$ rpki-client -vvf rpki.apnic.net/member_repository/A91FB8C8/C44C04528EC911EE9F8E447FC4F9AE02/Nps-m3tm6PW7l5puLy56rPUA0_E.mft File: Nps-m3tm6PW7l5puLy56rPUA0_E.mft (raw, json) Hash identifier: ge63ertdxMbxOvxKmhyxPhl2KEsSouxSdPOIbVepUpo= Subject key identifier: 2B:A0:B2:2B:7F:FE:8A:F0:F6:9A:E4:BF:CE:2F:50:DF:E5:4F:B8:74 Authority key identifier: 36:9B:3E:9B:7B:66:E8:F5:BB:97:9A:6E:2F:2E:7A:AC:F5:00:D3:F1 Certificate issuer: /CN=A91FB8C8/serialNumber=369B3E9B7B66E8F5BB979A6E2F2E7AACF500D3F1 Certificate serial: 010C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nps-m3tm6PW7l5puLy56rPUA0_E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FB8C8/C44C04528EC911EE9F8E447FC4F9AE02/Nps-m3tm6PW7l5puLy56rPUA0_E.mft Manifest number: 0109 Signing time: Sat 19 Apr 2025 04:12:11 +0000 Manifest this update: Sat 19 Apr 2025 04:12:10 +0000 Manifest next update: Sat 26 Apr 2025 04:12:10 +0000 Files and hashes: 1: Nps-m3tm6PW7l5puLy56rPUA0_E.crl (hash: abBx5LcA8uYiZEGUk15zhenZFO5oHb0bANi2tq1/PD0=) 2: CA5B7DA48ECA11EEA3901581C4F9AE02.roa (hash: NP1KRG9waDvIQkw5KUdNc2k+dz2A2AWeqBvOhbZYwI8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FB8C8/C44C04528EC911EE9F8E447FC4F9AE02/Nps-m3tm6PW7l5puLy56rPUA0_E.crl rsync://rpki.apnic.net/member_repository/A91FB8C8/C44C04528EC911EE9F8E447FC4F9AE02/Nps-m3tm6PW7l5puLy56rPUA0_E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nps-m3tm6PW7l5puLy56rPUA0_E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Apr 2025 04:12:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 268 (0x10c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FB8C8, serialNumber=369B3E9B7B66E8F5BB979A6E2F2E7AACF500D3F1 Validity Not Before: Apr 19 04:12:10 2025 GMT Not After : Apr 26 04:12:10 2025 GMT Subject: CN=6803229a-1521 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:23:a0:a7:3b:fe:fe:42:ea:54:b1:45:49:49: 0b:ae:21:91:de:fb:18:a1:b7:58:8b:1a:32:f1:30: 12:24:3c:1a:91:3a:cd:c3:5d:b2:4a:85:09:5b:ab: 06:3b:31:cc:d7:fd:f6:de:66:de:14:e4:c5:b0:73: bf:09:40:12:4a:16:8d:51:98:48:e6:dd:ae:89:2a: 8d:20:1f:ae:28:08:92:d9:bf:76:37:f6:a8:c5:a1: 94:79:d1:e6:3c:cd:df:18:ea:03:fb:d1:cb:2c:d7: ab:b3:5e:05:66:bb:d7:ee:29:2b:ec:27:01:d5:b2: 0c:b1:46:eb:47:35:44:73:f4:00:14:e8:be:8d:a9: 3f:af:cb:43:3a:c3:6d:47:ba:ab:6a:6e:67:69:8a: b1:f1:c1:1d:87:4b:81:72:77:53:3b:ae:f9:c8:9b: 79:75:02:21:51:c8:d7:1d:06:56:9d:27:09:7e:ce: ee:bd:4d:2f:33:92:b1:1f:c4:d1:dc:9f:48:f4:ac: e7:67:5f:a6:56:ec:23:2c:1e:69:ad:02:e4:12:a0: 38:5a:79:9a:14:e4:37:f3:7f:81:05:dd:22:f6:94: 5a:4d:ed:c3:f0:ab:bb:76:71:d7:6b:1d:2d:e5:fb: ee:eb:8e:1e:82:51:68:d1:5a:60:46:68:3b:e2:70: 36:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:A0:B2:2B:7F:FE:8A:F0:F6:9A:E4:BF:CE:2F:50:DF:E5:4F:B8:74 X509v3 Authority Key Identifier: keyid:36:9B:3E:9B:7B:66:E8:F5:BB:97:9A:6E:2F:2E:7A:AC:F5:00:D3:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FB8C8/C44C04528EC911EE9F8E447FC4F9AE02/Nps-m3tm6PW7l5puLy56rPUA0_E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nps-m3tm6PW7l5puLy56rPUA0_E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FB8C8/C44C04528EC911EE9F8E447FC4F9AE02/Nps-m3tm6PW7l5puLy56rPUA0_E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9e:a1:3b:af:41:aa:f5:d9:8e:b9:7b:33:e1:2e:e6:5f:7b:46: b3:c0:ee:41:4d:f1:ee:8c:ca:ca:2a:fd:64:8a:1e:e2:b5:6e: b4:7b:9e:07:67:38:a3:fa:98:6f:a8:59:ad:f9:3d:e8:fd:16: 30:46:76:23:af:e6:56:b4:89:8f:91:c3:56:48:9f:89:82:de: e3:47:b9:dd:1c:7e:db:eb:bb:a6:5e:0a:f2:bc:eb:8c:e6:0a: f2:d7:19:62:de:1c:ea:97:6a:ca:b0:38:30:3a:97:d7:ba:77: 31:51:a8:1d:f3:17:27:cf:69:70:f1:cb:47:62:92:8d:4a:e1: ca:c5:ca:90:f3:9b:8b:d8:77:ae:3f:d2:b4:54:bc:18:85:fe: 92:7e:e0:95:c1:04:36:2c:f1:d1:00:77:d6:03:b3:88:67:99: e0:90:0b:23:78:94:f9:43:00:b6:25:70:12:95:2e:d0:b7:b8: 74:da:fd:61:bc:47:c3:51:0c:a2:f4:b7:d6:66:da:1b:b7:99: b2:71:9a:97:c2:cc:83:a9:e2:49:79:92:8d:ab:47:a5:3e:1e: 9c:56:49:e8:90:87:8b:c2:87:6c:83:ba:e8:d9:af:0b:84:75: 4e:e6:d5:5d:7c:8a:c5:58:57:1b:7f:02:18:2d:f4:ba:4a:44: 13:47:23:ce -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkI4QzgxMTAvBgNVBAUTKDM2OUIzRTlCN0I2NkU4RjVCQjk3OUE2RTJGMkU3QUFD RjUwMEQzRjEwHhcNMjUwNDE5MDQxMjEwWhcNMjUwNDI2MDQxMjEwWjAYMRYwFAYD VQQDEw02ODAzMjI5YS0xNTIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsyOgpzv+/kLqVLFFSUkLriGR3vsYobdYixoy8TASJDwakTrNw12ySoUJW6sG OzHM1/323mbeFOTFsHO/CUASShaNUZhI5t2uiSqNIB+uKAiS2b92N/aoxaGUedHm PM3fGOoD+9HLLNers14FZrvX7ikr7CcB1bIMsUbrRzVEc/QAFOi+jak/r8tDOsNt R7qram5naYqx8cEdh0uBcndTO675yJt5dQIhUcjXHQZWnScJfs7uvU0vM5KxH8TR 3J9I9KznZ1+mVuwjLB5prQLkEqA4WnmaFOQ383+BBd0i9pRaTe3D8Ku7dnHXax0t 5fvu644eglFo0VpgRmg74nA2SwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCugsit/ /orw9prkv84vUN/lT7h0MB8GA1UdIwQYMBaAFDabPpt7Zuj1u5eabi8ueqz1ANPx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQjhDOC9DNDRDMDQ1MjhF QzkxMUVFOUY4RTQ0N0ZDNEY5QUUwMi9OcHMtbTN0bTZQVzdsNXB1THk1NnJQVUEw X0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05wcy1tM3RtNlBXN2w1cHVMeTU2clBVQTBfRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QjhDOC9DNDRDMDQ1MjhFQzkxMUVFOUY4RTQ0N0ZDNEY5QUUwMi9OcHMtbTN0bTZQ VzdsNXB1THk1NnJQVUEwX0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCeoTuvQar12Y65ezPhLuZfe0azwO5BTfHujMrKKv1kih7itW60e54H Zzij+phvqFmt+T3o/RYwRnYjr+ZWtImPkcNWSJ+Jgt7jR7ndHH7b67umXgryvOuM 5gry1xli3hzql2rKsDgwOpfXuncxUagd8xcnz2lw8ctHYpKNSuHKxcqQ85uL2Heu P9K0VLwYhf6SfuCVwQQ2LPHRAHfWA7OIZ5ngkAsjeJT5QwC2JXASlS7Qt7h02v1h vEfDUQyi9LfWZtobt5mycZqXwsyDqeJJeZKNq0elPh6cVknokIeLwodsg7ro2a8L hHVO5tVdfIrFWFcbfwIYLfS6SkQTRyPO -----END CERTIFICATE-----Generated at Sun Apr 20 21:57:50 2025 by rpki-client