$ rpki-client -vvf rpki.apnic.net/member_repository/A9144C70/82BC84EEAC6711ECB75CDA24C4F9AE02/n5wj0nP2qZxl77wDDStoHkIykWc.mft File: n5wj0nP2qZxl77wDDStoHkIykWc.mft (raw, json) Hash identifier: FsRszlRLma94e3OVsizECs98hEEe622P+pnaCVMGEH4= Subject key identifier: 57:6C:A2:66:83:33:BB:B6:CB:F7:34:FE:D2:6A:3D:5C:EB:66:C3:9B Authority key identifier: 9F:9C:23:D2:73:F6:A9:9C:65:EF:BC:03:0D:2B:68:1E:42:32:91:67 Certificate issuer: /CN=A9144C70/serialNumber=9F9C23D273F6A99C65EFBC030D2B681E42329167 Certificate serial: 0381 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n5wj0nP2qZxl77wDDStoHkIykWc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9144C70/82BC84EEAC6711ECB75CDA24C4F9AE02/n5wj0nP2qZxl77wDDStoHkIykWc.mft Manifest number: 03E3 Signing time: Sat 31 May 2025 01:06:50 +0000 Manifest this update: Sat 31 May 2025 01:06:50 +0000 Manifest next update: Sat 07 Jun 2025 01:06:50 +0000 Files and hashes: 1: n5wj0nP2qZxl77wDDStoHkIykWc.crl (hash: YtkkwNXDOEOmM3ffh4OuY1LCTcyw8QMtV1xhLdvzZI4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9144C70/82BC84EEAC6711ECB75CDA24C4F9AE02/n5wj0nP2qZxl77wDDStoHkIykWc.crl rsync://rpki.apnic.net/member_repository/A9144C70/82BC84EEAC6711ECB75CDA24C4F9AE02/n5wj0nP2qZxl77wDDStoHkIykWc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n5wj0nP2qZxl77wDDStoHkIykWc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 01:06:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 897 (0x381) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9144C70, serialNumber=9F9C23D273F6A99C65EFBC030D2B681E42329167 Validity Not Before: May 31 01:06:50 2025 GMT Not After : Jun 7 01:06:50 2025 GMT Subject: CN=683a562a-f03f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:fb:9f:e4:f9:36:cd:e8:99:36:4b:04:88:a8: 63:37:56:b4:36:77:08:fc:3b:f3:0b:09:b3:29:43: f9:8b:2f:6d:76:48:a2:cc:4b:50:28:ba:74:9b:43: 66:c8:53:2e:df:6b:28:7d:99:50:e6:9c:40:19:a1: 93:51:8c:ec:31:bd:9c:fe:17:73:59:00:22:9a:21: 36:ea:9e:93:85:4d:b7:34:8c:cf:5a:09:fa:44:ed: 4f:1e:88:4b:2c:37:7d:fa:56:3e:35:44:63:56:06: d0:bd:03:b8:71:41:8a:02:c8:3e:93:da:48:a3:fa: 7b:12:6d:94:26:83:84:b3:c4:3a:35:00:08:78:76: 59:c6:43:59:91:65:30:08:30:d3:87:07:85:bc:08: 33:4f:b5:91:81:bf:57:d3:6d:2d:00:6e:6a:c1:49: ff:c6:a9:1f:fe:f7:c4:15:8e:b9:32:c5:6b:51:dd: e9:59:df:ab:59:03:3f:bb:a6:e1:ba:09:11:e9:17: 81:0b:11:d4:97:91:5b:83:df:b4:35:33:71:bc:94: b4:b1:78:45:e2:6f:ce:62:3e:87:16:4b:9b:b4:af: 75:0c:7c:a6:7e:8f:bc:a9:fa:70:da:65:6a:bf:76: f3:1c:ba:30:dc:a0:71:f5:d7:f8:a0:62:24:33:7d: d0:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:6C:A2:66:83:33:BB:B6:CB:F7:34:FE:D2:6A:3D:5C:EB:66:C3:9B X509v3 Authority Key Identifier: keyid:9F:9C:23:D2:73:F6:A9:9C:65:EF:BC:03:0D:2B:68:1E:42:32:91:67 