$ rpki-client -vvf rpki.apnic.net/member_repository/A919899D/F15787B4F68211EB8E037F7EC4F9AE02/nLnwNCujTijkVM2SOEk0ZgWxxjI.mft File: nLnwNCujTijkVM2SOEk0ZgWxxjI.mft (raw, json) Hash identifier: XNotsONXXobzLCLHQofHL2lF/ZFZKK3RIcuZoOfHOJE= Subject key identifier: A8:81:8A:6B:18:32:DB:B3:7A:CD:61:71:4A:B3:20:78:14:66:81:EC Authority key identifier: 9C:B9:F0:34:2B:A3:4E:28:E4:54:CD:92:38:49:34:66:05:B1:C6:32 Certificate issuer: /CN=A919899D/serialNumber=9CB9F0342BA34E28E454CD923849346605B1C632 Certificate serial: 053C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nLnwNCujTijkVM2SOEk0ZgWxxjI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919899D/F15787B4F68211EB8E037F7EC4F9AE02/nLnwNCujTijkVM2SOEk0ZgWxxjI.mft Manifest number: 0534 Signing time: Wed 14 May 2025 23:32:26 +0000 Manifest this update: Wed 14 May 2025 23:32:26 +0000 Manifest next update: Wed 21 May 2025 23:32:26 +0000 Files and hashes: 1: nLnwNCujTijkVM2SOEk0ZgWxxjI.crl (hash: A9pWZNkBnI6jtxgtZaxfV1IuG4pDpPLczFiStS1Rx+c=) 2: 77465F12874511EEBEA58225C4F9AE02.roa (hash: EZ7XOZu8P3fYljWZEYYsh451lzcL+Hz2HibFDv/VLxc=) 3: A4331EC89E4911EEA1F8471AC4F9AE02.roa (hash: dojgMfaVkK8Ikxn0bp2yTuAA7toIIjYyBZcEBpuQu+E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919899D/F15787B4F68211EB8E037F7EC4F9AE02/nLnwNCujTijkVM2SOEk0ZgWxxjI.crl rsync://rpki.apnic.net/member_repository/A919899D/F15787B4F68211EB8E037F7EC4F9AE02/nLnwNCujTijkVM2SOEk0ZgWxxjI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nLnwNCujTijkVM2SOEk0ZgWxxjI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 21 May 2025 23:32:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1340 (0x53c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919899D, serialNumber=9CB9F0342BA34E28E454CD923849346605B1C632 Validity Not Before: May 14 23:32:26 2025 GMT Not After : May 21 23:32:26 2025 GMT Subject: CN=6825280a-37b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:81:38:ed:45:f7:3a:9a:05:60:d1:bf:b2:47: 0d:78:e0:8c:5e:68:98:f8:9f:81:20:11:3d:39:71: 57:10:11:70:bd:fd:bd:7f:d7:18:b1:5d:13:83:b4: 55:14:cf:1b:d9:db:44:91:2c:85:df:0e:b5:3b:08: 08:75:a9:d7:75:df:2b:1a:c8:06:59:40:5d:be:8b: 65:5e:77:62:b4:86:ae:d2:2f:93:6c:76:db:4b:48: 46:f1:0d:8b:62:67:6b:2f:ff:66:63:75:aa:2a:5c: ba:7e:fb:5c:da:81:8e:80:39:96:2e:5c:32:cc:09: 4e:01:18:07:1c:9b:9b:97:62:9f:e9:29:6b:db:e4: 3a:b7:7e:a0:02:a6:ce:80:fb:15:3b:2b:b1:f9:b6: 01:e5:c7:b7:0f:25:8f:a7:65:b8:06:af:b1:a1:59: 0b:47:1b:8b:1a:f0:33:3f:a7:16:14:7f:0f:9f:ee: 19:be:71:94:78:56:62:b4:11:37:75:d2:a9:55:94: ef:18:83:de:a7:5d:15:e6:bf:ca:54:14:bd:88:ae: 8b:6d:b5:21:89:93:da:45:54:ad:0c:7e:5d:3f:df: 5c:08:4f:71:ca:7e:b4:8c:25:3d:ed:4d:fc:89:48: 64:8f:be:8d:51:fa:d8:a1:96:87:12:2b:bf:49:7a: 4b:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:81:8A:6B:18:32:DB:B3:7A:CD:61:71:4A:B3:20:78:14:66:81:EC X509v3 Authority Key Identifier: keyid:9C:B9:F0:34:2B:A3:4E:28:E4:54:CD:92:38:49:34:66:05:B1:C6:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919899D/F15787B4F68211EB8E037F7EC4F9AE02/nLnwNCujTijkVM2SOEk0ZgWxxjI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nLnwNCujTijkVM2SOEk0ZgWxxjI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919899D/F15787B4F68211EB8E037F7EC4F9AE02/nLnwNCujTijkVM2SOEk0ZgWxxjI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 86:0d:6a:9e:b8:5e:b0:09:a7:0a:90:8f:d0:42:e6:74:51:05: 4f:7c:c7:78:c3:12:a5:48:8a:e5:fa:a5:2f:89:89:9e:55:74: bc:16:80:04:d8:26:2f:fc:3a:37:77:5f:2a:82:19:9e:78:3f: 64:a6:e1:09:85:83:39:20:d1:b2:73:cf:60:c9:80:c1:e6:02: b8:4e:1f:ff:7a:e4:67:5d:ad:13:0a:a4:8f:68:42:bb:23:99: 49:12:bb:19:4c:34:32:e1:6e:04:71:78:1c:c9:b4:ef:df:24: 89:7f:a0:a2:0f:e9:8a:38:b1:e9:7d:bf:fe:06:95:c4:0f:c1: d3:29:79:4d:6a:7a:99:b4:f2:c2:9c:51:07:d9:14:40:14:df: 0c:64:63:f3:90:0a:e8:2f:18:03:38:ee:fd:32:53:43:4e:94: 6c:ef:3b:23:b7:ee:0b:00:6d:da:b7:18:c9:91:ac:45:ee:cd: 2c:30:47:f0:43:05:5d:c3:34:10:da:79:12:ab:26:87:f4:cd: bf:d8:10:57:08:77:2f:16:a7:f7:9f:3a:07:39:f4:98:16:57: 87:3d:f4:fc:e0:3b:25:70:2a:2f:68:4b:0b:41:8b:ef:4a:57: 9b:3d:58:fb:db:17:8a:07:7b:8a:73:93:dd:16:47:32:80:c8: f8:02:37:e0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBTwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTg5OUQxMTAvBgNVBAUTKDlDQjlGMDM0MkJBMzRFMjhFNDU0Q0Q5MjM4NDkzNDY2 MDVCMUM2MzIwHhcNMjUwNTE0MjMzMjI2WhcNMjUwNTIxMjMzMjI2WjAYMRYwFAYD VQQDEw02ODI1MjgwYS0zN2IzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv4E47UX3OpoFYNG/skcNeOCMXmiY+J+BIBE9OXFXEBFwvf29f9cYsV0Tg7RV FM8b2dtEkSyF3w61OwgIdanXdd8rGsgGWUBdvotlXnditIau0i+TbHbbS0hG8Q2L YmdrL/9mY3WqKly6fvtc2oGOgDmWLlwyzAlOARgHHJubl2Kf6Slr2+Q6t36gAqbO gPsVOyux+bYB5ce3DyWPp2W4Bq+xoVkLRxuLGvAzP6cWFH8Pn+4ZvnGUeFZitBE3 ddKpVZTvGIPep10V5r/KVBS9iK6LbbUhiZPaRVStDH5dP99cCE9xyn60jCU97U38 iUhkj76NUfrYoZaHEiu/SXpL6QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKiBimsY Mtuzes1hcUqzIHgUZoHsMB8GA1UdIwQYMBaAFJy58DQro04o5FTNkjhJNGYFscYy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5ODk5RC9GMTU3ODdCNEY2 ODIxMUVCOEUwMzdGN0VDNEY5QUUwMi9uTG53TkN1alRpamtWTTJTT0VrMFpnV3h4 akkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25MbndOQ3VqVGlqa1ZNMlNPRWswWmdXeHhqSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 ODk5RC9GMTU3ODdCNEY2ODIxMUVCOEUwMzdGN0VDNEY5QUUwMi9uTG53TkN1alRp amtWTTJTT0VrMFpnV3h4akkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCGDWqeuF6wCacKkI/QQuZ0UQVPfMd4wxKlSIrl+qUviYmeVXS8FoAE 2CYv/Do3d18qghmeeD9kpuEJhYM5INGyc89gyYDB5gK4Th//euRnXa0TCqSPaEK7 I5lJErsZTDQy4W4EcXgcybTv3ySJf6CiD+mKOLHpfb/+BpXED8HTKXlNanqZtPLC nFEH2RRAFN8MZGPzkAroLxgDOO79MlNDTpRs7zsjt+4LAG3atxjJkaxF7s0sMEfw QwVdwzQQ2nkSqyaH9M2/2BBXCHcvFqf3nzoHOfSYFleHPfT84DslcCovaEsLQYvv SlebPVj72xeKB3uKc5PdFkcygMj4Ajfg -----END CERTIFICATE-----Generated at Fri May 16 21:41:24 2025 by rpki-client