$ rpki-client -vvf rpki.apnic.net/member_repository/A915408A/18845F6C18AC11EFB6F48137C4F9AE02/0N7PEI0mgBt8l-NJAprx_PkKhV4.mft File: 0N7PEI0mgBt8l-NJAprx_PkKhV4.mft (raw, json) Hash identifier: p9f1mPiWcL5O+qltiC8ta1qVMyhVlir8mlrWiQegpBw= Subject key identifier: E1:88:DD:60:75:84:B4:D0:57:D6:A4:0E:FE:48:7D:5F:73:42:C7:A9 Authority key identifier: D0:DE:CF:10:8D:26:80:1B:7C:97:E3:49:02:9A:F1:FC:F9:0A:85:5E Certificate issuer: /CN=A915408A/serialNumber=D0DECF108D26801B7C97E349029AF1FCF90A855E Certificate serial: C5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0N7PEI0mgBt8l-NJAprx_PkKhV4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915408A/18845F6C18AC11EFB6F48137C4F9AE02/0N7PEI0mgBt8l-NJAprx_PkKhV4.mft Manifest number: C3 Signing time: Sat 31 May 2025 05:15:09 +0000 Manifest this update: Sat 31 May 2025 05:15:08 +0000 Manifest next update: Sat 07 Jun 2025 05:15:08 +0000 Files and hashes: 1: 0N7PEI0mgBt8l-NJAprx_PkKhV4.crl (hash: Q0+3W9xxojrMfwbgutwrsSaWi4WsHxZhHLaYvUnGq/E=) 2: 421FF25E18AD11EF99EAA661C4F9AE02.roa (hash: nArjp1EJ9Qh1GSnet/WM1j0sEl6S9LUtwKPDMLMbAas=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915408A/18845F6C18AC11EFB6F48137C4F9AE02/0N7PEI0mgBt8l-NJAprx_PkKhV4.crl rsync://rpki.apnic.net/member_repository/A915408A/18845F6C18AC11EFB6F48137C4F9AE02/0N7PEI0mgBt8l-NJAprx_PkKhV4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0N7PEI0mgBt8l-NJAprx_PkKhV4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 05:15:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 197 (0xc5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915408A, serialNumber=D0DECF108D26801B7C97E349029AF1FCF90A855E Validity Not Before: May 31 05:15:08 2025 GMT Not After : Jun 7 05:15:08 2025 GMT Subject: CN=683a905d-1278 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:2e:bd:59:02:d0:19:b7:97:6c:d2:2a:f4:2f: bd:71:e1:2b:9f:4f:08:8f:f9:24:31:74:55:2f:11: 5d:ae:d7:54:8f:33:a1:2b:57:24:c3:a6:b4:6d:72: 7f:f3:c9:b2:ca:0c:9b:01:b0:7e:af:07:5c:d9:86: ac:99:9c:e0:f8:0f:88:96:99:46:17:6d:ad:23:d4: 25:c0:2f:59:fc:4c:ce:02:6e:ee:2f:ac:76:ff:ad: 0a:7c:9e:1f:1e:09:57:1b:53:ef:71:f4:1b:ce:2e: c6:65:f3:95:79:d4:76:58:ba:4f:a9:30:9a:d3:eb: e0:c8:86:7e:d8:44:ea:15:a0:e7:71:c9:fc:8d:02: 09:9a:86:e3:14:a4:c1:be:e7:6a:cc:4d:76:11:2f: 2d:c8:73:1c:9c:79:03:46:65:63:1e:27:b9:c8:43: 78:24:69:9c:fd:d5:37:68:95:03:88:6f:05:19:75: 8f:1c:2d:52:87:a4:26:62:ed:1f:9e:f9:de:09:78: 30:e3:83:64:4f:f7:a4:81:c9:03:4d:65:97:23:3a: cb:d8:bc:22:ac:5a:46:3a:82:93:23:3f:85:20:d7: fd:27:fa:ba:20:2a:c9:4a:0a:cf:f0:fc:61:9c:51: 3b:f3:38:ec:da:82:bf:16:d7:2b:0a:b4:b9:7d:46: 98:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:88:DD:60:75:84:B4:D0:57:D6:A4:0E:FE:48:7D:5F:73:42:C7:A9 X509v3 Authority Key Identifier: keyid:D0:DE:CF:10:8D:26:80:1B:7C:97:E3:49:02:9A:F1:FC:F9:0A:85:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915408A/18845F6C18AC11EFB6F48137C4F9AE02/0N7PEI0mgBt8l-NJAprx_PkKhV4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0N7PEI0mgBt8l-NJAprx_PkKhV4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915408A/18845F6C18AC11EFB6F48137C4F9AE02/0N7PEI0mgBt8l-NJAprx_PkKhV4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1c:33:26:52:3b:31:c5:60:e5:09:63:ba:ad:08:9e:79:08:e9: 14:af:e0:07:cb:f8:c8:9c:67:91:c6:c8:67:7c:fd:c2:3d:80: c2:8f:bc:6a:6b:5c:a4:9f:2e:8a:6d:73:43:da:af:ed:e7:28: 58:2a:4a:f1:5c:60:51:50:96:dd:d4:ad:d0:f0:9b:52:9d:0c: 23:93:9d:69:23:27:2c:09:ce:82:e7:0a:49:57:fa:d7:99:a6: 11:f5:58:3c:10:8e:98:ad:7e:f3:54:89:09:cd:b2:fd:d2:26: 5e:b6:84:b1:8f:a1:30:59:ea:e0:de:a9:8e:41:1c:dc:52:57: 23:d1:8e:bf:60:e1:94:0a:93:d6:f8:31:9c:fb:a5:19:fa:21: 4a:11:75:7e:80:c3:83:81:61:cf:98:1f:45:ed:cd:54:99:29: 7a:5b:16:26:11:a8:1a:27:2a:99:10:54:b8:b2:0d:e4:a9:ba: d0:3d:11:bc:3f:e8:25:0c:e6:f8:a9:f2:99:b4:f3:7a:f9:61: 2b:90:c6:b8:35:8f:d4:01:72:c9:88:17:e6:1d:c0:56:f3:a5: 9b:83:b4:14:3d:66:5d:28:80:3a:a6:44:f9:93:ac:15:50:c7: 09:9d:fd:52:56:de:f4:77:7e:e6:68:d3:f6:b2:63:12:c3:b2: 4b:ad:d4:b6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTQwOEExMTAvBgNVBAUTKEQwREVDRjEwOEQyNjgwMUI3Qzk3RTM0OTAyOUFGMUZD RjkwQTg1NUUwHhcNMjUwNTMxMDUxNTA4WhcNMjUwNjA3MDUxNTA4WjAYMRYwFAYD VQQDEw02ODNhOTA1ZC0xMjc4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2i69WQLQGbeXbNIq9C+9ceErn08Ij/kkMXRVLxFdrtdUjzOhK1ckw6a0bXJ/ 88myygybAbB+rwdc2YasmZzg+A+IlplGF22tI9QlwC9Z/EzOAm7uL6x2/60KfJ4f HglXG1PvcfQbzi7GZfOVedR2WLpPqTCa0+vgyIZ+2ETqFaDnccn8jQIJmobjFKTB vudqzE12ES8tyHMcnHkDRmVjHie5yEN4JGmc/dU3aJUDiG8FGXWPHC1Sh6QmYu0f nvneCXgw44NkT/ekgckDTWWXIzrL2LwirFpGOoKTIz+FINf9J/q6ICrJSgrP8Pxh nFE78zjs2oK/FtcrCrS5fUaYqQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOGI3WB1 hLTQV9akDv5IfV9zQsepMB8GA1UdIwQYMBaAFNDezxCNJoAbfJfjSQKa8fz5CoVe MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NDA4QS8xODg0NUY2QzE4 QUMxMUVGQjZGNDgxMzdDNEY5QUUwMi8wTjdQRUkwbWdCdDhsLU5KQXByeF9Qa0to VjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzBON1BFSTBtZ0J0OGwtTkpBcHJ4X1BrS2hWNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NDA4QS8xODg0NUY2QzE4QUMxMUVGQjZGNDgxMzdDNEY5QUUwMi8wTjdQRUkwbWdC dDhsLU5KQXByeF9Qa0toVjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAcMyZSOzHFYOUJY7qtCJ55COkUr+AHy/jInGeRxshnfP3CPYDCj7xq a1ykny6KbXND2q/t5yhYKkrxXGBRUJbd1K3Q8JtSnQwjk51pIycsCc6C5wpJV/rX maYR9Vg8EI6YrX7zVIkJzbL90iZetoSxj6EwWerg3qmOQRzcUlcj0Y6/YOGUCpPW +DGc+6UZ+iFKEXV+gMODgWHPmB9F7c1UmSl6WxYmEagaJyqZEFS4sg3kqbrQPRG8 P+glDOb4qfKZtPN6+WErkMa4NY/UAXLJiBfmHcBW86Wbg7QUPWZdKIA6pkT5k6wV UMcJnf1SVt70d37maNP2smMSw7JLrdS2 -----END CERTIFICATE-----Generated at Sat May 31 17:42:38 2025 by rpki-client