$ rpki-client -vvf rpki.apnic.net/member_repository/A9148DB2/047DC388F93611EC921B810EC4F9AE02/NKvvhGR0u9oMVWRl3X6ewPpnS7U.mft File: NKvvhGR0u9oMVWRl3X6ewPpnS7U.mft (raw, json) Hash identifier: l58R/JkikpMztjxh+bbhwwmgNFxfvg0Ww+ZfwKbplNU= Subject key identifier: 23:A9:CE:1A:4B:AB:16:2E:F0:74:17:D0:05:F0:B4:45:F6:3F:B9:C2 Authority key identifier: 34:AB:EF:84:64:74:BB:DA:0C:55:64:65:DD:7E:9E:C0:FA:67:4B:B5 Certificate issuer: /CN=A9148DB2/serialNumber=34ABEF846474BBDA0C556465DD7E9EC0FA674BB5 Certificate serial: 029B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NKvvhGR0u9oMVWRl3X6ewPpnS7U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9148DB2/047DC388F93611EC921B810EC4F9AE02/NKvvhGR0u9oMVWRl3X6ewPpnS7U.mft Manifest number: 0296 Signing time: Thu 03 Apr 2025 01:34:10 +0000 Manifest this update: Thu 03 Apr 2025 01:34:09 +0000 Manifest next update: Thu 10 Apr 2025 01:34:09 +0000 Files and hashes: 1: NKvvhGR0u9oMVWRl3X6ewPpnS7U.crl (hash: YkqVMhicJEZdyf/gMaQ0r5K5dohfHUlIxUNGYvAA3RQ=) 2: F343C4ECF93911ECBD1E663DC4F9AE02.roa (hash: k5i1VxrRa6a+sKSG0LLgxBEmMPYmBZK6pl0sMM04Q2o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9148DB2/047DC388F93611EC921B810EC4F9AE02/NKvvhGR0u9oMVWRl3X6ewPpnS7U.crl rsync://rpki.apnic.net/member_repository/A9148DB2/047DC388F93611EC921B810EC4F9AE02/NKvvhGR0u9oMVWRl3X6ewPpnS7U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NKvvhGR0u9oMVWRl3X6ewPpnS7U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Apr 2025 01:34:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 667 (0x29b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9148DB2 Validity Not Before: Apr 3 01:34:09 2025 GMT Not After : Apr 10 01:34:09 2025 GMT Subject: CN=67ede591-3035 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:40:81:bc:8f:e4:1e:7a:d3:7b:b7:9e:2b:28: 0e:4b:4a:f7:0c:c4:78:0e:3c:1a:c6:c6:de:a8:4e: 20:1a:b7:54:b3:c0:ac:f7:09:fa:a3:66:9c:1f:ea: 1c:1e:72:89:8c:6b:08:87:cf:e8:74:62:5f:21:c3: b8:1a:82:87:2e:6b:f4:9c:56:4d:93:7e:c1:9c:fe: 65:a7:eb:93:b6:e5:ee:0d:2f:3f:bc:9c:6c:4a:f6: 66:8c:40:86:b5:fe:a6:f9:05:f8:91:05:c4:ef:10: 5a:a9:29:72:6a:78:db:ab:dc:cf:85:0c:53:7d:fb: e6:7e:55:63:52:e6:43:da:94:b8:7e:ec:d0:0d:9a: dc:31:4a:22:cb:a5:4d:35:c2:8e:4c:5c:09:62:e1: 65:db:c7:27:3d:22:d9:a2:1c:30:1e:e7:6b:48:b4: 8a:23:2b:bd:d0:ef:1e:13:fe:09:d2:83:40:69:f3: 02:00:50:c9:be:c7:d3:96:77:76:21:33:06:15:9c: cd:c3:2a:1c:bc:85:43:dd:65:3d:0a:7d:57:f6:50: 7a:b6:f6:ff:3d:d6:8f:4b:a8:6b:ac:5c:94:64:17: 5b:5d:7d:80:28:20:7b:08:c5:3e:6c:ac:a2:ce:b9: e8:5c:c9:6f:01:a7:ad:c9:b8:11:80:74:ec:f5:a5: 58:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:A9:CE:1A:4B:AB:16:2E:F0:74:17:D0:05:F0:B4:45:F6:3F:B9:C2 X509v3 Authority Key Identifier: keyid:34:AB:EF:84:64:74:BB:DA:0C:55:64:65:DD:7E:9E:C0:FA:67:4B:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9148DB2/047DC388F93611EC921B810EC4F9AE02/NKvvhGR0u9oMVWRl3X6ewPpnS7U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NKvvhGR0u9oMVWRl3X6ewPpnS7U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148DB2/047DC388F93611EC921B810EC4F9AE02/NKvvhGR0u9oMVWRl3X6ewPpnS7U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a5:c5:7d:17:3e:48:26:c0:ff:0f:58:d4:5b:c5:d5:ad:cf:a7: a9:0a:66:2b:40:5c:6a:73:8e:1c:34:a8:fc:04:f0:0a:f6:a9: aa:5f:cc:05:12:a5:ce:ee:ff:56:82:c6:5d:a3:7a:37:ce:95: d4:28:ad:64:b5:ae:b3:fc:18:82:3a:ca:83:ad:07:d4:a6:1f: 5c:28:9d:53:bd:22:27:93:ab:30:f0:c4:c7:0e:5d:53:f5:07: bf:9f:fd:e8:25:5c:9b:f0:77:ee:53:49:08:fd:d3:2f:ff:2b: 03:75:b1:3d:df:39:e3:49:e0:ff:ff:4d:13:7d:70:c1:21:5b: e2:7d:a9:df:66:5d:e3:4f:f8:5b:08:30:40:75:6d:1d:2e:15: af:4b:5c:14:86:24:90:25:62:55:c7:ef:47:ab:89:10:58:84: d8:b8:a2:c5:e9:a5:29:51:80:ef:1d:70:dd:bf:c5:d2:18:8c: c3:7b:26:f2:8c:d8:ec:f6:bf:1c:54:aa:8e:24:b1:ff:06:3a: 47:8d:9a:ed:a7:71:7a:40:04:a9:1e:83:ec:7a:37:16:a1:59: f9:80:7f:03:06:a1:a6:ad:40:15:17:f2:13:44:15:06:19:25: 93:d7:3f:3e:d7:a4:87:65:24:44:86:16:19:cb:b7:d5:5f:d1: ee:f1:d4:e2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICApswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDhEQjIxMTAvBgNVBAUTKDM0QUJFRjg0NjQ3NEJCREEwQzU1NjQ2NUREN0U5RUMw RkE2NzRCQjUwHhcNMjUwNDAzMDEzNDA5WhcNMjUwNDEwMDEzNDA5WjAYMRYwFAYD VQQDEw02N2VkZTU5MS0zMDM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzECBvI/kHnrTe7eeKygOS0r3DMR4DjwaxsbeqE4gGrdUs8Cs9wn6o2acH+oc HnKJjGsIh8/odGJfIcO4GoKHLmv0nFZNk37BnP5lp+uTtuXuDS8/vJxsSvZmjECG tf6m+QX4kQXE7xBaqSlyanjbq9zPhQxTffvmflVjUuZD2pS4fuzQDZrcMUoiy6VN NcKOTFwJYuFl28cnPSLZohwwHudrSLSKIyu90O8eE/4J0oNAafMCAFDJvsfTlnd2 ITMGFZzNwyocvIVD3WU9Cn1X9lB6tvb/PdaPS6hrrFyUZBdbXX2AKCB7CMU+bKyi zrnoXMlvAaetybgRgHTs9aVYRQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCOpzhpL qxYu8HQX0AXwtEX2P7nCMB8GA1UdIwQYMBaAFDSr74RkdLvaDFVkZd1+nsD6Z0u1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OERCMi8wNDdEQzM4OEY5 MzYxMUVDOTIxQjgxMEVDNEY5QUUwMi9OS3Z2aEdSMHU5b01WV1JsM1g2ZXdQcG5T N1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05LdnZoR1IwdTlvTVZXUmwzWDZld1BwblM3VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OERCMi8wNDdEQzM4OEY5MzYxMUVDOTIxQjgxMEVDNEY5QUUwMi9OS3Z2aEdSMHU5 b01WV1JsM1g2ZXdQcG5TN1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQClxX0XPkgmwP8PWNRbxdWtz6epCmYrQFxqc44cNKj8BPAK9qmqX8wF EqXO7v9WgsZdo3o3zpXUKK1kta6z/BiCOsqDrQfUph9cKJ1TvSInk6sw8MTHDl1T 9Qe/n/3oJVyb8HfuU0kI/dMv/ysDdbE93znjSeD//00TfXDBIVvifanfZl3jT/hb CDBAdW0dLhWvS1wUhiSQJWJVx+9Hq4kQWITYuKLF6aUpUYDvHXDdv8XSGIzDeyby jNjs9r8cVKqOJLH/BjpHjZrtp3F6QASpHoPsejcWoVn5gH8DBqGmrUAVF/ITRBUG GSWT1z8+16SHZSREhhYZy7fVX9Hu8dTi -----END CERTIFICATE-----Generated at Fri Apr 4 21:55:49 2025 by rpki-client