$ rpki-client -vvf rpki.apnic.net/member_repository/A9148B19/11030AF4855611EC9AB82E21C4F9AE02/cNLQaRmVfGqmdxz1Xblvx-_niaA.mft File: cNLQaRmVfGqmdxz1Xblvx-_niaA.mft (raw, json) Hash identifier: ZG0ld9J6YCoxvp+Dnn9QItwYZL3ZpNjU8pnS+xUIH5M= Subject key identifier: CB:5F:0E:E4:99:7D:C7:CD:9D:13:76:6E:83:45:8F:BF:26:A9:E4:0B Authority key identifier: 70:D2:D0:69:19:95:7C:6A:A6:77:1C:F5:5D:B9:6F:C7:EF:E7:89:A0 Certificate issuer: /CN=A9148B19/serialNumber=70D2D06919957C6AA6771CF55DB96FC7EFE789A0 Certificate serial: 03D9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cNLQaRmVfGqmdxz1Xblvx-_niaA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9148B19/11030AF4855611EC9AB82E21C4F9AE02/cNLQaRmVfGqmdxz1Xblvx-_niaA.mft Manifest number: 03CD Signing time: Sat 17 May 2025 00:52:40 +0000 Manifest this update: Sat 17 May 2025 00:52:40 +0000 Manifest next update: Sat 24 May 2025 00:52:40 +0000 Files and hashes: 1: cNLQaRmVfGqmdxz1Xblvx-_niaA.crl (hash: A1ru8W1IPS6wX7sS1/VxXdXZYzOzZjidsq2SrN5aHlI=) 2: 5E6AFDFC855A11ECA39EB244C4F9AE02.roa (hash: adNJYD8ddR86Y2y0YjrK71PiHKfM9/CpER0jXjblQGI=) 3: 93A5581E549211EFB6D69465C4F9AE02.roa (hash: /XKYDQbxV7RTuAFLQ60S0WHAEqIIW0Ex8kIJdQHSD/g=) 4: 927AA46C549211EFB6D69465C4F9AE02.roa (hash: gGjbQrgM08otmBBevw5wvzpRfB5KnX1ffhZnJEh71ug=) 5: 92F68C4E549211EFB6D69465C4F9AE02.roa (hash: sY83/cQy3tzz5zdxbwkdhze9u62EpJ6EfapgidWQ+QI=) 6: 920D7BD0549211EFB6D69465C4F9AE02.roa (hash: aK64LFa4M0NMRqfKHBnnSKArLKJYhxOJFHjuf4xjW94=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9148B19/11030AF4855611EC9AB82E21C4F9AE02/cNLQaRmVfGqmdxz1Xblvx-_niaA.crl rsync://rpki.apnic.net/member_repository/A9148B19/11030AF4855611EC9AB82E21C4F9AE02/cNLQaRmVfGqmdxz1Xblvx-_niaA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cNLQaRmVfGqmdxz1Xblvx-_niaA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 24 May 2025 00:52:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 985 (0x3d9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9148B19, serialNumber=70D2D06919957C6AA6771CF55DB96FC7EFE789A0 Validity Not Before: May 17 00:52:40 2025 GMT Not After : May 24 00:52:40 2025 GMT Subject: CN=6827ddd8-48f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:54:ca:61:71:ec:d4:fa:b0:c6:45:58:ce:7b: 01:5c:a5:e1:9a:f7:75:29:36:7c:db:5d:ef:5c:44: f7:ae:f3:60:4d:81:03:28:92:3f:03:55:50:44:6a: 32:63:e7:e5:4a:77:63:05:28:e7:03:42:9e:94:b3: c8:0e:4b:a6:f8:1a:42:b2:04:c0:92:09:bb:a6:04: ed:b7:e6:85:89:6c:92:7a:d9:b4:78:7b:02:d6:5e: 1b:f7:6a:4a:e8:b9:27:0a:5b:19:53:85:b8:bf:9e: 60:aa:21:6e:e3:d2:43:7a:46:b6:a4:cc:74:b7:4a: 47:52:f4:ee:7a:e7:46:5a:ce:02:e3:4c:f4:bb:36: a3:11:96:d4:8e:e4:f2:d8:db:82:2c:e5:41:85:68: 69:40:f1:6b:33:f8:6b:dc:89:f5:b8:7b:c7:14:6d: 94:ad:f7:85:62:ea:6a:66:b3:46:5f:f6:c0:27:6d: ab:fb:5b:0c:c0:5b:ff:06:ac:07:a5:e6:72:30:42: 5c:b5:11:cb:dd:ba:49:3a:12:f9:9a:ac:e3:73:ec: 7c:f4:79:71:2b:eb:f0:d4:b5:30:97:a7:c9:bb:d8: 29:aa:02:7f:77:3d:ce:7f:ed:1e:42:3d:96:f2:90: 6b:76:63:4f:82:73:1b:b2:f9:53:c5:8d:5f:ec:86: