$ rpki-client -vvf rpki.apnic.net/member_repository/A9186684/36B86ADCD89F11EBAB98C55AC4F9AE02/NKEjLqcYRp6tt628TNngDfaoUgY.mft File: NKEjLqcYRp6tt628TNngDfaoUgY.mft (raw, json) Hash identifier: zAnHBoYWP6aXo5Tf/6To8uwWLCeglt+4EcsZWNFs0/Q= Subject key identifier: A4:01:6A:8B:E8:27:F2:B2:E3:17:A6:A7:2C:45:63:6A:5A:C2:35:40 Authority key identifier: 34:A1:23:2E:A7:18:46:9E:AD:B7:AD:BC:4C:D9:E0:0D:F6:A8:52:06 Certificate issuer: /CN=A9186684/serialNumber=34A1232EA718469EADB7ADBC4CD9E00DF6A85206 Certificate serial: 0579 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NKEjLqcYRp6tt628TNngDfaoUgY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9186684/36B86ADCD89F11EBAB98C55AC4F9AE02/NKEjLqcYRp6tt628TNngDfaoUgY.mft Manifest number: 056E Signing time: Wed 02 Apr 2025 23:20:17 +0000 Manifest this update: Wed 02 Apr 2025 23:20:16 +0000 Manifest next update: Wed 09 Apr 2025 23:20:16 +0000 Files and hashes: 1: NKEjLqcYRp6tt628TNngDfaoUgY.crl (hash: Fw4BBkU6NnoPr55P96Y0o6mLd2sRI00citAMfPDePes=) 2: D737BB744B4111ECACAF3B6FC4F9AE02.roa (hash: 78UGN0+7orQTcucSGGqLKKQdBZ/eBwdHdIbrun6HmgE=) 3: 80D77ED8D8A811EB85D5E456C4F9AE02.roa (hash: 5vdLLR7SsjyoWbJEWGx2u6gT4judyFxezvmtzE9hlfI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9186684/36B86ADCD89F11EBAB98C55AC4F9AE02/NKEjLqcYRp6tt628TNngDfaoUgY.crl rsync://rpki.apnic.net/member_repository/A9186684/36B86ADCD89F11EBAB98C55AC4F9AE02/NKEjLqcYRp6tt628TNngDfaoUgY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NKEjLqcYRp6tt628TNngDfaoUgY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Apr 2025 23:20:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1401 (0x579) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9186684 Validity Not Before: Apr 2 23:20:16 2025 GMT Not After : Apr 9 23:20:16 2025 GMT Subject: CN=67edc630-6084 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:f7:c2:d3:d6:d1:5e:20:64:d5:c7:22:98:c3: 0b:24:f2:bc:ac:11:e5:9c:56:7c:72:9e:e5:bd:e2: 31:e2:a5:45:eb:81:43:47:6a:0d:1c:8d:88:fe:1c: c2:04:f1:d5:e3:63:8d:4f:9e:3a:66:88:d8:ae:67: 9e:42:43:f6:0b:b1:32:49:9e:1e:13:89:8a:13:38: f5:7d:4a:13:88:1c:2c:ba:58:51:d4:10:31:f6:3b: d3:b8:64:83:68:41:47:93:c6:f3:2b:d2:7e:5e:38: a9:f4:3e:2a:83:67:44:f9:86:c2:b2:d6:fd:0f:68: b6:c6:f2:13:ff:ef:93:47:ef:1b:dd:3b:7b:40:2c: 27:ec:b9:e8:2b:01:3a:67:4c:a8:c5:8a:82:a3:6f: a7:14:07:57:f7:a7:8e:06:d3:01:3c:9c:e8:f7:78: 46:9b:a3:92:b4:57:9d:ce:84:a0:a1:e9:9a:07:de: 57:85:68:d4:01:6d:1f:ef:76:0f:6f:a7:32:61:bd: df:fb:e3:42:86:cd:a0:63:da:7d:82:04:f5:fe:34: 14:bb:2d:a6:82:46:f2:23:92:88:91:d6:51:21:f0: ce:85:76:1c:dd:5a:33:1a:07:a2:94:c0:7a:48:d4: bc:f5:0c:9e:9a:1c:f2:36:54:03:78:9e:24:9b:f9: 1e:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:01:6A:8B:E8:27:F2:B2:E3:17:A6:A7:2C:45:63:6A:5A:C2:35:40 X509v3 Authority Key Identifier: keyid:34:A1:23:2E:A7:18:46:9E:AD:B7:AD:BC:4C:D9:E0:0D:F6:A8:52:06 