$ rpki-client -vvf rpki.apnic.net/member_repository/A9137E65/5ED05532D4D311EA97353944C4F9AE02/np0Olq5Cf2a1j2ayJKbvVmJ2Hks.mft File: np0Olq5Cf2a1j2ayJKbvVmJ2Hks.mft (raw, json) Hash identifier: BU+oYnAE9T1Q2q/E0jPtS3+TxtW7t9MtNK+R6qdcqQQ= Subject key identifier: CA:26:B2:DF:36:F1:59:C1:09:4A:DB:4C:F5:B4:A3:61:46:EF:46:84 Authority key identifier: 9E:9D:0E:96:AE:42:7F:66:B5:8F:66:B2:24:A6:EF:56:62:76:1E:4B Certificate issuer: /CN=A9137E65/serialNumber=9E9D0E96AE427F66B58F66B224A6EF5662761E4B Certificate serial: 0816 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/np0Olq5Cf2a1j2ayJKbvVmJ2Hks.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9137E65/5ED05532D4D311EA97353944C4F9AE02/np0Olq5Cf2a1j2ayJKbvVmJ2Hks.mft Manifest number: 0811 Signing time: Wed 14 May 2025 20:56:36 +0000 Manifest this update: Wed 14 May 2025 20:56:36 +0000 Manifest next update: Wed 21 May 2025 20:56:36 +0000 Files and hashes: 1: np0Olq5Cf2a1j2ayJKbvVmJ2Hks.crl (hash: q0J/iuC8KMMDJqsiU+qNZI+oMr+TYdCumq9vQcC2Wps=) 2: 6169DD26D4D411EAA1C20545C4F9AE02.roa (hash: 6oTg1gO/3ny+QZa4fQ+WZlPAQH1Ja82kUyS9omWYpCo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9137E65/5ED05532D4D311EA97353944C4F9AE02/np0Olq5Cf2a1j2ayJKbvVmJ2Hks.crl rsync://rpki.apnic.net/member_repository/A9137E65/5ED05532D4D311EA97353944C4F9AE02/np0Olq5Cf2a1j2ayJKbvVmJ2Hks.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/np0Olq5Cf2a1j2ayJKbvVmJ2Hks.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 21 May 2025 20:56:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2070 (0x816) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9137E65, serialNumber=9E9D0E96AE427F66B58F66B224A6EF5662761E4B Validity Not Before: May 14 20:56:36 2025 GMT Not After : May 21 20:56:36 2025 GMT Subject: CN=68250384-2230 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:b7:0d:e8:87:3a:37:87:a4:43:80:a8:1b:32: 7a:c6:fc:d5:3e:fa:91:30:b4:a2:9f:36:e3:87:45: 48:3f:93:e9:b5:92:85:e7:b3:c6:c5:19:44:a3:25: 36:af:e2:a1:e6:55:16:8b:7e:40:78:ff:0e:5c:a6: 05:76:59:81:40:92:c6:07:8b:27:49:44:f9:2f:a6: 0c:ed:d4:9d:d2:21:ac:93:75:d8:8a:51:c5:a7:17: 67:11:ce:b1:cd:cc:fe:f0:ce:57:86:7e:dc:b6:d8: c8:af:63:76:4b:c1:94:1f:57:ca:5f:89:ec:d6:c2: 05:ef:2f:ad:6b:f4:cd:7e:8a:58:eb:d8:87:35:73: 6f:5e:c0:7b:19:6a:a2:86:71:a6:e9:73:1f:32:86: f4:ee:86:d4:99:94:4e:63:03:6c:f9:5f:ab:93:e0: c4:b6:b7:ef:d9:ca:ef:49:7d:54:f8:26:aa:de:db: 93:95:b1:f4:a8:60:8c:e8:21:a2:b3:ce:37:a0:d8: 53:c8:15:9b:53:1c:05:a2:98:35:16:cd:f2:22:09: fb:87:80:18:3e:88:9f:f8:7f:99:cd:3d:26:bf:41: ef:f5:d9:90:6c:d4:fc:58:77:79:93:95:ef:e9:df: 49:c0:11:b3:fe:08:8a:61:bc:67:b2:98:16:50:6a: 8b:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:26:B2:DF:36:F1:59:C1:09:4A:DB:4C:F5:B4:A3:61:46:EF:46:84 X509v3 Authority Key Identifier: keyid:9E:9D:0E:96:AE:42:7F:66:B5:8F:66:B2:24:A6:EF:56:62:76:1E:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9137E65/5ED05532D4D311EA97353944C4F9AE02/np0Olq5Cf2a1j2ayJKbvVmJ2Hks.