$ rpki-client -vvf rpki.apnic.net/member_repository/A914C33A/1D2BD03E2DDB11E49AF61530C4F9AE02/nIFHHxiq7s35RafJF_2KiYXXw6w.mft File: nIFHHxiq7s35RafJF_2KiYXXw6w.mft (raw, json) Hash identifier: 1GNxpze0OvrpjBZ9AmUEr1GVjDigBpiUI3rq7MfAHKM= Subject key identifier: B5:7B:24:73:5F:93:99:6C:13:31:4C:C2:A6:99:57:E4:A4:D3:FD:34 Authority key identifier: 9C:81:47:1F:18:AA:EE:CD:F9:45:A7:C9:17:FD:8A:89:85:D7:C3:AC Certificate issuer: /CN=A914C33A/serialNumber=9C81471F18AAEECDF945A7C917FD8A8985D7C3AC Certificate serial: 2A70 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nIFHHxiq7s35RafJF_2KiYXXw6w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914C33A/1D2BD03E2DDB11E49AF61530C4F9AE02/nIFHHxiq7s35RafJF_2KiYXXw6w.mft Manifest number: 2A32 Signing time: Fri 04 Apr 2025 15:38:06 +0000 Manifest this update: Fri 04 Apr 2025 15:38:06 +0000 Manifest next update: Fri 11 Apr 2025 15:38:06 +0000 Files and hashes: 1: nIFHHxiq7s35RafJF_2KiYXXw6w.crl (hash: j8qljySDw7M/jnOGXnT2lVGFOXh+pCXGEy6FHxxHqak=) 2: FB405D86900E11EAA43BB21FC4F9AE02.roa (hash: xBHGq+I+gC6mBEO7iAqcoK3D8WpSvv5eSxXQn/j0Q60=) 3: 3118E43E966B11EAAA23047CC4F9AE02.roa (hash: gq6V0/TIcAAKvh2pY9bQTg3IwnYpN56MDdlGTWJZ3cM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914C33A/1D2BD03E2DDB11E49AF61530C4F9AE02/nIFHHxiq7s35RafJF_2KiYXXw6w.crl rsync://rpki.apnic.net/member_repository/A914C33A/1D2BD03E2DDB11E49AF61530C4F9AE02/nIFHHxiq7s35RafJF_2KiYXXw6w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nIFHHxiq7s35RafJF_2KiYXXw6w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 15:38:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10864 (0x2a70) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914C33A Validity Not Before: Apr 4 15:38:06 2025 GMT Not After : Apr 11 15:38:06 2025 GMT Subject: CN=67effcde-2ac9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:69:11:0e:5a:65:41:9b:75:5a:cc:a3:26:fa: 8e:ce:fd:f1:7b:3a:6d:d2:3f:bd:f3:31:c7:f8:88: e7:55:b3:cb:6a:40:97:bd:c2:32:4f:eb:0f:85:5e: 23:a4:e1:92:e6:d9:57:33:e0:f9:f5:e6:90:da:e0: 9c:79:ad:e1:1c:0e:a8:87:b6:aa:98:bc:d1:a1:49: c4:d1:5c:5e:50:40:52:47:9d:ec:ac:dc:0e:1b:cb: e7:59:57:72:61:48:b5:54:1c:f1:dc:09:96:fc:78: b8:75:6a:f3:fc:d9:e0:4f:38:83:e2:d0:58:86:10: bb:c2:3e:16:4d:f0:8a:21:85:66:ff:8f:55:bd:9c: c2:b9:7e:50:b9:e8:9b:07:30:49:a5:41:4d:a5:2e: b6:c9:f3:41:1b:31:d4:25:25:f9:67:01:7b:65:46: ec:dc:b5:46:a2:65:88:9e:8f:0e:6e:dc:49:4a:57: 72:3c:08:20:e7:a2:63:ae:a9:68:94:d2:e4:af:bd: 81:6d:6f:a0:d2:9f:82:8c:d1:79:a6:f5:8f:b5:bc: be:23:f8:b8:b6:aa:29:6a:da:ce:75:33:81:26:02: 9e:22:58:82:0a:a4:d5:87:85:72:d5:49:2a:a3:20: 55:dc:3a:b1:74:15:6b:c4:be:1c:b2:49:f6:bf:f6: bc:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:7B:24:73:5F:93:99:6C:13:31:4C:C2:A6:99:57:E4:A4:D3:FD:34 X509v3 Authority Key Identifier: keyid:9C:81:47:1F:18:AA:EE:CD:F9:45:A7:C9:17:FD:8A:89:85:D7:C3:AC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914C33A/1D2BD03E2DDB11E49AF61530C4F9AE02/nIFHHxiq7s35RafJF_2KiYXXw6w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nIFHHxiq7s35RafJF_2KiYXXw6w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914C33A/1D2BD03E2DDB11E49AF61530C4F9AE02/nIFHHxiq7s35RafJF_2KiYXXw6w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 91:8e:65:52:f6:21:20:ec:ac:42:e2:6e:96:4d:b8:6e:69:4b: f8:44:4b:35:c7:7e:62:3a:81:cd:43:97:94:5f:30:06:f8:60: fb:1a:35:d7:f5:a3:6a:13:70:b7:09:c9:40:f9:50:01:89:b3: 44:6a:bd:93:72:34:0d:6a:f0:9a:9a:68:d6:e4:06:3a:1d:92: 75:b7:b1:ae:30:74:b2:3e:17:e2:93:2a:b3:95:b8:05:74:7e: e8:9c:12:90:01:3e:b5:1e:32:66:9d:7a:d0:85:82:da:2d:4f: 49:4a:d6:33:cb:d3:46:7f:e2:ce:a3:e1:a4:dd:da:37:81:e9: 54:d4:d8:72:25:84:48:7e:24:ec:41:46:10:c2:c8:f9:8a:b0: 99:c7:05:3b:dc:64:00:5b:64:42:cc:db:c0:bb:36:d0:7a:03: 38:25:59:93:74:aa:40:43:cf:6b:eb:56:e5:56:68:bd:a1:d4: b0:38:e7:9c:fd:59:c4:eb:4e:cc:24:dd:18:e7:f7:94:76:46: d4:0c:6c:0f:fd:24:f1:8f:c9:77:81:92:7d:3f:cd:31:25:57: a6:95:52:60:37:39:0d:81:93:45:b2:c4:06:d8:18:3b:93:76: 37:db:a2:9e:9a:8a:6f:af:e5:99:a8:04:62:e5:47:54:48:1f: ad:e2:63:8d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICKnAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEMzM0ExMTAvBgNVBAUTKDlDODE0NzFGMThBQUVFQ0RGOTQ1QTdDOTE3RkQ4QTg5 ODVEN0MzQUMwHhcNMjUwNDA0MTUzODA2WhcNMjUwNDExMTUzODA2WjAYMRYwFAYD VQQDEw02N2VmZmNkZS0yYWM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAumkRDlplQZt1WsyjJvqOzv3xezpt0j+98zHH+IjnVbPLakCXvcIyT+sPhV4j pOGS5tlXM+D59eaQ2uCcea3hHA6oh7aqmLzRoUnE0VxeUEBSR53srNwOG8vnWVdy YUi1VBzx3AmW/Hi4dWrz/NngTziD4tBYhhC7wj4WTfCKIYVm/49VvZzCuX5Queib BzBJpUFNpS62yfNBGzHUJSX5ZwF7ZUbs3LVGomWIno8ObtxJSldyPAgg56Jjrqlo lNLkr72BbW+g0p+CjNF5pvWPtby+I/i4tqopatrOdTOBJgKeIliCCqTVh4Vy1Ukq oyBV3DqxdBVrxL4cskn2v/a8uQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLV7JHNf k5lsEzFMwqaZV+Sk0/00MB8GA1UdIwQYMBaAFJyBRx8Yqu7N+UWnyRf9iomF18Os MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QzMzQS8xRDJCRDAzRTJE REIxMUU0OUFGNjE1MzBDNEY5QUUwMi9uSUZISHhpcTdzMzVSYWZKRl8yS2lZWFh3 NncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25JRkhIeGlxN3MzNVJhZkpGXzJLaVlYWHc2dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QzMzQS8xRDJCRDAzRTJEREIxMUU0OUFGNjE1MzBDNEY5QUUwMi9uSUZISHhpcTdz MzVSYWZKRl8yS2lZWFh3NncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCRjmVS9iEg7KxC4m6WTbhuaUv4REs1x35iOoHNQ5eUXzAG+GD7GjXX 9aNqE3C3CclA+VABibNEar2TcjQNavCammjW5AY6HZJ1t7GuMHSyPhfikyqzlbgF dH7onBKQAT61HjJmnXrQhYLaLU9JStYzy9NGf+LOo+Gk3do3gelU1NhyJYRIfiTs QUYQwsj5irCZxwU73GQAW2RCzNvAuzbQegM4JVmTdKpAQ89r61blVmi9odSwOOec /VnE607MJN0Y5/eUdkbUDGwP/STxj8l3gZJ9P80xJVemlVJgNzkNgZNFssQG2Bg7 k3Y326Kemopvr+WZqARi5UdUSB+t4mON -----END CERTIFICATE-----Generated at Fri Apr 4 22:24:44 2025 by rpki-client