$ rpki-client -vvf rpki.apnic.net/member_repository/A911E351/5BCF88A6784E11EC8A44450EC4F9AE02/NdqtT3Wuk43GUzSEzejIF93Csig.mft File: NdqtT3Wuk43GUzSEzejIF93Csig.mft (raw, json) Hash identifier: pJAoCeaKIhDoAz4G7TIczurwCXblDHd/wZqNycfEMuY= Subject key identifier: 2D:7D:E0:32:78:73:37:88:86:B0:A5:FD:14:61:98:BF:28:50:42:62 Authority key identifier: 35:DA:AD:4F:75:AE:93:8D:C6:53:34:84:CD:E8:C8:17:DD:C2:B2:28 Certificate issuer: /CN=A911E351/serialNumber=35DAAD4F75AE938DC6533484CDE8C817DDC2B228 Certificate serial: 03DA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NdqtT3Wuk43GUzSEzejIF93Csig.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911E351/5BCF88A6784E11EC8A44450EC4F9AE02/NdqtT3Wuk43GUzSEzejIF93Csig.mft Manifest number: 03D6 Signing time: Sat 29 Mar 2025 00:49:45 +0000 Manifest this update: Sat 29 Mar 2025 00:49:45 +0000 Manifest next update: Sat 05 Apr 2025 00:49:45 +0000 Files and hashes: 1: NdqtT3Wuk43GUzSEzejIF93Csig.crl (hash: OfyWeIxflnRxtG3b+MBzr4HVpd60eCFiiQsjFO/hvxE=) 2: E9ED080A785011ECBD2B6A10C4F9AE02.roa (hash: iYM80ZUZv11SjTkmdUWv3G7CQp9g2JbkQfuMruAgJ5Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911E351/5BCF88A6784E11EC8A44450EC4F9AE02/NdqtT3Wuk43GUzSEzejIF93Csig.crl rsync://rpki.apnic.net/member_repository/A911E351/5BCF88A6784E11EC8A44450EC4F9AE02/NdqtT3Wuk43GUzSEzejIF93Csig.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NdqtT3Wuk43GUzSEzejIF93Csig.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Apr 2025 00:49:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 986 (0x3da) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911E351 Validity Not Before: Mar 29 00:49:45 2025 GMT Not After : Apr 5 00:49:45 2025 GMT Subject: CN=67e743a9-036e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:f8:90:c9:bc:e0:f2:27:8d:85:fc:f4:ca:64: 6c:60:c4:95:8e:a8:a3:b9:e7:5b:6b:09:59:de:46: 8e:8f:2e:ef:cc:bf:35:f2:95:1a:64:dc:e2:38:47: e6:78:2a:d1:ff:40:5e:f0:50:05:66:2c:e6:de:7d: b9:9e:2e:09:87:39:b7:f6:45:27:28:c8:10:ee:b2: 47:a3:88:4e:1b:dc:7a:2f:02:22:fc:93:c3:e7:b3: db:30:be:eb:ec:43:83:f7:8d:dd:19:32:a4:3c:9b: d3:82:05:41:3b:3f:83:9e:57:25:16:d4:e4:ba:7f: cd:af:89:11:e0:6e:37:f3:aa:13:46:f9:e2:4a:f5: 89:0f:3f:fe:ae:ce:b3:90:a2:ac:19:0b:4d:6c:b2: ca:7b:28:f4:41:55:8e:ce:da:47:77:4e:f6:96:e2: 6d:86:83:4d:7d:f6:d7:d6:0d:a9:f5:45:3e:a8:e1: f9:7c:65:de:4b:08:10:47:3c:5d:f8:3c:a0:69:38: 09:c3:88:50:ad:f8:f0:5e:1b:1a:b5:0e:2a:b1:b1: 82:ef:a8:f1:6d:e2:a8:79:10:d7:49:b3:9a:e2:68: 4c:8b:e6:5e:8f:05:ee:4d:eb:68:7e:72:f9:ed:72: 90:ad:8f:cc:b0:34:2d:f8:e2:ee:d5:98:ab:18:4a: e8:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:7D:E0:32:78:73:37:88:86:B0:A5:FD:14:61:98:BF:28:50:42:62 X509v3 Authority Key Identifier: keyid:35:DA:AD:4F:75:AE:93:8D:C6:53:34:84:CD:E8:C8:17:DD:C2:B2:28 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911E351/5BCF88A6784E11EC8A44450EC4F9AE02/NdqtT3Wuk43GUzSEzejIF93Csig.