$ rpki-client -vvf rpki.apnic.net/member_repository/A916DB8E/FF80276C3BCC11EC8A6BCD7EC4F9AE02/nePaegrGlA0yq7nP_LBh8q7lZh0.mft File: nePaegrGlA0yq7nP_LBh8q7lZh0.mft (raw, json) Hash identifier: etitaMO0SAIHt3GrzBDrwz3zOpzH8HzFqTFo4hlo/Mk= Subject key identifier: F5:0B:B6:DA:1C:D6:25:D4:B5:4F:FF:41:E4:F3:99:68:76:16:69:FE Authority key identifier: 9D:E3:DA:7A:0A:C6:94:0D:32:AB:B9:CF:FC:B0:61:F2:AE:E5:66:1D Certificate issuer: /CN=A916DB8E/serialNumber=9DE3DA7A0AC6940D32ABB9CFFCB061F2AEE5661D Certificate serial: 049F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nePaegrGlA0yq7nP_LBh8q7lZh0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916DB8E/FF80276C3BCC11EC8A6BCD7EC4F9AE02/nePaegrGlA0yq7nP_LBh8q7lZh0.mft Manifest number: 0489 Signing time: Sat 10 May 2025 23:38:01 +0000 Manifest this update: Sat 10 May 2025 23:38:01 +0000 Manifest next update: Sat 17 May 2025 23:38:01 +0000 Files and hashes: 1: nePaegrGlA0yq7nP_LBh8q7lZh0.crl (hash: rOIvdsVLTMC9ln3mI/PoilOfB7giw8esqHENX6dvQOA=) 2: 4AD39148A91511ED9E2AC948C4F9AE02.roa (hash: lV86FgcjhujyEw+tqQZA5LVzdbV5o2JfVCvKZDvrKH8=) 3: 0FB7DCDA321D11EF81C6FB83C4F9AE02.roa (hash: YNerQgMu/lgswTLCzZkkLpc3iA2UGIEgvOOW994Z9L0=) 4: 4A2FAA9CA91511ED9E2AC948C4F9AE02.roa (hash: 4yfWRgYWyN+Mv4gIICmnpB2EvTMNs4jSY+Jh+PPBGG0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916DB8E/FF80276C3BCC11EC8A6BCD7EC4F9AE02/nePaegrGlA0yq7nP_LBh8q7lZh0.crl rsync://rpki.apnic.net/member_repository/A916DB8E/FF80276C3BCC11EC8A6BCD7EC4F9AE02/nePaegrGlA0yq7nP_LBh8q7lZh0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nePaegrGlA0yq7nP_LBh8q7lZh0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 23:38:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1183 (0x49f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916DB8E, serialNumber=9DE3DA7A0AC6940D32ABB9CFFCB061F2AEE5661D Validity Not Before: May 10 23:38:01 2025 GMT Not After : May 17 23:38:01 2025 GMT Subject: CN=681fe359-e970 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:cf:86:39:e9:22:91:03:d0:68:68:74:0a:96: 33:7c:5d:97:ef:a5:fa:8e:a1:4f:b6:5c:be:76:6a: 17:de:d9:30:d8:bb:e4:5f:0f:41:aa:11:35:de:a2: 65:b0:99:a7:bf:6c:fc:cc:e5:fb:19:92:9f:df:10: 9f:4b:5d:23:2e:15:24:f0:4b:b0:60:29:5a:ae:53: da:55:4c:a5:b5:b0:c6:e1:4d:75:62:33:63:01:01: e0:60:29:a6:f4:4f:64:c5:3f:c9:ab:e9:bc:a8:ee: f3:8b:34:8c:b8:5d:d5:e0:02:83:57:76:1d:de:91: 8c:eb:c5:a8:7b:6c:0f:87:4b:06:9e:be:23:6c:77: 40:04:0a:92:7c:77:57:e6:7b:6a:2e:73:bf:eb:4d: dd:1f:ac:b9:9b:45:bc:1a:15:56:62:9d:07:27:26: 77:5e:e8:81:f2:b4:e6:d0:ef:e8:f3:4e:18:7a:ff: 3e:fb:04:00:1a:a3:09:f7:db:d0:d8:6a:48:ba:e0: eb:fa:4e:66:36:52:37:95:35:99:8b:1c:6c:00:6d: 4a:24:e6:7c:e2:2a:2f:50:0a:9e:80:fc:1c:77:f0: a4:c6:22:2e:64:38:f7:33:85:fd:ef:4a:1a:16:6d: b8:d7:1b:6a:e9:a3:2c:a5:ac:ba:4f:51:45:9a:17: c3:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:0B:B6:DA:1C:D6:25:D4:B5:4F:FF:41:E4:F3:99:68:76:16:69:FE