$ rpki-client -vvf rpki.apnic.net/member_repository/A913F333/DECB65A4239811ED9067226FC4F9AE02/NkCMEcVHK4Ikiv_r7tuyDj4Hps0.mft File: NkCMEcVHK4Ikiv_r7tuyDj4Hps0.mft (raw, json) Hash identifier: vAk+cWZjWPXvm7VkOCOXA9SVrO0pMvErAo183bAKjIg= Subject key identifier: 6E:D9:B3:75:DB:BF:99:CA:4A:8E:73:E0:63:50:14:CD:44:FC:CB:C0 Authority key identifier: 36:40:8C:11:C5:47:2B:82:24:8A:FF:EB:EE:DB:B2:0E:3E:07:A6:CD Certificate issuer: /CN=A913F333/serialNumber=36408C11C5472B82248AFFEBEEDBB20E3E07A6CD Certificate serial: 0240 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NkCMEcVHK4Ikiv_r7tuyDj4Hps0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913F333/DECB65A4239811ED9067226FC4F9AE02/NkCMEcVHK4Ikiv_r7tuyDj4Hps0.mft Manifest number: 0233 Signing time: Wed 09 Apr 2025 01:36:08 +0000 Manifest this update: Wed 09 Apr 2025 01:36:08 +0000 Manifest next update: Wed 16 Apr 2025 01:36:07 +0000 Files and hashes: 1: NkCMEcVHK4Ikiv_r7tuyDj4Hps0.crl (hash: eW/zIxoqr+lD3mq15U0Hu15yi0G4UBcgHlsakb2+uc0=) 2: 134B439A91B611ED8BA25C80C4F9AE02.roa (hash: YssH476E2tgxPdw+/0l4VE/a3GZaUyUxDjk4z13BJXU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913F333/DECB65A4239811ED9067226FC4F9AE02/NkCMEcVHK4Ikiv_r7tuyDj4Hps0.crl rsync://rpki.apnic.net/member_repository/A913F333/DECB65A4239811ED9067226FC4F9AE02/NkCMEcVHK4Ikiv_r7tuyDj4Hps0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NkCMEcVHK4Ikiv_r7tuyDj4Hps0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 16 Apr 2025 01:36:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 576 (0x240) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913F333 Validity Not Before: Apr 9 01:36:08 2025 GMT Not After : Apr 16 01:36:07 2025 GMT Subject: CN=67f5cf08-a6ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:05:40:f6:bc:81:6f:0a:4a:8b:5e:ef:1d:70: 68:ca:b1:26:34:01:ce:cd:4a:1e:c5:10:f6:aa:46: 63:17:39:d8:f2:5d:b6:40:34:1d:59:29:91:0e:55: d9:79:6e:02:b8:8c:5e:c5:d4:6f:3c:e8:40:ab:0e: 18:5a:04:26:52:03:b5:1d:ed:2a:0b:a2:2d:a8:5d: 62:d6:9d:1d:50:bd:e0:ec:a9:e6:14:0a:9a:71:a8: 53:8f:5d:53:f4:db:f5:86:1c:a3:58:e0:cb:5b:3b: 98:dc:e2:c0:d6:5d:5b:66:0f:0e:b1:f6:21:22:92: d1:23:ce:c7:9c:d7:b8:c9:ce:ec:02:c0:de:13:20: d6:df:69:2d:65:a5:6c:e2:60:11:cf:8e:96:ab:69: 3b:44:68:e0:af:ec:3d:66:71:ac:c2:12:36:a7:fe: 5b:c0:d1:26:1e:b8:3c:b9:23:3f:a9:77:6b:d2:61: 1b:70:07:cf:1f:ae:1f:86:b0:f6:93:d3:de:37:ad: e9:fc:4a:a8:38:5f:e6:97:63:4e:bb:bb:75:0e:5d: 9a:bc:4b:50:7b:01:ec:a1:95:75:3a:e5:d6:e5:c2: 81:2f:05:85:b9:30:7f:93:8c:ac:51:4e:10:ca:be: d2:21:b9:68:0b:1e:a0:02:91:64:00:a9:a2:8b:28: 85:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:D9:B3:75:DB:BF:99:CA:4A:8E:73:E0:63:50:14:CD:44:FC:CB:C0 X509v3 Authority Key Identifier: keyid:36:40:8C:11:C5:47:2B:82:24:8A:FF:EB:EE:DB:B2:0E:3E:07:A6:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913F333/DECB65A4239811ED9067226FC4F9AE02/NkCMEcVHK4Ikiv_r7tuyDj4Hps0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NkCMEcVHK4Ikiv_r7tuyDj4Hps0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913F333/DECB65A4239811ED9067226FC4F9AE02/NkCMEcVHK4Ikiv_r7tuyDj4Hps0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 51:7c:c2:34:29:c6:9d:d5:04:b8:2e:67:13:7b:91:6f:33:8b: 19:26:4d:da:ed:30:fc:71:e1:c3:32:92:0c:e1:07:68:44:2c: 0a:14:f5:7a:5f:bb:47:12:c9:f9:0b:44:cb:64:69:63:81:c3: ac:bf:a4:92:8e:cb:1d:15:61:9c:e1:5a:90:45:91:1e:d3:0c: 57:51:15:ae:bb:eb:01:2c:26:e8:3b:6c:37:c0:5e:cf:c5:d0: f9:54:65:cf:e9:fc:60:a4:53:32:19:a7:62:d1:97:ee:90:62: b8:ff:3f:2f:92:81:a5:b8:4a:9a:e7:6f:32:d8:96:bf:43:4c: b4:a1:1b:40:a0:7b:99:8c:59:00:79:08:3e:ea:4e:33:bd:c0: 6c:c3:92:54:60:80:b9:79:3b:6c:e7:0b:b4:75:85:77:7d:b4: f1:a2:12:fe:1a:f8:68:bf:ff:4f:0e:b1:ed:6e:f0:c6:2b:f3: a4:f9:bc:cb:a7:f6:49:78:e5:70:5b:6d:a4:df:7c:f5:2e:90: 42:e0:ed:79:46:23:53:41:f1:e6:05:f5:67:db:08:76:e1:47: 9d:70:0a:5b:2f:4b:92:94:7e:e7:bb:c0:69:f9:a5:ad:ff:b9: e6:65:8c:39:17:1c:aa:47:72:c3:f7:6c:24:ec:18:28:2a:9b: 91:99:95:60 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAkAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0YzMzMxMTAvBgNVBAUTKDM2NDA4QzExQzU0NzJCODIyNDhBRkZFQkVFREJCMjBF M0UwN0E2Q0QwHhcNMjUwNDA5MDEzNjA4WhcNMjUwNDE2MDEzNjA3WjAYMRYwFAYD VQQDEw02N2Y1Y2YwOC1hNmFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqAVA9ryBbwpKi17vHXBoyrEmNAHOzUoexRD2qkZjFznY8l22QDQdWSmRDlXZ eW4CuIxexdRvPOhAqw4YWgQmUgO1He0qC6ItqF1i1p0dUL3g7KnmFAqacahTj11T 9Nv1hhyjWODLWzuY3OLA1l1bZg8OsfYhIpLRI87HnNe4yc7sAsDeEyDW32ktZaVs 4mARz46Wq2k7RGjgr+w9ZnGswhI2p/5bwNEmHrg8uSM/qXdr0mEbcAfPH64fhrD2 k9PeN63p/EqoOF/ml2NOu7t1Dl2avEtQewHsoZV1OuXW5cKBLwWFuTB/k4ysUU4Q yr7SIbloCx6gApFkAKmiiyiFUwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG7Zs3Xb v5nKSo5z4GNQFM1E/MvAMB8GA1UdIwQYMBaAFDZAjBHFRyuCJIr/6+7bsg4+B6bN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRjMzMy9ERUNCNjVBNDIz OTgxMUVEOTA2NzIyNkZDNEY5QUUwMi9Oa0NNRWNWSEs0SWtpdl9yN3R1eURqNEhw czAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05rQ01FY1ZISzRJa2l2X3I3dHV5RGo0SHBzMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RjMzMy9ERUNCNjVBNDIzOTgxMUVEOTA2NzIyNkZDNEY5QUUwMi9Oa0NNRWNWSEs0 SWtpdl9yN3R1eURqNEhwczAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBRfMI0Kcad1QS4LmcTe5FvM4sZJk3a7TD8ceHDMpIM4QdoRCwKFPV6 X7tHEsn5C0TLZGljgcOsv6SSjssdFWGc4VqQRZEe0wxXURWuu+sBLCboO2w3wF7P xdD5VGXP6fxgpFMyGadi0ZfukGK4/z8vkoGluEqa528y2Ja/Q0y0oRtAoHuZjFkA eQg+6k4zvcBsw5JUYIC5eTts5wu0dYV3fbTxohL+Gvhov/9PDrHtbvDGK/Ok+bzL p/ZJeOVwW22k33z1LpBC4O15RiNTQfHmBfVn2wh24UedcApbL0uSlH7nu8Bp+aWt /7nmZYw5FxyqR3LD92wk7BgoKpuRmZVg -----END CERTIFICATE-----Generated at Thu Apr 10 21:40:25 2025 by rpki-client