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/np0Olq5Cf2a1j2ayJKbvVmJ2Hks.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137E65/5ED05532D4D311EA97353944C4F9AE02/np0Olq5Cf2a1j2ayJKbvVmJ2Hks.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 47:e0:85:21:56:02:6a:5a:4a:82:1e:40:b1:ad:ef:9e:b4:c4: 84:8f:d3:84:00:39:7d:fb:b6:2d:f4:25:73:6d:ba:29:98:2e: dc:f4:11:71:90:2f:fa:e4:4f:3a:c3:db:e4:d5:dc:43:00:61: 0c:7c:1a:f3:ee:54:f3:63:6c:41:d9:ed:53:cf:71:9e:bf:d7: 30:0b:1a:b4:e5:4a:68:5f:6a:11:0a:4c:bc:b3:f6:a3:2e:84: fe:14:4b:b6:57:57:c8:0a:4c:f1:93:3b:e3:b4:b0:7a:58:3c: 95:9b:95:b7:b5:59:6d:a3:67:7f:80:27:cb:03:67:cc:34:8c: 8b:6a:09:49:7d:f8:69:e5:e9:db:8b:50:c6:97:33:06:84:5a: 0a:f2:1d:f9:68:ae:16:d1:c0:69:f3:0d:bc:31:3c:b1:5b:aa: f7:cf:4a:83:84:32:ba:b9:af:4e:1f:1d:8e:4b:d9:3d:a1:e2: a9:cc:f3:bc:e5:7d:69:58:52:79:4b:dc:d5:2f:77:e4:37:48: b8:74:7a:66:50:7d:f3:ac:6f:9b:04:3b:d1:9d:d5:0e:ba:20: 61:42:ea:9d:e5:77:02:71:cc:64:d1:f3:9a:57:91:88:54:9b: 59:9e:c1:a3:2c:76:b3:15:ac:6b:80:0b:ce:0e:df:1f:c1:de: 34:b6:cf:d8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCBYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzdFNjUxMTAvBgNVBAUTKDlFOUQwRTk2QUU0MjdGNjZCNThGNjZCMjI0QTZFRjU2 NjI3NjFFNEIwHhcNMjUwNTE0MjA1NjM2WhcNMjUwNTIxMjA1NjM2WjAYMRYwFAYD VQQDEw02ODI1MDM4NC0yMjMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9bcN6Ic6N4ekQ4CoGzJ6xvzVPvqRMLSinzbjh0VIP5PptZKF57PGxRlEoyU2 r+Kh5lUWi35AeP8OXKYFdlmBQJLGB4snSUT5L6YM7dSd0iGsk3XYilHFpxdnEc6x zcz+8M5Xhn7cttjIr2N2S8GUH1fKX4ns1sIF7y+ta/TNfopY69iHNXNvXsB7GWqi hnGm6XMfMob07obUmZROYwNs+V+rk+DEtrfv2crvSX1U+Caq3tuTlbH0qGCM6CGi s843oNhTyBWbUxwFopg1Fs3yIgn7h4AYPoif+H+ZzT0mv0Hv9dmQbNT8WHd5k5Xv 6d9JwBGz/giKYbxnspgWUGqL3QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMomst82 8VnBCUrbTPW0o2FG70aEMB8GA1UdIwQYMBaAFJ6dDpauQn9mtY9msiSm71Zidh5L MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzN0U2NS81RUQwNTUzMkQ0 RDMxMUVBOTczNTM5NDRDNEY5QUUwMi9ucDBPbHE1Q2YyYTFqMmF5SktidlZtSjJI a3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25wME9scTVDZjJhMWoyYXlKS2J2Vm1KMkhrcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz N0U2NS81RUQwNTUzMkQ0RDMxMUVBOTczNTM5NDRDNEY5QUUwMi9ucDBPbHE1Q2Yy YTFqMmF5SktidlZtSjJIa3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBH4IUhVgJqWkqCHkCxre+etMSEj9OEADl9+7Yt9CVzbbopmC7c9BFx kC/65E86w9vk1dxDAGEMfBrz7lTzY2xB2e1Tz3Gev9cwCxq05UpoX2oRCky8s/aj LoT+FEu2V1fICkzxkzvjtLB6WDyVm5W3tVlto2d/gCfLA2fMNIyLaglJffhp5enb i1DGlzMGhFoK8h35aK4W0cBp8w28MTyxW6r3z0qDhDK6ua9OHx2OS9k9oeKpzPO8 5X1pWFJ5S9zVL3fkN0i4dHpmUH3zrG+bBDvRndUOuiBhQuqd5XcCccxk0fOaV5GI VJtZnsGjLHazFaxrgAvODt8fwd40ts/Y -----END CERTIFICATE-----Generated at Thu May 15 03:35:38 2025 by rpki-client