$ rpki-client -vvf rpki.apnic.net/member_repository/A9161F3E/339EDE6810E411F0B75B8166C4F9AE02/nOkX3Drgxboud8t3WjrZnGhcQGs.mft File: nOkX3Drgxboud8t3WjrZnGhcQGs.mft (raw, json) Hash identifier: ZqZQj0Utg7FLvuNJJtqmrtGn8rq+gsNdhtUuOHe+2Uk= Subject key identifier: 82:86:C2:1F:D5:0A:2F:76:14:17:4A:9A:96:8D:79:CD:E0:5D:89:4B Authority key identifier: 9C:E9:17:DC:3A:E0:C5:BA:2E:77:CB:77:5A:3A:D9:9C:68:5C:40:6B Certificate issuer: /CN=A9161F3E/serialNumber=9CE917DC3AE0C5BA2E77CB775A3AD99C685C406B Certificate serial: 1A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nOkX3Drgxboud8t3WjrZnGhcQGs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9161F3E/339EDE6810E411F0B75B8166C4F9AE02/nOkX3Drgxboud8t3WjrZnGhcQGs.mft Manifest number: 18 Signing time: Thu 15 May 2025 07:17:39 +0000 Manifest this update: Thu 15 May 2025 07:17:39 +0000 Manifest next update: Thu 22 May 2025 07:17:39 +0000 Files and hashes: 1: nOkX3Drgxboud8t3WjrZnGhcQGs.crl (hash: T8W5eev2W/1QNh2TmHr5dkFtf/tU0x0L+A+V4sATBS4=) 2: 49DEAEDC12A711F099020A73C4F9AE02.roa (hash: ZDuunhoBLIFxkgffUJp6fhz6W2Ysr7yM0HyGKDGLaSU=) 3: 4A3C802012A711F099020A73C4F9AE02.roa (hash: EvMFCkIZLxU/4T9yDv4rTrnplB41rjMOAziWwMgP5hQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9161F3E/339EDE6810E411F0B75B8166C4F9AE02/nOkX3Drgxboud8t3WjrZnGhcQGs.crl rsync://rpki.apnic.net/member_repository/A9161F3E/339EDE6810E411F0B75B8166C4F9AE02/nOkX3Drgxboud8t3WjrZnGhcQGs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nOkX3Drgxboud8t3WjrZnGhcQGs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 22 May 2025 07:17:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26 (0x1a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9161F3E, serialNumber=9CE917DC3AE0C5BA2E77CB775A3AD99C685C406B Validity Not Before: May 15 07:17:39 2025 GMT Not After : May 22 07:17:39 2025 GMT Subject: CN=68259513-c40a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:32:2d:8e:ec:67:31:da:0e:3c:70:6d:29:37: b9:c1:8b:02:2c:95:98:af:db:75:bb:8c:4a:88:79: 35:2a:54:9b:a2:74:14:39:03:c3:41:68:77:96:c3: 5b:e6:89:7b:33:fe:68:67:ed:97:0a:df:c3:2c:8c: 4e:ee:35:2b:70:f9:73:48:9a:fc:a9:0a:6b:68:a1: db:ad:76:c6:a6:d0:70:05:3e:1b:e7:7e:40:60:91: a2:4e:f2:66:44:e7:4a:01:c8:6a:b0:83:1c:f4:41: ec:02:fc:08:de:8e:66:77:32:7d:1c:b0:f6:d9:42: 6f:3c:81:90:a7:c5:b1:ca:75:5b:0c:7a:05:37:b7: 6a:98:a7:55:70:e8:c3:af:18:a6:d5:a0:13:b9:d6: a0:0c:4e:8b:aa:b5:c2:52:dd:c5:b1:0e:1b:83:ec: 88:a5:92:51:1c:a2:2c:7c:ad:21:bc:1d:a9:61:5a: 50:73:c9:ef:e7:14:e1:54:46:54:1d:3a:28:9a:5f: 1b:23:78:ca:73:bd:61:e5:7b:7e:fb:a6:2e:97:b5: 2e:21:64:ee:1c:c9:ae:2e:10:cf:7d:27:f0:d6:4d: 8e:c1:c9:6e:03:d3:e2:d3:52:9b:0a:76:cb:3d:f6: 5f:57:80:26:8f:62:9c:ef:d7:b6:c1:4f:c6:4b:81: 8f:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:86:C2:1F:D5:0A:2F:76:14:17:4A:9A:96:8D:79:CD:E0:5D:89:4B X509v3 Authority Key Identifier: