$ rpki-client -vvf rpki.apnic.net/member_repository/A914FA25/2BBCBCAA1DAC11EAAF4A3763C4F9AE02/ng7u9_yIBOBDfomd7TGYizxgLQI.mft File: ng7u9_yIBOBDfomd7TGYizxgLQI.mft (raw, json) Hash identifier: w5yd+y6+p+3F1QJt3zMViCTVfGyp09W7DLsnEP2Die8= Subject key identifier: 1E:9E:5C:79:56:E4:10:C2:CB:6F:1E:3E:03:FB:CD:F3:69:3C:7B:40 Authority key identifier: 9E:0E:EE:F7:FC:88:04:E0:43:7E:89:9D:ED:31:98:8B:3C:60:2D:02 Certificate issuer: /CN=A914FA25/serialNumber=9E0EEEF7FC8804E0437E899DED31988B3C602D02 Certificate serial: 0BE1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ng7u9_yIBOBDfomd7TGYizxgLQI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914FA25/2BBCBCAA1DAC11EAAF4A3763C4F9AE02/ng7u9_yIBOBDfomd7TGYizxgLQI.mft Manifest number: 0DB4 Signing time: Sat 10 May 2025 18:42:25 +0000 Manifest this update: Sat 10 May 2025 18:42:25 +0000 Manifest next update: Sat 17 May 2025 18:42:25 +0000 Files and hashes: 1: ng7u9_yIBOBDfomd7TGYizxgLQI.crl (hash: cRl9wfuTCrIEGEJLnUbnr6wa3BKO67VNxfljURSI7qM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914FA25/2BBCBCAA1DAC11EAAF4A3763C4F9AE02/ng7u9_yIBOBDfomd7TGYizxgLQI.crl rsync://rpki.apnic.net/member_repository/A914FA25/2BBCBCAA1DAC11EAAF4A3763C4F9AE02/ng7u9_yIBOBDfomd7TGYizxgLQI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ng7u9_yIBOBDfomd7TGYizxgLQI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 18:42:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3041 (0xbe1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914FA25, serialNumber=9E0EEEF7FC8804E0437E899DED31988B3C602D02 Validity Not Before: May 10 18:42:25 2025 GMT Not After : May 17 18:42:25 2025 GMT Subject: CN=681f9e11-35a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:7b:47:3f:b0:ba:16:c3:e3:7f:99:fc:11:07: c9:73:07:7e:14:d0:8d:c1:47:96:1f:c4:3e:fe:47: 2e:ee:6e:bd:f5:0d:71:37:a9:45:91:ad:86:19:93: f8:2d:e7:fc:ad:f1:9f:46:07:d6:5d:d3:24:10:82: 34:ab:69:88:0d:01:4e:76:8b:78:4a:91:6f:aa:39: a3:4b:58:a4:38:75:6b:e9:cf:96:7f:ad:58:90:10: 9f:23:40:35:69:48:1a:a6:a4:18:51:58:05:39:03: 65:7a:51:f8:7c:47:37:22:de:55:df:16:68:9e:10: 76:4d:2a:03:3e:71:f6:ad:46:94:5f:76:e1:a4:b9: 00:b2:d0:ef:35:71:e8:0a:83:41:b4:03:3a:2e:56: 97:9c:f9:8c:39:8b:84:17:46:c4:b8:3e:ef:f8:b3: 87:3b:02:23:24:eb:55:73:23:5f:52:b2:4f:93:85: 01:d7:c1:5d:64:29:a0:8e:30:b1:73:45:e1:dd:64: 44:5e:b0:8e:05:5e:ab:78:e5:a0:05:c1:4f:b5:79: d1:f5:58:56:b0:0e:80:4d:4f:dd:95:8c:f0:0f:29: ac:a7:64:38:34:d0:d1:02:37:cc:a3:95:5f:87:af: ec:4e:e6:cf:b8:43:35:5e:2d:0e:8b:0c:92:3d:9e: 93:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:9E:5C:79:56:E4:10:C2:CB:6F:1E:3E:03:FB:CD:F3:69:3C:7B:40 X509v3 Authority Key Identifier: keyid:9E:0E:EE:F7:FC:88:04:E0:43:7E:89:9D:ED:31:98:8B:3C:60:2D:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914FA25/2BBCBCAA1DAC11EAAF4A3763C4F9AE02/ng7u9_yIBOBDfomd7TGYizxgLQI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ng7u9_yIBOBDfomd7TGYizxgLQI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914FA25/2BBCBCAA1DAC11EAAF4A3763C4F9AE02/ng7u9_yIBOBDfomd7TGYizxgLQI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b2:d0:36:4b:46:6f:55:d8:84:90:55:3c:00:55:ac:b6:8a:0a: 55:bf:d0:34:e4:27:dd:72:38:d0:68:6a:67:85:1b:10:e5:ed: 6f:4d:ab:ae:4f:8f:f2:63:83:77:9f:74:1a:e9:68:36:6c:d7: 5f:04:ca:f0:52:7b:59:6a:7c:db:3d:9a:47:0b:c5:b0:11:4b: 07:ec:af:83:5a:80:2d:67:30:52:0a:9d:f4:66:28:15:33:aa: 98:42:c0:a4:a2:02:c7:0c:c8:c2:c1:82:e9:66:a5:8b:e3:a9: 22:db:fb:63:8a:cf:c8:45:46:06:4d:ae:ca:5e:6b:3b:5c:b8: e5:7a:2d:26:f8:e1:a1:78:0f:64:25:d5:8c:3d:75:39:3e:93: 4e:0f:b3:5b:1f:fc:1c:97:25:e6:79:2c:25:8b:12:b7:c8:d4: ca:4d:08:2f:03:d8:d4:e7:21:cf:68:11:42:f9:40:a8:39:0f: fe:ca:f1:ba:f9:f9:f8:fc:c8:0f:35:13:37:65:3d:79:c4:04: 19:3e:fa:5a:d6:46:8a:d0:c0:2b:c1:48:04:72:b4:ce:28:40: 23:a9:63:87:62:11:33:1c:ec:ed:41:8f:67:73:1e:de:6a:9d: 9e:19:1f:9a:34:04:d2:92:28:37:63:3d:0e:53:73:3f:a8:0c: bd:24:fb:99 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC+EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEZBMjUxMTAvBgNVBAUTKDlFMEVFRUY3RkM4ODA0RTA0MzdFODk5REVEMzE5ODhC M0M2MDJEMDIwHhcNMjUwNTEwMTg0MjI1WhcNMjUwNTE3MTg0MjI1WjAYMRYwFAYD VQQDEw02ODFmOWUxMS0zNWExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzHtHP7C6FsPjf5n8EQfJcwd+FNCNwUeWH8Q+/kcu7m699Q1xN6lFka2GGZP4 Lef8rfGfRgfWXdMkEII0q2mIDQFOdot4SpFvqjmjS1ikOHVr6c+Wf61YkBCfI0A1 aUgapqQYUVgFOQNlelH4fEc3It5V3xZonhB2TSoDPnH2rUaUX3bhpLkAstDvNXHo CoNBtAM6LlaXnPmMOYuEF0bEuD7v+LOHOwIjJOtVcyNfUrJPk4UB18FdZCmgjjCx c0Xh3WREXrCOBV6reOWgBcFPtXnR9VhWsA6ATU/dlYzwDymsp2Q4NNDRAjfMo5Vf h6/sTubPuEM1Xi0OiwySPZ6TowIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB6eXHlW 5BDCy28ePgP7zfNpPHtAMB8GA1UdIwQYMBaAFJ4O7vf8iATgQ36Jne0xmIs8YC0C MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RkEyNS8yQkJDQkNBQTFE QUMxMUVBQUY0QTM3NjNDNEY5QUUwMi9uZzd1OV95SUJPQkRmb21kN1RHWWl6eGdM UUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25nN3U5X3lJQk9CRGZvbWQ3VEdZaXp4Z0xRSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RkEyNS8yQkJDQkNBQTFEQUMxMUVBQUY0QTM3NjNDNEY5QUUwMi9uZzd1OV95SUJP QkRmb21kN1RHWWl6eGdMUUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCy0DZLRm9V2ISQVTwAVay2igpVv9A05CfdcjjQaGpnhRsQ5e1vTauu T4/yY4N3n3Qa6Wg2bNdfBMrwUntZanzbPZpHC8WwEUsH7K+DWoAtZzBSCp30ZigV M6qYQsCkogLHDMjCwYLpZqWL46ki2/tjis/IRUYGTa7KXms7XLjlei0m+OGheA9k JdWMPXU5PpNOD7NbH/wclyXmeSwlixK3yNTKTQgvA9jU5yHPaBFC+UCoOQ/+yvG6 +fn4/MgPNRM3ZT15xAQZPvpa1kaK0MArwUgEcrTOKEAjqWOHYhEzHOztQY9ncx7e ap2eGR+aNATSkig3Yz0OU3M/qAy9JPuZ -----END CERTIFICATE-----Generated at Mon May 12 07:24:43 2025 by rpki-client