$ rpki-client -vvf rpki.apnic.net/member_repository/A91452AC/A48D5966BB3E11EAA29EE321C4F9AE02/Ntd-kkOrui_VSWopGDC304sLy8Q.mft File: Ntd-kkOrui_VSWopGDC304sLy8Q.mft (raw, json) Hash identifier: nRIsKV2YaEe+UzFGyrC9cmfvi7EYbEdCR5iP1KJePhA= Subject key identifier: 3F:74:2F:FD:41:0B:9E:D8:23:74:82:07:BA:22:DB:AB:6D:F4:9A:2B Authority key identifier: 36:D7:7E:92:43:AB:BA:2F:D5:49:6A:29:18:30:B7:D3:8B:0B:CB:C4 Certificate issuer: /CN=A91452AC/serialNumber=36D77E9243ABBA2FD5496A291830B7D38B0BCBC4 Certificate serial: 08CA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ntd-kkOrui_VSWopGDC304sLy8Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91452AC/A48D5966BB3E11EAA29EE321C4F9AE02/Ntd-kkOrui_VSWopGDC304sLy8Q.mft Manifest number: 08AE Signing time: Fri 30 May 2025 20:45:58 +0000 Manifest this update: Fri 30 May 2025 20:45:58 +0000 Manifest next update: Fri 06 Jun 2025 20:45:58 +0000 Files and hashes: 1: Ntd-kkOrui_VSWopGDC304sLy8Q.crl (hash: igBJIXXOXbw5uxLBhPr/sAfe3Gtb065oDknAX0yBGxI=) 2: B453EBC4BB4011EAAF70B028C4F9AE02.roa (hash: Nz/7xCUgKfmqkXApuxeo5myCUO+mgajFtNE4r7Ggzao=) 3: A58B9338AD4A11EBA6B48687C4F9AE02.roa (hash: 9S3WJERMTtwQwqkFdyQh2FAfBQXuWIoDgdAQjyhftzk=) 4: 72E60DEA3CC911EDA5EBD21DC4F9AE02.roa (hash: zq2Qkn/Tk6HTf9mmAUUEV4eovm/AM6TvEoGB/VFCywQ=) 5: 0F91DE9EAD4C11EB903C150DC4F9AE02.roa (hash: KYXdBuY8eVoROAmSDw7JnT54RB6WWf5lcCmMUouYwzY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91452AC/A48D5966BB3E11EAA29EE321C4F9AE02/Ntd-kkOrui_VSWopGDC304sLy8Q.crl rsync://rpki.apnic.net/member_repository/A91452AC/A48D5966BB3E11EAA29EE321C4F9AE02/Ntd-kkOrui_VSWopGDC304sLy8Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ntd-kkOrui_VSWopGDC304sLy8Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 20:45:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2250 (0x8ca) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91452AC, serialNumber=36D77E9243ABBA2FD5496A291830B7D38B0BCBC4 Validity Not Before: May 30 20:45:58 2025 GMT Not After : Jun 6 20:45:58 2025 GMT Subject: CN=683a1906-46a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:8c:bf:d8:2b:fd:3d:e3:32:55:83:7e:f0:50: cd:a1:ab:d9:2b:0f:f9:36:7d:fa:af:7d:60:97:97: 18:3b:16:31:22:43:48:e0:4f:91:83:fd:63:68:87: 48:cc:70:11:ca:30:e5:d2:6b:d6:29:e8:f5:43:c8: d9:89:3f:e2:c4:1b:a7:cd:8b:a8:2b:db:15:31:98: 15:fd:54:0c:2d:08:ea:98:65:6c:2c:7f:84:20:a8: 65:78:a6:69:89:09:c8:22:7c:23:78:23:f3:88:2e: 97:cd:61:7d:df:92:cd:66:1b:aa:dd:b1:e3:be:99: 70:2e:4c:3d:e6:5a:da:77:4e:e6:e7:d5:f5:fe:27: 8a:cf:93:fc:9f:8a:c5:41:d5:3c:af:58:6d:b3:3e: 66:9e:7c:f8:79:72:6c:fa:92:13:94:71:7c:62:2b: 1f:74:c4:c5:e8:e0:53:27:dd:55:1b:96:2d:74:21: 20:48:79:92:65:d3:5d:3b:64:24:c5:a1:c5:cd:91: df:e2:dd:b0:88:3d:64:63:4c:16:03:39:83:22:7d: 4e:b4:1c:d4:2d:94:76:6b:6c:0f:bd:5c:5f:30:97: b3:16:c5:2d:45:2b:0f:04:73:66:3c:f1:e5:f3:7c: 83:1f:bf:1c:b5:8f:6a:3c:9a:e0:12:83:4d:68:9f: aa:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:74:2F:FD:41:0B:9E:D8:23:74:82:07:BA:22:DB:AB:6D:F4:9A:2B