$ rpki-client -vvf rpki.apnic.net/member_repository/A918ACDD/2A2CFC464DCF11EDBF05FA53C4F9AE02/NpFTMwCsweAQXuAxcGNQf4e0AS0.mft File: NpFTMwCsweAQXuAxcGNQf4e0AS0.mft (raw, json) Hash identifier: 2yUOdenUYGS643PgBKvO86I2K6exEyJO8Wv4Rb+C8EY= Subject key identifier: 7F:D1:43:90:97:9E:39:C0:E0:CB:30:C5:A4:5E:B3:F3:82:6D:C6:D1 Authority key identifier: 36:91:53:33:00:AC:C1:E0:10:5E:E0:31:70:63:50:7F:87:B4:01:2D Certificate issuer: /CN=A918ACDD/serialNumber=3691533300ACC1E0105EE0317063507F87B4012D Certificate serial: 01DA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NpFTMwCsweAQXuAxcGNQf4e0AS0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918ACDD/2A2CFC464DCF11EDBF05FA53C4F9AE02/NpFTMwCsweAQXuAxcGNQf4e0AS0.mft Manifest number: 01D6 Signing time: Fri 11 Apr 2025 02:09:29 +0000 Manifest this update: Fri 11 Apr 2025 02:09:29 +0000 Manifest next update: Fri 18 Apr 2025 02:09:29 +0000 Files and hashes: 1: NpFTMwCsweAQXuAxcGNQf4e0AS0.crl (hash: 2wL2MkUvr/V6Rkp/so0VUc6DknHkbFZQ0q3iKu/4kdg=) 2: 397504CA4DD211ED8314A659C4F9AE02.roa (hash: IA7ndlMtzlimkIY6svrVtb7hYj1DKuX/Dcj54QQRijI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918ACDD/2A2CFC464DCF11EDBF05FA53C4F9AE02/NpFTMwCsweAQXuAxcGNQf4e0AS0.crl rsync://rpki.apnic.net/member_repository/A918ACDD/2A2CFC464DCF11EDBF05FA53C4F9AE02/NpFTMwCsweAQXuAxcGNQf4e0AS0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NpFTMwCsweAQXuAxcGNQf4e0AS0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Apr 2025 02:09:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 474 (0x1da) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918ACDD, serialNumber=3691533300ACC1E0105EE0317063507F87B4012D Validity Not Before: Apr 11 02:09:29 2025 GMT Not After : Apr 18 02:09:29 2025 GMT Subject: CN=67f879d9-1422 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:6b:f8:49:2d:9c:48:50:b7:a4:54:ff:74:5e: 85:e3:d9:61:ce:95:e7:a2:03:c1:4b:a0:d4:04:ed: e6:36:71:ef:a4:ee:28:15:eb:59:66:53:62:2e:7c: f4:84:1d:c4:96:e8:d2:ff:48:5d:02:a1:c7:22:27: 27:4e:8a:a4:8e:6c:ce:ef:75:f0:a2:f6:8a:02:bc: 78:f5:0c:3c:73:d5:53:e6:5b:88:0d:02:95:21:11: 39:04:be:e1:09:07:1b:3a:bf:01:48:a3:e3:8e:9e: 1b:83:cb:3f:dc:94:87:74:fd:e0:ed:39:f5:ec:de: 3c:22:6e:1a:a6:3f:e2:65:d9:fb:b1:ec:4e:0b:42: 27:17:4b:78:e5:64:66:d2:02:97:bd:b9:f1:06:da: f3:15:4c:bb:c4:cf:de:fb:7e:97:08:e5:5d:13:d7: 85:14:3b:5e:82:b3:77:a1:2b:5d:11:55:94:6b:de: 46:9f:d0:c6:61:d0:88:fb:0d:bd:3e:3d:fa:f0:b9: 6a:91:e0:8c:76:0c:7e:22:ba:ac:ac:a8:be:b6:f4: 6c:ab:b4:f3:34:08:18:ec:aa:d7:b2:bc:75:f1:25: cf:33:31:f5:6d:10:e2:d1:ca:29:f8:bb:cc:6b:56: 6e:c8:b3:a7:aa:f6:ec:b0:e6:89:1d:3b:50:81:b1: 1b:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:D1:43:90:97:9E:39:C0:E0:CB:30:C5:A4:5E:B3:F3:82:6D:C6:D1 X509v3 Authority Key Identifier: