$ rpki-client -vvf rpki.apnic.net/member_repository/A914C33A/1D2BD03E2DDB11E49AF61530C4F9AE02/nIFHHxiq7s35RafJF_2KiYXXw6w.mft File: nIFHHxiq7s35RafJF_2KiYXXw6w.mft (raw, json) Hash identifier: M2jfhtQ4LarcB/nY3mYTsLwepPTTywNIPo7RBbWqDHU= Subject key identifier: BA:E3:9F:55:5B:A8:58:50:F6:EE:E0:89:23:40:DF:F0:53:A4:CC:92 Authority key identifier: 9C:81:47:1F:18:AA:EE:CD:F9:45:A7:C9:17:FD:8A:89:85:D7:C3:AC Certificate issuer: /CN=A914C33A/serialNumber=9C81471F18AAEECDF945A7C917FD8A8985D7C3AC Certificate serial: 2A7A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nIFHHxiq7s35RafJF_2KiYXXw6w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914C33A/1D2BD03E2DDB11E49AF61530C4F9AE02/nIFHHxiq7s35RafJF_2KiYXXw6w.mft Manifest number: 2A3C Signing time: Thu 24 Apr 2025 15:34:53 +0000 Manifest this update: Thu 24 Apr 2025 15:34:52 +0000 Manifest next update: Thu 01 May 2025 15:34:52 +0000 Files and hashes: 1: nIFHHxiq7s35RafJF_2KiYXXw6w.crl (hash: 6h8m7kGvEBp7clJDI5xa/MyszDdq2u6n2OsTMbI0tsY=) 2: FB405D86900E11EAA43BB21FC4F9AE02.roa (hash: xBHGq+I+gC6mBEO7iAqcoK3D8WpSvv5eSxXQn/j0Q60=) 3: 3118E43E966B11EAAA23047CC4F9AE02.roa (hash: gq6V0/TIcAAKvh2pY9bQTg3IwnYpN56MDdlGTWJZ3cM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914C33A/1D2BD03E2DDB11E49AF61530C4F9AE02/nIFHHxiq7s35RafJF_2KiYXXw6w.crl rsync://rpki.apnic.net/member_repository/A914C33A/1D2BD03E2DDB11E49AF61530C4F9AE02/nIFHHxiq7s35RafJF_2KiYXXw6w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nIFHHxiq7s35RafJF_2KiYXXw6w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 15:34:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10874 (0x2a7a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914C33A, serialNumber=9C81471F18AAEECDF945A7C917FD8A8985D7C3AC Validity Not Before: Apr 24 15:34:52 2025 GMT Not After : May 1 15:34:52 2025 GMT Subject: CN=680a5a1c-3caf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:e9:b6:a5:81:f9:77:c3:4f:77:0f:84:5e:5b: 8e:a3:9e:49:ec:83:3b:5a:44:85:fb:aa:1e:70:ad: ec:c2:7a:c2:d9:cf:19:c9:4f:cd:fb:e4:56:cf:7e: a5:06:62:08:15:13:64:71:91:db:ab:e1:5d:75:93: 55:29:79:0d:9a:15:10:70:0b:f7:97:ba:80:b7:20: 24:7f:e1:6e:ca:e7:bf:50:f7:a2:89:e6:9b:df:1d: 83:99:02:e1:45:17:e2:e4:1d:e7:78:61:ff:47:0a: f1:22:51:8e:ac:2e:20:b2:01:5a:51:49:a8:3f:26: 70:d4:80:6d:51:6b:48:44:d6:b6:41:d1:92:5a:31: d8:d7:e6:be:a3:22:c4:8d:49:8a:15:9d:77:c8:04: 1b:50:38:87:bb:e4:1a:ff:83:02:9f:e2:77:f8:32: 79:91:2a:ed:be:7e:b2:7f:3d:96:90:ba:87:6a:1e: e5:a8:e0:91:69:bc:f1:53:ca:11:79:f9:14:3c:68: 3d:fa:a6:4d:f0:2b:48:bd:dc:8e:fd:de:f5:57:5e: 02:64:3d:8f:0f:ca:58:cd:af:a3:ed:e6:23:0c:84: aa:a9:f6:f3:ba:6b:46:68:af:e5:d9:3a:d2:d6:3d: 10:35:12:cd:e6:1a:8d:e6:04:2f:cc:70:3d:48:79: c1:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:E3:9F:55:5B:A8:58:50:F6:EE:E0:89:23:40:DF:F0:53:A4:CC:92 X509v3 Authority Key Identifier: keyid:9C:81:47:1F:18:AA:EE:CD:F9:45:A7:C9:17:FD:8A:89:85:D7:C3:AC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914C33A/1D2BD03E2DDB11E49AF61530C4F9AE02/nIFHHxiq7s35RafJF_2KiYXXw6w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nIFHHxiq7s35RafJF_2KiYXXw6w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914C33A/1D2BD03E2DDB11E49AF61530C4F9AE02/nIFHHxiq7s35RafJF_2KiYXXw6w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 44:bf:36:d0:fe:80:72:f2:fe:44:e3:64:d3:42:f9:2c:18:68: 15:5e:d4:8a:67:02:1a:a5:a5:09:ca:64:65:ba:d7:8f:75:46: 15:f5:ec:2c:c2:65:1e:b7:e4:2b:cd:7a:27:b0:bd:ae:e4:4c: 73:b3:d8:02:a3:cd:9b:ce:62:30:2d:0e:c0:6f:20:ca:91:d0: d8:bd:a0:d8:10:e5:d4:8e:73:fa:c5:1a:56:fd:63:32:e1:18: 76:e4:56:29:7f:7e:25:f1:d2:d9:84:c4:ce:fc:64:d2:7e:b1: 83:d3:4a:12:a9:ca:bf:bd:88:f7:bd:16:4d:bb:51:c7:da:76: 2d:6f:f2:ee:b6:89:64:be:da:69:b2:48:89:99:c8:7d:e5:de: f5:76:3d:b1:8f:8d:03:8f:9e:7d:51:a3:8c:62:97:2c:b6:ad: 31:31:78:fe:71:90:b9:a0:36:17:11:de:c6:7d:36:c0:8c:8d: 00:37:de:b5:5e:14:4b:93:11:ad:0c:e4:ae:c4:14:f8:bd:21: 64:5c:f2:14:e0:28:44:1f:22:9e:05:b0:56:35:aa:08:3c:c3: 5c:3f:cf:22:62:9d:3a:0b:3c:75:6a:1d:d8:57:f5:a5:f4:eb: 77:32:b9:7e:82:d2:15:38:ae:ca:c6:e7:2b:80:c1:7a:d3:43: b6:1e:51:7d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICKnowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEMzM0ExMTAvBgNVBAUTKDlDODE0NzFGMThBQUVFQ0RGOTQ1QTdDOTE3RkQ4QTg5 ODVEN0MzQUMwHhcNMjUwNDI0MTUzNDUyWhcNMjUwNTAxMTUzNDUyWjAYMRYwFAYD VQQDEw02ODBhNWExYy0zY2FmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs+m2pYH5d8NPdw+EXluOo55J7IM7WkSF+6oecK3swnrC2c8ZyU/N++RWz36l BmIIFRNkcZHbq+FddZNVKXkNmhUQcAv3l7qAtyAkf+Fuyue/UPeiieab3x2DmQLh RRfi5B3neGH/RwrxIlGOrC4gsgFaUUmoPyZw1IBtUWtIRNa2QdGSWjHY1+a+oyLE jUmKFZ13yAQbUDiHu+Qa/4MCn+J3+DJ5kSrtvn6yfz2WkLqHah7lqOCRabzxU8oR efkUPGg9+qZN8CtIvdyO/d71V14CZD2PD8pYza+j7eYjDISqqfbzumtGaK/l2TrS 1j0QNRLN5hqN5gQvzHA9SHnBSwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLrjn1Vb qFhQ9u7giSNA3/BTpMySMB8GA1UdIwQYMBaAFJyBRx8Yqu7N+UWnyRf9iomF18Os MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QzMzQS8xRDJCRDAzRTJE REIxMUU0OUFGNjE1MzBDNEY5QUUwMi9uSUZISHhpcTdzMzVSYWZKRl8yS2lZWFh3 NncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25JRkhIeGlxN3MzNVJhZkpGXzJLaVlYWHc2dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QzMzQS8xRDJCRDAzRTJEREIxMUU0OUFGNjE1MzBDNEY5QUUwMi9uSUZISHhpcTdz MzVSYWZKRl8yS2lZWFh3NncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBEvzbQ/oBy8v5E42TTQvksGGgVXtSKZwIapaUJymRlutePdUYV9ews wmUet+QrzXonsL2u5Exzs9gCo82bzmIwLQ7AbyDKkdDYvaDYEOXUjnP6xRpW/WMy 4Rh25FYpf34l8dLZhMTO/GTSfrGD00oSqcq/vYj3vRZNu1HH2nYtb/Lutolkvtpp skiJmch95d71dj2xj40Dj559UaOMYpcstq0xMXj+cZC5oDYXEd7GfTbAjI0AN961 XhRLkxGtDOSuxBT4vSFkXPIU4ChEHyKeBbBWNaoIPMNcP88iYp06Czx1ah3YV/Wl 9Ot3Mrl+gtIVOK7KxucrgMF600O2HlF9 -----END CERTIFICATE-----Generated at Sat Apr 26 15:06:43 2025 by rpki-client