$ rpki-client -vvf rpki.apnic.net/member_repository/A9198FD0/20B4BD803DD511ECB7266464C4F9AE02/nWBHd6Cse-aqCBCwJetJPqbdNGM.mft File: nWBHd6Cse-aqCBCwJetJPqbdNGM.mft (raw, json) Hash identifier: N7sODXIdrcDSJBisTocHwiuOYOqh80/MA1yMVFYWltY= Subject key identifier: 9F:8F:78:B6:66:54:82:CF:FE:4F:DE:C7:7E:15:33:CB:5C:5B:31:22 Authority key identifier: 9D:60:47:77:A0:AC:7B:E6:AA:08:10:B0:25:EB:49:3E:A6:DD:34:63 Certificate issuer: /CN=A9198FD0/serialNumber=9D604777A0AC7BE6AA0810B025EB493EA6DD3463 Certificate serial: 0489 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nWBHd6Cse-aqCBCwJetJPqbdNGM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9198FD0/20B4BD803DD511ECB7266464C4F9AE02/nWBHd6Cse-aqCBCwJetJPqbdNGM.mft Manifest number: 0483 Signing time: Sat 10 May 2025 23:38:38 +0000 Manifest this update: Sat 10 May 2025 23:38:37 +0000 Manifest next update: Sat 17 May 2025 23:38:37 +0000 Files and hashes: 1: nWBHd6Cse-aqCBCwJetJPqbdNGM.crl (hash: YxDw36/OdQ+pNKWGivtjvk4VrkGTAnHl3c5zkkhe1dA=) 2: 8327C2403DE011ECAB508171C4F9AE02.roa (hash: Sa14PRGt0bBOrLuIs7j8Gc0qLkwHSO6EtTYwSlnujqM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9198FD0/20B4BD803DD511ECB7266464C4F9AE02/nWBHd6Cse-aqCBCwJetJPqbdNGM.crl rsync://rpki.apnic.net/member_repository/A9198FD0/20B4BD803DD511ECB7266464C4F9AE02/nWBHd6Cse-aqCBCwJetJPqbdNGM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nWBHd6Cse-aqCBCwJetJPqbdNGM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 23:38:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1161 (0x489) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9198FD0, serialNumber=9D604777A0AC7BE6AA0810B025EB493EA6DD3463 Validity Not Before: May 10 23:38:37 2025 GMT Not After : May 17 23:38:37 2025 GMT Subject: CN=681fe37d-3967 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:c5:3d:38:40:56:aa:cf:13:00:c0:a5:80:17: 51:60:93:18:eb:58:e8:56:a8:27:23:60:0a:19:14: 9d:30:29:8b:39:9d:38:aa:5a:a7:ae:39:31:67:6e: 45:37:df:36:74:dd:27:ce:74:2e:1f:69:80:5d:00: 46:24:f2:7b:f7:01:5a:85:86:68:d8:91:e1:41:63: eb:e3:39:30:2a:b4:42:73:06:c0:ee:ff:58:fc:92: 94:55:4c:35:aa:7b:22:b8:7d:64:fe:44:45:66:39: e4:f3:12:66:b3:5d:f7:64:6b:13:91:17:3f:2a:ab: d3:96:85:0b:c0:e8:13:2a:1f:f4:39:2f:71:29:b2: 7b:e8:ed:a3:81:2e:52:2a:a0:85:70:14:a1:e6:f4: d2:0a:2a:35:9f:71:ab:72:e9:c4:85:25:97:bb:0a: ad:ac:4f:9b:00:d2:9f:59:e3:61:20:81:1f:5b:dc: 50:fe:6e:61:09:89:c1:53:70:55:1e:e1:d5:14:d0: e6:16:a0:bd:3c:7a:70:7e:6f:3a:f7:90:82:0e:a6: b3:30:14:81:ac:2d:c9:e0:62:da:3d:10:bc:21:37: 0a:a3:42:3a:91:41:7a:7b:b1:04:2a:a6:3d:b8:08: ea:53:aa:84:ae:94:0f:13:63:62:ba:61:50:96:26: 94:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:8F:78:B6:66:54:82:CF:FE:4F:DE:C7:7E:15:33:CB:5C:5B:31:22 X509v3 Authority Key Identifier: keyid:9D:60:47:77:A0:AC:7B:E6:AA:08:10:B0:25:EB:49:3E:A6:DD:34:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9198FD0/20B4BD803DD511ECB7266464C4F9AE02/nWBHd6Cse-aqCBCwJetJPqbdNGM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nWBHd6Cse-aqCBCwJetJPqbdNGM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9198FD0/20B4BD803DD511ECB7266464C4F9AE02/nWBHd6Cse-aqCBCwJetJPqbdNGM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5a:bc:8d:de:63:a5:c0:f1:87:f5:83:10:d5:b5:5a:7f:a7:7a: 4c:92:58:28:03:62:d5:27:b1:57:0f:f1:27:b1:08:67:50:3d: f8:bb:5d:76:3e:05:3e:56:40:37:25:4c:c6:77:f8:dc:f1:27: 43:db:81:51:62:5f:ee:79:1f:c5:c9:60:b3:f2:b6:c2:62:2a: 06:15:75:6a:d4:8d:a5:cc:3e:a0:2a:e2:62:15:45:34:37:e6: 1a:77:05:e8:df:64:6f:e3:82:8d:5a:36:7d:d7:94:07:93:8f: 75:32:c4:9c:c7:c9:33:23:f7:9e:e3:3a:39:05:08:ce:f7:b4: 79:0c:71:17:12:72:5b:ff:41:fc:8d:06:f0:b5:c4:dd:d8:9e: d4:62:06:4a:ff:a8:4c:1a:14:4b:b0:b7:21:0a:05:72:1a:bf: f1:57:65:f5:c3:45:51:56:bd:09:db:6f:c2:55:c0:43:6b:82: 25:04:f8:45:05:94:ee:33:4b:63:d0:7f:92:bb:87:fa:54:d0: 61:84:f3:ef:42:ea:17:c6:52:ad:22:42:ab:bb:e8:81:27:34: c7:1e:39:86:b1:29:69:bf:17:66:12:e1:4d:95:e0:3d:4b:d8: 6d:e3:7e:4b:cc:c6:15:37:5f:85:c8:a7:43:4c:65:9f:5e:21: e4:d5:6f:b1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBIkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OThGRDAxMTAvBgNVBAUTKDlENjA0Nzc3QTBBQzdCRTZBQTA4MTBCMDI1RUI0OTNF QTZERDM0NjMwHhcNMjUwNTEwMjMzODM3WhcNMjUwNTE3MjMzODM3WjAYMRYwFAYD VQQDEw02ODFmZTM3ZC0zOTY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw8U9OEBWqs8TAMClgBdRYJMY61joVqgnI2AKGRSdMCmLOZ04qlqnrjkxZ25F N982dN0nznQuH2mAXQBGJPJ79wFahYZo2JHhQWPr4zkwKrRCcwbA7v9Y/JKUVUw1 qnsiuH1k/kRFZjnk8xJms133ZGsTkRc/KqvTloULwOgTKh/0OS9xKbJ76O2jgS5S KqCFcBSh5vTSCio1n3GrcunEhSWXuwqtrE+bANKfWeNhIIEfW9xQ/m5hCYnBU3BV HuHVFNDmFqC9PHpwfm8695CCDqazMBSBrC3J4GLaPRC8ITcKo0I6kUF6e7EEKqY9 uAjqU6qErpQPE2NiumFQliaUzQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ+PeLZm VILP/k/ex34VM8tcWzEiMB8GA1UdIwQYMBaAFJ1gR3egrHvmqggQsCXrST6m3TRj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OEZEMC8yMEI0QkQ4MDNE RDUxMUVDQjcyNjY0NjRDNEY5QUUwMi9uV0JIZDZDc2UtYXFDQkN3SmV0SlBxYmRO R00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25XQkhkNkNzZS1hcUNCQ3dKZXRKUHFiZE5HTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 OEZEMC8yMEI0QkQ4MDNERDUxMUVDQjcyNjY0NjRDNEY5QUUwMi9uV0JIZDZDc2Ut YXFDQkN3SmV0SlBxYmROR00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBavI3eY6XA8Yf1gxDVtVp/p3pMklgoA2LVJ7FXD/EnsQhnUD34u112 PgU+VkA3JUzGd/jc8SdD24FRYl/ueR/FyWCz8rbCYioGFXVq1I2lzD6gKuJiFUU0 N+YadwXo32Rv44KNWjZ915QHk491MsScx8kzI/ee4zo5BQjO97R5DHEXEnJb/0H8 jQbwtcTd2J7UYgZK/6hMGhRLsLchCgVyGr/xV2X1w0VRVr0J22/CVcBDa4IlBPhF BZTuM0tj0H+Su4f6VNBhhPPvQuoXxlKtIkKru+iBJzTHHjmGsSlpvxdmEuFNleA9 S9ht435LzMYVN1+FyKdDTGWfXiHk1W+x -----END CERTIFICATE-----Generated at Mon May 12 19:23:38 2025 by rpki-client