$ rpki-client -vvf rpki.apnic.net/member_repository/A9136EC5/2DECAE560E5611E4B6F1953AC4F9AE02/n84okUxQ3Jl1XxCKtDNPdyy-oOI.mft File: n84okUxQ3Jl1XxCKtDNPdyy-oOI.mft (raw, json) Hash identifier: a4zDnlonaaeL9+gOLlf1RCkZTUgV1BbgYrAE3a20b0g= Subject key identifier: 28:EA:8D:DB:69:B3:E1:F8:3E:62:D6:A5:40:6B:42:0A:5F:47:9F:4B Authority key identifier: 9F:CE:28:91:4C:50:DC:99:75:5F:10:8A:B4:33:4F:77:2C:BE:A0:E2 Certificate issuer: /CN=A9136EC5/serialNumber=9FCE28914C50DC99755F108AB4334F772CBEA0E2 Certificate serial: 2B0B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n84okUxQ3Jl1XxCKtDNPdyy-oOI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9136EC5/2DECAE560E5611E4B6F1953AC4F9AE02/n84okUxQ3Jl1XxCKtDNPdyy-oOI.mft Manifest number: 2AC7 Signing time: Thu 24 Apr 2025 15:34:08 +0000 Manifest this update: Thu 24 Apr 2025 15:34:08 +0000 Manifest next update: Thu 01 May 2025 15:34:08 +0000 Files and hashes: 1: n84okUxQ3Jl1XxCKtDNPdyy-oOI.crl (hash: LvpGRgloz1TPAwI8sUBU5QgOyWcWDSeHU2aPipArM7w=) 2: F1BA2EAC353311EBB895B082C4F9AE02.roa (hash: 8JXHn+tn0IVLCUvOUOerZKmcj6/h+ZMsxk2iLkFwjsA=) 3: 08074A8A1EB711EF9C248E60C4F9AE02.roa (hash: bFIjQrk+SKu0XJffarEwWtaET/rTeUOfIWLHnin1FNE=) 4: 8B903A32353211EBB3D0487FC4F9AE02.roa (hash: ReV9a7hSveeezSpIAzgAbbvdpzxiWLw3q4n5gLELjhg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9136EC5/2DECAE560E5611E4B6F1953AC4F9AE02/n84okUxQ3Jl1XxCKtDNPdyy-oOI.crl rsync://rpki.apnic.net/member_repository/A9136EC5/2DECAE560E5611E4B6F1953AC4F9AE02/n84okUxQ3Jl1XxCKtDNPdyy-oOI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n84okUxQ3Jl1XxCKtDNPdyy-oOI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 15:34:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11019 (0x2b0b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9136EC5, serialNumber=9FCE28914C50DC99755F108AB4334F772CBEA0E2 Validity Not Before: Apr 24 15:34:08 2025 GMT Not After : May 1 15:34:08 2025 GMT Subject: CN=680a59f0-222f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:5d:a2:18:cf:f6:f9:3c:a4:e1:b8:f5:9f:61: 96:43:20:89:f1:25:92:ca:1e:6b:8d:72:49:7e:a0: 9b:d3:02:12:58:98:cc:5c:a2:52:e0:81:d4:e1:d7: 19:a6:53:84:d0:73:65:e1:77:55:d1:3d:ee:47:cc: 55:f6:b2:0b:ea:fd:f2:8e:44:25:0e:a9:fd:1f:3d: a7:ca:95:b2:8a:ad:8c:26:88:4d:7c:ed:ab:3d:ea: 2f:06:7f:b5:a1:b9:f5:57:78:6c:1c:8f:e4:73:50: d3:f6:87:12:a7:b7:99:18:f0:c9:c3:16:36:f1:d9: 05:45:78:b9:9b:4a:ff:d4:48:0b:86:c1:f6:2d:8f: 12:f8:22:23:c1:be:0d:51:74:8f:1e:ad:bc:79:b5: 60:12:d8:ef:ec:e9:b1:de:c3:7d:40:31:d1:a2:50: 4e:1c:47:3c:01:97:e0:60:cb:22:67:ee:d0:78:46: 50:4d:ca:c4:c8:dd:85:93:10:ba:07:07:e2:c5:19: 22:f3:d7:3f:19:a3:d7:3f:a7:93:95:27:bd:74:3e: 50:fc:dd:d0:38:aa:b0:05:08:50:5d:9a:ba:d5:33: 41:64:4a:72:e4:dc:b3:84:f9:85:17:d2:98:2e:05: 4b:62:64:7e:73:44:cf:54:08:86:a9:44:4c:76:15: 0c:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:EA:8D:DB:69:B3:E1:F8:3E:62:D6:A5:40:6B:42:0A:5F:47:9F:4B