X509v3 Authority Key Identifier: keyid:9D:E3:DA:7A:0A:C6:94:0D:32:AB:B9:CF:FC:B0:61:F2:AE:E5:66:1D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916DB8E/FF80276C3BCC11EC8A6BCD7EC4F9AE02/nePaegrGlA0yq7nP_LBh8q7lZh0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nePaegrGlA0yq7nP_LBh8q7lZh0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916DB8E/FF80276C3BCC11EC8A6BCD7EC4F9AE02/nePaegrGlA0yq7nP_LBh8q7lZh0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 78:28:85:e1:4d:a3:86:4b:02:a5:90:b4:17:ac:62:7c:8e:5e: ad:73:cd:d6:61:78:19:c3:1f:9a:85:8b:c6:74:56:82:8e:30: fc:ae:b5:1e:f4:4d:04:03:83:4b:90:1c:4b:0c:a0:66:b7:56: b7:f4:dd:d5:79:b6:89:27:34:bf:01:b6:7f:a9:df:8d:3f:6a: 15:79:bd:1c:14:65:59:97:65:9e:99:ef:9f:c2:17:0e:4e:31: e5:bc:27:5b:76:e9:05:9c:78:2c:79:bd:11:d4:12:96:0a:6d: 1a:08:90:99:04:ce:92:35:2b:8c:f3:09:f6:45:08:78:98:89: 45:fb:e4:39:2e:54:28:0b:b9:c1:5f:bd:f9:a8:b6:b8:f8:f1: 39:bc:02:6e:03:e0:52:67:9b:13:cf:57:16:ae:f6:5c:b3:4f: 18:e1:84:72:ec:98:d1:ae:38:3b:78:7b:a5:c9:f7:a4:7c:31: cf:8a:38:b4:6c:77:e2:2a:83:45:6d:7b:be:e8:31:5d:ef:86: f5:45:b7:7e:89:77:72:52:0d:d6:d9:25:46:df:e0:27:bf:b1: ad:01:44:17:88:74:66:e2:24:a9:c5:41:bc:b7:76:c4:b7:fb: 09:7a:87:5f:55:0d:7c:02:12:58:fc:dd:fe:be:de:33:b8:f2: b6:27:84:0d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBJ8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkRCOEUxMTAvBgNVBAUTKDlERTNEQTdBMEFDNjk0MEQzMkFCQjlDRkZDQjA2MUYy QUVFNTY2MUQwHhcNMjUwNTEwMjMzODAxWhcNMjUwNTE3MjMzODAxWjAYMRYwFAYD VQQDEw02ODFmZTM1OS1lOTcwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA18+GOekikQPQaGh0CpYzfF2X76X6jqFPtly+dmoX3tkw2LvkXw9BqhE13qJl sJmnv2z8zOX7GZKf3xCfS10jLhUk8EuwYClarlPaVUyltbDG4U11YjNjAQHgYCmm 9E9kxT/Jq+m8qO7zizSMuF3V4AKDV3Yd3pGM68Woe2wPh0sGnr4jbHdABAqSfHdX 5ntqLnO/603dH6y5m0W8GhVWYp0HJyZ3XuiB8rTm0O/o804Yev8++wQAGqMJ99vQ 2GpIuuDr+k5mNlI3lTWZixxsAG1KJOZ84iovUAqegPwcd/CkxiIuZDj3M4X970oa Fm241xtq6aMspay6T1FFmhfDiwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPULttoc 1iXUtU//QeTzmWh2Fmn+MB8GA1UdIwQYMBaAFJ3j2noKxpQNMqu5z/ywYfKu5WYd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2REI4RS9GRjgwMjc2QzNC Q0MxMUVDOEE2QkNEN0VDNEY5QUUwMi9uZVBhZWdyR2xBMHlxN25QX0xCaDhxN2xa aDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25lUGFlZ3JHbEEweXE3blBfTEJoOHE3bFpoMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 REI4RS9GRjgwMjc2QzNCQ0MxMUVDOEE2QkNEN0VDNEY5QUUwMi9uZVBhZWdyR2xB MHlxN25QX0xCaDhxN2xaaDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB4KIXhTaOGSwKlkLQXrGJ8jl6tc83WYXgZwx+ahYvGdFaCjjD8rrUe 9E0EA4NLkBxLDKBmt1a39N3VebaJJzS/AbZ/qd+NP2oVeb0cFGVZl2Weme+fwhcO TjHlvCdbdukFnHgseb0R1BKWCm0aCJCZBM6SNSuM8wn2RQh4mIlF++Q5LlQoC7nB X735qLa4+PE5vAJuA+BSZ5sTz1cWrvZcs08Y4YRy7JjRrjg7eHulyfekfDHPiji0 bHfiKoNFbXu+6DFd74b1Rbd+iXdyUg3W2SVG3+Anv7GtAUQXiHRm4iSpxUG8t3bE t/sJeodfVQ18AhJY/N3+vt4zuPK2J4QN -----END CERTIFICATE-----Generated at Tue May 13 00:54:49 2025 by rpki-client