$ rpki-client -vvf rpki.apnic.net/member_repository/A912FAB9/938A70E495CD11E6BF4A8232C4F9AE02/NJwJ6ZyoBuM1kVc1z5cqG_hkpsM.mft File: NJwJ6ZyoBuM1kVc1z5cqG_hkpsM.mft (raw, json) Hash identifier: uxYUhrFxdrbcjFw3BHg8vrjvCF7lyAEexaOQoMczNm8= Subject key identifier: 07:A9:D9:FA:C3:6B:95:4B:66:3B:13:3B:1A:19:02:BD:86:78:D4:72 Authority key identifier: 34:9C:09:E9:9C:A8:06:E3:35:91:57:35:CF:97:2A:1B:F8:64:A6:C3 Certificate issuer: /CN=A912FAB9/serialNumber=349C09E99CA806E335915735CF972A1BF864A6C3 Certificate serial: 1DBF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NJwJ6ZyoBuM1kVc1z5cqG_hkpsM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912FAB9/938A70E495CD11E6BF4A8232C4F9AE02/NJwJ6ZyoBuM1kVc1z5cqG_hkpsM.mft Manifest number: 1DB2 Signing time: Thu 24 Apr 2025 16:07:55 +0000 Manifest this update: Thu 24 Apr 2025 16:07:55 +0000 Manifest next update: Thu 01 May 2025 16:07:55 +0000 Files and hashes: 1: NJwJ6ZyoBuM1kVc1z5cqG_hkpsM.crl (hash: pwvhX2j2+v7mpYGQmHCVCLQ+Rp/aJlyyzrlLpBgLGH4=) 2: AE5C97A8AFB711E79FACFF11C4F9AE02.roa (hash: oZxIGF3tZxpF5yy16W7DfVBV9Qm+nbX1ntFwqXaNbaw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912FAB9/938A70E495CD11E6BF4A8232C4F9AE02/NJwJ6ZyoBuM1kVc1z5cqG_hkpsM.crl rsync://rpki.apnic.net/member_repository/A912FAB9/938A70E495CD11E6BF4A8232C4F9AE02/NJwJ6ZyoBuM1kVc1z5cqG_hkpsM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NJwJ6ZyoBuM1kVc1z5cqG_hkpsM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 16:07:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7615 (0x1dbf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912FAB9, serialNumber=349C09E99CA806E335915735CF972A1BF864A6C3 Validity Not Before: Apr 24 16:07:55 2025 GMT Not After : May 1 16:07:55 2025 GMT Subject: CN=680a61db-7c80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:ce:3a:7d:1e:39:ef:cd:0c:bc:da:49:65:92: 7b:6b:e6:97:2b:e2:fe:90:07:f4:28:80:8f:5c:f9: 14:fa:74:62:8e:66:b1:de:0d:5a:28:0d:f0:6e:12: ca:0f:2b:86:ab:c9:83:54:89:7a:68:08:ca:3c:c3: 8b:cc:3b:0c:e5:9e:95:95:68:6a:ac:bc:e7:96:0c: 8a:45:17:bf:1e:24:b9:7a:56:bc:f6:d1:09:55:27: 6f:d5:ed:1c:77:df:0d:a9:d0:e3:41:15:de:85:fc: b8:e8:1b:33:88:b9:4a:a8:5e:62:6c:30:af:de:f5: 32:44:c4:b6:91:02:d3:b7:2c:73:8f:69:0b:5a:66: 6a:94:54:04:15:7c:09:41:92:c3:b4:1c:59:0a:b6: 79:b3:13:fb:ae:06:cb:5b:34:5a:23:27:e1:dd:6d: 92:f9:19:00:fb:f7:c7:f0:69:73:a7:4b:28:bc:98: 87:c1:19:42:6c:bf:4f:53:5b:7b:ff:41:a3:4b:5a: 79:20:22:a9:70:b4:5c:17:4a:ef:28:44:36:21:86: fe:10:68:f7:21:70:27:2f:b8:eb:61:c2:9e:80:96: 4f:1c:57:70:9c:68:a6:1d:ac:53:e1:ac:ff:fd:c0: 82:56:b5:56:16:9f:92:89:57:c7:4e:e4:f3:97:bf: ce:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:A9:D9:FA:C3:6B:95:4B:66:3B:13:3B:1A:19:02:BD:86:78:D4:72 X509v3 Authority Key Identifier: keyid:34:9C:09:E9:9C:A8:06:E3:35:91:57:35:CF:97:2A:1B:F8:64:A6:C3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912FAB9/938A70E495CD11E6BF4A8232C4F9AE02/NJwJ6ZyoBuM1kVc1z5cqG_hkpsM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NJwJ6ZyoBuM1kVc1z5cqG_hkpsM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912FAB9/938A70E495CD11E6BF4A8232C4F9AE02/NJwJ6ZyoBuM1kVc1z5cqG_hkpsM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 64:fb:fc:f3:df:d8:e8:2c:02:3e:b3:d2:f7:33:ee:f8:65:f5: 21:c1:d2:bf:0d:7c:3d:f7:2a:22:7b:6f:b9:be:83:52:28:99: 5a:46:32:f9:6b:cc:02:d1:1c:af:5c:0c:17:b3:bc:ed:ce:01: 08:74:1f:11:57:53:1f:d0:d8:a1:89:ee:6c:c7:8b:c9:dd:3a: 13:dc:02:95:c1:23:e1:7b:13:d8:3c:ef:8b:a7:c5:93:1f:4e: f9:23:5e:2b:e6:a6:9e:33:bd:13:b9:9e:eb:b9:9e:6b:d3:8a: 33:03:8e:3a:6f:4e:a1:4b:c7:9e:74:9a:91:0e:bb:5a:f7:f1: 9b:14:05:2e:0e:05:44:31:04:46:8c:21:2b:49:a0:fc:bb:3f: 12:11:7c:21:d5:94:c6:7e:8b:66:5d:f5:87:7f:a7:c5:6f:26: 9b:d5:af:57:4d:3e:22:f5:65:40:d4:f0:f2:23:a2:4c:40:5b: 2e:06:c5:6c:c7:43:2a:98:45:49:0f:07:86:5a:12:8b:0a:61: a6:1f:2d:3a:d5:b3:05:1c:92:b7:13:a5:48:c5:a0:e3:1b:8c: 9e:0a:f7:35:91:48:2b:ff:c1:88:62:8e:1b:fd:9e:9e:6b:c9: d1:94:f9:d9:c7:77:05:cd:01:17:24:80:10:5f:36:12:59:cb: f8:a6:a0:c6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHb8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkZBQjkxMTAvBgNVBAUTKDM0OUMwOUU5OUNBODA2RTMzNTkxNTczNUNGOTcyQTFC Rjg2NEE2QzMwHhcNMjUwNDI0MTYwNzU1WhcNMjUwNTAxMTYwNzU1WjAYMRYwFAYD VQQDEw02ODBhNjFkYi03YzgwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAys46fR45780MvNpJZZJ7a+aXK+L+kAf0KICPXPkU+nRijmax3g1aKA3wbhLK DyuGq8mDVIl6aAjKPMOLzDsM5Z6VlWhqrLznlgyKRRe/HiS5ela89tEJVSdv1e0c d98NqdDjQRXehfy46BsziLlKqF5ibDCv3vUyRMS2kQLTtyxzj2kLWmZqlFQEFXwJ QZLDtBxZCrZ5sxP7rgbLWzRaIyfh3W2S+RkA+/fH8Glzp0sovJiHwRlCbL9PU1t7 /0GjS1p5ICKpcLRcF0rvKEQ2IYb+EGj3IXAnL7jrYcKegJZPHFdwnGimHaxT4az/ /cCCVrVWFp+SiVfHTuTzl7/O1wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAep2frD a5VLZjsTOxoZAr2GeNRyMB8GA1UdIwQYMBaAFDScCemcqAbjNZFXNc+XKhv4ZKbD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRkFCOS85MzhBNzBFNDk1 Q0QxMUU2QkY0QTgyMzJDNEY5QUUwMi9OSndKNlp5b0J1TTFrVmMxejVjcUdfaGtw c00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05Kd0o2WnlvQnVNMWtWYzF6NWNxR19oa3BzTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RkFCOS85MzhBNzBFNDk1Q0QxMUU2QkY0QTgyMzJDNEY5QUUwMi9OSndKNlp5b0J1 TTFrVmMxejVjcUdfaGtwc00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBk+/zz39joLAI+s9L3M+74ZfUhwdK/DXw99yoie2+5voNSKJlaRjL5 a8wC0RyvXAwXs7ztzgEIdB8RV1Mf0Nihie5sx4vJ3ToT3AKVwSPhexPYPO+Lp8WT H075I14r5qaeM70TuZ7ruZ5r04ozA446b06hS8eedJqRDrta9/GbFAUuDgVEMQRG jCErSaD8uz8SEXwh1ZTGfotmXfWHf6fFbyab1a9XTT4i9WVA1PDyI6JMQFsuBsVs x0MqmEVJDweGWhKLCmGmHy061bMFHJK3E6VIxaDjG4yeCvc1kUgr/8GIYo4b/Z6e a8nRlPnZx3cFzQEXJIAQXzYSWcv4pqDG -----END CERTIFICATE-----Generated at Sat Apr 26 05:20:14 2025 by rpki-client