$ rpki-client -vvf rpki.apnic.net/member_repository/A912FA65/935DCFBE662311EBAA11D563C4F9AE02/nPapYQAMl2lHu76x0XPCPpCflUQ.mft File: nPapYQAMl2lHu76x0XPCPpCflUQ.mft (raw, json) Hash identifier: KvVj0Xkmds9n2DMJ/CQ+NXXCy7xv4aXRCoyhvbN19NE= Subject key identifier: A3:88:84:50:45:5A:F4:D4:68:35:B6:B6:F6:31:A7:C8:7D:D2:68:19 Authority key identifier: 9C:F6:A9:61:00:0C:97:69:47:BB:BE:B1:D1:73:C2:3E:90:9F:95:44 Certificate issuer: /CN=A912FA65/serialNumber=9CF6A961000C976947BBBEB1D173C23E909F9544 Certificate serial: 069C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nPapYQAMl2lHu76x0XPCPpCflUQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912FA65/935DCFBE662311EBAA11D563C4F9AE02/nPapYQAMl2lHu76x0XPCPpCflUQ.mft Manifest number: 0697 Signing time: Thu 24 Apr 2025 22:01:59 +0000 Manifest this update: Thu 24 Apr 2025 22:01:58 +0000 Manifest next update: Thu 01 May 2025 22:01:58 +0000 Files and hashes: 1: nPapYQAMl2lHu76x0XPCPpCflUQ.crl (hash: m5DZVCuZH/WgCX/S0hhTmapkI/0bGr3WKvB3+iw3zCU=) 2: E14DB058662411EBADFEB364C4F9AE02.roa (hash: AGJnIVMVxGCqhPBai/J+rGCznBK2uUe21t16AbPm6pM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912FA65/935DCFBE662311EBAA11D563C4F9AE02/nPapYQAMl2lHu76x0XPCPpCflUQ.crl rsync://rpki.apnic.net/member_repository/A912FA65/935DCFBE662311EBAA11D563C4F9AE02/nPapYQAMl2lHu76x0XPCPpCflUQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nPapYQAMl2lHu76x0XPCPpCflUQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 22:01:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1692 (0x69c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912FA65, serialNumber=9CF6A961000C976947BBBEB1D173C23E909F9544 Validity Not Before: Apr 24 22:01:58 2025 GMT Not After : May 1 22:01:58 2025 GMT Subject: CN=680ab4d7-69d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:14:45:c0:b2:f4:e2:14:6d:2f:13:61:28:7a: 7d:70:80:9e:4c:1c:d8:02:32:8f:de:38:32:51:a3: 7f:1a:4f:87:19:4e:d9:1a:8e:4a:57:1d:88:16:d3: 58:5e:46:e0:07:a7:fb:a1:0d:43:61:1b:f8:39:31: 0d:a2:25:e4:0e:5a:ef:7e:de:9c:d9:3c:82:63:ca: dc:4e:91:cb:9a:bd:4a:00:4a:14:3b:fe:34:68:80: d3:a4:84:33:ec:8f:83:9c:0e:06:d7:de:98:3a:c3: 3e:e9:ce:81:b7:87:42:b1:4b:b5:a0:d7:5f:01:e2: 30:cf:c4:0c:85:a2:09:f4:d5:51:6d:6c:00:ed:7d: a4:4f:22:9b:a4:0a:b8:8e:66:45:6a:b7:26:8e:b0: 43:e3:25:e9:de:a8:06:0b:1b:73:57:4a:c0:c8:a5: 32:2f:07:4f:f8:fa:2c:68:75:69:f1:2e:8b:00:95: ae:2f:8f:17:f6:21:ca:ca:68:53:cf:45:dd:d6:8f: bb:ae:da:90:76:be:3c:ad:fb:a0:46:d7:b6:34:55: bc:df:eb:fa:52:fa:ed:9c:4b:7d:ac:b1:41:10:75: 15:79:bc:db:4e:94:39:42:bb:2d:41:40:47:89:df: 54:4c:39:8d:37:49:d9:bc:39:61:f5:e5:6a:96:e1: c9:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:88:84:50:45:5A:F4:D4:68:35:B6:B6:F6:31:A7:C8:7D:D2:68:19 X509v3 Authority Key Identifier: