$ rpki-client -vvf rpki.apnic.net/member_repository/A9113E79/11154DDC13E011EC977E4178C4F9AE02/nPMspRGaIvijMFkQ1ANfaLP8IUw.mft File: nPMspRGaIvijMFkQ1ANfaLP8IUw.mft (raw, json) Hash identifier: gf5xF0PfHyLQrmKcCl6qX5MOQHEQjTDEOidTvz09BME= Subject key identifier: 45:11:8C:C1:2B:0D:39:D4:18:69:F5:8F:D9:FD:F4:E5:48:CD:EB:14 Authority key identifier: 9C:F3:2C:A5:11:9A:22:F8:A3:30:59:10:D4:03:5F:68:B3:FC:21:4C Certificate issuer: /CN=A9113E79/serialNumber=9CF32CA5119A22F8A3305910D4035F68B3FC214C Certificate serial: 04EA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nPMspRGaIvijMFkQ1ANfaLP8IUw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9113E79/11154DDC13E011EC977E4178C4F9AE02/nPMspRGaIvijMFkQ1ANfaLP8IUw.mft Manifest number: 04E6 Signing time: Sat 10 May 2025 23:19:33 +0000 Manifest this update: Sat 10 May 2025 23:19:32 +0000 Manifest next update: Sat 17 May 2025 23:19:32 +0000 Files and hashes: 1: nPMspRGaIvijMFkQ1ANfaLP8IUw.crl (hash: EbiW6QVin/xny1flMZ9+1HxNABUuSDQjKOKTDiY2ssY=) 2: 55D5848813E411EC9BE4C87FC4F9AE02.roa (hash: IhuzHy2i1HilFEQnpW2ccDVOUFu06otCgruwg3LwU+w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9113E79/11154DDC13E011EC977E4178C4F9AE02/nPMspRGaIvijMFkQ1ANfaLP8IUw.crl rsync://rpki.apnic.net/member_repository/A9113E79/11154DDC13E011EC977E4178C4F9AE02/nPMspRGaIvijMFkQ1ANfaLP8IUw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nPMspRGaIvijMFkQ1ANfaLP8IUw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 23:19:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1258 (0x4ea) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9113E79, serialNumber=9CF32CA5119A22F8A3305910D4035F68B3FC214C Validity Not Before: May 10 23:19:32 2025 GMT Not After : May 17 23:19:32 2025 GMT Subject: CN=681fdf05-cd10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:41:cc:80:f7:34:c4:bd:e4:2f:18:7e:1e:2a: 61:df:df:19:af:74:21:dd:94:1f:e4:d2:d5:27:90: 7c:8d:5b:0e:ff:f0:9e:52:3c:82:9a:21:5f:11:43: e7:bc:4b:8d:97:54:16:ee:6d:a2:01:02:0f:d3:32: 59:3f:e3:b9:d6:41:25:bd:fd:37:8d:52:4e:0d:9d: 3a:ba:f7:0c:34:d7:17:55:28:7c:27:6c:5e:21:2d: 04:ae:41:ee:bd:90:48:07:0e:44:b2:f4:d3:9b:d1: 2a:66:0f:32:e8:bf:4f:20:7e:e0:67:ba:99:52:5f: 29:49:3b:a1:46:5b:a8:4d:e2:2f:f3:8d:e2:7d:52: 6d:4e:39:4c:d0:66:b9:c5:d1:f4:d6:27:e8:6b:01: 67:0f:84:e0:85:cb:9a:89:b0:56:01:5d:1f:ae:60: ff:b6:fb:ed:67:70:1a:e0:d5:c2:3e:33:a1:54:01: ca:11:47:10:e8:6d:f9:ed:1e:8d:4c:e8:df:cd:fc: a5:d7:af:71:c7:0c:12:ab:ea:de:c9:81:f6:45:4c: d2:95:16:16:ca:97:0d:f9:63:e8:dc:c5:6e:05:f9: 7f:9d:81:1a:04:45:3f:dc:f4:fa:65:68:6d:14:0c: 37:f8:1f:68:45:e8:fb:ec:e8:5e:18:bf:29:db:fc: ae:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:11:8C:C1:2B:0D:39:D4:18:69:F5:8F:D9:FD:F4:E5:48:CD:EB:14 X509v3 Authority Key Identifier: