$ rpki-client -vvf rpki.apnic.net/member_repository/A9163EEB/6DE427681DA411E28081719A08B02CD2/NOt2jjwYUO8RSYszIMrNGyYdWSk.mft File: NOt2jjwYUO8RSYszIMrNGyYdWSk.mft (raw, json) Hash identifier: boSQZEvd2tyF1lgzmLu39aJeefqcFNWCAnws88M87Q0= Subject key identifier: 2A:9E:A5:CD:D2:D9:6E:A3:52:1B:77:FC:30:CD:3E:06:50:65:D4:B1 Authority key identifier: 34:EB:76:8E:3C:18:50:EF:11:49:8B:33:20:CA:CD:1B:26:1D:59:29 Certificate issuer: /CN=A9163EEB/serialNumber=34EB768E3C1850EF11498B3320CACD1B261D5929 Certificate serial: 3470 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NOt2jjwYUO8RSYszIMrNGyYdWSk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9163EEB/6DE427681DA411E28081719A08B02CD2/NOt2jjwYUO8RSYszIMrNGyYdWSk.mft Manifest number: 346E Signing time: Thu 24 Apr 2025 15:09:29 +0000 Manifest this update: Thu 24 Apr 2025 15:09:29 +0000 Manifest next update: Thu 01 May 2025 15:09:29 +0000 Files and hashes: 1: NOt2jjwYUO8RSYszIMrNGyYdWSk.crl (hash: P3s6mVmmej54vOGwxeKEEK3TbbaE6i9NUHKNRfDOYr0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9163EEB/6DE427681DA411E28081719A08B02CD2/NOt2jjwYUO8RSYszIMrNGyYdWSk.crl rsync://rpki.apnic.net/member_repository/A9163EEB/6DE427681DA411E28081719A08B02CD2/NOt2jjwYUO8RSYszIMrNGyYdWSk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NOt2jjwYUO8RSYszIMrNGyYdWSk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 15:09:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13424 (0x3470) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9163EEB, serialNumber=34EB768E3C1850EF11498B3320CACD1B261D5929 Validity Not Before: Apr 24 15:09:29 2025 GMT Not After : May 1 15:09:29 2025 GMT Subject: CN=680a5429-f86a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:1b:eb:54:3b:e5:ea:6d:bf:a9:44:0d:5e:80: 33:15:65:58:75:15:b5:62:08:b6:b7:d6:25:5f:56: e0:e1:87:16:7d:d0:35:db:95:ba:ef:96:3e:09:70: 39:b7:2e:b6:19:6d:f6:b1:25:1d:8b:a7:9d:1b:87: 03:80:dc:f8:dc:69:a7:d4:ef:9c:f9:41:dd:ee:73: 6c:2d:0f:38:ab:87:13:ee:18:66:2b:37:0b:59:fc: 86:73:be:06:69:dd:8e:b2:6e:1d:d3:db:57:a6:7b: 47:e3:d8:75:0a:56:d4:92:ad:2b:3e:a3:a4:b8:d2: 64:d1:f6:37:ca:94:01:3b:63:6a:13:d9:0a:41:2f: 51:c0:64:8a:8e:a6:92:68:d1:92:67:94:13:8a:6f: 66:aa:68:cb:6a:80:c9:89:dd:a9:fa:43:d1:b5:40: cf:7d:e1:13:6c:4a:66:09:65:0e:07:1d:79:01:44: 51:40:f8:8a:c2:fa:c5:0b:46:d9:f1:3e:24:0f:d8: 65:64:2f:53:3e:c7:bd:3b:d8:b2:ef:75:99:ff:7f: d5:ea:ac:85:b8:5a:12:65:5b:0d:97:46:09:c0:a3: 6b:bb:7b:58:a6:38:4a:e0:32:da:c4:c9:28:06:7f: 64:7a:2d:de:e4:82:5b:c5:3d:95:0f:e1:57:92:ad: 5e:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:9E:A5:CD:D2:D9:6E:A3:52:1B:77:FC:30:CD:3E:06:50:65:D4:B1 X509v3 Authority Key Identifier: keyid:34:EB:76:8E:3C:18:50:EF:11:49:8B:33:20:CA:CD:1B:26:1D:59:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9163EEB/6DE427681DA411E28081719A08B02CD2/NOt2jjwYUO8RSYszIMrNGyYdWSk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NOt2jjwYUO8RSYszIMrNGyYdWSk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9163EEB/6DE427681DA411E28081719A08B02CD2/NOt2jjwYUO8RSYszIMrNGyYdWSk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 66:cb:1e:d2:40:13:13:ac:bd:75:89:d1:41:59:5e:8a:f1:ff: e4:a4:b6:25:a6:10:88:47:a5:9b:2e:f8:42:58:5f:6c:7c:76: 41:b4:ff:b0:81:28:d8:04:e8:98:b2:aa:19:31:90:fb:3e:40: 34:aa:38:14:0b:68:65:86:e0:0d:94:44:6a:d2:ab:e3:7e:95: 1b:3b:af:ac:5b:ca:88:46:db:aa:6c:e9:92:47:ae:b5:3e:91: 0d:76:6b:80:a0:84:f9:f8:23:36:91:a9:6b:a8:25:88:1b:b2: e9:7e:68:98:7f:1e:3c:5b:9f:75:bf:67:7c:0b:56:2b:0a:ba: 12:1d:6d:0c:8f:c4:69:f8:68:7f:87:ac:b9:7d:ae:7d:1e:ef: d9:dd:cd:b2:36:a2:3d:65:bf:8d:db:94:ff:82:4f:cf:78:02: 30:3c:b5:bd:66:86:f3:59:f6:ce:1a:a0:33:84:23:6c:8c:d9: 12:27:e2:2a:05:46:33:59:93:45:fe:4a:0e:43:f7:b5:81:dd: 31:05:af:f1:e9:51:cb:7e:d6:23:45:08:13:3f:5b:7f:d7:e1: 25:01:d9:4d:9b:6f:dc:92:c5:de:8c:33:c0:b5:2d:e1:dc:65: ae:1d:cc:cb:a3:5a:44:84:db:2a:d8:c0:81:3b:bf:7d:00:9e: 7d:b3:fe:7b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNHAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjNFRUIxMTAvBgNVBAUTKDM0RUI3NjhFM0MxODUwRUYxMTQ5OEIzMzIwQ0FDRDFC MjYxRDU5MjkwHhcNMjUwNDI0MTUwOTI5WhcNMjUwNTAxMTUwOTI5WjAYMRYwFAYD VQQDEw02ODBhNTQyOS1mODZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnhvrVDvl6m2/qUQNXoAzFWVYdRW1Ygi2t9YlX1bg4YcWfdA125W675Y+CXA5 ty62GW32sSUdi6edG4cDgNz43Gmn1O+c+UHd7nNsLQ84q4cT7hhmKzcLWfyGc74G ad2Osm4d09tXpntH49h1ClbUkq0rPqOkuNJk0fY3ypQBO2NqE9kKQS9RwGSKjqaS aNGSZ5QTim9mqmjLaoDJid2p+kPRtUDPfeETbEpmCWUOBx15AURRQPiKwvrFC0bZ 8T4kD9hlZC9TPse9O9iy73WZ/3/V6qyFuFoSZVsNl0YJwKNru3tYpjhK4DLaxMko Bn9kei3e5IJbxT2VD+FXkq1eGwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCqepc3S 2W6jUht3/DDNPgZQZdSxMB8GA1UdIwQYMBaAFDTrdo48GFDvEUmLMyDKzRsmHVkp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2M0VFQi82REU0Mjc2ODFE QTQxMUUyODA4MTcxOUEwOEIwMkNEMi9OT3Qyamp3WVVPOFJTWXN6SU1yTkd5WWRX U2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05PdDJqandZVU84UlNZc3pJTXJOR3lZZFdTay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 M0VFQi82REU0Mjc2ODFEQTQxMUUyODA4MTcxOUEwOEIwMkNEMi9OT3Qyamp3WVVP OFJTWXN6SU1yTkd5WWRXU2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBmyx7SQBMTrL11idFBWV6K8f/kpLYlphCIR6WbLvhCWF9sfHZBtP+w gSjYBOiYsqoZMZD7PkA0qjgUC2hlhuANlERq0qvjfpUbO6+sW8qIRtuqbOmSR661 PpENdmuAoIT5+CM2kalrqCWIG7LpfmiYfx48W591v2d8C1YrCroSHW0Mj8Rp+Gh/ h6y5fa59Hu/Z3c2yNqI9Zb+N25T/gk/PeAIwPLW9ZobzWfbOGqAzhCNsjNkSJ+Iq BUYzWZNF/koOQ/e1gd0xBa/x6VHLftYjRQgTP1t/1+ElAdlNm2/cksXejDPAtS3h 3GWuHczLo1pEhNsq2MCBO799AJ59s/57 -----END CERTIFICATE-----Generated at Sat Apr 26 17:22:19 2025 by rpki-client