keyid:9C:F6:A9:61:00:0C:97:69:47:BB:BE:B1:D1:73:C2:3E:90:9F:95:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912FA65/935DCFBE662311EBAA11D563C4F9AE02/nPapYQAMl2lHu76x0XPCPpCflUQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nPapYQAMl2lHu76x0XPCPpCflUQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912FA65/935DCFBE662311EBAA11D563C4F9AE02/nPapYQAMl2lHu76x0XPCPpCflUQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a6:58:e8:08:5a:a0:83:1a:b8:99:8d:ef:d7:25:8e:8b:1b:27: 06:57:01:6e:db:21:ec:44:43:f1:4f:6b:27:2e:1f:bd:16:0d: 02:00:cf:91:5c:cd:83:cb:af:a6:56:38:28:56:fa:49:01:79: 14:13:fd:8e:fc:74:26:53:71:08:ad:17:a9:cf:d9:3c:fd:08: 10:a2:c3:16:52:92:6d:4a:0c:5b:45:56:07:d5:b8:67:30:e0: ec:78:b6:40:ae:0a:39:63:2d:06:cd:e4:24:8e:2d:54:d0:53: e8:8a:b3:01:e9:5b:47:5a:24:a4:86:f7:3e:06:1f:ec:88:1a: 24:32:e1:5a:f6:4c:1d:7e:65:74:01:dc:15:f5:a6:03:cb:3f: 8a:48:fa:51:77:bb:76:a8:cc:25:f2:11:e2:83:9d:16:fd:aa: 81:46:af:bc:8e:f3:cb:a0:9d:fd:a0:de:40:9a:02:c7:a8:aa: 9f:36:f2:bb:19:fe:29:58:fb:97:c5:ea:20:da:b2:06:bd:dc: 75:ee:79:85:8a:5c:1a:a4:69:6c:e7:b2:f3:62:5b:9e:89:ba: 3b:3d:84:90:cb:bc:cd:4d:b4:1b:9d:f3:ef:23:23:10:42:df: 96:1a:bd:36:5a:ac:5b:65:59:8f:7b:3f:9d:9d:ea:ee:6a:08: c3:b4:2a:c0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBpwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkZBNjUxMTAvBgNVBAUTKDlDRjZBOTYxMDAwQzk3Njk0N0JCQkVCMUQxNzNDMjNF OTA5Rjk1NDQwHhcNMjUwNDI0MjIwMTU4WhcNMjUwNTAxMjIwMTU4WjAYMRYwFAYD VQQDEw02ODBhYjRkNy02OWQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3xRFwLL04hRtLxNhKHp9cICeTBzYAjKP3jgyUaN/Gk+HGU7ZGo5KVx2IFtNY XkbgB6f7oQ1DYRv4OTENoiXkDlrvft6c2TyCY8rcTpHLmr1KAEoUO/40aIDTpIQz 7I+DnA4G196YOsM+6c6Bt4dCsUu1oNdfAeIwz8QMhaIJ9NVRbWwA7X2kTyKbpAq4 jmZFarcmjrBD4yXp3qgGCxtzV0rAyKUyLwdP+PosaHVp8S6LAJWuL48X9iHKymhT z0Xd1o+7rtqQdr48rfugRte2NFW83+v6UvrtnEt9rLFBEHUVebzbTpQ5QrstQUBH id9UTDmNN0nZvDlh9eVqluHJCwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKOIhFBF WvTUaDW2tvYxp8h90mgZMB8GA1UdIwQYMBaAFJz2qWEADJdpR7u+sdFzwj6Qn5VE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRkE2NS85MzVEQ0ZCRTY2 MjMxMUVCQUExMUQ1NjNDNEY5QUUwMi9uUGFwWVFBTWwybEh1NzZ4MFhQQ1BwQ2Zs VVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25QYXBZUUFNbDJsSHU3NngwWFBDUHBDZmxVUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RkE2NS85MzVEQ0ZCRTY2MjMxMUVCQUExMUQ1NjNDNEY5QUUwMi9uUGFwWVFBTWwy bEh1NzZ4MFhQQ1BwQ2ZsVVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCmWOgIWqCDGriZje/XJY6LGycGVwFu2yHsREPxT2snLh+9Fg0CAM+R XM2Dy6+mVjgoVvpJAXkUE/2O/HQmU3EIrRepz9k8/QgQosMWUpJtSgxbRVYH1bhn MODseLZArgo5Yy0GzeQkji1U0FPoirMB6VtHWiSkhvc+Bh/siBokMuFa9kwdfmV0 AdwV9aYDyz+KSPpRd7t2qMwl8hHig50W/aqBRq+8jvPLoJ39oN5AmgLHqKqfNvK7 Gf4pWPuXxeog2rIGvdx17nmFilwapGls57LzYlueibo7PYSQy7zNTbQbnfPvIyMQ Qt+WGr02WqxbZVmPez+dneruagjDtCrA -----END CERTIFICATE-----Generated at Sat Apr 26 13:04:33 2025 by rpki-client