$ rpki-client -vvf rpki.apnic.net/member_repository/A9130F21/8517FB08141311F08F1A1D73C4F9AE02/cNJgHLDQ-k-cXw4Chti2r9kjWgY.mft File: cNJgHLDQ-k-cXw4Chti2r9kjWgY.mft (raw, json) Hash identifier: F3JMamdpSKnmjXvI2J+HAVxm4VMhJn49qciH514taLc= Subject key identifier: EA:42:CA:C1:C9:E9:8E:13:1F:76:19:BB:E8:DE:AD:1E:B9:DF:62:05 Authority key identifier: 70:D2:60:1C:B0:D0:FA:4F:9C:5F:0E:02:86:D8:B6:AF:D9:23:5A:06 Certificate issuer: /CN=A9130F21/serialNumber=70D2601CB0D0FA4F9C5F0E0286D8B6AFD9235A06 Certificate serial: 1C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cNJgHLDQ-k-cXw4Chti2r9kjWgY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9130F21/8517FB08141311F08F1A1D73C4F9AE02/cNJgHLDQ-k-cXw4Chti2r9kjWgY.mft Manifest number: 1B Signing time: Sat 31 May 2025 07:29:21 +0000 Manifest this update: Sat 31 May 2025 07:29:20 +0000 Manifest next update: Sat 07 Jun 2025 07:29:20 +0000 Files and hashes: 1: cNJgHLDQ-k-cXw4Chti2r9kjWgY.crl (hash: VQG7Lg8OLHa9poWRrENDF4eT5+ee6LNbQrwdsmoEElI=) 2: 42CFB44C141411F0BAD16274C4F9AE02.roa (hash: NvkrBL0iNWC0KsiDXy6BO+nae3k0qk/y4fPT3v4Fzd4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9130F21/8517FB08141311F08F1A1D73C4F9AE02/cNJgHLDQ-k-cXw4Chti2r9kjWgY.crl rsync://rpki.apnic.net/member_repository/A9130F21/8517FB08141311F08F1A1D73C4F9AE02/cNJgHLDQ-k-cXw4Chti2r9kjWgY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cNJgHLDQ-k-cXw4Chti2r9kjWgY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 07:29:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28 (0x1c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9130F21, serialNumber=70D2601CB0D0FA4F9C5F0E0286D8B6AFD9235A06 Validity Not Before: May 31 07:29:20 2025 GMT Not After : Jun 7 07:29:20 2025 GMT Subject: CN=683aafd0-d44a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:20:96:6d:8f:6f:2a:e4:27:fd:69:2a:e6:b2: 96:03:18:7b:55:26:92:93:58:0c:2d:8e:a9:37:1b: 8a:a4:b0:45:1a:92:f6:1c:9d:e7:cf:fe:d9:8f:de: bf:52:c1:42:75:fc:24:cd:bd:d8:7f:3f:f8:41:9a: 1b:74:f6:c3:39:51:d3:d6:e0:c7:47:87:95:48:94: ff:6d:12:cd:27:14:aa:11:29:0d:a1:76:a6:ac:9b: a0:c1:18:2f:15:01:5b:3f:a0:37:36:a7:ba:30:a7: 76:ad:39:15:b9:73:d1:6a:c4:f5:75:b8:e6:71:27: 0e:23:dc:ed:28:ed:1d:25:55:f2:28:39:5c:b2:aa: 8f:33:a1:0f:fa:32:d5:f7:41:cf:5c:de:6c:43:bb: f5:96:4a:26:ed:9d:5a:a8:51:28:1f:63:a6:df:5f: 28:b5:4c:57:ef:e4:49:38:77:15:ac:4a:1c:23:22: 8d:56:d1:40:b9:de:c2:78:d7:44:9d:01:0f:b0:71: 3e:f8:ca:5e:96:e6:f2:8d:a5:02:d4:c0:53:97:1d: 1d:ce:8c:5f:1c:b7:0d:c8:b2:f7:21:7f:1c:a7:b6: da:d6:45:6f:18:f8:17:2e:a1:c3:ee:fa:b4:b8:76: bc:2d:f0:30:d2:c8:fe:ee:0d:95:26:bf:23:10:61: a6:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:42:CA:C1:C9:E9:8E:13:1F:76:19:BB:E8:DE:AD:1E:B9:DF:62:05 X509v3 Authority Key Identifier: keyid:70:D2:60:1C:B0:D0:FA:4F:9C:5F:0E:02:86:D8:B6:AF:D9:23:5A:06 