$ rpki-client -vvf rpki.apnic.net/member_repository/A913FD96/A624FC44519811EA97225983C4F9AE02/NAQf45nAdllht5_hJGlBcocgc7s.mft File: NAQf45nAdllht5_hJGlBcocgc7s.mft (raw, json) Hash identifier: dwp+5EInTZNzedY6fH9ReYdJbe+3ASscSAutDOqs2FU= Subject key identifier: CE:9C:FB:A9:7F:3A:57:38:E9:68:18:5E:CA:CC:C3:9D:C1:08:15:FF Authority key identifier: 34:04:1F:E3:99:C0:76:59:61:B7:9F:E1:24:69:41:72:87:20:73:BB Certificate issuer: /CN=A913FD96/serialNumber=34041FE399C0765961B79FE124694172872073BB Certificate serial: 0AB3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NAQf45nAdllht5_hJGlBcocgc7s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913FD96/A624FC44519811EA97225983C4F9AE02/NAQf45nAdllht5_hJGlBcocgc7s.mft Manifest number: 0AAD Signing time: Sat 10 May 2025 19:15:11 +0000 Manifest this update: Sat 10 May 2025 19:15:11 +0000 Manifest next update: Sat 17 May 2025 19:15:11 +0000 Files and hashes: 1: NAQf45nAdllht5_hJGlBcocgc7s.crl (hash: 2XpnmupF2xB7gr0sQWjJpy5QuRaIyJH6B+Alb1EsjFE=) 2: FC3B44CE519A11EAB1229A87C4F9AE02.roa (hash: mXaDebpxI+8jgolliV5kV+yxtxKp5QcapX21gE2juPA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913FD96/A624FC44519811EA97225983C4F9AE02/NAQf45nAdllht5_hJGlBcocgc7s.crl rsync://rpki.apnic.net/member_repository/A913FD96/A624FC44519811EA97225983C4F9AE02/NAQf45nAdllht5_hJGlBcocgc7s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NAQf45nAdllht5_hJGlBcocgc7s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 19:15:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2739 (0xab3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913FD96, serialNumber=34041FE399C0765961B79FE124694172872073BB Validity Not Before: May 10 19:15:11 2025 GMT Not After : May 17 19:15:11 2025 GMT Subject: CN=681fa5bf-0982 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:55:a4:26:59:3b:37:05:fb:e4:34:f5:b6:d7: ca:04:0b:e4:fa:55:d0:46:4d:fd:8d:b3:54:2d:17: 8a:0d:f0:e8:5d:3e:7a:d3:eb:a7:6d:6e:11:52:68: 4a:23:bc:d3:54:83:10:93:4a:e1:23:00:b7:87:f3: 2a:60:a3:f6:fc:60:3e:07:e2:63:42:66:a7:bd:2c: 95:b2:a4:32:c5:cc:4c:7c:c3:53:d7:15:04:97:29: 70:40:41:54:8c:97:2b:f8:7e:e6:99:fa:62:8c:eb: 44:5c:42:bc:27:9c:c9:4b:a6:fd:c7:ff:06:be:22: 60:82:72:b4:a8:49:59:4f:7b:37:ba:43:d2:c0:0e: 50:a9:97:33:be:7c:77:9c:a3:90:be:f6:a2:14:ee: 67:57:35:f3:e3:69:ba:ed:5c:82:1b:6a:fc:ea:95: 8e:4d:51:ea:af:f6:3e:18:c4:d7:88:91:19:57:ce: 1b:ca:5f:c7:96:50:aa:fa:c4:ac:4b:b6:c1:c3:5f: d6:9b:d2:13:d3:e0:9b:10:2e:04:22:01:cc:bb:e6: d3:4c:62:40:d0:a5:a7:f3:01:59:79:ef:23:30:a8: 0a:87:a0:1e:fe:8e:fc:9d:01:7a:29:df:6c:7c:a8: ac:8c:50:59:12:2d:8e:87:fe:19:f4:0a:1c:4d:9e: a7:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:9C:FB:A9:7F:3A:57:38:E9:68:18:5E:CA:CC:C3:9D:C1:08:15:FF X509v3 Authority Key Identifier: keyid:34:04:1F:E3:99:C0:76:59:61:B7:9F:E1:24:69:41:72:87:20:73:BB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913FD96/A624FC44519811EA97225983C4F9AE02/NAQf45nAdllht5_hJGlBcocgc7s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NAQf45nAdllht5_hJGlBcocgc7s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913FD96/A624FC44519811EA97225983C4F9AE02/NAQf45nAdllht5_hJGlBcocgc7s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 39:c8:5a:74:fc:0a:08:b2:7a:0e:61:5b:66:fe:66:1c:1e:2c: 3e:3f:7b:2f:57:00:73:3d:27:df:0b:7b:10:2c:14:fb:bf:75: d2:76:aa:c2:7c:d9:02:86:25:ad:f1:3b:3e:9d:f6:15:4d:a9: e4:7a:86:5c:61:0e:dc:05:e7:75:fe:6a:7a:52:fd:ae:19:0f: 0f:81:5d:c4:e5:05:d6:24:5f:bd:33:d0:dc:f6:4a:0b:8b:72: c5:b7:e7:60:28:1e:ae:9e:20:98:b5:6a:cf:64:43:05:a1:96: 9c:f1:46:a5:40:ff:d8:db:fb:bb:95:d2:ae:8f:da:15:f3:5d: 98:20:38:fb:75:bc:b1:14:31:64:c5:58:12:2b:01:a8:a5:6e: 95:05:37:f0:4a:ea:6c:c7:03:4e:70:c7:47:f0:9c:80:34:38: 85:a0:b1:66:40:2f:51:32:3f:91:b4:fb:27:bb:8b:d5:ec:d3: 2a:c5:8e:01:84:5f:ec:8c:b2:01:b2:17:19:46:1f:e7:57:c1: 99:d7:bb:89:cc:a0:33:b6:82:fa:6a:0a:84:23:c8:7a:dd:38: bb:83:bb:a4:c0:52:8e:cb:6d:9e:29:ab:38:7d:bc:91:2b:f9: 12:d5:6e:16:cc:a2:87:07:72:8b:d0:43:54:6c:a1:19:55:55: 9c:f7:46:e6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCrMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0ZEOTYxMTAvBgNVBAUTKDM0MDQxRkUzOTlDMDc2NTk2MUI3OUZFMTI0Njk0MTcy ODcyMDczQkIwHhcNMjUwNTEwMTkxNTExWhcNMjUwNTE3MTkxNTExWjAYMRYwFAYD VQQDEw02ODFmYTViZi0wOTgyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq1WkJlk7NwX75DT1ttfKBAvk+lXQRk39jbNULReKDfDoXT560+unbW4RUmhK I7zTVIMQk0rhIwC3h/MqYKP2/GA+B+JjQmanvSyVsqQyxcxMfMNT1xUElylwQEFU jJcr+H7mmfpijOtEXEK8J5zJS6b9x/8GviJggnK0qElZT3s3ukPSwA5QqZczvnx3 nKOQvvaiFO5nVzXz42m67VyCG2r86pWOTVHqr/Y+GMTXiJEZV84byl/HllCq+sSs S7bBw1/Wm9IT0+CbEC4EIgHMu+bTTGJA0KWn8wFZee8jMKgKh6Ae/o78nQF6Kd9s fKisjFBZEi2Oh/4Z9AocTZ6n+wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM6c+6l/ Olc46WgYXsrMw53BCBX/MB8GA1UdIwQYMBaAFDQEH+OZwHZZYbef4SRpQXKHIHO7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRkQ5Ni9BNjI0RkM0NDUx OTgxMUVBOTcyMjU5ODNDNEY5QUUwMi9OQVFmNDVuQWRsbGh0NV9oSkdsQmNvY2dj N3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05BUWY0NW5BZGxsaHQ1X2hKR2xCY29jZ2M3cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RkQ5Ni9BNjI0RkM0NDUxOTgxMUVBOTcyMjU5ODNDNEY5QUUwMi9OQVFmNDVuQWRs bGh0NV9oSkdsQmNvY2djN3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA5yFp0/AoIsnoOYVtm/mYcHiw+P3svVwBzPSffC3sQLBT7v3XSdqrC fNkChiWt8Ts+nfYVTankeoZcYQ7cBed1/mp6Uv2uGQ8PgV3E5QXWJF+9M9Dc9koL i3LFt+dgKB6uniCYtWrPZEMFoZac8UalQP/Y2/u7ldKuj9oV812YIDj7dbyxFDFk xVgSKwGopW6VBTfwSupsxwNOcMdH8JyANDiFoLFmQC9RMj+RtPsnu4vV7NMqxY4B hF/sjLIBshcZRh/nV8GZ17uJzKAztoL6agqEI8h63Ti7g7ukwFKOy22eKas4fbyR K/kS1W4WzKKHB3KL0ENUbKEZVVWc90bm -----END CERTIFICATE-----Generated at Mon May 12 19:51:24 2025 by rpki-client