$ rpki-client -vvf rpki.apnic.net/member_repository/A918233C/E6491FE2621411ECB006712CC4F9AE02/_NTfjrSqZK9Wt9DHMm4pEEVDzFU.mft File: _NTfjrSqZK9Wt9DHMm4pEEVDzFU.mft (raw, json) Hash identifier: /dlD65tIX++sp1Vki4tIpDmZacxqP5fpK+49V1lea9c= Subject key identifier: 83:9D:50:C3:AF:AD:7E:E1:82:59:17:45:59:4D:71:C3:4D:F2:13:0A Authority key identifier: FC:D4:DF:8E:B4:AA:64:AF:56:B7:D0:C7:32:6E:29:10:45:43:CC:55 Certificate issuer: /CN=A918233C/serialNumber=FCD4DF8EB4AA64AF56B7D0C7326E29104543CC55 Certificate serial: 09 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_NTfjrSqZK9Wt9DHMm4pEEVDzFU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918233C/E6491FE2621411ECB006712CC4F9AE02/_NTfjrSqZK9Wt9DHMm4pEEVDzFU.mft Manifest number: 0424 Signing time: Sat 19 Apr 2025 00:23:18 +0000 Manifest this update: Sat 19 Apr 2025 00:23:18 +0000 Manifest next update: Sat 26 Apr 2025 00:23:18 +0000 Files and hashes: 1: _NTfjrSqZK9Wt9DHMm4pEEVDzFU.crl (hash: v7jupvLO4hAA8SFwVJk7GEhwdfcm0g6EPab3xA/wXp0=) 2: 34E594A215C511F09562D30FC4F9AE02.roa (hash: hO8cBpPkkXeK8WAFYmWHFGS1BpcqmFyN9GM5+DFTdqE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918233C/E6491FE2621411ECB006712CC4F9AE02/_NTfjrSqZK9Wt9DHMm4pEEVDzFU.crl rsync://rpki.apnic.net/member_repository/A918233C/E6491FE2621411ECB006712CC4F9AE02/_NTfjrSqZK9Wt9DHMm4pEEVDzFU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_NTfjrSqZK9Wt9DHMm4pEEVDzFU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Apr 2025 00:23:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9 (0x9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918233C, serialNumber=FCD4DF8EB4AA64AF56B7D0C7326E29104543CC55 Validity Not Before: Apr 19 00:23:18 2025 GMT Not After : Apr 26 00:23:18 2025 GMT Subject: CN=6802ecf6-8e06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:07:be:98:ab:d7:17:8d:0d:97:37:6c:73:87: 3c:b8:0d:9a:ea:5a:dc:ee:31:0f:4c:28:9a:c8:f0: 87:3b:8e:43:b0:2f:86:b1:e5:3b:71:53:0e:2c:ba: 93:46:24:8e:c2:ee:75:aa:49:e3:e0:6a:1a:86:4c: 1e:b7:6e:51:fc:79:6a:aa:97:61:a0:fb:9f:bb:3c: 1f:5c:a9:c2:21:bb:11:69:dd:c4:80:a3:80:79:2c: 9a:c9:23:83:67:33:98:40:b6:8e:54:aa:5a:28:ae: cf:91:ad:d9:bf:81:23:a4:99:4f:a2:d0:27:41:23: dc:fa:5b:30:3c:ee:aa:fa:f9:cb:f3:7e:25:5f:72: de:52:ed:31:05:01:a6:64:db:02:92:5d:ab:33:e8: 70:97:43:43:24:92:d7:2b:cd:e3:26:0f:cc:dc:ef: e7:f6:ec:17:eb:95:b9:48:8c:60:8a:fd:f8:7d:df: 98:51:9f:bb:15:ea:d9:94:01:a9:01:bb:af:94:0e: 07:90:83:5a:97:37:07:fa:06:57:38:97:bc:6d:31: cf:15:e6:bb:c1:52:9f:d3:a7:27:5e:28:f3:83:0a: 2f:84:8d:37:bc:16:60:37:e6:0c:a3:cb:e6:d3:11: 11:7a:5c:f6:82:47:53:24:7c:a0:b0:19:97:f5:a6: 2c:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:9D:50:C3:AF:AD:7E:E1:82:59:17:45:59:4D:71:C3:4D:F2:13:0A X509v3 Authority Key Identifier: keyid:FC:D4:DF:8E:B4:AA:64:AF:56:B7:D0:C7:32:6E:29:10:45:43:CC:55 