$ rpki-client -vvf rpki.apnic.net/member_repository/A9178297/4B1F748487B411EB8EF3321AC4F9AE02/nhuiMnN6PQDX-qC03Dg02arwbfg.mft File: nhuiMnN6PQDX-qC03Dg02arwbfg.mft (raw, json) Hash identifier: GH3qBgAsr5n86KHNmMA8oArXhjhshAcsl0TlCPdLsEY= Subject key identifier: FF:A6:5A:F6:07:55:2D:61:80:AC:A0:99:49:A7:8A:15:CE:37:DD:AF Authority key identifier: 9E:1B:A2:32:73:7A:3D:00:D7:FA:A0:B4:DC:38:34:D9:AA:F0:6D:F8 Certificate issuer: /CN=A9178297/serialNumber=9E1BA232737A3D00D7FAA0B4DC3834D9AAF06DF8 Certificate serial: 0641 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nhuiMnN6PQDX-qC03Dg02arwbfg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9178297/4B1F748487B411EB8EF3321AC4F9AE02/nhuiMnN6PQDX-qC03Dg02arwbfg.mft Manifest number: 0638 Signing time: Fri 04 Apr 2025 22:44:08 +0000 Manifest this update: Fri 04 Apr 2025 22:44:07 +0000 Manifest next update: Fri 11 Apr 2025 22:44:07 +0000 Files and hashes: 1: nhuiMnN6PQDX-qC03Dg02arwbfg.crl (hash: re2jLCR2CGwDal7zzGNi/ipMgFmGwOQ4j+XMUReOGU8=) 2: DB883A6E87B511EB91F5691BC4F9AE02.roa (hash: w9bicawnJRvGW+6sHovOqUiuGd+C1wZ78lKb1ct2C6A=) 3: DC0002F687B511EB91F5691BC4F9AE02.roa (hash: Dm24k5oSXxU308cuhimaoVSKUy3VoBNJ3O4FrVg4PHw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9178297/4B1F748487B411EB8EF3321AC4F9AE02/nhuiMnN6PQDX-qC03Dg02arwbfg.crl rsync://rpki.apnic.net/member_repository/A9178297/4B1F748487B411EB8EF3321AC4F9AE02/nhuiMnN6PQDX-qC03Dg02arwbfg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nhuiMnN6PQDX-qC03Dg02arwbfg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 22:44:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1601 (0x641) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9178297 Validity Not Before: Apr 4 22:44:07 2025 GMT Not After : Apr 11 22:44:07 2025 GMT Subject: CN=67f060b8-24e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:c3:6e:37:07:d3:74:3a:30:dd:de:7f:b5:9e: 12:14:d2:0b:86:f7:a4:56:a4:0d:8e:bc:c6:26:10: 5d:47:a7:91:cd:9f:69:18:d2:fa:44:62:0c:05:84: 3c:38:37:11:9b:e7:1d:45:61:af:71:6f:69:c4:1b: 09:b1:68:ca:6f:ae:0a:c3:15:80:87:00:f2:a4:59: ae:74:6e:4d:db:b4:b7:3d:01:02:a6:fb:96:68:e4: fd:50:ba:c3:0c:19:39:b9:aa:9a:d2:ad:73:7b:7e: e7:e1:52:6d:ce:0b:54:ca:8e:b5:d8:63:18:3c:8e: bd:ad:74:8b:54:e5:05:a3:f2:f3:5d:da:b6:f8:bf: 17:bc:5e:5b:19:e6:99:06:40:74:c4:6c:b8:52:a5: c2:60:1e:4f:0a:f9:fd:d5:d4:2b:15:f7:09:1e:a0: 0e:fe:1e:2d:4d:aa:6e:83:9e:03:57:a9:9e:32:09: 25:07:48:3b:1a:07:4a:9e:4d:ae:84:f8:f1:2c:71: 93:03:9f:74:6a:34:6f:1b:0e:fb:c3:93:55:f5:9d: 2a:c3:5d:3b:98:20:d7:5d:05:ae:07:a3:1a:a3:75: 88:ba:19:22:e3:64:95:65:79:66:19:12:d3:26:bd: 6b:18:26:84:ee:5e:b3:7c:b9:ab:6b:3d:29:31:f6: 6c:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:A6:5A:F6:07:55:2D:61:80:AC:A0:99:49:A7:8A:15:CE:37:DD:AF X509v3 Authority Key Identifier: keyid:9E:1B:A2:32:73:7A:3D:00:D7:FA:A0:B4:DC:38:34:D9:AA:F0:6D:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9178297/4B1F748487B411EB8EF3321AC4F9AE02/nhuiMnN6PQDX-qC03Dg02arwbfg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nhuiMnN6PQDX-qC03Dg02arwbfg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9178297/4B1F748487B411EB8EF3321AC4F9AE02/nhuiMnN6PQDX-qC03Dg02arwbfg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1c:74:de:a1:25:da:d6:26:a6:bb:7a:b3:61:f6:2b:3a:b9:a2: a6:84:19:81:c8:46:8d:24:b1:4a:80:dc:f0:53:32:ec:80:56: 17:42:87:74:41:dc:ea:c6:cc:25:f3:5e:c9:a1:1a:df:9d:d8: a4:1a:8e:7e:72:8a:bd:54:85:bf:79:50:04:65:2d:fc:30:d5: ac:a6:a3:f2:f5:f6:22:96:b5:c8:2a:31:35:44:2d:a0:7d:2c: ab:2e:14:3d:44:70:fe:c1:45:2a:d4:48:e4:61:3a:05:64:fa: f7:4d:5e:b7:f3:d5:95:b4:61:99:d3:3d:a0:32:32:88:1a:22: 1f:8c:dc:37:d7:62:3f:01:ea:3d:05:f8:58:9e:20:73:53:f4: 78:76:28:b9:4d:58:8d:6c:ec:3d:b2:93:cd:5b:b2:0e:c8:4d: ee:53:77:ee:a0:59:a3:ac:54:38:84:89:6e:34:d5:85:4e:eb: 41:02:9c:73:1a:46:45:47:ad:29:47:9f:ef:28:35:c9:cc:d6: 15:b1:40:86:90:19:99:46:45:49:13:2d:2c:3a:d0:1a:2b:2b: b3:6b:27:eb:a2:70:76:d3:59:05:95:f7:5c:04:06:1c:19:b0: ed:c2:76:29:70:96:d4:52:ce:ff:98:27:43:fc:62:1c:d5:92: 66:cb:dd:1a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBkEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzgyOTcxMTAvBgNVBAUTKDlFMUJBMjMyNzM3QTNEMDBEN0ZBQTBCNERDMzgzNEQ5 QUFGMDZERjgwHhcNMjUwNDA0MjI0NDA3WhcNMjUwNDExMjI0NDA3WjAYMRYwFAYD VQQDEw02N2YwNjBiOC0yNGU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAusNuNwfTdDow3d5/tZ4SFNILhvekVqQNjrzGJhBdR6eRzZ9pGNL6RGIMBYQ8 ODcRm+cdRWGvcW9pxBsJsWjKb64KwxWAhwDypFmudG5N27S3PQECpvuWaOT9ULrD DBk5uaqa0q1ze37n4VJtzgtUyo612GMYPI69rXSLVOUFo/LzXdq2+L8XvF5bGeaZ BkB0xGy4UqXCYB5PCvn91dQrFfcJHqAO/h4tTapug54DV6meMgklB0g7GgdKnk2u hPjxLHGTA590ajRvGw77w5NV9Z0qw107mCDXXQWuB6Mao3WIuhki42SVZXlmGRLT Jr1rGCaE7l6zfLmraz0pMfZs8QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP+mWvYH VS1hgKygmUmnihXON92vMB8GA1UdIwQYMBaAFJ4bojJzej0A1/qgtNw4NNmq8G34 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3ODI5Ny80QjFGNzQ4NDg3 QjQxMUVCOEVGMzMyMUFDNEY5QUUwMi9uaHVpTW5ONlBRRFgtcUMwM0RnMDJhcndi ZmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25odWlNbk42UFFEWC1xQzAzRGcwMmFyd2JmZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 ODI5Ny80QjFGNzQ4NDg3QjQxMUVCOEVGMzMyMUFDNEY5QUUwMi9uaHVpTW5ONlBR RFgtcUMwM0RnMDJhcndiZmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAcdN6hJdrWJqa7erNh9is6uaKmhBmByEaNJLFKgNzwUzLsgFYXQod0 Qdzqxswl817JoRrfndikGo5+coq9VIW/eVAEZS38MNWspqPy9fYilrXIKjE1RC2g fSyrLhQ9RHD+wUUq1EjkYToFZPr3TV6389WVtGGZ0z2gMjKIGiIfjNw312I/Aeo9 BfhYniBzU/R4dii5TViNbOw9spPNW7IOyE3uU3fuoFmjrFQ4hIluNNWFTutBApxz GkZFR60pR5/vKDXJzNYVsUCGkBmZRkVJEy0sOtAaKyuzayfronB201kFlfdcBAYc GbDtwnYpcJbUUs7/mCdD/GIc1ZJmy90a -----END CERTIFICATE-----Generated at Sat Apr 5 09:06:33 2025 by rpki-client