$ rpki-client -vvf rpki.apnic.net/member_repository/A912677F/C43D769663EC11EA97B72587C4F9AE02/NmQpLU_S3_HIhBdQ_IN58ZRaE34.mft File: NmQpLU_S3_HIhBdQ_IN58ZRaE34.mft (raw, json) Hash identifier: hkx8+C+NWV611mdZYHeZmki78W+RY3FGc2hEWEfU4BY= Subject key identifier: 4E:DF:80:96:D4:B3:A6:E5:A5:7F:79:46:45:13:D6:B1:D4:05:C7:91 Authority key identifier: 36:64:29:2D:4F:D2:DF:F1:C8:84:17:50:FC:83:79:F1:94:5A:13:7E Certificate issuer: /CN=A912677F/serialNumber=3664292D4FD2DFF1C8841750FC8379F1945A137E Certificate serial: 0A64 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NmQpLU_S3_HIhBdQ_IN58ZRaE34.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912677F/C43D769663EC11EA97B72587C4F9AE02/NmQpLU_S3_HIhBdQ_IN58ZRaE34.mft Manifest number: 0A5D Signing time: Fri 30 May 2025 19:50:39 +0000 Manifest this update: Fri 30 May 2025 19:50:38 +0000 Manifest next update: Fri 06 Jun 2025 19:50:38 +0000 Files and hashes: 1: NmQpLU_S3_HIhBdQ_IN58ZRaE34.crl (hash: MwRwIW8vCHSzjOMkZb8PJ8jlw55xNqKe4jJA2KN8RVI=) 2: B82FA738111C11EBB805F52AC4F9AE02.roa (hash: EJ4VnRATjOO9ERUrQeU1qxPXlhkEMnZWEHJLCS7gQyQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912677F/C43D769663EC11EA97B72587C4F9AE02/NmQpLU_S3_HIhBdQ_IN58ZRaE34.crl rsync://rpki.apnic.net/member_repository/A912677F/C43D769663EC11EA97B72587C4F9AE02/NmQpLU_S3_HIhBdQ_IN58ZRaE34.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NmQpLU_S3_HIhBdQ_IN58ZRaE34.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 19:50:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2660 (0xa64) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912677F, serialNumber=3664292D4FD2DFF1C8841750FC8379F1945A137E Validity Not Before: May 30 19:50:38 2025 GMT Not After : Jun 6 19:50:38 2025 GMT Subject: CN=683a0c0f-b10f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:b5:5c:6f:7a:26:56:63:f5:bb:d4:1a:10:66: ba:40:b9:95:55:28:3c:0f:d6:23:c6:ab:00:82:4b: b7:99:31:d5:22:86:90:35:53:98:40:60:5a:e3:49: 53:a4:82:7d:8e:3a:d9:68:6c:4b:a3:5e:9d:8b:58: bd:ab:5c:7a:49:95:c1:d4:f7:e0:c6:75:b5:12:af: 63:6c:3c:30:02:59:6a:6f:ea:95:b0:1e:24:d0:3a: e1:f7:e8:34:1c:96:c0:b0:1d:4d:ae:7e:51:1c:f7: f7:19:0d:76:af:98:80:82:17:69:89:66:69:ea:71: 5b:71:d7:ab:71:3c:47:b1:30:39:33:fd:e3:19:e3: 3c:9c:2e:83:14:33:28:83:6f:27:4e:7d:fa:07:2c: a9:80:6f:11:bb:59:2c:41:b2:45:7e:b5:e2:42:da: e5:1f:54:2a:49:d0:a9:c4:a0:7a:8c:38:ca:ce:9a: a9:ab:cb:55:ca:54:0c:33:e5:bd:f6:56:9e:1c:2d: 2a:7f:6d:8e:08:30:5c:17:5b:21:8f:d5:9d:a1:68: f9:7d:4c:f6:1a:a3:a6:c3:14:4c:02:10:5e:64:2f: 92:df:1d:c3:cf:28:2a:ec:08:02:67:da:0f:a1:eb: 2f:9c:58:3c:03:dd:37:e7:10:a8:f8:33:bc:a4:10: d6:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:DF:80:96:D4:B3:A6:E5:A5:7F:79:46:45:13:D6:B1:D4:05:C7:91 X509v3 Authority Key Identifier: keyid:36:64:29:2D:4F:D2:DF:F1:C8:84:17:50:FC:83:79:F1:94:5A:13:7E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912677F/C43D769663EC11EA97B72587C4F9AE02/NmQpLU_S3_HIhBdQ_IN58ZRaE34.