keyid:9C:F3:2C:A5:11:9A:22:F8:A3:30:59:10:D4:03:5F:68:B3:FC:21:4C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9113E79/11154DDC13E011EC977E4178C4F9AE02/nPMspRGaIvijMFkQ1ANfaLP8IUw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nPMspRGaIvijMFkQ1ANfaLP8IUw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9113E79/11154DDC13E011EC977E4178C4F9AE02/nPMspRGaIvijMFkQ1ANfaLP8IUw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 97:bb:c0:d0:fb:56:88:dc:8a:0c:75:5b:80:d8:8c:38:40:bd: b2:59:2e:42:70:08:27:09:c4:f6:6d:e4:82:f8:44:0a:f0:18: 91:71:3b:9b:f5:7b:71:a9:29:c7:75:1c:87:f8:fe:c3:d0:41: cd:26:74:c8:e6:c8:ad:8f:ef:f9:20:3b:1b:31:c9:35:21:73: 8b:a4:24:0b:28:78:bc:08:4e:ee:a0:c2:b0:3a:bc:a7:c9:39: dd:f1:c0:47:0e:e8:47:5c:24:a5:95:e0:eb:c4:9c:db:6b:e3: 94:82:6b:c6:10:38:ff:83:4f:8f:b0:2c:e4:88:be:3c:08:d8: 63:72:75:3e:77:2b:67:02:54:18:bd:af:26:6e:cc:47:4b:e7: 53:81:d2:37:90:ef:4e:cd:c2:51:1d:54:e4:76:d7:d7:b3:bd: 9d:74:0d:a6:3e:b6:78:6e:09:0d:fd:24:ac:8a:fe:9c:a5:c1: 05:3e:bc:ec:d3:fe:4c:f9:a8:f6:8e:22:45:c4:42:b6:c3:c4: 6b:08:52:30:c8:9b:f9:04:4b:57:79:b0:70:37:f4:f8:56:bc: 19:53:78:ca:ff:88:35:54:f9:77:04:dd:05:a5:5a:03:b6:b1: 66:67:d9:44:41:3a:ee:3d:0e:fb:9b:e2:63:fa:51:da:42:89: 9c:a2:74:cf -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBOowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTNFNzkxMTAvBgNVBAUTKDlDRjMyQ0E1MTE5QTIyRjhBMzMwNTkxMEQ0MDM1RjY4 QjNGQzIxNEMwHhcNMjUwNTEwMjMxOTMyWhcNMjUwNTE3MjMxOTMyWjAYMRYwFAYD VQQDEw02ODFmZGYwNS1jZDEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA50HMgPc0xL3kLxh+Hiph398Zr3Qh3ZQf5NLVJ5B8jVsO//CeUjyCmiFfEUPn vEuNl1QW7m2iAQIP0zJZP+O51kElvf03jVJODZ06uvcMNNcXVSh8J2xeIS0ErkHu vZBIBw5EsvTTm9EqZg8y6L9PIH7gZ7qZUl8pSTuhRluoTeIv843ifVJtTjlM0Ga5 xdH01ifoawFnD4TghcuaibBWAV0frmD/tvvtZ3Aa4NXCPjOhVAHKEUcQ6G357R6N TOjfzfyl169xxwwSq+reyYH2RUzSlRYWypcN+WPo3MVuBfl/nYEaBEU/3PT6ZWht FAw3+B9oRej77OheGL8p2/yufQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEURjMEr DTnUGGn1j9n99OVIzesUMB8GA1UdIwQYMBaAFJzzLKURmiL4ozBZENQDX2iz/CFM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExM0U3OS8xMTE1NEREQzEz RTAxMUVDOTc3RTQxNzhDNEY5QUUwMi9uUE1zcFJHYUl2aWpNRmtRMUFOZmFMUDhJ VXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25QTXNwUkdhSXZpak1Ga1ExQU5mYUxQOElVdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx M0U3OS8xMTE1NEREQzEzRTAxMUVDOTc3RTQxNzhDNEY5QUUwMi9uUE1zcFJHYUl2 aWpNRmtRMUFOZmFMUDhJVXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCXu8DQ+1aI3IoMdVuA2Iw4QL2yWS5CcAgnCcT2beSC+EQK8BiRcTub 9XtxqSnHdRyH+P7D0EHNJnTI5sitj+/5IDsbMck1IXOLpCQLKHi8CE7uoMKwOryn yTnd8cBHDuhHXCSlleDrxJzba+OUgmvGEDj/g0+PsCzkiL48CNhjcnU+dytnAlQY va8mbsxHS+dTgdI3kO9OzcJRHVTkdtfXs72ddA2mPrZ4bgkN/SSsiv6cpcEFPrzs 0/5M+aj2jiJFxEK2w8RrCFIwyJv5BEtXebBwN/T4VrwZU3jK/4g1VPl3BN0FpVoD trFmZ9lEQTruPQ77m+Jj+lHaQomconTP -----END CERTIFICATE-----Generated at Sun May 11 18:51:58 2025 by rpki-client