$ rpki-client -vvf rpki.apnic.net/member_repository/A9178297/4B1F748487B411EB8EF3321AC4F9AE02/nhuiMnN6PQDX-qC03Dg02arwbfg.mft File: nhuiMnN6PQDX-qC03Dg02arwbfg.mft (raw, json) Hash identifier: XY7/qpl1HfC5Do1/lEXzHcg4p7OhBBR07ywSsCHvWc0= Subject key identifier: 41:BB:80:78:60:DE:A1:E4:4A:A1:69:AB:6A:37:C3:E6:7B:7E:EF:18 Authority key identifier: 9E:1B:A2:32:73:7A:3D:00:D7:FA:A0:B4:DC:38:34:D9:AA:F0:6D:F8 Certificate issuer: /CN=A9178297/serialNumber=9E1BA232737A3D00D7FAA0B4DC3834D9AAF06DF8 Certificate serial: 065F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nhuiMnN6PQDX-qC03Dg02arwbfg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9178297/4B1F748487B411EB8EF3321AC4F9AE02/nhuiMnN6PQDX-qC03Dg02arwbfg.mft Manifest number: 064E Signing time: Thu 24 Apr 2025 22:22:24 +0000 Manifest this update: Thu 24 Apr 2025 22:22:24 +0000 Manifest next update: Thu 01 May 2025 22:22:24 +0000 Files and hashes: 1: nhuiMnN6PQDX-qC03Dg02arwbfg.crl (hash: X7qRlqkyLCWOglbZPCMktwsPumH9noRCpIxpUSJ7MGU=) 2: 3B3D9AA4162211F0AE684383C4F9AE02.roa (hash: XamxWQNFXzVAky34dKuvGM9L/Xfu1Wl8RSwCxVZ6CUg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9178297/4B1F748487B411EB8EF3321AC4F9AE02/nhuiMnN6PQDX-qC03Dg02arwbfg.crl rsync://rpki.apnic.net/member_repository/A9178297/4B1F748487B411EB8EF3321AC4F9AE02/nhuiMnN6PQDX-qC03Dg02arwbfg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nhuiMnN6PQDX-qC03Dg02arwbfg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 22:22:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1631 (0x65f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9178297, serialNumber=9E1BA232737A3D00D7FAA0B4DC3834D9AAF06DF8 Validity Not Before: Apr 24 22:22:24 2025 GMT Not After : May 1 22:22:24 2025 GMT Subject: CN=680ab9a0-19c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:c7:7f:69:db:e7:38:3b:df:f1:5d:81:8c:c2: aa:1a:b9:1f:c4:bf:60:96:d8:d7:46:0d:95:34:b2: 3b:99:28:51:d4:41:0f:ae:64:79:d9:ed:51:9e:f7: 38:c9:c8:b1:7b:18:13:67:df:bb:43:f9:78:44:29: fc:6f:31:fd:b4:ec:58:e0:20:a3:bb:6b:62:69:f9: 58:04:d6:4e:9f:4d:85:04:cb:e1:f9:aa:f3:ed:5a: 91:40:88:02:4e:97:f9:aa:ab:75:2e:78:79:89:09: 96:1b:f2:f6:79:56:58:dc:a6:2f:17:00:43:ba:d1: 5c:07:cc:0e:a2:0a:63:e1:53:d0:86:57:5a:b8:cb: 1d:44:dd:08:49:3d:5c:ff:7f:31:15:91:3a:f6:94: 7e:39:97:0f:b1:ad:a6:03:ff:f2:0d:82:fa:63:47: 52:bc:9d:e1:db:a2:f2:af:ad:f5:20:fe:c0:6f:47: 94:0f:4e:db:71:0a:89:b6:d8:bb:10:63:94:09:41: 4b:06:e5:5b:99:c3:f6:4e:ca:e1:23:17:7c:a1:bd: cf:f9:46:d7:0a:a1:bf:a4:47:0b:36:53:ae:f7:c3: 1a:d9:41:13:fe:51:4a:a2:50:05:8a:2f:e5:0c:c2: 07:b3:20:a7:45:67:91:1d:74:93:fb:b9:73:b6:a1: d9:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:BB:80:78:60:DE:A1:E4:4A:A1:69:AB:6A:37:C3:E6:7B:7E:EF:18 X509v3 Authority Key Identifier: keyid:9E:1B:A2:32:73:7A:3D:00:D7:FA:A0:B4:DC:38:34:D9:AA:F0:6D:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9178297/4B1F748487B411EB8EF3321AC4F9AE02/nhuiMnN6PQDX-qC03Dg02arwbfg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nhuiMnN6PQDX-qC03Dg02arwbfg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9178297/4B1F748487B411EB8EF3321AC4F9AE02/nhuiMnN6PQDX-qC03Dg02arwbfg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9d:e6:87:56:8c:d9:7d:4a:f4:c2:21:d5:37:66:4c:7d:d2:12: 44:53:71:81:51:6f:b5:d2:cb:00:2a:d9:f7:ff:4d:ef:49:e9: ce:3a:c0:46:7f:5b:93:3d:34:25:f9:81:6b:f9:0d:b5:8d:44: 45:5c:56:49:2b:2b:5b:de:68:4d:f7:03:cb:18:a3:ce:50:87: a0:b6:63:08:1f:7d:8b:1a:00:45:be:28:54:c2:fc:3a:db:64: 11:18:50:63:90:79:26:54:6a:02:2e:a6:49:5f:67:ff:2b:4f: e7:bf:74:8c:b1:d1:2c:93:cb:ad:ac:fb:7b:08:ad:d7:74:b3: 21:a2:ad:6f:93:4a:74:1a:b0:d1:f7:7b:29:58:a3:52:0f:09: e4:96:d0:ba:45:78:5f:86:55:16:26:2e:62:7a:a6:52:cf:cd: 19:e8:61:66:18:b7:4a:1d:4d:92:f8:c3:71:70:4a:68:18:9a: c7:2c:3b:e7:0e:58:ae:b5:07:97:f1:78:bb:55:7d:e2:f6:ff: b0:61:69:52:e4:2f:cc:a3:0d:a7:7a:47:f0:08:3d:a7:3c:42: e7:14:82:13:89:fc:bb:07:ff:93:5f:01:c3:d4:63:51:6d:fc: 39:3e:1a:46:d2:48:f2:ed:cb:40:7e:8b:d2:f0:87:51:a1:9b: 4b:89:65:55 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBl8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzgyOTcxMTAvBgNVBAUTKDlFMUJBMjMyNzM3QTNEMDBEN0ZBQTBCNERDMzgzNEQ5 QUFGMDZERjgwHhcNMjUwNDI0MjIyMjI0WhcNMjUwNTAxMjIyMjI0WjAYMRYwFAYD VQQDEw02ODBhYjlhMC0xOWM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuMd/advnODvf8V2BjMKqGrkfxL9gltjXRg2VNLI7mShR1EEPrmR52e1Rnvc4 ycixexgTZ9+7Q/l4RCn8bzH9tOxY4CCju2tiaflYBNZOn02FBMvh+arz7VqRQIgC Tpf5qqt1Lnh5iQmWG/L2eVZY3KYvFwBDutFcB8wOogpj4VPQhldauMsdRN0IST1c /38xFZE69pR+OZcPsa2mA//yDYL6Y0dSvJ3h26Lyr631IP7Ab0eUD07bcQqJtti7 EGOUCUFLBuVbmcP2TsrhIxd8ob3P+UbXCqG/pEcLNlOu98Ma2UET/lFKolAFii/l DMIHsyCnRWeRHXST+7lztqHZywIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEG7gHhg 3qHkSqFpq2o3w+Z7fu8YMB8GA1UdIwQYMBaAFJ4bojJzej0A1/qgtNw4NNmq8G34 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3ODI5Ny80QjFGNzQ4NDg3 QjQxMUVCOEVGMzMyMUFDNEY5QUUwMi9uaHVpTW5ONlBRRFgtcUMwM0RnMDJhcndi ZmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25odWlNbk42UFFEWC1xQzAzRGcwMmFyd2JmZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 ODI5Ny80QjFGNzQ4NDg3QjQxMUVCOEVGMzMyMUFDNEY5QUUwMi9uaHVpTW5ONlBR RFgtcUMwM0RnMDJhcndiZmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCd5odWjNl9SvTCIdU3Zkx90hJEU3GBUW+10ssAKtn3/03vSenOOsBG f1uTPTQl+YFr+Q21jURFXFZJKytb3mhN9wPLGKPOUIegtmMIH32LGgBFvihUwvw6 22QRGFBjkHkmVGoCLqZJX2f/K0/nv3SMsdEsk8utrPt7CK3XdLMhoq1vk0p0GrDR 93spWKNSDwnkltC6RXhfhlUWJi5ieqZSz80Z6GFmGLdKHU2S+MNxcEpoGJrHLDvn DliutQeX8Xi7VX3i9v+wYWlS5C/Mow2nekfwCD2nPELnFIITify7B/+TXwHD1GNR bfw5PhpG0kjy7ctAfovS8IdRoZtLiWVV -----END CERTIFICATE-----Generated at Sat Apr 26 15:18:29 2025 by rpki-client