$ rpki-client -vvf rpki.apnic.net/member_repository/A9123918/8EE71486B6C411EFB10EDE58C4F9AE02/ecf8XRpe7wspjgByMmq3Noa9_ng.mft File: ecf8XRpe7wspjgByMmq3Noa9_ng.mft (raw, json) Hash identifier: Uau41RsdYdbdPfvM4yTO6aDvZDUse/Bvfli5OnMxAYE= Subject key identifier: C8:77:5A:38:3A:BD:15:C8:96:2B:D7:00:C1:6C:63:55:DE:78:A2:31 Authority key identifier: 79:C7:FC:5D:1A:5E:EF:0B:29:8E:00:72:32:6A:B7:36:86:BD:FE:78 Certificate issuer: /CN=A9123918/serialNumber=79C7FC5D1A5EEF0B298E0072326AB73686BDFE78 Certificate serial: 5D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ecf8XRpe7wspjgByMmq3Noa9_ng.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9123918/8EE71486B6C411EFB10EDE58C4F9AE02/ecf8XRpe7wspjgByMmq3Noa9_ng.mft Manifest number: 5B Signing time: Sat 31 May 2025 06:45:22 +0000 Manifest this update: Sat 31 May 2025 06:45:22 +0000 Manifest next update: Sat 07 Jun 2025 06:45:22 +0000 Files and hashes: 1: ecf8XRpe7wspjgByMmq3Noa9_ng.crl (hash: m82+RQOvBYo7KQYEjnL9vPwIPkQiXWMnHTLurn2DwkA=) 2: AD3C9B54BE2611EFA4133323C4F9AE02.roa (hash: 2/xqAVW2RjqNg3GXYQ9uSs72OTWvi6aXWMtqLBm8vdk=) 3: 345F7BDCF80C11EF831DA737C4F9AE02.roa (hash: dqTwEXk6/WsKatxBnEyYDrfeHsARE7OU6TqF9rX2NCc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9123918/8EE71486B6C411EFB10EDE58C4F9AE02/ecf8XRpe7wspjgByMmq3Noa9_ng.crl rsync://rpki.apnic.net/member_repository/A9123918/8EE71486B6C411EFB10EDE58C4F9AE02/ecf8XRpe7wspjgByMmq3Noa9_ng.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ecf8XRpe7wspjgByMmq3Noa9_ng.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 06:45:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 93 (0x5d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9123918, serialNumber=79C7FC5D1A5EEF0B298E0072326AB73686BDFE78 Validity Not Before: May 31 06:45:22 2025 GMT Not After : Jun 7 06:45:22 2025 GMT Subject: CN=683aa582-4d49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:09:32:b0:94:54:fc:ea:a4:c6:85:2e:4e:6a: 81:53:06:35:9b:8a:ae:ee:d1:32:f4:15:2c:66:89: c9:98:6f:40:40:1d:44:0b:c2:91:b9:1c:b2:a3:49: c9:dc:08:af:41:92:02:79:c5:a2:60:1e:aa:99:86: bc:a0:23:f9:9f:07:a8:35:58:6e:84:b8:b8:2e:20: 6a:b1:9f:2c:04:2c:e6:f7:8d:29:03:7b:e2:cf:1d: cd:67:a4:10:4c:44:82:51:b2:29:ee:7a:aa:72:ba: aa:cf:5a:cc:be:2b:21:2b:5a:43:3d:51:b0:77:24: 38:22:79:99:ab:f2:d2:39:6d:04:ce:23:af:90:64: b7:cb:23:f3:35:e8:4a:84:11:9f:2c:cf:58:77:8f: ca:b5:02:38:77:84:8f:14:ee:07:37:5c:3c:d1:1c: b3:b1:38:83:37:53:ba:af:30:f4:ce:cb:df:54:02: 62:bb:a3:76:c0:47:25:81:12:36:1e:e2:16:c9:62: df:a4:79:ef:a2:7f:45:b7:a8:b3:5a:a0:9e:b7:dc: 27:9f:4f:40:6b:cb:b5:c3:93:c9:37:99:f0:4e:ce: d6:27:eb:9e:67:c1:df:eb:78:70:91:d4:87:d6:08: 9c:a1:29:fc:9b:13:bc:0b:0a:75:9e:cd:47:3b:12: 35:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:77:5A:38:3A:BD:15:C8:96:2B:D7:00:C1:6C:63:55:DE:78:A2:31 X509v3 Authority Key Identifier: keyid:79:C7:FC:5D:1A:5E:EF:0B:29:8E:00:72:32:6A:B7:36:86:BD:FE:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9123918/8EE71486B6C411EFB10EDE58C4F9AE02/ecf8XRpe7wspjgByMmq3Noa9_ng.