$ rpki-client -vvf rpki.apnic.net/member_repository/A919DD44/D8E31E763A1E11EBAE4ED41AC4F9AE02/nwZsuF9biPgjeA1flmJfQ4VIG78.mft File: nwZsuF9biPgjeA1flmJfQ4VIG78.mft (raw, json) Hash identifier: GVrO6ycYeZYm0h0oCR6j0Dle7OkgfrWyrWwL8neILxQ= Subject key identifier: 16:1C:CB:A0:6D:9B:5C:B4:F3:34:99:79:E2:11:E8:45:8C:69:55:56 Authority key identifier: 9F:06:6C:B8:5F:5B:88:F8:23:78:0D:5F:96:62:5F:43:85:48:1B:BF Certificate issuer: /CN=A919DD44/serialNumber=9F066CB85F5B88F823780D5F96625F4385481BBF Certificate serial: 0721 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nwZsuF9biPgjeA1flmJfQ4VIG78.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919DD44/D8E31E763A1E11EBAE4ED41AC4F9AE02/nwZsuF9biPgjeA1flmJfQ4VIG78.mft Manifest number: 0714 Signing time: Thu 24 Apr 2025 21:42:43 +0000 Manifest this update: Thu 24 Apr 2025 21:42:43 +0000 Manifest next update: Thu 01 May 2025 21:42:43 +0000 Files and hashes: 1: nwZsuF9biPgjeA1flmJfQ4VIG78.crl (hash: wmgdhBNebIL+xgXazLKV5kLFNol0fdyDdFXRVMVXYKw=) 2: 788169BE3AAC11EBBEE1E81AC4F9AE02.roa (hash: t/R4fAlXQzy9ztNMWRdnB87GayGaEVACHRV/q2Z5jVE=) 3: 026A84FC4C3211ECB9639932C4F9AE02.roa (hash: uBkySuw/pyK9tvxApltYqkUVTPyi7oX70MF7KU+NjE0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919DD44/D8E31E763A1E11EBAE4ED41AC4F9AE02/nwZsuF9biPgjeA1flmJfQ4VIG78.crl rsync://rpki.apnic.net/member_repository/A919DD44/D8E31E763A1E11EBAE4ED41AC4F9AE02/nwZsuF9biPgjeA1flmJfQ4VIG78.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nwZsuF9biPgjeA1flmJfQ4VIG78.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 21:42:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1825 (0x721) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919DD44, serialNumber=9F066CB85F5B88F823780D5F96625F4385481BBF Validity Not Before: Apr 24 21:42:43 2025 GMT Not After : May 1 21:42:43 2025 GMT Subject: CN=680ab053-bf7e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:ed:c3:17:06:9c:4f:e8:9d:03:ef:ca:78:f2: 3c:c4:8a:1d:2d:2b:0e:63:16:10:65:e3:f3:5a:f2: ef:e7:74:7e:41:8a:93:3c:ed:d5:2a:9f:64:10:69: b4:4d:40:2a:1c:a1:66:62:f6:40:1a:9d:c3:96:77: 5e:cf:a7:99:fe:9d:75:31:46:62:17:c7:2d:9d:b7: d6:ce:2d:8b:55:0e:48:16:5c:f9:64:ec:1b:b4:52: 3c:d4:d4:65:0f:ad:1b:fe:60:48:02:ec:53:9a:66: d2:d2:e3:e3:25:ad:39:0e:cf:51:66:5f:45:c3:ab: 4d:2f:a3:a4:ba:3e:34:89:72:81:70:26:2d:14:8c: 22:67:68:d5:de:aa:3e:a4:10:cb:b2:6d:5b:0e:c0: da:cb:59:13:53:4d:2a:d1:83:ec:09:f6:29:7c:d4: df:8a:c5:d6:02:70:e8:6a:f7:68:0f:db:ae:02:10: 49:ed:aa:d8:e7:bb:fd:cf:1c:4b:15:b4:b1:0a:75: 2c:8f:5e:ff:bd:4a:0a:1e:5e:21:a8:82:84:be:9a: f0:ba:c6:99:6a:76:1c:fb:c8:7b:fd:96:4a:85:1a: 79:68:4c:59:12:4d:31:d8:7f:7a:de:f3:b4:9c:72: 7e:42:0d:46:87:33:fb:6a:18:92:ae:a9:1d:25:4f: 98:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:1C:CB:A0:6D:9B:5C:B4:F3:34:99:79:E2:11:E8:45:8C:69:55:56 X509v3 Authority Key Identifier: keyid:9F:06:6C:B8:5F:5B:88:F8:23:78:0D:5F:96:62:5F:43:85:48:1B:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919DD44/D8E31E763A1E11EBAE4ED41AC4F9AE02/nwZsuF9biPgjeA1flmJfQ4VIG78.