$ rpki-client -vvf rpki.apnic.net/member_repository/A9154840/342F80D09FC411EF9631F836C4F9AE02/nPcUeL9ZsAixtUL6k6fBDvt_TWI.mft File: nPcUeL9ZsAixtUL6k6fBDvt_TWI.mft (raw, json) Hash identifier: vuX9tyAdUHJ6vcZlGvZ3XEEp716OyARs6o9xo6dn5L8= Subject key identifier: 07:0E:2E:2E:F6:26:01:AB:DD:D6:9F:DE:7F:D6:5F:13:5F:8A:CE:C2 Authority key identifier: 9C:F7:14:78:BF:59:B0:08:B1:B5:42:FA:93:A7:C1:0E:FB:7F:4D:62 Certificate issuer: /CN=A9154840/serialNumber=9CF71478BF59B008B1B542FA93A7C10EFB7F4D62 Certificate serial: 4C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nPcUeL9ZsAixtUL6k6fBDvt_TWI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9154840/342F80D09FC411EF9631F836C4F9AE02/nPcUeL9ZsAixtUL6k6fBDvt_TWI.mft Manifest number: 4A Signing time: Sat 29 Mar 2025 06:39:54 +0000 Manifest this update: Sat 29 Mar 2025 06:39:54 +0000 Manifest next update: Sat 05 Apr 2025 06:39:54 +0000 Files and hashes: 1: nPcUeL9ZsAixtUL6k6fBDvt_TWI.crl (hash: +uB6uAFx4Vpr1sYwDpq29gYbLo8GhEyVKZqayTQnTYY=) 2: 9950A304A55011EFA7FFA969C4F9AE02.roa (hash: 7w0AxBMbVoZTjF5sqspQh7z8UimR5szml+niNPnLbps=) 3: 98D7330CA55011EFA7FFA969C4F9AE02.roa (hash: 5T5IW/urFKGSR1rD4ZpAxg1/U5kVp7QebPXagPruk4U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9154840/342F80D09FC411EF9631F836C4F9AE02/nPcUeL9ZsAixtUL6k6fBDvt_TWI.crl rsync://rpki.apnic.net/member_repository/A9154840/342F80D09FC411EF9631F836C4F9AE02/nPcUeL9ZsAixtUL6k6fBDvt_TWI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nPcUeL9ZsAixtUL6k6fBDvt_TWI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Apr 2025 05:08:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76 (0x4c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9154840 Validity Not Before: Mar 29 06:39:54 2025 GMT Not After : Apr 5 06:39:54 2025 GMT Subject: CN=67e795ba-23da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:2e:e7:93:d5:d6:69:5c:8b:0f:18:f0:99:57: 60:2c:e3:95:ca:02:44:87:b2:ef:62:5a:9e:a5:8e: bc:47:2d:f0:d6:ff:3c:17:72:79:13:08:66:94:16: ea:2c:db:76:44:67:fa:43:ee:c5:42:04:51:7c:ce: 57:65:eb:7d:d7:12:8a:10:ba:74:a2:91:40:23:03: 79:3a:a9:2d:ce:72:58:b9:f3:6b:23:84:f0:08:9f: 5c:f5:d9:87:52:7e:17:e9:04:fa:f7:c5:57:1c:80: 30:65:b7:63:70:4d:6a:45:1d:e7:76:9a:ce:db:04: 01:81:98:53:14:46:8f:2a:af:b2:72:cb:67:37:ea: ad:0c:a1:15:2d:ef:87:f8:f2:01:00:f6:a5:2e:d5: 9e:59:1e:95:a1:72:dc:87:ce:08:67:7e:17:cf:e0: db:64:bf:74:df:47:c6:49:70:1e:44:1c:e2:63:cd: 2e:e2:2a:35:3e:7b:1e:8b:dc:7b:7c:80:e4:8c:a1: 6a:78:99:05:6b:5f:3b:c5:af:19:82:f1:e5:e4:0e: 76:a3:53:10:e1:f1:f6:9d:5a:31:9c:a9:bb:6e:d2: 56:b8:bb:97:04:bb:05:5c:0a:e1:8f:f4:0c:35:67: d9:55:fb:4c:6c:a7:92:43:8d:4e:10:19:38:0a:f6: 24:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:0E:2E:2E:F6:26:01:AB:DD:D6:9F:DE:7F:D6:5F:13:5F:8A:CE:C2 X509v3 Authority Key Identifier: keyid:9C:F7:14:78:BF:59:B0:08:B1:B5:42:FA:93:A7:C1:0E:FB:7F:4D:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9154840/342F80D09FC411EF9631F836C4F9AE02/nPcUeL9ZsAixtUL6k6fBDvt_TWI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nPcUeL9ZsAixtUL6k6fBDvt_TWI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9154840/342F80D09FC411EF9631F836C4F9AE02/nPcUeL9ZsAixtUL6k6fBDvt_TWI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 19:32:3e:98:50:e3:88:74:6a:4d:39:ab:6c:a9:22:32:1d:f3: c2:04:e1:d2:a8:18:8c:5f:c7:00:b1:49:14:74:23:e7:b2:2b: 9e:de:e0:45:e4:63:c1:14:8a:cf:c9:97:c6:d6:47:bd:ea:d8: 33:4f:ff:89:14:a2:49:e4:d3:9f:6d:fa:7d:b6:7d:a1:1f:a2: 25:d1:45:5b:16:c0:3a:1a:f0:0e:17:82:c0:c7:ba:54:e1:79: 3a:99:2a:14:c6:9b:30:79:4d:cb:9b:b3:97:85:b5:32:30:c0: 77:d9:56:08:14:c6:10:ff:51:af:ea:a9:59:5b:0c:9d:c4:2b: 83:f2:67:c2:6f:1b:df:59:c2:1d:07:55:5e:76:11:a8:50:b4: ac:44:cf:58:f7:00:9a:1a:ae:cc:35:60:bb:10:00:1e:c0:ae: 39:2b:14:15:89:67:62:a5:b4:d8:a4:f5:e4:af:59:85:33:c0: 0e:df:67:db:71:b6:d2:a3:13:ff:33:73:c2:2a:44:e4:1d:d6: a1:53:f1:46:ad:dd:e2:8d:1f:4e:27:32:2e:d4:66:87:ed:bd: c7:b3:ae:84:e3:30:09:57:54:c3:16:df:d3:83:82:47:71:97: 5c:df:0f:6a:a4:6d:ec:f0:e2:e0:d7:ce:fe:e0:d7:ff:74:2b: de:98:20:08 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBTDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 NDg0MDExMC8GA1UEBRMoOUNGNzE0NzhCRjU5QjAwOEIxQjU0MkZBOTNBN0MxMEVG QjdGNEQ2MjAeFw0yNTAzMjkwNjM5NTRaFw0yNTA0MDUwNjM5NTRaMBgxFjAUBgNV BAMTDTY3ZTc5NWJhLTIzZGEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQClLueT1dZpXIsPGPCZV2As45XKAkSHsu9iWp6ljrxHLfDW/zwXcnkTCGaUFuos 23ZEZ/pD7sVCBFF8zldl633XEooQunSikUAjA3k6qS3Ocli582sjhPAIn1z12YdS fhfpBPr3xVccgDBlt2NwTWpFHed2ms7bBAGBmFMURo8qr7Jyy2c36q0MoRUt74f4 8gEA9qUu1Z5ZHpWhctyHzghnfhfP4Ntkv3TfR8ZJcB5EHOJjzS7iKjU+ex6L3Ht8 gOSMoWp4mQVrXzvFrxmC8eXkDnajUxDh8fadWjGcqbtu0la4u5cEuwVcCuGP9Aw1 Z9lV+0xsp5JDjU4QGTgK9iQbAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUBw4uLvYm Aavd1p/ef9ZfE1+KzsIwHwYDVR0jBBgwFoAUnPcUeL9ZsAixtUL6k6fBDvt/TWIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU0ODQwLzM0MkY4MEQwOUZD NDExRUY5NjMxRjgzNkM0RjlBRTAyL25QY1VlTDlac0FpeHRVTDZrNmZCRHZ0X1RX SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvblBjVWVMOVpzQWl4dFVMNms2ZkJEdnRfVFdJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU0 ODQwLzM0MkY4MEQwOUZDNDExRUY5NjMxRjgzNkM0RjlBRTAyL25QY1VlTDlac0Fp eHRVTDZrNmZCRHZ0X1RXSS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBABkyPphQ44h0ak05q2ypIjId88IE4dKoGIxfxwCxSRR0I+eyK57e4EXk Y8EUis/Jl8bWR73q2DNP/4kUoknk059t+n22faEfoiXRRVsWwDoa8A4XgsDHulTh eTqZKhTGmzB5Tcubs5eFtTIwwHfZVggUxhD/Ua/qqVlbDJ3EK4PyZ8JvG99Zwh0H VV52EahQtKxEz1j3AJoarsw1YLsQAB7ArjkrFBWJZ2KltNik9eSvWYUzwA7fZ9tx ttKjE/8zc8IqROQd1qFT8Uat3eKNH04nMi7UZoftvcezroTjMAlXVMMW39ODgkdx l1zfD2qkbezw4uDXzv7g1/90K96YIAg= -----END CERTIFICATE-----Generated at Fri Apr 4 18:37:23 2025 by rpki-client