$ rpki-client -vvf rpki.apnic.net/member_repository/A91CA3CD/26453FA0905711EE86493613C4F9AE02/NctCHFV3F3WBziSzai9syTGEYFI.mft File: NctCHFV3F3WBziSzai9syTGEYFI.mft (raw, json) Hash identifier: 6aVM3wAd6f4YalI7cgGYrxyy2Z07U4FaUBWqtRqHi20= Subject key identifier: D5:D5:BE:BD:46:C9:DD:8D:6A:71:14:96:4C:A5:E0:A2:4A:D2:79:37 Authority key identifier: 35:CB:42:1C:55:77:17:75:81:CE:24:B3:6A:2F:6C:C9:31:84:60:52 Certificate issuer: /CN=A91CA3CD/serialNumber=35CB421C5577177581CE24B36A2F6CC931846052 Certificate serial: 0103 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NctCHFV3F3WBziSzai9syTGEYFI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CA3CD/26453FA0905711EE86493613C4F9AE02/NctCHFV3F3WBziSzai9syTGEYFI.mft Manifest number: FF Signing time: Thu 03 Apr 2025 04:22:24 +0000 Manifest this update: Thu 03 Apr 2025 04:22:23 +0000 Manifest next update: Thu 10 Apr 2025 04:22:23 +0000 Files and hashes: 1: NctCHFV3F3WBziSzai9syTGEYFI.crl (hash: 7+6t4TEc/YhGB3c9UFhjVa/gW8ijdQC2d88YzUGWbUg=) 2: F5121FB090CF11EE8036815AC4F9AE02.roa (hash: cuDY334MkIVtRBq3o3ujGRQ6jR/z000CC0KgPqw5K+Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CA3CD/26453FA0905711EE86493613C4F9AE02/NctCHFV3F3WBziSzai9syTGEYFI.crl rsync://rpki.apnic.net/member_repository/A91CA3CD/26453FA0905711EE86493613C4F9AE02/NctCHFV3F3WBziSzai9syTGEYFI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NctCHFV3F3WBziSzai9syTGEYFI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Apr 2025 04:22:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 259 (0x103) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CA3CD Validity Not Before: Apr 3 04:22:23 2025 GMT Not After : Apr 10 04:22:23 2025 GMT Subject: CN=67ee0cff-3f41 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:c1:17:a7:24:24:ba:32:e8:b4:5d:6d:3b:3e: 30:87:4a:8e:04:ef:4f:76:72:26:89:4d:d3:17:43: db:ac:a1:01:6d:5d:85:4c:e0:d2:cd:f6:21:44:58: bd:fd:9e:9a:9a:6f:8e:05:69:75:86:5a:c5:e0:fd: 3f:94:60:c0:50:85:fa:54:b4:d6:1a:6d:bd:ab:ca: 45:06:98:50:74:33:a0:05:01:38:39:45:58:68:4a: a2:78:b2:6a:29:eb:a5:e3:d1:38:ff:f0:e5:f1:6b: fd:b7:1a:39:1d:b5:ad:a1:a3:93:89:83:20:f9:8a: 2d:4f:55:88:41:da:1f:5a:fa:49:b5:48:34:d2:2c: 4d:8a:e1:2f:09:44:a7:ab:8d:d9:24:36:7c:f6:c2: 5f:ec:6b:81:e3:47:f8:8a:79:91:c1:24:32:16:62: 93:7f:dd:9a:98:91:ce:46:ee:89:1a:e1:ab:09:20: 32:db:4e:4d:0d:00:10:84:02:a7:25:3c:47:5a:10: 57:bc:fe:7f:a4:21:3a:dd:f3:f1:90:be:dc:62:6f: 46:1b:48:02:37:df:a7:66:4e:da:12:d2:21:3c:ab: d5:90:1c:99:b2:7d:37:61:c2:4c:aa:06:c0:b2:21: 21:5b:7b:1c:54:94:52:b9:8f:ed:fa:b4:3f:80:28: 5d:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:D5:BE:BD:46:C9:DD:8D:6A:71:14:96:4C:A5:E0:A2:4A:D2:79:37 X509v3 Authority Key Identifier: keyid:35:CB:42:1C:55:77:17:75:81:CE:24:B3:6A:2F:6C:C9:31:84:60:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CA3CD/26453FA0905711EE86493613C4F9AE02/NctCHFV3F3WBziSzai9syTGEYFI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NctCHFV3F3WBziSzai9syTGEYFI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CA3CD/26453FA0905711EE86493613C4F9AE02/NctCHFV3F3WBziSzai9syTGEYFI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2a:80:6c:84:0d:cd:08:8e:60:be:d7:74:ac:b1:d5:84:2b:0a: 8f:41:e5:e1:ee:f7:58:a3:93:98:da:54:b9:6f:d3:00:1d:e5: e8:74:e7:fa:33:35:1e:ee:ff:9c:c7:f8:ea:fd:4f:77:8e:d8: d0:26:0a:5a:bb:74:7b:50:50:a9:0f:51:d5:b9:3d:bc:19:d6: 5e:73:c0:91:9d:16:35:5b:e9:de:cb:72:2f:e0:c6:7a:ce:83: 7b:06:71:3b:d0:a1:93:0f:32:26:8f:c4:4c:51:05:1d:3c:78: 2f:f6:7f:6f:1b:10:8d:db:0f:c6:21:c5:39:63:14:61:1a:e0: 53:50:17:b7:60:3d:a4:b8:9e:70:a0:d4:c4:91:40:bc:a9:d0: 49:06:30:74:96:34:b8:60:7c:42:6f:04:52:3f:ed:95:5a:18: a7:b5:c2:00:dd:8a:9e:03:b8:28:c3:6f:e9:2f:2c:02:b4:96: 8b:31:6c:8d:81:30:5c:95:5a:60:4d:3a:50:c0:45:00:54:4f: dc:1a:28:fa:89:2b:49:1b:02:b3:1c:f8:47:10:68:06:a9:32: 5c:40:ee:1e:74:a1:e3:bc:8a:57:44:0a:c4:d2:8b:f8:17:1e: cb:c0:51:de:3b:01:c0:89:5b:71:80:b6:c6:08:00:a9:7d:79: 06:d9:44:9b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0EzQ0QxMTAvBgNVBAUTKDM1Q0I0MjFDNTU3NzE3NzU4MUNFMjRCMzZBMkY2Q0M5 MzE4NDYwNTIwHhcNMjUwNDAzMDQyMjIzWhcNMjUwNDEwMDQyMjIzWjAYMRYwFAYD VQQDEw02N2VlMGNmZi0zZjQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyMEXpyQkujLotF1tOz4wh0qOBO9PdnImiU3TF0PbrKEBbV2FTODSzfYhRFi9 /Z6amm+OBWl1hlrF4P0/lGDAUIX6VLTWGm29q8pFBphQdDOgBQE4OUVYaEqieLJq Keul49E4//Dl8Wv9txo5HbWtoaOTiYMg+YotT1WIQdofWvpJtUg00ixNiuEvCUSn q43ZJDZ89sJf7GuB40f4inmRwSQyFmKTf92amJHORu6JGuGrCSAy205NDQAQhAKn JTxHWhBXvP5/pCE63fPxkL7cYm9GG0gCN9+nZk7aEtIhPKvVkByZsn03YcJMqgbA siEhW3scVJRSuY/t+rQ/gChdmwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNXVvr1G yd2NanEUlkyl4KJK0nk3MB8GA1UdIwQYMBaAFDXLQhxVdxd1gc4ks2ovbMkxhGBS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQTNDRC8yNjQ1M0ZBMDkw NTcxMUVFODY0OTM2MTNDNEY5QUUwMi9OY3RDSEZWM0YzV0J6aVN6YWk5c3lUR0VZ RkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05jdENIRlYzRjNXQnppU3phaTlzeVRHRVlGSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QTNDRC8yNjQ1M0ZBMDkwNTcxMUVFODY0OTM2MTNDNEY5QUUwMi9OY3RDSEZWM0Yz V0J6aVN6YWk5c3lUR0VZRkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAqgGyEDc0IjmC+13SssdWEKwqPQeXh7vdYo5OY2lS5b9MAHeXodOf6 MzUe7v+cx/jq/U93jtjQJgpau3R7UFCpD1HVuT28GdZec8CRnRY1W+ney3Iv4MZ6 zoN7BnE70KGTDzImj8RMUQUdPHgv9n9vGxCN2w/GIcU5YxRhGuBTUBe3YD2kuJ5w oNTEkUC8qdBJBjB0ljS4YHxCbwRSP+2VWhintcIA3YqeA7gow2/pLywCtJaLMWyN gTBclVpgTTpQwEUAVE/cGij6iStJGwKzHPhHEGgGqTJcQO4edKHjvIpXRArE0ov4 Fx7LwFHeOwHAiVtxgLbGCACpfXkG2USb -----END CERTIFICATE-----Generated at Fri Apr 4 22:37:00 2025 by rpki-client