$ rpki-client -vvf rpki.apnic.net/member_repository/A9122039/FB70DF6AFF2011EB8160AC51C4F9AE02/N02aLIMvI0S92MpAYxF5P2bUxzU.mft File: N02aLIMvI0S92MpAYxF5P2bUxzU.mft (raw, json) Hash identifier: EHAU3iQP+/cguavcKhWKe4hs3hbs8/RlOVWQ2Ud54fE= Subject key identifier: 77:21:E8:83:68:F8:A9:C2:34:BE:9C:77:29:1B:F1:EF:0E:84:33:2B Authority key identifier: 37:4D:9A:2C:83:2F:23:44:BD:D8:CA:40:63:11:79:3F:66:D4:C7:35 Certificate issuer: /CN=A9122039/serialNumber=374D9A2C832F2344BDD8CA406311793F66D4C735 Certificate serial: 0528 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N02aLIMvI0S92MpAYxF5P2bUxzU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9122039/FB70DF6AFF2011EB8160AC51C4F9AE02/N02aLIMvI0S92MpAYxF5P2bUxzU.mft Manifest number: 0516 Signing time: Wed 02 Apr 2025 23:38:34 +0000 Manifest this update: Wed 02 Apr 2025 23:38:34 +0000 Manifest next update: Wed 09 Apr 2025 23:38:34 +0000 Files and hashes: 1: N02aLIMvI0S92MpAYxF5P2bUxzU.crl (hash: 9wsY0E9WA18/kvLm098WJzQWuVz7f+ShuNuFKbfmgbE=) 2: AC3162143ED611EFA3523A6BC4F9AE02.roa (hash: zKaqQd3iJgLKWX9/7WECXgXE4p9Cwusvs6IFZGknjWw=) 3: 1FC8419E4B6F11EF98BA6B27C4F9AE02.roa (hash: 5Bhb6kl3vdn8fYxxshtaRagRNNeIbPt2YFCw1ehb0QI=) 4: BC5887A44B6E11EFA3355126C4F9AE02.roa (hash: mIo6Fk+1HKcj+3gplmKqRStq1177bdJCp9mw6ZHAc2E=) 5: 54E77A985F1F11EFA979694FC4F9AE02.roa (hash: d0OGg+KUHm/8K/0LGDoFYn0QqVu4VxbAlNDpkl0DNzM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9122039/FB70DF6AFF2011EB8160AC51C4F9AE02/N02aLIMvI0S92MpAYxF5P2bUxzU.crl rsync://rpki.apnic.net/member_repository/A9122039/FB70DF6AFF2011EB8160AC51C4F9AE02/N02aLIMvI0S92MpAYxF5P2bUxzU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N02aLIMvI0S92MpAYxF5P2bUxzU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Apr 2025 23:38:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1320 (0x528) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9122039 Validity Not Before: Apr 2 23:38:34 2025 GMT Not After : Apr 9 23:38:34 2025 GMT Subject: CN=67edca7a-686c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:2c:70:c4:dd:c3:3b:ca:96:91:5d:28:f9:63: 30:47:b9:6f:d3:c4:99:13:bc:4c:99:8f:e6:0f:d5: 9d:c9:33:ca:d6:3e:f6:b2:c5:a6:67:86:53:28:6f: a0:ca:3f:17:0f:f7:9c:37:85:8b:53:45:30:02:5b: 00:16:58:47:f4:6e:aa:c9:bd:f9:e0:fa:a8:d4:a8: 0f:9a:7f:5e:d0:cd:45:9e:2a:be:b1:a4:38:26:b2: d6:d4:10:b3:28:17:25:ad:2e:fb:04:77:d4:79:ca: 94:73:cb:68:cd:67:ef:00:78:32:bc:bd:69:7b:78: 35:02:44:80:f7:af:e6:63:4e:a0:0e:05:09:c2:93: 77:70:b5:fa:0f:93:6c:3e:08:e5:c0:3f:63:4b:3e: 80:52:03:2a:b5:26:db:68:ce:33:82:d9:0e:10:f9: 3e:1e:d9:80:f2:45:9a:f1:41:8c:c7:1c:68:1c:5f: 66:1f:a6:e8:02:9c:ff:42:8f:eb:81:87:cd:3e:1c: ab:01:6d:bf:73:45:06:a6:a7:82:9d:4f:0d:f9:49: 98:0d:02:74:00:7e:47:0e:1d:25:9c:3f:49:65:de: 50:4b:c6:4a:47:f9:e5:28:1e:f5:7b:22:52:1d:3e: a2:42:fe:9d:e7:d6:ec:9d:7a:51:a1:b2:1f:8b:f9: bf:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:21:E8:83:68:F8:A9:C2:34:BE:9C:77:29:1B:F1:EF:0E:84:33:2B