$ rpki-client -vvf rpki.apnic.net/member_repository/A9150A9C/2A29484CABA811EA95CE2C16C4F9AE02/Nn4fr3UsYx_EPYcgmCQOgDIVdcc.mft File: Nn4fr3UsYx_EPYcgmCQOgDIVdcc.mft (raw, json) Hash identifier: 8i0QJ/EuHWB+Lx8szwq+6i8/Fp8ZFewwF4iu4Iz14Hw= Subject key identifier: 60:13:BE:73:D2:2E:07:6F:B3:FC:2D:9C:8D:B9:40:23:F7:6A:4F:4B Authority key identifier: 36:7E:1F:AF:75:2C:63:1F:C4:3D:87:20:98:24:0E:80:32:15:75:C7 Certificate issuer: /CN=A9150A9C/serialNumber=367E1FAF752C631FC43D872098240E80321575C7 Certificate serial: 08E4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nn4fr3UsYx_EPYcgmCQOgDIVdcc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9150A9C/2A29484CABA811EA95CE2C16C4F9AE02/Nn4fr3UsYx_EPYcgmCQOgDIVdcc.mft Manifest number: 08DC Signing time: Thu 24 Apr 2025 20:18:08 +0000 Manifest this update: Thu 24 Apr 2025 20:18:07 +0000 Manifest next update: Thu 01 May 2025 20:18:07 +0000 Files and hashes: 1: Nn4fr3UsYx_EPYcgmCQOgDIVdcc.crl (hash: LveHRhzjvBDk3NIPB30HOFtKjggLBhm9zqMcPweFcrQ=) 2: E04ADD7CB2E511EAA94E5634C4F9AE02.roa (hash: SDDF+daD6uA45d2pVbzA/cw/2JyMm9s9TzTDlHyfXN0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9150A9C/2A29484CABA811EA95CE2C16C4F9AE02/Nn4fr3UsYx_EPYcgmCQOgDIVdcc.crl rsync://rpki.apnic.net/member_repository/A9150A9C/2A29484CABA811EA95CE2C16C4F9AE02/Nn4fr3UsYx_EPYcgmCQOgDIVdcc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nn4fr3UsYx_EPYcgmCQOgDIVdcc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 20:18:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2276 (0x8e4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9150A9C, serialNumber=367E1FAF752C631FC43D872098240E80321575C7 Validity Not Before: Apr 24 20:18:07 2025 GMT Not After : May 1 20:18:07 2025 GMT Subject: CN=680a9c7f-6583 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:bf:6a:42:f1:0b:80:fb:82:fd:a2:d9:cf:73: a1:28:70:59:4f:2e:23:b6:69:ad:01:c1:7f:e3:d3: 75:06:3c:6e:6d:c8:d6:0d:eb:c4:28:cc:67:24:78: cd:4a:a4:89:8c:26:0e:83:78:69:0f:14:15:53:7f: 2d:eb:b4:8f:21:3a:f4:b8:a9:da:fa:1d:02:e1:2c: 38:29:2e:55:30:11:df:e4:60:dc:69:99:58:3a:2d: aa:58:db:74:8d:5f:54:40:30:20:65:0a:a7:04:89: 85:3a:16:f7:b0:7e:34:9f:f9:1b:ce:0d:63:c9:0f: ed:5a:c9:f3:b4:7a:51:d7:56:b6:9d:10:02:33:b6: e0:a6:ff:4e:22:07:1d:b0:ee:1e:22:03:04:c6:a6: 6d:47:4f:0b:e5:b2:04:79:bb:48:7b:c1:38:a4:bf: 28:66:ba:c0:c0:59:7c:7a:84:5a:73:e7:25:94:8a: 76:50:f1:60:33:f4:3b:3d:ca:17:de:7c:34:af:62: e9:51:8e:5f:4e:78:c0:23:90:37:a8:24:84:8d:55: 8e:c6:f0:99:67:e4:9f:13:a6:c9:02:2e:e2:43:12: 9b:d4:80:fd:ee:6c:12:ec:c4:c2:20:55:f8:9d:22: e5:75:21:61:e5:18:67:0c:93:70:86:dc:46:a5:c0: bf:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:13:BE:73:D2:2E:07:6F:B3:FC:2D:9C:8D:B9:40:23:F7:6A:4F:4B X509v3 Authority Key Identifier: