$ rpki-client -vvf rpki.apnic.net/member_repository/A917ECA2/02827CF8E43711EDA865631AC4F9AE02/Ns9cwKYOC31UYSoS61uYkoRobbA.mft File: Ns9cwKYOC31UYSoS61uYkoRobbA.mft (raw, json) Hash identifier: ercHSipUZn5NhdKch/T9YIBRcrlThqPjz7lh5C6x51o= Subject key identifier: 02:8A:7C:7C:F9:96:0B:6B:34:B6:6C:35:4F:58:29:3A:DD:C4:37:92 Authority key identifier: 36:CF:5C:C0:A6:0E:0B:7D:54:61:2A:12:EB:5B:98:92:84:68:6D:B0 Certificate issuer: /CN=A917ECA2/serialNumber=36CF5CC0A60E0B7D54612A12EB5B989284686DB0 Certificate serial: 0188 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ns9cwKYOC31UYSoS61uYkoRobbA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917ECA2/02827CF8E43711EDA865631AC4F9AE02/Ns9cwKYOC31UYSoS61uYkoRobbA.mft Manifest number: 0183 Signing time: Sun 11 May 2025 02:35:38 +0000 Manifest this update: Sun 11 May 2025 02:35:37 +0000 Manifest next update: Sun 18 May 2025 02:35:37 +0000 Files and hashes: 1: Ns9cwKYOC31UYSoS61uYkoRobbA.crl (hash: UtSrY4i3NGgvaefmN6k4Bjh1XSiYWTdKI7V6ow6hAYA=) 2: BE7ACD44FEDF11EDB4C36F29C4F9AE02.roa (hash: TcJPWywxYGP4zNwqCV3RMOeXIr2sCq4he29rvfSHcP0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917ECA2/02827CF8E43711EDA865631AC4F9AE02/Ns9cwKYOC31UYSoS61uYkoRobbA.crl rsync://rpki.apnic.net/member_repository/A917ECA2/02827CF8E43711EDA865631AC4F9AE02/Ns9cwKYOC31UYSoS61uYkoRobbA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ns9cwKYOC31UYSoS61uYkoRobbA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 May 2025 02:35:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 392 (0x188) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917ECA2, serialNumber=36CF5CC0A60E0B7D54612A12EB5B989284686DB0 Validity Not Before: May 11 02:35:37 2025 GMT Not After : May 18 02:35:37 2025 GMT Subject: CN=68200cfa-c897 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:a2:33:ea:84:3f:89:5f:81:dd:1e:64:2c:bd: cf:fd:f3:a2:44:a6:03:41:a7:96:f4:d3:f1:92:33: 43:24:48:db:9e:c2:1f:fb:78:c3:de:39:6e:53:5d: ae:a2:51:f3:e5:25:af:a6:0e:03:ed:71:27:f1:44: 43:4e:a6:9a:b4:eb:42:8f:7d:6e:34:42:37:26:59: 55:51:3e:74:d3:c0:44:15:9f:46:0c:36:6c:2b:e5: cf:64:9a:f8:8e:8f:ad:fb:5d:82:60:f9:29:ed:04: 7e:9b:a1:02:dd:6f:cd:bc:7b:89:e4:f5:21:37:2c: 6b:3b:54:d7:65:97:b3:e2:46:e0:b8:5a:7b:f0:f7: 9f:2a:4d:79:69:bb:f5:93:51:67:bb:62:c9:62:50: db:e8:6e:73:38:bd:8f:03:45:e9:8c:62:7c:bc:53: 95:6f:72:1e:63:16:e7:91:30:1a:cd:df:a0:33:1e: eb:0a:4d:38:c8:41:4d:5b:89:b5:f7:c7:71:b8:4b: 1f:53:cb:15:55:cf:50:e8:f8:e3:af:6f:87:bd:56: 93:a7:9c:d1:db:8f:9d:2b:3a:78:6f:b4:a3:6f:25: 53:01:29:c6:ab:73:aa:af:1d:98:e1:01:b7:ee:a7: f9:55:1a:c9:b9:fb:12:43:17:e3:0b:01:9e:49:ee: 98:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:8A:7C:7C:F9:96:0B:6B:34:B6:6C:35:4F:58:29:3A:DD:C4:37:92 X509v3 Authority Key Identifier: keyid:36:CF:5C:C0:A6:0E:0B:7D:54:61:2A:12:EB:5B:98:92:84:68:6D:B0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917ECA2/02827CF8E43711EDA865631AC4F9AE02/Ns9cwKYOC31UYSoS61uYkoRobbA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ns9cwKYOC31UYSoS61uYkoRobbA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917ECA2/02827CF8E43711EDA865631AC4F9AE02/Ns9cwKYOC31UYSoS61uYkoRobbA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3f:5e:7e:c2:1d:a9:33:10:4d:aa:f5:d0:9a:09:13:b8:06:7a: c4:52:f4:59:f1:d9:3c:cb:47:a4:c1:77:01:38:65:e0:2d:15: 81:c7:e8:ec:1f:e2:05:37:7e:1a:11:5b:6b:6d:3d:6e:ef:71: 5c:b5:1f:28:09:b2:94:39:c6:55:f5:99:8d:22:f4:fa:05:54: 1e:c4:ac:2d:7f:bf:a3:d6:a4:d5:8e:2e:31:97:e4:15:29:ce: a7:e0:9d:2b:89:0f:4d:52:b8:f7:83:d5:34:0f:61:35:b6:92: 17:03:96:a4:3d:e8:44:ba:66:65:04:f2:18:90:81:54:c8:7f: 19:a9:8c:26:62:28:96:37:c7:97:81:53:0a:70:69:ff:2f:83: 7a:e1:a4:b4:da:a9:44:2b:37:23:b5:1b:f1:a5:79:03:0d:6e: b4:9b:da:51:7d:80:88:92:1e:2c:96:d1:b9:69:92:7f:9c:4e: 69:fb:30:a4:fc:1c:3c:18:5a:39:05:90:e2:bb:e9:4c:ec:c7: 7b:a8:43:61:46:38:98:89:fa:a9:0d:84:cc:74:78:d7:f1:80: 1b:39:1c:c0:cb:2a:66:48:76:67:1a:7e:c2:8a:14:c3:46:ae: cd:c6:80:ad:60:8b:d7:d3:20:da:a5:97:a1:41:bd:1f:a0:55: 76:79:3f:ef -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAYgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0VDQTIxMTAvBgNVBAUTKDM2Q0Y1Q0MwQTYwRTBCN0Q1NDYxMkExMkVCNUI5ODky ODQ2ODZEQjAwHhcNMjUwNTExMDIzNTM3WhcNMjUwNTE4MDIzNTM3WjAYMRYwFAYD VQQDEw02ODIwMGNmYS1jODk3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA06Iz6oQ/iV+B3R5kLL3P/fOiRKYDQaeW9NPxkjNDJEjbnsIf+3jD3jluU12u olHz5SWvpg4D7XEn8URDTqaatOtCj31uNEI3JllVUT5008BEFZ9GDDZsK+XPZJr4 jo+t+12CYPkp7QR+m6EC3W/NvHuJ5PUhNyxrO1TXZZez4kbguFp78PefKk15abv1 k1Fnu2LJYlDb6G5zOL2PA0XpjGJ8vFOVb3IeYxbnkTAazd+gMx7rCk04yEFNW4m1 98dxuEsfU8sVVc9Q6Pjjr2+HvVaTp5zR24+dKzp4b7SjbyVTASnGq3Oqrx2Y4QG3 7qf5VRrJufsSQxfjCwGeSe6YfQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAKKfHz5 lgtrNLZsNU9YKTrdxDeSMB8GA1UdIwQYMBaAFDbPXMCmDgt9VGEqEutbmJKEaG2w MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RUNBMi8wMjgyN0NGOEU0 MzcxMUVEQTg2NTYzMUFDNEY5QUUwMi9Oczljd0tZT0MzMVVZU29TNjF1WWtvUm9i YkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05zOWN3S1lPQzMxVVlTb1M2MXVZa29Sb2JiQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RUNBMi8wMjgyN0NGOEU0MzcxMUVEQTg2NTYzMUFDNEY5QUUwMi9Oczljd0tZT0Mz MVVZU29TNjF1WWtvUm9iYkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA/Xn7CHakzEE2q9dCaCRO4BnrEUvRZ8dk8y0ekwXcBOGXgLRWBx+js H+IFN34aEVtrbT1u73FctR8oCbKUOcZV9ZmNIvT6BVQexKwtf7+j1qTVji4xl+QV Kc6n4J0riQ9NUrj3g9U0D2E1tpIXA5akPehEumZlBPIYkIFUyH8ZqYwmYiiWN8eX gVMKcGn/L4N64aS02qlEKzcjtRvxpXkDDW60m9pRfYCIkh4sltG5aZJ/nE5p+zCk /Bw8GFo5BZDiu+lM7Md7qENhRjiYifqpDYTMdHjX8YAbORzAyypmSHZnGn7CihTD Rq7NxoCtYIvX0yDapZehQb0foFV2eT/v -----END CERTIFICATE-----Generated at Sun May 11 14:40:00 2025 by rpki-client