$ rpki-client -vvf rpki.apnic.net/member_repository/A91452AC/A48D5966BB3E11EAA29EE321C4F9AE02/Ntd-kkOrui_VSWopGDC304sLy8Q.mft File: Ntd-kkOrui_VSWopGDC304sLy8Q.mft (raw, json) Hash identifier: KqVCqv3qLMaa7XEgYuP3JwWWlE/0ocR6cgm3oIBfDqA= Subject key identifier: BD:DB:62:2F:D0:C2:20:8C:CC:C3:63:B7:B2:51:2D:92:52:7A:E3:6E Authority key identifier: 36:D7:7E:92:43:AB:BA:2F:D5:49:6A:29:18:30:B7:D3:8B:0B:CB:C4 Certificate issuer: /CN=A91452AC/serialNumber=36D77E9243ABBA2FD5496A291830B7D38B0BCBC4 Certificate serial: 08AE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ntd-kkOrui_VSWopGDC304sLy8Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91452AC/A48D5966BB3E11EAA29EE321C4F9AE02/Ntd-kkOrui_VSWopGDC304sLy8Q.mft Manifest number: 0892 Signing time: Fri 04 Apr 2025 20:46:21 +0000 Manifest this update: Fri 04 Apr 2025 20:46:20 +0000 Manifest next update: Fri 11 Apr 2025 20:46:20 +0000 Files and hashes: 1: Ntd-kkOrui_VSWopGDC304sLy8Q.crl (hash: tFeSlZ7ahAopBS7FgEJRdWIb9mDPzC3n4funpU/BkBw=) 2: B453EBC4BB4011EAAF70B028C4F9AE02.roa (hash: Nz/7xCUgKfmqkXApuxeo5myCUO+mgajFtNE4r7Ggzao=) 3: A58B9338AD4A11EBA6B48687C4F9AE02.roa (hash: 9S3WJERMTtwQwqkFdyQh2FAfBQXuWIoDgdAQjyhftzk=) 4: 72E60DEA3CC911EDA5EBD21DC4F9AE02.roa (hash: zq2Qkn/Tk6HTf9mmAUUEV4eovm/AM6TvEoGB/VFCywQ=) 5: 0F91DE9EAD4C11EB903C150DC4F9AE02.roa (hash: KYXdBuY8eVoROAmSDw7JnT54RB6WWf5lcCmMUouYwzY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91452AC/A48D5966BB3E11EAA29EE321C4F9AE02/Ntd-kkOrui_VSWopGDC304sLy8Q.crl rsync://rpki.apnic.net/member_repository/A91452AC/A48D5966BB3E11EAA29EE321C4F9AE02/Ntd-kkOrui_VSWopGDC304sLy8Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ntd-kkOrui_VSWopGDC304sLy8Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 19:54:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2222 (0x8ae) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91452AC Validity Not Before: Apr 4 20:46:20 2025 GMT Not After : Apr 11 20:46:20 2025 GMT Subject: CN=67f0451c-176b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:ef:9e:48:ae:ac:15:58:35:c8:b0:2d:7e:02: 60:46:17:22:bd:d3:de:21:cb:88:53:aa:eb:27:f2: 73:01:f2:a8:2a:96:37:48:43:22:9e:ca:3f:9e:c3: d0:d2:06:32:4e:6c:30:d0:5a:14:69:5a:56:74:22: ab:12:2b:5b:00:6c:4b:32:f4:5b:cc:dd:a3:76:8b: 4d:4d:a1:79:b2:10:53:5e:aa:1e:29:8b:93:db:41: 64:46:fb:ab:73:dc:a7:c2:af:c5:49:39:4c:a4:ad: 12:4b:9f:f6:2e:cf:fb:e0:30:29:2b:de:8c:b1:ad: 7b:64:c5:98:03:69:ae:bf:02:03:33:7e:05:13:43: 8f:62:fb:67:40:05:0a:8f:e6:13:fb:a0:88:1e:a8: d7:84:3a:db:bf:11:83:bb:62:61:f7:57:65:6c:80: 64:cf:31:6d:71:5a:12:e3:84:e7:e7:da:b5:cc:e7: 9c:27:5d:18:d6:cf:96:92:27:c9:2c:64:b0:55:17: 12:d4:0b:93:a6:d9:f8:45:f2:5e:b5:0d:ee:0b:50: 41:c8:38:e4:2a:d6:8a:e4:a2:e0:2d:81:75:e6:70: 41:78:3a:62:b6:b1:f0:06:f9:35:65:62:3a:90:c2: 4a:d4:cc:cc:d4:0c:14:76:94:99:a8:b1:ad:49:ec: 61:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:DB:62:2F:D0:C2:20:8C:CC:C3:63:B7:B2:51:2D:92:52:7A:E3:6E