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918233C/E6491FE2621411ECB006712CC4F9AE02/_NTfjrSqZK9Wt9DHMm4pEEVDzFU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_NTfjrSqZK9Wt9DHMm4pEEVDzFU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918233C/E6491FE2621411ECB006712CC4F9AE02/_NTfjrSqZK9Wt9DHMm4pEEVDzFU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 48:1f:11:33:a7:c7:87:ba:dd:d5:f1:4a:9c:21:73:82:f7:98: 47:47:49:01:85:94:21:a5:e9:73:5a:b0:1d:15:7c:bc:d3:5f: fc:f8:ce:bd:fa:59:f0:2e:e6:a9:c8:dd:02:32:96:41:07:6b: 58:48:dd:00:14:46:87:a0:be:e9:b4:29:4c:b5:7d:fd:e1:69: 18:93:27:81:94:4a:29:39:04:6d:90:98:6b:a6:84:48:46:b0: bb:01:b9:cd:20:97:c2:f6:e7:65:b8:5a:92:8d:5d:8a:d4:7e: 04:22:08:7e:b9:92:0b:d1:9f:69:45:60:89:85:c9:e9:1b:93: 9a:df:0b:82:ba:6f:d7:9f:22:10:b9:6e:aa:25:83:e1:e1:8a: de:4e:5d:02:60:e5:4c:cd:f0:21:e8:31:4e:a0:ac:03:a0:05: 51:58:cc:57:04:d4:ce:0e:10:32:8e:03:5d:56:ac:2c:23:cf: d8:cd:55:f0:13:d6:66:fe:ca:4b:62:ac:77:b6:59:13:4e:a0: da:25:50:2d:b1:13:53:cf:f7:e6:6c:43:5d:b4:c2:09:2d:88: 70:34:45:d2:19:d2:8d:d2:de:f7:3a:77:6f:70:71:c9:f7:ae: c5:22:a8:81:da:d9:b7:3e:b1:b9:3c:bd:78:c2:8c:91:9c:1a: 5f:94:1b:44 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBCTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 MjMzQzExMC8GA1UEBRMoRkNENERGOEVCNEFBNjRBRjU2QjdEMEM3MzI2RTI5MTA0 NTQzQ0M1NTAeFw0yNTA0MTkwMDIzMThaFw0yNTA0MjYwMDIzMThaMBgxFjAUBgNV BAMTDTY4MDJlY2Y2LThlMDYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDhB76Yq9cXjQ2XN2xzhzy4DZrqWtzuMQ9MKJrI8Ic7jkOwL4ax5TtxUw4supNG JI7C7nWqSePgahqGTB63blH8eWqql2Gg+5+7PB9cqcIhuxFp3cSAo4B5LJrJI4Nn M5hAto5Uqloors+Rrdm/gSOkmU+i0CdBI9z6WzA87qr6+cvzfiVfct5S7TEFAaZk 2wKSXasz6HCXQ0MkktcrzeMmD8zc7+f27BfrlblIjGCK/fh935hRn7sV6tmUAakB u6+UDgeQg1qXNwf6Blc4l7xtMc8V5rvBUp/TpydeKPODCi+EjTe8FmA35gyjy+bT ERF6XPaCR1MkfKCwGZf1pixXAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUg51Qw6+t fuGCWRdFWU1xw03yEwowHwYDVR0jBBgwFoAU/NTfjrSqZK9Wt9DHMm4pEEVDzFUw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTgyMzNDL0U2NDkxRkUyNjIx NDExRUNCMDA2NzEyQ0M0RjlBRTAyL19OVGZqclNxWks5V3Q5REhNbTRwRUVWRHpG VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvX05UZmpyU3FaSzlXdDlESE1tNHBFRVZEekZVLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTgy MzNDL0U2NDkxRkUyNjIxNDExRUNCMDA2NzEyQ0M0RjlBRTAyL19OVGZqclNxWks5 V3Q5REhNbTRwRUVWRHpGVS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAEgfETOnx4e63dXxSpwhc4L3mEdHSQGFlCGl6XNasB0VfLzTX/z4zr36 WfAu5qnI3QIylkEHa1hI3QAURoegvum0KUy1ff3haRiTJ4GUSik5BG2QmGumhEhG sLsBuc0gl8L252W4WpKNXYrUfgQiCH65kgvRn2lFYImFyekbk5rfC4K6b9efIhC5 bqolg+Hhit5OXQJg5UzN8CHoMU6grAOgBVFYzFcE1M4OEDKOA11WrCwjz9jNVfAT 1mb+yktirHe2WRNOoNolUC2xE1PP9+ZsQ120wgktiHA0RdIZ0o3S3vc6d29wccn3 rsUiqIHa2bc+sbk8vXjCjJGcGl+UG0Q= -----END CERTIFICATE-----Generated at Sat Apr 19 08:28:22 2025 by rpki-client