$ rpki-client -vvf rpki.apnic.net/member_repository/A91415FB/7F488968735D11E788DA4F14C4F9AE02/N9M3SYXzuqgtC-BMbYejoDXiDeo.mft File: N9M3SYXzuqgtC-BMbYejoDXiDeo.mft (raw, json) Hash identifier: 8pCUBUKnV+1uJeYDg63mt4Wo86DcUJZfQDjy3E/H/dE= Subject key identifier: E3:48:FD:BB:16:57:6F:F2:B9:DB:9F:F1:B8:B4:E4:09:65:D5:D9:52 Authority key identifier: 37:D3:37:49:85:F3:BA:A8:2D:0B:E0:4C:6D:87:A3:A0:35:E2:0D:EA Certificate issuer: /CN=A91415FB/serialNumber=37D3374985F3BAA82D0BE04C6D87A3A035E20DEA Certificate serial: 1966 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N9M3SYXzuqgtC-BMbYejoDXiDeo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91415FB/7F488968735D11E788DA4F14C4F9AE02/N9M3SYXzuqgtC-BMbYejoDXiDeo.mft Manifest number: 1949 Signing time: Thu 24 Apr 2025 16:24:56 +0000 Manifest this update: Thu 24 Apr 2025 16:24:56 +0000 Manifest next update: Thu 01 May 2025 16:24:56 +0000 Files and hashes: 1: N9M3SYXzuqgtC-BMbYejoDXiDeo.crl (hash: QV6VhwMUp35udwkd7aVKRKOngsqu/iPX+57XknSvIEo=) 2: 8351896675D611E88AFEBA28C4F9AE02.roa (hash: T2O0r+wuciWw//d0/KrKWMrTn116KGwZgOoRv2gqL2o=) 3: 433F089AE49A11EB85874B74C4F9AE02.roa (hash: 4lXZLQbvCWkzoUTRrsi9YqylEuiqjTlRtIjx8J3fHJA=) 4: 226DEC1275D511E88D5FDF24C4F9AE02.roa (hash: u6zpvxkYkfd9Sgr+7nOb3bbbb/5Wjva0COGy2cz/Rk4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91415FB/7F488968735D11E788DA4F14C4F9AE02/N9M3SYXzuqgtC-BMbYejoDXiDeo.crl rsync://rpki.apnic.net/member_repository/A91415FB/7F488968735D11E788DA4F14C4F9AE02/N9M3SYXzuqgtC-BMbYejoDXiDeo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N9M3SYXzuqgtC-BMbYejoDXiDeo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 16:24:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6502 (0x1966) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91415FB, serialNumber=37D3374985F3BAA82D0BE04C6D87A3A035E20DEA Validity Not Before: Apr 24 16:24:56 2025 GMT Not After : May 1 16:24:56 2025 GMT Subject: CN=680a65d8-df0f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:67:89:bf:0b:ad:eb:fe:fb:eb:e7:bf:52:c3: 24:33:23:ea:2e:d0:07:03:24:29:0e:77:71:c0:78: aa:b7:db:cd:cf:c3:35:f5:93:52:e1:3d:ff:df:df: f3:1d:6b:4a:41:7f:22:93:88:68:0a:38:50:26:86: 5b:99:82:35:4b:5f:31:6f:41:99:23:aa:31:0a:c4: e3:a2:b8:1b:40:c7:c8:b7:13:72:5e:51:76:bc:0a: 12:e6:5f:50:5a:5d:00:20:1b:0e:eb:80:e1:cb:34: f6:05:49:44:78:e4:03:14:1d:43:19:31:fc:90:af: c8:56:41:9b:59:61:02:a0:5e:7c:d1:64:76:23:6a: e1:17:07:22:10:87:75:50:17:ea:be:ce:c1:7a:72: 3b:19:ef:4e:aa:f2:9c:c1:26:31:6a:52:e2:47:7b: 38:be:7d:1b:b0:4b:48:36:cf:b3:09:b2:2e:42:54: bd:90:1a:11:b6:8c:e6:a0:f1:ef:6a:9d:01:cb:70: 0d:18:b3:9d:47:12:41:df:dc:cf:62:e7:7c:52:d5: c5:31:70:36:c4:7a:d7:5d:08:13:0b:f7:c8:7e:f3: 0b:bf:d9:a6:34:65:3e:66:ec:87:ca:74:8a:bc:73: a0:cd:8c:f9:de:a5:fb:b1:23:15:26:80:29:38:82: 6f:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:48:FD:BB:16:57:6F:F2:B9:DB:9F:F1:B8:B4:E4:09:65:D5:D9:52 