$ rpki-client -vvf rpki.apnic.net/member_repository/A919899D/F15787B4F68211EB8E037F7EC4F9AE02/nLnwNCujTijkVM2SOEk0ZgWxxjI.mft File: nLnwNCujTijkVM2SOEk0ZgWxxjI.mft (raw, json) Hash identifier: T7YHALRirUTIw0detBA77mwWPaP1qM9g3WiwdHC/0g4= Subject key identifier: E3:55:B2:8B:7C:76:3C:05:F3:9C:4F:20:5B:52:60:BD:1F:63:0E:69 Authority key identifier: 9C:B9:F0:34:2B:A3:4E:28:E4:54:CD:92:38:49:34:66:05:B1:C6:32 Certificate issuer: /CN=A919899D/serialNumber=9CB9F0342BA34E28E454CD923849346605B1C632 Certificate serial: 0532 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nLnwNCujTijkVM2SOEk0ZgWxxjI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919899D/F15787B4F68211EB8E037F7EC4F9AE02/nLnwNCujTijkVM2SOEk0ZgWxxjI.mft Manifest number: 052A Signing time: Thu 24 Apr 2025 23:18:32 +0000 Manifest this update: Thu 24 Apr 2025 23:18:32 +0000 Manifest next update: Thu 01 May 2025 23:18:32 +0000 Files and hashes: 1: nLnwNCujTijkVM2SOEk0ZgWxxjI.crl (hash: Hjnav7d+GOqhMqHh9DJPS7oB/Wh5Zq+sYSGKWxfpf2o=) 2: 77465F12874511EEBEA58225C4F9AE02.roa (hash: EZ7XOZu8P3fYljWZEYYsh451lzcL+Hz2HibFDv/VLxc=) 3: A4331EC89E4911EEA1F8471AC4F9AE02.roa (hash: dojgMfaVkK8Ikxn0bp2yTuAA7toIIjYyBZcEBpuQu+E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919899D/F15787B4F68211EB8E037F7EC4F9AE02/nLnwNCujTijkVM2SOEk0ZgWxxjI.crl rsync://rpki.apnic.net/member_repository/A919899D/F15787B4F68211EB8E037F7EC4F9AE02/nLnwNCujTijkVM2SOEk0ZgWxxjI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nLnwNCujTijkVM2SOEk0ZgWxxjI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 23:18:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1330 (0x532) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919899D, serialNumber=9CB9F0342BA34E28E454CD923849346605B1C632 Validity Not Before: Apr 24 23:18:32 2025 GMT Not After : May 1 23:18:32 2025 GMT Subject: CN=680ac6c8-52ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:e5:86:59:f1:76:f5:a2:ab:a4:13:02:56:ea: be:cc:ee:d4:08:ed:24:f6:0e:d0:d0:39:82:c4:0d: 55:bd:e2:9d:e5:cc:f0:27:59:37:34:88:53:85:23: 0c:68:ff:a8:d0:29:d1:15:c2:d7:ae:49:89:09:20: 78:a4:b9:39:37:f7:61:8f:3b:cf:7f:fb:51:9f:26: c7:35:44:84:4a:e6:12:6f:ef:47:5b:48:89:3b:49: 5a:e3:2b:86:6c:9f:82:33:af:b0:27:44:0e:e8:61: 9d:92:75:75:6f:5a:9d:7d:0f:44:d1:e3:2d:d8:25: 58:3b:35:64:56:ef:62:0d:7e:09:79:29:e5:9e:30: a4:af:42:5f:a7:5f:9d:19:e4:2e:27:ba:c6:41:37: eb:e9:6b:df:0a:13:48:eb:eb:e0:c9:bb:50:09:84: fe:41:34:3c:50:50:31:16:43:e6:1a:a1:8c:fc:72: f2:de:d3:9d:fd:51:4b:2c:83:e7:0c:33:db:2a:5d: 9e:ee:ca:e8:61:6a:54:c0:35:af:34:9b:1c:28:e0: 82:a5:f0:16:fe:74:6f:31:ab:0d:97:ea:10:25:16: be:5e:8f:19:10:11:5f:b6:dc:a4:92:e7:b9:ea:fb: c1:b1:8e:eb:34:a4:66:e9:12:67:7c:f7:f6:61:dc: 02:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:55:B2:8B:7C:76:3C:05:F3:9C:4F:20:5B:52:60:BD:1F:63:0E:69 X509v3 Authority Key Identifier: keyid:9C:B9:F0:34:2B:A3:4E:28:E4:54:CD:92:38:49:34:66:05:B1:C6:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919899D/F15787B4F68211EB8E037F7EC4F9AE02/nLnwNCujTijkVM2SOEk0ZgWxxjI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nLnwNCujTijkVM2SOEk0ZgWxxjI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919899D/F15787B4F68211EB8E037F7EC4F9AE02/nLnwNCujTijkVM2SOEk0ZgWxxjI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 61:b2:ad:60:6d:d2:05:2a:e9:3c:a5:17:04:d0:b9:0d:ef:97: 31:d9:1d:f2:ef:fe:27:43:3a:57:95:27:6e:42:a9:db:8d:cb: 02:b9:5b:6a:d1:ee:95:86:7c:22:10:f1:4a:64:6d:59:77:f4: 18:5a:17:f8:93:de:71:1f:e5:c1:3d:12:47:07:56:c4:56:9d: 18:c6:60:aa:25:7f:80:2d:63:0d:4c:22:fe:20:2f:03:e8:48: 68:85:5c:85:e3:b5:a7:d8:b6:51:6a:f8:28:50:68:de:a9:43: e1:71:bc:08:8f:dd:6c:4b:6b:95:76:9c:79:28:68:f6:fd:77: 55:b5:cc:3b:d3:79:85:82:6a:0a:a1:9c:af:61:92:cc:8d:7a: 91:01:8c:ba:91:91:47:a4:9f:41:ee:a6:e5:92:ed:b7:25:f9: 56:f6:6c:e7:41:c1:ce:55:a9:3d:5f:18:36:c2:ca:2f:e8:41: ca:2f:48:dd:ca:71:48:02:e9:a9:00:f2:00:3e:1c:e4:78:13: b7:8c:e5:89:64:3e:86:1b:4b:c7:dc:54:00:d6:0d:eb:da:20: 42:b4:25:3c:aa:69:37:63:17:12:49:1d:08:f5:a0:5f:b6:d9: f9:26:ad:2d:21:d6:fe:57:45:3b:31:c4:a9:5f:17:30:02:ba: fc:7b:aa:15 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBTIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTg5OUQxMTAvBgNVBAUTKDlDQjlGMDM0MkJBMzRFMjhFNDU0Q0Q5MjM4NDkzNDY2 MDVCMUM2MzIwHhcNMjUwNDI0MjMxODMyWhcNMjUwNTAxMjMxODMyWjAYMRYwFAYD VQQDEw02ODBhYzZjOC01MmVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqeWGWfF29aKrpBMCVuq+zO7UCO0k9g7Q0DmCxA1VveKd5czwJ1k3NIhThSMM aP+o0CnRFcLXrkmJCSB4pLk5N/dhjzvPf/tRnybHNUSESuYSb+9HW0iJO0la4yuG bJ+CM6+wJ0QO6GGdknV1b1qdfQ9E0eMt2CVYOzVkVu9iDX4JeSnlnjCkr0Jfp1+d GeQuJ7rGQTfr6WvfChNI6+vgybtQCYT+QTQ8UFAxFkPmGqGM/HLy3tOd/VFLLIPn DDPbKl2e7sroYWpUwDWvNJscKOCCpfAW/nRvMasNl+oQJRa+Xo8ZEBFfttykkue5 6vvBsY7rNKRm6RJnfPf2YdwCKQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFONVsot8 djwF85xPIFtSYL0fYw5pMB8GA1UdIwQYMBaAFJy58DQro04o5FTNkjhJNGYFscYy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5ODk5RC9GMTU3ODdCNEY2 ODIxMUVCOEUwMzdGN0VDNEY5QUUwMi9uTG53TkN1alRpamtWTTJTT0VrMFpnV3h4 akkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25MbndOQ3VqVGlqa1ZNMlNPRWswWmdXeHhqSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 ODk5RC9GMTU3ODdCNEY2ODIxMUVCOEUwMzdGN0VDNEY5QUUwMi9uTG53TkN1alRp amtWTTJTT0VrMFpnV3h4akkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBhsq1gbdIFKuk8pRcE0LkN75cx2R3y7/4nQzpXlSduQqnbjcsCuVtq 0e6VhnwiEPFKZG1Zd/QYWhf4k95xH+XBPRJHB1bEVp0YxmCqJX+ALWMNTCL+IC8D 6EhohVyF47Wn2LZRavgoUGjeqUPhcbwIj91sS2uVdpx5KGj2/XdVtcw703mFgmoK oZyvYZLMjXqRAYy6kZFHpJ9B7qblku23JflW9mznQcHOVak9Xxg2wsov6EHKL0jd ynFIAumpAPIAPhzkeBO3jOWJZD6GG0vH3FQA1g3r2iBCtCU8qmk3YxcSSR0I9aBf ttn5Jq0tIdb+V0U7McSpXxcwArr8e6oV -----END CERTIFICATE-----Generated at Sat Apr 26 17:10:47 2025 by rpki-client