$ rpki-client -vvf rpki.apnic.net/member_repository/A9146251/0B16EAA4D87111EF98C26075C4F9AE02/Ngx8e1xsaakGnYJb8ccK8gjaM3s.mft File: Ngx8e1xsaakGnYJb8ccK8gjaM3s.mft (raw, json) Hash identifier: MsQY6O2MB/+zxcnTdE/i2HGz4YWmRCRNUoguENtjMX0= Subject key identifier: F3:3F:F9:D6:E3:06:E2:94:1C:9E:ED:1C:2C:AA:D0:2B:24:E9:4E:34 Authority key identifier: 36:0C:7C:7B:5C:6C:69:A9:06:9D:82:5B:F1:C7:0A:F2:08:DA:33:7B Certificate issuer: /CN=A9146251/serialNumber=360C7C7B5C6C69A9069D825BF1C70AF208DA337B Certificate serial: 2E Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Ngx8e1xsaakGnYJb8ccK8gjaM3s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9146251/0B16EAA4D87111EF98C26075C4F9AE02/Ngx8e1xsaakGnYJb8ccK8gjaM3s.mft Manifest number: 2E Signing time: Thu 17 Apr 2025 06:30:52 +0000 Manifest this update: Thu 17 Apr 2025 06:30:51 +0000 Manifest next update: Thu 24 Apr 2025 06:30:51 +0000 Files and hashes: 1: Ngx8e1xsaakGnYJb8ccK8gjaM3s.crl (hash: d2zZi8xR4l0xpOYyPcZyPihWHJ8EFlvmek9wiRf81bc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9146251/0B16EAA4D87111EF98C26075C4F9AE02/Ngx8e1xsaakGnYJb8ccK8gjaM3s.crl rsync://rpki.apnic.net/member_repository/A9146251/0B16EAA4D87111EF98C26075C4F9AE02/Ngx8e1xsaakGnYJb8ccK8gjaM3s.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Ngx8e1xsaakGnYJb8ccK8gjaM3s.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Apr 2025 06:30:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46 (0x2e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9146251, serialNumber=360C7C7B5C6C69A9069D825BF1C70AF208DA337B Validity Not Before: Apr 17 06:30:51 2025 GMT Not After : Apr 24 06:30:51 2025 GMT Subject: CN=6800a01b-79de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:09:f1:23:5a:4d:7d:39:d5:bb:dd:b5:89:9b: 07:cd:53:60:11:db:2e:14:cc:63:f9:e1:98:6d:c0: 9c:71:0b:51:6a:34:e0:a7:0f:de:e5:5b:04:77:c2: 1e:7a:dc:33:5d:cf:46:9a:2e:20:bc:29:f3:04:1d: a2:fe:19:1b:97:c3:f8:4e:45:cf:af:67:74:a0:66: 42:54:c0:66:f3:e1:ee:d2:6e:0a:0b:95:da:1c:63: 3d:4f:1b:18:ea:4b:7e:f5:eb:e2:b4:c5:b1:44:85: cf:a9:74:47:47:d5:c2:4d:88:05:a6:bf:68:da:87: 82:70:e2:63:4b:8e:ce:1e:30:48:a9:05:26:98:96: fa:23:6f:3e:87:d0:25:5d:b0:90:42:c1:95:9f:62: 11:93:5c:af:46:6a:19:36:3d:dd:80:a9:1f:c8:03: 26:e4:b9:3f:19:bd:3d:95:33:5a:e8:c3:2e:37:49: 20:9d:5f:23:d1:11:74:5e:3c:e5:e6:30:31:77:3b: f4:b7:19:9a:bc:dd:fb:1f:48:dc:3b:67:dd:a9:91: 00:38:f0:8a:a5:69:bd:61:97:3e:e9:33:fe:3d:44: db:ac:aa:44:c9:1e:1c:d0:a1:af:1b:c2:8d:8d:fa: 83:c6:ff:5a:89:60:62:44:f6:a1:3a:06:38:61:fe: 9c:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:3F:F9:D6:E3:06:E2:94:1C:9E:ED:1C:2C:AA:D0:2B:24:E9:4E:34 X509v3 Authority Key Identifier: keyid:36:0C:7C:7B:5C:6C:69:A9:06:9D:82:5B:F1:C7:0A:F2:08:DA:33:7B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9146251/0B16EAA4D87111EF98C26075C4F9AE02/Ngx8e1xsaakGnYJb8ccK8gjaM3s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Ngx8e1xsaakGnYJb8ccK8gjaM3s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146251/0B16EAA4D87111EF98C26075C4F9AE02/Ngx8e1xsaakGnYJb8ccK8gjaM3s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0c:bd:cc:1e:b7:d6:7f:79:6d:9b:39:29:a0:5a:8c:6f:40:70: e6:62:09:b4:81:5a:d9:ac:81:22:03:2d:72:90:31:62:9f:71: d9:2b:6d:e6:d9:3a:39:d1:c1:09:82:c6:2f:79:4b:4b:b7:0c: e6:49:fe:97:01:33:dd:4e:b9:c2:99:19:33:82:fa:9f:f2:d8: 47:2d:95:c1:d4:6f:8d:05:b8:8b:dc:8b:29:45:0b:44:ac:fd: d9:8d:2b:a9:1d:69:14:7a:66:5e:c6:77:44:db:73:b4:78:38: b9:7d:51:17:de:f0:68:db:c8:98:fb:62:26:f8:72:7d:4c:4c: 0f:be:09:fd:f3:fc:81:55:a1:ca:cc:cd:c9:58:c8:8e:ea:0b: 74:95:ac:bb:67:51:86:07:fe:70:f2:6d:d8:5c:3f:37:24:a1: 91:91:5f:0f:d3:e4:b8:d1:4d:6f:5c:50:7a:f1:05:da:0a:c9: 79:9a:e6:c5:f1:4e:21:76:32:0e:b6:a3:9a:b3:82:16:1b:f0: 02:e4:00:b0:b0:04:ac:24:6c:6f:85:8f:f2:6d:ff:aa:1c:bf: 62:07:c2:49:7b:d5:c8:73:ab:2a:fe:0b:f9:a4:73:42:e3:c3: 23:d4:6f:3e:d6:3c:bd:e2:9c:da:b6:73:31:7f:02:80:cd:27: 56:17:e9:d6 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBLjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 NjI1MTExMC8GA1UEBRMoMzYwQzdDN0I1QzZDNjlBOTA2OUQ4MjVCRjFDNzBBRjIw OERBMzM3QjAeFw0yNTA0MTcwNjMwNTFaFw0yNTA0MjQwNjMwNTFaMBgxFjAUBgNV BAMTDTY4MDBhMDFiLTc5ZGUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDUCfEjWk19OdW73bWJmwfNU2AR2y4UzGP54ZhtwJxxC1FqNOCnD97lWwR3wh56 3DNdz0aaLiC8KfMEHaL+GRuXw/hORc+vZ3SgZkJUwGbz4e7SbgoLldocYz1PGxjq S3716+K0xbFEhc+pdEdH1cJNiAWmv2jah4Jw4mNLjs4eMEipBSaYlvojbz6H0CVd sJBCwZWfYhGTXK9Gahk2Pd2AqR/IAybkuT8ZvT2VM1rowy43SSCdXyPREXRePOXm MDF3O/S3GZq83fsfSNw7Z92pkQA48Iqlab1hlz7pM/49RNusqkTJHhzQoa8bwo2N +oPG/1qJYGJE9qE6Bjhh/pwzAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU8z/51uMG 4pQcnu0cLKrQKyTpTjQwHwYDVR0jBBgwFoAUNgx8e1xsaakGnYJb8ccK8gjaM3sw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ2MjUxLzBCMTZFQUE0RDg3 MTExRUY5OEMyNjA3NUM0RjlBRTAyL05neDhlMXhzYWFrR25ZSmI4Y2NLOGdqYU0z cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjMyMkE1RjQxRDY2MTFFMkEzRjI3RjdDNzJG RDFGRjIvTmd4OGUxeHNhYWtHbllKYjhjY0s4Z2phTTNzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ2 MjUxLzBCMTZFQUE0RDg3MTExRUY5OEMyNjA3NUM0RjlBRTAyL05neDhlMXhzYWFr R25ZSmI4Y2NLOGdqYU0zcy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAAy9zB631n95bZs5KaBajG9AcOZiCbSBWtmsgSIDLXKQMWKfcdkrbebZ OjnRwQmCxi95S0u3DOZJ/pcBM91OucKZGTOC+p/y2EctlcHUb40FuIvciylFC0Ss /dmNK6kdaRR6Zl7Gd0Tbc7R4OLl9URfe8GjbyJj7Yib4cn1MTA++Cf3z/IFVocrM zclYyI7qC3SVrLtnUYYH/nDybdhcPzckoZGRXw/T5LjRTW9cUHrxBdoKyXma5sXx TiF2Mg62o5qzghYb8ALkALCwBKwkbG+Fj/Jt/6ocv2IHwkl71chzqyr+C/mkc0Lj wyPUbz7WPL3inNq2czF/AoDNJ1YX6dY= -----END CERTIFICATE-----Generated at Fri Apr 18 17:29:00 2025 by rpki-client