$ rpki-client -vvf rpki.apnic.net/member_repository/A9123918/8EE71486B6C411EFB10EDE58C4F9AE02/ecf8XRpe7wspjgByMmq3Noa9_ng.mft File: ecf8XRpe7wspjgByMmq3Noa9_ng.mft (raw, json) Hash identifier: wm+z8Ym3SrFjgr5xaFB5RZ3blEMsLANWDg2fbbvMMZ0= Subject key identifier: 8C:F0:79:F7:0F:C9:37:B5:8F:53:DB:B6:AE:B5:D8:76:73:1F:FB:D5 Authority key identifier: 79:C7:FC:5D:1A:5E:EF:0B:29:8E:00:72:32:6A:B7:36:86:BD:FE:78 Certificate issuer: /CN=A9123918/serialNumber=79C7FC5D1A5EEF0B298E0072326AB73686BDFE78 Certificate serial: 42 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ecf8XRpe7wspjgByMmq3Noa9_ng.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9123918/8EE71486B6C411EFB10EDE58C4F9AE02/ecf8XRpe7wspjgByMmq3Noa9_ng.mft Manifest number: 40 Signing time: Sat 05 Apr 2025 06:47:49 +0000 Manifest this update: Sat 05 Apr 2025 06:47:48 +0000 Manifest next update: Sat 12 Apr 2025 06:47:48 +0000 Files and hashes: 1: ecf8XRpe7wspjgByMmq3Noa9_ng.crl (hash: b2S3xP3uF2pq7Usr8ulAFgGNAGb1FJ+OAILXRq8lM5E=) 2: AD3C9B54BE2611EFA4133323C4F9AE02.roa (hash: 2/xqAVW2RjqNg3GXYQ9uSs72OTWvi6aXWMtqLBm8vdk=) 3: 345F7BDCF80C11EF831DA737C4F9AE02.roa (hash: dqTwEXk6/WsKatxBnEyYDrfeHsARE7OU6TqF9rX2NCc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9123918/8EE71486B6C411EFB10EDE58C4F9AE02/ecf8XRpe7wspjgByMmq3Noa9_ng.crl rsync://rpki.apnic.net/member_repository/A9123918/8EE71486B6C411EFB10EDE58C4F9AE02/ecf8XRpe7wspjgByMmq3Noa9_ng.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ecf8XRpe7wspjgByMmq3Noa9_ng.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 06:47:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66 (0x42) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9123918 Validity Not Before: Apr 5 06:47:48 2025 GMT Not After : Apr 12 06:47:48 2025 GMT Subject: CN=67f0d214-f428 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fa:5f:9c:c3:c1:06:72:d6:0e:6f:b5:e0:5f:55: 5e:a9:2c:b3:36:fd:42:c5:35:42:68:15:02:3e:c7: bc:cf:6f:ff:a3:58:25:43:b3:95:d6:17:2f:e6:36: 8e:6a:05:61:c3:dc:8e:0b:56:97:14:41:3c:d2:f9: 31:5e:6c:cd:e3:ba:7c:49:e5:40:32:a2:46:c1:49: ea:b9:83:b3:c8:4b:d5:c4:82:c6:57:00:a5:2e:c2: d3:1e:d2:5c:20:f5:d3:cd:d5:30:17:73:93:94:49: eb:f5:d8:dd:46:3c:f9:ad:36:b2:b2:6a:ea:39:e7: 1d:23:35:fb:c6:d7:8f:9e:61:2e:42:c8:62:d5:79: f4:e9:42:75:d1:89:f4:60:a3:a4:25:96:c5:3e:85: a1:29:72:ce:95:72:21:78:61:cf:95:e4:75:a0:72: 03:c0:25:c5:0d:cc:bd:46:9f:48:8e:89:ed:72:61: 2a:95:9b:35:57:1c:f1:6b:c2:28:bb:3e:c0:d7:e6: 86:9f:a4:52:f5:fa:d0:7e:b4:e1:f2:a0:e0:98:2a: 79:9e:aa:e3:8f:00:a4:1c:11:f9:fc:cd:fb:59:00: ed:f2:8d:02:5d:47:9b:6e:90:52:26:f3:86:2c:9b: 64:7f:5b:bb:c9:7d:23:47:3a:01:2b:23:1a:4e:7b: 75:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:F0:79:F7:0F:C9:37:B5:8F:53:DB:B6:AE:B5:D8:76:73:1F:FB:D5 X509v3 Authority Key Identifier: keyid:79:C7:FC:5D:1A:5E:EF:0B:29:8E:00:72:32:6A:B7:36:86:BD:FE:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9123918/8EE71486B6C411EFB10EDE58C4F9AE02/ecf8XRpe7wspjgByMmq3Noa9_ng.