$ rpki-client -vvf rpki.apnic.net/member_repository/A9144C70/82BC84EEAC6711ECB75CDA24C4F9AE02/n5wj0nP2qZxl77wDDStoHkIykWc.mft File: n5wj0nP2qZxl77wDDStoHkIykWc.mft (raw, json) Hash identifier: boPgVMTrGhDnI0tTqv7uGVwoui/rNWugc2TiAphpLz8= Subject key identifier: 2C:2D:BE:91:47:00:19:9C:9E:CD:21:DD:D0:65:4A:44:A1:0C:94:98 Authority key identifier: 9F:9C:23:D2:73:F6:A9:9C:65:EF:BC:03:0D:2B:68:1E:42:32:91:67 Certificate issuer: /CN=A9144C70/serialNumber=9F9C23D273F6A99C65EFBC030D2B681E42329167 Certificate serial: 0370 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n5wj0nP2qZxl77wDDStoHkIykWc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9144C70/82BC84EEAC6711ECB75CDA24C4F9AE02/n5wj0nP2qZxl77wDDStoHkIykWc.mft Manifest number: 03C1 Signing time: Fri 25 Apr 2025 00:44:16 +0000 Manifest this update: Fri 25 Apr 2025 00:44:16 +0000 Manifest next update: Fri 02 May 2025 00:44:16 +0000 Files and hashes: 1: n5wj0nP2qZxl77wDDStoHkIykWc.crl (hash: CwmUbwIOQYa+ZM0E8pl1KvjcSXQbVl8Br9/Q/oee9x8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9144C70/82BC84EEAC6711ECB75CDA24C4F9AE02/n5wj0nP2qZxl77wDDStoHkIykWc.crl rsync://rpki.apnic.net/member_repository/A9144C70/82BC84EEAC6711ECB75CDA24C4F9AE02/n5wj0nP2qZxl77wDDStoHkIykWc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n5wj0nP2qZxl77wDDStoHkIykWc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 00:44:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 880 (0x370) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9144C70, serialNumber=9F9C23D273F6A99C65EFBC030D2B681E42329167 Validity Not Before: Apr 25 00:44:16 2025 GMT Not After : May 2 00:44:16 2025 GMT Subject: CN=680adae0-db54 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:6d:2c:ce:1e:04:00:c9:48:64:dc:ff:c3:21: bd:23:27:60:dc:7f:a4:e6:13:a0:16:3c:f7:56:cd: 82:00:ea:9f:31:ab:b8:c9:36:92:eb:21:de:69:b9: 8b:2d:8a:93:af:de:33:6f:5a:03:d7:da:ae:61:87: da:0a:d5:04:e9:d0:12:a4:4f:07:4f:24:7f:df:98: 21:6b:21:96:4f:ec:22:75:85:93:c4:0d:8b:85:5c: ba:ba:38:48:49:21:d5:e6:1f:e5:43:40:7c:5a:b2: 53:37:f5:6b:52:79:7b:d7:1e:8f:a4:e6:32:29:56: 8c:3c:02:33:e6:03:63:74:63:7c:bd:9d:8e:3c:72: 15:96:e2:22:28:3f:77:83:d7:c2:59:cc:62:16:1d: 4f:86:38:a9:93:db:0d:08:13:b6:47:6f:22:a5:00: e3:c4:a3:00:a8:c4:d6:41:d0:0e:13:57:20:fb:b5: 43:92:0d:82:fd:28:1f:50:a6:f6:05:69:71:08:f9: 63:b8:e0:be:91:5a:71:7a:b2:41:39:6f:e4:5e:f7: 82:5f:f8:2d:3f:61:a0:7f:6d:dd:c6:00:ee:4e:de: c6:ea:57:40:cc:f9:c1:b2:b1:5f:da:82:5d:1c:2a: a1:cc:ea:04:ca:23:49:aa:43:d8:56:61:72:de:f2: 98:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:2D:BE:91:47:00:19:9C:9E:CD:21:DD:D0:65:4A:44:A1:0C:94:98 X509v3 Authority Key Identifier: keyid:9F:9C:23:D2:73:F6:A9:9C:65:EF:BC:03:0D:2B:68:1E:42:32:91:67 