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9130F21/8517FB08141311F08F1A1D73C4F9AE02/cNJgHLDQ-k-cXw4Chti2r9kjWgY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cNJgHLDQ-k-cXw4Chti2r9kjWgY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9130F21/8517FB08141311F08F1A1D73C4F9AE02/cNJgHLDQ-k-cXw4Chti2r9kjWgY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 83:a7:9c:92:5c:29:1d:d8:59:cc:20:bb:80:a0:22:4d:f2:9b: 51:92:d4:44:ed:92:af:66:45:e5:7b:8f:9b:54:19:9f:90:11: 00:88:f9:c6:5f:24:a1:34:d7:59:5d:1f:f8:f8:94:f5:9e:dc: 44:27:d7:07:00:85:b6:f5:2d:79:a7:3a:3d:0c:dc:38:23:b5: 56:6c:07:73:a5:14:ce:20:9d:2d:de:22:d0:4f:e6:25:25:10: 29:6e:88:47:69:4c:26:50:dd:d6:b0:2c:5c:82:eb:30:9f:73: 07:34:9c:36:e2:1b:5f:7f:48:40:2f:5c:eb:99:74:83:52:aa: a5:07:e0:02:8a:a4:4f:f2:16:79:aa:19:ee:0b:7d:24:92:de: 12:86:33:a1:95:fa:9b:91:bf:8a:19:8c:12:00:5d:76:cd:9b: b5:e9:cd:87:d6:9a:e0:17:3f:e9:25:1e:5c:75:4b:ec:13:18: ee:d0:47:08:69:3c:6a:a4:f6:cd:01:2c:76:49:0d:f0:54:9a: 23:fe:e1:61:79:fa:63:fe:f6:cd:77:ba:42:b9:71:6f:25:a1: ca:dc:e4:55:12:be:3c:28:94:7d:d1:2a:08:c3:18:f8:ef:84: d4:a3:6d:c2:85:d4:50:06:12:08:54:a5:08:43:05:e8:01:57: 15:82:64:39 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBHDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz MEYyMTExMC8GA1UEBRMoNzBEMjYwMUNCMEQwRkE0RjlDNUYwRTAyODZEOEI2QUZE OTIzNUEwNjAeFw0yNTA1MzEwNzI5MjBaFw0yNTA2MDcwNzI5MjBaMBgxFjAUBgNV BAMTDTY4M2FhZmQwLWQ0NGEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDKIJZtj28q5Cf9aSrmspYDGHtVJpKTWAwtjqk3G4qksEUakvYcnefP/tmP3r9S wUJ1/CTNvdh/P/hBmht09sM5UdPW4MdHh5VIlP9tEs0nFKoRKQ2hdqasm6DBGC8V AVs/oDc2p7owp3atORW5c9FqxPV1uOZxJw4j3O0o7R0lVfIoOVyyqo8zoQ/6MtX3 Qc9c3mxDu/WWSibtnVqoUSgfY6bfXyi1TFfv5Ek4dxWsShwjIo1W0UC53sJ410Sd AQ+wcT74yl6W5vKNpQLUwFOXHR3OjF8ctw3IsvchfxynttrWRW8Y+BcuocPu+rS4 drwt8DDSyP7uDZUmvyMQYaYRAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU6kLKwcnp jhMfdhm76N6tHrnfYgUwHwYDVR0jBBgwFoAUcNJgHLDQ+k+cXw4Chti2r9kjWgYw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTMwRjIxLzg1MTdGQjA4MTQx MzExRjA4RjFBMUQ3M0M0RjlBRTAyL2NOSmdITERRLWstY1h3NENodGkycjlraldn WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvY05KZ0hMRFEtay1jWHc0Q2h0aTJyOWtqV2dZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTMw RjIxLzg1MTdGQjA4MTQxMzExRjA4RjFBMUQ3M0M0RjlBRTAyL2NOSmdITERRLWst Y1h3NENodGkycjlraldnWS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAIOnnJJcKR3YWcwgu4CgIk3ym1GS1ETtkq9mReV7j5tUGZ+QEQCI+cZf JKE011ldH/j4lPWe3EQn1wcAhbb1LXmnOj0M3DgjtVZsB3OlFM4gnS3eItBP5iUl ECluiEdpTCZQ3dawLFyC6zCfcwc0nDbiG19/SEAvXOuZdINSqqUH4AKKpE/yFnmq Ge4LfSSS3hKGM6GV+puRv4oZjBIAXXbNm7XpzYfWmuAXP+klHlx1S+wTGO7QRwhp PGqk9s0BLHZJDfBUmiP+4WF5+mP+9s13ukK5cW8locrc5FUSvjwolH3RKgjDGPjv hNSjbcKF1FAGEghUpQhDBegBVxWCZDk= -----END CERTIFICATE-----Generated at Sat May 31 15:47:00 2025 by rpki-client