$ rpki-client -vvf rpki.apnic.net/member_repository/A9134AD7/E37EC8E68F4E11E68EE7CE6EC4F9AE02/nAOc5JtXef24TeO2mPZ26EQjZnk.mft File: nAOc5JtXef24TeO2mPZ26EQjZnk.mft (raw, json) Hash identifier: t3P0TR5W7vIDV7i+iUcPAFAfrMiKstaRC/IlC9xT3eY= Subject key identifier: 95:14:0B:56:C0:C8:9A:A6:EB:0A:63:F7:43:80:1A:80:0F:A7:15:FA Authority key identifier: 9C:03:9C:E4:9B:57:79:FD:B8:4D:E3:B6:98:F6:76:E8:44:23:66:79 Certificate issuer: /CN=A9134AD7/serialNumber=9C039CE49B5779FDB84DE3B698F676E844236679 Certificate serial: 1DF0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nAOc5JtXef24TeO2mPZ26EQjZnk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9134AD7/E37EC8E68F4E11E68EE7CE6EC4F9AE02/nAOc5JtXef24TeO2mPZ26EQjZnk.mft Manifest number: 1DE2 Signing time: Wed 14 May 2025 16:11:12 +0000 Manifest this update: Wed 14 May 2025 16:11:12 +0000 Manifest next update: Wed 21 May 2025 16:11:12 +0000 Files and hashes: 1: nAOc5JtXef24TeO2mPZ26EQjZnk.crl (hash: lPjfmqmB1oxw8XCJ0fq/K/chYk+Dx1V7Sfl7jjrClh8=) 2: EF2F0372C9F211E986C3B486C4F9AE02.roa (hash: k9wr3qZcJ76UlwuVZn3FECVmsL3FOhLSrWOZD7INceU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9134AD7/E37EC8E68F4E11E68EE7CE6EC4F9AE02/nAOc5JtXef24TeO2mPZ26EQjZnk.crl rsync://rpki.apnic.net/member_repository/A9134AD7/E37EC8E68F4E11E68EE7CE6EC4F9AE02/nAOc5JtXef24TeO2mPZ26EQjZnk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nAOc5JtXef24TeO2mPZ26EQjZnk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 21 May 2025 16:11:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7664 (0x1df0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9134AD7, serialNumber=9C039CE49B5779FDB84DE3B698F676E844236679 Validity Not Before: May 14 16:11:12 2025 GMT Not After : May 21 16:11:12 2025 GMT Subject: CN=6824c0a0-10cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:af:47:18:ed:a7:c7:c0:0a:92:e7:ca:1f:0b: 13:bc:22:68:4c:a5:09:6f:c9:01:2c:78:ef:ec:0d: 0d:2b:6b:3b:05:fd:bf:c1:11:26:ad:b4:b6:8d:59: 51:44:f8:18:d1:d1:3b:c2:77:ef:e0:68:4d:6a:a6: 1c:7c:92:bd:48:3e:9a:52:7a:26:5c:c0:f9:2f:c3: 5c:1c:8b:9d:46:4f:52:4e:2e:98:2b:0f:fb:58:85: 9a:63:8c:e7:06:f1:f3:e9:68:c7:14:17:15:b4:bd: 01:f8:69:18:33:d4:e5:2e:a6:fa:d0:5b:db:ec:c1: 47:d6:fd:08:cf:3f:29:65:b3:ed:5f:0a:e6:9e:13: 63:82:72:eb:6c:29:7a:72:5e:79:70:b1:d3:c4:76: f2:1b:10:ae:78:c8:de:88:a4:fe:6e:5a:53:42:32: bc:2b:d0:8f:21:75:fc:6a:02:89:be:cc:1d:17:31: d4:75:76:df:97:e1:d4:d1:14:33:d5:ac:39:5c:e7: 07:b6:59:c5:c1:9b:bd:4c:28:6f:15:26:a1:cd:14: 5a:55:70:25:56:42:fe:55:fe:af:70:19:3e:3b:47: 85:db:ba:5e:c1:7b:1f:5d:5b:b2:93:e1:1f:4a:16: 1f:10:64:70:8d:2d:54:93:8d:ab:3d:72:58:99:d6: f0:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:14:0B:56:C0:C8:9A:A6:EB:0A:63:F7:43:80:1A:80:0F:A7:15:FA X509v3 Authority Key Identifier: keyid:9C:03:9C:E4:9B:57:79:FD:B8:4D:E3:B6:98:F6:76:E8:44:23:66:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9134AD7/E37EC8E68F4E11E68EE7CE6EC4F9AE02/nAOc5JtXef24TeO2mPZ26EQjZnk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nAOc5JtXef24TeO2mPZ26EQjZnk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9134AD7/E37EC8E68F4E11E68EE7CE6EC4F9AE02/nAOc5JtXef24TeO2mPZ26EQjZnk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 58:8a:dc:04:2f:5b:ee:dd:9c:ec:07:eb:2b:7b:f9:82:13:87: 94:d8:98:bd:88:47:d6:42:9d:2b:65:41:b8:48:15:e4:45:fc: b4:e6:c4:3b:4a:92:cb:31:ee:e0:f8:8c:ee:40:6e:b7:f1:61: b4:8c:39:c1:2e:ea:f0:99:53:4c:30:08:af:9b:5e:04:be:13: 23:c1:e6:59:43:a0:eb:29:d2:8f:76:ce:6a:b9:c8:56:a2:12: e5:2e:0b:c3:3f:6d:d3:44:7e:bb:de:ae:50:1b:9c:e3:2e:d6: 8d:4c:79:cc:1c:9a:ab:0f:ce:83:0a:31:d0:10:dc:4d:24:6c: 41:3c:0a:a7:04:c4:0a:4c:a2:3c:ff:12:51:01:d6:82:ce:89: 9d:9c:68:e9:20:a1:c1:94:7a:a0:8b:f0:22:59:eb:16:08:38: 4b:1f:50:41:ae:40:bb:d3:48:03:30:95:11:5e:24:a3:66:bb: c6:8c:fd:0b:1f:d4:7e:32:75:4b:2f:0a:07:da:79:64:de:7c: 37:9b:a6:ad:81:7e:b7:36:02:aa:b2:d0:cb:03:65:b4:64:f1: cd:16:38:c8:f8:28:fa:53:80:ef:5a:56:7d:de:9f:bb:7b:94: 18:5e:05:80:b7:5c:5b:33:13:98:e6:87:72:4e:64:84:83:90: 95:22:38:63 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHfAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzRBRDcxMTAvBgNVBAUTKDlDMDM5Q0U0OUI1Nzc5RkRCODRERTNCNjk4RjY3NkU4 NDQyMzY2NzkwHhcNMjUwNTE0MTYxMTEyWhcNMjUwNTIxMTYxMTEyWjAYMRYwFAYD VQQDEw02ODI0YzBhMC0xMGNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4K9HGO2nx8AKkufKHwsTvCJoTKUJb8kBLHjv7A0NK2s7Bf2/wREmrbS2jVlR RPgY0dE7wnfv4GhNaqYcfJK9SD6aUnomXMD5L8NcHIudRk9STi6YKw/7WIWaY4zn BvHz6WjHFBcVtL0B+GkYM9TlLqb60Fvb7MFH1v0Izz8pZbPtXwrmnhNjgnLrbCl6 cl55cLHTxHbyGxCueMjeiKT+blpTQjK8K9CPIXX8agKJvswdFzHUdXbfl+HU0RQz 1aw5XOcHtlnFwZu9TChvFSahzRRaVXAlVkL+Vf6vcBk+O0eF27pewXsfXVuyk+Ef ShYfEGRwjS1Uk42rPXJYmdbwEQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJUUC1bA yJqm6wpj90OAGoAPpxX6MB8GA1UdIwQYMBaAFJwDnOSbV3n9uE3jtpj2duhEI2Z5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNEFENy9FMzdFQzhFNjhG NEUxMUU2OEVFN0NFNkVDNEY5QUUwMi9uQU9jNUp0WGVmMjRUZU8ybVBaMjZFUWpa bmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25BT2M1SnRYZWYyNFRlTzJtUFoyNkVRalpuay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NEFENy9FMzdFQzhFNjhGNEUxMUU2OEVFN0NFNkVDNEY5QUUwMi9uQU9jNUp0WGVm MjRUZU8ybVBaMjZFUWpabmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBYitwEL1vu3ZzsB+sre/mCE4eU2Ji9iEfWQp0rZUG4SBXkRfy05sQ7 SpLLMe7g+IzuQG638WG0jDnBLurwmVNMMAivm14EvhMjweZZQ6DrKdKPds5quchW ohLlLgvDP23TRH673q5QG5zjLtaNTHnMHJqrD86DCjHQENxNJGxBPAqnBMQKTKI8 /xJRAdaCzomdnGjpIKHBlHqgi/AiWesWCDhLH1BBrkC700gDMJURXiSjZrvGjP0L H9R+MnVLLwoH2nlk3nw3m6atgX63NgKqstDLA2W0ZPHNFjjI+Cj6U4DvWlZ93p+7 e5QYXgWAt1xbMxOY5odyTmSEg5CVIjhj -----END CERTIFICATE-----Generated at Fri May 16 05:09:09 2025 by rpki-client