$ rpki-client -vvf rpki.apnic.net/member_repository/A917C422/3E745368ED5511E38072C57E5911EA32/NUOeC_NciIu4TRsk7N5wYM90TpE.mft File: NUOeC_NciIu4TRsk7N5wYM90TpE.mft (raw, json) Hash identifier: tmZonsFXcMpdkt6XVrLBvabKdsEbPrw8cVoqKo7cvf4= Subject key identifier: 55:CA:4E:B8:87:46:BD:47:BD:C7:E8:D0:63:47:5A:4B:BD:04:E6:A5 Authority key identifier: 35:43:9E:0B:F3:5C:88:8B:B8:4D:1B:24:EC:DE:70:60:CF:74:4E:91 Certificate issuer: /CN=A917C422/serialNumber=35439E0BF35C888BB84D1B24ECDE7060CF744E91 Certificate serial: 2B57 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/NUOeC_NciIu4TRsk7N5wYM90TpE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917C422/3E745368ED5511E38072C57E5911EA32/NUOeC_NciIu4TRsk7N5wYM90TpE.mft Manifest number: 2B43 Signing time: Mon 14 Apr 2025 14:25:34 +0000 Manifest this update: Mon 14 Apr 2025 14:25:34 +0000 Manifest next update: Mon 21 Apr 2025 14:25:34 +0000 Files and hashes: 1: NUOeC_NciIu4TRsk7N5wYM90TpE.crl (hash: mPxxIdtrXspLb62WCWCoxJgfDyPaoVDFxmGy2Jx4gpk=) 2: F645F318500C11EBA2295426C4F9AE02.roa (hash: cs/JN2roMF9559frpHSU57kLMdZZdt/kq/+fgPXNaTg=) 3: 6313DADA500011EBB74A2C2AC4F9AE02.roa (hash: kOKMH7bC+n+8o1xcllbA3RXGetoc8aW0IIWJBu8P/uI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917C422/3E745368ED5511E38072C57E5911EA32/NUOeC_NciIu4TRsk7N5wYM90TpE.crl rsync://rpki.apnic.net/member_repository/A917C422/3E745368ED5511E38072C57E5911EA32/NUOeC_NciIu4TRsk7N5wYM90TpE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/NUOeC_NciIu4TRsk7N5wYM90TpE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Apr 2025 14:25:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11095 (0x2b57) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917C422, serialNumber=35439E0BF35C888BB84D1B24ECDE7060CF744E91 Validity Not Before: Apr 14 14:25:34 2025 GMT Not After : Apr 21 14:25:34 2025 GMT Subject: CN=67fd1ade-ed79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:db:de:41:86:bb:4d:6c:d7:32:79:1e:e3:e7: ea:68:dc:32:ca:6b:87:a4:d1:c9:cb:49:4c:44:7e: 7f:73:ac:ee:65:b5:a2:65:ce:74:ae:71:9b:97:24: 2c:0f:72:08:b8:d1:c1:09:ac:84:58:97:80:8e:67: ae:ca:67:e3:a8:b3:95:b3:7a:05:62:6d:7f:9e:9e: 3c:1c:79:c5:a2:f9:12:5f:ec:af:eb:c9:0b:35:62: 77:f6:29:e1:d4:70:4f:42:9a:a8:f1:7d:4c:0b:23: 2d:a2:78:19:68:db:29:1c:c6:d6:48:33:bb:6e:34: 50:b6:97:a5:96:a9:2d:05:c7:59:ea:1a:70:78:e1: d4:a8:54:75:ef:cd:b0:35:b0:92:46:b9:8a:1b:f7: a7:24:8b:a5:10:47:34:46:e7:a6:d5:2b:cf:a0:ef: 80:73:52:96:3f:49:9e:58:69:8e:8c:84:6e:69:f3: a0:c0:e7:45:90:49:94:f4:db:78:2d:93:5b:2e:22: f3:90:9f:60:a9:b1:e8:3a:20:2a:df:2e:e9:a2:62: 92:45:f4:41:17:ae:25:5f:8c:5f:d2:c8:13:79:bd: 06:0f:b9:9a:f8:93:a4:07:81:bc:20:4e:5c:49:8b: f7:85:e2:6f:7f:d7:8f:49:1c:1e:30:b4:ad:fa:3d: 47:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:CA:4E:B8:87:46:BD:47:BD:C7:E8:D0:63:47:5A:4B:BD:04:E6:A5 X509v3 Authority Key Identifier: keyid:35:43:9E:0B:F3:5C:88:8B:B8:4D:1B:24:EC:DE:70:60:CF:74:4E:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917C422/3E745368ED5511E38072C57E5911EA32/NUOeC_NciIu4TRsk7N5wYM90TpE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/NUOeC_NciIu4TRsk7N5wYM90TpE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C422/3E745368ED5511E38072C57E5911EA32/NUOeC_NciIu4TRsk7N5wYM90TpE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0a:40:4c:4d:1e:b6:c2:e3:ac:0c:0c:66:29:75:c5:a3:07:f6: ef:69:0f:7b:6e:f7:fe:ce:aa:19:03:ef:56:e2:b9:2b:17:b8: dc:04:12:c1:5a:f9:eb:a5:f6:2c:38:7e:36:93:68:78:0a:23: 63:09:de:98:98:c6:e1:a7:4d:5a:bb:4c:82:a8:96:90:8b:7c: 8a:de:98:b3:33:6c:f2:e7:c6:0a:52:be:63:a2:b0:9a:0c:99: c2:0f:90:ba:54:94:ea:59:c4:ef:d8:f6:cd:53:fd:ab:a7:62: 56:40:ba:18:9c:5c:03:9d:36:0b:38:ae:20:a1:09:3b:4e:f3: 7e:94:53:38:0d:ee:39:79:1a:85:dc:64:62:7c:51:a2:66:66: 03:de:ce:79:d5:f5:15:ff:7a:b5:25:ff:22:59:6f:28:e1:d4: 30:59:23:92:c0:a3:df:57:9f:c7:73:16:01:68:fb:cd:df:60: 67:91:56:04:7b:53:1b:85:13:55:a8:ae:8a:b8:16:8a:05:10: 70:d9:26:8e:da:7f:f1:ae:37:68:2b:2b:15:ad:84:e4:00:96: 18:10:c2:63:b2:4a:a9:b4:0a:c9:30:8f:44:55:f8:7f:d7:92: 26:6f:ee:b8:1c:d2:c0:b9:b1:b4:88:e7:e1:37:f0:63:d1:fe: 16:8e:4e:ca -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICK1cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0M0MjIxMTAvBgNVBAUTKDM1NDM5RTBCRjM1Qzg4OEJCODREMUIyNEVDREU3MDYw Q0Y3NDRFOTEwHhcNMjUwNDE0MTQyNTM0WhcNMjUwNDIxMTQyNTM0WjAYMRYwFAYD VQQDEw02N2ZkMWFkZS1lZDc5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy9veQYa7TWzXMnke4+fqaNwyymuHpNHJy0lMRH5/c6zuZbWiZc50rnGblyQs D3IIuNHBCayEWJeAjmeuymfjqLOVs3oFYm1/np48HHnFovkSX+yv68kLNWJ39inh 1HBPQpqo8X1MCyMtongZaNspHMbWSDO7bjRQtpellqktBcdZ6hpweOHUqFR1782w NbCSRrmKG/enJIulEEc0Ruem1SvPoO+Ac1KWP0meWGmOjIRuafOgwOdFkEmU9Nt4 LZNbLiLzkJ9gqbHoOiAq3y7pomKSRfRBF64lX4xf0sgTeb0GD7ma+JOkB4G8IE5c SYv3heJvf9ePSRweMLSt+j1HVQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFXKTriH Rr1Hvcfo0GNHWku9BOalMB8GA1UdIwQYMBaAFDVDngvzXIiLuE0bJOzecGDPdE6R MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QzQyMi8zRTc0NTM2OEVE NTUxMUUzODA3MkM1N0U1OTExRUEzMi9OVU9lQ19OY2lJdTRUUnNrN041d1lNOTBU cEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL05VT2VDX05jaUl1NFRSc2s3TjV3WU05MFRwRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QzQyMi8zRTc0NTM2OEVENTUxMUUzODA3MkM1N0U1OTExRUEzMi9OVU9lQ19OY2lJ dTRUUnNrN041d1lNOTBUcEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAKQExNHrbC46wMDGYpdcWjB/bvaQ97bvf+zqoZA+9W4rkrF7jcBBLB WvnrpfYsOH42k2h4CiNjCd6YmMbhp01au0yCqJaQi3yK3pizM2zy58YKUr5jorCa DJnCD5C6VJTqWcTv2PbNU/2rp2JWQLoYnFwDnTYLOK4goQk7TvN+lFM4De45eRqF 3GRifFGiZmYD3s551fUV/3q1Jf8iWW8o4dQwWSOSwKPfV5/HcxYBaPvN32BnkVYE e1MbhRNVqK6KuBaKBRBw2SaO2n/xrjdoKysVrYTkAJYYEMJjskqptArJMI9EVfh/ 15Imb+64HNLAubG0iOfhN/Bj0f4Wjk7K -----END CERTIFICATE-----Generated at Tue Apr 15 18:08:43 2025 by rpki-client