keyid:36:7E:1F:AF:75:2C:63:1F:C4:3D:87:20:98:24:0E:80:32:15:75:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9150A9C/2A29484CABA811EA95CE2C16C4F9AE02/Nn4fr3UsYx_EPYcgmCQOgDIVdcc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nn4fr3UsYx_EPYcgmCQOgDIVdcc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9150A9C/2A29484CABA811EA95CE2C16C4F9AE02/Nn4fr3UsYx_EPYcgmCQOgDIVdcc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6f:f5:dc:4a:8c:14:2c:2f:c4:96:5b:d1:cd:9e:da:65:e9:92: 36:fc:fa:4b:36:a5:5d:df:87:6c:0c:81:80:4e:2d:0c:9f:e5: ca:76:30:7d:63:39:88:ed:50:0b:7e:3e:f9:83:f9:e5:39:ad: 74:77:99:56:9f:c2:92:12:6e:d2:68:89:88:d6:bf:31:ae:2d: 68:fe:e0:bc:6b:d5:9c:52:67:83:af:bc:25:03:03:a5:30:ad: ec:a0:dd:47:87:73:fc:cc:4f:9f:3c:bf:4b:4c:a2:f4:63:5d: d8:74:be:15:45:f7:f8:ee:e5:61:e4:da:2e:1c:cc:6f:44:c7: 88:35:55:62:9d:9c:48:14:bd:9b:9a:64:b6:c7:4d:8e:aa:4b: e2:53:9a:d0:d5:fc:f7:68:4a:bb:65:99:91:fe:45:d0:ed:51: a1:3b:29:d2:c5:c9:7d:de:1f:e1:0a:93:07:81:95:85:93:28: 7f:4d:1c:35:11:de:ae:5c:85:b4:75:58:2d:f4:14:47:6a:e7: b5:11:1d:3c:9a:94:80:94:00:0e:db:2f:b3:ed:1a:60:0e:33: a5:27:2b:e9:4c:25:a0:7f:d3:bf:3c:27:cd:d0:e7:91:33:99: fe:d5:65:28:21:52:4a:4c:cc:03:f0:90:bc:5f:1e:30:93:7c: 1d:00:69:f2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCOQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTBBOUMxMTAvBgNVBAUTKDM2N0UxRkFGNzUyQzYzMUZDNDNEODcyMDk4MjQwRTgw MzIxNTc1QzcwHhcNMjUwNDI0MjAxODA3WhcNMjUwNTAxMjAxODA3WjAYMRYwFAYD VQQDEw02ODBhOWM3Zi02NTgzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArL9qQvELgPuC/aLZz3OhKHBZTy4jtmmtAcF/49N1BjxubcjWDevEKMxnJHjN SqSJjCYOg3hpDxQVU38t67SPITr0uKna+h0C4Sw4KS5VMBHf5GDcaZlYOi2qWNt0 jV9UQDAgZQqnBImFOhb3sH40n/kbzg1jyQ/tWsnztHpR11a2nRACM7bgpv9OIgcd sO4eIgMExqZtR08L5bIEebtIe8E4pL8oZrrAwFl8eoRac+cllIp2UPFgM/Q7PcoX 3nw0r2LpUY5fTnjAI5A3qCSEjVWOxvCZZ+SfE6bJAi7iQxKb1ID97mwS7MTCIFX4 nSLldSFh5RhnDJNwhtxGpcC/vQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGATvnPS Lgdvs/wtnI25QCP3ak9LMB8GA1UdIwQYMBaAFDZ+H691LGMfxD2HIJgkDoAyFXXH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MEE5Qy8yQTI5NDg0Q0FC QTgxMUVBOTVDRTJDMTZDNEY5QUUwMi9ObjRmcjNVc1l4X0VQWWNnbUNRT2dESVZk Y2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05uNGZyM1VzWXhfRVBZY2dtQ1FPZ0RJVmRjYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MEE5Qy8yQTI5NDg0Q0FCQTgxMUVBOTVDRTJDMTZDNEY5QUUwMi9ObjRmcjNVc1l4 X0VQWWNnbUNRT2dESVZkY2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBv9dxKjBQsL8SWW9HNntpl6ZI2/PpLNqVd34dsDIGATi0Mn+XKdjB9 YzmI7VALfj75g/nlOa10d5lWn8KSEm7SaImI1r8xri1o/uC8a9WcUmeDr7wlAwOl MK3soN1Hh3P8zE+fPL9LTKL0Y13YdL4VRff47uVh5NouHMxvRMeINVVinZxIFL2b mmS2x02OqkviU5rQ1fz3aEq7ZZmR/kXQ7VGhOynSxcl93h/hCpMHgZWFkyh/TRw1 Ed6uXIW0dVgt9BRHaue1ER08mpSAlAAO2y+z7RpgDjOlJyvpTCWgf9O/PCfN0OeR M5n+1WUoIVJKTMwD8JC8Xx4wk3wdAGny -----END CERTIFICATE-----Generated at Sat Apr 26 05:15:12 2025 by rpki-client