$ rpki-client -vvf rpki.apnic.net/member_repository/A9133F6B/9852933E74A611EFAB4B053CC4F9AE02/NNe9YUOWrkRRcOBY4K7c661JQF8.mft File: NNe9YUOWrkRRcOBY4K7c661JQF8.mft (raw, json) Hash identifier: 0EW8aZULy8GU+dUoXqWLATOVQl2TY6ylaMCe3rf77OQ= Subject key identifier: 98:B3:D0:1C:7D:9E:87:11:38:A2:56:BA:32:89:9E:EF:E9:8E:65:A2 Authority key identifier: 34:D7:BD:61:43:96:AE:44:51:70:E0:58:E0:AE:DC:EB:AD:49:40:5F Certificate issuer: /CN=A9133F6B/serialNumber=34D7BD614396AE445170E058E0AEDCEBAD49405F Certificate serial: 69 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NNe9YUOWrkRRcOBY4K7c661JQF8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9133F6B/9852933E74A611EFAB4B053CC4F9AE02/NNe9YUOWrkRRcOBY4K7c661JQF8.mft Manifest number: 68 Signing time: Thu 03 Apr 2025 06:11:46 +0000 Manifest this update: Thu 03 Apr 2025 06:11:46 +0000 Manifest next update: Thu 10 Apr 2025 06:11:46 +0000 Files and hashes: 1: NNe9YUOWrkRRcOBY4K7c661JQF8.crl (hash: VPav4/mSHyzQbL3X5wiSw4kqo/Xbh3mjDtvtCDByjYQ=) 2: CDB922F074AF11EFA0B26646C4F9AE02.roa (hash: RMUDFetuMqLLtNk8QIeQRLs2fwAMqvw/hlrVesjOyK4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9133F6B/9852933E74A611EFAB4B053CC4F9AE02/NNe9YUOWrkRRcOBY4K7c661JQF8.crl rsync://rpki.apnic.net/member_repository/A9133F6B/9852933E74A611EFAB4B053CC4F9AE02/NNe9YUOWrkRRcOBY4K7c661JQF8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NNe9YUOWrkRRcOBY4K7c661JQF8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Apr 2025 06:11:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 105 (0x69) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9133F6B Validity Not Before: Apr 3 06:11:46 2025 GMT Not After : Apr 10 06:11:46 2025 GMT Subject: CN=67ee26a2-1bb8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:6b:00:08:88:5a:05:75:42:9d:b2:a3:d2:c4: 57:a6:c0:f2:3c:26:28:92:78:61:6c:b7:18:f3:49: d9:15:e0:75:48:e9:17:57:1f:e6:2f:76:3e:c8:68: 52:b6:77:45:a2:4f:fe:59:f8:ed:b2:6e:39:1a:16: bc:3d:a4:5e:3f:f1:80:23:bb:8d:d8:ef:23:0b:07: 22:ec:56:9e:3b:b0:26:f8:57:89:dc:df:3f:fd:93: ff:aa:38:c1:44:03:24:12:eb:9d:fd:ac:9f:ec:63: 7e:9c:ff:80:88:71:1c:b3:3e:8d:71:7c:14:9d:9d: 2e:a7:f3:cc:06:74:2a:71:34:7c:96:de:30:5d:4a: 37:b6:c2:b2:1d:cb:30:4e:c1:19:77:76:83:eb:58: 8d:72:a6:49:fa:3e:20:b1:8a:8f:62:ef:70:0d:46: e1:38:20:70:0e:05:2d:61:6e:1f:a3:b2:f4:62:e5: 79:c6:d9:ce:e1:8c:32:e0:b7:a6:63:0e:76:9a:8e: f5:21:44:6e:ab:a8:22:91:b4:9b:70:5e:7c:5b:f5: 40:26:3e:c4:45:1d:d6:d0:72:2b:6c:4d:84:72:ac: a8:32:35:8a:e8:02:0a:07:af:8a:87:b4:b5:06:88: 36:fe:2c:31:78:c0:45:7a:b1:77:5c:81:82:ee:37: b5:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:B3:D0:1C:7D:9E:87:11:38:A2:56:BA:32:89:9E:EF:E9:8E:65:A2 X509v3 Authority Key Identifier: keyid:34:D7:BD:61:43:96:AE:44:51:70:E0:58:E0:AE:DC:EB:AD:49:40:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9133F6B/9852933E74A611EFAB4B053CC4F9AE02/NNe9YUOWrkRRcOBY4K7c661JQF8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NNe9YUOWrkRRcOBY4K7c661JQF8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9133F6B/9852933E74A611EFAB4B053CC4F9AE02/NNe9YUOWrkRRcOBY4K7c661JQF8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 09:3e:21:cd:41:96:c6:77:b2:17:e0:8c:75:18:5a:76:81:34: a5:74:e8:c6:b3:f7:f8:31:7f:7c:9a:7a:3d:29:a9:c0:39:7c: fe:f5:c9:06:ed:e0:51:da:8d:26:b6:88:ba:bf:38:77:59:43: 7e:5b:3e:bd:f7:31:92:45:4f:f6:f1:d5:84:71:8f:4f:a1:8f: 36:4d:f8:16:51:bc:1f:4d:60:d7:a5:89:86:dc:0d:aa:3a:00: ec:2b:2e:01:6f:60:0c:67:26:f4:86:de:91:9f:54:99:c5:84: b4:ba:68:c8:79:44:97:b8:78:78:68:76:e1:b2:bf:08:07:15: 06:20:e3:a7:d9:71:48:b3:bf:30:a9:7b:91:74:71:af:8e:83: 53:3d:41:15:9a:96:66:6e:d2:d4:53:3c:37:fd:23:91:54:ab: 98:8a:d5:56:52:03:ed:bf:ea:34:57:c2:ce:e7:23:b2:38:6c: ad:87:37:27:24:60:54:19:93:70:a5:d7:80:74:7c:7b:ce:49: 97:dd:fb:de:14:df:97:50:ff:6f:cf:96:69:cb:5e:0b:8b:23: ad:f9:a7:88:b5:21:87:61:c1:0b:dc:2b:dd:03:f5:3b:56:95: 39:af:ed:bc:93:25:1e:c5:89:d6:1e:9b:b0:02:bd:5e:a4:cd: 84:2c:0d:c7 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBaTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz M0Y2QjExMC8GA1UEBRMoMzREN0JENjE0Mzk2QUU0NDUxNzBFMDU4RTBBRURDRUJB RDQ5NDA1RjAeFw0yNTA0MDMwNjExNDZaFw0yNTA0MTAwNjExNDZaMBgxFjAUBgNV BAMTDTY3ZWUyNmEyLTFiYjgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDEawAIiFoFdUKdsqPSxFemwPI8JiiSeGFstxjzSdkV4HVI6RdXH+Yvdj7IaFK2 d0WiT/5Z+O2ybjkaFrw9pF4/8YAju43Y7yMLByLsVp47sCb4V4nc3z/9k/+qOMFE AyQS6539rJ/sY36c/4CIcRyzPo1xfBSdnS6n88wGdCpxNHyW3jBdSje2wrIdyzBO wRl3doPrWI1ypkn6PiCxio9i73ANRuE4IHAOBS1hbh+jsvRi5XnG2c7hjDLgt6Zj DnaajvUhRG6rqCKRtJtwXnxb9UAmPsRFHdbQcitsTYRyrKgyNYroAgoHr4qHtLUG iDb+LDF4wEV6sXdcgYLuN7WPAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUmLPQHH2e hxE4ola6Mome7+mOZaIwHwYDVR0jBBgwFoAUNNe9YUOWrkRRcOBY4K7c661JQF8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTMzRjZCLzk4NTI5MzNFNzRB NjExRUZBQjRCMDUzQ0M0RjlBRTAyL05OZTlZVU9XcmtSUmNPQlk0SzdjNjYxSlFG OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvTk5lOVlVT1dya1JSY09CWTRLN2M2NjFKUUY4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTMz RjZCLzk4NTI5MzNFNzRBNjExRUZBQjRCMDUzQ0M0RjlBRTAyL05OZTlZVU9XcmtS UmNPQlk0SzdjNjYxSlFGOC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAAk+Ic1BlsZ3shfgjHUYWnaBNKV06Maz9/gxf3yaej0pqcA5fP71yQbt 4FHajSa2iLq/OHdZQ35bPr33MZJFT/bx1YRxj0+hjzZN+BZRvB9NYNeliYbcDao6 AOwrLgFvYAxnJvSG3pGfVJnFhLS6aMh5RJe4eHhoduGyvwgHFQYg46fZcUizvzCp e5F0ca+Og1M9QRWalmZu0tRTPDf9I5FUq5iK1VZSA+2/6jRXws7nI7I4bK2HNyck YFQZk3Cl14B0fHvOSZfd+94U35dQ/2/PlmnLXguLI635p4i1IYdhwQvcK90D9TtW lTmv7byTJR7FidYem7ACvV6kzYQsDcc= -----END CERTIFICATE-----Generated at Fri Apr 4 21:55:53 2025 by rpki-client