keyid:36:91:53:33:00:AC:C1:E0:10:5E:E0:31:70:63:50:7F:87:B4:01:2D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918ACDD/2A2CFC464DCF11EDBF05FA53C4F9AE02/NpFTMwCsweAQXuAxcGNQf4e0AS0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NpFTMwCsweAQXuAxcGNQf4e0AS0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918ACDD/2A2CFC464DCF11EDBF05FA53C4F9AE02/NpFTMwCsweAQXuAxcGNQf4e0AS0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 80:96:f4:d9:57:70:44:d3:dc:24:09:2a:a1:e5:7a:6f:b3:c6: 8d:e8:c6:60:ed:f2:f5:b3:62:91:85:4f:c8:ba:e3:9d:57:86: e0:50:cd:d2:2d:b5:eb:6d:de:7e:49:98:b6:61:8b:d3:18:8e: 7e:fa:ee:a4:45:29:93:d0:fa:99:b7:ba:90:22:93:0c:35:cc: c3:00:9b:58:cd:4e:6e:16:d3:a8:dd:b9:9f:c9:33:b6:db:21: be:d6:6d:c9:d1:64:29:1c:f2:e4:09:a4:2a:d6:9a:6c:a3:a7: 27:01:c0:38:23:45:a5:b7:02:65:33:20:59:55:e7:e8:03:f9: cf:e5:f7:cf:72:a3:a0:53:6d:c5:30:79:5d:08:ed:ce:37:46: 51:b4:31:7c:15:78:77:b7:25:c3:d1:c0:5e:34:80:74:05:20: c8:35:17:c6:4a:59:72:7f:29:eb:52:3c:92:82:ab:99:82:29: f3:bb:1a:b6:22:b2:07:81:42:2c:2b:89:5a:fb:93:6c:79:6e: 3b:e1:ac:c4:4c:49:0b:09:66:0b:f1:f2:ed:66:38:c8:38:63: 4a:e3:90:1f:0e:12:55:ad:56:9d:8e:2c:61:09:01:2f:bb:49: f0:70:7e:04:09:00:41:99:e3:5c:86:7c:0f:8b:6c:cd:1b:0e: a3:75:e6:d6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAdowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEFDREQxMTAvBgNVBAUTKDM2OTE1MzMzMDBBQ0MxRTAxMDVFRTAzMTcwNjM1MDdG ODdCNDAxMkQwHhcNMjUwNDExMDIwOTI5WhcNMjUwNDE4MDIwOTI5WjAYMRYwFAYD VQQDEw02N2Y4NzlkOS0xNDIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArmv4SS2cSFC3pFT/dF6F49lhzpXnogPBS6DUBO3mNnHvpO4oFetZZlNiLnz0 hB3ElujS/0hdAqHHIicnToqkjmzO73XwovaKArx49Qw8c9VT5luIDQKVIRE5BL7h CQcbOr8BSKPjjp4bg8s/3JSHdP3g7Tn17N48Im4apj/iZdn7sexOC0InF0t45WRm 0gKXvbnxBtrzFUy7xM/e+36XCOVdE9eFFDtegrN3oStdEVWUa95Gn9DGYdCI+w29 Pj368LlqkeCMdgx+IrqsrKi+tvRsq7TzNAgY7KrXsrx18SXPMzH1bRDi0cop+LvM a1ZuyLOnqvbssOaJHTtQgbEb5QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH/RQ5CX njnA4MswxaRes/OCbcbRMB8GA1UdIwQYMBaAFDaRUzMArMHgEF7gMXBjUH+HtAEt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QUNERC8yQTJDRkM0NjRE Q0YxMUVEQkYwNUZBNTNDNEY5QUUwMi9OcEZUTXdDc3dlQVFYdUF4Y0dOUWY0ZTBB UzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05wRlRNd0Nzd2VBUVh1QXhjR05RZjRlMEFTMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QUNERC8yQTJDRkM0NjREQ0YxMUVEQkYwNUZBNTNDNEY5QUUwMi9OcEZUTXdDc3dl QVFYdUF4Y0dOUWY0ZTBBUzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCAlvTZV3BE09wkCSqh5Xpvs8aN6MZg7fL1s2KRhU/IuuOdV4bgUM3S LbXrbd5+SZi2YYvTGI5++u6kRSmT0PqZt7qQIpMMNczDAJtYzU5uFtOo3bmfyTO2 2yG+1m3J0WQpHPLkCaQq1ppso6cnAcA4I0WltwJlMyBZVefoA/nP5ffPcqOgU23F MHldCO3ON0ZRtDF8FXh3tyXD0cBeNIB0BSDINRfGSllyfynrUjySgquZginzuxq2 IrIHgUIsK4la+5NseW474azETEkLCWYL8fLtZjjIOGNK45AfDhJVrVadjixhCQEv u0nwcH4ECQBBmeNchnwPi2zNGw6jdebW -----END CERTIFICATE-----Generated at Sun Apr 13 02:05:06 2025 by rpki-client