$ rpki-client -vvf rpki.apnic.net/member_repository/A915517D/3D7A6286CF5611E7BF695510C4F9AE02/NEp3XiRcztCAx5UhWW4yyPBtiMg.mft File: NEp3XiRcztCAx5UhWW4yyPBtiMg.mft (raw, json) Hash identifier: ZB1Y+uk5k/AFEDZxbJWO8SNkwQyEiuccd622eOGzeSg= Subject key identifier: 54:BD:31:BF:BF:A2:F4:80:F7:14:EF:3D:47:E7:82:AE:89:EB:00:AA Authority key identifier: 34:4A:77:5E:24:5C:CE:D0:80:C7:95:21:59:6E:32:C8:F0:6D:88:C8 Certificate issuer: /CN=A915517D/serialNumber=344A775E245CCED080C79521596E32C8F06D88C8 Certificate serial: 179B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NEp3XiRcztCAx5UhWW4yyPBtiMg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915517D/3D7A6286CF5611E7BF695510C4F9AE02/NEp3XiRcztCAx5UhWW4yyPBtiMg.mft Manifest number: 1786 Signing time: Wed 14 May 2025 16:40:36 +0000 Manifest this update: Wed 14 May 2025 16:40:36 +0000 Manifest next update: Wed 21 May 2025 16:40:36 +0000 Files and hashes: 1: NEp3XiRcztCAx5UhWW4yyPBtiMg.crl (hash: N3984xqRgCd29iGlSx4yKal6I4g3G8uSAG2z+w4hDMI=) 2: 2F840DD2740911EDA7146F2DC4F9AE02.roa (hash: PKyy2enQZwJAPAGB65CItDAb1Yve/y7L5I1YK7Ph1yU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915517D/3D7A6286CF5611E7BF695510C4F9AE02/NEp3XiRcztCAx5UhWW4yyPBtiMg.crl rsync://rpki.apnic.net/member_repository/A915517D/3D7A6286CF5611E7BF695510C4F9AE02/NEp3XiRcztCAx5UhWW4yyPBtiMg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NEp3XiRcztCAx5UhWW4yyPBtiMg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 21 May 2025 16:40:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6043 (0x179b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915517D, serialNumber=344A775E245CCED080C79521596E32C8F06D88C8 Validity Not Before: May 14 16:40:36 2025 GMT Not After : May 21 16:40:36 2025 GMT Subject: CN=6824c784-7469 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:9d:66:0b:fe:a5:a0:d2:cd:e8:32:8b:78:1e: f2:1c:c7:88:a0:dd:47:a7:f2:fb:46:a2:0b:d1:6b: 7f:cb:38:e0:50:26:36:1c:02:83:c9:d4:8d:fb:cf: d6:ed:95:b9:20:21:50:6e:b5:e6:9e:d7:b7:98:f1: ea:73:22:fd:48:d4:85:66:bd:12:6a:61:28:94:4f: f0:bd:b0:1a:a9:ff:da:8c:b2:c4:c3:74:35:12:cc: 61:39:80:37:3b:7a:08:99:af:54:1d:1a:d8:54:a0: e8:2a:60:8d:20:88:3d:09:3e:df:a3:b8:a8:76:f7: 62:71:75:e3:89:94:6d:a4:f8:40:32:7f:53:ee:9d: e0:40:72:55:8c:6b:ee:7a:bf:7f:cd:70:1c:30:06: d3:6a:bf:3f:af:ec:c6:00:d5:45:e3:93:2d:f2:78: b9:46:d4:4a:8e:16:6a:f4:26:14:3d:15:13:77:13: 7b:11:f2:80:15:b0:88:b1:8b:fd:74:af:6d:c8:12: 07:10:fa:df:bc:7d:88:27:4c:e4:f8:a6:e5:16:e3: 31:f4:df:1f:af:40:8c:20:99:a0:f8:22:ff:19:54: 5b:61:a2:9d:61:3a:c5:c6:a7:8e:11:6c:f6:d5:56: 10:b8:11:43:9a:d0:16:48:a8:56:d5:05:1b:69:cd: 35:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:BD:31:BF:BF:A2:F4:80:F7:14:EF:3D:47:E7:82:AE:89:EB:00:AA X509v3 Authority Key Identifier: keyid:34:4A:77:5E:24:5C:CE:D0:80:C7:95:21:59:6E:32:C8:F0:6D:88:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915517D/3D7A6286CF5611E7BF695510C4F9AE02/NEp3XiRcztCAx5UhWW4yyPBtiMg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NEp3XiRcztCAx5UhWW4yyPBtiMg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915517D/3D7A6286CF5611E7BF695510C4F9AE02/NEp3XiRcztCAx5UhWW4yyPBtiMg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4e:d3:87:88:bb:ca:8d:69:86:ed:23:06:0c:b5:ca:0b:3d:cc: 50:3b:74:83:b8:05:6c:a0:d6:9b:6a:5c:f8:37:fa:57:15:b8: c4:fc:d6:7a:b7:aa:ec:aa:36:c3:81:c1:48:ea:70:44:5b:56: ca:d5:a0:aa:14:fc:4e:9d:50:a3:29:e8:68:65:35:64:fb:06: e1:2a:d5:aa:dd:05:1d:81:47:fd:b4:fe:49:75:c5:19:21:b5: ad:03:8e:02:c1:be:df:2d:03:f6:78:52:62:25:fc:da:e7:96: 3a:03:3b:66:e3:51:2a:40:ca:dd:a7:c0:29:fd:bb:42:5a:69: 57:e4:7b:ba:f5:ea:d2:bf:5b:e1:db:7f:5b:fb:37:a9:5b:94: f1:d9:78:0e:01:93:9a:ce:0f:84:e5:88:f3:92:55:4e:e4:19: 38:dc:7d:21:a9:3e:11:f5:48:db:7e:ff:06:42:82:5a:25:d5: e7:e6:0d:aa:7b:99:7c:d8:f8:ca:12:c4:c7:68:49:5e:85:2a: 7f:17:d2:ef:09:5c:cd:78:7c:32:30:fb:43:47:8a:cf:af:e6: 55:6f:4f:bb:00:7e:5f:31:31:0f:de:04:dc:e1:9e:20:2a:cb: d7:a2:74:07:dd:b1:ad:c2:62:91:aa:88:89:a0:e8:91:56:8e: 4e:e4:18:c0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICF5swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTUxN0QxMTAvBgNVBAUTKDM0NEE3NzVFMjQ1Q0NFRDA4MEM3OTUyMTU5NkUzMkM4 RjA2RDg4QzgwHhcNMjUwNTE0MTY0MDM2WhcNMjUwNTIxMTY0MDM2WjAYMRYwFAYD VQQDEw02ODI0Yzc4NC03NDY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1p1mC/6loNLN6DKLeB7yHMeIoN1Hp/L7RqIL0Wt/yzjgUCY2HAKDydSN+8/W 7ZW5ICFQbrXmnte3mPHqcyL9SNSFZr0SamEolE/wvbAaqf/ajLLEw3Q1EsxhOYA3 O3oIma9UHRrYVKDoKmCNIIg9CT7fo7iodvdicXXjiZRtpPhAMn9T7p3gQHJVjGvu er9/zXAcMAbTar8/r+zGANVF45Mt8ni5RtRKjhZq9CYUPRUTdxN7EfKAFbCIsYv9 dK9tyBIHEPrfvH2IJ0zk+KblFuMx9N8fr0CMIJmg+CL/GVRbYaKdYTrFxqeOEWz2 1VYQuBFDmtAWSKhW1QUbac016QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFS9Mb+/ ovSA9xTvPUfngq6J6wCqMB8GA1UdIwQYMBaAFDRKd14kXM7QgMeVIVluMsjwbYjI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NTE3RC8zRDdBNjI4NkNG NTYxMUU3QkY2OTU1MTBDNEY5QUUwMi9ORXAzWGlSY3p0Q0F4NVVoV1c0eXlQQnRp TWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05FcDNYaVJjenRDQXg1VWhXVzR5eVBCdGlNZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NTE3RC8zRDdBNjI4NkNGNTYxMUU3QkY2OTU1MTBDNEY5QUUwMi9ORXAzWGlSY3p0 Q0F4NVVoV1c0eXlQQnRpTWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBO04eIu8qNaYbtIwYMtcoLPcxQO3SDuAVsoNabalz4N/pXFbjE/NZ6 t6rsqjbDgcFI6nBEW1bK1aCqFPxOnVCjKehoZTVk+wbhKtWq3QUdgUf9tP5JdcUZ IbWtA44Cwb7fLQP2eFJiJfza55Y6Aztm41EqQMrdp8Ap/btCWmlX5Hu69erSv1vh 239b+zepW5Tx2XgOAZOazg+E5YjzklVO5Bk43H0hqT4R9Ujbfv8GQoJaJdXn5g2q e5l82PjKEsTHaElehSp/F9LvCVzNeHwyMPtDR4rPr+ZVb0+7AH5fMTEP3gTc4Z4g KsvXonQH3bGtwmKRqoiJoOiRVo5O5BjA -----END CERTIFICATE-----Generated at Wed May 14 19:38:06 2025 by rpki-client