$ rpki-client -vvf rpki.apnic.net/member_repository/A916DB8E/FF80276C3BCC11EC8A6BCD7EC4F9AE02/nePaegrGlA0yq7nP_LBh8q7lZh0.mft File: nePaegrGlA0yq7nP_LBh8q7lZh0.mft (raw, json) Hash identifier: oWaTinlM9qFxRxiFRMijiiSBzgxffvNi0u65gAVkNY0= Subject key identifier: A3:C2:10:61:62:07:EE:A0:6E:24:C4:93:78:35:1F:33:CD:9F:47:91 Authority key identifier: 9D:E3:DA:7A:0A:C6:94:0D:32:AB:B9:CF:FC:B0:61:F2:AE:E5:66:1D Certificate issuer: /CN=A916DB8E/serialNumber=9DE3DA7A0AC6940D32ABB9CFFCB061F2AEE5661D Certificate serial: 0491 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nePaegrGlA0yq7nP_LBh8q7lZh0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916DB8E/FF80276C3BCC11EC8A6BCD7EC4F9AE02/nePaegrGlA0yq7nP_LBh8q7lZh0.mft Manifest number: 047B Signing time: Sat 12 Apr 2025 23:43:45 +0000 Manifest this update: Sat 12 Apr 2025 23:43:44 +0000 Manifest next update: Sat 19 Apr 2025 23:43:44 +0000 Files and hashes: 1: nePaegrGlA0yq7nP_LBh8q7lZh0.crl (hash: lcKu3PSRSjn3yLKDdCWxPDcH6UqAlZgevA3KakyAyNc=) 2: 4AD39148A91511ED9E2AC948C4F9AE02.roa (hash: lV86FgcjhujyEw+tqQZA5LVzdbV5o2JfVCvKZDvrKH8=) 3: 0FB7DCDA321D11EF81C6FB83C4F9AE02.roa (hash: YNerQgMu/lgswTLCzZkkLpc3iA2UGIEgvOOW994Z9L0=) 4: 4A2FAA9CA91511ED9E2AC948C4F9AE02.roa (hash: 4yfWRgYWyN+Mv4gIICmnpB2EvTMNs4jSY+Jh+PPBGG0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916DB8E/FF80276C3BCC11EC8A6BCD7EC4F9AE02/nePaegrGlA0yq7nP_LBh8q7lZh0.crl rsync://rpki.apnic.net/member_repository/A916DB8E/FF80276C3BCC11EC8A6BCD7EC4F9AE02/nePaegrGlA0yq7nP_LBh8q7lZh0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nePaegrGlA0yq7nP_LBh8q7lZh0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 19 Apr 2025 23:43:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1169 (0x491) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916DB8E, serialNumber=9DE3DA7A0AC6940D32ABB9CFFCB061F2AEE5661D Validity Not Before: Apr 12 23:43:44 2025 GMT Not After : Apr 19 23:43:44 2025 GMT Subject: CN=67fafab0-e001 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:b6:90:e2:3f:02:8c:80:e8:65:e6:74:2f:bb: af:99:d1:cb:60:32:89:c5:39:99:a0:21:9b:ad:20: 68:9d:52:ab:9f:84:89:bc:eb:12:8f:1c:84:0e:76: 4c:74:80:f8:c9:09:05:dd:69:4c:d1:a2:75:48:c8: 87:ca:32:59:17:53:f4:ff:8b:17:a3:9b:9e:2d:00: ae:8e:d3:00:13:c6:15:87:ba:4b:85:6b:09:a4:2f: e9:36:31:04:bb:34:b2:2b:7f:ac:8b:68:07:06:f8: b8:d0:79:c8:35:86:9f:72:8e:6f:4f:54:3f:ac:b6: 78:80:64:a3:eb:b5:68:d5:00:32:65:63:be:d3:88: 17:b0:80:6c:cd:22:d3:08:3d:85:63:b5:8e:12:77: c7:30:a8:1c:1d:05:30:b2:4e:27:3f:b6:fa:21:41: 25:e5:18:68:df:7c:41:54:27:f8:8a:78:4d:53:b9: 20:50:fd:77:60:38:f1:71:f9:95:60:90:36:b3:b9: b8:16:21:c4:62:51:04:9c:c8:83:03:95:3c:2e:75: 15:35:6f:e7:d6:92:18:e7:04:7d:8e:c3:ef:cc:54: 2a:03:79:75:cc:17:4c:a1:3d:e1:38:f4:8b:00:f8: e6:55:55:1a:5f:f8:69:4a:c8:b7:4c:12:65:a1:9a: c2:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:C2:10:61:62:07:EE:A0:6E:24:C4:93:78:35:1F:33:CD:9F:47:91 