$ rpki-client -vvf rpki.apnic.net/member_repository/A911ED2C/00373C6C9BBC11EE851ADD50C4F9AE02/nTQUKDsie49RLzBfKs20PN6eTRI.mft File: nTQUKDsie49RLzBfKs20PN6eTRI.mft (raw, json) Hash identifier: 84ww/ngAoXcU0jxGGaqa4ssxBoBPej+w2g7bjQZW+G0= Subject key identifier: 2D:F5:E1:6F:2D:5A:13:B5:B9:4C:B3:80:35:FA:81:D6:33:D4:B9:FB Authority key identifier: 9D:34:14:28:3B:22:7B:8F:51:2F:30:5F:2A:CD:B4:3C:DE:9E:4D:12 Certificate issuer: /CN=A911ED2C/serialNumber=9D3414283B227B8F512F305F2ACDB43CDE9E4D12 Certificate serial: 0138 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nTQUKDsie49RLzBfKs20PN6eTRI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911ED2C/00373C6C9BBC11EE851ADD50C4F9AE02/nTQUKDsie49RLzBfKs20PN6eTRI.mft Manifest number: 0115 Signing time: Thu 03 Apr 2025 04:29:21 +0000 Manifest this update: Thu 03 Apr 2025 04:29:20 +0000 Manifest next update: Thu 10 Apr 2025 04:29:20 +0000 Files and hashes: 1: nTQUKDsie49RLzBfKs20PN6eTRI.crl (hash: 7h/sN/LoixMql0Kzwyfa1kmBI3MvMupU8n2EXgNypxA=) 2: C75B642268F211EFB7A6A06EC4F9AE02.roa (hash: kOYdujebZuJtzPQYq/KrU4LAvGLUwAviwH7iInIzQIw=) 3: 908E69B20D4311F0B83AB36BC4F9AE02.roa (hash: T3LJotaESWHFF09iX5g1WTlmIxWJcjLGAaC0q00LC9A=) 4: 551036FCF1CA11EFA1495230C4F9AE02.roa (hash: arzezzJwAi/t7BgHje9UcAsQE7JCDVVYoepFJmOQbF8=) 5: EDAA86E4AD6D11EE83DA6253C4F9AE02.roa (hash: lAFnFIzcRDVgDsSYcjZRPgQLtWezbOK+1/I57oP5hYQ=) 6: 3C880EBABEEF11EF9178186BC4F9AE02.roa (hash: iJAvuEQuZJZzuKlMozj/voZPn9Nd6pZK++lpcpudEMw=) 7: EC985F92AD6D11EE83DA6253C4F9AE02.roa (hash: w8uUD+FE/qLP77HxuP2e7CVi5lI4nhNhSCuDldSdTWM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911ED2C/00373C6C9BBC11EE851ADD50C4F9AE02/nTQUKDsie49RLzBfKs20PN6eTRI.crl rsync://rpki.apnic.net/member_repository/A911ED2C/00373C6C9BBC11EE851ADD50C4F9AE02/nTQUKDsie49RLzBfKs20PN6eTRI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nTQUKDsie49RLzBfKs20PN6eTRI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Apr 2025 04:29:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 312 (0x138) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911ED2C Validity Not Before: Apr 3 04:29:20 2025 GMT Not After : Apr 10 04:29:20 2025 GMT Subject: CN=67ee0ea0-9201 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:c9:8e:1c:34:0c:2c:8c:f6:04:d8:65:60:1e: a3:e4:73:be:e7:64:07:12:5e:fd:bf:0b:f7:c7:a2: 60:fe:f3:d5:a3:eb:78:f4:7b:41:2f:71:dc:1e:a5: 71:d7:3b:9a:16:a3:3e:0b:c8:49:15:09:fe:93:7c: 03:04:bb:ec:b5:74:e1:9f:f5:b6:5c:bc:ee:b7:9f: 35:e5:df:de:07:f4:0f:b0:e1:ee:9b:5c:eb:bb:f3: 8f:40:30:d6:e8:12:20:33:31:b1:b7:91:ba:54:ba: 27:99:e1:77:e9:20:69:da:3e:ee:b8:7b:45:7f:34: ae:b4:f8:09:23:1a:d0:6e:fe:53:d2:e1:4c:bf:e4: ad:57:40:94:c1:a3:36:22:ef:e2:28:fc:90:62:06: 96:66:11:74:f3:e1:e0:66:fc:3f:60:6d:50:92:d7: fd:cc:fb:e8:9b:18:db:38:49:0b:51:ee:82:fa:90: a7:13:4b:7b:54:ea:5f:c6:8c:e2:fd:35:fd:fb:f1: 70:43:f5:5a:63:bf:3f:51:b1:1a:17:cd:36:38:af: cf:d7:5c:4e:e5:8a:58:c0:13:d7:df:91:05:4e:5e: d2:f4:e2:81:9e:f6:5d:6d:bf:94:88:a0:0c:a7:ed: ca:58:75:fe:2a:89:8f:c7:e2:59:32:a3:97:61:cc: 61:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:F5:E1:6F:2D:5A:13:B5:B9:4C:B3:80:35:FA:81:D6:33:D4:B9:FB X509v3 Authority Key Identifier: keyid:9D:34:14:28:3B:22:7B:8F:51:2F:30:5F:2A:CD:B4:3C:DE:9E:4D:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911ED2C/00373C6C9BBC11EE851ADD50C4F9AE02/nTQUKDsie49RLzBfKs20PN6eTRI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nTQUKDsie49RLzBfKs20PN6eTRI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911ED2C/00373C6C9BBC11EE851ADD50C4F9AE02/nTQUKDsie49RLzBfKs20PN6eTRI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3e:0d:33:b2:43:61:81:7a:28:f4:4a:51:3d:ef:9f:d3:39:5f: 3f:63:11:c5:f0:bb:a2:32:a8:e9:85:c6:9e:5c:d1:9e:c4:a1: d1:cb:5d:79:db:31:f3:c4:db:4a:fa:01:84:2f:c3:33:7f:54: 1a:24:cf:e3:67:5d:92:97:f5:11:3a:e6:f5:1f:b4:b2:4d:7e: 25:90:84:3c:ee:1d:53:2a:da:a1:5a:72:ed:d7:8a:da:c2:7c: a9:d6:89:b3:cd:d8:ac:13:2e:53:eb:7a:55:66:d1:4d:3e:95: 67:df:cc:ca:6d:c5:3b:88:75:6a:b5:eb:a7:3d:09:8d:b5:d7: c4:9a:79:d1:84:d6:29:15:6f:bf:1a:5f:b7:dd:d2:b2:fa:99: 40:b5:b3:12:21:2b:cc:ec:24:23:86:b4:47:c3:c0:e6:9e:65: 92:de:c6:f5:29:7e:c3:8a:83:ba:89:0d:3e:2a:fd:0b:73:d4: 09:00:ce:b4:0d:a1:56:6c:40:53:c8:b5:8d:e9:d0:74:45:bd: 15:ac:f4:d3:d6:c4:73:50:21:b7:a9:68:ec:a8:90:56:a9:e0: d2:e7:73:c0:0a:cd:0e:2e:27:d3:4f:1f:68:d7:10:90:c1:f0: ee:b1:e9:ed:97:ba:8b:53:e8:4b:da:93:d3:14:e1:c5:d0:90: 99:be:ad:9f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICATgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUVEMkMxMTAvBgNVBAUTKDlEMzQxNDI4M0IyMjdCOEY1MTJGMzA1RjJBQ0RCNDND REU5RTREMTIwHhcNMjUwNDAzMDQyOTIwWhcNMjUwNDEwMDQyOTIwWjAYMRYwFAYD VQQDEw02N2VlMGVhMC05MjAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzcmOHDQMLIz2BNhlYB6j5HO+52QHEl79vwv3x6Jg/vPVo+t49HtBL3HcHqVx 1zuaFqM+C8hJFQn+k3wDBLvstXThn/W2XLzut5815d/eB/QPsOHum1zru/OPQDDW 6BIgMzGxt5G6VLonmeF36SBp2j7uuHtFfzSutPgJIxrQbv5T0uFMv+StV0CUwaM2 Iu/iKPyQYgaWZhF08+HgZvw/YG1Qktf9zPvomxjbOEkLUe6C+pCnE0t7VOpfxozi /TX9+/FwQ/VaY78/UbEaF802OK/P11xO5YpYwBPX35EFTl7S9OKBnvZdbb+UiKAM p+3KWHX+KomPx+JZMqOXYcxhIQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC314W8t WhO1uUyzgDX6gdYz1Ln7MB8GA1UdIwQYMBaAFJ00FCg7InuPUS8wXyrNtDzenk0S MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRUQyQy8wMDM3M0M2QzlC QkMxMUVFODUxQURENTBDNEY5QUUwMi9uVFFVS0RzaWU0OVJMekJmS3MyMFBONmVU UkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25UUVVLRHNpZTQ5Ukx6QmZLczIwUE42ZVRSSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RUQyQy8wMDM3M0M2QzlCQkMxMUVFODUxQURENTBDNEY5QUUwMi9uVFFVS0RzaWU0 OVJMekJmS3MyMFBONmVUUkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA+DTOyQ2GBeij0SlE975/TOV8/YxHF8LuiMqjphcaeXNGexKHRy115 2zHzxNtK+gGEL8Mzf1QaJM/jZ12Sl/UROub1H7SyTX4lkIQ87h1TKtqhWnLt14ra wnyp1omzzdisEy5T63pVZtFNPpVn38zKbcU7iHVqteunPQmNtdfEmnnRhNYpFW+/ Gl+33dKy+plAtbMSISvM7CQjhrRHw8DmnmWS3sb1KX7DioO6iQ0+Kv0Lc9QJAM60 DaFWbEBTyLWN6dB0Rb0VrPTT1sRzUCG3qWjsqJBWqeDS53PACs0OLifTTx9o1xCQ wfDusentl7qLU+hL2pPTFOHF0JCZvq2f -----END CERTIFICATE-----Generated at Fri Apr 4 21:54:04 2025 by rpki-client