$ rpki-client -vvf rpki.apnic.net/member_repository/A917D958/672DB048B39B11EF80F6435EC4F9AE02/n0kGwNTMlkXZv9kzZKI6WjPvWNs.mft File: n0kGwNTMlkXZv9kzZKI6WjPvWNs.mft (raw, json) Hash identifier: btA8VXNmacKg+R66/iAxONCyg108Rk4NlRbwAgN6Zcs= Subject key identifier: C7:8A:DD:8A:C3:75:85:69:05:37:56:33:96:EA:36:B0:B1:04:73:71 Authority key identifier: 9F:49:06:C0:D4:CC:96:45:D9:BF:D9:33:64:A2:3A:5A:33:EF:58:DB Certificate issuer: /CN=A917D958/serialNumber=9F4906C0D4CC9645D9BFD93364A23A5A33EF58DB Certificate serial: 50 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/n0kGwNTMlkXZv9kzZKI6WjPvWNs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917D958/672DB048B39B11EF80F6435EC4F9AE02/n0kGwNTMlkXZv9kzZKI6WjPvWNs.mft Manifest number: 4D Signing time: Fri 25 Apr 2025 06:21:45 +0000 Manifest this update: Fri 25 Apr 2025 06:21:45 +0000 Manifest next update: Fri 02 May 2025 06:21:45 +0000 Files and hashes: 1: n0kGwNTMlkXZv9kzZKI6WjPvWNs.crl (hash: ld8TEm3Q/GkrwqZuSOavpxOea3GKayA26J3pZcr9Ev4=) 2: 0AC8BB74B5E211EFBEF4BC5AC4F9AE02.roa (hash: oV9dv3enUEk5QI7ZEWYNcHlwdjoeFV6bdPfVFfihoSE=) 3: 0A581522B5E211EFBEF4BC5AC4F9AE02.roa (hash: PxzOBVWe5yWGLa4iNAyNqYyPaQ/eMXGqSREN7aFVLso=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917D958/672DB048B39B11EF80F6435EC4F9AE02/n0kGwNTMlkXZv9kzZKI6WjPvWNs.crl rsync://rpki.apnic.net/member_repository/A917D958/672DB048B39B11EF80F6435EC4F9AE02/n0kGwNTMlkXZv9kzZKI6WjPvWNs.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/n0kGwNTMlkXZv9kzZKI6WjPvWNs.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 06:21:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 80 (0x50) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917D958, serialNumber=9F4906C0D4CC9645D9BFD93364A23A5A33EF58DB Validity Not Before: Apr 25 06:21:45 2025 GMT Not After : May 2 06:21:45 2025 GMT Subject: CN=680b29f9-c888 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:5c:9a:e2:61:3d:19:6b:dc:d2:3e:f3:e6:65: 28:5d:f9:e5:c6:61:7c:70:fb:d0:52:46:18:cc:65: 96:c1:19:64:b2:0c:2b:1b:cc:65:a2:34:fa:b6:12: 74:aa:5f:3e:a7:de:f1:92:7e:16:fb:09:a4:95:e2: f0:d6:10:36:37:4d:2f:28:5b:1e:30:17:f4:5e:27: 5d:d9:ce:4e:1e:81:87:c6:db:4c:72:49:67:c0:73: 82:8a:fd:3f:45:02:ac:2f:70:26:2f:67:a7:d3:a1: 8f:fd:d8:98:74:18:96:1e:7f:4a:64:ea:f1:6d:26: 15:04:e0:34:6a:87:3f:cd:61:64:bc:77:78:62:4b: 4e:1a:6e:2d:6f:fa:eb:ae:3c:7a:37:fd:ab:95:92: d5:61:52:d6:3d:4b:97:b6:7f:73:7a:2e:a6:aa:98: 13:a9:58:0c:0a:d5:88:b5:77:f3:34:f3:64:32:c9: 50:7e:af:66:4b:33:af:6e:b7:24:b9:b9:c7:d8:fb: 0b:0b:28:db:f3:d5:0c:72:60:6b:06:3a:9f:0b:0f: 9b:64:ab:76:aa:39:74:18:ae:36:cb:cd:f9:8c:1a: 1b:2a:62:c7:97:12:ad:92:fa:0e:f6:a2:40:ba:ed: 27:6f:83:0e:0c:b6:a5:6f:ef:2a:a6:cc:e5:46:63: cd:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:8A:DD:8A:C3:75:85:69:05:37:56:33:96:EA:36:B0:B1:04:73:71 X509v3 Authority Key Identifier: keyid:9F:49:06:C0:D4:CC:96:45:D9:BF:D9:33:64:A2:3A:5A:33:EF:58:DB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917D958/672DB048B39B11EF80F6435EC4F9AE02/n0kGwNTMlkXZv9kzZKI6WjPvWNs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/n0kGwNTMlkXZv9kzZKI6WjPvWNs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917D958/672DB048B39B11EF80F6435EC4F9AE02/n0kGwNTMlkXZv9kzZKI6WjPvWNs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 38:aa:d8:44:56:31:4d:77:3c:a9:dd:8e:87:17:8e:fd:f5:70: 23:19:22:f9:dd:0a:55:f2:ff:a2:55:26:64:ba:e2:15:f7:d2: 96:ef:b7:a5:82:75:73:a8:c2:65:c3:32:df:a5:7c:73:a4:fc: a4:2f:51:2f:a9:07:3f:19:83:c4:a9:45:21:b6:99:38:26:d9: 93:55:7b:65:a0:6f:c0:ec:cf:41:67:45:c1:3f:2b:32:06:a6: 2c:16:2f:5e:9a:cc:e1:5a:2a:5b:e3:eb:26:a2:49:43:d0:1e: 7e:ae:95:92:ea:1f:34:5b:de:63:2f:1d:7f:e8:13:c3:b8:1c: 19:fe:7d:a4:dd:a9:33:8e:26:75:94:dc:e1:d4:67:2b:3e:d9: 55:23:7e:b8:08:eb:e0:e5:37:46:87:38:4b:36:15:86:a2:9f: 19:9c:53:6a:13:07:18:c1:55:31:c7:eb:37:df:8d:36:12:a3: 34:c0:24:1a:83:9e:ec:7e:c8:ec:66:82:6a:64:48:20:f9:a3: 35:63:a3:e7:9a:e3:6a:dd:df:df:1f:0c:70:50:01:20:04:f9: c5:06:fc:49:6a:c5:50:95:95:32:0a:d4:b5:92:08:cf:18:0f: ec:51:89:9b:2c:a0:e3:76:5b:21:dd:77:de:a9:d3:d9:a5:97: b2:cf:7e:f2 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBUDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 RDk1ODExMC8GA1UEBRMoOUY0OTA2QzBENENDOTY0NUQ5QkZEOTMzNjRBMjNBNUEz M0VGNThEQjAeFw0yNTA0MjUwNjIxNDVaFw0yNTA1MDIwNjIxNDVaMBgxFjAUBgNV BAMTDTY4MGIyOWY5LWM4ODgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCkXJriYT0Za9zSPvPmZShd+eXGYXxw+9BSRhjMZZbBGWSyDCsbzGWiNPq2EnSq Xz6n3vGSfhb7CaSV4vDWEDY3TS8oWx4wF/ReJ13Zzk4egYfG20xySWfAc4KK/T9F AqwvcCYvZ6fToY/92Jh0GJYef0pk6vFtJhUE4DRqhz/NYWS8d3hiS04abi1v+uuu PHo3/auVktVhUtY9S5e2f3N6LqaqmBOpWAwK1Yi1d/M082QyyVB+r2ZLM69utyS5 ucfY+wsLKNvz1QxyYGsGOp8LD5tkq3aqOXQYrjbLzfmMGhsqYseXEq2S+g72okC6 7Sdvgw4MtqVv7yqmzOVGY80ZAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUx4rdisN1 hWkFN1Yzluo2sLEEc3EwHwYDVR0jBBgwFoAUn0kGwNTMlkXZv9kzZKI6WjPvWNsw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdEOTU4LzY3MkRCMDQ4QjM5 QjExRUY4MEY2NDM1RUM0RjlBRTAyL24wa0d3TlRNbGtYWnY5a3paS0k2V2pQdldO cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvbjBrR3dOVE1sa1hadjlrelpLSTZXalB2V05zLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdE OTU4LzY3MkRCMDQ4QjM5QjExRUY4MEY2NDM1RUM0RjlBRTAyL24wa0d3TlRNbGtY WnY5a3paS0k2V2pQdldOcy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBADiq2ERWMU13PKndjocXjv31cCMZIvndClXy/6JVJmS64hX30pbvt6WC dXOowmXDMt+lfHOk/KQvUS+pBz8Zg8SpRSG2mTgm2ZNVe2Wgb8Dsz0FnRcE/KzIG piwWL16azOFaKlvj6yaiSUPQHn6ulZLqHzRb3mMvHX/oE8O4HBn+faTdqTOOJnWU 3OHUZys+2VUjfrgI6+DlN0aHOEs2FYainxmcU2oTBxjBVTHH6zffjTYSozTAJBqD nux+yOxmgmpkSCD5ozVjo+ea42rd398fDHBQASAE+cUG/ElqxVCVlTIK1LWSCM8Y D+xRiZssoON2WyHdd96p09mll7LPfvI= -----END CERTIFICATE-----Generated at Sat Apr 26 17:02:47 2025 by rpki-client