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ecf8XRpe7wspjgByMmq3Noa9_ng.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9123918/8EE71486B6C411EFB10EDE58C4F9AE02/ecf8XRpe7wspjgByMmq3Noa9_ng.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 32:d1:cd:44:e9:ca:ed:79:ae:79:33:f3:18:fe:84:45:4e:5e: 27:0c:98:e9:69:f9:44:ff:16:4c:bd:2d:9a:bb:cd:4c:96:88: 83:f4:a4:15:9e:92:02:3b:38:d2:8d:d7:25:74:3b:f2:df:5f: c4:d7:d3:77:0d:3b:f0:39:70:3c:03:ce:90:8e:bf:8f:14:78: 13:73:51:1b:11:85:6e:68:96:47:b1:0e:0f:4e:5f:88:b0:bb: d0:98:d6:1f:d1:b0:b3:2b:78:88:c1:3a:26:ab:a6:fd:bc:2e: 8f:93:8e:02:9a:19:d6:86:f6:a3:22:89:39:58:c7:8a:f1:59: 56:85:de:47:06:b6:dc:a6:11:2e:30:a8:5b:e5:5e:bb:aa:1e: 05:f5:14:f9:8c:a7:1a:74:b5:3a:55:fa:90:db:42:75:60:0b: d6:3b:8a:6d:38:f2:80:7b:9e:c9:38:6b:88:6f:e8:62:61:7e: bf:96:74:b1:e9:64:2b:33:2a:8c:85:16:35:bd:3c:4a:d9:aa: 6e:cb:6b:10:70:5d:f3:5c:70:de:22:77:7a:28:1d:f3:0b:80: eb:28:8f:3d:93:5f:6c:ea:02:78:63:c4:23:8a:e1:c4:48:9e: 75:ad:95:94:cd:e3:c1:21:c5:60:22:21:a0:54:8b:7b:2e:cd: 5a:24:d3:51 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBXTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy MzkxODExMC8GA1UEBRMoNzlDN0ZDNUQxQTVFRUYwQjI5OEUwMDcyMzI2QUI3MzY4 NkJERkU3ODAeFw0yNTA1MzEwNjQ1MjJaFw0yNTA2MDcwNjQ1MjJaMBgxFjAUBgNV BAMTDTY4M2FhNTgyLTRkNDkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCwCTKwlFT86qTGhS5OaoFTBjWbiq7u0TL0FSxmicmYb0BAHUQLwpG5HLKjScnc CK9BkgJ5xaJgHqqZhrygI/mfB6g1WG6EuLguIGqxnywELOb3jSkDe+LPHc1npBBM RIJRsinueqpyuqrPWsy+KyErWkM9UbB3JDgieZmr8tI5bQTOI6+QZLfLI/M16EqE EZ8sz1h3j8q1Ajh3hI8U7gc3XDzRHLOxOIM3U7qvMPTOy99UAmK7o3bARyWBEjYe 4hbJYt+kee+if0W3qLNaoJ633CefT0Bry7XDk8k3mfBOztYn655nwd/reHCR1IfW CJyhKfybE7wLCnWezUc7EjWPAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUyHdaODq9 FciWK9cAwWxjVd54ojEwHwYDVR0jBBgwFoAUecf8XRpe7wspjgByMmq3Noa9/ngw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTIzOTE4LzhFRTcxNDg2QjZD NDExRUZCMTBFREU1OEM0RjlBRTAyL2VjZjhYUnBlN3dzcGpnQnlNbXEzTm9hOV9u Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvZWNmOFhScGU3d3NwamdCeU1tcTNOb2E5X25nLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTIz OTE4LzhFRTcxNDg2QjZDNDExRUZCMTBFREU1OEM0RjlBRTAyL2VjZjhYUnBlN3dz cGpnQnlNbXEzTm9hOV9uZy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBADLRzUTpyu15rnkz8xj+hEVOXicMmOlp+UT/Fky9LZq7zUyWiIP0pBWe kgI7ONKN1yV0O/LfX8TX03cNO/A5cDwDzpCOv48UeBNzURsRhW5olkexDg9OX4iw u9CY1h/RsLMreIjBOiarpv28Lo+TjgKaGdaG9qMiiTlYx4rxWVaF3kcGttymES4w qFvlXruqHgX1FPmMpxp0tTpV+pDbQnVgC9Y7im048oB7nsk4a4hv6GJhfr+WdLHp ZCszKoyFFjW9PErZqm7LaxBwXfNccN4id3ooHfMLgOsojz2TX2zqAnhjxCOK4cRI nnWtlZTN48EhxWAiIaBUi3suzVok01E= -----END CERTIFICATE-----Generated at Sat May 31 16:56:15 2025 by rpki-client