$ rpki-client -vvf rpki.apnic.net/member_repository/A9198FD0/20B4BD803DD511ECB7266464C4F9AE02/nWBHd6Cse-aqCBCwJetJPqbdNGM.mft File: nWBHd6Cse-aqCBCwJetJPqbdNGM.mft (raw, json) Hash identifier: kAjBTRWgc6PgFhBC77hI2xs70WKpQ/BgE6sO+58bgqA= Subject key identifier: 66:97:DF:38:43:E9:67:E0:01:F1:47:9F:23:40:C7:D5:71:17:E1:13 Authority key identifier: 9D:60:47:77:A0:AC:7B:E6:AA:08:10:B0:25:EB:49:3E:A6:DD:34:63 Certificate issuer: /CN=A9198FD0/serialNumber=9D604777A0AC7BE6AA0810B025EB493EA6DD3463 Certificate serial: 0481 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nWBHd6Cse-aqCBCwJetJPqbdNGM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9198FD0/20B4BD803DD511ECB7266464C4F9AE02/nWBHd6Cse-aqCBCwJetJPqbdNGM.mft Manifest number: 047B Signing time: Thu 24 Apr 2025 23:51:28 +0000 Manifest this update: Thu 24 Apr 2025 23:51:28 +0000 Manifest next update: Thu 01 May 2025 23:51:28 +0000 Files and hashes: 1: nWBHd6Cse-aqCBCwJetJPqbdNGM.crl (hash: MXQzppy6PKHHrg3SMSnl+Bx90QhqJJ7fy4D/jl0dILE=) 2: 8327C2403DE011ECAB508171C4F9AE02.roa (hash: Sa14PRGt0bBOrLuIs7j8Gc0qLkwHSO6EtTYwSlnujqM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9198FD0/20B4BD803DD511ECB7266464C4F9AE02/nWBHd6Cse-aqCBCwJetJPqbdNGM.crl rsync://rpki.apnic.net/member_repository/A9198FD0/20B4BD803DD511ECB7266464C4F9AE02/nWBHd6Cse-aqCBCwJetJPqbdNGM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nWBHd6Cse-aqCBCwJetJPqbdNGM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 23:51:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1153 (0x481) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9198FD0, serialNumber=9D604777A0AC7BE6AA0810B025EB493EA6DD3463 Validity Not Before: Apr 24 23:51:28 2025 GMT Not After : May 1 23:51:28 2025 GMT Subject: CN=680ace80-7130 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:cf:21:ba:d3:76:56:0e:b6:24:d5:69:ee:96: f3:d3:5a:76:77:da:81:56:5b:58:f8:a8:fe:3f:80: 3a:6d:dd:8c:cc:15:3d:10:56:8b:e4:49:ff:00:ab: 4f:dc:de:c7:78:23:58:e8:88:78:31:3c:63:87:34: f5:16:bd:24:13:cd:79:89:3f:45:8c:2d:85:e2:f2: 39:c5:5e:61:a6:8d:84:89:27:5a:d9:02:7b:7f:43: a5:c6:09:36:a9:93:88:fe:ca:b8:eb:e7:8e:55:8a: bc:b8:1f:35:11:1c:33:c5:a5:09:aa:aa:bc:37:eb: 6a:59:88:20:dc:92:ba:aa:99:75:d0:ac:0f:03:d1: 64:c3:23:bc:d1:47:90:93:7f:d3:29:70:86:0a:7c: 21:5c:01:92:d3:38:0f:ad:30:3e:30:1f:08:ba:42: e7:c3:00:91:d6:66:f9:0b:23:ee:75:ce:ca:e5:73: 2c:5b:88:8c:ac:57:cb:a7:7f:45:b5:1f:a4:68:41: be:83:45:ff:ac:af:4d:18:2a:db:76:53:3b:e6:fc: e2:04:f2:18:47:52:5c:87:b7:7f:73:0c:f8:9b:36: 28:cf:ca:b5:7b:b6:db:31:5d:2b:4b:1a:f4:d2:82: fe:ca:7e:7f:c0:bf:3f:87:78:07:e4:ae:43:97:bc: 52:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:97:DF:38:43:E9:67:E0:01:F1:47:9F:23:40:C7:D5:71:17:E1:13 X509v3 Authority Key Identifier: keyid:9D:60:47:77:A0:AC:7B:E6:AA:08:10:B0:25:EB:49:3E:A6:DD:34:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9198FD0/20B4BD803DD511ECB7266464C4F9AE02/nWBHd6Cse-aqCBCwJetJPqbdNGM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nWBHd6Cse-aqCBCwJetJPqbdNGM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9198FD0/20B4BD803DD511ECB7266464C4F9AE02/nWBHd6Cse-aqCBCwJetJPqbdNGM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 35:f0:e4:ad:09:4f:57:c3:a2:01:37:2a:1f:1d:3e:5f:01:af: cc:04:f9:f1:31:be:af:d5:ae:6f:75:4d:ad:4c:fa:c1:33:09: 31:45:32:60:5a:d5:a1:9a:a9:81:86:b7:f9:93:f1:d4:8b:86: 67:70:47:7a:5c:49:f4:83:35:89:76:e0:50:9c:35:d0:6e:92: 12:30:02:c4:d8:8d:9f:10:bd:21:3a:bd:b1:36:15:b3:66:57: 74:40:04:6e:16:17:93:d9:e1:06:25:7b:51:b5:13:e8:84:3c: 43:7a:f2:fd:00:d9:c3:37:9a:8d:98:f3:5f:41:da:1b:52:8b: d7:b4:56:40:bb:23:68:ab:2f:42:fb:15:81:87:aa:ba:54:8a: 4d:09:b0:34:85:27:ea:26:53:20:28:98:13:01:c2:ef:50:12: 33:0e:dd:a0:d9:10:f7:d4:d8:77:40:1c:e9:cc:9d:0e:8c:4d: da:fd:5a:d5:40:64:ed:d9:47:3d:61:c9:74:54:a6:53:59:60: 33:9f:f5:81:b0:fb:87:7f:a6:cf:f7:76:29:56:51:29:70:36: 4a:79:3e:05:ef:4c:11:f2:8e:2e:e4:a6:c9:b2:e8:55:64:92: ed:f8:59:16:ae:be:07:4e:ef:4f:4b:14:e1:a7:71:34:5c:db: 08:c5:67:f1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBIEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OThGRDAxMTAvBgNVBAUTKDlENjA0Nzc3QTBBQzdCRTZBQTA4MTBCMDI1RUI0OTNF QTZERDM0NjMwHhcNMjUwNDI0MjM1MTI4WhcNMjUwNTAxMjM1MTI4WjAYMRYwFAYD VQQDEw02ODBhY2U4MC03MTMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq88hutN2Vg62JNVp7pbz01p2d9qBVltY+Kj+P4A6bd2MzBU9EFaL5En/AKtP 3N7HeCNY6Ih4MTxjhzT1Fr0kE815iT9FjC2F4vI5xV5hpo2EiSda2QJ7f0Olxgk2 qZOI/sq46+eOVYq8uB81ERwzxaUJqqq8N+tqWYgg3JK6qpl10KwPA9FkwyO80UeQ k3/TKXCGCnwhXAGS0zgPrTA+MB8IukLnwwCR1mb5CyPudc7K5XMsW4iMrFfLp39F tR+kaEG+g0X/rK9NGCrbdlM75vziBPIYR1Jch7d/cwz4mzYoz8q1e7bbMV0rSxr0 0oL+yn5/wL8/h3gH5K5Dl7xS1wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGaX3zhD 6WfgAfFHnyNAx9VxF+ETMB8GA1UdIwQYMBaAFJ1gR3egrHvmqggQsCXrST6m3TRj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OEZEMC8yMEI0QkQ4MDNE RDUxMUVDQjcyNjY0NjRDNEY5QUUwMi9uV0JIZDZDc2UtYXFDQkN3SmV0SlBxYmRO R00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25XQkhkNkNzZS1hcUNCQ3dKZXRKUHFiZE5HTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 OEZEMC8yMEI0QkQ4MDNERDUxMUVDQjcyNjY0NjRDNEY5QUUwMi9uV0JIZDZDc2Ut YXFDQkN3SmV0SlBxYmROR00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA18OStCU9Xw6IBNyofHT5fAa/MBPnxMb6v1a5vdU2tTPrBMwkxRTJg WtWhmqmBhrf5k/HUi4ZncEd6XEn0gzWJduBQnDXQbpISMALE2I2fEL0hOr2xNhWz Zld0QARuFheT2eEGJXtRtRPohDxDevL9ANnDN5qNmPNfQdobUovXtFZAuyNoqy9C +xWBh6q6VIpNCbA0hSfqJlMgKJgTAcLvUBIzDt2g2RD31Nh3QBzpzJ0OjE3a/VrV QGTt2Uc9Ycl0VKZTWWAzn/WBsPuHf6bP93YpVlEpcDZKeT4F70wR8o4u5KbJsuhV ZJLt+FkWrr4HTu9PSxThp3E0XNsIxWfx -----END CERTIFICATE-----Generated at Sat Apr 26 04:27:10 2025 by rpki-client