$ rpki-client -vvf rpki.apnic.net/member_repository/A9123918/8EE71486B6C411EFB10EDE58C4F9AE02/ecf8XRpe7wspjgByMmq3Noa9_ng.mft File: ecf8XRpe7wspjgByMmq3Noa9_ng.mft (raw, json) Hash identifier: t0sY56NaGvGRZFk7UxhHS1JPuWh4s/ZN74VbDHScthk= Subject key identifier: F6:CC:AC:1C:ED:9E:68:8F:93:C3:7F:35:19:87:08:F5:7A:FD:51:A0 Authority key identifier: 79:C7:FC:5D:1A:5E:EF:0B:29:8E:00:72:32:6A:B7:36:86:BD:FE:78 Certificate issuer: /CN=A9123918/serialNumber=79C7FC5D1A5EEF0B298E0072326AB73686BDFE78 Certificate serial: 54 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ecf8XRpe7wspjgByMmq3Noa9_ng.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9123918/8EE71486B6C411EFB10EDE58C4F9AE02/ecf8XRpe7wspjgByMmq3Noa9_ng.mft Manifest number: 52 Signing time: Sun 11 May 2025 06:02:28 +0000 Manifest this update: Sun 11 May 2025 06:02:27 +0000 Manifest next update: Sun 18 May 2025 06:02:27 +0000 Files and hashes: 1: ecf8XRpe7wspjgByMmq3Noa9_ng.crl (hash: rfKHWLBOCcw3UTn+tdeuaGmuCBw7UGcPN8y6qnRMBsc=) 2: AD3C9B54BE2611EFA4133323C4F9AE02.roa (hash: 2/xqAVW2RjqNg3GXYQ9uSs72OTWvi6aXWMtqLBm8vdk=) 3: 345F7BDCF80C11EF831DA737C4F9AE02.roa (hash: dqTwEXk6/WsKatxBnEyYDrfeHsARE7OU6TqF9rX2NCc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9123918/8EE71486B6C411EFB10EDE58C4F9AE02/ecf8XRpe7wspjgByMmq3Noa9_ng.crl rsync://rpki.apnic.net/member_repository/A9123918/8EE71486B6C411EFB10EDE58C4F9AE02/ecf8XRpe7wspjgByMmq3Noa9_ng.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ecf8XRpe7wspjgByMmq3Noa9_ng.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 May 2025 06:02:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 84 (0x54) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9123918, serialNumber=79C7FC5D1A5EEF0B298E0072326AB73686BDFE78 Validity Not Before: May 11 06:02:27 2025 GMT Not After : May 18 06:02:27 2025 GMT Subject: CN=68203d73-1f1a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:6c:c6:bf:af:f8:8a:a9:7f:8a:43:64:e3:02: e2:19:da:fd:dd:a4:b4:a1:43:d7:aa:68:a0:45:aa: f7:23:39:60:a9:97:6d:f4:f3:d7:42:7d:38:f8:f1: 06:c0:e4:f9:fc:a4:69:f6:2e:30:af:d5:8e:c9:11: 63:2a:bc:d2:a7:ea:2e:e4:c4:b0:bc:ad:9f:6c:a4: ac:4d:80:be:f5:6e:09:5b:fd:17:e5:1e:ef:4b:a6: 14:c1:13:e9:f3:29:bf:fc:fc:ec:7b:fc:a0:83:1a: ac:b8:62:81:a5:ef:0e:31:35:5f:f3:c3:64:8d:98: 8c:a3:64:3d:22:a4:04:48:4c:40:8c:4f:5f:0a:db: 45:10:8b:b6:f1:c9:a9:8b:29:13:84:b8:e7:19:98: 6d:a0:12:59:dd:54:56:cd:dd:52:c2:dc:be:7c:f6: ba:8d:cf:28:ef:45:a2:8d:b5:e6:d0:4e:69:66:43: 32:e6:98:76:4e:c7:61:48:39:fa:1e:9a:28:b1:cd: 4d:d0:48:1c:01:c1:cb:8f:99:60:2d:f8:bc:2e:34: a4:9d:40:0c:4d:fa:f2:dc:d4:46:e6:36:60:80:2a: fd:0c:ec:08:21:10:19:e8:ac:28:ac:f4:7d:ed:22: bc:6a:22:27:7d:85:52:a7:64:d5:26:ea:ba:0a:82: 0a:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:CC:AC:1C:ED:9E:68:8F:93:C3:7F:35:19:87:08:F5:7A:FD:51:A0 X509v3 Authority Key Identifier: keyid:79:C7:FC:5D:1A:5E:EF:0B:29:8E:00:72:32:6A:B7:36:86:BD:FE:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9123918/8EE71486B6C411EFB10EDE58C4F9AE02/ecf8XRpe7wspjgByMmq3Noa9_ng.