$ rpki-client -vvf rpki.apnic.net/member_repository/A916BC76/6136A172FC1511EB9E50BC0AC4F9AE02/NAlJ7LhXg2NX8QJTxpQnIggZex0.mft File: NAlJ7LhXg2NX8QJTxpQnIggZex0.mft (raw, json) Hash identifier: nI+hYEQyl3h2slU1YfQjCELJjz3L3Tsk7CZNp6lp0IQ= Subject key identifier: 8E:B4:21:72:92:01:53:98:D1:CF:82:6C:6A:B3:00:BF:00:AD:68:C9 Authority key identifier: 34:09:49:EC:B8:57:83:63:57:F1:02:53:C6:94:27:22:08:19:7B:1D Certificate issuer: /CN=A916BC76/serialNumber=340949ECB857836357F10253C694272208197B1D Certificate serial: 0519 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NAlJ7LhXg2NX8QJTxpQnIggZex0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916BC76/6136A172FC1511EB9E50BC0AC4F9AE02/NAlJ7LhXg2NX8QJTxpQnIggZex0.mft Manifest number: 0514 Signing time: Thu 10 Apr 2025 23:33:07 +0000 Manifest this update: Thu 10 Apr 2025 23:33:07 +0000 Manifest next update: Thu 17 Apr 2025 23:33:07 +0000 Files and hashes: 1: NAlJ7LhXg2NX8QJTxpQnIggZex0.crl (hash: MKQAiRlkiIgqzBvueKj4ASSUNsBI/72TIvILMeTIGZo=) 2: F44B1F40FC1711EBA835010DC4F9AE02.roa (hash: Y4KIW6waXy9by1Ft4XI4IDDdWRGAFQ3T1gtKYgu91qw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916BC76/6136A172FC1511EB9E50BC0AC4F9AE02/NAlJ7LhXg2NX8QJTxpQnIggZex0.crl rsync://rpki.apnic.net/member_repository/A916BC76/6136A172FC1511EB9E50BC0AC4F9AE02/NAlJ7LhXg2NX8QJTxpQnIggZex0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NAlJ7LhXg2NX8QJTxpQnIggZex0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 17 Apr 2025 23:33:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1305 (0x519) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916BC76, serialNumber=340949ECB857836357F10253C694272208197B1D Validity Not Before: Apr 10 23:33:07 2025 GMT Not After : Apr 17 23:33:07 2025 GMT Subject: CN=67f85533-be38 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:8b:26:6e:ec:c1:53:02:34:df:4f:4f:30:54: 33:9a:f2:b3:10:a9:aa:00:14:6b:a4:86:b8:1d:5b: 7b:0a:57:ea:c9:63:21:72:e7:ed:41:92:2e:f9:a2: 45:69:51:20:e5:2b:df:75:3c:c4:c8:76:15:ad:21: 79:48:1a:88:70:f8:9f:47:a9:7e:9c:1a:7a:f6:c4: 87:d6:77:2d:f8:61:91:60:dc:c8:5b:8e:b5:10:16: 3a:a3:ae:ec:eb:28:47:7d:6a:8f:f8:9f:4a:1f:1e: 05:e2:80:b1:ad:c2:2e:79:ac:8a:5e:20:74:83:57: 8f:40:7c:c8:fa:0f:5b:15:d0:39:1a:10:33:c8:e0: 4e:cd:42:76:67:91:08:6b:10:38:21:1b:af:71:43: 5b:00:3d:01:ec:d6:c7:25:b7:1f:05:da:5f:8b:db: 2c:cd:50:73:93:fe:c5:bf:f1:d1:85:43:35:dd:3f: 2d:a5:b6:f9:88:8f:0f:c4:3e:cf:ea:20:c2:b9:f8: 69:2b:c0:d5:7f:54:97:09:f3:10:19:72:70:50:87: f2:ad:e1:86:48:02:fe:00:d4:68:a6:bc:e6:cd:19: b7:2e:3d:0c:ec:3c:f6:4e:94:00:87:e4:06:09:19: 82:36:eb:84:e7:e2:fc:ea:68:a5:71:99:ac:ce:1d: 5b:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:B4:21:72:92:01:53:98:D1:CF:82:6C:6A:B3:00:BF:00:AD:68:C9 X509v3 Authority Key Identifier: keyid:34:09:49:EC:B8:57:83:63:57:F1:02:53:C6:94:27:22:08:19:7B:1D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916BC76/6136A172FC1511EB9E50BC0AC4F9AE02/NAlJ7LhXg2NX8QJTxpQnIggZex0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NAlJ7LhXg2NX8QJTxpQnIggZex0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916BC76/6136A172FC1511EB9E50BC0AC4F9AE02/NAlJ7LhXg2NX8QJTxpQnIggZex0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b2:78:d0:62:26:73:f2:af:8e:b6:38:3f:26:e6:73:a6:c9:02: 0b:8d:3e:3b:6a:05:da:3d:24:d5:82:bf:5b:36:e5:bb:e4:a1: 59:64:60:36:4d:75:f2:85:c0:2f:10:f1:91:c9:73:dd:03:6e: 02:47:7f:30:fb:29:ce:6b:42:c9:31:de:db:6a:f9:c6:cf:6e: e2:7c:de:21:41:fb:33:fa:2a:5b:48:b5:02:9e:16:5d:24:80: a0:55:84:c7:a0:25:c2:89:eb:6c:22:6f:56:5f:be:28:8e:9e: 80:20:46:4c:03:1b:df:e8:2b:b6:cb:60:5c:cf:20:ff:14:d2: 84:15:1d:b2:4d:2f:47:5e:20:ef:ba:90:20:8b:8d:2e:d6:b7: ff:c1:2d:ef:75:d7:ce:fd:d0:f0:e8:d9:79:24:00:11:38:30: da:51:9f:56:3f:7f:77:6c:5d:66:22:99:3d:62:fc:aa:12:bf: 08:db:4a:2e:da:b9:db:6f:f5:51:5e:86:2a:95:51:85:d1:ea: 7c:08:85:1a:21:1b:37:91:ff:88:a1:28:d0:70:58:3a:62:03: d8:3e:70:e9:05:0a:bb:f2:ee:a7:6f:c0:51:bf:93:99:fc:4e: 56:0d:70:eb:8f:bd:7f:4b:66:a5:4a:ea:5e:bf:86:b7:b3:24: 82:e4:98:af -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBRkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkJDNzYxMTAvBgNVBAUTKDM0MDk0OUVDQjg1NzgzNjM1N0YxMDI1M0M2OTQyNzIy MDgxOTdCMUQwHhcNMjUwNDEwMjMzMzA3WhcNMjUwNDE3MjMzMzA3WjAYMRYwFAYD VQQDEw02N2Y4NTUzMy1iZTM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnYsmbuzBUwI0309PMFQzmvKzEKmqABRrpIa4HVt7ClfqyWMhcuftQZIu+aJF aVEg5SvfdTzEyHYVrSF5SBqIcPifR6l+nBp69sSH1nct+GGRYNzIW461EBY6o67s 6yhHfWqP+J9KHx4F4oCxrcIueayKXiB0g1ePQHzI+g9bFdA5GhAzyOBOzUJ2Z5EI axA4IRuvcUNbAD0B7NbHJbcfBdpfi9sszVBzk/7Fv/HRhUM13T8tpbb5iI8PxD7P 6iDCufhpK8DVf1SXCfMQGXJwUIfyreGGSAL+ANRoprzmzRm3Lj0M7Dz2TpQAh+QG CRmCNuuE5+L86milcZmszh1b+wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI60IXKS AVOY0c+CbGqzAL8ArWjJMB8GA1UdIwQYMBaAFDQJSey4V4NjV/ECU8aUJyIIGXsd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QkM3Ni82MTM2QTE3MkZD MTUxMUVCOUU1MEJDMEFDNEY5QUUwMi9OQWxKN0xoWGcyTlg4UUpUeHBRbklnZ1pl eDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05BbEo3TGhYZzJOWDhRSlR4cFFuSWdnWmV4MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QkM3Ni82MTM2QTE3MkZDMTUxMUVCOUU1MEJDMEFDNEY5QUUwMi9OQWxKN0xoWGcy Tlg4UUpUeHBRbklnZ1pleDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCyeNBiJnPyr462OD8m5nOmyQILjT47agXaPSTVgr9bNuW75KFZZGA2 TXXyhcAvEPGRyXPdA24CR38w+ynOa0LJMd7bavnGz27ifN4hQfsz+ipbSLUCnhZd JICgVYTHoCXCietsIm9WX74ojp6AIEZMAxvf6Cu2y2BczyD/FNKEFR2yTS9HXiDv upAgi40u1rf/wS3vddfO/dDw6Nl5JAARODDaUZ9WP393bF1mIpk9YvyqEr8I20ou 2rnbb/VRXoYqlVGF0ep8CIUaIRs3kf+IoSjQcFg6YgPYPnDpBQq78u6nb8BRv5OZ /E5WDXDrj71/S2alSupev4a3sySC5Jiv -----END CERTIFICATE-----Generated at Sat Apr 12 19:12:02 2025 by rpki-client