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9144C70/82BC84EEAC6711ECB75CDA24C4F9AE02/n5wj0nP2qZxl77wDDStoHkIykWc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n5wj0nP2qZxl77wDDStoHkIykWc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9144C70/82BC84EEAC6711ECB75CDA24C4F9AE02/n5wj0nP2qZxl77wDDStoHkIykWc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 11:b2:8c:21:60:66:cc:4c:ba:84:d4:15:21:5b:93:98:1a:cd: ef:d2:fb:f7:57:56:dc:69:b4:f5:94:a2:a5:fb:49:bc:49:0e: e9:bd:2b:a0:99:d3:89:03:11:df:fb:93:57:87:3d:3d:31:10: 85:4f:39:09:a5:fc:68:d7:66:8d:d8:29:a4:91:82:d2:11:17: 68:43:06:97:26:4b:e3:ac:17:23:58:ad:25:f8:67:41:e1:56: 5d:40:92:1c:e6:38:c0:79:10:81:3c:c8:69:d6:e9:d5:d9:1a: 67:5b:56:87:0b:3d:97:3a:89:4d:eb:0d:fe:12:b2:aa:4a:d2: 61:05:4d:45:f5:b4:e9:36:c7:51:36:61:37:fb:eb:ce:de:76: 56:f9:fe:68:ca:d8:f0:9d:c8:9b:4f:06:53:24:9d:a1:63:9d: fc:a8:e6:1e:07:88:dd:e7:46:56:b9:c3:43:b5:4b:b3:14:08: d4:2e:ed:6b:fd:1a:ad:13:bc:58:7d:90:59:2b:35:c4:c3:36: 51:ae:53:25:65:b1:ad:2b:6c:a0:e3:51:eb:64:49:12:f5:53: e4:d4:ce:a4:29:ee:4d:ab:58:45:98:43:1a:91:5c:36:32:b0: cf:60:af:c5:74:d3:49:2f:9b:15:93:47:cf:b5:36:2a:cd:81: a7:c4:91:61 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA4EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDRDNzAxMTAvBgNVBAUTKDlGOUMyM0QyNzNGNkE5OUM2NUVGQkMwMzBEMkI2ODFF NDIzMjkxNjcwHhcNMjUwNTMxMDEwNjUwWhcNMjUwNjA3MDEwNjUwWjAYMRYwFAYD VQQDEw02ODNhNTYyYS1mMDNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAufuf5Pk2zeiZNksEiKhjN1a0NncI/DvzCwmzKUP5iy9tdkiizEtQKLp0m0Nm yFMu32sofZlQ5pxAGaGTUYzsMb2c/hdzWQAimiE26p6ThU23NIzPWgn6RO1PHohL LDd9+lY+NURjVgbQvQO4cUGKAsg+k9pIo/p7Em2UJoOEs8Q6NQAIeHZZxkNZkWUw CDDThweFvAgzT7WRgb9X020tAG5qwUn/xqkf/vfEFY65MsVrUd3pWd+rWQM/u6bh ugkR6ReBCxHUl5Fbg9+0NTNxvJS0sXhF4m/OYj6HFkubtK91DHymfo+8qfpw2mVq v3bzHLow3KBx9df4oGIkM33QfwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFdsomaD M7u2y/c0/tJqPVzrZsObMB8GA1UdIwQYMBaAFJ+cI9Jz9qmcZe+8Aw0raB5CMpFn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NEM3MC84MkJDODRFRUFD NjcxMUVDQjc1Q0RBMjRDNEY5QUUwMi9uNXdqMG5QMnFaeGw3N3dERFN0b0hrSXlr V2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL241d2owblAycVp4bDc3d0REU3RvSGtJeWtXYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NEM3MC84MkJDODRFRUFDNjcxMUVDQjc1Q0RBMjRDNEY5QUUwMi9uNXdqMG5QMnFa eGw3N3dERFN0b0hrSXlrV2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQARsowhYGbMTLqE1BUhW5OYGs3v0vv3V1bcabT1lKKl+0m8SQ7pvSug mdOJAxHf+5NXhz09MRCFTzkJpfxo12aN2CmkkYLSERdoQwaXJkvjrBcjWK0l+GdB 4VZdQJIc5jjAeRCBPMhp1unV2RpnW1aHCz2XOolN6w3+ErKqStJhBU1F9bTpNsdR NmE3++vO3nZW+f5oytjwncibTwZTJJ2hY538qOYeB4jd50ZWucNDtUuzFAjULu1r /RqtE7xYfZBZKzXEwzZRrlMlZbGtK2yg41HrZEkS9VPk1M6kKe5Nq1hFmEMakVw2 MrDPYK/FdNNJL5sVk0fPtTYqzYGnxJFh -----END CERTIFICATE-----Generated at Sat May 31 17:08:58 2025 by rpki-client