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ecf8XRpe7wspjgByMmq3Noa9_ng.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9123918/8EE71486B6C411EFB10EDE58C4F9AE02/ecf8XRpe7wspjgByMmq3Noa9_ng.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a7:33:70:39:d5:4f:8f:c6:12:41:8e:03:db:c9:4d:dd:56:f2: 69:ae:3a:26:9b:80:b5:3a:9b:7a:83:75:7c:3b:7c:82:dc:7e: 40:de:c2:6f:9b:96:c1:f7:d1:2a:ef:2e:a2:d5:c8:c4:06:a8: ab:7f:54:34:ec:d8:6a:4f:da:b1:91:2a:b9:38:8d:b7:9b:5e: 7f:f0:c7:c9:51:d9:12:13:6c:14:91:ab:8d:4e:fb:d5:94:ee: 74:f6:6a:9d:1e:5e:b5:45:19:18:e7:9e:fd:da:ae:c7:91:a1: ee:72:8f:34:4a:6d:2d:81:1f:ff:9b:24:ff:c8:36:91:e1:8d: 0f:10:6c:71:a3:99:e4:c1:38:64:b9:e6:07:3f:90:02:00:2c: e8:54:c8:1a:66:b8:a5:3a:f0:1d:a3:af:df:bb:87:c9:d3:d3: e6:ad:53:60:af:3f:f5:ee:1e:33:6e:40:95:75:13:0f:7c:7f: 87:12:64:91:30:0c:ae:a5:3c:31:75:a2:95:5a:31:fd:ec:0e: 61:b5:b3:ae:7f:e3:5c:97:8c:71:20:9e:fe:56:40:76:8a:96: 58:9d:b8:d3:d4:0e:a0:a7:65:30:cd:a8:37:66:d8:0e:9f:98: 68:3f:9c:31:51:09:82:b4:fb:5f:d4:d0:e0:62:8e:5d:c7:61: 69:55:7f:fd -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBVDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy MzkxODExMC8GA1UEBRMoNzlDN0ZDNUQxQTVFRUYwQjI5OEUwMDcyMzI2QUI3MzY4 NkJERkU3ODAeFw0yNTA1MTEwNjAyMjdaFw0yNTA1MTgwNjAyMjdaMBgxFjAUBgNV BAMTDTY4MjAzZDczLTFmMWEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDLbMa/r/iKqX+KQ2TjAuIZ2v3dpLShQ9eqaKBFqvcjOWCpl23089dCfTj48QbA 5Pn8pGn2LjCv1Y7JEWMqvNKn6i7kxLC8rZ9spKxNgL71bglb/RflHu9LphTBE+nz Kb/8/Ox7/KCDGqy4YoGl7w4xNV/zw2SNmIyjZD0ipARITECMT18K20UQi7bxyamL KROEuOcZmG2gElndVFbN3VLC3L589rqNzyjvRaKNtebQTmlmQzLmmHZOx2FIOfoe miixzU3QSBwBwcuPmWAt+LwuNKSdQAxN+vLc1EbmNmCAKv0M7AghEBnorCis9H3t IrxqIid9hVKnZNUm6roKggqPAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU9sysHO2e aI+Tw381GYcI9Xr9UaAwHwYDVR0jBBgwFoAUecf8XRpe7wspjgByMmq3Noa9/ngw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTIzOTE4LzhFRTcxNDg2QjZD NDExRUZCMTBFREU1OEM0RjlBRTAyL2VjZjhYUnBlN3dzcGpnQnlNbXEzTm9hOV9u Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvZWNmOFhScGU3d3NwamdCeU1tcTNOb2E5X25nLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTIz OTE4LzhFRTcxNDg2QjZDNDExRUZCMTBFREU1OEM0RjlBRTAyL2VjZjhYUnBlN3dz cGpnQnlNbXEzTm9hOV9uZy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAKczcDnVT4/GEkGOA9vJTd1W8mmuOiabgLU6m3qDdXw7fILcfkDewm+b lsH30SrvLqLVyMQGqKt/VDTs2GpP2rGRKrk4jbebXn/wx8lR2RITbBSRq41O+9WU 7nT2ap0eXrVFGRjnnv3arseRoe5yjzRKbS2BH/+bJP/INpHhjQ8QbHGjmeTBOGS5 5gc/kAIALOhUyBpmuKU68B2jr9+7h8nT0+atU2CvP/XuHjNuQJV1Ew98f4cSZJEw DK6lPDF1opVaMf3sDmG1s65/41yXjHEgnv5WQHaKlliduNPUDqCnZTDNqDdm2A6f mGg/nDFRCYK0+1/U0OBijl3HYWlVf/0= -----END CERTIFICATE-----Generated at Mon May 12 19:41:02 2025 by rpki-client