$ rpki-client -vvf rpki.apnic.net/member_repository/A9134AD7/E37EC8E68F4E11E68EE7CE6EC4F9AE02/nAOc5JtXef24TeO2mPZ26EQjZnk.mft File: nAOc5JtXef24TeO2mPZ26EQjZnk.mft (raw, json) Hash identifier: gifse8eCBN0Js3u5HtFUl2tTsVdSygjvxr56+ZwRL44= Subject key identifier: E1:F2:55:CA:D9:D2:40:BB:2C:77:C3:4B:7A:D8:29:B8:7B:D0:2B:93 Authority key identifier: 9C:03:9C:E4:9B:57:79:FD:B8:4D:E3:B6:98:F6:76:E8:44:23:66:79 Certificate issuer: /CN=A9134AD7/serialNumber=9C039CE49B5779FDB84DE3B698F676E844236679 Certificate serial: 1DF8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nAOc5JtXef24TeO2mPZ26EQjZnk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9134AD7/E37EC8E68F4E11E68EE7CE6EC4F9AE02/nAOc5JtXef24TeO2mPZ26EQjZnk.mft Manifest number: 1DEA Signing time: Fri 30 May 2025 16:16:51 +0000 Manifest this update: Fri 30 May 2025 16:16:50 +0000 Manifest next update: Fri 06 Jun 2025 16:16:50 +0000 Files and hashes: 1: nAOc5JtXef24TeO2mPZ26EQjZnk.crl (hash: F9CCu9q+44XAkwaJkCVaUOj7YQiQUxZ/BUbYI4zdB8M=) 2: EF2F0372C9F211E986C3B486C4F9AE02.roa (hash: k9wr3qZcJ76UlwuVZn3FECVmsL3FOhLSrWOZD7INceU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9134AD7/E37EC8E68F4E11E68EE7CE6EC4F9AE02/nAOc5JtXef24TeO2mPZ26EQjZnk.crl rsync://rpki.apnic.net/member_repository/A9134AD7/E37EC8E68F4E11E68EE7CE6EC4F9AE02/nAOc5JtXef24TeO2mPZ26EQjZnk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nAOc5JtXef24TeO2mPZ26EQjZnk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 16:16:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7672 (0x1df8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9134AD7, serialNumber=9C039CE49B5779FDB84DE3B698F676E844236679 Validity Not Before: May 30 16:16:50 2025 GMT Not After : Jun 6 16:16:50 2025 GMT Subject: CN=6839d9f3-15bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:94:95:0d:73:7c:c3:05:71:88:84:d7:b2:9c: c8:fe:2f:d4:84:5c:59:9d:04:80:d4:72:9e:a8:10: 7b:23:c1:af:33:3a:04:cf:d9:0a:86:40:b3:e5:40: e0:4b:65:30:39:27:80:8c:65:17:01:dd:58:77:31: 5d:f6:32:ed:35:b3:72:1e:df:93:0c:8f:89:63:d6: 36:06:d5:f1:ad:75:1d:2c:c7:7d:46:ca:5b:e2:1b: fb:48:fb:fd:8f:47:77:d3:19:53:49:73:67:36:8a: 5d:c6:5c:a4:5f:48:d5:30:ff:76:75:df:72:c0:09: 48:65:13:f6:46:22:91:bb:e8:a5:c5:bd:a1:7d:7f: 6c:f1:4f:38:ad:ec:6f:23:6c:33:c2:5f:1d:d5:c0: 26:ee:04:04:e5:11:93:20:c2:1f:8a:dc:fa:e4:8e: 2b:8c:0d:b4:d7:ae:0e:7c:6f:6f:45:d1:75:39:a6: f7:75:b7:2b:53:e7:3d:a5:1c:8c:6f:a7:84:5c:4c: 48:c7:91:df:eb:fa:d3:2a:5e:6a:c8:89:ae:22:f1: 1c:05:88:51:b4:11:22:73:9c:83:df:c6:99:dd:b8: 70:62:4f:5e:ba:5f:18:00:b1:f3:c3:e3:da:a0:2a: fd:8e:a3:93:b1:ba:de:c0:92:e3:60:40:78:f9:c0: 9d:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:F2:55:CA:D9:D2:40:BB:2C:77:C3:4B:7A:D8:29:B8:7B:D0:2B:93 X509v3 Authority Key Identifier: keyid:9C:03:9C:E4:9B:57:79:FD:B8:4D:E3:B6:98:F6:76:E8:44:23:66:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9134AD7/E37EC8E68F4E11E68EE7CE6EC4F9AE02/nAOc5JtXef24TeO2mPZ26EQjZnk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nAOc5JtXef24TeO2mPZ26EQjZnk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9134AD7/E37EC8E68F4E11E68EE7CE6EC4F9AE02/nAOc5JtXef24TeO2mPZ26EQjZnk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 86:85:51:6f:ab:3c:73:98:cb:af:82:f8:5b:74:a9:88:af:ef: 72:81:f7:eb:63:4e:3a:96:91:e4:5d:37:fb:d5:18:ff:7a:0a: b5:b9:1e:93:b2:e9:ec:6c:17:fd:e0:5b:6a:79:2a:88:4a:7d: a5:75:10:6c:87:69:9a:01:18:29:96:61:b8:c2:c9:6e:d4:45: df:10:2e:80:cf:23:eb:af:51:b2:66:fc:9f:2a:a9:22:e5:5a: f5:21:ed:24:72:22:9e:0f:c5:60:ce:97:25:8c:33:12:49:f1: b9:56:90:eb:a7:e2:19:81:52:c4:21:f5:48:fd:73:03:01:dd: f2:20:39:d2:8c:31:01:a9:72:44:94:8f:47:67:95:b0:61:5d: 79:ea:2e:a1:a8:65:89:d7:8b:8a:88:25:78:15:34:ba:27:2e: 92:b9:c3:8d:f6:5e:6f:9c:84:3f:98:68:85:45:f0:ec:de:f0: 98:e6:03:d3:2f:05:f9:e3:06:8a:81:81:76:7e:75:0d:b1:1a: f2:af:af:e4:96:74:f2:02:98:85:85:af:d7:4d:51:8c:10:f8: 36:fa:25:1d:2e:2b:e7:e9:09:7c:28:ea:f5:63:5b:db:b5:30: 46:ba:d3:15:37:af:2d:03:a3:3a:ec:89:4d:5f:75:9b:21:56: c0:35:67:f2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHfgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzRBRDcxMTAvBgNVBAUTKDlDMDM5Q0U0OUI1Nzc5RkRCODRERTNCNjk4RjY3NkU4 NDQyMzY2NzkwHhcNMjUwNTMwMTYxNjUwWhcNMjUwNjA2MTYxNjUwWjAYMRYwFAYD VQQDEw02ODM5ZDlmMy0xNWJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0ZSVDXN8wwVxiITXspzI/i/UhFxZnQSA1HKeqBB7I8GvMzoEz9kKhkCz5UDg S2UwOSeAjGUXAd1YdzFd9jLtNbNyHt+TDI+JY9Y2BtXxrXUdLMd9Rspb4hv7SPv9 j0d30xlTSXNnNopdxlykX0jVMP92dd9ywAlIZRP2RiKRu+ilxb2hfX9s8U84rexv I2wzwl8d1cAm7gQE5RGTIMIfitz65I4rjA20164OfG9vRdF1Oab3dbcrU+c9pRyM b6eEXExIx5Hf6/rTKl5qyImuIvEcBYhRtBEic5yD38aZ3bhwYk9eul8YALHzw+Pa oCr9jqOTsbrewJLjYEB4+cCd5wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOHyVcrZ 0kC7LHfDS3rYKbh70CuTMB8GA1UdIwQYMBaAFJwDnOSbV3n9uE3jtpj2duhEI2Z5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNEFENy9FMzdFQzhFNjhG NEUxMUU2OEVFN0NFNkVDNEY5QUUwMi9uQU9jNUp0WGVmMjRUZU8ybVBaMjZFUWpa bmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25BT2M1SnRYZWYyNFRlTzJtUFoyNkVRalpuay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NEFENy9FMzdFQzhFNjhGNEUxMUU2OEVFN0NFNkVDNEY5QUUwMi9uQU9jNUp0WGVm MjRUZU8ybVBaMjZFUWpabmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCGhVFvqzxzmMuvgvhbdKmIr+9ygffrY046lpHkXTf71Rj/egq1uR6T sunsbBf94FtqeSqISn2ldRBsh2maARgplmG4wslu1EXfEC6AzyPrr1GyZvyfKqki 5Vr1Ie0kciKeD8VgzpcljDMSSfG5VpDrp+IZgVLEIfVI/XMDAd3yIDnSjDEBqXJE lI9HZ5WwYV156i6hqGWJ14uKiCV4FTS6Jy6SucON9l5vnIQ/mGiFRfDs3vCY5gPT LwX54waKgYF2fnUNsRryr6/klnTyApiFha/XTVGMEPg2+iUdLivn6Ql8KOr1Y1vb tTBGutMVN68tA6M67IlNX3WbIVbANWfy -----END CERTIFICATE-----Generated at Sat May 31 17:31:56 2025 by rpki-client