$ rpki-client -vvf rpki.apnic.net/member_repository/A919D6BB/3AB0F76AFB6211E9A82B394AC4F9AE02/N1NyjlTwmkhRPf_S-nGARBH82yA.mft File: N1NyjlTwmkhRPf_S-nGARBH82yA.mft (raw, json) Hash identifier: I2p9j8jd8RlNeGIUjw6JmlVlcl6eDUwzDNAmVYW7Ruw= Subject key identifier: 51:D5:4C:B9:26:4D:BE:00:F5:7B:85:43:15:67:23:D6:58:86:2C:34 Authority key identifier: 37:53:72:8E:54:F0:9A:48:51:3D:FF:D2:FA:71:80:44:11:FC:DB:20 Certificate issuer: /CN=A919D6BB/serialNumber=3753728E54F09A48513DFFD2FA71804411FCDB20 Certificate serial: 0C7C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N1NyjlTwmkhRPf_S-nGARBH82yA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919D6BB/3AB0F76AFB6211E9A82B394AC4F9AE02/N1NyjlTwmkhRPf_S-nGARBH82yA.mft Manifest number: 0C68 Signing time: Sun 20 Apr 2025 18:08:19 +0000 Manifest this update: Sun 20 Apr 2025 18:08:18 +0000 Manifest next update: Sun 27 Apr 2025 18:08:18 +0000 Files and hashes: 1: N1NyjlTwmkhRPf_S-nGARBH82yA.crl (hash: RRPBr5Nkrp4P5lTnm3O2Lht1jsy6s49SVSkjwbSMyrc=) 2: CA39F7F0FB6311E999847F4DC4F9AE02.roa (hash: vr09dbtEy2Fgutt0NtzNOJlZbFaSyEOb3HlcebNKKlM=) 3: B647F704090C11EFB666C967C4F9AE02.roa (hash: C/GK3qZr1DIfgcq87pT0/h+xz6IT2+9Jo03Tvm4UR1g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919D6BB/3AB0F76AFB6211E9A82B394AC4F9AE02/N1NyjlTwmkhRPf_S-nGARBH82yA.crl rsync://rpki.apnic.net/member_repository/A919D6BB/3AB0F76AFB6211E9A82B394AC4F9AE02/N1NyjlTwmkhRPf_S-nGARBH82yA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N1NyjlTwmkhRPf_S-nGARBH82yA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 18:08:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3196 (0xc7c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919D6BB, serialNumber=3753728E54F09A48513DFFD2FA71804411FCDB20 Validity Not Before: Apr 20 18:08:18 2025 GMT Not After : Apr 27 18:08:18 2025 GMT Subject: CN=68053812-ad78 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:e1:f0:ec:2c:6a:07:b3:2a:23:a4:81:f9:69: b5:b9:4f:e4:b7:ff:7e:4d:ac:b1:f8:1e:46:f7:c3: 04:5f:ec:ca:75:ec:e2:7f:88:02:29:b4:8e:20:8a: ed:5d:1a:63:2f:03:bc:1a:58:ea:a2:b0:9c:0d:ac: 3f:4e:fc:75:be:dd:86:29:f0:fc:c7:d3:9f:28:3f: e0:f2:e2:6f:da:84:31:45:69:11:25:fa:3f:ab:4d: 5f:65:81:d4:6f:c1:94:57:bd:e7:c5:b5:44:ef:73: 51:dd:ca:50:3a:fa:8c:02:c1:75:ca:3c:6c:75:b2: 94:64:94:e6:c8:04:bd:65:cd:18:bb:6e:c1:65:54: 9d:b9:f5:2e:54:6a:10:3e:70:ff:5f:89:95:2d:2c: 9d:52:a5:a5:e6:a2:81:cb:83:d5:2f:54:bb:88:cd: 7b:d2:b9:2b:a7:69:09:b1:b8:3e:c8:b6:8d:e0:ba: fa:ae:5f:b5:89:d4:bb:00:b1:f9:e0:3c:7f:9b:1a: 3a:0f:e9:da:55:6a:13:92:43:c3:a5:30:cf:20:1e: 79:8d:79:43:8f:33:ef:59:e5:83:68:53:5d:cb:09: 85:a8:a6:02:1c:3d:3d:60:d1:a1:ea:da:aa:eb:ff: 39:69:9c:d6:7f:61:c0:74:a5:be:2c:07:db:a9:90: 36:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:D5:4C:B9:26:4D:BE:00:F5:7B:85:43:15:67:23:D6:58:86:2C:34 X509v3 Authority Key Identifier: keyid:37:53:72:8E:54:F0:9A:48:51:3D:FF:D2:FA:71:80:44:11:FC:DB:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919D6BB/3AB0F76AFB6211E9A82B394AC4F9AE02/N1NyjlTwmkhRPf_S-nGARBH82yA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N1NyjlTwmkhRPf_S-nGARBH82yA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919D6BB/3AB0F76AFB6211E9A82B394AC4F9AE02/N1NyjlTwmkhRPf_S-nGARBH82yA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6c:3e:2e:5b:f0:60:74:90:a5:08:1a:50:94:77:3d:82:79:3c: a6:bc:37:dd:66:e4:92:9d:0b:c6:1d:54:70:40:06:cb:8b:f9: 82:8d:74:7c:75:51:f5:51:0e:15:65:14:3d:78:8b:28:e5:57: 39:83:5b:29:27:b0:0c:08:f2:15:de:d1:31:65:ea:1c:36:62: ec:1b:52:e2:aa:b8:8f:a1:07:88:da:8b:11:35:b1:11:da:c7: 96:98:5d:ac:0f:4a:41:0e:23:e7:d6:db:e3:12:df:04:20:1f: f4:23:15:32:3c:b4:88:74:b9:07:fc:d1:22:df:21:e4:64:dc: 2e:32:ad:f2:54:aa:31:c3:1f:18:4c:9c:1c:cc:64:52:fb:1f: eb:32:2d:24:1e:4d:ad:88:9e:39:b0:ce:9f:37:94:9a:29:bb: 84:7d:cc:ad:ba:c3:36:6d:58:fe:b6:09:d1:e2:c6:73:7a:11: 86:88:29:7b:17:89:a6:bf:0c:54:0a:82:94:82:ba:ea:8c:13: 39:04:ea:50:dd:c9:c0:f8:6d:67:da:27:f6:59:79:68:1d:d4: f0:3d:8c:64:49:23:96:80:b5:c9:0c:be:3d:d0:78:c7:4a:29: 8e:1e:e0:6a:b4:80:3a:2f:d6:46:a0:68:af:6e:ac:f8:7d:56: 68:19:ca:77 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDHwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUQ2QkIxMTAvBgNVBAUTKDM3NTM3MjhFNTRGMDlBNDg1MTNERkZEMkZBNzE4MDQ0 MTFGQ0RCMjAwHhcNMjUwNDIwMTgwODE4WhcNMjUwNDI3MTgwODE4WjAYMRYwFAYD VQQDEw02ODA1MzgxMi1hZDc4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw+Hw7CxqB7MqI6SB+Wm1uU/kt/9+Tayx+B5G98MEX+zKdezif4gCKbSOIIrt XRpjLwO8GljqorCcDaw/Tvx1vt2GKfD8x9OfKD/g8uJv2oQxRWkRJfo/q01fZYHU b8GUV73nxbVE73NR3cpQOvqMAsF1yjxsdbKUZJTmyAS9Zc0Yu27BZVSdufUuVGoQ PnD/X4mVLSydUqWl5qKBy4PVL1S7iM170rkrp2kJsbg+yLaN4Lr6rl+1idS7ALH5 4Dx/mxo6D+naVWoTkkPDpTDPIB55jXlDjzPvWeWDaFNdywmFqKYCHD09YNGh6tqq 6/85aZzWf2HAdKW+LAfbqZA2VwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFHVTLkm Tb4A9XuFQxVnI9ZYhiw0MB8GA1UdIwQYMBaAFDdTco5U8JpIUT3/0vpxgEQR/Nsg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RDZCQi8zQUIwRjc2QUZC NjIxMUU5QTgyQjM5NEFDNEY5QUUwMi9OMU55amxUd21raFJQZl9TLW5HQVJCSDgy eUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL04xTnlqbFR3bWtoUlBmX1MtbkdBUkJIODJ5QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RDZCQi8zQUIwRjc2QUZCNjIxMUU5QTgyQjM5NEFDNEY5QUUwMi9OMU55amxUd21r aFJQZl9TLW5HQVJCSDgyeUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBsPi5b8GB0kKUIGlCUdz2CeTymvDfdZuSSnQvGHVRwQAbLi/mCjXR8 dVH1UQ4VZRQ9eIso5Vc5g1spJ7AMCPIV3tExZeocNmLsG1LiqriPoQeI2osRNbER 2seWmF2sD0pBDiPn1tvjEt8EIB/0IxUyPLSIdLkH/NEi3yHkZNwuMq3yVKoxwx8Y TJwczGRS+x/rMi0kHk2tiJ45sM6fN5SaKbuEfcytusM2bVj+tgnR4sZzehGGiCl7 F4mmvwxUCoKUgrrqjBM5BOpQ3cnA+G1n2if2WXloHdTwPYxkSSOWgLXJDL490HjH SimOHuBqtIA6L9ZGoGivbqz4fVZoGcp3 -----END CERTIFICATE-----Generated at Tue Apr 22 20:00:45 2025 by rpki-client