$ rpki-client -vvf rpki.apnic.net/member_repository/A9185D34/DBA87858E6A011EAA8544B43C4F9AE02/nsEhbSVkFkA8tcU-c0VTD4MnLN0.mft File: nsEhbSVkFkA8tcU-c0VTD4MnLN0.mft (raw, json) Hash identifier: CiV2/WsUYid/Abl7MuSfZh+CAvkXE1iZyQ5eYBQR1dM= Subject key identifier: BD:39:6B:1C:A9:21:45:DD:DE:DA:2A:DF:A2:A5:0B:3F:86:32:F4:4C Authority key identifier: 9E:C1:21:6D:25:64:16:40:3C:B5:C5:3E:73:45:53:0F:83:27:2C:DD Certificate issuer: /CN=A9185D34/serialNumber=9EC1216D256416403CB5C53E7345530F83272CDD Certificate serial: 07FB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nsEhbSVkFkA8tcU-c0VTD4MnLN0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9185D34/DBA87858E6A011EAA8544B43C4F9AE02/nsEhbSVkFkA8tcU-c0VTD4MnLN0.mft Manifest number: 07EE Signing time: Fri 18 Apr 2025 21:04:16 +0000 Manifest this update: Fri 18 Apr 2025 21:04:15 +0000 Manifest next update: Fri 25 Apr 2025 21:04:15 +0000 Files and hashes: 1: nsEhbSVkFkA8tcU-c0VTD4MnLN0.crl (hash: ibsbK/N5TKUnVbVd+hOsZNsubGR+TFSXKjZ98RnEbZo=) 2: C1171FCAB1B111ECBA7F614FC4F9AE02.roa (hash: 5pc4Fgf96yhJHg1dXqyOkvTiTCFOmyYqtcguriQDwlE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9185D34/DBA87858E6A011EAA8544B43C4F9AE02/nsEhbSVkFkA8tcU-c0VTD4MnLN0.crl rsync://rpki.apnic.net/member_repository/A9185D34/DBA87858E6A011EAA8544B43C4F9AE02/nsEhbSVkFkA8tcU-c0VTD4MnLN0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nsEhbSVkFkA8tcU-c0VTD4MnLN0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Apr 2025 18:24:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2043 (0x7fb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9185D34, serialNumber=9EC1216D256416403CB5C53E7345530F83272CDD Validity Not Before: Apr 18 21:04:15 2025 GMT Not After : Apr 25 21:04:15 2025 GMT Subject: CN=6802be50-f1b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:92:72:bb:45:40:43:c1:8c:d6:22:df:f5:fe: 64:15:92:92:ff:a1:47:f6:99:1b:a5:01:6c:94:d8: f4:a6:9d:04:2d:9c:7e:fd:02:89:55:f6:d3:cc:f3: df:76:4d:06:99:fe:d5:a3:66:b9:21:d0:e1:58:df: 0a:b0:70:45:5d:c5:07:34:d9:af:71:f5:2d:f4:98: 8e:ee:1f:50:07:c5:c5:5c:41:ed:91:87:13:da:ed: 78:18:2d:5d:c0:7a:9a:84:e2:92:4c:df:60:57:a8: 6c:ac:44:df:82:8b:e1:8c:a5:2b:8c:d8:33:e9:d7: 3d:37:88:5f:d7:31:f8:f9:71:5c:65:72:fb:e2:43: 17:80:c1:ea:79:93:0a:ad:4d:f4:e6:12:f0:84:6f: 35:5b:9e:da:05:7e:60:2a:0e:c2:e6:9f:38:32:af: e6:4a:e6:26:ee:20:da:60:6f:2a:f2:c2:bd:77:a0: 5a:e4:af:8d:b3:32:4b:80:a6:27:f2:53:35:1f:0f: 92:2e:6e:7b:e9:c7:dd:f4:89:94:a3:85:75:18:46: ae:92:af:1d:d0:df:85:02:16:13:c2:7d:fd:60:3c: 6e:fd:77:09:94:bd:74:b6:04:36:61:ce:8c:32:b3: 6a:31:b0:24:36:ab:cc:27:8f:65:23:6f:24:d1:3a: 99:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:39:6B:1C:A9:21:45:DD:DE:DA:2A:DF:A2:A5:0B:3F:86:32:F4:4C X509v3 Authority Key Identifier: keyid:9E:C1:21:6D:25:64:16:40:3C:B5:C5:3E:73:45:53:0F:83:27:2C:DD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9185D34/DBA87858E6A011EAA8544B43C4F9AE02/nsEhbSVkFkA8tcU-c0VTD4MnLN0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nsEhbSVkFkA8tcU-c0VTD4MnLN0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9185D34/DBA87858E6A011EAA8544B43C4F9AE02/nsEhbSVkFkA8tcU-c0VTD4MnLN0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 61:34:42:21:71:2c:29:cf:e3:2c:e0:43:c4:8f:78:7b:f7:b2: 50:1a:49:99:e7:28:4b:60:03:89:d9:5b:18:9a:f3:29:27:22: a4:dc:8b:26:26:bb:30:c9:60:94:34:a4:9c:9d:bb:1b:8a:3d: e5:eb:f5:6d:71:07:9c:28:05:ce:ce:95:c9:31:54:b2:4d:02: 03:c1:c7:ab:e5:cd:54:20:e2:f2:ad:44:c2:32:37:f9:8b:d4: 46:a1:4d:0a:fa:f5:44:9f:90:f2:bd:54:ce:c5:c7:aa:c5:24: af:fe:28:f5:9c:29:21:97:c2:76:e6:f2:61:8c:b2:95:89:7e: e5:6c:fb:5e:43:e7:01:1b:3a:85:fe:cb:5d:40:ea:67:4a:90: 49:cd:eb:d2:52:42:bf:47:1e:8a:9c:76:a3:de:5c:06:4f:31: 35:f9:ae:d6:41:d0:01:18:66:3e:66:e8:0b:79:24:d3:dd:15: a9:49:b0:61:18:94:ca:ef:ac:06:8d:4f:a9:ad:d4:1f:4c:a0: 4d:99:4e:84:15:6e:7d:6b:e7:cf:86:9d:56:1b:d3:ce:b1:6b: 4b:b0:19:3c:2f:da:7d:1c:b7:61:e8:4f:b4:73:44:7f:48:9c: 29:6d:a3:33:69:e5:42:dd:76:14:64:d0:0a:8a:1c:35:21:5b: 17:b2:14:dc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB/swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODVEMzQxMTAvBgNVBAUTKDlFQzEyMTZEMjU2NDE2NDAzQ0I1QzUzRTczNDU1MzBG ODMyNzJDREQwHhcNMjUwNDE4MjEwNDE1WhcNMjUwNDI1MjEwNDE1WjAYMRYwFAYD VQQDEw02ODAyYmU1MC1mMWI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy5Jyu0VAQ8GM1iLf9f5kFZKS/6FH9pkbpQFslNj0pp0ELZx+/QKJVfbTzPPf dk0Gmf7Vo2a5IdDhWN8KsHBFXcUHNNmvcfUt9JiO7h9QB8XFXEHtkYcT2u14GC1d wHqahOKSTN9gV6hsrETfgovhjKUrjNgz6dc9N4hf1zH4+XFcZXL74kMXgMHqeZMK rU305hLwhG81W57aBX5gKg7C5p84Mq/mSuYm7iDaYG8q8sK9d6Ba5K+NszJLgKYn 8lM1Hw+SLm576cfd9ImUo4V1GEaukq8d0N+FAhYTwn39YDxu/XcJlL10tgQ2Yc6M MrNqMbAkNqvMJ49lI28k0TqZewIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL05axyp IUXd3toq36KlCz+GMvRMMB8GA1UdIwQYMBaAFJ7BIW0lZBZAPLXFPnNFUw+DJyzd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NUQzNC9EQkE4Nzg1OEU2 QTAxMUVBQTg1NDRCNDNDNEY5QUUwMi9uc0VoYlNWa0ZrQTh0Y1UtYzBWVEQ0TW5M TjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25zRWhiU1ZrRmtBOHRjVS1jMFZURDRNbkxOMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NUQzNC9EQkE4Nzg1OEU2QTAxMUVBQTg1NDRCNDNDNEY5QUUwMi9uc0VoYlNWa0Zr QTh0Y1UtYzBWVEQ0TW5MTjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBhNEIhcSwpz+Ms4EPEj3h797JQGkmZ5yhLYAOJ2VsYmvMpJyKk3Ism JrswyWCUNKScnbsbij3l6/VtcQecKAXOzpXJMVSyTQIDwcer5c1UIOLyrUTCMjf5 i9RGoU0K+vVEn5DyvVTOxceqxSSv/ij1nCkhl8J25vJhjLKViX7lbPteQ+cBGzqF /stdQOpnSpBJzevSUkK/Rx6KnHaj3lwGTzE1+a7WQdABGGY+ZugLeSTT3RWpSbBh GJTK76wGjU+prdQfTKBNmU6EFW59a+fPhp1WG9POsWtLsBk8L9p9HLdh6E+0c0R/ SJwpbaMzaeVC3XYUZNAKihw1IVsXshTc -----END CERTIFICATE-----Generated at Sat Apr 19 02:06:39 2025 by rpki-client