$ rpki-client -vvf rpki.apnic.net/member_repository/A915408A/18845F6C18AC11EFB6F48137C4F9AE02/0N7PEI0mgBt8l-NJAprx_PkKhV4.mft File: 0N7PEI0mgBt8l-NJAprx_PkKhV4.mft (raw, json) Hash identifier: 63iieSOGgNFU/oN6D29eWfLiiZ9X8veqcUTHt5W1uX0= Subject key identifier: C8:F3:F4:2A:E1:96:4C:90:81:DA:5E:C3:80:BD:68:AA:B5:31:91:27 Authority key identifier: D0:DE:CF:10:8D:26:80:1B:7C:97:E3:49:02:9A:F1:FC:F9:0A:85:5E Certificate issuer: /CN=A915408A/serialNumber=D0DECF108D26801B7C97E349029AF1FCF90A855E Certificate serial: BE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0N7PEI0mgBt8l-NJAprx_PkKhV4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915408A/18845F6C18AC11EFB6F48137C4F9AE02/0N7PEI0mgBt8l-NJAprx_PkKhV4.mft Manifest number: BC Signing time: Thu 15 May 2025 05:03:51 +0000 Manifest this update: Thu 15 May 2025 05:03:50 +0000 Manifest next update: Thu 22 May 2025 05:03:50 +0000 Files and hashes: 1: 0N7PEI0mgBt8l-NJAprx_PkKhV4.crl (hash: pIk2JY9+oVF37a47dk/X7QWQ68d0clDPRsSLe/KFlnQ=) 2: 421FF25E18AD11EF99EAA661C4F9AE02.roa (hash: nArjp1EJ9Qh1GSnet/WM1j0sEl6S9LUtwKPDMLMbAas=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915408A/18845F6C18AC11EFB6F48137C4F9AE02/0N7PEI0mgBt8l-NJAprx_PkKhV4.crl rsync://rpki.apnic.net/member_repository/A915408A/18845F6C18AC11EFB6F48137C4F9AE02/0N7PEI0mgBt8l-NJAprx_PkKhV4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0N7PEI0mgBt8l-NJAprx_PkKhV4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 22 May 2025 05:03:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 190 (0xbe) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915408A, serialNumber=D0DECF108D26801B7C97E349029AF1FCF90A855E Validity Not Before: May 15 05:03:50 2025 GMT Not After : May 22 05:03:50 2025 GMT Subject: CN=682575b6-1f0c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:f3:36:d7:66:43:1c:c3:5a:93:9c:a6:f1:9e: bc:83:fe:4f:21:72:ef:49:63:91:43:b6:ff:4b:fc: 78:68:1e:c8:38:25:5d:c6:ac:94:d2:64:9b:2e:7f: f6:b0:af:f6:74:d7:ce:b3:3c:b6:67:19:98:2b:f8: a1:8c:6d:c6:e3:a3:c3:40:ef:3a:dc:56:68:c4:59: 4d:92:fc:be:ea:e3:f0:66:6e:e4:23:08:1e:07:4a: 5c:68:6c:fc:2d:54:7b:90:5b:0d:fd:b3:83:57:b4: 75:24:ee:f3:c8:99:4a:79:96:17:b9:d9:8c:06:81: 5f:37:a5:71:15:e9:d7:21:0e:a0:71:98:79:ae:9d: 51:f0:9c:01:b4:ab:68:ab:1e:86:c7:52:87:63:1f: dc:4c:d6:58:8e:d8:08:b6:fc:34:86:c9:a3:61:62: 62:1e:08:0c:76:d2:3c:ef:ae:0f:ed:44:c4:69:df: 9e:90:84:a3:7e:81:4a:cd:4d:90:d0:a5:61:6e:68: 16:fb:a8:0f:52:bd:2e:d2:f0:22:80:40:f7:03:bb: 3b:0f:3b:ee:d1:d2:56:0e:9b:7e:96:57:25:5a:b5: 46:32:d8:6f:07:78:be:bd:c4:39:53:75:9a:18:3b: a2:7f:9d:f7:7b:09:53:15:ec:a2:a8:b3:18:c4:7d: be:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:F3:F4:2A:E1:96:4C:90:81:DA:5E:C3:80:BD:68:AA:B5:31:91:27 X509v3 Authority Key Identifier: keyid:D0:DE:CF:10:8D:26:80:1B:7C:97:E3:49:02:9A:F1:FC:F9:0A:85:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915408A/18845F6C18AC11EFB6F48137C4F9AE02/0N7PEI0mgBt8l-NJAprx_PkKhV4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0N7PEI0mgBt8l-NJAprx_PkKhV4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915408A/18845F6C18AC11EFB6F48137C4F9AE02/0N7PEI0mgBt8l-NJAprx_PkKhV4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 48:c0:e0:db:be:99:2b:0e:76:dc:ee:67:f6:36:36:df:6e:22: ad:1b:95:06:f0:0b:0b:b2:c0:15:ae:77:32:77:e3:7a:7d:1b: d0:03:a1:10:0b:30:7a:f2:9b:4a:4c:b9:ce:66:9c:e4:8d:e4: e6:28:7d:d7:70:29:82:f4:73:c7:91:9a:cf:f5:6f:ba:9b:d9: fe:c5:f7:71:1e:12:97:15:60:03:5f:cf:07:68:60:90:a2:c0: 90:5f:85:a9:ee:da:17:6d:a1:95:6b:e8:02:d5:2d:b3:58:a3: 82:52:20:a3:d6:2c:3e:11:3f:90:7f:55:45:64:ce:9a:92:cb: 5f:b6:ed:7f:c4:ee:37:8b:2e:31:53:c8:89:af:14:50:13:e1: be:06:6b:fd:5b:2c:78:c5:81:3a:56:e7:20:db:1b:1c:d1:a6: b3:19:ff:0f:ac:5b:b7:b9:0e:bb:f6:3c:46:51:ea:43:dd:5c: e4:5e:32:18:70:97:41:9e:39:40:fd:b4:a7:ff:2a:21:d8:d9: 87:d2:30:30:ca:5e:7d:ee:6e:bc:92:1f:ef:d7:ec:ff:48:7a: 48:b6:97:e4:34:8a:79:9c:10:b5:f6:4e:ab:98:a1:a9:df:11: d3:44:b4:13:5a:ca:53:63:0b:61:6e:89:94:76:a5:7e:1d:18: 10:c3:63:0c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAL4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTQwOEExMTAvBgNVBAUTKEQwREVDRjEwOEQyNjgwMUI3Qzk3RTM0OTAyOUFGMUZD RjkwQTg1NUUwHhcNMjUwNTE1MDUwMzUwWhcNMjUwNTIyMDUwMzUwWjAYMRYwFAYD VQQDEw02ODI1NzViNi0xZjBjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqfM212ZDHMNak5ym8Z68g/5PIXLvSWORQ7b/S/x4aB7IOCVdxqyU0mSbLn/2 sK/2dNfOszy2ZxmYK/ihjG3G46PDQO863FZoxFlNkvy+6uPwZm7kIwgeB0pcaGz8 LVR7kFsN/bODV7R1JO7zyJlKeZYXudmMBoFfN6VxFenXIQ6gcZh5rp1R8JwBtKto qx6Gx1KHYx/cTNZYjtgItvw0hsmjYWJiHggMdtI8764P7UTEad+ekISjfoFKzU2Q 0KVhbmgW+6gPUr0u0vAigED3A7s7Dzvu0dJWDpt+llclWrVGMthvB3i+vcQ5U3Wa GDuif533ewlTFeyiqLMYxH2+lwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMjz9Crh lkyQgdpew4C9aKq1MZEnMB8GA1UdIwQYMBaAFNDezxCNJoAbfJfjSQKa8fz5CoVe MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NDA4QS8xODg0NUY2QzE4 QUMxMUVGQjZGNDgxMzdDNEY5QUUwMi8wTjdQRUkwbWdCdDhsLU5KQXByeF9Qa0to VjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzBON1BFSTBtZ0J0OGwtTkpBcHJ4X1BrS2hWNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NDA4QS8xODg0NUY2QzE4QUMxMUVGQjZGNDgxMzdDNEY5QUUwMi8wTjdQRUkwbWdC dDhsLU5KQXByeF9Qa0toVjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBIwODbvpkrDnbc7mf2NjbfbiKtG5UG8AsLssAVrncyd+N6fRvQA6EQ CzB68ptKTLnOZpzkjeTmKH3XcCmC9HPHkZrP9W+6m9n+xfdxHhKXFWADX88HaGCQ osCQX4Wp7toXbaGVa+gC1S2zWKOCUiCj1iw+ET+Qf1VFZM6akstftu1/xO43iy4x U8iJrxRQE+G+Bmv9Wyx4xYE6Vucg2xsc0aazGf8PrFu3uQ679jxGUepD3VzkXjIY cJdBnjlA/bSn/yoh2NmH0jAwyl597m68kh/v1+z/SHpItpfkNIp5nBC19k6rmKGp 3xHTRLQTWspTYwthbomUdqV+HRgQw2MM -----END CERTIFICATE-----Generated at Fri May 16 12:49:31 2025 by rpki-client