$ rpki-client -vvf rpki.apnic.net/member_repository/A9130F21/8517FB08141311F08F1A1D73C4F9AE02/cNJgHLDQ-k-cXw4Chti2r9kjWgY.mft File: cNJgHLDQ-k-cXw4Chti2r9kjWgY.mft (raw, json) Hash identifier: fUB2O/u3Rcmayf+dEZXH1ee2z2J6rExnSWh4qwUlLfU= Subject key identifier: F0:8E:FD:98:1B:7C:26:53:EF:97:C7:9A:B9:68:B5:B7:BF:85:8C:D5 Authority key identifier: 70:D2:60:1C:B0:D0:FA:4F:9C:5F:0E:02:86:D8:B6:AF:D9:23:5A:06 Certificate issuer: /CN=A9130F21/serialNumber=70D2601CB0D0FA4F9C5F0E0286D8B6AFD9235A06 Certificate serial: 0C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cNJgHLDQ-k-cXw4Chti2r9kjWgY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9130F21/8517FB08141311F08F1A1D73C4F9AE02/cNJgHLDQ-k-cXw4Chti2r9kjWgY.mft Manifest number: 0B Signing time: Fri 25 Apr 2025 07:07:05 +0000 Manifest this update: Fri 25 Apr 2025 07:07:05 +0000 Manifest next update: Fri 02 May 2025 07:07:05 +0000 Files and hashes: 1: cNJgHLDQ-k-cXw4Chti2r9kjWgY.crl (hash: RoMkRe0WxpJbgem9IQ69mbm0tvZYHUnP530arorknQY=) 2: 42CFB44C141411F0BAD16274C4F9AE02.roa (hash: NvkrBL0iNWC0KsiDXy6BO+nae3k0qk/y4fPT3v4Fzd4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9130F21/8517FB08141311F08F1A1D73C4F9AE02/cNJgHLDQ-k-cXw4Chti2r9kjWgY.crl rsync://rpki.apnic.net/member_repository/A9130F21/8517FB08141311F08F1A1D73C4F9AE02/cNJgHLDQ-k-cXw4Chti2r9kjWgY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cNJgHLDQ-k-cXw4Chti2r9kjWgY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 07:07:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12 (0xc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9130F21, serialNumber=70D2601CB0D0FA4F9C5F0E0286D8B6AFD9235A06 Validity Not Before: Apr 25 07:07:05 2025 GMT Not After : May 2 07:07:05 2025 GMT Subject: CN=680b3499-cbe5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:b3:c7:1a:38:ba:fd:cd:15:b3:57:7d:1e:10: 93:51:2c:ea:79:36:0c:2b:68:93:40:1b:50:51:98: 02:0e:fd:00:e6:49:89:39:a5:41:18:4a:65:47:90: 61:d1:c8:f2:c6:0d:5a:6b:43:81:d4:20:27:06:29: c7:93:b2:b8:74:ed:4a:58:9d:e3:34:43:e7:4d:ef: 23:cd:72:e9:db:fc:e2:a4:b9:57:d5:3e:07:90:ff: 33:eb:42:a1:d7:c6:e9:e3:7c:b1:4c:90:ac:c1:7c: 0b:94:03:c3:66:42:83:d7:f7:4e:ff:bb:27:ce:ed: cb:d4:61:7f:d2:ac:f4:84:ed:e9:cb:34:95:00:af: c4:f8:b9:9d:4a:5b:4b:4c:89:40:4f:93:8b:6d:2d: f6:c5:ef:67:40:4b:ec:bb:3e:ac:31:bc:58:a1:e1: 78:92:90:64:7b:01:83:d8:cc:a8:5e:ee:65:16:3b: 3e:e1:32:9e:00:01:44:d1:09:94:55:c9:6d:aa:e5: 3e:85:c1:ae:d8:9e:b6:9a:f1:1e:0e:7e:97:8e:d4: 02:d6:2b:81:23:1d:a0:c5:4e:28:8e:b8:ef:c8:eb: ef:a7:d0:c2:e1:ac:c3:5c:36:1b:fa:29:b4:cf:39: df:c9:a9:89:86:66:9e:e3:ce:9c:b0:c0:f1:75:94: d5:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:8E:FD:98:1B:7C:26:53:EF:97:C7:9A:B9:68:B5:B7:BF:85:8C:D5 X509v3 Authority Key Identifier: keyid:70:D2:60:1C:B0:D0:FA:4F:9C:5F:0E:02:86:D8:B6:AF:D9:23:5A:06 