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9144C70/82BC84EEAC6711ECB75CDA24C4F9AE02/n5wj0nP2qZxl77wDDStoHkIykWc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n5wj0nP2qZxl77wDDStoHkIykWc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9144C70/82BC84EEAC6711ECB75CDA24C4F9AE02/n5wj0nP2qZxl77wDDStoHkIykWc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 63:57:0c:2d:d1:df:f1:47:3d:2f:64:b9:d5:63:bd:62:b3:36: 4c:eb:4d:2c:44:0c:5a:a7:7e:6a:a5:12:c0:4e:e1:b1:b9:c0: 0a:4c:88:21:62:28:d5:28:07:31:ca:8e:01:e8:ae:6a:59:04: ae:4d:9a:14:e6:77:c0:51:01:62:c0:5f:fa:56:ff:cc:9a:0f: bb:2a:e3:e7:d0:87:31:de:ca:30:98:65:b7:92:c6:93:d7:8e: 33:b9:d2:f0:34:4d:ba:c0:5d:22:65:01:be:88:c2:5f:35:8e: b5:47:e3:d5:41:4e:a2:e2:af:fe:6d:f1:1a:3a:d3:5a:d1:83: 12:1d:0d:b1:86:9d:f0:1f:9f:3b:55:44:60:f4:09:9e:6a:56: 13:e5:d6:f9:90:82:f2:db:d1:09:80:b1:8a:f1:9f:d3:6d:84: 03:e0:f1:94:24:d1:3d:38:b8:20:b0:ce:33:4b:19:5a:22:b3: 72:67:78:f3:8e:e8:a9:fa:b6:da:c2:66:2e:c4:15:a3:54:f9: 1f:bf:df:b3:d1:fd:ca:8f:12:e2:89:b5:02:5b:b9:4a:82:cb: 5c:1b:7f:4b:48:6d:47:f0:97:7f:d8:7b:5c:f9:dc:df:75:19: 37:18:6a:a2:c8:45:f7:4d:b3:cf:db:b3:30:e8:77:c8:64:11: d9:7f:c3:ac -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA3AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDRDNzAxMTAvBgNVBAUTKDlGOUMyM0QyNzNGNkE5OUM2NUVGQkMwMzBEMkI2ODFF NDIzMjkxNjcwHhcNMjUwNDI1MDA0NDE2WhcNMjUwNTAyMDA0NDE2WjAYMRYwFAYD VQQDEw02ODBhZGFlMC1kYjU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmG0szh4EAMlIZNz/wyG9Iydg3H+k5hOgFjz3Vs2CAOqfMau4yTaS6yHeabmL LYqTr94zb1oD19quYYfaCtUE6dASpE8HTyR/35ghayGWT+widYWTxA2LhVy6ujhI SSHV5h/lQ0B8WrJTN/VrUnl71x6PpOYyKVaMPAIz5gNjdGN8vZ2OPHIVluIiKD93 g9fCWcxiFh1Phjipk9sNCBO2R28ipQDjxKMAqMTWQdAOE1cg+7VDkg2C/SgfUKb2 BWlxCPljuOC+kVpxerJBOW/kXveCX/gtP2Ggf23dxgDuTt7G6ldAzPnBsrFf2oJd HCqhzOoEyiNJqkPYVmFy3vKYQQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCwtvpFH ABmcns0h3dBlSkShDJSYMB8GA1UdIwQYMBaAFJ+cI9Jz9qmcZe+8Aw0raB5CMpFn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NEM3MC84MkJDODRFRUFD NjcxMUVDQjc1Q0RBMjRDNEY5QUUwMi9uNXdqMG5QMnFaeGw3N3dERFN0b0hrSXlr V2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL241d2owblAycVp4bDc3d0REU3RvSGtJeWtXYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NEM3MC84MkJDODRFRUFDNjcxMUVDQjc1Q0RBMjRDNEY5QUUwMi9uNXdqMG5QMnFa eGw3N3dERFN0b0hrSXlrV2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBjVwwt0d/xRz0vZLnVY71iszZM600sRAxap35qpRLATuGxucAKTIgh YijVKAcxyo4B6K5qWQSuTZoU5nfAUQFiwF/6Vv/Mmg+7KuPn0Icx3sowmGW3ksaT 144zudLwNE26wF0iZQG+iMJfNY61R+PVQU6i4q/+bfEaOtNa0YMSHQ2xhp3wH587 VURg9AmealYT5db5kILy29EJgLGK8Z/TbYQD4PGUJNE9OLggsM4zSxlaIrNyZ3jz juip+rbawmYuxBWjVPkfv9+z0f3KjxLiibUCW7lKgstcG39LSG1H8Jd/2Htc+dzf dRk3GGqiyEX3TbPP27Mw6HfIZBHZf8Os -----END CERTIFICATE-----Generated at Sat Apr 26 04:29:57 2025 by rpki-client