$ rpki-client -vvf rpki.apnic.net/member_repository/A9130683/53D754FE2A4211EB9C46CD4CC4F9AE02/nFh2OitDfLKSxGQXuNSO32tXAc8.mft File: nFh2OitDfLKSxGQXuNSO32tXAc8.mft (raw, json) Hash identifier: txfqgHm2wYObZ8T1VJrh4XHFyUFwM0yA0BW4Ybu2P/I= Subject key identifier: 45:0A:94:E7:28:74:2D:99:CE:47:A7:C9:EE:1B:48:38:3C:8C:8A:61 Authority key identifier: 9C:58:76:3A:2B:43:7C:B2:92:C4:64:17:B8:D4:8E:DF:6B:57:01:CF Certificate issuer: /CN=A9130683/serialNumber=9C58763A2B437CB292C46417B8D48EDF6B5701CF Certificate serial: 073B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nFh2OitDfLKSxGQXuNSO32tXAc8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9130683/53D754FE2A4211EB9C46CD4CC4F9AE02/nFh2OitDfLKSxGQXuNSO32tXAc8.mft Manifest number: 0734 Signing time: Thu 24 Apr 2025 21:34:25 +0000 Manifest this update: Thu 24 Apr 2025 21:34:24 +0000 Manifest next update: Thu 01 May 2025 21:34:24 +0000 Files and hashes: 1: nFh2OitDfLKSxGQXuNSO32tXAc8.crl (hash: NsVELDbcxBzsWBP4MuqWbECZhym0YX0R+3SPcCow7eI=) 2: EEF3557C75A211EBBCD0587BC4F9AE02.roa (hash: jIN2PY6GWYE7IvHCsXUW4P6OWa+fFCSoJx89CCKLLFQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9130683/53D754FE2A4211EB9C46CD4CC4F9AE02/nFh2OitDfLKSxGQXuNSO32tXAc8.crl rsync://rpki.apnic.net/member_repository/A9130683/53D754FE2A4211EB9C46CD4CC4F9AE02/nFh2OitDfLKSxGQXuNSO32tXAc8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nFh2OitDfLKSxGQXuNSO32tXAc8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 21:34:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1851 (0x73b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9130683, serialNumber=9C58763A2B437CB292C46417B8D48EDF6B5701CF Validity Not Before: Apr 24 21:34:24 2025 GMT Not After : May 1 21:34:24 2025 GMT Subject: CN=680aae61-fd08 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:1e:e5:b1:fd:8d:96:43:03:33:a8:7e:95:66: d0:4d:78:21:e5:b3:98:8f:f5:e9:0f:70:fc:9f:a5: c8:6d:eb:8a:35:99:97:47:11:1f:55:50:45:71:44: 12:d3:da:51:34:75:1c:63:4d:4d:64:f6:9c:e5:a9: bd:24:28:72:e0:13:6d:6f:59:b6:cb:ea:69:80:37: e4:d2:08:eb:41:b4:23:f0:c5:e8:98:74:bf:e5:f4: f5:f1:9a:47:36:a9:d2:fa:88:6b:0b:e9:7e:86:58: d6:bd:03:ef:0c:57:f2:be:82:aa:e0:4a:5f:fa:f2: 8a:e8:da:0d:b6:80:a7:98:a1:17:9d:ee:ec:ac:17: e2:5d:44:dd:ff:07:8f:cb:36:66:a9:46:25:8c:10: 64:0c:07:7b:7e:d4:bb:c3:86:fe:81:94:96:d6:6f: f7:21:2b:3c:f1:51:4f:7e:c7:7d:09:dc:f9:3a:78: 37:b7:26:03:30:9c:21:d8:18:da:a5:ac:6b:8f:f0: f6:c0:28:aa:90:1e:31:d9:b5:e0:ec:7a:03:9a:c1: 39:44:dc:d2:c4:24:ff:bb:00:04:6c:70:07:63:7c: 4a:9c:8f:5b:9e:ce:e2:ab:68:58:c1:4a:d4:6e:1e: 9f:84:23:72:36:12:4a:12:02:6c:6e:1c:3a:7a:d2: af:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:0A:94:E7:28:74:2D:99:CE:47:A7:C9:EE:1B:48:38:3C:8C:8A:61 X509v3 Authority Key Identifier: keyid:9C:58:76:3A:2B:43:7C:B2:92:C4:64:17:B8:D4:8E:DF:6B:57:01:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9130683/53D754FE2A4211EB9C46CD4CC4F9AE02/nFh2OitDfLKSxGQXuNSO32tXAc8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nFh2OitDfLKSxGQXuNSO32tXAc8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9130683/53D754FE2A4211EB9C46CD4CC4F9AE02/nFh2OitDfLKSxGQXuNSO32tXAc8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 01:69:8b:4a:3e:37:17:5b:a4:0c:cb:eb:69:55:d5:64:90:2e: 30:f0:92:de:b8:bf:e2:e2:b4:68:c1:9b:27:05:e7:02:4c:c6: b8:d8:ac:bc:68:8b:67:68:06:d0:8a:04:6f:1c:18:94:85:d0: 48:02:ec:56:7c:f5:94:82:ec:33:9e:d1:01:c1:11:f5:d8:98: 73:01:59:8e:06:26:ff:84:1c:4a:0e:c5:bf:7d:f9:09:a7:11: 35:b8:e0:b4:3d:cc:c7:80:92:a8:35:7a:23:66:4d:59:cd:e9: 42:d2:90:00:19:b5:b6:ee:42:99:98:71:f7:e3:50:d8:1c:5c: cf:87:e1:ac:72:9e:f8:25:53:39:03:a5:48:53:23:e5:cb:12: 51:d9:3c:8a:ef:a6:17:75:a6:f3:e8:4b:28:3c:f3:75:80:c4: 06:30:a6:e7:72:41:af:12:f3:ac:6d:fd:ea:2f:8e:4c:37:81: cf:b4:19:11:1d:3e:24:fa:63:62:61:fb:2e:8c:64:27:08:19: 20:0d:fe:92:cf:b9:21:1f:2a:68:10:ce:7e:bb:7a:b1:27:0b: ff:bf:c7:28:f9:c2:19:81:f5:04:46:d0:28:47:89:63:89:7d: 70:d8:f2:d8:4b:45:ca:05:0b:27:c9:18:16:8e:19:1c:93:25: 2d:21:5f:bf -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBzswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzA2ODMxMTAvBgNVBAUTKDlDNTg3NjNBMkI0MzdDQjI5MkM0NjQxN0I4RDQ4RURG NkI1NzAxQ0YwHhcNMjUwNDI0MjEzNDI0WhcNMjUwNTAxMjEzNDI0WjAYMRYwFAYD VQQDEw02ODBhYWU2MS1mZDA4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwR7lsf2NlkMDM6h+lWbQTXgh5bOYj/XpD3D8n6XIbeuKNZmXRxEfVVBFcUQS 09pRNHUcY01NZPac5am9JChy4BNtb1m2y+ppgDfk0gjrQbQj8MXomHS/5fT18ZpH NqnS+ohrC+l+hljWvQPvDFfyvoKq4Epf+vKK6NoNtoCnmKEXne7srBfiXUTd/weP yzZmqUYljBBkDAd7ftS7w4b+gZSW1m/3ISs88VFPfsd9Cdz5Ong3tyYDMJwh2Bja paxrj/D2wCiqkB4x2bXg7HoDmsE5RNzSxCT/uwAEbHAHY3xKnI9bns7iq2hYwUrU bh6fhCNyNhJKEgJsbhw6etKvfQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEUKlOco dC2Zzkenye4bSDg8jIphMB8GA1UdIwQYMBaAFJxYdjorQ3yyksRkF7jUjt9rVwHP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMDY4My81M0Q3NTRGRTJB NDIxMUVCOUM0NkNENENDNEY5QUUwMi9uRmgyT2l0RGZMS1N4R1FYdU5TTzMydFhB YzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25GaDJPaXREZkxLU3hHUVh1TlNPMzJ0WEFjOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MDY4My81M0Q3NTRGRTJBNDIxMUVCOUM0NkNENENDNEY5QUUwMi9uRmgyT2l0RGZM S1N4R1FYdU5TTzMydFhBYzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQABaYtKPjcXW6QMy+tpVdVkkC4w8JLeuL/i4rRowZsnBecCTMa42Ky8 aItnaAbQigRvHBiUhdBIAuxWfPWUguwzntEBwRH12JhzAVmOBib/hBxKDsW/ffkJ pxE1uOC0PczHgJKoNXojZk1ZzelC0pAAGbW27kKZmHH341DYHFzPh+Gscp74JVM5 A6VIUyPlyxJR2TyK76YXdabz6EsoPPN1gMQGMKbnckGvEvOsbf3qL45MN4HPtBkR HT4k+mNiYfsujGQnCBkgDf6Sz7khHypoEM5+u3qxJwv/v8co+cIZgfUERtAoR4lj iX1w2PLYS0XKBQsnyRgWjhkckyUtIV+/ -----END CERTIFICATE-----Generated at Sat Apr 26 12:32:16 2025 by rpki-client