$ rpki-client -vvf rpki.apnic.net/member_repository/A9151AC7/41A46B50F39711EF9101D210C4F9AE02/NS1M7Db4784NhRINl9keIqNY9Ys.mft File: NS1M7Db4784NhRINl9keIqNY9Ys.mft (raw, json) Hash identifier: ScB4PynCYQmKW/DlhfKON4i3dWw6rbUIAK16eYhkmok= Subject key identifier: 48:FD:70:2D:EF:ED:86:A8:A5:3E:B7:13:9C:44:2A:42:DD:38:AD:32 Authority key identifier: 35:2D:4C:EC:36:F8:EF:CE:0D:85:12:0D:97:D9:1E:22:A3:58:F5:8B Certificate issuer: /CN=A9151AC7/serialNumber=352D4CEC36F8EFCE0D85120D97D91E22A358F58B Certificate serial: 12 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NS1M7Db4784NhRINl9keIqNY9Ys.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9151AC7/41A46B50F39711EF9101D210C4F9AE02/NS1M7Db4784NhRINl9keIqNY9Ys.mft Manifest number: 12 Signing time: Sat 29 Mar 2025 07:19:55 +0000 Manifest this update: Sat 29 Mar 2025 07:19:55 +0000 Manifest next update: Sat 05 Apr 2025 07:19:55 +0000 Files and hashes: 1: NS1M7Db4784NhRINl9keIqNY9Ys.crl (hash: R8R37lA8IIRzHmjiLS2o3atsVFx05Nda8e0EUKlT3FA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9151AC7/41A46B50F39711EF9101D210C4F9AE02/NS1M7Db4784NhRINl9keIqNY9Ys.crl rsync://rpki.apnic.net/member_repository/A9151AC7/41A46B50F39711EF9101D210C4F9AE02/NS1M7Db4784NhRINl9keIqNY9Ys.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NS1M7Db4784NhRINl9keIqNY9Ys.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Apr 2025 05:08:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18 (0x12) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9151AC7 Validity Not Before: Mar 29 07:19:55 2025 GMT Not After : Apr 5 07:19:55 2025 GMT Subject: CN=67e79f1b-a655 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:ed:d4:2b:17:a0:be:65:bc:dc:54:b8:a5:1b: 9a:32:6e:58:cd:ff:d8:43:2b:eb:b3:b6:d3:fa:c3: a7:13:56:c2:4e:b2:31:54:d4:b6:e9:54:61:15:94: b4:b9:ba:e1:1c:47:5a:6c:70:89:5c:63:1c:c7:a1: 17:95:a6:e9:ec:20:83:55:c6:34:22:70:9a:22:3d: da:6e:df:3c:46:4d:8f:78:19:d6:91:7c:93:e8:97: 98:80:d0:bd:88:82:b8:bd:5f:c6:8f:a8:95:e5:9b: 12:ea:96:9f:a2:b4:d0:34:83:4c:fe:2f:8f:5d:96: 52:6b:3b:ef:57:e2:6e:ef:d7:6e:00:55:17:63:b1: fc:4f:ef:32:2f:2c:02:3a:ff:87:06:7e:65:a0:47: 6b:3d:54:66:22:e9:3f:8f:c5:00:32:99:06:55:e7: 12:11:89:ca:92:bc:0b:7a:4d:61:f1:18:26:93:b5: 07:10:55:8c:2e:3b:57:e3:34:aa:e8:e0:57:49:64: 8a:b9:a8:8e:0c:9b:7f:60:cf:39:18:b2:10:b7:e8: 4c:64:ea:3b:f3:71:af:11:74:b5:f2:97:b9:11:df: dc:3a:fc:3c:4a:7f:8a:bd:26:1c:ed:f7:00:18:00: 31:05:4a:c9:e9:4f:fe:61:83:3e:1c:2f:48:6e:be: 3a:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:FD:70:2D:EF:ED:86:A8:A5:3E:B7:13:9C:44:2A:42:DD:38:AD:32 X509v3 Authority Key Identifier: keyid:35:2D:4C:EC:36:F8:EF:CE:0D:85:12:0D:97:D9:1E:22:A3:58:F5:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9151AC7/41A46B50F39711EF9101D210C4F9AE02/NS1M7Db4784NhRINl9keIqNY9Ys.