$ rpki-client -vvf rpki.apnic.net/member_repository/A915408A/18845F6C18AC11EFB6F48137C4F9AE02/0N7PEI0mgBt8l-NJAprx_PkKhV4.mft File: 0N7PEI0mgBt8l-NJAprx_PkKhV4.mft (raw, json) Hash identifier: z8iW6DxXNe4JQq/+M6vjaeGc53BZ5n1SUwZLaQBqpxM= Subject key identifier: 84:65:A6:0E:F3:FC:CC:B0:57:A8:05:18:94:26:D4:38:B9:A3:90:F5 Authority key identifier: D0:DE:CF:10:8D:26:80:1B:7C:97:E3:49:02:9A:F1:FC:F9:0A:85:5E Certificate issuer: /CN=A915408A/serialNumber=D0DECF108D26801B7C97E349029AF1FCF90A855E Certificate serial: 9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0N7PEI0mgBt8l-NJAprx_PkKhV4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915408A/18845F6C18AC11EFB6F48137C4F9AE02/0N7PEI0mgBt8l-NJAprx_PkKhV4.mft Manifest number: 9C Signing time: Thu 13 Mar 2025 04:14:07 +0000 Manifest this update: Thu 13 Mar 2025 04:14:07 +0000 Manifest next update: Thu 20 Mar 2025 04:14:07 +0000 Files and hashes: 1: 0N7PEI0mgBt8l-NJAprx_PkKhV4.crl (hash: jNza2ZOTjxE+oiVpEDG/cLTONHtL/MUuJ3o6vftOlx8=) 2: 421FF25E18AD11EF99EAA661C4F9AE02.roa (hash: nArjp1EJ9Qh1GSnet/WM1j0sEl6S9LUtwKPDMLMbAas=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915408A/18845F6C18AC11EFB6F48137C4F9AE02/0N7PEI0mgBt8l-NJAprx_PkKhV4.crl rsync://rpki.apnic.net/member_repository/A915408A/18845F6C18AC11EFB6F48137C4F9AE02/0N7PEI0mgBt8l-NJAprx_PkKhV4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0N7PEI0mgBt8l-NJAprx_PkKhV4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 20 Mar 2025 04:14:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 158 (0x9e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915408A Validity Not Before: Mar 13 04:14:07 2025 GMT Not After : Mar 20 04:14:07 2025 GMT Subject: CN=67d25b8f-1c4c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:83:3f:86:e4:8c:1d:9d:9c:f2:77:a1:45:87: fb:e7:80:59:2c:44:6d:c1:d6:9a:c2:f1:a4:a7:5d: 8d:87:f2:91:61:06:28:ce:db:c5:0a:bb:a8:53:af: c6:e7:81:af:65:b0:47:1a:d6:0c:2e:17:f8:c2:a7: 7b:ec:a0:fb:45:de:60:69:53:bf:f2:ef:ac:3f:45: 37:cc:56:88:25:b6:24:73:39:17:ff:69:f2:3d:c7: e0:75:40:e9:cd:a6:7b:c6:bb:1c:9f:62:af:d1:49: 29:77:1e:3a:ce:23:01:11:f9:08:e5:26:34:72:20: f4:f1:23:96:12:1e:f3:61:83:54:a6:85:52:60:f5: 69:ec:e3:89:82:9c:e3:c2:3b:21:87:88:06:ef:f0: 6c:35:bd:a2:8e:69:24:6a:49:e8:eb:0c:15:12:62: 7e:7a:31:6b:7b:63:7c:6a:06:6d:ea:33:a9:81:c9: 6b:fe:ac:d9:f9:eb:1e:39:b8:ef:be:87:c6:aa:e2: 5c:9b:4b:14:b5:ca:a0:87:87:f3:ae:26:81:1c:08: f5:af:5b:f4:9c:a0:79:64:1e:25:85:88:44:c3:a0: 74:1d:99:80:24:eb:64:f2:19:b9:eb:39:ba:ef:77: 6d:c7:8c:25:04:9f:82:42:a6:68:c3:ab:eb:94:b8: 12:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:65:A6:0E:F3:FC:CC:B0:57:A8:05:18:94:26:D4:38:B9:A3:90:F5 X509v3 Authority Key Identifier: keyid:D0:DE:CF:10:8D:26:80:1B:7C:97:E3:49:02:9A:F1:FC:F9:0A:85:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915408A/18845F6C18AC11EFB6F48137C4F9AE02/0N7PEI0mgBt8l-NJAprx_PkKhV4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0N7PEI0mgBt8l-NJAprx_PkKhV4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915408A/18845F6C18AC11EFB6F48137C4F9AE02/0N7PEI0mgBt8l-NJAprx_PkKhV4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2d:b5:97:4d:a3:4d:20:b9:de:8c:8e:9c:4d:28:07:02:ed:59: f5:36:65:4d:04:ba:63:b3:95:61:17:51:27:45:f2:39:12:29: e7:68:21:07:ae:f4:f5:be:4f:ba:f4:76:09:16:65:f7:ac:1b: ec:ca:c0:49:c5:fe:7f:64:9c:56:9e:4f:f5:8e:59:17:08:00: 7c:26:2a:fb:bb:c7:12:4e:15:fb:b0:7c:ed:cf:a2:50:5e:8c: 74:87:58:4e:42:c1:b8:08:99:24:f1:f1:e5:d2:5f:c9:13:80: 5b:c2:9b:78:97:8e:c4:b6:92:2b:d0:15:4b:8f:94:78:05:e0: 9b:14:2d:67:e9:31:8f:33:9b:18:f6:0c:ba:92:65:ad:9e:7e: 30:63:95:e6:8c:38:54:9f:f3:a0:9a:0c:3f:c2:57:d1:79:85: 09:fc:f1:24:bf:d6:90:3d:b7:1e:14:31:dc:fb:ba:b0:ce:ce: 2d:d7:82:dc:83:a7:27:f9:64:ab:be:8f:ae:f5:d1:be:6c:28: 7e:08:21:86:ff:ae:0f:1e:6f:66:63:79:ee:e4:92:b5:7f:be: 9d:09:b5:ea:62:75:da:bb:8a:80:a7:a4:27:93:79:fa:62:f6: 29:6a:c4:19:b0:cc:99:3d:40:88:88:56:0e:e9:f7:a2:5d:80: 49:ce:72:30 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJ4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTQwOEExMTAvBgNVBAUTKEQwREVDRjEwOEQyNjgwMUI3Qzk3RTM0OTAyOUFGMUZD RjkwQTg1NUUwHhcNMjUwMzEzMDQxNDA3WhcNMjUwMzIwMDQxNDA3WjAYMRYwFAYD VQQDEw02N2QyNWI4Zi0xYzRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2YM/huSMHZ2c8nehRYf754BZLERtwdaawvGkp12Nh/KRYQYoztvFCruoU6/G 54GvZbBHGtYMLhf4wqd77KD7Rd5gaVO/8u+sP0U3zFaIJbYkczkX/2nyPcfgdUDp zaZ7xrscn2Kv0Ukpdx46ziMBEfkI5SY0ciD08SOWEh7zYYNUpoVSYPVp7OOJgpzj wjshh4gG7/BsNb2ijmkkakno6wwVEmJ+ejFre2N8agZt6jOpgclr/qzZ+eseObjv vofGquJcm0sUtcqgh4fzriaBHAj1r1v0nKB5ZB4lhYhEw6B0HZmAJOtk8hm56zm6 73dtx4wlBJ+CQqZow6vrlLgSkQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIRlpg7z /MywV6gFGJQm1Di5o5D1MB8GA1UdIwQYMBaAFNDezxCNJoAbfJfjSQKa8fz5CoVe MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NDA4QS8xODg0NUY2QzE4 QUMxMUVGQjZGNDgxMzdDNEY5QUUwMi8wTjdQRUkwbWdCdDhsLU5KQXByeF9Qa0to VjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzBON1BFSTBtZ0J0OGwtTkpBcHJ4X1BrS2hWNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NDA4QS8xODg0NUY2QzE4QUMxMUVGQjZGNDgxMzdDNEY5QUUwMi8wTjdQRUkwbWdC dDhsLU5KQXByeF9Qa0toVjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAttZdNo00gud6MjpxNKAcC7Vn1NmVNBLpjs5VhF1EnRfI5EinnaCEH rvT1vk+69HYJFmX3rBvsysBJxf5/ZJxWnk/1jlkXCAB8Jir7u8cSThX7sHztz6JQ Xox0h1hOQsG4CJkk8fHl0l/JE4Bbwpt4l47EtpIr0BVLj5R4BeCbFC1n6TGPM5sY 9gy6kmWtnn4wY5XmjDhUn/Ogmgw/wlfReYUJ/PEkv9aQPbceFDHc+7qwzs4t14Lc g6cn+WSrvo+u9dG+bCh+CCGG/64PHm9mY3nu5JK1f76dCbXqYnXau4qAp6Qnk3n6 YvYpasQZsMyZPUCIiFYO6feiXYBJznIw -----END CERTIFICATE-----Generated at Thu Mar 13 21:28:24 2025 by rpki-client