$ rpki-client -vvf rpki.apnic.net/member_repository/A9118FFA/0586068A2B7C11EF89E84144C4F9AE02/n-iB2L0yrRWre-e07E91IhJUbHY.mft File: n-iB2L0yrRWre-e07E91IhJUbHY.mft (raw, json) Hash identifier: cqzqVEXU+L16GNlBAxFbj+w/AadzH76/CJ4nBTIc3Ag= Subject key identifier: 42:10:1E:76:A4:43:FD:34:DB:59:B4:2B:AF:16:6C:A1:97:A8:2E:9A Authority key identifier: 9F:E8:81:D8:BD:32:AD:15:AB:7B:E7:B4:EC:4F:75:22:12:54:6C:76 Certificate issuer: /CN=A9118FFA/serialNumber=9FE881D8BD32AD15AB7BE7B4EC4F752212546C76 Certificate serial: B3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n-iB2L0yrRWre-e07E91IhJUbHY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9118FFA/0586068A2B7C11EF89E84144C4F9AE02/n-iB2L0yrRWre-e07E91IhJUbHY.mft Manifest number: AF Signing time: Thu 15 May 2025 05:22:11 +0000 Manifest this update: Thu 15 May 2025 05:22:11 +0000 Manifest next update: Thu 22 May 2025 05:22:10 +0000 Files and hashes: 1: n-iB2L0yrRWre-e07E91IhJUbHY.crl (hash: WEactnwJ5aSydijpDqwGG+Ag4Omk8mU5TzxMQVdCytw=) 2: 2C6BA5E82EB511EFBCC65925C4F9AE02.roa (hash: 9SfUJfJUPtuZxpNRWiY6Pmy+Ome8ao9OIJR1s6GbHE8=) 3: E80A0D282B9D11EFB61F1148C4F9AE02.roa (hash: F0SsWsfme5DR54sccnOQA0ilylY47//E27uoZDHPm3k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9118FFA/0586068A2B7C11EF89E84144C4F9AE02/n-iB2L0yrRWre-e07E91IhJUbHY.crl rsync://rpki.apnic.net/member_repository/A9118FFA/0586068A2B7C11EF89E84144C4F9AE02/n-iB2L0yrRWre-e07E91IhJUbHY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n-iB2L0yrRWre-e07E91IhJUbHY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 22 May 2025 05:22:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 179 (0xb3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9118FFA, serialNumber=9FE881D8BD32AD15AB7BE7B4EC4F752212546C76 Validity Not Before: May 15 05:22:11 2025 GMT Not After : May 22 05:22:10 2025 GMT Subject: CN=68257a03-e406 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:1f:fd:8d:b2:92:bb:80:20:78:dd:7f:5a:be: f2:54:67:6a:d2:09:1f:d6:66:c0:3e:b1:23:58:00: c3:c3:1c:9c:ff:57:5b:1d:d9:38:85:c0:9b:30:25: 0a:f2:12:91:27:c6:5a:be:b7:f8:29:64:98:be:5f: fd:b1:7e:0d:95:28:8f:9b:b1:6b:a8:65:0a:b8:04: 3d:85:d6:79:a8:35:3d:82:6d:99:74:4d:5e:04:86: 1e:ce:9a:15:f3:e3:0d:e6:61:29:1b:c9:79:b0:16: 2f:21:b4:b6:65:c5:da:d8:ce:0e:c3:e1:17:48:d7: 0f:c7:58:84:aa:3e:96:1e:0d:67:e6:3b:38:db:de: fc:a0:dc:ee:65:06:dc:5a:a9:55:b2:6f:f3:62:d5: 54:e1:b1:7e:3f:be:72:8e:42:fb:18:8c:8c:91:10: b2:91:b9:74:94:b0:98:45:ad:87:5c:93:5b:2c:2e: ee:e2:0a:12:0f:e6:42:15:e9:f5:89:cd:d4:d9:44: 47:61:18:bd:bc:fd:cd:65:4c:21:c0:04:62:42:cb: 31:c6:9a:ba:81:fb:d0:d6:db:e7:6b:83:08:8c:f6: 3a:b2:de:2f:6b:6c:7c:b9:a4:17:63:90:79:bb:84: 8c:7d:04:5e:96:f7:ce:6b:40:6b:07:5e:b8:dd:07: 26:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:10:1E:76:A4:43:FD:34:DB:59:B4:2B:AF:16:6C:A1:97:A8:2E:9A X509v3 Authority