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nwZsuF9biPgjeA1flmJfQ4VIG78.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919DD44/D8E31E763A1E11EBAE4ED41AC4F9AE02/nwZsuF9biPgjeA1flmJfQ4VIG78.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ca:54:27:93:37:a1:5c:1f:40:18:9a:64:b6:ae:09:d0:28:6a: 29:3d:a2:c9:14:49:33:86:e0:99:49:bc:53:82:56:78:91:41: ef:f6:78:83:92:4f:85:ec:79:b5:ac:27:01:e4:26:fa:ed:41: e1:9c:c4:75:16:0b:7d:3c:f5:0c:ab:bc:5a:e6:08:19:e9:9c: e2:17:ce:f2:94:50:bc:3d:ec:3c:12:5a:0b:0c:cb:38:00:58: cb:12:97:f4:8f:ad:8c:32:cd:44:ad:3c:97:e8:9a:ff:ae:31: 38:48:93:f0:9f:36:ed:e6:74:91:af:c4:bd:5e:b6:72:db:f5: 48:5c:84:02:17:ce:67:61:d9:86:c2:af:0d:a7:f6:80:da:7f: 4a:2c:e8:68:9f:7d:03:87:c9:a7:59:c3:1d:fd:66:eb:db:a2: ef:05:d6:b9:0b:17:91:10:4e:e8:6c:0f:44:48:6d:94:a3:86: 32:83:ce:59:36:72:d6:c8:5a:b4:99:19:ad:ba:8b:10:ff:59: 81:4f:ea:4f:29:2c:32:7b:44:df:2c:9a:5e:af:be:00:eb:c2: 05:24:51:42:35:ca:1c:4c:04:69:b1:74:35:69:61:21:19:16: 7d:f1:56:67:72:2e:54:ad:91:3f:c6:a3:4a:13:51:27:ce:45: 6f:0b:ba:8c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICByEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OURENDQxMTAvBgNVBAUTKDlGMDY2Q0I4NUY1Qjg4RjgyMzc4MEQ1Rjk2NjI1RjQz ODU0ODFCQkYwHhcNMjUwNDI0MjE0MjQzWhcNMjUwNTAxMjE0MjQzWjAYMRYwFAYD VQQDEw02ODBhYjA1My1iZjdlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy+3DFwacT+idA+/KePI8xIodLSsOYxYQZePzWvLv53R+QYqTPO3VKp9kEGm0 TUAqHKFmYvZAGp3Dlndez6eZ/p11MUZiF8ctnbfWzi2LVQ5IFlz5ZOwbtFI81NRl D60b/mBIAuxTmmbS0uPjJa05Ds9RZl9Fw6tNL6Okuj40iXKBcCYtFIwiZ2jV3qo+ pBDLsm1bDsDay1kTU00q0YPsCfYpfNTfisXWAnDoavdoD9uuAhBJ7arY57v9zxxL FbSxCnUsj17/vUoKHl4hqIKEvprwusaZanYc+8h7/ZZKhRp5aExZEk0x2H963vO0 nHJ+Qg1GhzP7ahiSrqkdJU+YTQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBYcy6Bt m1y08zSZeeIR6EWMaVVWMB8GA1UdIwQYMBaAFJ8GbLhfW4j4I3gNX5ZiX0OFSBu/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5REQ0NC9EOEUzMUU3NjNB MUUxMUVCQUU0RUQ0MUFDNEY5QUUwMi9ud1pzdUY5YmlQZ2plQTFmbG1KZlE0VklH NzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL253WnN1RjliaVBnamVBMWZsbUpmUTRWSUc3OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 REQ0NC9EOEUzMUU3NjNBMUUxMUVCQUU0RUQ0MUFDNEY5QUUwMi9ud1pzdUY5YmlQ Z2plQTFmbG1KZlE0VklHNzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDKVCeTN6FcH0AYmmS2rgnQKGopPaLJFEkzhuCZSbxTglZ4kUHv9niD kk+F7Hm1rCcB5Cb67UHhnMR1Fgt9PPUMq7xa5ggZ6ZziF87ylFC8Pew8EloLDMs4 AFjLEpf0j62MMs1ErTyX6Jr/rjE4SJPwnzbt5nSRr8S9XrZy2/VIXIQCF85nYdmG wq8Np/aA2n9KLOhon30Dh8mnWcMd/Wbr26LvBda5CxeREE7obA9ESG2Uo4Yyg85Z NnLWyFq0mRmtuosQ/1mBT+pPKSwye0TfLJper74A68IFJFFCNcocTARpsXQ1aWEh GRZ98VZnci5UrZE/xqNKE1EnzkVvC7qM -----END CERTIFICATE-----Generated at Sat Apr 26 04:38:22 2025 by rpki-client