X509v3 Authority Key Identifier: keyid:9F:CE:28:91:4C:50:DC:99:75:5F:10:8A:B4:33:4F:77:2C:BE:A0:E2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9136EC5/2DECAE560E5611E4B6F1953AC4F9AE02/n84okUxQ3Jl1XxCKtDNPdyy-oOI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n84okUxQ3Jl1XxCKtDNPdyy-oOI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9136EC5/2DECAE560E5611E4B6F1953AC4F9AE02/n84okUxQ3Jl1XxCKtDNPdyy-oOI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 85:9e:c7:c5:bf:03:7c:12:53:e2:37:b2:03:84:85:83:c2:58: de:9d:80:a1:eb:69:79:b8:43:f6:13:8f:ba:c8:a3:43:e8:d9: c3:9b:d3:e3:34:d8:63:90:3a:d5:a1:8d:87:e0:61:67:62:98: 8a:70:45:6c:a0:8f:3e:77:82:93:bf:0e:5c:2d:c5:06:12:b4: 4a:15:d4:00:a1:7b:cc:f6:09:52:20:8f:d2:a4:f0:b6:9e:09: ac:bc:75:90:70:39:72:c4:9c:57:f7:bd:85:1e:ef:c2:45:dd: 8a:70:9a:15:7e:76:10:d7:5b:8f:58:11:f7:02:68:6b:d6:49: b5:38:9e:3c:8b:9f:58:64:74:3f:a1:39:76:54:9c:a8:bc:e2: e5:aa:76:ed:34:93:48:b9:4b:6b:05:51:7d:8c:78:98:a0:fd: ba:a2:08:29:a9:7c:55:b7:31:07:74:d9:e2:d8:0a:8d:c4:41: fa:25:db:b2:60:5a:95:eb:b8:b7:3b:70:95:d3:ee:dc:4f:be: 6f:42:cf:6e:18:0d:47:66:2f:9c:69:0f:6b:72:43:05:51:6d: c9:75:95:f3:d0:26:82:26:e2:de:bd:15:07:49:1e:af:42:e9: 65:57:e2:f8:7a:36:89:8d:2a:ac:03:9a:c9:8c:60:02:73:bc: e4:3d:9b:47 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICKwswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzZFQzUxMTAvBgNVBAUTKDlGQ0UyODkxNEM1MERDOTk3NTVGMTA4QUI0MzM0Rjc3 MkNCRUEwRTIwHhcNMjUwNDI0MTUzNDA4WhcNMjUwNTAxMTUzNDA4WjAYMRYwFAYD VQQDEw02ODBhNTlmMC0yMjJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsV2iGM/2+Tyk4bj1n2GWQyCJ8SWSyh5rjXJJfqCb0wISWJjMXKJS4IHU4dcZ plOE0HNl4XdV0T3uR8xV9rIL6v3yjkQlDqn9Hz2nypWyiq2MJohNfO2rPeovBn+1 obn1V3hsHI/kc1DT9ocSp7eZGPDJwxY28dkFRXi5m0r/1EgLhsH2LY8S+CIjwb4N UXSPHq28ebVgEtjv7Omx3sN9QDHRolBOHEc8AZfgYMsiZ+7QeEZQTcrEyN2FkxC6 BwfixRki89c/GaPXP6eTlSe9dD5Q/N3QOKqwBQhQXZq61TNBZEpy5NyzhPmFF9KY LgVLYmR+c0TPVAiGqURMdhUMeQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCjqjdtp s+H4PmLWpUBrQgpfR59LMB8GA1UdIwQYMBaAFJ/OKJFMUNyZdV8QirQzT3csvqDi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNkVDNS8yREVDQUU1NjBF NTYxMUU0QjZGMTk1M0FDNEY5QUUwMi9uODRva1V4UTNKbDFYeENLdEROUGR5eS1v T0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL244NG9rVXhRM0psMVh4Q0t0RE5QZHl5LW9PSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NkVDNS8yREVDQUU1NjBFNTYxMUU0QjZGMTk1M0FDNEY5QUUwMi9uODRva1V4UTNK bDFYeENLdEROUGR5eS1vT0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCFnsfFvwN8ElPiN7IDhIWDwljenYCh62l5uEP2E4+6yKND6NnDm9Pj NNhjkDrVoY2H4GFnYpiKcEVsoI8+d4KTvw5cLcUGErRKFdQAoXvM9glSII/SpPC2 ngmsvHWQcDlyxJxX972FHu/CRd2KcJoVfnYQ11uPWBH3Amhr1km1OJ48i59YZHQ/ oTl2VJyovOLlqnbtNJNIuUtrBVF9jHiYoP26oggpqXxVtzEHdNni2AqNxEH6Jduy YFqV67i3O3CV0+7cT75vQs9uGA1HZi+caQ9rckMFUW3JdZXz0CaCJuLevRUHSR6v QullV+L4ejaJjSqsA5rJjGACc7zkPZtH -----END CERTIFICATE-----Generated at Sat Apr 26 04:33:21 2025 by rpki-client