Key Identifier: keyid:9F:E8:81:D8:BD:32:AD:15:AB:7B:E7:B4:EC:4F:75:22:12:54:6C:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9118FFA/0586068A2B7C11EF89E84144C4F9AE02/n-iB2L0yrRWre-e07E91IhJUbHY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n-iB2L0yrRWre-e07E91IhJUbHY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9118FFA/0586068A2B7C11EF89E84144C4F9AE02/n-iB2L0yrRWre-e07E91IhJUbHY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 88:dd:19:c4:e4:a9:22:51:7d:78:0c:75:20:93:2c:17:b6:b6: 93:4e:3c:38:93:d6:db:ad:b1:06:12:df:9a:7f:f4:18:61:46: b2:66:ff:92:6c:35:37:65:22:2a:09:33:d9:89:02:f6:e6:70: 53:23:21:a4:9f:a7:00:ee:65:9e:b8:f8:ae:09:d7:9c:8c:f6: 6c:35:ec:bc:bf:79:7d:7e:71:8c:d9:dc:02:9e:1f:1b:ed:9f: 4d:89:72:c0:11:80:d1:64:4f:bd:51:a8:6b:3a:9e:3c:1d:34: a4:f7:41:5e:bc:fa:d2:e4:22:56:73:ec:48:4b:0c:ac:5f:1d: 48:2c:8f:aa:20:de:ea:1a:6f:8e:6c:d2:1f:bd:a0:a4:c7:5f: 0e:19:d8:0f:b0:a9:d6:a7:a2:70:51:75:a8:ba:1c:36:3c:40: 0f:b5:fa:a4:ff:8d:7c:1a:d7:d5:00:5c:5d:2a:d0:e3:e7:8a: 02:ac:34:ef:90:93:4b:c3:f6:ea:d8:05:90:de:67:05:5d:9c: c1:4d:68:c5:bb:f6:40:e7:44:80:fe:c1:33:5f:14:56:65:79: c0:ca:2d:5c:1c:2b:ec:f9:e6:26:6f:f2:8a:e3:39:dc:38:0e: 14:ef:0b:e1:5d:42:0f:46:df:63:ab:27:c6:67:3a:21:a0:4b: 7f:8a:75:04 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MThGRkExMTAvBgNVBAUTKDlGRTg4MUQ4QkQzMkFEMTVBQjdCRTdCNEVDNEY3NTIy MTI1NDZDNzYwHhcNMjUwNTE1MDUyMjExWhcNMjUwNTIyMDUyMjEwWjAYMRYwFAYD VQQDEw02ODI1N2EwMy1lNDA2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3B/9jbKSu4AgeN1/Wr7yVGdq0gkf1mbAPrEjWADDwxyc/1dbHdk4hcCbMCUK 8hKRJ8Zavrf4KWSYvl/9sX4NlSiPm7FrqGUKuAQ9hdZ5qDU9gm2ZdE1eBIYezpoV 8+MN5mEpG8l5sBYvIbS2ZcXa2M4Ow+EXSNcPx1iEqj6WHg1n5js42978oNzuZQbc WqlVsm/zYtVU4bF+P75yjkL7GIyMkRCykbl0lLCYRa2HXJNbLC7u4goSD+ZCFen1 ic3U2URHYRi9vP3NZUwhwARiQssxxpq6gfvQ1tvna4MIjPY6st4va2x8uaQXY5B5 u4SMfQRelvfOa0BrB1643Qcm2QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEIQHnak Q/0021m0K68WbKGXqC6aMB8GA1UdIwQYMBaAFJ/ogdi9Mq0Vq3vntOxPdSISVGx2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOEZGQS8wNTg2MDY4QTJC N0MxMUVGODlFODQxNDRDNEY5QUUwMi9uLWlCMkwweXJSV3JlLWUwN0U5MUloSlVi SFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL24taUIyTDB5clJXcmUtZTA3RTkxSWhKVWJIWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx OEZGQS8wNTg2MDY4QTJCN0MxMUVGODlFODQxNDRDNEY5QUUwMi9uLWlCMkwweXJS V3JlLWUwN0U5MUloSlViSFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCI3RnE5KkiUX14DHUgkywXtraTTjw4k9bbrbEGEt+af/QYYUayZv+S bDU3ZSIqCTPZiQL25nBTIyGkn6cA7mWeuPiuCdecjPZsNey8v3l9fnGM2dwCnh8b 7Z9NiXLAEYDRZE+9UahrOp48HTSk90FevPrS5CJWc+xISwysXx1ILI+qIN7qGm+O bNIfvaCkx18OGdgPsKnWp6JwUXWouhw2PEAPtfqk/418GtfVAFxdKtDj54oCrDTv kJNLw/bq2AWQ3mcFXZzBTWjFu/ZA50SA/sEzXxRWZXnAyi1cHCvs+eYmb/KK4znc OA4U7wvhXUIPRt9jqyfGZzohoEt/inUE -----END CERTIFICATE-----Generated at Fri May 16 12:39:53 2025 by rpki-client