$ rpki-client -vvf rpki.apnic.net/member_repository/A9136EC5/2DECAE560E5611E4B6F1953AC4F9AE02/n84okUxQ3Jl1XxCKtDNPdyy-oOI.mft File: n84okUxQ3Jl1XxCKtDNPdyy-oOI.mft (raw, json) Hash identifier: pWBgJAaRyxFf5C9Ldl3fTlkyJbWW1ae5AzwfKmYDuZM= Subject key identifier: 71:EC:BA:01:65:F3:99:B7:20:C4:A4:05:0D:3A:B5:99:78:CE:B2:7D Authority key identifier: 9F:CE:28:91:4C:50:DC:99:75:5F:10:8A:B4:33:4F:77:2C:BE:A0:E2 Certificate issuer: /CN=A9136EC5/serialNumber=9FCE28914C50DC99755F108AB4334F772CBEA0E2 Certificate serial: 2B01 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n84okUxQ3Jl1XxCKtDNPdyy-oOI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9136EC5/2DECAE560E5611E4B6F1953AC4F9AE02/n84okUxQ3Jl1XxCKtDNPdyy-oOI.mft Manifest number: 2ABD Signing time: Fri 04 Apr 2025 15:37:11 +0000 Manifest this update: Fri 04 Apr 2025 15:37:11 +0000 Manifest next update: Fri 11 Apr 2025 15:37:11 +0000 Files and hashes: 1: n84okUxQ3Jl1XxCKtDNPdyy-oOI.crl (hash: Yv7RJWAD/tTJTXvSh56YUb+/KN1MQV7XuEZ/Oro4U30=) 2: F1BA2EAC353311EBB895B082C4F9AE02.roa (hash: 8JXHn+tn0IVLCUvOUOerZKmcj6/h+ZMsxk2iLkFwjsA=) 3: 08074A8A1EB711EF9C248E60C4F9AE02.roa (hash: bFIjQrk+SKu0XJffarEwWtaET/rTeUOfIWLHnin1FNE=) 4: 8B903A32353211EBB3D0487FC4F9AE02.roa (hash: ReV9a7hSveeezSpIAzgAbbvdpzxiWLw3q4n5gLELjhg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9136EC5/2DECAE560E5611E4B6F1953AC4F9AE02/n84okUxQ3Jl1XxCKtDNPdyy-oOI.crl rsync://rpki.apnic.net/member_repository/A9136EC5/2DECAE560E5611E4B6F1953AC4F9AE02/n84okUxQ3Jl1XxCKtDNPdyy-oOI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n84okUxQ3Jl1XxCKtDNPdyy-oOI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 15:37:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11009 (0x2b01) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9136EC5 Validity Not Before: Apr 4 15:37:11 2025 GMT Not After : Apr 11 15:37:11 2025 GMT Subject: CN=67effca7-dc3e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:09:b6:2e:ca:46:9d:38:c8:e8:86:83:8a:d7: 62:7c:2f:79:c8:ab:21:24:dd:54:96:9e:88:5b:36: a8:91:19:fc:16:c2:bf:02:78:8b:46:40:ff:fc:db: 2a:3d:c3:db:5a:42:a2:7d:46:22:54:33:ba:36:cf: 8e:a2:f5:35:fb:93:d2:76:2a:3c:5e:9d:2e:73:18: d0:85:f3:99:bf:a2:19:c7:1e:49:d7:2e:73:1b:5e: ca:ac:aa:26:54:87:fa:c7:f9:4c:ee:0a:bd:5f:34: 0d:6f:9b:a5:d0:42:0e:fb:5a:d4:3d:ac:06:78:b8: f4:51:d1:82:42:2d:cf:b1:a7:fb:46:3e:b6:d9:95: 7a:a9:17:e8:2f:e0:91:98:93:2e:18:64:06:3d:db: a3:a4:90:9f:66:96:42:da:1c:47:51:73:ed:46:89: 8d:25:1c:86:00:18:dc:b2:d0:16:eb:83:f1:ee:cc: 8d:4d:17:d7:8a:b1:8b:c7:fe:a4:78:4d:f2:13:62: 3b:4e:cb:5c:de:49:9c:9e:40:52:04:61:41:b9:15: 98:c7:ed:00:ff:4d:eb:d4:ce:d5:96:f1:21:70:3f: 3d:52:23:c4:c5:6b:c4:80:bd:05:4d:a5:26:35:31: c9:62:9d:01:aa:e9:a1:57:c5:59:1d:67:ad:6a:6a: 9a:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:EC:BA:01:65:F3:99:B7:20:C4:A4:05:0D:3A:B5:99:78:CE:B2:7D X509v3 Authority Key Identifier: keyid:9F:CE:28:91:4C:50:DC:99:75:5F:10:8A:B4:33:4F:77:2C:BE:A0:E2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9136EC5/2DECAE560E5611E4B6F1953AC4F9AE02/n84okUxQ3Jl1XxCKtDNPdyy-oOI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n84okUxQ3Jl1XxCKtDNPdyy-oOI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9136EC5/2DECAE560E5611E4B6F1953AC4F9AE02/n84okUxQ3Jl1XxCKtDNPdyy-oOI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 84:99:dc:e3:31:59:37:29:1e:a6:d7:4f:08:f9:09:04:b4:a9: f1:e3:6a:02:e8:5a:fa:f0:95:42:fd:4b:e9:31:cf:9d:e7:dd: 97:c2:0a:35:06:23:ef:aa:e9:f7:42:5c:94:58:2f:fc:88:29: dc:c4:38:c9:a1:b9:76:18:b5:e8:32:71:56:27:24:99:74:f8: a8:90:e4:f2:cb:e9:e6:19:8e:ca:41:b8:31:02:8e:84:80:d2: 60:6c:bc:4f:23:7e:7b:75:01:4c:27:9d:11:49:24:98:1f:36: 3d:5f:1f:45:c5:21:d9:9e:eb:17:f0:bd:65:b3:8f:db:6c:5a: d4:ec:75:c6:83:47:58:68:e5:89:e7:f0:9b:1b:c0:4d:e0:74: 4c:32:10:93:c6:d1:f2:cc:65:0d:ea:d2:82:c6:47:53:ad:a2: 13:3f:39:d1:9f:ce:62:be:91:80:f4:7d:de:2c:2e:b1:bf:e2: b3:e3:24:b2:6d:e8:eb:61:49:60:d6:ef:c4:d8:48:99:bd:b4: f5:ff:d9:4e:58:93:99:c5:27:ce:e8:68:82:fd:65:a7:f5:3a: 22:60:6c:3d:7e:a8:7c:e9:d4:e0:58:62:41:47:83:85:41:18: b2:e6:e8:0a:27:74:e6:4b:99:98:ad:0b:90:8e:85:2a:69:0b: 92:c2:77:e3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICKwEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzZFQzUxMTAvBgNVBAUTKDlGQ0UyODkxNEM1MERDOTk3NTVGMTA4QUI0MzM0Rjc3 MkNCRUEwRTIwHhcNMjUwNDA0MTUzNzExWhcNMjUwNDExMTUzNzExWjAYMRYwFAYD VQQDEw02N2VmZmNhNy1kYzNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxwm2LspGnTjI6IaDitdifC95yKshJN1Ulp6IWzaokRn8FsK/AniLRkD//Nsq PcPbWkKifUYiVDO6Ns+OovU1+5PSdio8Xp0ucxjQhfOZv6IZxx5J1y5zG17KrKom VIf6x/lM7gq9XzQNb5ul0EIO+1rUPawGeLj0UdGCQi3Psaf7Rj622ZV6qRfoL+CR mJMuGGQGPdujpJCfZpZC2hxHUXPtRomNJRyGABjcstAW64Px7syNTRfXirGLx/6k eE3yE2I7Tstc3kmcnkBSBGFBuRWYx+0A/03r1M7VlvEhcD89UiPExWvEgL0FTaUm NTHJYp0BqumhV8VZHWetamqaUwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHHsugFl 85m3IMSkBQ06tZl4zrJ9MB8GA1UdIwQYMBaAFJ/OKJFMUNyZdV8QirQzT3csvqDi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNkVDNS8yREVDQUU1NjBF NTYxMUU0QjZGMTk1M0FDNEY5QUUwMi9uODRva1V4UTNKbDFYeENLdEROUGR5eS1v T0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL244NG9rVXhRM0psMVh4Q0t0RE5QZHl5LW9PSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NkVDNS8yREVDQUU1NjBFNTYxMUU0QjZGMTk1M0FDNEY5QUUwMi9uODRva1V4UTNK bDFYeENLdEROUGR5eS1vT0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCEmdzjMVk3KR6m108I+QkEtKnx42oC6Fr68JVC/UvpMc+d592Xwgo1 BiPvqun3QlyUWC/8iCncxDjJobl2GLXoMnFWJySZdPiokOTyy+nmGY7KQbgxAo6E gNJgbLxPI357dQFMJ50RSSSYHzY9Xx9FxSHZnusX8L1ls4/bbFrU7HXGg0dYaOWJ 5/CbG8BN4HRMMhCTxtHyzGUN6tKCxkdTraITPznRn85ivpGA9H3eLC6xv+Kz4ySy bejrYUlg1u/E2EiZvbT1/9lOWJOZxSfO6GiC/WWn9ToiYGw9fqh86dTgWGJBR4OF QRiy5ugKJ3TmS5mYrQuQjoUqaQuSwnfj -----END CERTIFICATE-----Generated at Fri Apr 4 22:19:55 2025 by rpki-client