$ rpki-client -vvf rpki.apnic.net/member_repository/A9150EAB/1B2E7050446B11EA9DE59A57C4F9AE02/NB0JAhy_n9O7TLiOPQ7Rx2Te0P4.mft File: NB0JAhy_n9O7TLiOPQ7Rx2Te0P4.mft (raw, json) Hash identifier: M5iFXjEpZTAErCXi6Hht4GrdWp5vXnvWxc+K1NGh7dM= Subject key identifier: 8F:7F:4A:1D:79:D6:5C:E8:9B:4C:60:07:12:BF:87:36:A8:83:4D:C1 Authority key identifier: 34:1D:09:02:1C:BF:9F:D3:BB:4C:B8:8E:3D:0E:D1:C7:64:DE:D0:FE Certificate issuer: /CN=A9150EAB/serialNumber=341D09021CBF9FD3BB4CB88E3D0ED1C764DED0FE Certificate serial: 0AE3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NB0JAhy_n9O7TLiOPQ7Rx2Te0P4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9150EAB/1B2E7050446B11EA9DE59A57C4F9AE02/NB0JAhy_n9O7TLiOPQ7Rx2Te0P4.mft Manifest number: 119B Signing time: Mon 14 Apr 2025 19:16:37 +0000 Manifest this update: Mon 14 Apr 2025 19:16:37 +0000 Manifest next update: Mon 21 Apr 2025 19:16:37 +0000 Files and hashes: 1: NB0JAhy_n9O7TLiOPQ7Rx2Te0P4.crl (hash: DqfOOPxwePdGiHxIPP+BdWzgDXeuxgm8V68GpFYx2N0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9150EAB/1B2E7050446B11EA9DE59A57C4F9AE02/NB0JAhy_n9O7TLiOPQ7Rx2Te0P4.crl rsync://rpki.apnic.net/member_repository/A9150EAB/1B2E7050446B11EA9DE59A57C4F9AE02/NB0JAhy_n9O7TLiOPQ7Rx2Te0P4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NB0JAhy_n9O7TLiOPQ7Rx2Te0P4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Apr 2025 19:16:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2787 (0xae3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9150EAB, serialNumber=341D09021CBF9FD3BB4CB88E3D0ED1C764DED0FE Validity Not Before: Apr 14 19:16:37 2025 GMT Not After : Apr 21 19:16:37 2025 GMT Subject: CN=67fd5f15-be00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:55:56:1a:8c:dc:59:42:af:a8:f5:54:8b:3a: 4c:f1:66:d7:e0:ce:5a:b7:ba:ab:6a:54:4e:49:6d: 98:81:f0:b4:1b:32:af:ce:37:f3:95:26:60:2a:19: 55:f6:3d:c0:98:51:8b:cc:4d:34:ef:80:80:bb:aa: 56:fd:3c:83:53:71:9a:35:11:ac:39:8d:4d:a0:15: c4:42:7c:f9:e5:d1:9e:1f:25:fa:a4:fa:72:af:8d: 6d:78:6b:df:3c:2f:e0:4a:f5:d8:4b:17:a4:cc:fb: b1:3e:6e:16:5d:39:ca:4c:a8:f7:2f:b1:b0:df:5b: a3:ae:29:32:c0:91:c2:f5:84:9a:2d:da:09:ab:07: df:9f:8c:28:cd:d1:08:c9:30:2c:2e:89:4b:d6:e0: 65:c9:b7:83:b8:3e:0e:30:03:16:4c:ab:66:aa:67: f0:1d:0b:a7:a2:a6:ad:cc:87:51:03:3f:da:f7:c8: 88:8c:8f:e5:31:08:73:78:35:b5:ef:dd:51:5a:c6: 73:d8:26:9a:96:29:8e:4c:2a:0b:73:af:39:23:bf: c9:20:d2:94:a5:db:e1:81:40:f0:d0:fb:2c:7e:45: f3:23:45:52:84:c6:a1:57:23:24:33:83:95:fc:28: 87:8b:9f:d7:b3:b7:7c:9c:f2:a4:d7:e4:50:92:ce: 1d:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:7F:4A:1D:79:D6:5C:E8:9B:4C:60:07:12:BF:87:36:A8:83:4D:C1 X509v3 Authority Key Identifier: keyid:34:1D:09:02:1C:BF:9F:D3:BB:4C:B8:8E:3D:0E:D1:C7:64:DE:D0:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9150EAB/1B2E7050446B11EA9DE59A57C4F9AE02/NB0JAhy_n9O7TLiOPQ7Rx2Te0P4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NB0JAhy_n9O7TLiOPQ7Rx2Te0P4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9150EAB/1B2E7050446B11EA9DE59A57C4F9AE02/NB0JAhy_n9O7TLiOPQ7Rx2Te0P4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5e:66:89:9e:21:f7:73:71:ec:a3:c0:72:1d:b9:f4:82:89:64: 6e:fc:47:6c:ed:82:36:ca:91:37:a8:ec:98:04:3c:58:ea:02: b5:a5:60:b6:9e:26:aa:59:b3:4d:cc:b0:54:f5:9d:e4:43:82: 19:8f:61:b9:b5:b5:91:63:c9:f6:f7:88:11:d9:22:78:ab:2f: 56:73:04:62:89:e3:7b:28:3c:9c:2b:60:58:f8:54:b7:fe:7e: 28:0c:cd:c0:9d:78:aa:c9:95:15:65:a9:09:06:76:95:16:ef: 2b:79:31:88:55:41:87:d1:d5:a3:2b:03:58:dc:6c:3e:bd:26: 77:53:ea:ef:7f:6e:2f:dd:a1:fc:2c:7a:80:9e:20:6c:b6:89: c1:6f:8d:45:c8:5c:80:04:06:d1:68:4a:a0:c5:fa:3a:29:92: a4:0e:be:a9:73:03:51:a9:33:b6:0f:d6:47:dd:89:10:bf:1c: dc:d7:8d:b2:2a:28:1e:00:0b:f1:1b:e2:6d:c6:ce:27:a5:96: 20:46:8d:76:ca:96:f9:c6:d2:90:b0:39:d4:93:7e:11:fc:d4: 11:9b:e6:3a:b0:f0:31:04:d4:0c:e3:73:2d:7d:00:a4:16:60: a5:bf:47:4b:48:24:a6:f7:0f:87:ef:1b:70:05:5f:d7:20:a0: 5f:e5:34:d8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCuMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTBFQUIxMTAvBgNVBAUTKDM0MUQwOTAyMUNCRjlGRDNCQjRDQjg4RTNEMEVEMUM3 NjRERUQwRkUwHhcNMjUwNDE0MTkxNjM3WhcNMjUwNDIxMTkxNjM3WjAYMRYwFAYD VQQDEw02N2ZkNWYxNS1iZTAwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqFVWGozcWUKvqPVUizpM8WbX4M5at7qralROSW2YgfC0GzKvzjfzlSZgKhlV 9j3AmFGLzE0074CAu6pW/TyDU3GaNRGsOY1NoBXEQnz55dGeHyX6pPpyr41teGvf PC/gSvXYSxekzPuxPm4WXTnKTKj3L7Gw31ujrikywJHC9YSaLdoJqwffn4wozdEI yTAsLolL1uBlybeDuD4OMAMWTKtmqmfwHQunoqatzIdRAz/a98iIjI/lMQhzeDW1 791RWsZz2CaalimOTCoLc685I7/JINKUpdvhgUDw0PssfkXzI0VShMahVyMkM4OV /CiHi5/Xs7d8nPKk1+RQks4djQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI9/Sh15 1lzom0xgBxK/hzaog03BMB8GA1UdIwQYMBaAFDQdCQIcv5/Tu0y4jj0O0cdk3tD+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MEVBQi8xQjJFNzA1MDQ0 NkIxMUVBOURFNTlBNTdDNEY5QUUwMi9OQjBKQWh5X245TzdUTGlPUFE3UngyVGUw UDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05CMEpBaHlfbjlPN1RMaU9QUTdSeDJUZTBQNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MEVBQi8xQjJFNzA1MDQ0NkIxMUVBOURFNTlBNTdDNEY5QUUwMi9OQjBKQWh5X245 TzdUTGlPUFE3UngyVGUwUDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBeZomeIfdzceyjwHIdufSCiWRu/Eds7YI2ypE3qOyYBDxY6gK1pWC2 niaqWbNNzLBU9Z3kQ4IZj2G5tbWRY8n294gR2SJ4qy9WcwRiieN7KDycK2BY+FS3 /n4oDM3AnXiqyZUVZakJBnaVFu8reTGIVUGH0dWjKwNY3Gw+vSZ3U+rvf24v3aH8 LHqAniBstonBb41FyFyABAbRaEqgxfo6KZKkDr6pcwNRqTO2D9ZH3YkQvxzc142y KigeAAvxG+Jtxs4npZYgRo12ypb5xtKQsDnUk34R/NQRm+Y6sPAxBNQM43MtfQCk FmClv0dLSCSm9w+H7xtwBV/XIKBf5TTY -----END CERTIFICATE-----Generated at Tue Apr 15 12:20:38 2025 by rpki-client