X509v3 Authority Key Identifier: keyid:36:D7:7E:92:43:AB:BA:2F:D5:49:6A:29:18:30:B7:D3:8B:0B:CB:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91452AC/A48D5966BB3E11EAA29EE321C4F9AE02/Ntd-kkOrui_VSWopGDC304sLy8Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ntd-kkOrui_VSWopGDC304sLy8Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91452AC/A48D5966BB3E11EAA29EE321C4F9AE02/Ntd-kkOrui_VSWopGDC304sLy8Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7a:72:88:ab:64:8e:08:4f:7a:13:8a:7b:e6:ff:b4:5c:7c:d7: 62:28:38:ec:d5:7d:9c:e3:f9:41:41:6c:a5:59:89:26:7b:85: 00:5c:c3:db:ed:9a:7d:52:43:5c:24:c4:2b:e6:d8:67:98:9b: 8c:25:b5:de:2c:74:bb:72:69:da:9d:92:7d:0a:4a:1d:5a:ea: 4c:42:da:bc:31:6b:f7:92:1d:d1:1c:c5:eb:a8:56:55:f9:f1: 1c:66:03:ed:75:c9:63:c6:79:51:65:26:45:4c:2d:e5:ab:74: 9b:be:fd:34:81:52:7c:f6:5d:87:53:74:d5:35:7f:14:c1:f8: a3:98:6f:36:18:2d:9a:72:37:3a:fc:dc:53:7b:66:6c:6f:7d: 3c:c1:a5:b5:3c:30:f4:c1:a6:c5:be:1d:51:c9:cb:65:3c:e4: 0b:29:69:21:e3:9e:72:6b:1d:03:6d:cd:15:30:83:ae:61:fb: 50:0e:93:bf:2e:37:1c:e8:a2:89:16:2f:3f:a8:55:6b:7d:5b: 16:09:0f:22:e2:4f:ae:23:6a:23:51:08:e6:0a:96:55:15:64: 36:28:3d:c0:3e:78:a9:28:14:41:c9:e7:80:fd:12:2f:56:b4: fc:96:8a:17:25:da:15:4d:02:ed:6f:18:65:a5:69:e9:37:12: 83:e4:47:4a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCK4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDUyQUMxMTAvBgNVBAUTKDM2RDc3RTkyNDNBQkJBMkZENTQ5NkEyOTE4MzBCN0Qz OEIwQkNCQzQwHhcNMjUwNDA0MjA0NjIwWhcNMjUwNDExMjA0NjIwWjAYMRYwFAYD VQQDEw02N2YwNDUxYy0xNzZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAo++eSK6sFVg1yLAtfgJgRhcivdPeIcuIU6rrJ/JzAfKoKpY3SEMinso/nsPQ 0gYyTmww0FoUaVpWdCKrEitbAGxLMvRbzN2jdotNTaF5shBTXqoeKYuT20FkRvur c9ynwq/FSTlMpK0SS5/2Ls/74DApK96Msa17ZMWYA2muvwIDM34FE0OPYvtnQAUK j+YT+6CIHqjXhDrbvxGDu2Jh91dlbIBkzzFtcVoS44Tn59q1zOecJ10Y1s+WkifJ LGSwVRcS1AuTptn4RfJetQ3uC1BByDjkKtaK5KLgLYF15nBBeDpitrHwBvk1ZWI6 kMJK1MzM1AwUdpSZqLGtSexhKQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL3bYi/Q wiCMzMNjt7JRLZJSeuNuMB8GA1UdIwQYMBaAFDbXfpJDq7ov1UlqKRgwt9OLC8vE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NTJBQy9BNDhENTk2NkJC M0UxMUVBQTI5RUUzMjFDNEY5QUUwMi9OdGQta2tPcnVpX1ZTV29wR0RDMzA0c0x5 OFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL050ZC1ra09ydWlfVlNXb3BHREMzMDRzTHk4US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NTJBQy9BNDhENTk2NkJCM0UxMUVBQTI5RUUzMjFDNEY5QUUwMi9OdGQta2tPcnVp X1ZTV29wR0RDMzA0c0x5OFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB6coirZI4IT3oTinvm/7RcfNdiKDjs1X2c4/lBQWylWYkme4UAXMPb 7Zp9UkNcJMQr5thnmJuMJbXeLHS7cmnanZJ9CkodWupMQtq8MWv3kh3RHMXrqFZV +fEcZgPtdcljxnlRZSZFTC3lq3Sbvv00gVJ89l2HU3TVNX8UwfijmG82GC2acjc6 /NxTe2Zsb308waW1PDD0wabFvh1RyctlPOQLKWkh455yax0Dbc0VMIOuYftQDpO/ Ljcc6KKJFi8/qFVrfVsWCQ8i4k+uI2ojUQjmCpZVFWQ2KD3APnipKBRByeeA/RIv VrT8looXJdoVTQLtbxhlpWnpNxKD5EdK -----END CERTIFICATE-----Generated at Fri Apr 4 22:13:32 2025 by rpki-client