$ rpki-client -vvf rpki.apnic.net/member_repository/A912BCAC/0152258E82F411EE9ED1F611C4F9AE02/nL4Q18HdRLflkLUHi_xPhs-Nslo.mft File: nL4Q18HdRLflkLUHi_xPhs-Nslo.mft (raw, json) Hash identifier: xzdE7DQUqe3lAOzFG1x6+GxfGfxsqs4Mqhfkc8rSL3Q= Subject key identifier: DB:C5:56:14:39:BD:C7:FC:EF:58:46:17:1D:4F:A0:C2:2D:72:26:C8 Authority key identifier: 9C:BE:10:D7:C1:DD:44:B7:E5:90:B5:07:8B:FC:4F:86:CF:8D:B2:5A Certificate issuer: /CN=A912BCAC/serialNumber=9CBE10D7C1DD44B7E590B5078BFC4F86CF8DB25A Certificate serial: 0120 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nL4Q18HdRLflkLUHi_xPhs-Nslo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912BCAC/0152258E82F411EE9ED1F611C4F9AE02/nL4Q18HdRLflkLUHi_xPhs-Nslo.mft Manifest number: 011C Signing time: Sun 11 May 2025 03:40:22 +0000 Manifest this update: Sun 11 May 2025 03:40:21 +0000 Manifest next update: Sun 18 May 2025 03:40:21 +0000 Files and hashes: 1: nL4Q18HdRLflkLUHi_xPhs-Nslo.crl (hash: CJG5xQPhI5EGvcjLChM/HrG+h2sqtWkImbpZOeFq/hQ=) 2: 43C5BAA282F411EE99AAAB12C4F9AE02.roa (hash: rYwGjsQBpShXvyi5oxowpgOp3gdk00xJnm3EoG1TD+c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912BCAC/0152258E82F411EE9ED1F611C4F9AE02/nL4Q18HdRLflkLUHi_xPhs-Nslo.crl rsync://rpki.apnic.net/member_repository/A912BCAC/0152258E82F411EE9ED1F611C4F9AE02/nL4Q18HdRLflkLUHi_xPhs-Nslo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nL4Q18HdRLflkLUHi_xPhs-Nslo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 May 2025 03:40:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 288 (0x120) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912BCAC, serialNumber=9CBE10D7C1DD44B7E590B5078BFC4F86CF8DB25A Validity Not Before: May 11 03:40:21 2025 GMT Not After : May 18 03:40:21 2025 GMT Subject: CN=68201c26-b0b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:ef:82:11:67:29:7a:46:89:0e:eb:b8:71:30: 09:3f:25:32:95:b4:3d:83:07:6a:8f:51:f5:17:a5: 06:95:24:34:ec:df:c2:df:d1:c6:ac:e9:3a:91:be: 2e:d1:36:49:7f:2f:57:2f:7d:f1:71:90:f0:31:12: 7a:b8:88:49:23:a9:a8:f6:e6:ec:3a:80:2f:a2:d1: f2:cc:95:1a:85:19:df:2d:1f:96:52:7c:1f:99:7d: f2:39:11:59:48:de:cf:8b:c6:60:db:bc:49:b2:00: 5c:52:ad:dc:dd:5f:89:2f:37:8e:8a:5f:33:e5:18: 8f:76:fd:2a:1b:99:17:4e:43:d8:b1:7e:cd:e7:90: 79:60:51:ed:7c:d0:8c:0e:fb:02:30:1e:d3:bb:f5: d0:70:4b:cf:de:3e:13:ca:aa:cc:84:d4:e6:fa:a4: 83:65:2e:75:43:85:50:7f:a1:0d:a3:7e:c8:0e:6e: e6:9a:d7:71:2c:1f:b9:cf:be:5f:aa:e7:a4:5e:52: ce:eb:9c:94:69:ce:b0:dd:a8:ff:b7:a4:84:ce:9f: 22:a2:61:93:96:c9:7c:39:f0:68:76:c2:e9:31:6d: fd:8f:e1:86:3c:03:8a:c9:b4:ca:d0:a3:89:26:01: 36:3c:01:6f:e9:3d:9e:60:9d:11:df:da:48:6a:68: e1:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:C5:56:14:39:BD:C7:FC:EF:58:46:17:1D:4F:A0:C2:2D:72:26:C8 X509v3 Authority Key Identifier: keyid:9C:BE:10:D7:C1:DD:44:B7:E5:90:B5:07:8B:FC:4F:86:CF:8D:B2:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912BCAC/0152258E82F411EE9ED1F611C4F9AE02/nL4Q18HdRLflkLUHi_xPhs-Nslo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nL4Q18HdRLflkLUHi_xPhs-Nslo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912BCAC/0152258E82F411EE9ED1F611C4F9AE02/nL4Q18HdRLflkLUHi_xPhs-Nslo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9f:a1:8f:b8:7e:c7:a5:a6:18:00:85:bc:d7:2b:eb:09:25:13: a9:76:8b:bc:0f:b8:b0:53:25:ea:2c:b7:84:f6:40:f4:a5:18: c6:5c:2d:22:bd:60:20:80:29:b2:bd:a7:13:d9:3d:0e:ef:53: 3c:f5:76:a2:fe:b8:4b:a2:e6:a9:4d:13:b0:04:de:29:28:d5: b9:9c:ef:cf:b3:8f:d5:1a:d1:aa:68:7a:3d:ea:fa:e1:7c:a3: 33:da:85:cf:09:15:58:cd:0b:2f:f9:44:2b:36:f1:11:84:83: 9b:c7:ca:a1:6b:5b:6d:f6:4c:8e:18:ac:5c:b1:5b:63:c0:29: 2a:74:f8:3f:17:40:b2:d2:6b:1c:09:6f:22:68:09:f7:34:35: 2e:f7:cf:48:b9:d6:04:24:0b:ca:0e:3b:5a:fe:32:49:f6:19: ec:23:b4:da:64:26:73:28:27:06:96:62:89:ba:1a:f9:f9:be: c7:df:e2:be:54:88:98:ce:d7:de:81:02:b3:03:cb:71:c8:9b: b6:51:4a:6b:60:d0:c9:55:53:df:93:f0:94:cb:87:57:51:5a: 99:6e:9d:f3:9f:20:f1:dc:37:3c:53:10:37:bd:13:8f:b5:2a: da:82:67:8b:4f:4d:40:05:0e:f0:e9:21:46:67:cb:6d:99:09: a2:62:58:6f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkJDQUMxMTAvBgNVBAUTKDlDQkUxMEQ3QzFERDQ0QjdFNTkwQjUwNzhCRkM0Rjg2 Q0Y4REIyNUEwHhcNMjUwNTExMDM0MDIxWhcNMjUwNTE4MDM0MDIxWjAYMRYwFAYD VQQDEw02ODIwMWMyNi1iMGI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvu+CEWcpekaJDuu4cTAJPyUylbQ9gwdqj1H1F6UGlSQ07N/C39HGrOk6kb4u 0TZJfy9XL33xcZDwMRJ6uIhJI6mo9ubsOoAvotHyzJUahRnfLR+WUnwfmX3yORFZ SN7Pi8Zg27xJsgBcUq3c3V+JLzeOil8z5RiPdv0qG5kXTkPYsX7N55B5YFHtfNCM DvsCMB7Tu/XQcEvP3j4TyqrMhNTm+qSDZS51Q4VQf6ENo37IDm7mmtdxLB+5z75f quekXlLO65yUac6w3aj/t6SEzp8iomGTlsl8OfBodsLpMW39j+GGPAOKybTK0KOJ JgE2PAFv6T2eYJ0R39pIamjh1QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNvFVhQ5 vcf871hGFx1PoMItcibIMB8GA1UdIwQYMBaAFJy+ENfB3US35ZC1B4v8T4bPjbJa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQkNBQy8wMTUyMjU4RTgy RjQxMUVFOUVEMUY2MTFDNEY5QUUwMi9uTDRRMThIZFJMZmxrTFVIaV94UGhzLU5z bG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25MNFExOEhkUkxmbGtMVUhpX3hQaHMtTnNsby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QkNBQy8wMTUyMjU4RTgyRjQxMUVFOUVEMUY2MTFDNEY5QUUwMi9uTDRRMThIZFJM ZmxrTFVIaV94UGhzLU5zbG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCfoY+4fselphgAhbzXK+sJJROpdou8D7iwUyXqLLeE9kD0pRjGXC0i vWAggCmyvacT2T0O71M89Xai/rhLouapTROwBN4pKNW5nO/Ps4/VGtGqaHo96vrh fKMz2oXPCRVYzQsv+UQrNvERhIObx8qha1tt9kyOGKxcsVtjwCkqdPg/F0Cy0msc CW8iaAn3NDUu989IudYEJAvKDjta/jJJ9hnsI7TaZCZzKCcGlmKJuhr5+b7H3+K+ VIiYztfegQKzA8txyJu2UUprYNDJVVPfk/CUy4dXUVqZbp3znyDx3Dc8UxA3vROP tSragmeLT01ABQ7w6SFGZ8ttmQmiYlhv -----END CERTIFICATE-----Generated at Tue May 13 04:43:27 2025 by rpki-client