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9186684/36B86ADCD89F11EBAB98C55AC4F9AE02/NKEjLqcYRp6tt628TNngDfaoUgY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NKEjLqcYRp6tt628TNngDfaoUgY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186684/36B86ADCD89F11EBAB98C55AC4F9AE02/NKEjLqcYRp6tt628TNngDfaoUgY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2c:b4:f0:92:26:cd:95:fc:3e:e7:91:84:f6:c6:f9:42:df:bc: 69:1b:09:a8:07:74:c2:1c:a3:96:fb:6e:95:e8:2a:26:0b:8a: f3:5c:05:54:f8:6c:a4:26:54:cc:7c:c3:ae:d7:2c:39:fc:e4: 9c:fb:d8:9f:8f:13:35:c8:88:dc:03:c2:a0:a0:77:89:63:44: 22:e3:92:5f:b1:c3:b1:08:5b:cc:6b:64:89:92:5e:82:5c:2d: b6:be:e5:05:48:00:24:4b:8b:3a:06:9b:38:0d:44:0d:ab:43: d3:71:38:f0:f5:43:9a:5f:58:dd:5c:8f:ab:ae:9e:86:82:e2: 34:1b:8a:e3:ac:cf:6f:d9:fe:9e:82:ee:e6:45:cb:30:7b:eb: f6:df:5f:88:af:c9:b4:51:ac:85:2b:11:d0:1e:e4:9c:28:86: c4:9e:b0:d6:2e:7e:6c:51:c1:e4:76:7f:0c:e1:67:7c:1a:03: 45:34:4e:a8:00:12:fd:20:8c:5b:4c:85:d0:c7:40:dd:c2:54: 52:f2:13:6c:9b:5e:3d:c9:31:84:3c:b8:fd:61:e4:ea:15:9d: 1d:f2:cb:20:ff:a7:bf:6a:1c:01:12:50:21:c8:f9:51:27:e0: 0b:7a:ab:0d:a8:46:88:cc:90:9e:0c:82:72:12:26:79:d2:6a: 9f:4a:95:44 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBXkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODY2ODQxMTAvBgNVBAUTKDM0QTEyMzJFQTcxODQ2OUVBREI3QURCQzRDRDlFMDBE RjZBODUyMDYwHhcNMjUwNDAyMjMyMDE2WhcNMjUwNDA5MjMyMDE2WjAYMRYwFAYD VQQDEw02N2VkYzYzMC02MDg0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs/fC09bRXiBk1ccimMMLJPK8rBHlnFZ8cp7lveIx4qVF64FDR2oNHI2I/hzC BPHV42ONT546ZojYrmeeQkP2C7EySZ4eE4mKEzj1fUoTiBwsulhR1BAx9jvTuGSD aEFHk8bzK9J+Xjip9D4qg2dE+YbCstb9D2i2xvIT/++TR+8b3Tt7QCwn7LnoKwE6 Z0yoxYqCo2+nFAdX96eOBtMBPJzo93hGm6OStFedzoSgoemaB95XhWjUAW0f73YP b6cyYb3f++NChs2gY9p9ggT1/jQUuy2mgkbyI5KIkdZRIfDOhXYc3VozGgeilMB6 SNS89QyemhzyNlQDeJ4km/ke8QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKQBaovo J/Ky4xempyxFY2pawjVAMB8GA1UdIwQYMBaAFDShIy6nGEaerbetvEzZ4A32qFIG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NjY4NC8zNkI4NkFEQ0Q4 OUYxMUVCQUI5OEM1NUFDNEY5QUUwMi9OS0VqTHFjWVJwNnR0NjI4VE5uZ0RmYW9V Z1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05LRWpMcWNZUnA2dHQ2MjhUTm5nRGZhb1VnWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NjY4NC8zNkI4NkFEQ0Q4OUYxMUVCQUI5OEM1NUFDNEY5QUUwMi9OS0VqTHFjWVJw NnR0NjI4VE5uZ0RmYW9VZ1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAstPCSJs2V/D7nkYT2xvlC37xpGwmoB3TCHKOW+26V6ComC4rzXAVU +GykJlTMfMOu1yw5/OSc+9ifjxM1yIjcA8KgoHeJY0Qi45JfscOxCFvMa2SJkl6C XC22vuUFSAAkS4s6Bps4DUQNq0PTcTjw9UOaX1jdXI+rrp6GguI0G4rjrM9v2f6e gu7mRcswe+v231+Ir8m0UayFKxHQHuScKIbEnrDWLn5sUcHkdn8M4Wd8GgNFNE6o ABL9IIxbTIXQx0DdwlRS8hNsm149yTGEPLj9YeTqFZ0d8ssg/6e/ahwBElAhyPlR J+ALeqsNqEaIzJCeDIJyEiZ50mqfSpVE -----END CERTIFICATE-----Generated at Fri Apr 4 22:34:52 2025 by rpki-client