$ rpki-client -vvf rpki.apnic.net/member_repository/A918F1EE/F32CF4E8E75111EFBED81B0EC4F9AE02/9ncWp9N92wPcVtA6uQKnIDfqGdk.mft File: 9ncWp9N92wPcVtA6uQKnIDfqGdk.mft (raw, json) Hash identifier: h6ZDPkgwt2fpwWeNYXlDmii9qYDI74UwgU1m9JELiq8= Subject key identifier: CE:37:62:DD:39:D8:FF:10:4A:A7:39:73:21:0F:4A:E0:B9:D2:F7:19 Authority key identifier: F6:77:16:A7:D3:7D:DB:03:DC:56:D0:3A:B9:02:A7:20:37:EA:19:D9 Certificate issuer: /CN=A918F1EE/serialNumber=F67716A7D37DDB03DC56D03AB902A72037EA19D9 Certificate serial: 32 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9ncWp9N92wPcVtA6uQKnIDfqGdk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918F1EE/F32CF4E8E75111EFBED81B0EC4F9AE02/9ncWp9N92wPcVtA6uQKnIDfqGdk.mft Manifest number: 32 Signing time: Thu 15 May 2025 06:55:17 +0000 Manifest this update: Thu 15 May 2025 06:55:16 +0000 Manifest next update: Thu 22 May 2025 06:55:16 +0000 Files and hashes: 1: 9ncWp9N92wPcVtA6uQKnIDfqGdk.crl (hash: yc+e/0h6kkLsy4rrSVPaev0JSlZAaVGgkpTmQr4zcSg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918F1EE/F32CF4E8E75111EFBED81B0EC4F9AE02/9ncWp9N92wPcVtA6uQKnIDfqGdk.crl rsync://rpki.apnic.net/member_repository/A918F1EE/F32CF4E8E75111EFBED81B0EC4F9AE02/9ncWp9N92wPcVtA6uQKnIDfqGdk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9ncWp9N92wPcVtA6uQKnIDfqGdk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 22 May 2025 06:55:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50 (0x32) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918F1EE, serialNumber=F67716A7D37DDB03DC56D03AB902A72037EA19D9 Validity Not Before: May 15 06:55:16 2025 GMT Not After : May 22 06:55:16 2025 GMT Subject: CN=68258fd5-0d29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:e2:ad:a8:19:29:73:61:b5:10:24:97:2e:db: c5:11:64:e5:0a:c7:ae:05:0e:96:71:59:fc:f2:72: d9:52:33:ac:e9:91:eb:17:28:b7:12:11:64:39:b9: 18:0b:a6:14:8e:72:67:8c:f8:17:38:5b:34:c8:61: aa:9c:0c:77:36:21:82:89:eb:18:2b:14:2b:10:a7: 50:9f:c9:b2:f9:76:1a:f2:18:8b:89:8d:57:30:2a: 6d:5b:92:13:02:49:6c:e0:27:df:5c:6f:b0:07:83: 86:41:06:53:4d:e0:f6:5a:1e:aa:ba:00:9a:fb:cf: 5f:0a:78:fd:25:c7:b1:a6:f4:43:70:63:6f:03:78: fb:8a:49:88:77:ff:f4:af:c3:95:01:bb:06:41:9a: f0:07:1a:59:2b:e1:b9:b6:20:55:05:ea:23:74:82: 34:6a:cf:74:f9:2e:27:aa:b4:7a:8b:d4:ad:97:1f: 29:68:3e:3d:fb:d1:27:ff:4a:44:11:c9:60:76:ed: 0f:54:46:06:b3:c5:6c:75:16:ec:af:73:06:6f:da: cc:6b:00:ea:9d:b5:35:5b:0e:56:3a:c2:2e:cd:90: b4:6a:d5:21:51:e6:17:c3:93:92:c1:91:c0:3f:a9: fd:5d:4a:45:3d:ec:fe:8c:1a:2c:f6:32:c2:45:b6: 56:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:37:62:DD:39:D8:FF:10:4A:A7:39:73:21:0F:4A:E0:B9:D2:F7:19 X509v3 Authority Key Identifier: keyid:F6:77:16:A7:D3:7D:DB:03:DC:56:D0:3A:B9:02:A7:20:37:EA:19:D9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918F1EE/F32CF4E8E75111EFBED81B0EC4F9AE02/9ncWp9N92wPcVtA6uQKnIDfqGdk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9ncWp9N92wPcVtA6uQKnIDfqGdk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918F1EE/F32CF4E8E75111EFBED81B0EC4F9AE02/9ncWp9N92wPcVtA6uQKnIDfqGdk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 86:8c:83:6c:75:ae:11:07:c5:db:3f:ba:07:54:c5:7f:30:f3: e0:c5:ab:25:a2:0f:bc:04:17:3a:ab:bf:0c:f2:00:04:2a:fa: 75:d4:b6:17:e8:7b:e8:2c:6f:ae:ed:00:80:9d:00:0e:7e:23: 10:81:e8:d2:7d:e8:87:23:02:0e:4d:77:00:90:d4:3f:8f:3c: 4e:35:3e:e4:4a:e5:fa:79:68:05:2f:34:d1:dc:82:39:95:97: 1a:4e:0f:c6:93:ee:8e:d4:81:cc:4a:e4:69:ac:29:68:d2:42: 1e:1e:3f:e9:61:d4:6e:d4:19:1e:be:cd:09:ba:db:c0:12:fe: 3b:6a:04:14:ff:7c:28:3c:86:82:fc:be:99:e2:15:45:ad:f6: ab:ec:22:d9:fe:23:ae:b1:c2:af:00:56:5d:4f:88:8e:30:64: 63:20:45:37:10:5b:ae:c3:e6:91:77:39:81:08:d4:1c:4d:02: d7:2c:9f:2e:d6:64:61:50:03:5d:bd:72:03:82:86:05:0d:ff: 72:0c:bf:e3:27:3d:fc:03:68:bf:7e:31:3d:74:aa:ce:d3:30: 83:88:93:e8:96:da:3c:95:3b:20:d6:33:33:1d:c0:1c:e9:92: 24:38:4b:df:a7:33:e1:c7:89:d6:89:5b:97:1a:bc:8d:2e:26: 42:8c:40:96 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBMjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 RjFFRTExMC8GA1UEBRMoRjY3NzE2QTdEMzdEREIwM0RDNTZEMDNBQjkwMkE3MjAz N0VBMTlEOTAeFw0yNTA1MTUwNjU1MTZaFw0yNTA1MjIwNjU1MTZaMBgxFjAUBgNV BAMTDTY4MjU4ZmQ1LTBkMjkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDI4q2oGSlzYbUQJJcu28URZOUKx64FDpZxWfzyctlSM6zpkesXKLcSEWQ5uRgL phSOcmeM+Bc4WzTIYaqcDHc2IYKJ6xgrFCsQp1CfybL5dhryGIuJjVcwKm1bkhMC SWzgJ99cb7AHg4ZBBlNN4PZaHqq6AJr7z18KeP0lx7Gm9ENwY28DePuKSYh3//Sv w5UBuwZBmvAHGlkr4bm2IFUF6iN0gjRqz3T5LieqtHqL1K2XHyloPj370Sf/SkQR yWB27Q9URgazxWx1FuyvcwZv2sxrAOqdtTVbDlY6wi7NkLRq1SFR5hfDk5LBkcA/ qf1dSkU97P6MGiz2MsJFtlafAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUzjdi3TnY /xBKpzlzIQ9K4LnS9xkwHwYDVR0jBBgwFoAU9ncWp9N92wPcVtA6uQKnIDfqGdkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThGMUVFL0YzMkNGNEU4RTc1 MTExRUZCRUQ4MUIwRUM0RjlBRTAyLzluY1dwOU45MndQY1Z0QTZ1UUtuSURmcUdk ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvOW5jV3A5Tjkyd1BjVnRBNnVRS25JRGZxR2RrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThG MUVFL0YzMkNGNEU4RTc1MTExRUZCRUQ4MUIwRUM0RjlBRTAyLzluY1dwOU45MndQ Y1Z0QTZ1UUtuSURmcUdkay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAIaMg2x1rhEHxds/ugdUxX8w8+DFqyWiD7wEFzqrvwzyAAQq+nXUthfo e+gsb67tAICdAA5+IxCB6NJ96IcjAg5NdwCQ1D+PPE41PuRK5fp5aAUvNNHcgjmV lxpOD8aT7o7UgcxK5GmsKWjSQh4eP+lh1G7UGR6+zQm628AS/jtqBBT/fCg8hoL8 vpniFUWt9qvsItn+I66xwq8AVl1PiI4wZGMgRTcQW67D5pF3OYEI1BxNAtcsny7W ZGFQA129cgOChgUN/3IMv+MnPfwDaL9+MT10qs7TMIOIk+iW2jyVOyDWMzMdwBzp kiQ4S9+nM+HHidaJW5cavI0uJkKMQJY= -----END CERTIFICATE-----Generated at Fri May 16 09:21:22 2025 by rpki-client