$ rpki-client -vvf rpki.apnic.net/member_repository/A916DB8E/FF80276C3BCC11EC8A6BCD7EC4F9AE02/nePaegrGlA0yq7nP_LBh8q7lZh0.mft File: nePaegrGlA0yq7nP_LBh8q7lZh0.mft (raw, json) Hash identifier: 3o4n1h5+FGeyEb3lLZ6/CcT741CFm0/k22+z8lwB4PI= Subject key identifier: 82:3F:8F:D3:0E:92:C9:4B:9F:4A:7A:D9:CB:DA:25:45:50:99:F4:F8 Authority key identifier: 9D:E3:DA:7A:0A:C6:94:0D:32:AB:B9:CF:FC:B0:61:F2:AE:E5:66:1D Certificate issuer: /CN=A916DB8E/serialNumber=9DE3DA7A0AC6940D32ABB9CFFCB061F2AEE5661D Certificate serial: 0497 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nePaegrGlA0yq7nP_LBh8q7lZh0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916DB8E/FF80276C3BCC11EC8A6BCD7EC4F9AE02/nePaegrGlA0yq7nP_LBh8q7lZh0.mft Manifest number: 0481 Signing time: Thu 24 Apr 2025 23:50:52 +0000 Manifest this update: Thu 24 Apr 2025 23:50:52 +0000 Manifest next update: Thu 01 May 2025 23:50:52 +0000 Files and hashes: 1: nePaegrGlA0yq7nP_LBh8q7lZh0.crl (hash: LUNWJA0ICkvOtOLl+hjXSD4nFY0qCCNxxKnVPhcRnqk=) 2: 4AD39148A91511ED9E2AC948C4F9AE02.roa (hash: lV86FgcjhujyEw+tqQZA5LVzdbV5o2JfVCvKZDvrKH8=) 3: 0FB7DCDA321D11EF81C6FB83C4F9AE02.roa (hash: YNerQgMu/lgswTLCzZkkLpc3iA2UGIEgvOOW994Z9L0=) 4: 4A2FAA9CA91511ED9E2AC948C4F9AE02.roa (hash: 4yfWRgYWyN+Mv4gIICmnpB2EvTMNs4jSY+Jh+PPBGG0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916DB8E/FF80276C3BCC11EC8A6BCD7EC4F9AE02/nePaegrGlA0yq7nP_LBh8q7lZh0.crl rsync://rpki.apnic.net/member_repository/A916DB8E/FF80276C3BCC11EC8A6BCD7EC4F9AE02/nePaegrGlA0yq7nP_LBh8q7lZh0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nePaegrGlA0yq7nP_LBh8q7lZh0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 23:50:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1175 (0x497) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916DB8E, serialNumber=9DE3DA7A0AC6940D32ABB9CFFCB061F2AEE5661D Validity Not Before: Apr 24 23:50:52 2025 GMT Not After : May 1 23:50:52 2025 GMT Subject: CN=680ace5c-146d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:a2:63:68:5f:ac:83:97:86:23:89:47:63:8a: fd:7b:be:8f:7d:62:1c:96:65:7c:22:90:01:4f:3d: 88:de:d1:1b:71:37:43:4d:e9:02:39:09:5e:e2:81: 17:3d:6c:75:35:4f:0d:24:e9:4c:60:20:66:75:c9: 53:1e:2d:b1:a4:bb:f3:16:be:96:32:a8:0e:f4:dc: 12:13:be:ea:ba:5b:1e:58:ba:b8:48:02:91:9a:fc: 1e:c2:c3:e3:41:da:71:36:38:65:21:bb:00:85:37: f2:3e:7e:94:3b:3f:72:d4:87:7d:9e:9f:76:36:d2: 14:24:09:b7:85:9e:5d:6c:90:1a:93:a5:ce:81:0b: 5a:a3:25:d8:76:e8:4d:c0:ba:ba:99:02:e9:b9:c3: 18:41:1b:e7:ca:0c:c5:6e:01:42:17:56:f3:a7:31: 78:0e:af:7c:cf:e8:82:f2:8c:96:b3:2c:53:de:20: e5:28:df:12:5c:6a:d5:95:40:14:2c:19:01:0c:cb: 35:d2:4c:02:92:0b:ef:9d:f3:7f:6a:87:f7:e0:1a: 73:6a:78:48:57:f9:94:af:27:89:de:da:de:5e:c4: 8f:5f:22:56:81:68:83:fb:6a:c4:06:3e:35:40:17: 66:ca:9f:f8:f1:e1:91:b6:78:d8:52:01:84:e6:d8: fa:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:3F:8F:D3:0E:92:C9:4B:9F:4A:7A:D9:CB:DA:25:45:50:99:F4:F8 