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NmQpLU_S3_HIhBdQ_IN58ZRaE34.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912677F/C43D769663EC11EA97B72587C4F9AE02/NmQpLU_S3_HIhBdQ_IN58ZRaE34.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d1:34:f3:7b:86:d8:13:90:b1:55:df:30:65:40:4f:89:32:c2: 04:e2:e5:c7:79:cf:8b:d4:62:a0:fe:21:c7:d5:b6:68:29:ef: e7:67:4c:1b:83:f8:80:0a:43:89:42:ee:8a:9f:bf:f8:e1:c6: 99:e7:7d:47:3d:10:e8:3d:6b:a9:9d:77:9b:3c:a5:28:c2:e3: 6a:bf:8b:36:49:e4:98:31:fc:a6:55:2f:06:66:e7:e9:7f:bf: 9e:a6:4f:b2:05:cb:bb:2c:fc:ba:1a:95:62:c4:4d:d2:75:a4: fe:b8:44:6a:43:63:eb:ce:27:6e:ed:ef:4f:96:f1:0a:c5:1e: 2e:ad:57:1e:88:1f:e8:3e:30:87:6e:28:47:4f:b2:d0:cc:89: bc:01:38:2b:e5:c2:08:89:63:ff:f8:91:2e:69:b8:53:c1:71: c7:92:46:61:8f:8b:85:a1:41:4d:29:f4:60:df:11:b4:05:b7: 89:44:68:93:96:8d:96:b5:3a:8f:64:d7:2a:0c:30:69:49:8e: c5:69:82:4b:a5:cf:54:d9:7d:92:92:13:6b:08:14:2d:74:66: 28:bf:c4:a6:df:32:28:b5:63:2f:52:88:97:75:fc:b5:1c:c7: a4:94:79:51:55:29:4b:99:ba:53:4a:23:9e:01:29:46:aa:46: dd:08:48:df -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCmQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjY3N0YxMTAvBgNVBAUTKDM2NjQyOTJENEZEMkRGRjFDODg0MTc1MEZDODM3OUYx OTQ1QTEzN0UwHhcNMjUwNTMwMTk1MDM4WhcNMjUwNjA2MTk1MDM4WjAYMRYwFAYD VQQDEw02ODNhMGMwZi1iMTBmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA07Vcb3omVmP1u9QaEGa6QLmVVSg8D9YjxqsAgku3mTHVIoaQNVOYQGBa40lT pIJ9jjrZaGxLo16di1i9q1x6SZXB1PfgxnW1Eq9jbDwwAllqb+qVsB4k0Drh9+g0 HJbAsB1Nrn5RHPf3GQ12r5iAghdpiWZp6nFbcdercTxHsTA5M/3jGeM8nC6DFDMo g28nTn36ByypgG8Ru1ksQbJFfrXiQtrlH1QqSdCpxKB6jDjKzpqpq8tVylQMM+W9 9laeHC0qf22OCDBcF1shj9WdoWj5fUz2GqOmwxRMAhBeZC+S3x3Dzygq7AgCZ9oP oesvnFg8A9035xCo+DO8pBDWKwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE7fgJbU s6blpX95RkUT1rHUBceRMB8GA1UdIwQYMBaAFDZkKS1P0t/xyIQXUPyDefGUWhN+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNjc3Ri9DNDNENzY5NjYz RUMxMUVBOTdCNzI1ODdDNEY5QUUwMi9ObVFwTFVfUzNfSEloQmRRX0lONThaUmFF MzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05tUXBMVV9TM19ISWhCZFFfSU41OFpSYUUzNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy Njc3Ri9DNDNENzY5NjYzRUMxMUVBOTdCNzI1ODdDNEY5QUUwMi9ObVFwTFVfUzNf SEloQmRRX0lONThaUmFFMzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDRNPN7htgTkLFV3zBlQE+JMsIE4uXHec+L1GKg/iHH1bZoKe/nZ0wb g/iACkOJQu6Kn7/44caZ531HPRDoPWupnXebPKUowuNqv4s2SeSYMfymVS8GZufp f7+epk+yBcu7LPy6GpVixE3SdaT+uERqQ2Przidu7e9PlvEKxR4urVceiB/oPjCH bihHT7LQzIm8ATgr5cIIiWP/+JEuabhTwXHHkkZhj4uFoUFNKfRg3xG0BbeJRGiT lo2WtTqPZNcqDDBpSY7FaYJLpc9U2X2SkhNrCBQtdGYov8Sm3zIotWMvUoiXdfy1 HMeklHlRVSlLmbpTSiOeASlGqkbdCEjf -----END CERTIFICATE-----Generated at Sat May 31 17:42:43 2025 by rpki-client