$ rpki-client -vvf rpki.apnic.net/member_repository/A9142037/5C05C0C8E41711EF96E2FF38C4F9AE02/N2EhKhZwpXGatx-iA7kuxobyEXc.mft File: N2EhKhZwpXGatx-iA7kuxobyEXc.mft (raw, json) Hash identifier: qwE/JAmYqxBPA/fS/dlbPZ7hvIHUR2MTPlluKOZJxp4= Subject key identifier: 47:D8:7D:2D:19:C4:53:2C:3D:4E:26:1A:61:05:66:D8:D9:83:AD:32 Authority key identifier: 37:61:21:2A:16:70:A5:71:9A:B7:1F:A2:03:B9:2E:C6:86:F2:11:77 Certificate issuer: /CN=A9142037/serialNumber=3761212A1670A5719AB71FA203B92EC686F21177 Certificate serial: 3E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N2EhKhZwpXGatx-iA7kuxobyEXc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9142037/5C05C0C8E41711EF96E2FF38C4F9AE02/N2EhKhZwpXGatx-iA7kuxobyEXc.mft Manifest number: 3C Signing time: Sat 31 May 2025 07:05:15 +0000 Manifest this update: Sat 31 May 2025 07:05:15 +0000 Manifest next update: Sat 07 Jun 2025 07:05:15 +0000 Files and hashes: 1: N2EhKhZwpXGatx-iA7kuxobyEXc.crl (hash: 8BB4TIGyot7ibI31GSVFjp7PS3Bkr1EbnZ8cAWypeg4=) 2: 191B6DA2E41811EF8E3F233AC4F9AE02.roa (hash: vcq+JOCdxjFG1D5wGuVH3+pI9poPc4zyyjKKMXsqhWE=) 3: FAEA8E38E41911EFA96DA35FC4F9AE02.roa (hash: RxRZ1dH5JkRHUJw1N/ksvTcKPSxp60O8KTnJFH3sluU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9142037/5C05C0C8E41711EF96E2FF38C4F9AE02/N2EhKhZwpXGatx-iA7kuxobyEXc.crl rsync://rpki.apnic.net/member_repository/A9142037/5C05C0C8E41711EF96E2FF38C4F9AE02/N2EhKhZwpXGatx-iA7kuxobyEXc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N2EhKhZwpXGatx-iA7kuxobyEXc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 07:05:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62 (0x3e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9142037, serialNumber=3761212A1670A5719AB71FA203B92EC686F21177 Validity Not Before: May 31 07:05:15 2025 GMT Not After : Jun 7 07:05:15 2025 GMT Subject: CN=683aaa2b-a9cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:18:71:c2:30:34:5e:09:08:5a:c2:b5:1e:e8: 05:ec:14:53:3d:10:87:17:60:d1:8d:37:c0:33:6e: 68:da:6d:55:58:59:99:99:5f:48:00:d9:c1:ac:56: 15:12:71:7e:7b:39:62:d5:58:e3:ae:28:4d:39:42: 5d:6d:98:f7:3f:5f:eb:38:c0:f2:df:e2:1d:82:b0: f9:4f:28:aa:8b:ca:28:11:27:98:78:4b:70:0d:6c: 34:39:01:13:3c:3d:65:a1:9a:48:ba:5d:9a:d2:0d: 77:c6:a9:77:70:32:59:74:4f:db:38:05:a6:e6:9c: 2f:a0:96:e9:4e:56:36:25:ff:dd:b2:2e:92:cb:0f: a7:41:0f:c6:75:7f:54:08:da:66:fc:cd:0b:69:4e: 28:39:e7:f2:c7:61:9e:2c:fa:cf:9d:80:98:6c:1d: 26:7f:c9:0e:c8:72:91:66:3d:e9:6a:54:b0:bf:61: ff:d3:67:62:e5:26:bc:4c:69:82:33:e4:e2:ef:fc: 62:13:ef:85:48:ff:35:a4:e5:29:be:ee:bd:04:9c: 66:ef:46:17:e9:35:e1:82:87:7f:60:7f:fa:04:15: a7:22:ad:01:f3:57:2a:40:c6:61:ec:73:94:6d:40: 79:5f:e6:55:6c:a1:db:d5:e5:62:e8:14:5b:53:7b: 4d:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:D8:7D:2D:19:C4:53:2C:3D:4E:26:1A:61:05:66:D8:D9:83:AD:32 X509v3 Authority Key Identifier: keyid:37:61:21:2A:16:70:A5:71:9A:B7:1F:A2:03:B9:2E:C6:86:F2:11:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9142037/5C05C0C8E41711EF96E2FF38C4F9AE02/N2EhKhZwpXGatx-iA7kuxobyEXc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N2EhKhZwpXGatx-iA7kuxobyEXc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142037/5C05C0C8E41711EF96E2FF38C4F9AE02/N2EhKhZwpXGatx-iA7kuxobyEXc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 41:7d:08:7a:96:9e:dd:c3:80:d4:ba:c0:1b:b0:56:81:4b:d7: 8a:3a:1a:75:ab:a9:05:b5:ff:09:0b:ec:2e:39:2c:77:58:a6: ed:6e:b9:79:8c:b1:a1:f8:0d:3c:9b:ac:9f:60:b0:4a:51:86: d6:20:30:f2:50:dd:6f:99:97:af:0d:d3:fc:bd:29:5e:82:2f: f7:3a:cc:a9:9a:b4:0d:b6:ce:2a:76:17:dc:3a:c4:c2:ab:5c: bc:61:0b:8b:60:74:25:e1:8d:94:9d:d1:2c:91:67:46:b5:ed: 6c:9b:73:46:f6:21:b6:32:bc:e2:1b:9a:fb:e0:c0:07:f1:d2: 16:aa:0b:e6:09:2c:68:75:27:27:c9:09:38:71:53:c8:cc:34: 14:33:35:af:ea:fa:de:e2:c0:26:35:71:ca:99:c1:db:6c:89: 11:3d:34:ba:3d:86:cf:bc:5f:c7:13:ac:90:16:f2:77:60:3b: a1:6b:96:bb:98:6c:fe:8f:08:f1:4d:a8:5d:67:2b:e9:7e:f4: db:1f:a3:bc:7d:c9:ed:e6:f4:c6:fa:28:39:ee:da:71:1f:c6: 7c:18:47:03:52:2f:2c:fb:76:55:b8:63:16:6c:25:aa:c8:d2: 47:23:6a:73:95:15:cb:d9:62:38:93:39:60:b2:d6:e4:3e:c2: ea:16:0a:a9 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBPjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 MjAzNzExMC8GA1UEBRMoMzc2MTIxMkExNjcwQTU3MTlBQjcxRkEyMDNCOTJFQzY4 NkYyMTE3NzAeFw0yNTA1MzEwNzA1MTVaFw0yNTA2MDcwNzA1MTVaMBgxFjAUBgNV BAMTDTY4M2FhYTJiLWE5Y2QwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC+GHHCMDReCQhawrUe6AXsFFM9EIcXYNGNN8AzbmjabVVYWZmZX0gA2cGsVhUS cX57OWLVWOOuKE05Ql1tmPc/X+s4wPLf4h2CsPlPKKqLyigRJ5h4S3ANbDQ5ARM8 PWWhmki6XZrSDXfGqXdwMll0T9s4BabmnC+glulOVjYl/92yLpLLD6dBD8Z1f1QI 2mb8zQtpTig55/LHYZ4s+s+dgJhsHSZ/yQ7IcpFmPelqVLC/Yf/TZ2LlJrxMaYIz 5OLv/GIT74VI/zWk5Sm+7r0EnGbvRhfpNeGCh39gf/oEFacirQHzVypAxmHsc5Rt QHlf5lVsodvV5WLoFFtTe02hAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUR9h9LRnE Uyw9TiYaYQVm2NmDrTIwHwYDVR0jBBgwFoAUN2EhKhZwpXGatx+iA7kuxobyEXcw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQyMDM3LzVDMDVDMEM4RTQx NzExRUY5NkUyRkYzOEM0RjlBRTAyL04yRWhLaFp3cFhHYXR4LWlBN2t1eG9ieUVY Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvTjJFaEtoWndwWEdhdHgtaUE3a3V4b2J5RVhjLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQy MDM3LzVDMDVDMEM4RTQxNzExRUY5NkUyRkYzOEM0RjlBRTAyL04yRWhLaFp3cFhH YXR4LWlBN2t1eG9ieUVYYy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAEF9CHqWnt3DgNS6wBuwVoFL14o6GnWrqQW1/wkL7C45LHdYpu1uuXmM saH4DTybrJ9gsEpRhtYgMPJQ3W+Zl68N0/y9KV6CL/c6zKmatA22zip2F9w6xMKr XLxhC4tgdCXhjZSd0SyRZ0a17Wybc0b2IbYyvOIbmvvgwAfx0haqC+YJLGh1JyfJ CThxU8jMNBQzNa/q+t7iwCY1ccqZwdtsiRE9NLo9hs+8X8cTrJAW8ndgO6FrlruY bP6PCPFNqF1nK+l+9Nsfo7x9ye3m9Mb6KDnu2nEfxnwYRwNSLyz7dlW4YxZsJarI 0kcjanOVFcvZYjiTOWCy1uQ+wuoWCqk= -----END CERTIFICATE-----Generated at Sat May 31 17:23:42 2025 by rpki-client