$ rpki-client -vvf rpki.apnic.net/member_repository/A918D5CF/98D0B4F87B1A11E88F3D0C14C4F9AE02/NwOTvGRg5S0PXgIdVS9YF0M-suc.mft File: NwOTvGRg5S0PXgIdVS9YF0M-suc.mft (raw, json) Hash identifier: Bl3B2n/c4poOhsqteylsNW5JK7CJyDF627YJJconapw= Subject key identifier: 1E:D1:83:B3:7F:44:B8:04:D9:48:6A:5E:16:58:AF:43:D2:0B:91:3A Authority key identifier: 37:03:93:BC:64:60:E5:2D:0F:5E:02:1D:55:2F:58:17:43:3E:B2:E7 Certificate issuer: /CN=A918D5CF/serialNumber=370393BC6460E52D0F5E021D552F5817433EB2E7 Certificate serial: 1400 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NwOTvGRg5S0PXgIdVS9YF0M-suc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918D5CF/98D0B4F87B1A11E88F3D0C14C4F9AE02/NwOTvGRg5S0PXgIdVS9YF0M-suc.mft Manifest number: 13F9 Signing time: Fri 04 Apr 2025 17:01:30 +0000 Manifest this update: Fri 04 Apr 2025 17:01:29 +0000 Manifest next update: Fri 11 Apr 2025 17:01:29 +0000 Files and hashes: 1: NwOTvGRg5S0PXgIdVS9YF0M-suc.crl (hash: rr7KI/oABCGPacMQ8/uNBt07N0Bk+O5BKvDlk/eVlT0=) 2: 0802DFC67B1C11E8BC732C17C4F9AE02.roa (hash: HvY8aLOLbIu6vAeI5+MTO3AgRFsW1gggDw/k0s0xJwI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918D5CF/98D0B4F87B1A11E88F3D0C14C4F9AE02/NwOTvGRg5S0PXgIdVS9YF0M-suc.crl rsync://rpki.apnic.net/member_repository/A918D5CF/98D0B4F87B1A11E88F3D0C14C4F9AE02/NwOTvGRg5S0PXgIdVS9YF0M-suc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NwOTvGRg5S0PXgIdVS9YF0M-suc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 17:01:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5120 (0x1400) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918D5CF Validity Not Before: Apr 4 17:01:29 2025 GMT Not After : Apr 11 17:01:29 2025 GMT Subject: CN=67f0106a-7730 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:e3:de:a6:5c:fa:2e:54:01:1a:6a:a8:11:58: 29:ae:60:a6:53:c8:7e:0a:f3:e0:b6:c3:bd:0b:b1: f8:1d:05:7e:50:67:4d:4b:0e:19:fb:08:1e:20:e6: 90:c5:b0:9c:96:c4:92:71:ee:6a:38:ea:6a:8f:af: b2:be:04:fe:94:2c:3b:10:a7:f6:e8:46:d2:4b:fa: a0:05:d3:4d:71:32:88:84:f3:52:19:2e:63:f6:07: b5:0b:01:f6:66:a3:ae:81:ff:4d:19:4b:d8:25:50: e1:79:4f:02:1a:c6:a1:08:61:bd:be:f6:55:9e:a2: 8e:3a:c3:88:02:43:5a:46:1a:9c:64:bf:e4:36:44: 9e:32:e0:09:94:bd:1f:30:23:12:2b:58:61:8a:16: f4:d0:42:b1:88:52:11:7f:07:ec:8d:0d:23:4b:4d: 6b:97:bc:db:f3:0e:5e:3c:78:02:a1:eb:46:86:ec: 55:bd:44:ed:d2:8f:17:03:5b:ec:a3:71:98:10:7d: 30:e7:c3:9b:06:5e:cd:0c:f5:6b:4a:29:04:13:cb: d2:34:58:03:0e:cb:a8:8e:2d:9e:bf:64:84:08:7f: 84:bb:d0:22:09:c6:98:ca:f6:58:64:87:51:dd:e5: a8:bb:4d:9d:a0:30:e3:76:c1:da:6f:10:38:a1:a8: 30:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:D1:83:B3:7F:44:B8:04:D9:48:6A:5E:16:58:AF:43:D2:0B:91:3A X509v3 Authority Key Identifier: keyid:37:03:93:BC:64:60:E5:2D:0F:5E:02:1D:55:2F:58:17:43:3E:B2:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918D5CF/98D0B4F87B1A11E88F3D0C14C4F9AE02/NwOTvGRg5S0PXgIdVS9YF0M-suc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NwOTvGRg5S0PXgIdVS9YF0M-suc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D5CF/98D0B4F87B1A11E88F3D0C14C4F9AE02/NwOTvGRg5S0PXgIdVS9YF0M-suc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 29:6a:ea:dc:1a:ec:d5:7f:ca:a7:67:db:cc:d6:b6:f4:77:53: 88:1a:a0:1a:19:0d:0c:e1:8f:ed:89:1b:c5:9d:63:9d:fc:76: 37:dc:eb:03:fd:d7:c8:07:8b:87:4c:9c:e2:f2:07:54:53:25: 46:13:52:ec:e4:3f:97:f3:99:e3:65:91:4c:31:08:3d:03:56: 0d:6d:c5:93:9d:cc:3c:e0:fe:66:84:e8:e9:fa:1c:c6:a4:bd: 7e:2d:14:3b:41:cf:7e:6c:30:84:8e:db:09:ab:e3:8f:3f:57: 0f:90:b7:34:6a:b3:80:c8:f0:e6:30:5b:65:98:77:da:c5:78: 0c:39:fa:c6:dc:42:ed:92:b9:fa:80:21:58:d9:d5:1f:c7:de: 78:de:14:a0:42:45:e9:6b:eb:b5:4d:34:cf:6d:ea:30:57:3b: a6:b7:a4:67:30:d1:42:13:fa:90:93:b0:dc:be:d0:88:3a:28: 42:77:46:0e:54:05:7a:98:ec:2e:75:9a:c8:bc:33:90:2d:67: 0a:5c:68:4c:fb:cc:d2:ce:23:81:7f:75:a9:ce:dc:41:35:8d: d1:0f:30:f7:50:bf:87:9b:2b:c2:d8:e2:93:86:4f:fa:b0:89: b5:6f:fc:98:7c:fd:f0:3c:83:4c:4f:03:81:e5:05:cc:d2:b4: e7:2e:53:0e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFAAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEQ1Q0YxMTAvBgNVBAUTKDM3MDM5M0JDNjQ2MEU1MkQwRjVFMDIxRDU1MkY1ODE3 NDMzRUIyRTcwHhcNMjUwNDA0MTcwMTI5WhcNMjUwNDExMTcwMTI5WjAYMRYwFAYD VQQDEw02N2YwMTA2YS03NzMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4OPeplz6LlQBGmqoEVgprmCmU8h+CvPgtsO9C7H4HQV+UGdNSw4Z+wgeIOaQ xbCclsSSce5qOOpqj6+yvgT+lCw7EKf26EbSS/qgBdNNcTKIhPNSGS5j9ge1CwH2 ZqOugf9NGUvYJVDheU8CGsahCGG9vvZVnqKOOsOIAkNaRhqcZL/kNkSeMuAJlL0f MCMSK1hhihb00EKxiFIRfwfsjQ0jS01rl7zb8w5ePHgCoetGhuxVvUTt0o8XA1vs o3GYEH0w58ObBl7NDPVrSikEE8vSNFgDDsuoji2ev2SECH+Eu9AiCcaYyvZYZIdR 3eWou02doDDjdsHabxA4oagwTQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB7Rg7N/ RLgE2UhqXhZYr0PSC5E6MB8GA1UdIwQYMBaAFDcDk7xkYOUtD14CHVUvWBdDPrLn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RDVDRi85OEQwQjRGODdC MUExMUU4OEYzRDBDMTRDNEY5QUUwMi9Od09UdkdSZzVTMFBYZ0lkVlM5WUYwTS1z dWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL053T1R2R1JnNVMwUFhnSWRWUzlZRjBNLXN1Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RDVDRi85OEQwQjRGODdCMUExMUU4OEYzRDBDMTRDNEY5QUUwMi9Od09UdkdSZzVT MFBYZ0lkVlM5WUYwTS1zdWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQApaurcGuzVf8qnZ9vM1rb0d1OIGqAaGQ0M4Y/tiRvFnWOd/HY33OsD /dfIB4uHTJzi8gdUUyVGE1Ls5D+X85njZZFMMQg9A1YNbcWTncw84P5mhOjp+hzG pL1+LRQ7Qc9+bDCEjtsJq+OPP1cPkLc0arOAyPDmMFtlmHfaxXgMOfrG3ELtkrn6 gCFY2dUfx9543hSgQkXpa+u1TTTPbeowVzumt6RnMNFCE/qQk7DcvtCIOihCd0YO VAV6mOwudZrIvDOQLWcKXGhM+8zSziOBf3WpztxBNY3RDzD3UL+HmyvC2OKThk/6 sIm1b/yYfP3wPINMTwOB5QXM0rTnLlMO -----END CERTIFICATE-----Generated at Sat Apr 5 17:27:45 2025 by rpki-client