X509v3 Authority Key Identifier: keyid:36:D7:7E:92:43:AB:BA:2F:D5:49:6A:29:18:30:B7:D3:8B:0B:CB:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91452AC/A48D5966BB3E11EAA29EE321C4F9AE02/Ntd-kkOrui_VSWopGDC304sLy8Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ntd-kkOrui_VSWopGDC304sLy8Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91452AC/A48D5966BB3E11EAA29EE321C4F9AE02/Ntd-kkOrui_VSWopGDC304sLy8Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption af:d4:9e:20:46:b0:aa:4d:37:d1:ad:48:aa:86:4d:78:31:f8: 8d:8c:a7:59:68:e2:83:67:d8:71:fd:56:58:14:4d:76:9e:1c: f7:20:31:cf:24:79:dd:ee:ff:67:89:ce:5b:a1:34:79:53:35: 8d:fa:54:8d:93:60:2c:95:22:1e:2a:68:0c:ee:b2:e9:f3:18: 02:53:11:a3:4f:e8:0f:52:8f:1c:4a:d9:ef:5b:52:03:96:ac: 32:cf:d0:11:c0:2c:51:73:12:f4:56:ee:06:0d:28:7d:b0:20: 65:f7:98:8d:bf:7a:4e:23:7a:8f:35:3b:19:c0:f8:82:5b:fa: 2f:5d:58:dd:96:bc:43:84:93:94:54:1a:5c:56:9f:c5:d4:07: 9a:a8:b1:1b:48:dd:96:98:ba:80:3a:81:97:74:ab:78:84:e6: f1:d9:80:18:4d:c1:fc:22:1e:97:c6:9c:3f:93:fe:d4:a1:e3: 1c:44:53:9a:20:c7:3c:39:03:9c:96:04:e0:16:ac:06:ff:82: 39:97:2d:30:82:f5:cb:0d:e5:a1:1c:52:e8:04:c5:c4:7d:8b: 4e:0c:9c:72:8d:f4:c2:2c:d6:d2:1e:c5:43:a0:3e:85:37:a0: ec:ea:f5:ad:15:4e:90:df:02:36:95:ca:ee:11:0d:0c:a3:b0: 2e:55:5c:83 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCMowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDUyQUMxMTAvBgNVBAUTKDM2RDc3RTkyNDNBQkJBMkZENTQ5NkEyOTE4MzBCN0Qz OEIwQkNCQzQwHhcNMjUwNTMwMjA0NTU4WhcNMjUwNjA2MjA0NTU4WjAYMRYwFAYD VQQDEw02ODNhMTkwNi00NmE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2Yy/2Cv9PeMyVYN+8FDNoavZKw/5Nn36r31gl5cYOxYxIkNI4E+Rg/1jaIdI zHARyjDl0mvWKej1Q8jZiT/ixBunzYuoK9sVMZgV/VQMLQjqmGVsLH+EIKhleKZp iQnIInwjeCPziC6XzWF935LNZhuq3bHjvplwLkw95lrad07m59X1/ieKz5P8n4rF QdU8r1htsz5mnnz4eXJs+pITlHF8YisfdMTF6OBTJ91VG5YtdCEgSHmSZdNdO2Qk xaHFzZHf4t2wiD1kY0wWAzmDIn1OtBzULZR2a2wPvVxfMJezFsUtRSsPBHNmPPHl 83yDH78ctY9qPJrgEoNNaJ+qSwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD90L/1B C57YI3SCB7oi26tt9JorMB8GA1UdIwQYMBaAFDbXfpJDq7ov1UlqKRgwt9OLC8vE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NTJBQy9BNDhENTk2NkJC M0UxMUVBQTI5RUUzMjFDNEY5QUUwMi9OdGQta2tPcnVpX1ZTV29wR0RDMzA0c0x5 OFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL050ZC1ra09ydWlfVlNXb3BHREMzMDRzTHk4US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NTJBQy9BNDhENTk2NkJCM0UxMUVBQTI5RUUzMjFDNEY5QUUwMi9OdGQta2tPcnVp X1ZTV29wR0RDMzA0c0x5OFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCv1J4gRrCqTTfRrUiqhk14MfiNjKdZaOKDZ9hx/VZYFE12nhz3IDHP JHnd7v9nic5boTR5UzWN+lSNk2AslSIeKmgM7rLp8xgCUxGjT+gPUo8cStnvW1ID lqwyz9ARwCxRcxL0Vu4GDSh9sCBl95iNv3pOI3qPNTsZwPiCW/ovXVjdlrxDhJOU VBpcVp/F1AeaqLEbSN2WmLqAOoGXdKt4hObx2YAYTcH8Ih6Xxpw/k/7UoeMcRFOa IMc8OQOclgTgFqwG/4I5ly0wgvXLDeWhHFLoBMXEfYtODJxyjfTCLNbSHsVDoD6F N6Ds6vWtFU6Q3wI2lcruEQ0Mo7AuVVyD -----END CERTIFICATE-----Generated at Sat May 31 17:22:12 2025 by rpki-client