$ rpki-client -vvf rpki.apnic.net/member_repository/A9138478/6B8AD84E433011EBA6E0221EC4F9AE02/NOjGYqqdzVGVDfX6xAWs8WyNMKA.mft File: NOjGYqqdzVGVDfX6xAWs8WyNMKA.mft (raw, json) Hash identifier: oTUqii3KDhO7lM2Ayw81bVsluplApVerV057zYFB0TI= Subject key identifier: BB:1E:9A:76:0A:D7:81:3B:AB:DB:BD:E0:90:5A:4C:8F:0D:A0:4C:DA Authority key identifier: 34:E8:C6:62:AA:9D:CD:51:95:0D:F5:FA:C4:05:AC:F1:6C:8D:30:A0 Certificate issuer: /CN=A9138478/serialNumber=34E8C662AA9DCD51950DF5FAC405ACF16C8D30A0 Certificate serial: 0703 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NOjGYqqdzVGVDfX6xAWs8WyNMKA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9138478/6B8AD84E433011EBA6E0221EC4F9AE02/NOjGYqqdzVGVDfX6xAWs8WyNMKA.mft Manifest number: 06FB Signing time: Mon 12 May 2025 21:44:21 +0000 Manifest this update: Mon 12 May 2025 21:44:21 +0000 Manifest next update: Mon 19 May 2025 21:44:21 +0000 Files and hashes: 1: NOjGYqqdzVGVDfX6xAWs8WyNMKA.crl (hash: lrlNPQfJPMRPdGA1/B7mDq8c1ZrvBlwTqDiJqtFYbJ4=) 2: 6AC2B9AA187B11ED92148716C4F9AE02.roa (hash: bd6xDrsI8VNBf0/b6lDTgdvsxuTBwH6yXjfUiwvhRpg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9138478/6B8AD84E433011EBA6E0221EC4F9AE02/NOjGYqqdzVGVDfX6xAWs8WyNMKA.crl rsync://rpki.apnic.net/member_repository/A9138478/6B8AD84E433011EBA6E0221EC4F9AE02/NOjGYqqdzVGVDfX6xAWs8WyNMKA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NOjGYqqdzVGVDfX6xAWs8WyNMKA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 21:44:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1795 (0x703) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9138478, serialNumber=34E8C662AA9DCD51950DF5FAC405ACF16C8D30A0 Validity Not Before: May 12 21:44:21 2025 GMT Not After : May 19 21:44:21 2025 GMT Subject: CN=68226bb5-7bf9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:04:3a:48:ac:98:4a:83:2c:28:64:d4:92:ed: a2:4d:d5:bb:68:56:f9:d5:c4:77:fd:0c:ea:cf:6b: 01:aa:c0:b8:fa:c8:a1:03:f7:53:20:69:bc:6b:a6: 7b:92:da:3c:ba:82:89:8f:9e:c3:04:55:92:43:f9: f8:14:af:0c:86:4f:09:db:45:75:87:cd:e6:29:b6: 9d:6e:67:0b:7a:b8:9b:03:43:2b:68:d4:e7:3f:6d: 1a:06:68:48:95:bb:c5:25:3b:5f:30:40:b1:8b:6b: e1:e6:14:a8:04:8a:50:4a:14:c7:25:6b:87:ca:b0: 53:5d:f2:1c:01:0c:3a:69:b3:1b:8c:b6:e8:05:72: b9:0c:5b:41:77:46:2e:98:87:39:b7:96:cd:43:01: ac:3f:3d:2d:9e:d0:35:c2:c0:40:6b:4e:0b:3d:c4: 72:b6:0b:1c:48:08:81:54:2d:fb:ce:41:fa:3d:a6: 6f:86:54:e1:9f:4d:bd:f6:2f:02:30:7d:40:a3:84: a6:78:21:cb:5e:6a:5f:25:16:cf:c7:0b:6a:ed:c4: 92:bf:28:59:d4:76:21:59:72:8b:60:6f:a0:b5:62: d6:3e:cf:90:5a:35:26:39:00:02:2e:a6:4c:1f:6f: 48:d9:2b:d3:3d:ca:db:a8:3f:ad:fe:d6:40:47:1e: e7:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:1E:9A:76:0A:D7:81:3B:AB:DB:BD:E0:90:5A:4C:8F:0D:A0:4C:DA X509v3 Authority Key Identifier: keyid:34:E8:C6:62:AA:9D:CD:51:95:0D:F5:FA:C4:05:AC:F1:6C:8D:30:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9138478/6B8AD84E433011EBA6E0221EC4F9AE02/NOjGYqqdzVGVDfX6xAWs8WyNMKA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NOjGYqqdzVGVDfX6xAWs8WyNMKA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9138478/6B8AD84E433011EBA6E0221EC4F9AE02/NOjGYqqdzVGVDfX6xAWs8WyNMKA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 27:7d:81:37:5f:a0:ba:b7:fb:fc:42:90:de:ec:9f:c9:56:3d: cc:6d:01:ce:7f:fb:cb:b5:a5:c0:e0:fa:b6:0b:23:fa:ed:97: 90:62:fc:92:f5:07:f7:9c:a9:05:74:0e:a5:95:ae:3b:1f:4c: 02:9b:75:b3:a7:74:2a:08:ac:7d:14:9d:da:4b:09:dd:f4:8b: d9:f8:49:5f:b1:76:e4:e4:3b:df:be:02:a8:76:91:f1:cf:fc: ba:e9:69:82:66:56:27:81:ee:bb:f2:d2:70:11:b2:f9:c0:fb: b5:0b:9e:17:7c:65:60:dc:74:59:ae:0e:d4:1f:f7:9e:e5:bc: b3:10:c8:bc:f8:a4:d0:81:0f:5d:bb:ad:43:30:50:54:94:03: 4f:9c:7f:c6:70:1b:68:83:6a:e0:22:21:95:d6:62:ed:a4:51: bc:c4:63:49:15:ec:dd:52:ed:57:f2:b4:a0:81:10:16:90:6b: 32:5d:81:f3:5d:d2:01:ac:ce:92:5d:1d:86:75:30:65:25:5a: d1:7f:68:73:8d:1c:cd:c3:b0:59:89:ff:2b:14:59:3a:a8:2b: 81:fa:2a:26:5c:b6:2c:6d:60:22:56:00:fc:ec:3a:d2:3f:ce: 2c:1a:01:62:ea:f9:31:1f:3b:d9:0c:f4:55:4d:98:d2:d2:59: 6a:6c:19:8a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBwMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mzg0NzgxMTAvBgNVBAUTKDM0RThDNjYyQUE5RENENTE5NTBERjVGQUM0MDVBQ0Yx NkM4RDMwQTAwHhcNMjUwNTEyMjE0NDIxWhcNMjUwNTE5MjE0NDIxWjAYMRYwFAYD VQQDEw02ODIyNmJiNS03YmY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4QQ6SKyYSoMsKGTUku2iTdW7aFb51cR3/Qzqz2sBqsC4+sihA/dTIGm8a6Z7 kto8uoKJj57DBFWSQ/n4FK8Mhk8J20V1h83mKbadbmcLeribA0MraNTnP20aBmhI lbvFJTtfMECxi2vh5hSoBIpQShTHJWuHyrBTXfIcAQw6abMbjLboBXK5DFtBd0Yu mIc5t5bNQwGsPz0tntA1wsBAa04LPcRytgscSAiBVC37zkH6PaZvhlThn0299i8C MH1Ao4SmeCHLXmpfJRbPxwtq7cSSvyhZ1HYhWXKLYG+gtWLWPs+QWjUmOQACLqZM H29I2SvTPcrbqD+t/tZARx7n2wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLsemnYK 14E7q9u94JBaTI8NoEzaMB8GA1UdIwQYMBaAFDToxmKqnc1RlQ31+sQFrPFsjTCg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzODQ3OC82QjhBRDg0RTQz MzAxMUVCQTZFMDIyMUVDNEY5QUUwMi9OT2pHWXFxZHpWR1ZEZlg2eEFXczhXeU5N S0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05PakdZcXFkelZHVkRmWDZ4QVdzOFd5Tk1LQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz ODQ3OC82QjhBRDg0RTQzMzAxMUVCQTZFMDIyMUVDNEY5QUUwMi9OT2pHWXFxZHpW R1ZEZlg2eEFXczhXeU5NS0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAnfYE3X6C6t/v8QpDe7J/JVj3MbQHOf/vLtaXA4Pq2CyP67ZeQYvyS 9Qf3nKkFdA6lla47H0wCm3Wzp3QqCKx9FJ3aSwnd9IvZ+ElfsXbk5DvfvgKodpHx z/y66WmCZlYnge678tJwEbL5wPu1C54XfGVg3HRZrg7UH/ee5byzEMi8+KTQgQ9d u61DMFBUlANPnH/GcBtog2rgIiGV1mLtpFG8xGNJFezdUu1X8rSggRAWkGsyXYHz XdIBrM6SXR2GdTBlJVrRf2hzjRzNw7BZif8rFFk6qCuB+iomXLYsbWAiVgD87DrS P84sGgFi6vkxHzvZDPRVTZjS0llqbBmK -----END CERTIFICATE-----Generated at Wed May 14 17:19:40 2025 by rpki-client