$ rpki-client -vvf rpki.apnic.net/member_repository/A917190F/B3CA76C0FA3111EABD249E7AC4F9AE02/nQdEbvmfPFfCnFgta3rKRzX05HA.mft File: nQdEbvmfPFfCnFgta3rKRzX05HA.mft (raw, json) Hash identifier: e7YE+tl+TWrpU1wXo4Z9a6CKESl4hXGAo10kB0ifJsQ= Subject key identifier: 2C:7F:C3:E1:10:B1:F6:EE:07:9C:16:BE:84:B8:56:D7:CC:11:CF:B6 Authority key identifier: 9D:07:44:6E:F9:9F:3C:57:C2:9C:58:2D:6B:7A:CA:47:35:F4:E4:70 Certificate issuer: /CN=A917190F/serialNumber=9D07446EF99F3C57C29C582D6B7ACA4735F4E470 Certificate serial: 0807 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nQdEbvmfPFfCnFgta3rKRzX05HA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917190F/B3CA76C0FA3111EABD249E7AC4F9AE02/nQdEbvmfPFfCnFgta3rKRzX05HA.mft Manifest number: 07D0 Signing time: Wed 12 Mar 2025 20:55:22 +0000 Manifest this update: Wed 12 Mar 2025 20:55:21 +0000 Manifest next update: Wed 19 Mar 2025 20:55:21 +0000 Files and hashes: 1: nQdEbvmfPFfCnFgta3rKRzX05HA.crl (hash: fkTRunkwD2UvhCLju3m9uvezcN8v/+B96B5Zo+cRJWk=) 2: 39C67EFCB77711EFACD51778C4F9AE02.roa (hash: 8rIyXoL5Gs7jLLbRH396TCE4QCJidAVlris0YAU7RL0=) 3: 8FFCD106CF5511ED870A7753C4F9AE02.roa (hash: O4Np0XtDQoEvb+gWsTJXU39EKi5Py43jm59eT2hWjjY=) 4: A6D1B25E5AE511EEAD94D258C4F9AE02.roa (hash: hZG4bG/zIGOWdRwpBTCsmc07NfVhuGqDmS9pSUVeD1I=) 5: C013D3A4B2B511EF81703019C4F9AE02.roa (hash: slFLF/nNcRmvVbWzDwxxPzlcrLH2s/Zde9GjVjPqlO0=) 6: BEC6DAC8B2B511EF81703019C4F9AE02.roa (hash: 3W+S0LJThnJ7HFnoC2hqRoDyAMv/ObtzTy7MQ7s+IZ8=) 7: 394BF592B77711EFACD51778C4F9AE02.roa (hash: LHaIgZmgEGGhHJxPJAJ50n+DoMeW6y27wrzIMYcgRDs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917190F/B3CA76C0FA3111EABD249E7AC4F9AE02/nQdEbvmfPFfCnFgta3rKRzX05HA.crl rsync://rpki.apnic.net/member_repository/A917190F/B3CA76C0FA3111EABD249E7AC4F9AE02/nQdEbvmfPFfCnFgta3rKRzX05HA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nQdEbvmfPFfCnFgta3rKRzX05HA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 19 Mar 2025 20:55:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2055 (0x807) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917190F Validity Not Before: Mar 12 20:55:21 2025 GMT Not After : Mar 19 20:55:21 2025 GMT Subject: CN=67d1f4ba-b75b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:a2:77:d4:a6:42:c2:54:71:03:7a:b9:48:5c: 0d:36:11:38:81:76:a5:66:85:c8:a6:37:b5:c8:41: cf:df:ae:fa:04:6d:84:64:3d:80:c2:8f:2e:93:d2: 9c:4a:c7:b6:26:69:56:dd:84:2b:8d:ed:a9:eb:86: 8d:78:ea:ab:08:1c:df:bc:e9:3e:f7:f8:f3:52:87: d2:25:3e:c5:c8:f2:5e:65:8a:9b:61:4e:46:4f:43: ec:b7:d7:ab:ae:62:24:3f:2b:0f:20:58:8d:7d:59: d6:f0:57:e6:1f:8e:36:01:d2:56:15:69:f0:97:cf: 5d:55:bf:6a:fc:d7:ff:f0:ef:0a:de:5d:38:e7:04: 8c:dc:25:de:c3:bf:84:33:f5:7e:96:6b:24:89:04: 9e:16:1b:bf:fb:00:4e:a4:b3:11:2d:dd:ae:9e:77: 39:1e:1f:7d:69:bc:fe:4f:93:b5:6f:2d:46:a9:1f: 9f:b8:4d:48:5d:50:23:b4:ff:45:3d:b8:b2:7e:8f: ce:38:88:02:4e:00:f6:5f:58:6d:6e:f8:48:ac:a1: 3e:19:1a:67:3d:3b:80:af:ea:31:c3:cc:fd:b1:c3: 00:05:cb:c8:8a:84:35:7b:4e:b0:33:86:0d:a0:98: 16:9a:a4:9e:be:2b:4b:24:5b:ca:66:1b:3f:ee:a9: 33:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:7F:C3:E1:10:B1:F6:EE:07:9C:16:BE:84:B8:56:D7:CC:11:CF:B6 X509v3 Authority Key Identifier: keyid:9D:07:44:6E:F9:9F:3C:57:C2:9C:58:2D:6B:7A:CA:47:35:F4:E4:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917190F/B3CA76C0FA3111EABD249E7AC4F9AE02/nQdEbvmfPFfCnFgta3rKRzX05HA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nQdEbvmfPFfCnFgta3rKRzX05HA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917190F/B3CA76C0FA3111EABD249E7AC4F9AE02/nQdEbvmfPFfCnFgta3rKRzX05HA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 66:5c:ad:e7:e5:e8:cb:78:ae:12:6e:0f:27:84:22:f9:04:0a: 60:df:1c:2b:9c:47:13:b8:47:e6:9a:12:4a:7d:ba:e7:2a:c9: 81:9f:61:78:3f:70:db:f2:aa:0d:76:5a:02:ba:11:3c:06:02: 13:17:e5:3e:4f:8b:f5:3d:a5:01:71:8f:f2:fc:6f:5d:37:eb: 63:4c:38:ff:1c:45:e4:08:2d:e3:48:f6:1b:7c:ea:78:98:38: b6:65:15:07:d8:11:a6:24:cc:bf:3c:41:4b:a4:70:05:95:78: 9a:a6:df:62:4e:03:aa:88:a2:74:c4:f4:f7:4a:ec:66:b4:62: 53:2e:80:f3:91:a6:e8:9b:6f:8f:f8:22:07:a7:e4:93:2b:67: be:c4:48:96:6c:6a:3e:74:75:5f:fb:00:65:dc:0f:3d:69:85: 6a:43:4f:18:2c:f9:56:d6:0a:db:62:cd:59:8d:c3:66:b0:7a: 8c:ad:cf:38:c2:83:10:ef:2c:9c:2f:37:dd:e5:40:2e:92:df: c3:e0:d9:fe:c0:1e:59:74:50:2a:40:77:2f:a5:d1:ab:3c:f4: 1a:84:6b:2b:1f:36:b9:da:10:80:f0:28:5f:87:cc:d9:69:43: 1a:37:cc:8a:5a:a6:f4:3b:76:22:2e:c8:f7:08:03:a9:4c:0a: 5e:06:af:e5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCAcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzE5MEYxMTAvBgNVBAUTKDlEMDc0NDZFRjk5RjNDNTdDMjlDNTgyRDZCN0FDQTQ3 MzVGNEU0NzAwHhcNMjUwMzEyMjA1NTIxWhcNMjUwMzE5MjA1NTIxWjAYMRYwFAYD VQQDEw02N2QxZjRiYS1iNzViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA56J31KZCwlRxA3q5SFwNNhE4gXalZoXIpje1yEHP3676BG2EZD2Awo8uk9Kc Sse2JmlW3YQrje2p64aNeOqrCBzfvOk+9/jzUofSJT7FyPJeZYqbYU5GT0Pst9er rmIkPysPIFiNfVnW8FfmH442AdJWFWnwl89dVb9q/Nf/8O8K3l045wSM3CXew7+E M/V+lmskiQSeFhu/+wBOpLMRLd2unnc5Hh99abz+T5O1by1GqR+fuE1IXVAjtP9F Pbiyfo/OOIgCTgD2X1htbvhIrKE+GRpnPTuAr+oxw8z9scMABcvIioQ1e06wM4YN oJgWmqSevitLJFvKZhs/7qkznQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCx/w+EQ sfbuB5wWvoS4VtfMEc+2MB8GA1UdIwQYMBaAFJ0HRG75nzxXwpxYLWt6ykc19ORw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MTkwRi9CM0NBNzZDMEZB MzExMUVBQkQyNDlFN0FDNEY5QUUwMi9uUWRFYnZtZlBGZkNuRmd0YTNyS1J6WDA1 SEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25RZEVidm1mUEZmQ25GZ3RhM3JLUnpYMDVIQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MTkwRi9CM0NBNzZDMEZBMzExMUVBQkQyNDlFN0FDNEY5QUUwMi9uUWRFYnZtZlBG ZkNuRmd0YTNyS1J6WDA1SEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBmXK3n5ejLeK4Sbg8nhCL5BApg3xwrnEcTuEfmmhJKfbrnKsmBn2F4 P3Db8qoNdloCuhE8BgITF+U+T4v1PaUBcY/y/G9dN+tjTDj/HEXkCC3jSPYbfOp4 mDi2ZRUH2BGmJMy/PEFLpHAFlXiapt9iTgOqiKJ0xPT3SuxmtGJTLoDzkabom2+P +CIHp+STK2e+xEiWbGo+dHVf+wBl3A89aYVqQ08YLPlW1grbYs1ZjcNmsHqMrc84 woMQ7yycLzfd5UAukt/D4Nn+wB5ZdFAqQHcvpdGrPPQahGsrHza52hCA8Chfh8zZ aUMaN8yKWqb0O3YiLsj3CAOpTApeBq/l -----END CERTIFICATE-----Generated at Thu Mar 13 21:31:05 2025 by rpki-client