 44:eb:a2:d2:b3:67:57:99:a6:b0:fd:db:75:ba:14: 2e:f2:49:45:f6:d0:29:e1:00:55:f4:ab:86:10:fb: 78:6d:01:2d:12:df:2e:62:f0:a6:05:9e:18:d2:2f: ec:f0:be:7d:b5:bf:5e:4d:69:bb:d8:37:15:21:d6: a9:2f:3f:0d:71:e1:58:53:89:27:1e:58:0e:48:9a: 67:57:30:0a:47:d8:a0:12:b6:39:17:ac:29:38:c7: 98:35:d2:ef:2b:7e:18:69:d9:b0:31:e8:2d:3d:48: 6c:66:52:82:4e:f0:1f:00:2a:7c:7a:6a:8d:52:62: 55:54:cd:b6:55:d2:b8:0c:a2:cd:42:c8:57:b5:14: 57:82:07:16:09:51:82:0c:92:3b:9b:ba:2b:21:d5: 30:8f:88:ac:9e:25:a8:5c:30:8a:dd:59:e8:f3:76: fd:55:ca:d5:5c:27:37:9f:18:f7:26:bc:cf:7b:bb: 01:50:fb:be:29:88:01:59:e8:2f:1a:6b:d0:a9:c4: f1:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:FE:FD:36:73:E2:DA:83:AB:D6:25:B2:DC:30:BC:13:79:78:C9:8D X509v3 Authority Key Identifier: keyid:9C:BE:10:D7:C1:DD:44:B7:E5:90:B5:07:8B:FC:4F:86:CF:8D:B2:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912BCAC/0152258E82F411EE9ED1F611C4F9AE02/nL4Q18HdRLflkLUHi_xPhs-Nslo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nL4Q18HdRLflkLUHi_xPhs-Nslo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912BCAC/0152258E82F411EE9ED1F611C4F9AE02/nL4Q18HdRLflkLUHi_xPhs-Nslo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7e:66:8d:b8:f2:89:b1:a7:45:c0:ce:3d:8f:2a:69:e9:7f:8e: 2a:fe:40:99:e4:7b:ec:bf:3b:9d:80:d0:03:9c:e9:b5:78:5b: 85:10:a7:d2:aa:8b:5e:fc:e8:57:6a:1b:3b:85:1e:51:4e:42: 02:e4:a3:c6:17:ec:53:82:9a:93:9b:f0:0f:ed:f9:d4:f1:86: 5c:ef:b7:c6:1c:af:da:89:d5:07:a9:a5:80:55:e3:91:de:58: 09:51:37:b1:40:32:6e:b2:32:87:38:cb:35:6d:c2:ed:51:90: b8:04:a4:9a:db:96:21:8f:c7:66:e2:75:54:ca:e0:39:d5:67: 79:bf:03:cd:95:63:27:bc:36:40:88:9d:85:ca:35:c2:47:68: bb:ef:32:06:0c:45:6c:7b:8e:51:9d:2a:7b:0d:af:dc:52:74: ea:79:84:33:8e:1c:89:40:3c:b9:02:e5:48:be:ab:3e:f4:33: 20:2d:dc:70:74:01:06:12:a7:d2:d6:87:66:f8:ba:d4:3c:e7: 85:cd:17:bf:18:af:b9:37:3f:61:fd:ec:e4:54:16:6f:13:b0: 96:16:31:ac:b2:50:5b:84:4a:46:78:ee:2f:83:a5:ae:c6:02: 7d:e2:84:35:c1:76:ea:76:64:87:cf:e7:44:ec:a3:7e:66:fa: c4:b8:61:99 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICARgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkJDQUMxMTAvBgNVBAUTKDlDQkUxMEQ3QzFERDQ0QjdFNTkwQjUwNzhCRkM0Rjg2 Q0Y4REIyNUEwHhcNMjUwNDI1MDM1OTE1WhcNMjUwNTAyMDM1OTE1WjAYMRYwFAYD VQQDEw02ODBiMDg5My0zNGNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAthp7wT//0L+wPJzfoWFiptxfRyaOPB2plGQuFNvIGlieMj+rLGlrSpxcHaiV l68NwjOtI7YUQu4VbnhE66LSs2dXmaaw/dt1uhQu8klF9tAp4QBV9KuGEPt4bQEt Et8uYvCmBZ4Y0i/s8L59tb9eTWm72DcVIdapLz8NceFYU4knHlgOSJpnVzAKR9ig ErY5F6wpOMeYNdLvK34YadmwMegtPUhsZlKCTvAfACp8emqNUmJVVM22VdK4DKLN QshXtRRXggcWCVGCDJI7m7orIdUwj4isniWoXDCK3Vno83b9VcrVXCc3nxj3JrzP e7sBUPu+KYgBWegvGmvQqcTxEwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI/+/TZz 4tqDq9YlstwwvBN5eMmNMB8GA1UdIwQYMBaAFJy+ENfB3US35ZC1B4v8T4bPjbJa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQkNBQy8wMTUyMjU4RTgy RjQxMUVFOUVEMUY2MTFDNEY5QUUwMi9uTDRRMThIZFJMZmxrTFVIaV94UGhzLU5z bG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25MNFExOEhkUkxmbGtMVUhpX3hQaHMtTnNsby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QkNBQy8wMTUyMjU4RTgyRjQxMUVFOUVEMUY2MTFDNEY5QUUwMi9uTDRRMThIZFJM ZmxrTFVIaV94UGhzLU5zbG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB+Zo248omxp0XAzj2PKmnpf44q/kCZ5HvsvzudgNADnOm1eFuFEKfS qote/OhXahs7hR5RTkIC5KPGF+xTgpqTm/AP7fnU8YZc77fGHK/aidUHqaWAVeOR 3lgJUTexQDJusjKHOMs1bcLtUZC4BKSa25Yhj8dm4nVUyuA51Wd5vwPNlWMnvDZA iJ2FyjXCR2i77zIGDEVse45RnSp7Da/cUnTqeYQzjhyJQDy5AuVIvqs+9DMgLdxw dAEGEqfS1odm+LrUPOeFzRe/GK+5Nz9h/ezkVBZvE7CWFjGsslBbhEpGeO4vg6Wu xgJ94oQ1wXbqdmSHz+dE7KN+ZvrEuGGZ -----END CERTIFICATE-----Generated at Sat Apr 26 13:49:14 2025 by rpki-client