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NS1M7Db4784NhRINl9keIqNY9Ys.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9151AC7/41A46B50F39711EF9101D210C4F9AE02/NS1M7Db4784NhRINl9keIqNY9Ys.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8e:89:ef:02:34:b3:f4:22:52:52:f3:03:f5:52:a3:c7:bf:25: b9:fc:54:c1:5d:7f:c9:96:db:a0:8b:44:4d:d1:ab:59:47:92: 73:8a:db:99:f8:e5:b2:52:c3:1a:89:d4:4f:65:55:90:e4:26: a6:a6:d0:cb:9f:2c:d5:d9:04:eb:99:6d:9d:79:1c:11:b1:10: 5f:6d:4e:f7:70:fe:ff:70:93:e7:ed:38:0e:2e:d2:15:85:2e: dd:a3:03:ac:8d:28:8f:3c:da:7b:82:67:4c:40:6d:48:e5:1b: 65:3e:46:a3:89:00:15:fa:32:82:0a:15:19:70:90:ce:2a:b7: d6:c9:83:ea:f5:4f:47:3f:2d:75:e2:35:66:54:4a:93:eb:85: 52:89:b6:69:04:ca:55:9d:d6:1c:66:8a:77:79:e7:fa:48:08: 47:8b:d5:bd:06:87:68:44:1f:ba:c3:ff:97:d4:ab:6c:c4:7a: ab:74:7b:cb:75:a7:2c:a6:1b:56:51:0c:3c:87:41:1a:0e:93: 00:00:10:00:5d:b1:92:cf:15:c5:38:55:06:50:0a:4e:43:06: b4:48:95:80:5a:0e:32:ec:f0:63:47:77:70:ef:27:d8:08:2d: 97:7c:f9:37:d7:0a:d5:9a:59:42:7e:b1:6b:68:05:b5:3a:b4: ec:f9:cf:1f -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBEjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 MUFDNzExMC8GA1UEBRMoMzUyRDRDRUMzNkY4RUZDRTBEODUxMjBEOTdEOTFFMjJB MzU4RjU4QjAeFw0yNTAzMjkwNzE5NTVaFw0yNTA0MDUwNzE5NTVaMBgxFjAUBgNV BAMTDTY3ZTc5ZjFiLWE2NTUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDX7dQrF6C+ZbzcVLilG5oybljN/9hDK+uzttP6w6cTVsJOsjFU1LbpVGEVlLS5 uuEcR1pscIlcYxzHoReVpunsIINVxjQicJoiPdpu3zxGTY94GdaRfJPol5iA0L2I gri9X8aPqJXlmxLqlp+itNA0g0z+L49dllJrO+9X4m7v124AVRdjsfxP7zIvLAI6 /4cGfmWgR2s9VGYi6T+PxQAymQZV5xIRicqSvAt6TWHxGCaTtQcQVYwuO1fjNKro 4FdJZIq5qI4Mm39gzzkYshC36Exk6jvzca8RdLXyl7kR39w6/DxKf4q9Jhzt9wAY ADEFSsnpT/5hgz4cL0huvjpJAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUSP1wLe/t hqilPrcTnEQqQt04rTIwHwYDVR0jBBgwFoAUNS1M7Db4784NhRINl9keIqNY9Ysw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTUxQUM3LzQxQTQ2QjUwRjM5 NzExRUY5MTAxRDIxMEM0RjlBRTAyL05TMU03RGI0Nzg0TmhSSU5sOWtlSXFOWTlZ cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvTlMxTTdEYjQ3ODROaFJJTmw5a2VJcU5ZOVlzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTUx QUM3LzQxQTQ2QjUwRjM5NzExRUY5MTAxRDIxMEM0RjlBRTAyL05TMU03RGI0Nzg0 TmhSSU5sOWtlSXFOWTlZcy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAI6J7wI0s/QiUlLzA/VSo8e/Jbn8VMFdf8mW26CLRE3Rq1lHknOK25n4 5bJSwxqJ1E9lVZDkJqam0MufLNXZBOuZbZ15HBGxEF9tTvdw/v9wk+ftOA4u0hWF Lt2jA6yNKI882nuCZ0xAbUjlG2U+RqOJABX6MoIKFRlwkM4qt9bJg+r1T0c/LXXi NWZUSpPrhVKJtmkEylWd1hxmind55/pICEeL1b0Gh2hEH7rD/5fUq2zEeqt0e8t1 pyymG1ZRDDyHQRoOkwAAEABdsZLPFcU4VQZQCk5DBrRIlYBaDjLs8GNHd3DvJ9gI LZd8+TfXCtWaWUJ+sWtoBbU6tOz5zx8= -----END CERTIFICATE-----Generated at Fri Apr 4 22:17:47 2025 by rpki-client