keyid:9C:E9:17:DC:3A:E0:C5:BA:2E:77:CB:77:5A:3A:D9:9C:68:5C:40:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9161F3E/339EDE6810E411F0B75B8166C4F9AE02/nOkX3Drgxboud8t3WjrZnGhcQGs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nOkX3Drgxboud8t3WjrZnGhcQGs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9161F3E/339EDE6810E411F0B75B8166C4F9AE02/nOkX3Drgxboud8t3WjrZnGhcQGs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 69:5a:06:f3:89:87:69:dc:4e:54:a3:24:cc:57:07:25:ad:cb: ba:d1:07:c1:3f:19:6f:3c:be:96:47:24:59:40:29:1b:42:25: a3:5f:c6:42:11:da:04:02:5b:b4:c4:99:b0:6b:1b:77:18:e3: dd:79:66:87:a3:0a:74:f6:32:8d:49:5d:77:71:f8:11:80:f9: 2f:b0:1e:e6:e5:8b:c8:33:2b:aa:f8:3c:55:24:a1:01:6f:4e: f9:0a:d5:58:86:04:80:cc:8b:28:33:eb:7e:a5:22:26:9f:be: 7d:0f:70:67:ed:e2:db:1d:a2:76:d3:1e:15:fc:ba:86:88:79: bd:9a:92:02:5b:41:f1:e3:2a:7b:a2:62:f2:7e:23:47:2d:cb: 5a:9f:bf:ad:58:20:fc:cb:27:76:6f:b4:bd:94:be:37:17:8a: 2e:3e:63:ec:c9:ef:54:83:01:fa:15:0b:55:9a:10:29:9f:29: 08:71:8a:1c:be:88:4a:c6:b6:d2:25:c0:43:e6:63:85:2e:5a: 60:04:b0:ac:bf:75:6a:f4:b9:e0:be:66:49:0b:03:fe:7a:9c: ef:ae:89:d4:b1:79:61:76:a3:86:74:08:ad:a8:e9:20:78:85: 1e:24:d7:57:fd:a0:ab:e3:7d:40:e0:36:4a:e6:8d:fa:14:04: 3c:53:68:28 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBGjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 MUYzRTExMC8GA1UEBRMoOUNFOTE3REMzQUUwQzVCQTJFNzdDQjc3NUEzQUQ5OUM2 ODVDNDA2QjAeFw0yNTA1MTUwNzE3MzlaFw0yNTA1MjIwNzE3MzlaMBgxFjAUBgNV BAMTDTY4MjU5NTEzLWM0MGEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCtMi2O7Gcx2g48cG0pN7nBiwIslZiv23W7jEqIeTUqVJuidBQ5A8NBaHeWw1vm iXsz/mhn7ZcK38MsjE7uNStw+XNImvypCmtoodutdsam0HAFPhvnfkBgkaJO8mZE 50oByGqwgxz0QewC/AjejmZ3Mn0csPbZQm88gZCnxbHKdVsMegU3t2qYp1Vw6MOv GKbVoBO51qAMTouqtcJS3cWxDhuD7IilklEcoix8rSG8HalhWlBzye/nFOFURlQd OiiaXxsjeMpzvWHle377pi6XtS4hZO4cya4uEM99J/DWTY7ByW4D0+LTUpsKdss9 9l9XgCaPYpzv17bBT8ZLgY9fAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUgobCH9UK L3YUF0qalo15zeBdiUswHwYDVR0jBBgwFoAUnOkX3Drgxboud8t3WjrZnGhcQGsw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTYxRjNFLzMzOUVERTY4MTBF NDExRjBCNzVCODE2NkM0RjlBRTAyL25Pa1gzRHJneGJvdWQ4dDNXanJabkdoY1FH cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvbk9rWDNEcmd4Ym91ZDh0M1dqclpuR2hjUUdzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTYx RjNFLzMzOUVERTY4MTBFNDExRjBCNzVCODE2NkM0RjlBRTAyL25Pa1gzRHJneGJv dWQ4dDNXanJabkdoY1FHcy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAGlaBvOJh2ncTlSjJMxXByWty7rRB8E/GW88vpZHJFlAKRtCJaNfxkIR 2gQCW7TEmbBrG3cY4915ZoejCnT2Mo1JXXdx+BGA+S+wHubli8gzK6r4PFUkoQFv TvkK1ViGBIDMiygz636lIiafvn0PcGft4tsdonbTHhX8uoaIeb2akgJbQfHjKnui YvJ+I0cty1qfv61YIPzLJ3ZvtL2UvjcXii4+Y+zJ71SDAfoVC1WaECmfKQhxihy+ iErGttIlwEPmY4UuWmAEsKy/dWr0ueC+ZkkLA/56nO+uidSxeWF2o4Z0CK2o6SB4 hR4k11f9oKvjfUDgNkrmjfoUBDxTaCg= -----END CERTIFICATE-----Generated at Fri May 16 20:54:49 2025 by rpki-client