$ rpki-client -vvf rpki.apnic.net/member_repository/A917190F/B3CA76C0FA3111EABD249E7AC4F9AE02/nQdEbvmfPFfCnFgta3rKRzX05HA.mft File: nQdEbvmfPFfCnFgta3rKRzX05HA.mft (raw, json) Hash identifier: 3pTh/HMDaI0zphSq3fQE3ciqbZp4CyiSioIYJMrBscE= Subject key identifier: DB:0D:8F:0C:72:10:62:A4:91:B9:2D:0A:73:79:AD:BE:0C:0F:CF:C6 Authority key identifier: 9D:07:44:6E:F9:9F:3C:57:C2:9C:58:2D:6B:7A:CA:47:35:F4:E4:70 Certificate issuer: /CN=A917190F/serialNumber=9D07446EF99F3C57C29C582D6B7ACA4735F4E470 Certificate serial: 081C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nQdEbvmfPFfCnFgta3rKRzX05HA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917190F/B3CA76C0FA3111EABD249E7AC4F9AE02/nQdEbvmfPFfCnFgta3rKRzX05HA.mft Manifest number: 07E5 Signing time: Wed 16 Apr 2025 20:55:54 +0000 Manifest this update: Wed 16 Apr 2025 20:55:54 +0000 Manifest next update: Wed 23 Apr 2025 20:55:54 +0000 Files and hashes: 1: nQdEbvmfPFfCnFgta3rKRzX05HA.crl (hash: 6T21Ywa8RFCqAd8mNPrQs3Kb1ZMjFmewfMdFhzTqIXs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917190F/B3CA76C0FA3111EABD249E7AC4F9AE02/nQdEbvmfPFfCnFgta3rKRzX05HA.crl rsync://rpki.apnic.net/member_repository/A917190F/B3CA76C0FA3111EABD249E7AC4F9AE02/nQdEbvmfPFfCnFgta3rKRzX05HA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nQdEbvmfPFfCnFgta3rKRzX05HA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Apr 2025 20:55:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2076 (0x81c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917190F, serialNumber=9D07446EF99F3C57C29C582D6B7ACA4735F4E470 Validity Not Before: Apr 16 20:55:54 2025 GMT Not After : Apr 23 20:55:54 2025 GMT Subject: CN=6800195a-500e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:d5:0d:19:df:77:f5:a5:d5:bf:d7:2f:f9:5d: 03:c7:6b:d1:86:39:93:bb:f4:6c:3f:d9:e0:ee:84: b4:2a:fe:40:ef:79:83:d8:72:1f:fd:e9:f3:37:56: f8:ad:48:8a:d9:6a:8c:eb:24:37:fc:60:f6:67:bd: f5:ab:f1:1b:8c:ca:37:89:2e:ad:eb:f9:c1:06:d2: a9:6b:2e:df:b6:de:41:41:f8:6b:7f:e5:1d:51:f5: ce:45:19:f4:e5:a4:1b:d5:52:c4:6c:b1:00:55:f0: 3a:f5:24:52:77:4a:dc:9b:df:0d:4e:22:c5:66:d2: 03:9a:37:fe:65:23:01:e1:8d:db:a9:0a:ca:04:cd: 43:65:09:d1:1b:97:a9:1f:1d:0b:19:15:01:0d:30: 62:a4:b5:82:54:65:f6:a5:17:fb:f4:1a:a8:5e:78: 93:0a:51:b4:d5:7b:29:62:99:e3:b3:db:08:93:f2: 9b:b0:cf:e5:c4:6c:eb:02:ee:d3:ca:f4:d1:0e:dc: 51:a4:d0:dc:bc:8d:fa:6d:68:9e:fa:b9:4b:97:be: 3d:ee:a6:15:ce:fd:ac:c0:db:e1:03:a3:63:c9:80: 92:4a:d4:9f:87:08:da:03:79:a5:cd:c7:72:b2:46: 72:c4:85:7f:de:b9:67:1b:60:0e:2e:3c:f5:f6:58: a8:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:0D:8F:0C:72:10:62:A4:91:B9:2D:0A:73:79:AD:BE:0C:0F:CF:C6 X509v3 Authority Key Identifier: keyid:9D:07:44:6E:F9:9F:3C:57:C2:9C:58:2D:6B:7A:CA:47:35:F4:E4:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917190F/B3CA76C0FA3111EABD249E7AC4F9AE02/nQdEbvmfPFfCnFgta3rKRzX05HA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nQdEbvmfPFfCnFgta3rKRzX05HA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917190F/B3CA76C0FA3111EABD249E7AC4F9AE02/nQdEbvmfPFfCnFgta3rKRzX05HA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6b:74:71:79:a4:aa:8c:c2:4f:e9:a1:b9:8a:a6:04:18:c9:5d: 6b:ef:d5:72:d8:ee:ea:7d:6e:df:31:53:ad:f6:9d:be:b3:03: 9a:28:3c:cc:94:e9:89:55:fe:33:23:5a:f8:73:c4:ee:43:02: 27:76:bb:4f:39:73:14:74:0e:5a:50:30:09:5b:b0:80:64:27: fc:70:4f:c6:08:35:0f:70:80:3f:59:18:9f:8a:7d:78:04:4d: e1:96:2a:7d:bf:79:c7:a3:93:59:01:93:81:c7:08:2b:ca:b2: dd:4f:79:cc:96:38:4b:0f:83:6a:9a:f2:62:7c:6d:56:9e:08: ee:f1:82:f2:54:76:ec:97:69:9f:c7:56:3b:2d:12:d5:fc:50: 25:b6:bc:c4:ec:03:8e:ff:80:85:09:c8:69:b2:3a:7b:92:81: 9f:72:da:7a:f7:86:29:83:9f:66:1a:98:27:f6:8e:a3:ec:6f: f3:7c:a4:d7:d2:e8:1d:e1:0c:1a:85:c8:f1:47:cd:66:45:5d: 98:1d:a7:5b:17:ba:d3:b3:d5:f0:0e:43:b0:09:9a:7f:69:fc: 2d:51:7c:d4:9f:a2:1c:03:c2:3e:e2:48:fd:69:47:fa:fb:be: 28:1b:0f:c4:e7:55:80:9c:be:56:a8:48:4b:69:51:6b:f0:6d: e0:1c:5a:b8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCBwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzE5MEYxMTAvBgNVBAUTKDlEMDc0NDZFRjk5RjNDNTdDMjlDNTgyRDZCN0FDQTQ3 MzVGNEU0NzAwHhcNMjUwNDE2MjA1NTU0WhcNMjUwNDIzMjA1NTU0WjAYMRYwFAYD VQQDEw02ODAwMTk1YS01MDBlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6tUNGd939aXVv9cv+V0Dx2vRhjmTu/RsP9ng7oS0Kv5A73mD2HIf/enzN1b4 rUiK2WqM6yQ3/GD2Z731q/EbjMo3iS6t6/nBBtKpay7ftt5BQfhrf+UdUfXORRn0 5aQb1VLEbLEAVfA69SRSd0rcm98NTiLFZtIDmjf+ZSMB4Y3bqQrKBM1DZQnRG5ep Hx0LGRUBDTBipLWCVGX2pRf79BqoXniTClG01XspYpnjs9sIk/KbsM/lxGzrAu7T yvTRDtxRpNDcvI36bWie+rlLl7497qYVzv2swNvhA6NjyYCSStSfhwjaA3mlzcdy skZyxIV/3rlnG2AOLjz19lioEwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNsNjwxy EGKkkbktCnN5rb4MD8/GMB8GA1UdIwQYMBaAFJ0HRG75nzxXwpxYLWt6ykc19ORw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MTkwRi9CM0NBNzZDMEZB MzExMUVBQkQyNDlFN0FDNEY5QUUwMi9uUWRFYnZtZlBGZkNuRmd0YTNyS1J6WDA1 SEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25RZEVidm1mUEZmQ25GZ3RhM3JLUnpYMDVIQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MTkwRi9CM0NBNzZDMEZBMzExMUVBQkQyNDlFN0FDNEY5QUUwMi9uUWRFYnZtZlBG ZkNuRmd0YTNyS1J6WDA1SEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBrdHF5pKqMwk/pobmKpgQYyV1r79Vy2O7qfW7fMVOt9p2+swOaKDzM lOmJVf4zI1r4c8TuQwIndrtPOXMUdA5aUDAJW7CAZCf8cE/GCDUPcIA/WRifin14 BE3hlip9v3nHo5NZAZOBxwgryrLdT3nMljhLD4NqmvJifG1Wngju8YLyVHbsl2mf x1Y7LRLV/FAltrzE7AOO/4CFCchpsjp7koGfctp694Ypg59mGpgn9o6j7G/zfKTX 0ugd4QwahcjxR81mRV2YHadbF7rTs9XwDkOwCZp/afwtUXzUn6IcA8I+4kj9aUf6 +74oGw/E51WAnL5WqEhLaVFr8G3gHFq4 -----END CERTIFICATE-----Generated at Thu Apr 17 22:11:14 2025 by rpki-client