$ rpki-client -vvf rpki.apnic.net/member_repository/A918404E/BC030C76F1DA11EAAFC6C70AC4F9AE02/nHx3b2v2ADKD8Mq0Pi3GFJSZcWI.mft File: nHx3b2v2ADKD8Mq0Pi3GFJSZcWI.mft (raw, json) Hash identifier: rulSeamiqsKRsYSLcoTIPVhwvxw/OXXV9W7728KZlR8= Subject key identifier: 7D:F7:B7:2B:D9:26:35:04:1F:06:B8:3B:4B:0D:CF:95:D8:58:84:57 Authority key identifier: 9C:7C:77:6F:6B:F6:00:32:83:F0:CA:B4:3E:2D:C6:14:94:99:71:62 Certificate issuer: /CN=A918404E/serialNumber=9C7C776F6BF6003283F0CAB43E2DC61494997162 Certificate serial: 0911 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nHx3b2v2ADKD8Mq0Pi3GFJSZcWI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918404E/BC030C76F1DA11EAAFC6C70AC4F9AE02/nHx3b2v2ADKD8Mq0Pi3GFJSZcWI.mft Manifest number: 087B Signing time: Sat 10 May 2025 20:45:30 +0000 Manifest this update: Sat 10 May 2025 20:45:30 +0000 Manifest next update: Sat 17 May 2025 20:45:30 +0000 Files and hashes: 1: nHx3b2v2ADKD8Mq0Pi3GFJSZcWI.crl (hash: F7LlBJwJ/dF1HEnP/pXckqyTzDbd2D4yVNtSzLmZ9Z4=) 2: 8C2F4DBA8D3111EFA61E9282C4F9AE02.roa (hash: rGSaf9r5NHWNkGd2dlgWyn72IpJZOpkzcKbp3O1O8bg=) 3: 287F42E4018011EF92ADDC7FC4F9AE02.roa (hash: FEK8EzXCQ/8MiufhcQyCAnkfxapHFXjscSrsdrF8TfA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918404E/BC030C76F1DA11EAAFC6C70AC4F9AE02/nHx3b2v2ADKD8Mq0Pi3GFJSZcWI.crl rsync://rpki.apnic.net/member_repository/A918404E/BC030C76F1DA11EAAFC6C70AC4F9AE02/nHx3b2v2ADKD8Mq0Pi3GFJSZcWI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nHx3b2v2ADKD8Mq0Pi3GFJSZcWI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 20:45:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2321 (0x911) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918404E, serialNumber=9C7C776F6BF6003283F0CAB43E2DC61494997162 Validity Not Before: May 10 20:45:30 2025 GMT Not After : May 17 20:45:30 2025 GMT Subject: CN=681fbaea-80ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:22:09:de:3f:be:36:3f:48:5f:62:4d:db:92: 9a:f6:a1:a5:cf:fa:7b:f6:01:87:b4:12:dc:52:a6: 5e:cb:d4:bc:e8:0a:8c:21:23:21:a7:43:cd:7c:2e: 8a:8e:fc:12:f0:47:35:ab:55:17:59:32:21:3d:44: 7e:13:d6:7f:e7:f0:af:14:4b:b5:7b:2a:55:25:da: e2:c1:dd:a7:e3:8b:d7:f8:68:35:65:b6:33:2b:a4: fa:af:34:fb:8a:4b:4b:5c:c5:10:b5:9a:f8:ad:f4: 2e:78:7d:af:86:4b:0d:5d:b9:8d:0d:68:5c:01:3b: b9:51:b5:22:72:45:1b:af:3c:da:93:7c:7b:c8:19: 59:b0:f1:4e:67:86:9a:93:f8:a5:48:23:f2:fb:b0: 3b:98:46:f8:ee:8a:24:73:40:8b:14:ce:51:5d:3e: 7c:64:7f:20:48:ad:58:04:71:cd:1a:d1:4b:00:0d: d6:0a:3b:be:c7:ec:b5:9b:80:f5:86:ca:3b:6a:f5: c5:fd:fd:0f:13:c6:4b:3b:aa:53:84:9b:54:6d:e8: ac:62:07:8c:07:22:f2:2c:48:63:32:f6:23:13:cd: ff:ac:3f:e1:86:4b:b2:64:48:c2:4b:d8:1a:98:6c: a2:b2:48:31:12:7b:f4:1c:68:84:5b:18:6c:2c:7c: 82:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:F7:B7:2B:D9:26:35:04:1F:06:B8:3B:4B:0D:CF:95:D8:58:84:57 X509v3 Authority Key Identifier: keyid:9C:7C:77:6F:6B:F6:00:32:83:F0:CA:B4:3E:2D:C6:14:94:99:71:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918404E/BC030C76F1DA11EAAFC6C70AC4F9AE02/nHx3b2v2ADKD8Mq0Pi3GFJSZcWI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nHx3b2v2ADKD8Mq0Pi3GFJSZcWI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918404E/BC030C76F1DA11EAAFC6C70AC4F9AE02/nHx3b2v2ADKD8Mq0Pi3GFJSZcWI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 67:0f:75:a2:30:af:c8:cf:d4:9b:61:14:2c:e6:dc:b0:aa:b2: ac:28:0b:64:7b:b8:36:ce:68:a4:9b:72:9f:d6:3b:78:7d:3b: 1a:a5:4e:29:15:3a:1a:ba:b4:e6:84:9b:ef:bf:72:63:e1:51: 53:41:a4:63:e0:90:ff:4d:d1:7d:76:28:86:c8:1c:1e:90:0f: 28:e3:22:91:48:76:91:1a:81:cb:05:45:78:56:e2:be:69:4e: d1:66:b4:df:b0:37:38:c7:4d:bb:59:97:80:98:0a:c7:39:14: 23:ef:fc:9d:cd:7b:11:42:43:88:d9:c0:6b:45:36:23:bc:6e: 6a:12:66:cb:ce:38:1b:07:97:c4:41:56:08:81:a9:3b:ce:e8: 50:91:80:40:9d:c8:fe:35:bd:94:c2:fd:f0:c7:fb:17:28:d9: 53:69:5c:8d:f7:b1:4b:c3:ff:df:68:fa:52:a8:2a:0c:e9:8b: e2:e4:66:4f:80:65:56:4c:b2:e9:18:00:ba:2b:2f:07:ea:c3: 78:ad:12:8c:3d:db:be:30:dd:da:99:57:68:0f:f7:6b:3e:d5: 36:4c:90:1c:8e:9d:6c:74:c1:2d:0b:08:df:cf:99:36:ee:b2: 0f:4a:d7:aa:b2:d1:fc:bd:68:cb:2e:6e:c3:5b:66:15:cd:98: c7:56:1f:a7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCREwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODQwNEUxMTAvBgNVBAUTKDlDN0M3NzZGNkJGNjAwMzI4M0YwQ0FCNDNFMkRDNjE0 OTQ5OTcxNjIwHhcNMjUwNTEwMjA0NTMwWhcNMjUwNTE3MjA0NTMwWjAYMRYwFAYD VQQDEw02ODFmYmFlYS04MGFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7SIJ3j++Nj9IX2JN25Ka9qGlz/p79gGHtBLcUqZey9S86AqMISMhp0PNfC6K jvwS8Ec1q1UXWTIhPUR+E9Z/5/CvFEu1eypVJdriwd2n44vX+Gg1ZbYzK6T6rzT7 iktLXMUQtZr4rfQueH2vhksNXbmNDWhcATu5UbUickUbrzzak3x7yBlZsPFOZ4aa k/ilSCPy+7A7mEb47ookc0CLFM5RXT58ZH8gSK1YBHHNGtFLAA3WCju+x+y1m4D1 hso7avXF/f0PE8ZLO6pThJtUbeisYgeMByLyLEhjMvYjE83/rD/hhkuyZEjCS9ga mGyiskgxEnv0HGiEWxhsLHyCrQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH33tyvZ JjUEHwa4O0sNz5XYWIRXMB8GA1UdIwQYMBaAFJx8d29r9gAyg/DKtD4txhSUmXFi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NDA0RS9CQzAzMEM3NkYx REExMUVBQUZDNkM3MEFDNEY5QUUwMi9uSHgzYjJ2MkFES0Q4TXEwUGkzR0ZKU1pj V0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25IeDNiMnYyQURLRDhNcTBQaTNHRkpTWmNXSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NDA0RS9CQzAzMEM3NkYxREExMUVBQUZDNkM3MEFDNEY5QUUwMi9uSHgzYjJ2MkFE S0Q4TXEwUGkzR0ZKU1pjV0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBnD3WiMK/Iz9SbYRQs5tywqrKsKAtke7g2zmikm3Kf1jt4fTsapU4p FToaurTmhJvvv3Jj4VFTQaRj4JD/TdF9diiGyBwekA8o4yKRSHaRGoHLBUV4VuK+ aU7RZrTfsDc4x027WZeAmArHORQj7/ydzXsRQkOI2cBrRTYjvG5qEmbLzjgbB5fE QVYIgak7zuhQkYBAncj+Nb2Uwv3wx/sXKNlTaVyN97FLw//faPpSqCoM6Yvi5GZP gGVWTLLpGAC6Ky8H6sN4rRKMPdu+MN3amVdoD/drPtU2TJAcjp1sdMEtCwjfz5k2 7rIPSteqstH8vWjLLm7DW2YVzZjHVh+n -----END CERTIFICATE-----Generated at Mon May 12 07:48:05 2025 by rpki-client