$ rpki-client -vvf rpki.apnic.net/member_repository/A914FA25/2BBCBCAA1DAC11EAAF4A3763C4F9AE02/ng7u9_yIBOBDfomd7TGYizxgLQI.mft File: ng7u9_yIBOBDfomd7TGYizxgLQI.mft (raw, json) Hash identifier: BIm9XWqGcajQe1NoyMALNn8LnIGtJsMa2YNuNYvY84Q= Subject key identifier: 45:B9:05:59:F5:7D:4B:F1:D4:B2:CB:F7:9B:F6:6C:6B:69:34:DD:F1 Authority key identifier: 9E:0E:EE:F7:FC:88:04:E0:43:7E:89:9D:ED:31:98:8B:3C:60:2D:02 Certificate issuer: /CN=A914FA25/serialNumber=9E0EEEF7FC8804E0437E899DED31988B3C602D02 Certificate serial: 0BCE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ng7u9_yIBOBDfomd7TGYizxgLQI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914FA25/2BBCBCAA1DAC11EAAF4A3763C4F9AE02/ng7u9_yIBOBDfomd7TGYizxgLQI.mft Manifest number: 0D7A Signing time: Fri 04 Apr 2025 19:03:17 +0000 Manifest this update: Fri 04 Apr 2025 19:03:17 +0000 Manifest next update: Fri 11 Apr 2025 19:03:17 +0000 Files and hashes: 1: ng7u9_yIBOBDfomd7TGYizxgLQI.crl (hash: 70K8vEm/Ls2FCG5+JrbJs7GXFlcdw2WVALUwM/ZI8PE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914FA25/2BBCBCAA1DAC11EAAF4A3763C4F9AE02/ng7u9_yIBOBDfomd7TGYizxgLQI.crl rsync://rpki.apnic.net/member_repository/A914FA25/2BBCBCAA1DAC11EAAF4A3763C4F9AE02/ng7u9_yIBOBDfomd7TGYizxgLQI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ng7u9_yIBOBDfomd7TGYizxgLQI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 19:03:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3022 (0xbce) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914FA25 Validity Not Before: Apr 4 19:03:17 2025 GMT Not After : Apr 11 19:03:17 2025 GMT Subject: CN=67f02cf5-953a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:de:70:d8:6b:d8:58:d2:aa:6e:a4:93:f9:88: 8d:ea:c3:6e:43:f3:bd:a6:00:ea:f2:c8:c3:e2:98: 71:fe:2e:3e:26:d1:14:75:87:42:cc:f6:00:c8:c8: 33:a4:09:96:9d:b6:c5:43:8d:1e:b6:5f:92:78:47: 0f:57:19:7d:be:e2:17:bb:eb:a5:56:96:17:a0:81: 76:16:f6:0c:0e:7a:15:2f:0e:64:b2:7d:85:b4:eb: ba:19:bc:0f:d8:e9:24:f2:03:ec:86:57:82:11:d3: bd:c7:84:c9:ce:b5:37:7f:04:9c:91:6e:aa:ac:16: 5d:83:5b:09:21:1c:7c:ba:c1:cb:07:08:29:0b:98: 15:3a:aa:f5:9d:1d:d7:f8:8e:4b:c2:63:3a:79:f5: c1:7b:0e:fe:69:31:7c:66:e1:8f:43:21:81:e7:dd: c5:27:43:46:03:f9:d4:0d:d6:d7:eb:3c:b9:a4:3b: 2b:f4:c1:0e:e9:a8:b9:a8:ca:d8:88:a6:a5:22:0c: df:95:57:21:0d:a9:24:70:49:cf:c5:08:53:83:37: e4:de:e1:3f:96:31:10:d6:be:cc:2f:a2:fb:0b:06: 5b:13:ef:6f:fd:bb:91:16:24:fd:04:dd:93:71:8b: dc:c2:34:03:47:e0:3e:59:c7:f0:7c:1d:25:14:18: cb:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:B9:05:59:F5:7D:4B:F1:D4:B2:CB:F7:9B:F6:6C:6B:69:34:DD:F1 X509v3 Authority Key Identifier: keyid:9E:0E:EE:F7:FC:88:04:E0:43:7E:89:9D:ED:31:98:8B:3C:60:2D:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914FA25/2BBCBCAA1DAC11EAAF4A3763C4F9AE02/ng7u9_yIBOBDfomd7TGYizxgLQI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ng7u9_yIBOBDfomd7TGYizxgLQI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914FA25/2BBCBCAA1DAC11EAAF4A3763C4F9AE02/ng7u9_yIBOBDfomd7TGYizxgLQI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 86:b8:64:a4:d5:2d:ef:ff:42:68:f7:c5:8e:3f:b4:e6:14:0f: 17:82:42:b3:99:40:65:88:84:32:1f:db:4a:dc:a8:73:41:4b: 06:8b:4f:15:06:40:2d:8e:c5:96:9b:9f:ac:b5:79:7d:5e:38: 39:b7:00:38:ec:ba:e4:c9:91:35:39:d6:ce:f3:99:eb:67:66: 64:a5:93:35:27:65:90:7e:5b:60:e2:ff:a1:ee:28:b3:7b:7c: 16:20:f0:7d:a2:9d:ab:07:c3:7f:33:c7:7c:36:77:cb:60:13: d6:2d:56:3f:61:00:cc:72:53:b1:92:c7:71:f0:45:86:38:5a: c7:33:da:ff:1a:5b:54:f6:77:c5:12:70:04:cd:6e:27:85:52: a8:00:38:9e:5b:e5:67:8b:d1:fc:f1:8f:ca:51:e8:2b:ab:de: 1a:93:53:6d:2a:9d:f4:04:29:1e:99:43:90:f6:d0:4e:a3:79: 69:d1:68:27:9e:26:f2:74:1a:9f:1f:24:59:fb:6e:16:33:b2: b8:c2:50:b9:a0:10:6a:b2:e6:8d:64:91:45:f4:00:22:90:0d: 2b:ee:bf:6a:ee:c4:07:33:05:28:61:5f:39:bf:e4:b4:3f:19: 9c:06:01:7a:9d:c2:12:8e:58:0d:6c:1b:f6:76:80:db:c1:12: 44:2c:f7:a8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC84wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEZBMjUxMTAvBgNVBAUTKDlFMEVFRUY3RkM4ODA0RTA0MzdFODk5REVEMzE5ODhC M0M2MDJEMDIwHhcNMjUwNDA0MTkwMzE3WhcNMjUwNDExMTkwMzE3WjAYMRYwFAYD VQQDEw02N2YwMmNmNS05NTNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy95w2GvYWNKqbqST+YiN6sNuQ/O9pgDq8sjD4phx/i4+JtEUdYdCzPYAyMgz pAmWnbbFQ40etl+SeEcPVxl9vuIXu+ulVpYXoIF2FvYMDnoVLw5ksn2FtOu6GbwP 2Okk8gPshleCEdO9x4TJzrU3fwSckW6qrBZdg1sJIRx8usHLBwgpC5gVOqr1nR3X +I5LwmM6efXBew7+aTF8ZuGPQyGB593FJ0NGA/nUDdbX6zy5pDsr9MEO6ai5qMrY iKalIgzflVchDakkcEnPxQhTgzfk3uE/ljEQ1r7ML6L7CwZbE+9v/buRFiT9BN2T cYvcwjQDR+A+WcfwfB0lFBjL5wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEW5BVn1 fUvx1LLL95v2bGtpNN3xMB8GA1UdIwQYMBaAFJ4O7vf8iATgQ36Jne0xmIs8YC0C MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RkEyNS8yQkJDQkNBQTFE QUMxMUVBQUY0QTM3NjNDNEY5QUUwMi9uZzd1OV95SUJPQkRmb21kN1RHWWl6eGdM UUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25nN3U5X3lJQk9CRGZvbWQ3VEdZaXp4Z0xRSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RkEyNS8yQkJDQkNBQTFEQUMxMUVBQUY0QTM3NjNDNEY5QUUwMi9uZzd1OV95SUJP QkRmb21kN1RHWWl6eGdMUUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCGuGSk1S3v/0Jo98WOP7TmFA8XgkKzmUBliIQyH9tK3KhzQUsGi08V BkAtjsWWm5+stXl9Xjg5twA47LrkyZE1OdbO85nrZ2ZkpZM1J2WQfltg4v+h7iiz e3wWIPB9op2rB8N/M8d8NnfLYBPWLVY/YQDMclOxksdx8EWGOFrHM9r/GltU9nfF EnAEzW4nhVKoADieW+Vni9H88Y/KUegrq94ak1NtKp30BCkemUOQ9tBOo3lp0Wgn nibydBqfHyRZ+24WM7K4wlC5oBBqsuaNZJFF9AAikA0r7r9q7sQHMwUoYV85v+S0 PxmcBgF6ncISjlgNbBv2doDbwRJELPeo -----END CERTIFICATE-----Generated at Sat Apr 5 07:07:02 2025 by rpki-client