$ rpki-client -vvf rpki.apnic.net/member_repository/A91577A2/8BC15C407B0411EA9DAAD432C4F9AE02/NtqOcqrHflUzc5DvTGHJVAtFldc.mft File: NtqOcqrHflUzc5DvTGHJVAtFldc.mft (raw, json) Hash identifier: 75+oCQ6NF4MJiylxYGlvulwxCE2YeZRSOgTuArAHSjQ= Subject key identifier: 8E:17:04:7E:9A:36:71:83:AD:71:EC:5C:F9:DA:DD:AB:AA:6A:24:56 Authority key identifier: 36:DA:8E:72:AA:C7:7E:55:33:73:90:EF:4C:61:C9:54:0B:45:95:D7 Certificate issuer: /CN=A91577A2/serialNumber=36DA8E72AAC77E55337390EF4C61C9540B4595D7 Certificate serial: 09F8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NtqOcqrHflUzc5DvTGHJVAtFldc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91577A2/8BC15C407B0411EA9DAAD432C4F9AE02/NtqOcqrHflUzc5DvTGHJVAtFldc.mft Manifest number: 09E4 Signing time: Tue 08 Apr 2025 19:48:37 +0000 Manifest this update: Tue 08 Apr 2025 19:48:36 +0000 Manifest next update: Tue 15 Apr 2025 19:48:36 +0000 Files and hashes: 1: NtqOcqrHflUzc5DvTGHJVAtFldc.crl (hash: 14nLBm/Ij8Z6PiLFpKRWR993ZA1YzbKj3ADNzPr8TM8=) 2: 6A23E166499211ED879F2D11C4F9AE02.roa (hash: menbjtgG3OL9FP2gHIv3HpKwGpwOaKUkt24pbDLYnNA=) 3: 6B5765BC499211ED879F2D11C4F9AE02.roa (hash: bMJemH5ceUwe7SSoHueO95SQnaFhnEbPA4cUZ9QObys=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91577A2/8BC15C407B0411EA9DAAD432C4F9AE02/NtqOcqrHflUzc5DvTGHJVAtFldc.crl rsync://rpki.apnic.net/member_repository/A91577A2/8BC15C407B0411EA9DAAD432C4F9AE02/NtqOcqrHflUzc5DvTGHJVAtFldc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NtqOcqrHflUzc5DvTGHJVAtFldc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 15 Apr 2025 19:48:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2552 (0x9f8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91577A2 Validity Not Before: Apr 8 19:48:36 2025 GMT Not After : Apr 15 19:48:36 2025 GMT Subject: CN=67f57d95-d980 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:8c:c8:0e:a2:ce:12:79:cd:fb:0d:6b:5a:9d: 92:30:0a:6f:c1:2f:a7:bb:ad:2e:75:d9:ad:13:18: 12:3f:77:27:98:62:aa:a7:d0:b0:63:4d:76:00:72: cf:c7:33:dd:3e:95:b8:f2:45:4f:5f:3e:9d:2a:e7: 33:77:47:95:ae:e7:b3:de:34:84:6e:ae:b0:fb:c0: 86:58:88:71:f2:25:27:16:46:21:c6:2a:a6:55:8c: 08:92:e7:03:cf:ae:53:6c:0e:8e:87:33:02:88:06: 9c:5e:26:9a:86:3a:4c:fd:15:46:f8:ab:b8:e5:bd: 1c:36:f9:3d:f8:e4:69:72:35:61:18:2b:1e:46:9b: 1b:17:04:30:24:8f:48:a4:51:56:eb:56:73:66:74: 21:17:2c:2b:da:3e:03:0d:ce:48:ca:d6:0c:bc:c6: f4:1c:c6:51:c5:87:b3:3f:25:31:07:9f:fe:35:ef: 02:ac:bb:b1:bb:62:f7:38:c4:a5:21:31:83:6c:38: d2:2f:a2:7a:d6:b2:5a:ed:59:7f:5d:37:03:b0:93: 81:8d:4f:08:e5:91:cf:68:92:fa:cd:73:e7:6e:27: f4:8a:52:82:89:db:56:cc:78:9a:a7:2f:36:bf:78: 6f:c9:64:cb:3d:af:d3:ba:6f:f2:ff:e9:5b:30:30: 65:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:17:04:7E:9A:36:71:83:AD:71:EC:5C:F9:DA:DD:AB:AA:6A:24:56 X509v3 Authority Key Identifier: keyid:36:DA:8E:72:AA:C7:7E:55:33:73:90:EF:4C:61:C9:54:0B:45:95:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91577A2/8BC15C407B0411EA9DAAD432C4F9AE02/NtqOcqrHflUzc5DvTGHJVAtFldc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NtqOcqrHflUzc5DvTGHJVAtFldc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91577A2/8BC15C407B0411EA9DAAD432C4F9AE02/NtqOcqrHflUzc5DvTGHJVAtFldc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 11:f9:98:46:2e:ec:95:8f:28:00:1f:c5:13:52:62:b0:df:cb: 4f:ba:1f:6d:ec:35:2a:9e:b6:f8:c7:67:87:21:6f:2e:45:49: 1c:f1:17:4b:4a:dd:b1:21:e8:8f:63:04:ec:95:78:6a:58:e5: 69:b2:27:29:bc:3b:f5:21:af:95:6d:8b:3e:a1:d1:c7:39:07: 1b:d6:4c:02:8d:a2:1f:dc:6a:07:56:46:e6:24:8c:d3:af:a7: 5e:d9:8c:1f:8f:15:f2:d5:61:2c:8b:6e:cb:3f:f4:80:37:5d: 63:85:7c:a8:9e:a5:07:f2:28:a3:9c:68:64:4c:96:14:ff:47: 7d:82:70:ab:ef:83:b7:51:b7:4f:0f:aa:6b:92:e1:9d:e1:4a: 32:7e:e9:f1:f2:1a:e3:0c:b1:ac:23:f1:a5:3c:9d:31:9c:9d: e2:79:07:c0:67:45:2a:06:31:3e:36:41:4a:0c:1d:d7:cd:3c: 49:9f:75:ec:77:76:a5:49:3e:08:90:40:0c:14:99:8d:60:46: 4e:d5:db:09:ab:09:7d:70:93:5f:f2:25:9e:ad:d7:03:1e:bc: 74:06:5c:02:13:b9:cf:7e:d6:aa:39:7f:ea:21:20:4c:f6:7b: 11:e4:6b:0c:8c:c1:f5:73:e4:c1:b7:c5:ad:4b:93:d8:2b:21: df:b2:c0:a6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCfgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTc3QTIxMTAvBgNVBAUTKDM2REE4RTcyQUFDNzdFNTUzMzczOTBFRjRDNjFDOTU0 MEI0NTk1RDcwHhcNMjUwNDA4MTk0ODM2WhcNMjUwNDE1MTk0ODM2WjAYMRYwFAYD VQQDEw02N2Y1N2Q5NS1kOTgwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA24zIDqLOEnnN+w1rWp2SMApvwS+nu60uddmtExgSP3cnmGKqp9CwY012AHLP xzPdPpW48kVPXz6dKuczd0eVruez3jSEbq6w+8CGWIhx8iUnFkYhxiqmVYwIkucD z65TbA6OhzMCiAacXiaahjpM/RVG+Ku45b0cNvk9+ORpcjVhGCseRpsbFwQwJI9I pFFW61ZzZnQhFywr2j4DDc5IytYMvMb0HMZRxYezPyUxB5/+Ne8CrLuxu2L3OMSl ITGDbDjSL6J61rJa7Vl/XTcDsJOBjU8I5ZHPaJL6zXPnbif0ilKCidtWzHiapy82 v3hvyWTLPa/Tum/y/+lbMDBlQwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI4XBH6a NnGDrXHsXPna3auqaiRWMB8GA1UdIwQYMBaAFDbajnKqx35VM3OQ70xhyVQLRZXX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NzdBMi84QkMxNUM0MDdC MDQxMUVBOURBQUQ0MzJDNEY5QUUwMi9OdHFPY3FySGZsVXpjNUR2VEdISlZBdEZs ZGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL050cU9jcXJIZmxVemM1RHZUR0hKVkF0RmxkYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NzdBMi84QkMxNUM0MDdCMDQxMUVBOURBQUQ0MzJDNEY5QUUwMi9OdHFPY3FySGZs VXpjNUR2VEdISlZBdEZsZGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAR+ZhGLuyVjygAH8UTUmKw38tPuh9t7DUqnrb4x2eHIW8uRUkc8RdL St2xIeiPYwTslXhqWOVpsicpvDv1Ia+VbYs+odHHOQcb1kwCjaIf3GoHVkbmJIzT r6de2YwfjxXy1WEsi27LP/SAN11jhXyonqUH8iijnGhkTJYU/0d9gnCr74O3UbdP D6prkuGd4Uoyfunx8hrjDLGsI/GlPJ0xnJ3ieQfAZ0UqBjE+NkFKDB3XzTxJn3Xs d3alST4IkEAMFJmNYEZO1dsJqwl9cJNf8iWerdcDHrx0BlwCE7nPftaqOX/qISBM 9nsR5GsMjMH1c+TBt8WtS5PYKyHfssCm -----END CERTIFICATE-----Generated at Thu Apr 10 16:35:17 2025 by rpki-client