$ rpki-client -vvf rpki.apnic.net/member_repository/A918404E/BC030C76F1DA11EAAFC6C70AC4F9AE02/nHx3b2v2ADKD8Mq0Pi3GFJSZcWI.mft File: nHx3b2v2ADKD8Mq0Pi3GFJSZcWI.mft (raw, json) Hash identifier: ggohSBxyK4xdPL8Y7fSUB3dow/F/eQ5GMGYoQhG8Z+M= Subject key identifier: 69:9E:92:9F:BB:72:67:9A:EA:5F:0D:39:C0:B6:9C:39:C8:6D:76:0E Authority key identifier: 9C:7C:77:6F:6B:F6:00:32:83:F0:CA:B4:3E:2D:C6:14:94:99:71:62 Certificate issuer: /CN=A918404E/serialNumber=9C7C776F6BF6003283F0CAB43E2DC61494997162 Certificate serial: 0909 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nHx3b2v2ADKD8Mq0Pi3GFJSZcWI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918404E/BC030C76F1DA11EAAFC6C70AC4F9AE02/nHx3b2v2ADKD8Mq0Pi3GFJSZcWI.mft Manifest number: 0873 Signing time: Thu 24 Apr 2025 20:56:33 +0000 Manifest this update: Thu 24 Apr 2025 20:56:32 +0000 Manifest next update: Thu 01 May 2025 20:56:32 +0000 Files and hashes: 1: nHx3b2v2ADKD8Mq0Pi3GFJSZcWI.crl (hash: Wi3NrQWGTyzaZVvjZzSC8UhjjqQTaQw1CnDkyVJVl80=) 2: 8C2F4DBA8D3111EFA61E9282C4F9AE02.roa (hash: rGSaf9r5NHWNkGd2dlgWyn72IpJZOpkzcKbp3O1O8bg=) 3: 287F42E4018011EF92ADDC7FC4F9AE02.roa (hash: FEK8EzXCQ/8MiufhcQyCAnkfxapHFXjscSrsdrF8TfA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918404E/BC030C76F1DA11EAAFC6C70AC4F9AE02/nHx3b2v2ADKD8Mq0Pi3GFJSZcWI.crl rsync://rpki.apnic.net/member_repository/A918404E/BC030C76F1DA11EAAFC6C70AC4F9AE02/nHx3b2v2ADKD8Mq0Pi3GFJSZcWI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nHx3b2v2ADKD8Mq0Pi3GFJSZcWI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 20:56:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2313 (0x909) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918404E, serialNumber=9C7C776F6BF6003283F0CAB43E2DC61494997162 Validity Not Before: Apr 24 20:56:32 2025 GMT Not After : May 1 20:56:32 2025 GMT Subject: CN=680aa580-c0f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:c0:fe:c6:70:02:af:da:9e:a2:73:6f:e8:1f: ec:43:31:35:02:7e:9a:11:51:6a:8f:82:44:87:41: ec:7a:fd:56:5d:c9:8e:f7:4c:7e:99:62:d4:61:b8: 8e:a5:d3:e8:b1:b5:bd:00:54:8c:59:60:f7:55:de: 64:8a:c0:31:29:2c:4b:33:95:dd:89:49:1c:b8:cf: c9:d1:ab:98:a0:c9:90:50:80:a4:2d:06:9d:97:4c: 8c:13:1b:4b:8a:a7:ba:d6:2b:0b:44:35:76:82:7c: bd:92:76:4c:2f:49:74:90:28:5a:c1:fb:b2:4a:8a: 90:86:f1:30:20:6a:0b:cb:f7:4b:08:cd:d3:b4:4d: 07:5c:ba:4b:a6:cc:a2:55:6b:a5:0b:ba:70:11:9d: aa:70:6e:ae:fb:15:05:e6:9c:e2:4a:d7:12:6c:4d: 2b:b5:1b:ac:d9:b8:45:f5:71:b7:be:b6:ad:64:8f: 77:05:5d:54:19:30:f6:dc:e6:06:9a:4b:02:d8:89: ca:5e:88:94:2b:63:53:80:0a:32:b0:ae:1c:0a:79: b3:cf:b5:23:da:c6:f6:38:46:e2:4b:e9:88:b7:1f: 7c:83:5e:bc:6d:dd:99:17:fd:ba:e6:ff:d3:e3:64: c7:e8:a2:53:ed:31:8a:88:a9:55:8e:6b:5f:fd:7a: bb:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:9E:92:9F:BB:72:67:9A:EA:5F:0D:39:C0:B6:9C:39:C8:6D:76:0E X509v3 Authority Key Identifier: keyid:9C:7C:77:6F:6B:F6:00:32:83:F0:CA:B4:3E:2D:C6:14:94:99:71:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918404E/BC030C76F1DA11EAAFC6C70AC4F9AE02/nHx3b2v2ADKD8Mq0Pi3GFJSZcWI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nHx3b2v2ADKD8Mq0Pi3GFJSZcWI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918404E/BC030C76F1DA11EAAFC6C70AC4F9AE02/nHx3b2v2ADKD8Mq0Pi3GFJSZcWI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 35:93:da:8b:8e:7d:04:97:5b:2c:da:32:e5:0e:9f:b6:1c:16: 29:2c:48:e5:cc:ab:a0:73:1b:42:15:a1:22:2d:1b:89:cb:59: 19:6e:93:48:0e:a0:c2:0e:46:ac:10:b0:d7:f9:54:62:fd:f5: 00:02:12:94:fc:f9:89:69:6e:4f:1c:34:15:e5:cb:cd:f9:88: 98:c1:d4:4d:bf:a8:ae:3a:ba:e3:41:db:8c:5c:f9:49:7d:a9: ee:ee:e0:b0:5f:91:65:f0:39:d1:45:89:2a:a9:87:61:36:d8: d2:de:c9:11:0f:7f:ef:59:e6:05:90:36:7a:41:1f:ad:d3:9c: e7:88:54:9b:a6:f1:93:c6:1c:06:f4:d9:0f:56:ec:03:ac:80: c1:9e:a8:4b:da:9e:7d:c9:c5:ae:1b:99:cb:65:8a:39:52:6c: c7:d0:6d:80:57:59:6e:a1:9e:1e:44:a8:74:4a:1b:44:b9:b5: 27:f6:ab:77:f1:52:78:8c:8c:67:81:58:1f:fc:48:fd:fd:71: 38:10:da:46:00:92:72:54:79:f7:21:8f:c5:61:ed:cc:90:97: 80:be:78:6b:1a:bc:e4:a8:0c:38:8b:a6:ff:93:b0:ed:02:af: 9a:b9:bd:8f:d0:1b:f7:9e:63:aa:28:49:c9:99:4c:d8:ed:04: 56:40:69:14 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCQkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODQwNEUxMTAvBgNVBAUTKDlDN0M3NzZGNkJGNjAwMzI4M0YwQ0FCNDNFMkRDNjE0 OTQ5OTcxNjIwHhcNMjUwNDI0MjA1NjMyWhcNMjUwNTAxMjA1NjMyWjAYMRYwFAYD VQQDEw02ODBhYTU4MC1jMGYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqsD+xnACr9qeonNv6B/sQzE1An6aEVFqj4JEh0Hsev1WXcmO90x+mWLUYbiO pdPosbW9AFSMWWD3Vd5kisAxKSxLM5XdiUkcuM/J0auYoMmQUICkLQadl0yMExtL iqe61isLRDV2gny9knZML0l0kChawfuySoqQhvEwIGoLy/dLCM3TtE0HXLpLpsyi VWulC7pwEZ2qcG6u+xUF5pziStcSbE0rtRus2bhF9XG3vratZI93BV1UGTD23OYG mksC2InKXoiUK2NTgAoysK4cCnmzz7Uj2sb2OEbiS+mItx98g168bd2ZF/265v/T 42TH6KJT7TGKiKlVjmtf/Xq7ywIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGmekp+7 cmea6l8NOcC2nDnIbXYOMB8GA1UdIwQYMBaAFJx8d29r9gAyg/DKtD4txhSUmXFi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NDA0RS9CQzAzMEM3NkYx REExMUVBQUZDNkM3MEFDNEY5QUUwMi9uSHgzYjJ2MkFES0Q4TXEwUGkzR0ZKU1pj V0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25IeDNiMnYyQURLRDhNcTBQaTNHRkpTWmNXSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NDA0RS9CQzAzMEM3NkYxREExMUVBQUZDNkM3MEFDNEY5QUUwMi9uSHgzYjJ2MkFE S0Q4TXEwUGkzR0ZKU1pjV0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA1k9qLjn0El1ss2jLlDp+2HBYpLEjlzKugcxtCFaEiLRuJy1kZbpNI DqDCDkasELDX+VRi/fUAAhKU/PmJaW5PHDQV5cvN+YiYwdRNv6iuOrrjQduMXPlJ fanu7uCwX5Fl8DnRRYkqqYdhNtjS3skRD3/vWeYFkDZ6QR+t05zniFSbpvGTxhwG 9NkPVuwDrIDBnqhL2p59ycWuG5nLZYo5UmzH0G2AV1luoZ4eRKh0ShtEubUn9qt3 8VJ4jIxngVgf/Ej9/XE4ENpGAJJyVHn3IY/FYe3MkJeAvnhrGrzkqAw4i6b/k7Dt Aq+aub2P0Bv3nmOqKEnJmUzY7QRWQGkU -----END CERTIFICATE-----Generated at Sat Apr 26 12:53:03 2025 by rpki-client