X509v3 Authority Key Identifier: keyid:37:4D:9A:2C:83:2F:23:44:BD:D8:CA:40:63:11:79:3F:66:D4:C7:35 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9122039/FB70DF6AFF2011EB8160AC51C4F9AE02/N02aLIMvI0S92MpAYxF5P2bUxzU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N02aLIMvI0S92MpAYxF5P2bUxzU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9122039/FB70DF6AFF2011EB8160AC51C4F9AE02/N02aLIMvI0S92MpAYxF5P2bUxzU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0e:9d:62:88:24:bc:33:49:a6:5a:30:15:96:e0:03:ca:ac:5c: 24:d7:54:a6:44:c9:8a:14:5d:63:fc:58:4f:dd:2d:79:e2:ce: c0:63:a9:f8:7d:93:94:42:8c:e5:ff:96:bc:d7:15:89:c2:1a: 2b:09:75:58:32:88:c5:ee:25:8b:e1:2c:00:2a:d8:8b:86:6f: 50:03:e7:0e:23:ca:f6:0c:9c:68:59:eb:c2:41:44:7d:20:bf: 5e:36:e1:26:8f:10:71:20:d6:59:c7:38:96:7b:ad:a9:15:ae: c9:c8:e4:70:82:1f:69:49:58:01:f7:ba:97:b1:2f:ca:06:5c: b9:f0:10:37:29:17:54:2b:d9:62:8d:46:99:8a:5c:0b:10:b4: 5d:11:9c:96:ac:80:85:15:9a:8b:49:62:89:26:69:55:b7:89: a0:9a:f3:47:08:f4:4a:f6:1b:06:6a:6b:85:01:7e:7b:49:58: 56:8b:e7:85:c3:f3:4b:a3:35:55:99:7a:47:38:21:63:69:94: cb:03:7c:cb:fe:5d:1e:91:09:2b:c8:e4:3f:4f:cc:cc:39:da: 23:cf:27:dc:57:89:58:00:5b:06:30:76:d1:6a:50:41:32:48: b7:2e:f0:23:43:9d:94:ce:f5:46:b5:78:7b:5b:9e:c4:d1:42: 33:50:73:c6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBSgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjIwMzkxMTAvBgNVBAUTKDM3NEQ5QTJDODMyRjIzNDRCREQ4Q0E0MDYzMTE3OTNG NjZENEM3MzUwHhcNMjUwNDAyMjMzODM0WhcNMjUwNDA5MjMzODM0WjAYMRYwFAYD VQQDEw02N2VkY2E3YS02ODZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0CxwxN3DO8qWkV0o+WMwR7lv08SZE7xMmY/mD9WdyTPK1j72ssWmZ4ZTKG+g yj8XD/ecN4WLU0UwAlsAFlhH9G6qyb354Pqo1KgPmn9e0M1Fniq+saQ4JrLW1BCz KBclrS77BHfUecqUc8tozWfvAHgyvL1pe3g1AkSA96/mY06gDgUJwpN3cLX6D5Ns PgjlwD9jSz6AUgMqtSbbaM4zgtkOEPk+HtmA8kWa8UGMxxxoHF9mH6boApz/Qo/r gYfNPhyrAW2/c0UGpqeCnU8N+UmYDQJ0AH5HDh0lnD9JZd5QS8ZKR/nlKB71eyJS HT6iQv6d59bsnXpRobIfi/m/7QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHch6INo +KnCNL6cdykb8e8OhDMrMB8GA1UdIwQYMBaAFDdNmiyDLyNEvdjKQGMReT9m1Mc1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMjAzOS9GQjcwREY2QUZG MjAxMUVCODE2MEFDNTFDNEY5QUUwMi9OMDJhTElNdkkwUzkyTXBBWXhGNVAyYlV4 elUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL04wMmFMSU12STBTOTJNcEFZeEY1UDJiVXh6VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MjAzOS9GQjcwREY2QUZGMjAxMUVCODE2MEFDNTFDNEY5QUUwMi9OMDJhTElNdkkw UzkyTXBBWXhGNVAyYlV4elUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAOnWKIJLwzSaZaMBWW4APKrFwk11SmRMmKFF1j/FhP3S154s7AY6n4 fZOUQozl/5a81xWJwhorCXVYMojF7iWL4SwAKtiLhm9QA+cOI8r2DJxoWevCQUR9 IL9eNuEmjxBxINZZxziWe62pFa7JyORwgh9pSVgB97qXsS/KBly58BA3KRdUK9li jUaZilwLELRdEZyWrICFFZqLSWKJJmlVt4mgmvNHCPRK9hsGamuFAX57SVhWi+eF w/NLozVVmXpHOCFjaZTLA3zL/l0ekQkryOQ/T8zMOdojzyfcV4lYAFsGMHbRalBB Mki3LvAjQ52UzvVGtXh7W57E0UIzUHPG -----END CERTIFICATE-----Generated at Fri Apr 4 18:35:59 2025 by rpki-client