$ rpki-client -vvf rpki.apnic.net/member_repository/A914E01E/C5C6F05E9EA611EC8FB03654C4F9AE02/nlcX9fFLsp9ntXrX2dXweRWunEM.mft File: nlcX9fFLsp9ntXrX2dXweRWunEM.mft (raw, json) Hash identifier: 6XBA4epAdu//f6yXpLPjmuPC8jwkx8Zs+HcOdTlZMm8= Subject key identifier: 47:61:5A:21:B3:63:2A:BB:9C:BE:E8:26:03:BA:47:BE:5C:FE:32:F4 Authority key identifier: 9E:57:17:F5:F1:4B:B2:9F:67:B5:7A:D7:D9:D5:F0:79:15:AE:9C:43 Certificate issuer: /CN=A914E01E/serialNumber=9E5717F5F14BB29F67B57AD7D9D5F07915AE9C43 Certificate serial: 0376 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nlcX9fFLsp9ntXrX2dXweRWunEM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914E01E/C5C6F05E9EA611EC8FB03654C4F9AE02/nlcX9fFLsp9ntXrX2dXweRWunEM.mft Manifest number: 0372 Signing time: Sat 29 Mar 2025 01:08:43 +0000 Manifest this update: Sat 29 Mar 2025 01:08:42 +0000 Manifest next update: Sat 05 Apr 2025 01:08:42 +0000 Files and hashes: 1: nlcX9fFLsp9ntXrX2dXweRWunEM.crl (hash: 98lnI/MSzDOh3Er/iP/eeKXr6V2IfZG4SAZPRXkqHEU=) 2: B775BD7A9EA911EC95EBD87CC4F9AE02.roa (hash: 92HIEbj2G47MSTH5iEgpWYXExI9zDOC82XtCwVyLKgU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914E01E/C5C6F05E9EA611EC8FB03654C4F9AE02/nlcX9fFLsp9ntXrX2dXweRWunEM.crl rsync://rpki.apnic.net/member_repository/A914E01E/C5C6F05E9EA611EC8FB03654C4F9AE02/nlcX9fFLsp9ntXrX2dXweRWunEM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nlcX9fFLsp9ntXrX2dXweRWunEM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Apr 2025 01:08:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 886 (0x376) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914E01E Validity Not Before: Mar 29 01:08:42 2025 GMT Not After : Apr 5 01:08:42 2025 GMT Subject: CN=67e7481b-8245 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:a1:11:e3:27:33:e1:7d:fc:15:e0:ac:c0:13: 32:43:60:2d:33:65:82:f6:06:45:86:98:71:f7:52: 32:ca:77:2a:24:56:b9:05:f0:1c:ba:05:a6:df:86: b4:b0:5f:4d:9d:90:04:de:e5:78:2f:91:d8:c7:d0: a8:cb:ff:24:c9:c5:de:c0:b5:59:dc:30:73:0d:de: b9:64:b6:c7:0e:57:da:34:77:42:e3:8e:8e:d5:74: e4:d7:16:25:a4:9e:22:32:14:c6:99:ae:c0:b3:bd: a0:94:7e:22:62:4b:c6:b7:1b:97:83:13:00:4f:ce: 1e:8e:93:10:ce:aa:9b:fa:5c:0d:96:c0:d7:e3:00: 3a:d4:1e:8d:79:2f:de:02:6d:ac:3f:9a:29:76:de: 18:09:81:bc:09:e8:7f:4c:59:ed:8d:ce:2d:5e:dd: 99:78:3f:d3:fa:9f:e5:98:d8:60:9f:18:b1:96:20: de:a6:4d:d3:e1:0f:f7:15:88:e8:b3:22:24:c3:dc: dc:34:73:87:4b:21:f4:e9:00:0b:3a:16:b6:fb:7e: 5f:73:7f:17:d0:c1:13:a5:34:08:1d:d0:aa:61:5a: 98:2a:63:8f:62:44:7b:e8:aa:96:fc:e5:18:9e:ad: 15:a4:aa:da:62:32:6d:84:0c:86:06:25:52:02:96: 64:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:61:5A:21:B3:63:2A:BB:9C:BE:E8:26:03:BA:47:BE:5C:FE:32:F4 X509v3 Authority Key Identifier: keyid:9E:57:17:F5:F1:4B:B2:9F:67:B5:7A:D7:D9:D5:F0:79:15:AE:9C:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914E01E/C5C6F05E9EA611EC8FB03654C4F9AE02/nlcX9fFLsp9ntXrX2dXweRWunEM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nlcX9fFLsp9ntXrX2dXweRWunEM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E01E/C5C6F05E9EA611EC8FB03654C4F9AE02/nlcX9fFLsp9ntXrX2dXweRWunEM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a1:8e:26:bb:a5:6f:e2:e2:4a:55:46:50:93:fb:bd:83:cd:e2: 0f:34:98:61:6d:c2:0b:dc:2a:88:40:d5:7f:a8:53:95:3b:3a: a5:f9:28:9e:cb:10:2c:bb:9e:3e:14:5b:67:0e:3d:ab:2f:f9: bf:93:76:21:bf:32:75:4a:a8:61:37:05:8b:ff:4d:fd:02:54: 22:1f:08:5f:6b:de:1f:ea:ce:7c:06:30:6e:67:fc:f1:ef:1c: 53:6b:3a:af:16:94:a8:8c:7b:1b:81:79:35:fa:08:a0:e9:f1: 1d:a4:49:d5:c0:35:0b:36:d9:90:d4:a3:7f:46:cd:7a:50:93: a4:c5:30:09:ab:30:43:a7:6e:45:61:97:33:f1:46:c0:45:71: fa:1b:11:04:9b:bc:c4:1b:83:23:98:56:93:09:8e:3c:f2:cd: 0a:7b:4b:9c:c1:9f:48:56:ff:8d:66:76:ca:e3:0a:31:49:ed: 6a:e6:ac:81:ae:e5:65:f1:1f:67:6a:38:d5:29:7b:7c:85:85: c4:31:d0:d1:e8:fb:8d:ae:d7:b7:6f:eb:be:8c:fd:4c:52:ce: 65:60:6d:7a:a6:4d:a9:39:31:a8:5f:30:5a:3b:7b:6a:e5:2c: a5:d6:ee:86:8d:b3:e7:67:48:73:70:e6:74:e4:d7:c1:fb:ae: fc:db:f2:b7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA3YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEUwMUUxMTAvBgNVBAUTKDlFNTcxN0Y1RjE0QkIyOUY2N0I1N0FEN0Q5RDVGMDc5 MTVBRTlDNDMwHhcNMjUwMzI5MDEwODQyWhcNMjUwNDA1MDEwODQyWjAYMRYwFAYD VQQDEw02N2U3NDgxYi04MjQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt6ER4ycz4X38FeCswBMyQ2AtM2WC9gZFhphx91IyyncqJFa5BfAcugWm34a0 sF9NnZAE3uV4L5HYx9Coy/8kycXewLVZ3DBzDd65ZLbHDlfaNHdC446O1XTk1xYl pJ4iMhTGma7As72glH4iYkvGtxuXgxMAT84ejpMQzqqb+lwNlsDX4wA61B6NeS/e Am2sP5opdt4YCYG8Ceh/TFntjc4tXt2ZeD/T+p/lmNhgnxixliDepk3T4Q/3FYjo syIkw9zcNHOHSyH06QALOha2+35fc38X0METpTQIHdCqYVqYKmOPYkR76KqW/OUY nq0VpKraYjJthAyGBiVSApZkbQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEdhWiGz Yyq7nL7oJgO6R75c/jL0MB8GA1UdIwQYMBaAFJ5XF/XxS7KfZ7V619nV8HkVrpxD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RTAxRS9DNUM2RjA1RTlF QTYxMUVDOEZCMDM2NTRDNEY5QUUwMi9ubGNYOWZGTHNwOW50WHJYMmRYd2VSV3Vu RU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25sY1g5ZkZMc3A5bnRYclgyZFh3ZVJXdW5FTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RTAxRS9DNUM2RjA1RTlFQTYxMUVDOEZCMDM2NTRDNEY5QUUwMi9ubGNYOWZGTHNw OW50WHJYMmRYd2VSV3VuRU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQChjia7pW/i4kpVRlCT+72DzeIPNJhhbcIL3CqIQNV/qFOVOzql+Sie yxAsu54+FFtnDj2rL/m/k3YhvzJ1SqhhNwWL/039AlQiHwhfa94f6s58BjBuZ/zx 7xxTazqvFpSojHsbgXk1+gig6fEdpEnVwDULNtmQ1KN/Rs16UJOkxTAJqzBDp25F YZcz8UbARXH6GxEEm7zEG4MjmFaTCY488s0Ke0ucwZ9IVv+NZnbK4woxSe1q5qyB ruVl8R9najjVKXt8hYXEMdDR6PuNrte3b+u+jP1MUs5lYG16pk2pOTGoXzBaO3tq 5Syl1u6GjbPnZ0hzcOZ05NfB+6782/K3 -----END CERTIFICATE-----Generated at Fri Apr 4 22:09:16 2025 by rpki-client