X509v3 Authority Key Identifier: keyid:37:D3:37:49:85:F3:BA:A8:2D:0B:E0:4C:6D:87:A3:A0:35:E2:0D:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91415FB/7F488968735D11E788DA4F14C4F9AE02/N9M3SYXzuqgtC-BMbYejoDXiDeo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N9M3SYXzuqgtC-BMbYejoDXiDeo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91415FB/7F488968735D11E788DA4F14C4F9AE02/N9M3SYXzuqgtC-BMbYejoDXiDeo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 74:c7:92:9d:af:a2:87:36:65:3f:78:6e:f8:b3:a6:1c:47:77: 5a:7e:c3:f3:44:6d:92:20:44:84:86:a4:93:72:58:34:aa:05: b0:ca:be:0a:68:55:65:75:56:fe:b3:56:f0:39:46:c1:17:8a: 7a:11:c9:47:61:b0:b3:64:fc:6d:44:80:cb:c7:3e:9c:53:c5: 8b:ca:98:82:fb:88:5e:80:64:d9:ff:30:cb:a4:65:de:6c:4b: 13:70:33:fa:dd:0b:91:c6:e2:87:ec:3c:44:fa:fa:15:75:46: 4b:e1:34:db:83:a9:67:eb:75:08:e2:56:4a:5a:2b:b3:db:0d: 4f:78:92:b3:28:01:26:ef:ea:24:0a:2e:dc:45:4c:54:85:c7: a1:fc:e5:5b:f6:bd:92:34:01:60:24:bd:ae:79:4e:8c:49:65: e2:74:99:bd:65:0a:2b:8a:33:cc:f8:4c:c1:84:13:04:f3:12: dc:44:3a:f7:3d:66:b1:15:e0:23:a1:5e:38:2a:3e:b6:d1:d6: 11:0a:01:5e:53:75:45:05:28:5a:89:e4:4b:6d:f4:22:ac:c1: 9f:5d:ec:28:a0:a8:74:ca:be:dc:78:b0:fe:56:d0:d9:0f:6f: ce:54:17:54:f5:0c:64:d7:f1:39:4a:67:ae:92:a2:b0:ec:af: ab:39:78:91 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGWYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDE1RkIxMTAvBgNVBAUTKDM3RDMzNzQ5ODVGM0JBQTgyRDBCRTA0QzZEODdBM0Ew MzVFMjBERUEwHhcNMjUwNDI0MTYyNDU2WhcNMjUwNTAxMTYyNDU2WjAYMRYwFAYD VQQDEw02ODBhNjVkOC1kZjBmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxGeJvwut6/776+e/UsMkMyPqLtAHAyQpDndxwHiqt9vNz8M19ZNS4T3/39/z HWtKQX8ik4hoCjhQJoZbmYI1S18xb0GZI6oxCsTjorgbQMfItxNyXlF2vAoS5l9Q Wl0AIBsO64DhyzT2BUlEeOQDFB1DGTH8kK/IVkGbWWECoF580WR2I2rhFwciEId1 UBfqvs7BenI7Ge9OqvKcwSYxalLiR3s4vn0bsEtINs+zCbIuQlS9kBoRtozmoPHv ap0By3ANGLOdRxJB39zPYud8UtXFMXA2xHrXXQgTC/fIfvMLv9mmNGU+ZuyHynSK vHOgzYz53qX7sSMVJoApOIJvwwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFONI/bsW V2/yuduf8bi05All1dlSMB8GA1UdIwQYMBaAFDfTN0mF87qoLQvgTG2Ho6A14g3q MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MTVGQi83RjQ4ODk2ODcz NUQxMUU3ODhEQTRGMTRDNEY5QUUwMi9OOU0zU1lYenVxZ3RDLUJNYlllam9EWGlE ZW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL045TTNTWVh6dXFndEMtQk1iWWVqb0RYaURlby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MTVGQi83RjQ4ODk2ODczNUQxMUU3ODhEQTRGMTRDNEY5QUUwMi9OOU0zU1lYenVx Z3RDLUJNYlllam9EWGlEZW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB0x5Kdr6KHNmU/eG74s6YcR3dafsPzRG2SIESEhqSTclg0qgWwyr4K aFVldVb+s1bwOUbBF4p6EclHYbCzZPxtRIDLxz6cU8WLypiC+4hegGTZ/zDLpGXe bEsTcDP63QuRxuKH7DxE+voVdUZL4TTbg6ln63UI4lZKWiuz2w1PeJKzKAEm7+ok Ci7cRUxUhceh/OVb9r2SNAFgJL2ueU6MSWXidJm9ZQorijPM+EzBhBME8xLcRDr3 PWaxFeAjoV44Kj620dYRCgFeU3VFBShaieRLbfQirMGfXewooKh0yr7ceLD+VtDZ D2/OVBdU9Qxk1/E5SmeukqKw7K+rOXiR -----END CERTIFICATE-----Generated at Sat Apr 26 04:29:05 2025 by rpki-client