$ rpki-client -vvf rpki.apnic.net/member_repository/A919899D/F15787B4F68211EB8E037F7EC4F9AE02/nLnwNCujTijkVM2SOEk0ZgWxxjI.mft File: nLnwNCujTijkVM2SOEk0ZgWxxjI.mft (raw, json) Hash identifier: 3pPovSwz9rvc8UuZLxPxIt8PvKrjw2bpYh6Snl2k+Qg= Subject key identifier: 44:AE:80:56:9E:09:B1:ED:4D:6E:57:28:67:6B:1B:8E:77:9B:D9:57 Authority key identifier: 9C:B9:F0:34:2B:A3:4E:28:E4:54:CD:92:38:49:34:66:05:B1:C6:32 Certificate issuer: /CN=A919899D/serialNumber=9CB9F0342BA34E28E454CD923849346605B1C632 Certificate serial: 0530 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nLnwNCujTijkVM2SOEk0ZgWxxjI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919899D/F15787B4F68211EB8E037F7EC4F9AE02/nLnwNCujTijkVM2SOEk0ZgWxxjI.mft Manifest number: 0528 Signing time: Sun 20 Apr 2025 23:10:22 +0000 Manifest this update: Sun 20 Apr 2025 23:10:21 +0000 Manifest next update: Sun 27 Apr 2025 23:10:21 +0000 Files and hashes: 1: nLnwNCujTijkVM2SOEk0ZgWxxjI.crl (hash: ScvZNfbKP7A9XEYUPjB4CNi+zdeH8Afth6IsnFDuxAs=) 2: 77465F12874511EEBEA58225C4F9AE02.roa (hash: EZ7XOZu8P3fYljWZEYYsh451lzcL+Hz2HibFDv/VLxc=) 3: A4331EC89E4911EEA1F8471AC4F9AE02.roa (hash: dojgMfaVkK8Ikxn0bp2yTuAA7toIIjYyBZcEBpuQu+E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919899D/F15787B4F68211EB8E037F7EC4F9AE02/nLnwNCujTijkVM2SOEk0ZgWxxjI.crl rsync://rpki.apnic.net/member_repository/A919899D/F15787B4F68211EB8E037F7EC4F9AE02/nLnwNCujTijkVM2SOEk0ZgWxxjI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nLnwNCujTijkVM2SOEk0ZgWxxjI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 23:10:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1328 (0x530) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919899D, serialNumber=9CB9F0342BA34E28E454CD923849346605B1C632 Validity Not Before: Apr 20 23:10:21 2025 GMT Not After : Apr 27 23:10:21 2025 GMT Subject: CN=68057ede-371d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:72:1b:67:fc:4d:90:ae:82:6c:a0:c5:15:90: 6c:ff:a4:c5:b2:3b:bb:17:53:b9:9e:f3:bb:a6:62: b1:15:a6:db:52:91:6b:3d:f9:35:6e:f2:ab:6b:0c: 98:e4:4a:ff:51:50:27:cf:87:0c:0f:a9:24:52:54: d3:b0:80:e7:11:be:66:ac:08:99:ef:e5:a7:ae:cc: d1:3e:8d:c3:5b:33:5e:79:41:a9:b9:e3:3c:ae:5d: 05:5c:fc:0d:64:7b:8d:06:cc:87:6d:6e:cc:a4:43: 53:e6:36:e3:3d:81:3f:e0:c7:29:61:d7:10:6d:5c: ac:29:00:cf:7d:48:28:86:13:65:c2:c3:e2:f9:fc: 39:f0:d4:39:00:af:36:ef:a1:c5:79:ed:f0:c9:dd: 2a:55:8b:52:29:37:fb:84:d0:26:a4:52:85:8d:0f: 49:e9:39:5c:04:b7:90:f9:b2:bb:df:19:f4:08:82: 86:78:92:c9:76:19:40:79:d4:ca:ab:e0:0f:5f:b7: 23:82:d2:22:49:ce:fa:10:7f:75:d0:32:e4:e9:6a: 10:4b:33:42:5a:0c:2a:ac:5f:4e:23:17:80:24:fb: 31:8f:6e:cf:a2:f1:dd:f9:92:99:f5:d5:9e:c6:7a: 0a:ee:a9:57:ba:8c:d0:97:c0:7a:5e:a6:6c:9b:8d: b0:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:AE:80:56:9E:09:B1:ED:4D:6E:57:28:67:6B:1B:8E:77:9B:D9:57 X509v3 Authority Key Identifier: keyid:9C:B9:F0:34:2B:A3:4E:28:E4:54:CD:92:38:49:34:66:05:B1:C6:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919899D/F15787B4F68211EB8E037F7EC4F9AE02/nLnwNCujTijkVM2SOEk0ZgWxxjI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nLnwNCujTijkVM2SOEk0ZgWxxjI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919899D/F15787B4F68211EB8E037F7EC4F9AE02/nLnwNCujTijkVM2SOEk0ZgWxxjI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6c:7d:4c:76:c9:a7:0e:8d:16:a7:e0:d8:b3:9a:27:ad:3e:08: 9a:3b:70:36:87:6a:73:7a:4b:dc:08:fb:b9:82:e9:9e:a8:08: 61:6b:de:e5:b7:96:d4:e6:19:2b:85:55:58:4c:c1:67:88:55: 1b:26:8f:7f:3e:1b:5a:f5:27:b1:2a:b9:7b:93:81:94:5b:0c: 5a:8f:7d:69:fa:76:2e:37:06:40:f1:49:00:fd:6d:76:3f:8b: 9a:51:5e:85:55:02:1c:ee:10:d2:52:78:62:52:2d:4a:54:17: 74:c9:06:ee:52:3e:e2:ba:8c:80:15:90:22:98:a6:66:85:d6: 01:70:79:4f:aa:0e:68:2d:8d:7e:20:ad:7b:f8:7f:f3:c1:2a: 57:f3:fc:4a:7b:32:d8:b2:8e:d5:e7:15:46:3b:e2:5d:7a:1f: 64:72:75:3a:79:66:9b:0f:d7:20:3c:7e:c9:b1:30:bc:68:d1: b6:e4:8c:d4:5e:a4:d4:70:51:04:ae:99:d1:e4:8e:09:e6:c1: ee:ff:c6:59:76:2e:d3:19:30:b1:d9:bf:d1:cb:aa:22:dd:6f: f8:55:64:7e:b4:48:72:d3:b4:20:36:8a:da:05:81:a5:f5:fb: 17:85:79:fe:88:b5:49:80:13:a9:07:3c:a7:02:23:8e:79:f2: 7b:be:2d:07 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBTAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTg5OUQxMTAvBgNVBAUTKDlDQjlGMDM0MkJBMzRFMjhFNDU0Q0Q5MjM4NDkzNDY2 MDVCMUM2MzIwHhcNMjUwNDIwMjMxMDIxWhcNMjUwNDI3MjMxMDIxWjAYMRYwFAYD VQQDEw02ODA1N2VkZS0zNzFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvnIbZ/xNkK6CbKDFFZBs/6TFsju7F1O5nvO7pmKxFabbUpFrPfk1bvKrawyY 5Er/UVAnz4cMD6kkUlTTsIDnEb5mrAiZ7+WnrszRPo3DWzNeeUGpueM8rl0FXPwN ZHuNBsyHbW7MpENT5jbjPYE/4McpYdcQbVysKQDPfUgohhNlwsPi+fw58NQ5AK82 76HFee3wyd0qVYtSKTf7hNAmpFKFjQ9J6TlcBLeQ+bK73xn0CIKGeJLJdhlAedTK q+APX7cjgtIiSc76EH910DLk6WoQSzNCWgwqrF9OIxeAJPsxj27PovHd+ZKZ9dWe xnoK7qlXuozQl8B6XqZsm42wkQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFESugFae CbHtTW5XKGdrG453m9lXMB8GA1UdIwQYMBaAFJy58DQro04o5FTNkjhJNGYFscYy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5ODk5RC9GMTU3ODdCNEY2 ODIxMUVCOEUwMzdGN0VDNEY5QUUwMi9uTG53TkN1alRpamtWTTJTT0VrMFpnV3h4 akkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25MbndOQ3VqVGlqa1ZNMlNPRWswWmdXeHhqSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 ODk5RC9GMTU3ODdCNEY2ODIxMUVCOEUwMzdGN0VDNEY5QUUwMi9uTG53TkN1alRp amtWTTJTT0VrMFpnV3h4akkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBsfUx2yacOjRan4NizmietPgiaO3A2h2pzekvcCPu5gumeqAhha97l t5bU5hkrhVVYTMFniFUbJo9/Phta9SexKrl7k4GUWwxaj31p+nYuNwZA8UkA/W12 P4uaUV6FVQIc7hDSUnhiUi1KVBd0yQbuUj7iuoyAFZAimKZmhdYBcHlPqg5oLY1+ IK17+H/zwSpX8/xKezLYso7V5xVGO+Jdeh9kcnU6eWabD9cgPH7JsTC8aNG25IzU XqTUcFEErpnR5I4J5sHu/8ZZdi7TGTCx2b/Ry6oi3W/4VWR+tEhy07QgNoraBYGl 9fsXhXn+iLVJgBOpBzynAiOOefJ7vi0H -----END CERTIFICATE-----Generated at Tue Apr 22 23:11:50 2025 by rpki-client