$ rpki-client -vvf rpki.apnic.net/member_repository/A919F450/B98171DA534611EC9B90A47BC4F9AE02/nN-M6Qv3n4wUjR92H5lNghsknHE.mft File: nN-M6Qv3n4wUjR92H5lNghsknHE.mft (raw, json) Hash identifier: sKtSL/dnxPwf2wmiT0zsje95V5khPwgocitjxljl5x8= Subject key identifier: 72:E2:86:3F:09:39:86:C2:87:FA:16:FE:86:79:64:40:8C:41:A9:2F Authority key identifier: 9C:DF:8C:E9:0B:F7:9F:8C:14:8D:1F:76:1F:99:4D:82:1B:24:9C:71 Certificate issuer: /CN=A919F450/serialNumber=9CDF8CE90BF79F8C148D1F761F994D821B249C71 Certificate serial: 0448 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nN-M6Qv3n4wUjR92H5lNghsknHE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919F450/B98171DA534611EC9B90A47BC4F9AE02/nN-M6Qv3n4wUjR92H5lNghsknHE.mft Manifest number: 0443 Signing time: Fri 25 Apr 2025 00:02:03 +0000 Manifest this update: Fri 25 Apr 2025 00:02:03 +0000 Manifest next update: Fri 02 May 2025 00:02:02 +0000 Files and hashes: 1: nN-M6Qv3n4wUjR92H5lNghsknHE.crl (hash: oLLmvYBG6yghjt94n8Gw6ow3DwhnzQrMlS2r4Ll4Lmo=) 2: DDE2BB7C534811EC8FFBDB7CC4F9AE02.roa (hash: 9BjSNtNI0t5KFZOPEwLsrwtwuYFD1A/cyJU1JZKxEKU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919F450/B98171DA534611EC9B90A47BC4F9AE02/nN-M6Qv3n4wUjR92H5lNghsknHE.crl rsync://rpki.apnic.net/member_repository/A919F450/B98171DA534611EC9B90A47BC4F9AE02/nN-M6Qv3n4wUjR92H5lNghsknHE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nN-M6Qv3n4wUjR92H5lNghsknHE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 00:02:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1096 (0x448) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919F450, serialNumber=9CDF8CE90BF79F8C148D1F761F994D821B249C71 Validity Not Before: Apr 25 00:02:03 2025 GMT Not After : May 2 00:02:02 2025 GMT Subject: CN=680ad0fb-dd8d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:4d:62:f4:ab:d2:83:08:6f:31:fb:54:b1:9f: 8b:bb:7b:f6:29:0d:17:20:96:35:0d:04:bd:2c:fe: fa:23:40:fe:1f:71:04:e6:de:7b:a4:6d:fd:04:41: e5:07:14:f0:07:00:92:a5:16:d3:c6:37:8f:fc:3f: 62:d1:3a:36:a8:c6:de:37:03:9d:6c:8f:19:b9:cb: 32:0d:74:35:ca:eb:d9:18:2a:c1:1b:3c:50:ed:6f: 47:45:77:1f:d6:5e:de:3b:17:75:2c:c4:0c:15:26: 61:9f:10:71:45:03:c0:c6:99:48:85:92:0f:0a:db: 9b:1f:62:ee:18:74:43:d8:c5:23:c6:21:2a:60:12: 89:53:80:d0:c2:92:f4:56:c9:a8:b8:cd:00:89:59: 13:5a:0d:f7:95:45:ed:ca:32:c8:b4:90:cc:0b:ee: ae:d5:80:6c:c0:0b:32:b9:fa:36:29:7b:f7:f6:43: 81:8b:37:28:2a:18:29:50:94:cc:39:95:9d:95:31: 76:fb:f5:cd:5d:88:85:56:ee:a0:aa:b0:99:11:82: 88:fc:ed:d8:fb:ba:7c:d8:0d:75:e2:b8:5d:2a:7d: 6e:e9:27:7d:b8:c3:14:3d:45:1d:f3:8f:70:f9:b0: ee:32:57:10:b4:82:54:42:72:4b:58:9e:d7:36:48: 19:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:E2:86:3F:09:39:86:C2:87:FA:16:FE:86:79:64:40:8C:41:A9:2F X509v3 Authority Key Identifier: keyid:9C:DF:8C:E9:0B:F7:9F:8C:14:8D:1F:76:1F:99:4D:82:1B:24:9C:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919F450/B98171DA534611EC9B90A47BC4F9AE02/nN-M6Qv3n4wUjR92H5lNghsknHE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nN-M6Qv3n4wUjR92H5lNghsknHE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919F450/B98171DA534611EC9B90A47BC4F9AE02/nN-M6Qv3n4wUjR92H5lNghsknHE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6a:dd:a2:fc:91:a3:38:50:3e:1e:31:57:54:e6:8a:7d:47:e7: 40:4f:52:50:5a:11:a0:b2:69:1c:e1:ba:ec:84:13:0c:4e:d5: b1:82:49:26:75:4d:52:18:d0:b1:dc:9b:4a:79:58:e9:4c:49: 4b:80:e0:a0:95:31:3e:08:91:5e:f0:49:4c:96:72:2e:2e:c2: 89:ef:54:ea:40:b0:f0:c5:09:6d:56:2a:22:cf:b1:94:e1:b7: 31:ef:17:1d:43:79:e5:f7:dc:c1:60:11:24:c9:2f:43:77:1f: 7e:b1:8f:2c:ef:41:22:a0:60:11:fc:1f:40:fd:2f:42:16:bf: c8:d8:61:4a:52:92:11:2f:de:d6:e9:a3:c9:73:b2:2e:55:e0: fb:ca:6a:68:5b:8f:51:5a:be:e1:c8:9b:f9:7f:a9:dd:70:df: da:87:7e:a0:b7:ae:ed:cd:fa:53:de:9b:e8:56:ba:e2:a2:90: bf:fe:57:83:50:09:7c:b4:c4:72:bb:b0:4c:ef:e8:b2:17:98: 49:3b:68:96:f5:e5:21:9d:89:8c:44:5a:01:60:c4:65:6a:92: ce:ef:40:67:40:c6:cf:0e:98:14:ca:56:ae:47:7c:f0:e4:db: f0:80:d6:8d:e4:c5:28:bd:31:d0:82:ca:7a:f6:6a:6f:e2:fd: 10:4f:cb:8c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBEgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUY0NTAxMTAvBgNVBAUTKDlDREY4Q0U5MEJGNzlGOEMxNDhEMUY3NjFGOTk0RDgy MUIyNDlDNzEwHhcNMjUwNDI1MDAwMjAzWhcNMjUwNTAyMDAwMjAyWjAYMRYwFAYD VQQDEw02ODBhZDBmYi1kZDhkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA001i9KvSgwhvMftUsZ+Lu3v2KQ0XIJY1DQS9LP76I0D+H3EE5t57pG39BEHl BxTwBwCSpRbTxjeP/D9i0To2qMbeNwOdbI8ZucsyDXQ1yuvZGCrBGzxQ7W9HRXcf 1l7eOxd1LMQMFSZhnxBxRQPAxplIhZIPCtubH2LuGHRD2MUjxiEqYBKJU4DQwpL0 VsmouM0AiVkTWg33lUXtyjLItJDMC+6u1YBswAsyufo2KXv39kOBizcoKhgpUJTM OZWdlTF2+/XNXYiFVu6gqrCZEYKI/O3Y+7p82A114rhdKn1u6Sd9uMMUPUUd849w +bDuMlcQtIJUQnJLWJ7XNkgZqwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHLihj8J OYbCh/oW/oZ5ZECMQakvMB8GA1UdIwQYMBaAFJzfjOkL95+MFI0fdh+ZTYIbJJxx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RjQ1MC9COTgxNzFEQTUz NDYxMUVDOUI5MEE0N0JDNEY5QUUwMi9uTi1NNlF2M240d1VqUjkySDVsTmdoc2tu SEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25OLU02UXYzbjR3VWpSOTJINWxOZ2hza25IRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RjQ1MC9COTgxNzFEQTUzNDYxMUVDOUI5MEE0N0JDNEY5QUUwMi9uTi1NNlF2M240 d1VqUjkySDVsTmdoc2tuSEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBq3aL8kaM4UD4eMVdU5op9R+dAT1JQWhGgsmkc4brshBMMTtWxgkkm dU1SGNCx3JtKeVjpTElLgOCglTE+CJFe8ElMlnIuLsKJ71TqQLDwxQltVioiz7GU 4bcx7xcdQ3nl99zBYBEkyS9Ddx9+sY8s70EioGAR/B9A/S9CFr/I2GFKUpIRL97W 6aPJc7IuVeD7ympoW49RWr7hyJv5f6ndcN/ah36gt67tzfpT3pvoVrriopC//leD UAl8tMRyu7BM7+iyF5hJO2iW9eUhnYmMRFoBYMRlapLO70BnQMbPDpgUylauR3zw 5NvwgNaN5MUovTHQgsp69mpv4v0QT8uM -----END CERTIFICATE-----Generated at Sat Apr 26 05:27:01 2025 by rpki-client