$ rpki-client -vvf rpki.apnic.net/member_repository/A919D6BB/3AB0F76AFB6211E9A82B394AC4F9AE02/N1NyjlTwmkhRPf_S-nGARBH82yA.mft File: N1NyjlTwmkhRPf_S-nGARBH82yA.mft (raw, json) Hash identifier: XlUd7dHN1cCu0zeGkxVXcsmJfg97/Obv0PbUZDlB7MM= Subject key identifier: 29:1B:52:0C:44:9F:F9:78:CC:05:95:C4:BF:40:27:DF:81:DC:59:BF Authority key identifier: 37:53:72:8E:54:F0:9A:48:51:3D:FF:D2:FA:71:80:44:11:FC:DB:20 Certificate issuer: /CN=A919D6BB/serialNumber=3753728E54F09A48513DFFD2FA71804411FCDB20 Certificate serial: 0C88 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N1NyjlTwmkhRPf_S-nGARBH82yA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919D6BB/3AB0F76AFB6211E9A82B394AC4F9AE02/N1NyjlTwmkhRPf_S-nGARBH82yA.mft Manifest number: 0C74 Signing time: Wed 14 May 2025 18:22:56 +0000 Manifest this update: Wed 14 May 2025 18:22:55 +0000 Manifest next update: Wed 21 May 2025 18:22:55 +0000 Files and hashes: 1: N1NyjlTwmkhRPf_S-nGARBH82yA.crl (hash: 3wCAo0AgTKrM5VdjkLKS4J0QmM21TpFHCNVh596H2Q4=) 2: CA39F7F0FB6311E999847F4DC4F9AE02.roa (hash: vr09dbtEy2Fgutt0NtzNOJlZbFaSyEOb3HlcebNKKlM=) 3: B647F704090C11EFB666C967C4F9AE02.roa (hash: C/GK3qZr1DIfgcq87pT0/h+xz6IT2+9Jo03Tvm4UR1g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919D6BB/3AB0F76AFB6211E9A82B394AC4F9AE02/N1NyjlTwmkhRPf_S-nGARBH82yA.crl rsync://rpki.apnic.net/member_repository/A919D6BB/3AB0F76AFB6211E9A82B394AC4F9AE02/N1NyjlTwmkhRPf_S-nGARBH82yA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N1NyjlTwmkhRPf_S-nGARBH82yA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 21 May 2025 18:22:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3208 (0xc88) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919D6BB, serialNumber=3753728E54F09A48513DFFD2FA71804411FCDB20 Validity Not Before: May 14 18:22:55 2025 GMT Not After : May 21 18:22:55 2025 GMT Subject: CN=6824df7f-354c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:90:b7:38:a9:c8:57:e6:68:08:0f:ee:19:5f: 65:c8:ab:13:a6:b4:20:f4:78:bc:43:9f:2f:54:2e: 1a:5f:29:a2:b4:3b:85:54:1a:01:a1:4f:66:82:55: 25:c6:69:a7:9e:a7:1c:3f:c4:5a:8a:a0:48:fd:47: af:8c:fe:ab:de:81:24:0b:b0:3f:09:8f:90:9f:21: 02:19:32:aa:2a:8d:ce:d8:40:fd:d7:7e:ba:17:64: b4:17:1a:f9:7e:18:61:c1:4b:4b:c1:1c:ac:36:8c: 62:1b:cd:f9:1c:1a:c1:15:26:12:7a:39:6c:3b:0f: 11:b5:8e:ac:be:57:4e:61:29:63:db:93:7b:20:56: c8:ec:76:6f:46:fa:b5:1a:d8:bc:72:3f:2b:e7:43: 28:86:d6:1f:7c:35:4e:ea:ec:0b:ad:2c:a4:99:47: 06:cf:b9:35:3f:ea:22:e4:5b:5e:15:8e:08:92:ef: b5:e5:82:1a:98:89:6a:a5:32:c5:32:c9:83:6c:fc: dc:38:71:0e:2c:79:aa:36:6d:b9:22:00:c9:6d:9c: 11:57:57:9a:21:18:ed:19:e4:d2:d8:54:1b:f2:98: ed:92:ac:87:56:29:a9:fa:89:35:3c:c7:29:1d:65: 9b:95:6e:e8:23:66:34:44:c0:87:8e:09:9a:44:72: 3b:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:1B:52:0C:44:9F:F9:78:CC:05:95:C4:BF:40:27:DF:81:DC:59:BF X509v3 Authority Key Identifier: keyid:37:53:72:8E:54:F0:9A:48:51:3D:FF:D2:FA:71:80:44:11:FC:DB:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919D6BB/3AB0F76AFB6211E9A82B394AC4F9AE02/N1NyjlTwmkhRPf_S-nGARBH82yA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N1NyjlTwmkhRPf_S-nGARBH82yA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919D6BB/3AB0F76AFB6211E9A82B394AC4F9AE02/N1NyjlTwmkhRPf_S-nGARBH82yA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4d:64:77:22:d6:5b:97:ff:ec:a0:6b:46:12:ca:9a:44:19:f5: ea:99:53:60:18:1c:e0:b8:4e:ac:e9:63:31:a8:a2:a5:d5:a6: e9:a0:31:7e:26:e1:38:4f:fe:08:37:6e:a9:5b:a2:aa:9d:58: 6e:77:92:8b:9d:6b:25:d9:9e:51:77:60:31:0c:35:6d:08:c6: fd:06:62:f8:d8:ba:69:19:63:f2:00:b2:10:cd:ff:77:76:6e: 67:d8:43:99:99:04:f1:14:fa:cb:be:0d:2f:54:92:d3:61:39: 88:39:c3:0f:cd:12:e1:b1:7c:50:0a:71:08:53:48:10:31:02: 3f:a2:02:8a:9a:a4:5c:f5:ff:a6:fc:27:98:9b:20:d9:27:16: 5d:42:d0:b1:15:1f:e4:85:ae:60:45:c4:da:e3:34:2c:38:a6: 8b:bd:ca:1e:f3:97:82:df:a9:66:03:87:64:b5:14:3e:b4:4f: 6a:94:f2:ff:d5:05:fb:d3:4e:a7:0c:dc:33:24:86:1c:85:b1: 65:29:4b:44:6f:10:53:36:c6:8c:2d:fd:08:c6:9b:5b:c4:46: 96:c1:93:11:8a:d3:25:91:08:a5:dd:6e:3f:ed:21:2f:ec:e3: 52:76:9f:63:f9:e0:54:a3:04:e6:77:28:84:d0:f8:2d:f7:00: 8d:25:b7:03 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDIgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUQ2QkIxMTAvBgNVBAUTKDM3NTM3MjhFNTRGMDlBNDg1MTNERkZEMkZBNzE4MDQ0 MTFGQ0RCMjAwHhcNMjUwNTE0MTgyMjU1WhcNMjUwNTIxMTgyMjU1WjAYMRYwFAYD VQQDEw02ODI0ZGY3Zi0zNTRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3ZC3OKnIV+ZoCA/uGV9lyKsTprQg9Hi8Q58vVC4aXymitDuFVBoBoU9mglUl xmmnnqccP8RaiqBI/UevjP6r3oEkC7A/CY+QnyECGTKqKo3O2ED91366F2S0Fxr5 fhhhwUtLwRysNoxiG835HBrBFSYSejlsOw8RtY6svldOYSlj25N7IFbI7HZvRvq1 Gti8cj8r50MohtYffDVO6uwLrSykmUcGz7k1P+oi5FteFY4Iku+15YIamIlqpTLF MsmDbPzcOHEOLHmqNm25IgDJbZwRV1eaIRjtGeTS2FQb8pjtkqyHVimp+ok1PMcp HWWblW7oI2Y0RMCHjgmaRHI7KwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCkbUgxE n/l4zAWVxL9AJ9+B3Fm/MB8GA1UdIwQYMBaAFDdTco5U8JpIUT3/0vpxgEQR/Nsg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RDZCQi8zQUIwRjc2QUZC NjIxMUU5QTgyQjM5NEFDNEY5QUUwMi9OMU55amxUd21raFJQZl9TLW5HQVJCSDgy eUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL04xTnlqbFR3bWtoUlBmX1MtbkdBUkJIODJ5QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RDZCQi8zQUIwRjc2QUZCNjIxMUU5QTgyQjM5NEFDNEY5QUUwMi9OMU55amxUd21r aFJQZl9TLW5HQVJCSDgyeUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBNZHci1luX/+yga0YSyppEGfXqmVNgGBzguE6s6WMxqKKl1abpoDF+ JuE4T/4IN26pW6KqnVhud5KLnWsl2Z5Rd2AxDDVtCMb9BmL42LppGWPyALIQzf93 dm5n2EOZmQTxFPrLvg0vVJLTYTmIOcMPzRLhsXxQCnEIU0gQMQI/ogKKmqRc9f+m /CeYmyDZJxZdQtCxFR/kha5gRcTa4zQsOKaLvcoe85eC36lmA4dktRQ+tE9qlPL/ 1QX7006nDNwzJIYchbFlKUtEbxBTNsaMLf0IxptbxEaWwZMRitMlkQil3W4/7SEv 7ONSdp9j+eBUowTmdyiE0Pgt9wCNJbcD -----END CERTIFICATE-----Generated at Thu May 15 19:32:29 2025 by rpki-client