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NdqtT3Wuk43GUzSEzejIF93Csig.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911E351/5BCF88A6784E11EC8A44450EC4F9AE02/NdqtT3Wuk43GUzSEzejIF93Csig.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 04:3c:77:5b:b3:df:6c:80:7f:75:f6:93:a3:fa:35:20:dd:85: 9e:0b:d6:79:d2:c6:87:fb:2b:82:e6:7d:3c:91:70:d0:5c:5c: 32:46:62:17:64:42:79:9b:9c:e8:39:c1:12:5e:7c:21:ac:f2: 2d:05:f5:fa:6d:a5:5b:a7:09:fd:a6:4c:ef:44:55:cb:32:10: af:75:71:c4:12:df:ba:b7:d0:92:2a:30:58:05:44:5d:04:99: b3:48:70:a8:67:b7:93:7f:d0:2e:87:4d:33:1d:1b:7c:23:3e: e3:32:18:27:88:b7:c6:09:75:65:82:e7:f9:68:19:e3:6b:9b: c5:a6:cc:f4:f6:8d:42:ea:46:b5:34:f3:91:7e:75:fa:c8:44: c9:b0:d6:00:78:ee:ff:e0:5b:b3:37:4b:a9:a7:a3:f6:e8:65: 79:0b:f6:54:f6:62:50:2f:d2:59:ca:40:71:6d:02:d4:26:f9: bc:fb:0d:aa:a3:f1:55:7d:0c:25:2d:2c:c6:06:09:6c:a0:23: c8:56:f6:5d:8f:2e:4a:34:80:50:b2:2b:33:04:15:98:61:48: 84:b9:6b:27:c4:8e:d6:a2:99:ed:21:78:d1:2a:18:c8:c6:e3: 06:75:63:d0:e2:3c:bd:49:e1:4b:a2:29:2e:28:54:cd:02:74: 80:da:e0:6d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA9owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUUzNTExMTAvBgNVBAUTKDM1REFBRDRGNzVBRTkzOERDNjUzMzQ4NENERThDODE3 RERDMkIyMjgwHhcNMjUwMzI5MDA0OTQ1WhcNMjUwNDA1MDA0OTQ1WjAYMRYwFAYD VQQDEw02N2U3NDNhOS0wMzZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0PiQybzg8ieNhfz0ymRsYMSVjqijuedbawlZ3kaOjy7vzL818pUaZNziOEfm eCrR/0Be8FAFZizm3n25ni4Jhzm39kUnKMgQ7rJHo4hOG9x6LwIi/JPD57PbML7r 7EOD943dGTKkPJvTggVBOz+DnlclFtTkun/Nr4kR4G4386oTRvniSvWJDz/+rs6z kKKsGQtNbLLKeyj0QVWOztpHd072luJthoNNffbX1g2p9UU+qOH5fGXeSwgQRzxd +DygaTgJw4hQrfjwXhsatQ4qsbGC76jxbeKoeRDXSbOa4mhMi+ZejwXuTetofnL5 7XKQrY/MsDQt+OLu1ZirGEro3wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC194DJ4 czeIhrCl/RRhmL8oUEJiMB8GA1UdIwQYMBaAFDXarU91rpONxlM0hM3oyBfdwrIo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRTM1MS81QkNGODhBNjc4 NEUxMUVDOEE0NDQ1MEVDNEY5QUUwMi9OZHF0VDNXdWs0M0dVelNFemVqSUY5M0Nz aWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05kcXRUM1d1azQzR1V6U0V6ZWpJRjkzQ3NpZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RTM1MS81QkNGODhBNjc4NEUxMUVDOEE0NDQ1MEVDNEY5QUUwMi9OZHF0VDNXdWs0 M0dVelNFemVqSUY5M0NzaWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAEPHdbs99sgH919pOj+jUg3YWeC9Z50saH+yuC5n08kXDQXFwyRmIX ZEJ5m5zoOcESXnwhrPItBfX6baVbpwn9pkzvRFXLMhCvdXHEEt+6t9CSKjBYBURd BJmzSHCoZ7eTf9Auh00zHRt8Iz7jMhgniLfGCXVlguf5aBnja5vFpsz09o1C6ka1 NPORfnX6yETJsNYAeO7/4FuzN0upp6P26GV5C/ZU9mJQL9JZykBxbQLUJvm8+w2q o/FVfQwlLSzGBglsoCPIVvZdjy5KNIBQsiszBBWYYUiEuWsnxI7WopntIXjRKhjI xuMGdWPQ4jy9SeFLoikuKFTNAnSA2uBt -----END CERTIFICATE-----Generated at Fri Apr 4 22:09:21 2025 by rpki-client