$ rpki-client -vvf rpki.apnic.net/member_repository/A9148F9A/C0EA5798BE4511EBB0C5D084C4F9AE02/n33tfQW4HeZsc1u4VH52BIycP1o.mft File: n33tfQW4HeZsc1u4VH52BIycP1o.mft (raw, json) Hash identifier: 4JYGFPBlEVruLPvMoU2cZli4JL6tnIXKFQvlpYpIXeY= Subject key identifier: 4E:E4:49:91:79:0F:B0:F9:A6:27:1B:57:B5:ED:5F:1B:CD:E3:06:AC Authority key identifier: 9F:7D:ED:7D:05:B8:1D:E6:6C:73:5B:B8:54:7E:76:04:8C:9C:3F:5A Certificate issuer: /CN=A9148F9A/serialNumber=9F7DED7D05B81DE66C735BB8547E76048C9C3F5A Certificate serial: 05B9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n33tfQW4HeZsc1u4VH52BIycP1o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9148F9A/C0EA5798BE4511EBB0C5D084C4F9AE02/n33tfQW4HeZsc1u4VH52BIycP1o.mft Manifest number: 05B2 Signing time: Wed 02 Apr 2025 23:09:18 +0000 Manifest this update: Wed 02 Apr 2025 23:09:17 +0000 Manifest next update: Wed 09 Apr 2025 23:09:17 +0000 Files and hashes: 1: n33tfQW4HeZsc1u4VH52BIycP1o.crl (hash: eTxMj5JErH8ee8G5d4sbsXzx8/UPtJlh3xbaOKLeSwE=) 2: 6A4E9778632F11EE8F22BC2EC4F9AE02.roa (hash: 4bTC2UNunl8WmbthP7AksvyRIOAjMvhZ4haA1p6DOkk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9148F9A/C0EA5798BE4511EBB0C5D084C4F9AE02/n33tfQW4HeZsc1u4VH52BIycP1o.crl rsync://rpki.apnic.net/member_repository/A9148F9A/C0EA5798BE4511EBB0C5D084C4F9AE02/n33tfQW4HeZsc1u4VH52BIycP1o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n33tfQW4HeZsc1u4VH52BIycP1o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Apr 2025 23:09:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1465 (0x5b9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9148F9A Validity Not Before: Apr 2 23:09:17 2025 GMT Not After : Apr 9 23:09:17 2025 GMT Subject: CN=67edc39e-8a0c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:cb:55:28:ed:af:67:60:5c:f2:f0:c8:54:57: 4b:72:82:aa:d5:27:a5:ea:43:80:d7:30:55:6d:6e: 6b:e5:b2:48:47:95:3a:98:79:96:e2:27:e8:43:c4: 1f:70:cd:b9:71:95:d7:56:e2:69:bf:c7:56:4a:c6: 0b:0e:a8:0b:d0:4a:73:33:55:a5:ee:45:d7:4e:68: 3c:b4:41:5d:fe:cd:e0:67:3e:cf:bd:55:38:f8:19: 6e:61:53:89:20:10:95:a6:ef:3f:b8:88:cb:b9:3a: aa:e4:4a:cf:95:46:8a:a6:7e:a4:dd:2d:4a:b3:3c: e0:d3:3e:df:d4:f1:3c:ef:ed:30:fb:db:2e:9d:a1: 15:f3:36:65:41:b9:65:e3:62:5f:6e:97:bd:a7:6a: 09:b6:6a:48:8d:4f:15:2d:07:5f:4b:66:ae:a4:a7: 4c:33:55:93:b7:9d:18:80:e0:29:0a:26:7c:72:59: bc:a1:c9:63:73:df:ba:e5:18:3f:48:db:17:e7:25: bc:3c:cc:38:c6:00:9c:97:61:d2:27:96:ff:00:18: 71:62:31:38:f8:b2:ca:c8:52:d9:e8:cb:54:af:bc: 1f:1d:ee:42:77:f0:ed:c9:35:57:10:b5:10:db:e9: 46:01:1a:2b:2f:63:e6:45:92:10:29:d3:bf:9a:e9: e2:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:E4:49:91:79:0F:B0:F9:A6:27:1B:57:B5:ED:5F:1B:CD:E3:06:AC X509v3 Authority Key Identifier: keyid:9F:7D:ED:7D:05:B8:1D:E6:6C:73:5B:B8:54:7E:76:04:8C:9C:3F:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9148F9A/C0EA5798BE4511EBB0C5D084C4F9AE02/n33tfQW4HeZsc1u4VH52BIycP1o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n33tfQW4HeZsc1u4VH52BIycP1o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148F9A/C0EA5798BE4511EBB0C5D084C4F9AE02/n33tfQW4HeZsc1u4VH52BIycP1o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 63:b0:4a:8a:b6:9a:4f:b3:1f:01:c5:f6:4b:eb:d9:c7:e1:0d: b4:d9:e8:86:b1:a6:c1:df:87:01:04:d0:17:dd:9e:dd:19:65: db:94:d3:88:19:e1:7e:d2:21:d2:98:20:68:5e:f5:4d:17:58: 28:f2:e9:26:39:a2:f8:2b:dd:9b:97:f0:68:37:ab:bc:dd:1c: e5:e1:6a:18:3e:ab:d4:7e:db:2d:45:24:30:dd:1d:91:d0:cf: 77:64:7b:5c:8a:8f:91:f4:ba:4d:3a:00:99:3d:c2:41:f0:7f: b9:ed:1c:7f:47:d3:d9:88:36:95:7b:0f:df:a4:74:08:81:68: 83:9c:42:36:96:2e:96:02:8b:b4:c6:3f:26:fb:67:42:40:4f: 0e:b9:d9:f7:a4:97:57:e4:5f:19:e1:64:12:b8:34:94:30:8e: d5:af:82:f0:7f:2f:5e:ed:45:fb:4a:c1:36:6a:3c:af:7e:08: 13:4f:1e:b7:86:2f:2e:06:eb:32:6d:23:cd:5b:51:3b:c3:98: f7:1e:22:9b:d1:e2:15:b3:ab:29:58:06:c4:0b:d0:72:56:53: 88:1b:16:3b:e0:e2:fa:3d:e2:1b:12:44:c8:e0:83:9f:e9:de: 26:19:29:73:2d:5b:f0:63:eb:9f:b0:68:49:33:89:2c:25:b8: 99:b0:d9:c1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBbkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDhGOUExMTAvBgNVBAUTKDlGN0RFRDdEMDVCODFERTY2QzczNUJCODU0N0U3NjA0 OEM5QzNGNUEwHhcNMjUwNDAyMjMwOTE3WhcNMjUwNDA5MjMwOTE3WjAYMRYwFAYD VQQDEw02N2VkYzM5ZS04YTBjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2ctVKO2vZ2Bc8vDIVFdLcoKq1Sel6kOA1zBVbW5r5bJIR5U6mHmW4ifoQ8Qf cM25cZXXVuJpv8dWSsYLDqgL0EpzM1Wl7kXXTmg8tEFd/s3gZz7PvVU4+BluYVOJ IBCVpu8/uIjLuTqq5ErPlUaKpn6k3S1Kszzg0z7f1PE87+0w+9sunaEV8zZlQbll 42Jfbpe9p2oJtmpIjU8VLQdfS2aupKdMM1WTt50YgOApCiZ8clm8ocljc9+65Rg/ SNsX5yW8PMw4xgCcl2HSJ5b/ABhxYjE4+LLKyFLZ6MtUr7wfHe5Cd/DtyTVXELUQ 2+lGARorL2PmRZIQKdO/muni9QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE7kSZF5 D7D5picbV7XtXxvN4wasMB8GA1UdIwQYMBaAFJ997X0FuB3mbHNbuFR+dgSMnD9a MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OEY5QS9DMEVBNTc5OEJF NDUxMUVCQjBDNUQwODRDNEY5QUUwMi9uMzN0ZlFXNEhlWnNjMXU0Vkg1MkJJeWNQ MW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL24zM3RmUVc0SGVac2MxdTRWSDUyQkl5Y1Axby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OEY5QS9DMEVBNTc5OEJFNDUxMUVCQjBDNUQwODRDNEY5QUUwMi9uMzN0ZlFXNEhl WnNjMXU0Vkg1MkJJeWNQMW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBjsEqKtppPsx8BxfZL69nH4Q202eiGsabB34cBBNAX3Z7dGWXblNOI GeF+0iHSmCBoXvVNF1go8ukmOaL4K92bl/BoN6u83Rzl4WoYPqvUftstRSQw3R2R 0M93ZHtcio+R9LpNOgCZPcJB8H+57Rx/R9PZiDaVew/fpHQIgWiDnEI2li6WAou0 xj8m+2dCQE8Oudn3pJdX5F8Z4WQSuDSUMI7Vr4Lwfy9e7UX7SsE2ajyvfggTTx63 hi8uBusybSPNW1E7w5j3HiKb0eIVs6spWAbEC9ByVlOIGxY74OL6PeIbEkTI4IOf 6d4mGSlzLVvwY+ufsGhJM4ksJbiZsNnB -----END CERTIFICATE-----Generated at Fri Apr 4 18:29:59 2025 by rpki-client