$ rpki-client -vvf rpki.apnic.net/member_repository/A9197501/99B58BB013DB11ED9304C582C4F9AE02/nwqvLgr6Pm-NrlpGp-WMz_o0wSc.mft File: nwqvLgr6Pm-NrlpGp-WMz_o0wSc.mft (raw, json) Hash identifier: /9JvSDRtZB2aKfdBZJTTNHdopQ4X6S0xgORwB+4qETU= Subject key identifier: 87:FC:D9:80:DC:F3:48:56:36:F3:03:69:99:8D:62:BD:42:24:08:8D Authority key identifier: 9F:0A:AF:2E:0A:FA:3E:6F:8D:AE:5A:46:A7:E5:8C:CF:FA:34:C1:27 Certificate issuer: /CN=A9197501/serialNumber=9F0AAF2E0AFA3E6F8DAE5A46A7E58CCFFA34C127 Certificate serial: 027B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nwqvLgr6Pm-NrlpGp-WMz_o0wSc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9197501/99B58BB013DB11ED9304C582C4F9AE02/nwqvLgr6Pm-NrlpGp-WMz_o0wSc.mft Manifest number: 0268 Signing time: Fri 25 Apr 2025 01:34:54 +0000 Manifest this update: Fri 25 Apr 2025 01:34:54 +0000 Manifest next update: Fri 02 May 2025 01:34:54 +0000 Files and hashes: 1: nwqvLgr6Pm-NrlpGp-WMz_o0wSc.crl (hash: 4C+HhdcvKO8T3uqz2GhvHkYrdGQSbgDfzExHZlHnSTw=) 2: 0E8725F61E9311F0B6662631C4F9AE02.roa (hash: uGNo0kqNctZXhYZoYXPLnEjuYisLB79lt85EjQOz3BM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9197501/99B58BB013DB11ED9304C582C4F9AE02/nwqvLgr6Pm-NrlpGp-WMz_o0wSc.crl rsync://rpki.apnic.net/member_repository/A9197501/99B58BB013DB11ED9304C582C4F9AE02/nwqvLgr6Pm-NrlpGp-WMz_o0wSc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nwqvLgr6Pm-NrlpGp-WMz_o0wSc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 01:34:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 635 (0x27b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9197501, serialNumber=9F0AAF2E0AFA3E6F8DAE5A46A7E58CCFFA34C127 Validity Not Before: Apr 25 01:34:54 2025 GMT Not After : May 2 01:34:54 2025 GMT Subject: CN=680ae6be-aa8f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:42:0a:27:46:de:95:2e:bb:6a:88:91:01:3e: ed:4b:ca:2a:c8:36:77:b2:64:61:7a:20:ff:8a:3a: 72:3f:30:d9:b0:f0:b2:67:37:26:26:3f:1d:e2:7b: 46:62:c2:27:12:5b:99:d8:ed:57:a8:2d:5c:53:bf: 0f:19:a1:e1:2a:9f:e4:c3:a9:87:61:46:89:b6:a3: b4:64:11:81:37:f2:9d:5a:77:6b:5a:9a:d7:f5:b0: fb:37:55:23:7c:69:48:ae:44:bb:db:a2:c2:13:33: 9b:21:11:ed:1f:26:b8:9d:a2:a5:80:9a:6a:fa:59: e9:8b:36:52:a2:73:c6:97:b1:ef:88:a5:e1:fb:df: 14:8d:98:f8:01:b9:a0:4e:a5:a2:d8:a5:97:a8:18: 0a:bc:fc:aa:b5:71:2b:3e:2d:97:a3:49:81:3f:9b: 29:d0:93:e0:ea:35:d2:e0:67:1f:7d:10:ae:b0:3d: c8:05:02:91:88:00:68:51:92:3b:f7:f0:2c:b8:b3: 23:30:e6:65:3c:e1:54:bc:55:cd:0c:23:59:da:1b: 2e:b5:1f:27:af:4c:87:a1:50:c1:02:18:78:73:45: 85:7f:a5:c2:08:83:86:9e:5b:7f:ee:62:b4:42:2e: 59:5b:40:aa:f9:3f:33:ee:89:ca:2c:bf:91:ff:10: d5:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:FC:D9:80:DC:F3:48:56:36:F3:03:69:99:8D:62:BD:42:24:08:8D X509v3 Authority Key Identifier: keyid:9F:0A:AF:2E:0A:FA:3E:6F:8D:AE:5A:46:A7:E5:8C:CF:FA:34:C1:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9197501/99B58BB013DB11ED9304C582C4F9AE02/nwqvLgr6Pm-NrlpGp-WMz_o0wSc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nwqvLgr6Pm-NrlpGp-WMz_o0wSc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9197501/99B58BB013DB11ED9304C582C4F9AE02/nwqvLgr6Pm-NrlpGp-WMz_o0wSc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1d:2f:49:21:b5:54:7f:ac:87:79:35:93:e0:2c:a7:e2:f9:8f: e6:1e:dc:c9:b0:1f:d4:9d:aa:4a:45:b2:43:fe:78:1c:6c:8d: 25:ad:db:df:19:28:30:a5:b9:45:f9:80:ba:f2:6e:e0:f3:dc: 8b:98:80:d9:9d:19:d7:f0:09:dd:70:a5:b8:a1:cb:32:a9:99: 60:29:ba:8d:f7:38:77:e4:6f:ae:1b:7b:08:08:ff:3d:28:4d: 29:b6:cf:bd:ca:bb:9f:34:c4:73:64:db:22:ea:cc:09:c5:e4: f6:cd:ed:8b:dd:80:c2:1c:cd:ef:3a:84:40:eb:b4:dc:77:b4: 59:86:13:f8:e5:41:13:d5:f9:ef:3c:b6:53:f4:f3:cb:41:38: 11:be:9b:2d:e1:84:2a:8a:68:89:ef:3f:fe:e1:16:43:c0:3a: 1d:97:c2:4e:ee:f6:7a:08:4c:aa:88:e5:01:03:1f:eb:ba:cf: d7:02:0a:93:6b:08:76:8a:b2:88:d7:9f:0f:88:ce:17:40:4e: 8d:59:b5:c0:7c:83:f8:f1:50:76:dd:68:bf:fb:15:78:11:88: 9b:12:d3:41:32:c7:f6:9f:01:23:2e:b7:af:95:de:f3:a0:27: 48:1a:bb:40:36:a5:6e:3b:15:3d:26:1a:6f:97:5b:66:d5:ab: 39:06:0c:b5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAnswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTc1MDExMTAvBgNVBAUTKDlGMEFBRjJFMEFGQTNFNkY4REFFNUE0NkE3RTU4Q0NG RkEzNEMxMjcwHhcNMjUwNDI1MDEzNDU0WhcNMjUwNTAyMDEzNDU0WjAYMRYwFAYD VQQDEw02ODBhZTZiZS1hYThmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqEIKJ0belS67aoiRAT7tS8oqyDZ3smRheiD/ijpyPzDZsPCyZzcmJj8d4ntG YsInEluZ2O1XqC1cU78PGaHhKp/kw6mHYUaJtqO0ZBGBN/KdWndrWprX9bD7N1Uj fGlIrkS726LCEzObIRHtHya4naKlgJpq+lnpizZSonPGl7HviKXh+98UjZj4Abmg TqWi2KWXqBgKvPyqtXErPi2Xo0mBP5sp0JPg6jXS4GcffRCusD3IBQKRiABoUZI7 9/AsuLMjMOZlPOFUvFXNDCNZ2hsutR8nr0yHoVDBAhh4c0WFf6XCCIOGnlt/7mK0 Qi5ZW0Cq+T8z7onKLL+R/xDVjQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIf82YDc 80hWNvMDaZmNYr1CJAiNMB8GA1UdIwQYMBaAFJ8Kry4K+j5vja5aRqfljM/6NMEn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NzUwMS85OUI1OEJCMDEz REIxMUVEOTMwNEM1ODJDNEY5QUUwMi9ud3F2TGdyNlBtLU5ybHBHcC1XTXpfbzB3 U2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL253cXZMZ3I2UG0tTnJscEdwLVdNel9vMHdTYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NzUwMS85OUI1OEJCMDEzREIxMUVEOTMwNEM1ODJDNEY5QUUwMi9ud3F2TGdyNlBt LU5ybHBHcC1XTXpfbzB3U2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAdL0khtVR/rId5NZPgLKfi+Y/mHtzJsB/UnapKRbJD/ngcbI0lrdvf GSgwpblF+YC68m7g89yLmIDZnRnX8AndcKW4ocsyqZlgKbqN9zh35G+uG3sICP89 KE0pts+9yrufNMRzZNsi6swJxeT2ze2L3YDCHM3vOoRA67Tcd7RZhhP45UET1fnv PLZT9PPLQTgRvpst4YQqimiJ7z/+4RZDwDodl8JO7vZ6CEyqiOUBAx/rus/XAgqT awh2irKI158PiM4XQE6NWbXAfIP48VB23Wi/+xV4EYibEtNBMsf2nwEjLrevld7z oCdIGrtANqVuOxU9Jhpvl1tm1as5Bgy1 -----END CERTIFICATE-----Generated at Sat Apr 26 04:01:30 2025 by rpki-client