X509v3 Authority Key Identifier: keyid:9D:E3:DA:7A:0A:C6:94:0D:32:AB:B9:CF:FC:B0:61:F2:AE:E5:66:1D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916DB8E/FF80276C3BCC11EC8A6BCD7EC4F9AE02/nePaegrGlA0yq7nP_LBh8q7lZh0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nePaegrGlA0yq7nP_LBh8q7lZh0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916DB8E/FF80276C3BCC11EC8A6BCD7EC4F9AE02/nePaegrGlA0yq7nP_LBh8q7lZh0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 73:72:0c:f6:e6:7b:d9:85:a1:53:fa:24:5b:1d:1b:32:2c:9b: 46:94:71:ab:81:b6:36:32:80:cb:91:1a:bf:17:9d:90:fd:af: ef:1e:c6:3a:0b:16:dc:56:0d:58:1a:c1:14:c5:29:b5:11:33: 3b:f1:85:81:65:99:de:a3:e4:7f:a6:f4:a1:dc:18:31:8b:e9: 9f:40:98:8d:f3:86:0d:fe:5f:ce:0d:70:17:1d:c6:dc:42:3f: 9c:f7:f5:fe:0d:9b:23:b6:79:db:e5:d6:1f:46:c9:a0:04:53: 1c:1e:20:f3:80:79:68:2b:9d:84:63:20:85:a4:3c:ef:1a:fc: 69:35:54:5e:69:d5:f0:97:6e:e3:9b:50:fd:fe:3c:ff:fa:21: ed:00:c4:87:b0:b4:ee:3a:cc:eb:f8:86:95:ed:e8:67:5f:95: 82:1f:81:5a:16:4e:e2:61:ca:9e:b7:aa:78:6b:73:c5:59:d5: a5:a7:5e:6b:cc:7e:55:f3:64:c3:e1:07:fd:b6:59:bd:98:8c: 57:f7:68:03:a6:4c:6b:e9:89:d6:8a:2a:3b:b7:45:44:e4:64: d1:a4:03:30:97:55:38:af:5e:e5:28:6f:8c:3e:6a:e0:a0:a9: dc:99:36:fe:e7:29:c7:0a:00:8f:95:43:0d:65:70:19:c4:16: 2d:9f:70:a9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBJcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkRCOEUxMTAvBgNVBAUTKDlERTNEQTdBMEFDNjk0MEQzMkFCQjlDRkZDQjA2MUYy QUVFNTY2MUQwHhcNMjUwNDI0MjM1MDUyWhcNMjUwNTAxMjM1MDUyWjAYMRYwFAYD VQQDEw02ODBhY2U1Yy0xNDZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3KJjaF+sg5eGI4lHY4r9e76PfWIclmV8IpABTz2I3tEbcTdDTekCOQle4oEX PWx1NU8NJOlMYCBmdclTHi2xpLvzFr6WMqgO9NwSE77qulseWLq4SAKRmvwewsPj QdpxNjhlIbsAhTfyPn6UOz9y1Id9np92NtIUJAm3hZ5dbJAak6XOgQtaoyXYduhN wLq6mQLpucMYQRvnygzFbgFCF1bzpzF4Dq98z+iC8oyWsyxT3iDlKN8SXGrVlUAU LBkBDMs10kwCkgvvnfN/aof34BpzanhIV/mUryeJ3treXsSPXyJWgWiD+2rEBj41 QBdmyp/48eGRtnjYUgGE5tj6BwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFII/j9MO kslLn0p62cvaJUVQmfT4MB8GA1UdIwQYMBaAFJ3j2noKxpQNMqu5z/ywYfKu5WYd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2REI4RS9GRjgwMjc2QzNC Q0MxMUVDOEE2QkNEN0VDNEY5QUUwMi9uZVBhZWdyR2xBMHlxN25QX0xCaDhxN2xa aDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25lUGFlZ3JHbEEweXE3blBfTEJoOHE3bFpoMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 REI4RS9GRjgwMjc2QzNCQ0MxMUVDOEE2QkNEN0VDNEY5QUUwMi9uZVBhZWdyR2xB MHlxN25QX0xCaDhxN2xaaDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBzcgz25nvZhaFT+iRbHRsyLJtGlHGrgbY2MoDLkRq/F52Q/a/vHsY6 CxbcVg1YGsEUxSm1ETM78YWBZZneo+R/pvSh3Bgxi+mfQJiN84YN/l/ODXAXHcbc Qj+c9/X+DZsjtnnb5dYfRsmgBFMcHiDzgHloK52EYyCFpDzvGvxpNVReadXwl27j m1D9/jz/+iHtAMSHsLTuOszr+IaV7ehnX5WCH4FaFk7iYcqet6p4a3PFWdWlp15r zH5V82TD4Qf9tlm9mIxX92gDpkxr6YnWiio7t0VE5GTRpAMwl1U4r17lKG+MPmrg oKncmTb+5ynHCgCPlUMNZXAZxBYtn3Cp -----END CERTIFICATE-----Generated at Sat Apr 26 12:24:18 2025 by rpki-client