$ rpki-client -vvf rpki.apnic.net/member_repository/A9116D68/724CC84C788711E9A08AEC60C4F9AE02/rN0Hh_30YaFfcqHizj449FTtIHI.mft File: rN0Hh_30YaFfcqHizj449FTtIHI.mft (raw, json) Hash identifier: 3OOOHnezUQgMK1DjmRRtYPepcJFJQDHNmvheG8gFVAI= Subject key identifier: 98:0F:98:73:62:79:3F:1D:35:B2:E5:49:70:3F:16:4B:30:49:88:FE Authority key identifier: AC:DD:07:87:FD:F4:61:A1:5F:72:A1:E2:CE:3E:38:F4:54:ED:20:72 Certificate issuer: /CN=A9116D68/serialNumber=ACDD0787FDF461A15F72A1E2CE3E38F454ED2072 Certificate serial: 0EFC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rN0Hh_30YaFfcqHizj449FTtIHI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9116D68/724CC84C788711E9A08AEC60C4F9AE02/rN0Hh_30YaFfcqHizj449FTtIHI.mft Manifest number: 1743 Signing time: Mon 12 May 2025 17:33:16 +0000 Manifest this update: Mon 12 May 2025 17:33:16 +0000 Manifest next update: Mon 19 May 2025 17:33:16 +0000 Files and hashes: 1: rN0Hh_30YaFfcqHizj449FTtIHI.crl (hash: JIl1GHzBL8mUNNzxdOoaiHc/dysg3q6CU6csOkobP98=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9116D68/724CC84C788711E9A08AEC60C4F9AE02/rN0Hh_30YaFfcqHizj449FTtIHI.crl rsync://rpki.apnic.net/member_repository/A9116D68/724CC84C788711E9A08AEC60C4F9AE02/rN0Hh_30YaFfcqHizj449FTtIHI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rN0Hh_30YaFfcqHizj449FTtIHI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 17:33:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3836 (0xefc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9116D68, serialNumber=ACDD0787FDF461A15F72A1E2CE3E38F454ED2072 Validity Not Before: May 12 17:33:16 2025 GMT Not After : May 19 17:33:16 2025 GMT Subject: CN=682230dc-dbb9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:58:2b:a6:20:a8:3d:7a:a6:7c:a4:28:7b:56: 98:0a:6a:ad:84:75:8f:69:8b:6f:c5:6c:16:82:86: f2:0f:dc:65:06:aa:f8:97:86:cf:c0:87:7d:91:73: f3:2c:30:ba:e1:ba:d6:c2:e5:17:2c:bd:d3:4d:00: c5:35:0d:3f:7e:6b:a2:25:f4:a6:12:7d:45:ae:12: b3:54:15:84:d9:96:8e:6c:7f:62:2e:02:a5:52:6c: f8:f9:58:42:f9:8b:f0:85:2a:d2:57:f1:d5:3d:53: 9e:bc:a3:79:a3:1c:82:82:7a:96:55:65:87:9f:f7: 02:1a:e6:75:80:90:0b:8a:ce:5c:29:99:e0:3c:e9: 21:59:05:f5:6e:0e:95:32:ec:b8:3e:6d:40:79:ad: 14:be:c4:3c:fa:4d:69:dc:c4:a4:77:80:9f:28:5a: 03:f2:19:73:de:b1:ca:53:cb:60:ac:b0:1d:da:b9: ee:a7:1a:6c:a1:f2:f1:8a:91:2c:42:68:6c:a7:ec: 0f:67:4e:ff:d5:0c:40:08:4b:00:f8:d7:22:0f:01: 43:bf:ee:af:c6:78:67:1a:37:3a:42:00:4e:ad:97: fb:c4:3d:a7:03:66:00:4e:48:61:a2:f2:fa:ae:ab: 3d:e8:5e:37:60:b5:f5:21:5b:54:9a:08:3f:3a:cb: d2:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:0F:98:73:62:79:3F:1D:35:B2:E5:49:70:3F:16:4B:30:49:88:FE X509v3 Authority Key Identifier: keyid:AC:DD:07:87:FD:F4:61:A1:5F:72:A1:E2:CE:3E:38:F4:54:ED:20:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9116D68/724CC84C788711E9A08AEC60C4F9AE02/rN0Hh_30YaFfcqHizj449FTtIHI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rN0Hh_30YaFfcqHizj449FTtIHI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9116D68/724CC84C788711E9A08AEC60C4F9AE02/rN0Hh_30YaFfcqHizj449FTtIHI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d3:1e:b2:6b:53:71:01:14:f1:6b:45:a8:4a:0e:e5:8b:ab:30: 65:fd:04:01:99:5a:1a:e4:3a:34:03:65:33:4a:b2:ea:ed:fb: 67:c2:dc:f5:da:a5:b4:99:71:d8:e3:1f:66:a8:c6:2b:44:a6: 3b:ce:35:34:4f:cd:16:c7:92:bd:8c:9c:96:c3:e2:49:e0:bb: 3c:d0:d2:7b:d7:dc:86:55:da:4e:fb:04:bf:1e:00:17:2b:dc: 00:06:8d:2c:67:a8:64:ef:f4:d0:c4:9f:de:26:53:94:62:16: 8c:40:20:3e:8b:fb:b9:85:5f:6b:ca:e8:4e:51:33:3d:aa:11: 9e:ee:3e:c2:43:15:cd:21:f6:aa:3e:fb:f2:39:4c:97:3e:16: fc:bd:7b:5e:35:37:f2:d7:71:b1:3b:56:87:e3:e2:e9:45:e9: 30:94:2d:11:86:d8:8f:58:46:06:a9:96:c2:81:2c:92:fe:8a: 0e:8c:87:36:22:86:b4:2d:40:a1:a8:37:91:2d:84:7a:c5:5e: bf:6c:34:11:7f:75:48:5f:39:56:db:95:27:54:b3:08:8d:f0: 5e:10:e5:94:05:65:6a:96:96:6d:91:22:3d:f6:a1:0d:8b:a2: 71:b7:25:31:22:4e:b9:a8:bb:2e:c4:38:fd:89:41:60:91:c3: 44:5d:b1:de -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDvwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTZENjgxMTAvBgNVBAUTKEFDREQwNzg3RkRGNDYxQTE1RjcyQTFFMkNFM0UzOEY0 NTRFRDIwNzIwHhcNMjUwNTEyMTczMzE2WhcNMjUwNTE5MTczMzE2WjAYMRYwFAYD VQQDEw02ODIyMzBkYy1kYmI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1VgrpiCoPXqmfKQoe1aYCmqthHWPaYtvxWwWgobyD9xlBqr4l4bPwId9kXPz LDC64brWwuUXLL3TTQDFNQ0/fmuiJfSmEn1FrhKzVBWE2ZaObH9iLgKlUmz4+VhC +YvwhSrSV/HVPVOevKN5oxyCgnqWVWWHn/cCGuZ1gJALis5cKZngPOkhWQX1bg6V Muy4Pm1Aea0UvsQ8+k1p3MSkd4CfKFoD8hlz3rHKU8tgrLAd2rnupxpsofLxipEs Qmhsp+wPZ07/1QxACEsA+NciDwFDv+6vxnhnGjc6QgBOrZf7xD2nA2YATkhhovL6 rqs96F43YLX1IVtUmgg/OsvSlQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJgPmHNi eT8dNbLlSXA/FkswSYj+MB8GA1UdIwQYMBaAFKzdB4f99GGhX3Kh4s4+OPRU7SBy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNkQ2OC83MjRDQzg0Qzc4 ODcxMUU5QTA4QUVDNjBDNEY5QUUwMi9yTjBIaF8zMFlhRmZjcUhpemo0NDlGVHRJ SEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JOMEhoXzMwWWFGZmNxSGl6ajQ0OUZUdElISS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NkQ2OC83MjRDQzg0Qzc4ODcxMUU5QTA4QUVDNjBDNEY5QUUwMi9yTjBIaF8zMFlh RmZjcUhpemo0NDlGVHRJSEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDTHrJrU3EBFPFrRahKDuWLqzBl/QQBmVoa5Do0A2UzSrLq7ftnwtz1 2qW0mXHY4x9mqMYrRKY7zjU0T80Wx5K9jJyWw+JJ4Ls80NJ719yGVdpO+wS/HgAX K9wABo0sZ6hk7/TQxJ/eJlOUYhaMQCA+i/u5hV9ryuhOUTM9qhGe7j7CQxXNIfaq PvvyOUyXPhb8vXteNTfy13GxO1aH4+LpRekwlC0RhtiPWEYGqZbCgSyS/ooOjIc2 Ioa0LUChqDeRLYR6xV6/bDQRf3VIXzlW25UnVLMIjfBeEOWUBWVqlpZtkSI99qEN i6JxtyUxIk65qLsuxDj9iUFgkcNEXbHe -----END CERTIFICATE-----Generated at Wed May 14 08:10:07 2025 by rpki-client