cf:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:5F:0E:E4:99:7D:C7:CD:9D:13:76:6E:83:45:8F:BF:26:A9:E4:0B X509v3 Authority Key Identifier: keyid:70:D2:D0:69:19:95:7C:6A:A6:77:1C:F5:5D:B9:6F:C7:EF:E7:89:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9148B19/11030AF4855611EC9AB82E21C4F9AE02/cNLQaRmVfGqmdxz1Xblvx-_niaA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cNLQaRmVfGqmdxz1Xblvx-_niaA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148B19/11030AF4855611EC9AB82E21C4F9AE02/cNLQaRmVfGqmdxz1Xblvx-_niaA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9d:22:aa:34:b0:54:91:da:43:27:a7:b4:5e:9b:66:5c:1f:42: 65:c6:85:bc:53:76:39:cb:90:f2:ca:27:77:c3:56:dc:7b:2b: fd:21:d7:7d:d6:a7:65:2e:da:62:fa:67:6c:9a:01:63:22:fe: f0:a3:64:65:5e:8d:15:c2:d7:24:22:0e:f6:66:39:09:bc:91: 22:99:ea:98:90:39:26:45:70:aa:ea:75:48:01:a0:ff:32:76: 42:d7:68:ba:bd:23:18:41:41:9f:9d:4a:19:ec:26:ed:f7:c5: 25:fa:07:2c:26:35:9e:67:89:4e:40:6f:d1:1f:3a:87:ae:7b: c5:b6:d9:ed:1a:61:df:b6:55:80:14:c3:2c:b6:e2:dc:00:3b: fc:84:6c:58:57:9e:49:eb:65:10:af:29:40:76:1a:4d:4e:df: dc:58:20:3c:d3:9a:32:31:b6:b6:a2:5c:3a:8a:4b:ea:ec:f5: 52:e0:20:58:2d:34:82:47:99:ee:0d:b5:7d:aa:8c:2b:6c:72: 98:d3:d1:c6:50:d3:b4:5d:bf:85:2d:d8:a8:48:94:34:43:19: 93:4a:c3:51:d9:fc:0d:5e:bf:09:69:de:a9:f8:6b:b1:1f:2b: 74:22:f9:f7:6f:89:87:5b:b3:d5:4d:36:16:94:d0:dd:fb:df: 9c:9c:b4:43 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA9kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDhCMTkxMTAvBgNVBAUTKDcwRDJEMDY5MTk5NTdDNkFBNjc3MUNGNTVEQjk2RkM3 RUZFNzg5QTAwHhcNMjUwNTE3MDA1MjQwWhcNMjUwNTI0MDA1MjQwWjAYMRYwFAYD VQQDEw02ODI3ZGRkOC00OGY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw1TKYXHs1PqwxkVYznsBXKXhmvd1KTZ8213vXET3rvNgTYEDKJI/A1VQRGoy Y+flSndjBSjnA0KelLPIDkum+BpCsgTAkgm7pgTtt+aFiWySetm0eHsC1l4b92pK 6LknClsZU4W4v55gqiFu49JDeka2pMx0t0pHUvTueudGWs4C40z0uzajEZbUjuTy 2NuCLOVBhWhpQPFrM/hr3In1uHvHFG2UrfeFYupqZrNGX/bAJ22r+1sMwFv/BqwH peZyMEJctRHL3bpJOhL5mqzjc+x89HlxK+vw1LUwl6fJu9gpqgJ/dz3Of+0eQj2W 8pBrdmNPgnMbsvlTxY1f7IbP7wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMtfDuSZ fcfNnRN2boNFj78mqeQLMB8GA1UdIwQYMBaAFHDS0GkZlXxqpncc9V25b8fv54mg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OEIxOS8xMTAzMEFGNDg1 NTYxMUVDOUFCODJFMjFDNEY5QUUwMi9jTkxRYVJtVmZHcW1keHoxWGJsdngtX25p YUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NOTFFhUm1WZkdxbWR4ejFYYmx2eC1fbmlhQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OEIxOS8xMTAzMEFGNDg1NTYxMUVDOUFCODJFMjFDNEY5QUUwMi9jTkxRYVJtVmZH cW1keHoxWGJsdngtX25pYUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCdIqo0sFSR2kMnp7Rem2ZcH0JlxoW8U3Y5y5Dyyid3w1bceyv9Idd9 1qdlLtpi+mdsmgFjIv7wo2RlXo0VwtckIg72ZjkJvJEimeqYkDkmRXCq6nVIAaD/ MnZC12i6vSMYQUGfnUoZ7Cbt98Ul+gcsJjWeZ4lOQG/RHzqHrnvFttntGmHftlWA FMMstuLcADv8hGxYV55J62UQrylAdhpNTt/cWCA805oyMba2olw6ikvq7PVS4CBY LTSCR5nuDbV9qowrbHKY09HGUNO0Xb+FLdioSJQ0QxmTSsNR2fwNXr8Jad6p+Gux Hyt0Ivn3b4mHW7PVTTYWlNDd+9+cnLRD -----END CERTIFICATE-----Generated at Sat May 17 18:22:51 2025 by rpki-client