$ rpki-client -vvf rpki.apnic.net/member_repository/A919B393/326CBD58325711EDB88DFC2CC4F9AE02/n0mgwprfTYMDB3M9LGCp2TEQogg.mft File: n0mgwprfTYMDB3M9LGCp2TEQogg.mft (raw, json) Hash identifier: 3yoxLcqHcVXTQrXPicXWS73nRuCIvAiv79TrHttRGJw= Subject key identifier: F2:5E:44:A7:A0:08:1C:5D:F5:12:4D:C0:10:67:C7:06:55:1C:D8:C2 Authority key identifier: 9F:49:A0:C2:9A:DF:4D:83:03:07:73:3D:2C:60:A9:D9:31:10:A2:08 Certificate issuer: /CN=A919B393/serialNumber=9F49A0C29ADF4D830307733D2C60A9D93110A208 Certificate serial: 0214 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n0mgwprfTYMDB3M9LGCp2TEQogg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919B393/326CBD58325711EDB88DFC2CC4F9AE02/n0mgwprfTYMDB3M9LGCp2TEQogg.mft Manifest number: 0211 Signing time: Thu 15 May 2025 01:58:34 +0000 Manifest this update: Thu 15 May 2025 01:58:34 +0000 Manifest next update: Thu 22 May 2025 01:58:34 +0000 Files and hashes: 1: n0mgwprfTYMDB3M9LGCp2TEQogg.crl (hash: 1hpc1tzfZDxqFa1TrubDHqhPRVzlI7walWEuJVopf34=) 2: 38F69014325B11ED8403A325C4F9AE02.roa (hash: xPxOBcWiHSTAw3zQ7FKJslNCxgd0Xv3rmMHCdbL8JBE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919B393/326CBD58325711EDB88DFC2CC4F9AE02/n0mgwprfTYMDB3M9LGCp2TEQogg.crl rsync://rpki.apnic.net/member_repository/A919B393/326CBD58325711EDB88DFC2CC4F9AE02/n0mgwprfTYMDB3M9LGCp2TEQogg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n0mgwprfTYMDB3M9LGCp2TEQogg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 22 May 2025 01:58:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 532 (0x214) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919B393, serialNumber=9F49A0C29ADF4D830307733D2C60A9D93110A208 Validity Not Before: May 15 01:58:34 2025 GMT Not After : May 22 01:58:34 2025 GMT Subject: CN=68254a4a-f4f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:9a:f9:34:0c:7c:0c:f0:c1:72:19:6c:8f:82: 87:2c:cb:11:6c:ce:9c:49:b4:a8:e7:62:99:2e:99: 34:bf:a8:13:5c:2f:2d:3a:ae:5a:47:56:7c:0a:d5: b2:38:fe:d0:e3:f8:c6:19:4b:ff:c5:9e:fd:2a:68: 4e:fc:80:16:0d:4a:6b:10:f8:e3:c6:c9:41:1a:29: 26:83:51:d5:68:77:ef:3a:df:77:f6:b0:6f:35:a9: 0b:1c:e0:5e:01:1c:35:b0:8b:5c:fb:a7:4e:79:2d: c7:01:d5:6b:23:37:74:8f:0a:8f:d1:d8:34:46:d5: 92:7e:5a:c4:4d:8c:57:f3:09:9c:b5:83:8d:16:1a: 51:33:0c:ee:a9:71:32:6c:4c:18:c3:4c:6f:bb:0e: fa:e0:11:c0:3e:aa:88:e5:09:5a:46:c9:ea:fb:21: f0:ca:1a:a9:77:a8:28:7e:72:38:c6:58:72:97:b9: ec:74:cb:8b:c6:8e:e0:38:a6:fd:4a:ec:09:4e:8c: d3:fe:c1:6d:5e:c9:96:15:6e:6a:f2:9e:2a:71:e6: d7:c4:53:b4:52:35:a1:a2:80:5b:18:a7:fb:5d:10: fb:28:6f:09:d1:28:fe:b3:1e:0a:c8:1a:55:ae:d7: 12:17:24:84:01:43:57:e1:ad:78:bb:5f:89:8e:7f: 6e:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:5E:44:A7:A0:08:1C:5D:F5:12:4D:C0:10:67:C7:06:55:1C:D8:C2 X509v3 Authority Key Identifier: keyid:9F:49:A0:C2:9A:DF:4D:83:03:07:73:3D:2C:60:A9:D9:31:10:A2:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919B393/326CBD58325711EDB88DFC2CC4F9AE02/n0mgwprfTYMDB3M9LGCp2TEQogg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n0mgwprfTYMDB3M9LGCp2TEQogg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919B393/326CBD58325711EDB88DFC2CC4F9AE02/n0mgwprfTYMDB3M9LGCp2TEQogg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5a:94:5f:80:32:c5:5f:e1:90:f2:3c:84:0d:fc:3d:9a:25:6a: 47:80:bf:c8:1c:e5:dc:db:79:66:d5:06:1d:02:b2:bb:53:51: 0e:53:19:56:f0:b5:85:16:4e:5d:d8:62:dd:58:7f:db:34:ef: 2b:79:b9:07:1d:c2:1d:7c:39:0d:1b:ea:4d:20:c3:77:e8:51: 62:51:f3:17:94:a5:75:b2:f9:8b:8d:79:e1:06:18:d9:bb:ba: 93:f0:74:42:aa:be:d8:7a:fe:09:e4:cd:e8:a0:74:00:d9:23: 97:e7:52:1c:f4:58:a8:61:43:ad:01:c6:79:48:7a:72:e4:9d: 8c:2c:4c:fb:4a:d0:1b:f9:b6:25:01:04:87:6f:98:74:81:f7: 62:f6:f2:10:ec:02:e8:c4:09:4a:f2:69:2e:73:7b:76:b9:27: c7:84:0b:0c:f5:10:04:ad:9c:23:37:f1:00:33:5b:b5:99:c0: 8f:5f:10:8b:70:c0:6c:d1:09:61:99:49:cf:99:dc:43:35:78: 3f:ac:b7:cf:59:27:02:ef:82:aa:4e:56:21:65:3c:78:73:af: 20:b3:aa:b1:94:7f:66:c2:28:c1:a3:99:ef:90:19:f4:7c:d6: 08:9a:89:0d:61:90:55:06:71:73:17:3c:3c:2b:d4:b9:c3:04: 73:89:ae:ba -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAhQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUIzOTMxMTAvBgNVBAUTKDlGNDlBMEMyOUFERjREODMwMzA3NzMzRDJDNjBBOUQ5 MzExMEEyMDgwHhcNMjUwNTE1MDE1ODM0WhcNMjUwNTIyMDE1ODM0WjAYMRYwFAYD VQQDEw02ODI1NGE0YS1mNGYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAypr5NAx8DPDBchlsj4KHLMsRbM6cSbSo52KZLpk0v6gTXC8tOq5aR1Z8CtWy OP7Q4/jGGUv/xZ79KmhO/IAWDUprEPjjxslBGikmg1HVaHfvOt939rBvNakLHOBe ARw1sItc+6dOeS3HAdVrIzd0jwqP0dg0RtWSflrETYxX8wmctYONFhpRMwzuqXEy bEwYw0xvuw764BHAPqqI5QlaRsnq+yHwyhqpd6gofnI4xlhyl7nsdMuLxo7gOKb9 SuwJTozT/sFtXsmWFW5q8p4qcebXxFO0UjWhooBbGKf7XRD7KG8J0Sj+sx4KyBpV rtcSFySEAUNX4a14u1+Jjn9uvwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPJeRKeg CBxd9RJNwBBnxwZVHNjCMB8GA1UdIwQYMBaAFJ9JoMKa302DAwdzPSxgqdkxEKII MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QjM5My8zMjZDQkQ1ODMy NTcxMUVEQjg4REZDMkNDNEY5QUUwMi9uMG1nd3ByZlRZTURCM005TEdDcDJURVFv Z2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL24wbWd3cHJmVFlNREIzTTlMR0NwMlRFUW9nZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 QjM5My8zMjZDQkQ1ODMyNTcxMUVEQjg4REZDMkNDNEY5QUUwMi9uMG1nd3ByZlRZ TURCM005TEdDcDJURVFvZ2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBalF+AMsVf4ZDyPIQN/D2aJWpHgL/IHOXc23lm1QYdArK7U1EOUxlW 8LWFFk5d2GLdWH/bNO8rebkHHcIdfDkNG+pNIMN36FFiUfMXlKV1svmLjXnhBhjZ u7qT8HRCqr7Yev4J5M3ooHQA2SOX51Ic9FioYUOtAcZ5SHpy5J2MLEz7StAb+bYl AQSHb5h0gfdi9vIQ7ALoxAlK8mkuc3t2uSfHhAsM9RAErZwjN/EAM1u1mcCPXxCL cMBs0QlhmUnPmdxDNXg/rLfPWScC74KqTlYhZTx4c68gs6qxlH9mwijBo5nvkBn0 fNYImokNYZBVBnFzFzw8K9S5wwRzia66 -----END CERTIFICATE-----Generated at Fri May 16 10:51:40 2025 by rpki-client