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ecf8XRpe7wspjgByMmq3Noa9_ng.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9123918/8EE71486B6C411EFB10EDE58C4F9AE02/ecf8XRpe7wspjgByMmq3Noa9_ng.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1d:5a:ad:31:8c:1a:3f:95:ea:14:46:51:9b:c9:f9:71:73:06: 7b:6b:23:85:23:a5:6e:55:a2:26:85:95:52:02:de:29:ee:83: 83:1a:e6:91:76:67:f3:0b:bc:96:7f:59:bf:25:58:b4:cc:ec: d3:b3:f8:64:35:e4:55:69:9b:81:db:8b:2f:bb:b9:12:68:41: 4a:61:95:b1:c8:7a:43:06:fa:b9:9a:cf:1f:5a:94:97:0b:30: 0c:4d:06:00:a5:0b:15:f2:8b:a8:78:63:f1:f0:78:c7:ad:c8: 64:25:02:1d:25:58:0f:52:64:67:19:13:e1:71:be:ce:bd:28: 52:ba:36:43:5d:93:e6:c7:d1:69:9e:7b:ae:9d:d2:c8:84:4e: d7:3d:e0:72:4e:2a:c0:ae:5b:c1:a8:86:db:da:5e:ba:c8:ef: 21:4f:6b:bc:58:fb:87:bb:d5:26:9f:1a:c0:64:37:d6:02:71: da:61:d3:5e:70:10:4a:09:0d:56:dc:8d:b8:b8:28:70:40:f0: 49:72:35:a4:e7:8b:ea:6c:62:80:2b:30:c7:09:79:60:49:51: 8a:86:4c:4b:1d:17:ea:6c:08:41:1c:7a:bd:33:d2:d7:7d:67: 3f:36:ef:29:0f:54:d9:5d:8f:7b:17:eb:9f:01:8c:59:79:88: 99:72:51:2c -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBQjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy MzkxODExMC8GA1UEBRMoNzlDN0ZDNUQxQTVFRUYwQjI5OEUwMDcyMzI2QUI3MzY4 NkJERkU3ODAeFw0yNTA0MDUwNjQ3NDhaFw0yNTA0MTIwNjQ3NDhaMBgxFjAUBgNV BAMTDTY3ZjBkMjE0LWY0MjgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQD6X5zDwQZy1g5vteBfVV6pLLM2/ULFNUJoFQI+x7zPb/+jWCVDs5XWFy/mNo5q BWHD3I4LVpcUQTzS+TFebM3junxJ5UAyokbBSeq5g7PIS9XEgsZXAKUuwtMe0lwg 9dPN1TAXc5OUSev12N1GPPmtNrKyauo55x0jNfvG14+eYS5CyGLVefTpQnXRifRg o6QllsU+haEpcs6VciF4Yc+V5HWgcgPAJcUNzL1Gn0iOie1yYSqVmzVXHPFrwii7 PsDX5oafpFL1+tB+tOHyoOCYKnmequOPAKQcEfn8zftZAO3yjQJdR5tukFIm84Ys m2R/W7vJfSNHOgErIxpOe3WtAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUjPB59w/J N7WPU9u2rrXYdnMf+9UwHwYDVR0jBBgwFoAUecf8XRpe7wspjgByMmq3Noa9/ngw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTIzOTE4LzhFRTcxNDg2QjZD NDExRUZCMTBFREU1OEM0RjlBRTAyL2VjZjhYUnBlN3dzcGpnQnlNbXEzTm9hOV9u Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvZWNmOFhScGU3d3NwamdCeU1tcTNOb2E5X25nLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTIz OTE4LzhFRTcxNDg2QjZDNDExRUZCMTBFREU1OEM0RjlBRTAyL2VjZjhYUnBlN3dz cGpnQnlNbXEzTm9hOV9uZy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAB1arTGMGj+V6hRGUZvJ+XFzBntrI4UjpW5VoiaFlVIC3inug4Ma5pF2 Z/MLvJZ/Wb8lWLTM7NOz+GQ15FVpm4Hbiy+7uRJoQUphlbHIekMG+rmazx9alJcL MAxNBgClCxXyi6h4Y/HweMetyGQlAh0lWA9SZGcZE+Fxvs69KFK6NkNdk+bH0Wme e66d0siETtc94HJOKsCuW8GohtvaXrrI7yFPa7xY+4e71SafGsBkN9YCcdph015w EEoJDVbcjbi4KHBA8ElyNaTni+psYoArMMcJeWBJUYqGTEsdF+psCEEcer0z0td9 Zz827ykPVNldj3sX658BjFl5iJlyUSw= -----END CERTIFICATE-----Generated at Sat Apr 5 10:39:05 2025 by rpki-client