$ rpki-client -vvf rpki.apnic.net/member_repository/A9138478/6B8AD84E433011EBA6E0221EC4F9AE02/NOjGYqqdzVGVDfX6xAWs8WyNMKA.mft File: NOjGYqqdzVGVDfX6xAWs8WyNMKA.mft (raw, json) Hash identifier: fPl4kZocegsnqZE7iONrFgHJO+z62ri4c1OUDdVcdIQ= Subject key identifier: 17:07:D8:88:F7:A3:ED:8A:EB:79:D7:A4:0B:40:5E:02:58:04:6E:8A Authority key identifier: 34:E8:C6:62:AA:9D:CD:51:95:0D:F5:FA:C4:05:AC:F1:6C:8D:30:A0 Certificate issuer: /CN=A9138478/serialNumber=34E8C662AA9DCD51950DF5FAC405ACF16C8D30A0 Certificate serial: 070B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NOjGYqqdzVGVDfX6xAWs8WyNMKA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9138478/6B8AD84E433011EBA6E0221EC4F9AE02/NOjGYqqdzVGVDfX6xAWs8WyNMKA.mft Manifest number: 0703 Signing time: Fri 30 May 2025 22:08:23 +0000 Manifest this update: Fri 30 May 2025 22:08:22 +0000 Manifest next update: Fri 06 Jun 2025 22:08:22 +0000 Files and hashes: 1: NOjGYqqdzVGVDfX6xAWs8WyNMKA.crl (hash: QkS6Fm+oTT0wOlK7IKAdIBrDwllc+8PJcIMYiSpaQ2k=) 2: 6AC2B9AA187B11ED92148716C4F9AE02.roa (hash: bd6xDrsI8VNBf0/b6lDTgdvsxuTBwH6yXjfUiwvhRpg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9138478/6B8AD84E433011EBA6E0221EC4F9AE02/NOjGYqqdzVGVDfX6xAWs8WyNMKA.crl rsync://rpki.apnic.net/member_repository/A9138478/6B8AD84E433011EBA6E0221EC4F9AE02/NOjGYqqdzVGVDfX6xAWs8WyNMKA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NOjGYqqdzVGVDfX6xAWs8WyNMKA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 22:08:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1803 (0x70b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9138478, serialNumber=34E8C662AA9DCD51950DF5FAC405ACF16C8D30A0 Validity Not Before: May 30 22:08:22 2025 GMT Not After : Jun 6 22:08:22 2025 GMT Subject: CN=683a2c57-3aa0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:f9:ec:87:7b:70:ca:9c:bd:c9:46:24:f5:0d: e9:e3:4d:55:a8:3b:b5:df:9b:43:eb:3c:64:5d:c3: b1:57:7f:a5:57:9c:53:c7:35:8c:42:30:85:e7:a8: b3:d7:bf:cf:e8:75:fe:80:d2:c5:19:74:f6:78:83: 5a:98:78:00:d2:12:6b:e3:5c:31:39:98:96:1b:6d: 96:ee:84:db:19:d9:1c:ce:0c:d4:c7:f0:7a:fa:39: b3:80:9b:05:df:f7:90:0b:27:64:5f:df:fd:1e:8b: 2d:38:e9:c0:1d:e4:0f:4f:db:c4:df:0c:42:c1:a9: 75:d4:af:3c:be:3f:cc:45:72:63:ea:db:8e:74:65: b3:ab:bd:78:00:48:c3:35:ff:19:75:a3:e9:38:44: 2d:85:d6:e3:ff:b8:2c:5e:b5:6f:dd:9d:8d:39:a5: 70:d2:ff:95:28:82:c1:83:02:1b:a1:d4:31:46:5c: b8:bc:44:1a:09:a6:04:9d:57:d6:92:ef:d7:5c:50: 30:77:79:d5:23:2b:9a:71:c9:f0:f3:d2:8b:8c:00: e4:7a:5c:bc:76:eb:11:e2:fa:1f:7a:de:fb:8f:e7: 66:9a:ae:c2:16:6e:c1:33:7a:55:f0:40:98:4d:8d: 4a:5b:86:0f:89:49:4e:55:97:8e:27:90:ec:e5:5f: ff:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:07:D8:88:F7:A3:ED:8A:EB:79:D7:A4:0B:40:5E:02:58:04:6E:8A X509v3 Authority Key Identifier: keyid:34:E8:C6:62:AA:9D:CD:51:95:0D:F5:FA:C4:05:AC:F1:6C:8D:30:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9138478/6B8AD84E433011EBA6E0221EC4F9AE02/NOjGYqqdzVGVDfX6xAWs8WyNMKA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NOjGYqqdzVGVDfX6xAWs8WyNMKA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9138478/6B8AD84E433011EBA6E0221EC4F9AE02/NOjGYqqdzVGVDfX6xAWs8WyNMKA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 42:83:4b:15:b4:76:90:ba:ce:5f:4a:ac:32:32:c3:18:2f:db: 24:04:8c:b6:9a:46:9f:94:48:5a:29:d8:8a:35:08:e0:17:83: 70:49:bb:2b:ee:b7:f8:74:8f:88:91:95:2f:39:6e:4b:53:cd: 9f:56:fc:52:5d:64:22:45:1a:91:63:91:b0:04:78:24:6c:71: da:b0:cb:a5:d3:8b:27:dd:95:56:f4:df:c2:b1:81:1f:2f:6f: 8f:b4:bb:cd:1e:b5:d2:00:57:5b:c9:0d:0c:d0:d0:e2:95:20: 07:79:50:6f:bc:bb:3f:b5:cb:63:7d:39:e3:91:e9:88:30:2a: f4:fe:5e:67:a9:d7:ad:d7:80:75:2c:2a:19:b3:c9:0d:f7:8e: 00:0b:3b:a6:cb:18:aa:d9:02:70:34:2e:30:39:85:c4:98:27: 5d:a8:61:62:0c:bc:0a:bc:31:f8:2e:7a:1c:4a:de:fa:22:56: 7d:fc:4e:3e:c1:d7:80:9c:c4:3c:cb:da:5e:a7:19:93:2e:58: 8d:0b:a3:63:ee:fe:72:54:11:aa:ea:39:a7:d3:37:bb:69:80: 57:2d:04:aa:6d:c7:9e:03:87:dc:a2:ec:86:2e:0a:4b:c3:88: 95:36:bb:6c:79:fb:31:d8:e4:67:fc:14:f6:47:1e:cc:1f:84: 07:0b:24:a0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBwswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mzg0NzgxMTAvBgNVBAUTKDM0RThDNjYyQUE5RENENTE5NTBERjVGQUM0MDVBQ0Yx NkM4RDMwQTAwHhcNMjUwNTMwMjIwODIyWhcNMjUwNjA2MjIwODIyWjAYMRYwFAYD VQQDEw02ODNhMmM1Ny0zYWEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtfnsh3twypy9yUYk9Q3p401VqDu135tD6zxkXcOxV3+lV5xTxzWMQjCF56iz 17/P6HX+gNLFGXT2eINamHgA0hJr41wxOZiWG22W7oTbGdkczgzUx/B6+jmzgJsF 3/eQCydkX9/9HostOOnAHeQPT9vE3wxCwal11K88vj/MRXJj6tuOdGWzq714AEjD Nf8ZdaPpOEQthdbj/7gsXrVv3Z2NOaVw0v+VKILBgwIbodQxRly4vEQaCaYEnVfW ku/XXFAwd3nVIyuaccnw89KLjADkely8dusR4vofet77j+dmmq7CFm7BM3pV8ECY TY1KW4YPiUlOVZeOJ5Ds5V//EQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBcH2Ij3 o+2K63nXpAtAXgJYBG6KMB8GA1UdIwQYMBaAFDToxmKqnc1RlQ31+sQFrPFsjTCg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzODQ3OC82QjhBRDg0RTQz MzAxMUVCQTZFMDIyMUVDNEY5QUUwMi9OT2pHWXFxZHpWR1ZEZlg2eEFXczhXeU5N S0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05PakdZcXFkelZHVkRmWDZ4QVdzOFd5Tk1LQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz ODQ3OC82QjhBRDg0RTQzMzAxMUVCQTZFMDIyMUVDNEY5QUUwMi9OT2pHWXFxZHpW R1ZEZlg2eEFXczhXeU5NS0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBCg0sVtHaQus5fSqwyMsMYL9skBIy2mkaflEhaKdiKNQjgF4NwSbsr 7rf4dI+IkZUvOW5LU82fVvxSXWQiRRqRY5GwBHgkbHHasMul04sn3ZVW9N/CsYEf L2+PtLvNHrXSAFdbyQ0M0NDilSAHeVBvvLs/tctjfTnjkemIMCr0/l5nqdet14B1 LCoZs8kN944ACzumyxiq2QJwNC4wOYXEmCddqGFiDLwKvDH4LnocSt76IlZ9/E4+ wdeAnMQ8y9pepxmTLliNC6Nj7v5yVBGq6jmn0ze7aYBXLQSqbceeA4fcouyGLgpL w4iVNrtsefsx2ORn/BT2Rx7MH4QHCySg -----END CERTIFICATE-----Generated at Sat May 31 17:27:50 2025 by rpki-client