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9130F21/8517FB08141311F08F1A1D73C4F9AE02/cNJgHLDQ-k-cXw4Chti2r9kjWgY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cNJgHLDQ-k-cXw4Chti2r9kjWgY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9130F21/8517FB08141311F08F1A1D73C4F9AE02/cNJgHLDQ-k-cXw4Chti2r9kjWgY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 09:12:53:29:5b:37:c0:16:71:98:6a:73:a2:c6:6f:c4:29:02: 36:22:7b:85:44:18:bd:18:de:ea:64:8c:69:cc:a6:2d:e5:9e: ed:23:89:53:1f:2c:8a:97:c1:40:66:98:db:f5:9c:aa:5e:6d: 1c:12:88:b1:62:ae:da:05:c8:08:64:b9:dc:9d:ae:e9:23:c2: a6:74:0d:82:d0:b7:1e:52:ab:f2:7e:a4:b2:d2:d6:20:2c:56: bd:e7:c2:1c:9e:5c:ef:75:7a:2f:97:e7:88:09:a0:0d:12:45: 89:4b:1c:88:0c:55:4c:c9:06:20:bb:de:7f:ea:67:b7:1e:d5: 55:37:c6:03:17:2b:92:46:71:6b:12:a8:d4:52:6c:77:72:9e: 4d:85:5b:42:42:a1:8a:3d:b8:b1:80:63:53:67:55:3b:e9:1c: 5c:54:91:b0:ed:93:8c:1a:df:07:41:fd:00:bc:09:02:71:84: 9e:56:f3:43:d7:bb:42:2e:b8:09:62:68:a0:e3:06:f5:89:eb: 21:89:dd:73:73:2f:42:3d:15:c9:f7:be:f4:aa:b8:28:d3:f7: d2:5d:15:39:d5:83:c6:84:33:b1:9f:28:5a:29:f9:b0:fe:db: 41:59:81:8d:74:25:49:d7:79:f7:26:74:16:6f:83:75:ae:16: ae:99:c3:f4 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBDDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz MEYyMTExMC8GA1UEBRMoNzBEMjYwMUNCMEQwRkE0RjlDNUYwRTAyODZEOEI2QUZE OTIzNUEwNjAeFw0yNTA0MjUwNzA3MDVaFw0yNTA1MDIwNzA3MDVaMBgxFjAUBgNV BAMTDTY4MGIzNDk5LWNiZTUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDbs8caOLr9zRWzV30eEJNRLOp5NgwraJNAG1BRmAIO/QDmSYk5pUEYSmVHkGHR yPLGDVprQ4HUICcGKceTsrh07UpYneM0Q+dN7yPNcunb/OKkuVfVPgeQ/zPrQqHX xunjfLFMkKzBfAuUA8NmQoPX907/uyfO7cvUYX/SrPSE7enLNJUAr8T4uZ1KW0tM iUBPk4ttLfbF72dAS+y7PqwxvFih4XiSkGR7AYPYzKhe7mUWOz7hMp4AAUTRCZRV yW2q5T6Fwa7Ynraa8R4OfpeO1ALWK4EjHaDFTiiOuO/I6++n0MLhrMNcNhv6KbTP Od/JqYmGZp7jzpywwPF1lNXhAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU8I79mBt8 JlPvl8eauWi1t7+FjNUwHwYDVR0jBBgwFoAUcNJgHLDQ+k+cXw4Chti2r9kjWgYw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTMwRjIxLzg1MTdGQjA4MTQx MzExRjA4RjFBMUQ3M0M0RjlBRTAyL2NOSmdITERRLWstY1h3NENodGkycjlraldn WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvY05KZ0hMRFEtay1jWHc0Q2h0aTJyOWtqV2dZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTMw RjIxLzg1MTdGQjA4MTQxMzExRjA4RjFBMUQ3M0M0RjlBRTAyL2NOSmdITERRLWst Y1h3NENodGkycjlraldnWS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAAkSUylbN8AWcZhqc6LGb8QpAjYie4VEGL0Y3upkjGnMpi3lnu0jiVMf LIqXwUBmmNv1nKpebRwSiLFirtoFyAhkudydrukjwqZ0DYLQtx5Sq/J+pLLS1iAs Vr3nwhyeXO91ei+X54gJoA0SRYlLHIgMVUzJBiC73n/qZ7ce1VU3xgMXK5JGcWsS qNRSbHdynk2FW0JCoYo9uLGAY1NnVTvpHFxUkbDtk4wa3wdB/QC8CQJxhJ5W80PX u0IuuAliaKDjBvWJ6yGJ3XNzL0I9Fcn3vvSquCjT99JdFTnVg8aEM7GfKFop+bD+ 20FZgY10JUnXefcmdBZvg3WuFq6Zw/Q= -----END CERTIFICATE-----Generated at Sat Apr 26 05:55:02 2025 by rpki-client