X509v3 Authority Key Identifier: keyid:9D:E3:DA:7A:0A:C6:94:0D:32:AB:B9:CF:FC:B0:61:F2:AE:E5:66:1D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916DB8E/FF80276C3BCC11EC8A6BCD7EC4F9AE02/nePaegrGlA0yq7nP_LBh8q7lZh0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nePaegrGlA0yq7nP_LBh8q7lZh0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916DB8E/FF80276C3BCC11EC8A6BCD7EC4F9AE02/nePaegrGlA0yq7nP_LBh8q7lZh0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption af:b4:4f:ef:89:d4:54:9c:cb:26:a7:55:57:a0:d2:d5:81:1c: 61:b2:9f:c4:5b:a9:67:52:9d:14:99:43:f3:48:87:d3:69:dc: d8:72:65:63:e0:de:d1:c9:e6:b3:a1:56:76:a8:43:b8:b3:e4: c5:3b:47:a1:3c:b3:f4:72:68:6d:4b:13:cb:07:c8:cb:e7:fa: dc:1a:e4:0c:28:5f:f0:4f:1f:86:9b:86:35:91:5b:3d:dc:0f: fe:9d:2f:d4:38:13:c6:ff:b7:02:4e:e3:b2:21:d0:45:a9:a1: 05:ff:3a:1d:66:95:15:23:27:5d:4c:56:b1:21:4d:bd:17:be: 37:3c:2d:e9:9b:58:e0:04:12:49:ea:2a:28:7f:f9:96:92:e9: 6b:fb:0a:cb:dc:e3:b4:9f:31:28:c7:4b:3c:a3:64:46:7a:1e: 98:6e:18:3d:a6:b7:ca:28:91:e8:8a:9b:d8:c7:cd:33:9b:71: 68:46:a1:37:ea:2a:82:39:d6:8a:7c:9d:bf:e2:24:60:2e:b9: 5e:63:db:3c:02:ef:ae:c7:4a:a8:41:9c:2b:d1:7d:93:a4:e3: e9:03:19:e5:90:d7:d1:35:82:a4:18:af:7d:4e:43:e3:aa:cc: 7b:3f:fd:35:e1:06:87:f4:3c:b2:cf:cb:85:0d:b8:5b:cd:94: 1f:e1:a1:88 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBJEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkRCOEUxMTAvBgNVBAUTKDlERTNEQTdBMEFDNjk0MEQzMkFCQjlDRkZDQjA2MUYy QUVFNTY2MUQwHhcNMjUwNDEyMjM0MzQ0WhcNMjUwNDE5MjM0MzQ0WjAYMRYwFAYD VQQDEw02N2ZhZmFiMC1lMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmraQ4j8CjIDoZeZ0L7uvmdHLYDKJxTmZoCGbrSBonVKrn4SJvOsSjxyEDnZM dID4yQkF3WlM0aJ1SMiHyjJZF1P0/4sXo5ueLQCujtMAE8YVh7pLhWsJpC/pNjEE uzSyK3+si2gHBvi40HnINYafco5vT1Q/rLZ4gGSj67Vo1QAyZWO+04gXsIBszSLT CD2FY7WOEnfHMKgcHQUwsk4nP7b6IUEl5Rho33xBVCf4inhNU7kgUP13YDjxcfmV YJA2s7m4FiHEYlEEnMiDA5U8LnUVNW/n1pIY5wR9jsPvzFQqA3l1zBdMoT3hOPSL APjmVVUaX/hpSsi3TBJloZrCVQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKPCEGFi B+6gbiTEk3g1HzPNn0eRMB8GA1UdIwQYMBaAFJ3j2noKxpQNMqu5z/ywYfKu5WYd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2REI4RS9GRjgwMjc2QzNC Q0MxMUVDOEE2QkNEN0VDNEY5QUUwMi9uZVBhZWdyR2xBMHlxN25QX0xCaDhxN2xa aDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25lUGFlZ3JHbEEweXE3blBfTEJoOHE3bFpoMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 REI4RS9GRjgwMjc2QzNCQ0MxMUVDOEE2QkNEN0VDNEY5QUUwMi9uZVBhZWdyR2xB MHlxN25QX0xCaDhxN2xaaDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCvtE/vidRUnMsmp1VXoNLVgRxhsp/EW6lnUp0UmUPzSIfTadzYcmVj 4N7RyeazoVZ2qEO4s+TFO0ehPLP0cmhtSxPLB8jL5/rcGuQMKF/wTx+Gm4Y1kVs9 3A/+nS/UOBPG/7cCTuOyIdBFqaEF/zodZpUVIyddTFaxIU29F743PC3pm1jgBBJJ 6ioof/mWkulr+wrL3OO0nzEox0s8o2RGeh6Ybhg9prfKKJHoipvYx80zm3FoRqE3 6iqCOdaKfJ2/4iRgLrleY9s8Au+ux0qoQZwr0X2TpOPpAxnlkNfRNYKkGK99TkPj qsx7P/014QaH9Dyyz8uFDbhbzZQf4aGI -----END CERTIFICATE-----Generated at Sun Apr 13 05:31:38 2025 by rpki-client