$ rpki-client -vvf rpki.apnic.net/member_repository/A9146251/0B16EAA4D87111EF98C26075C4F9AE02/Ngx8e1xsaakGnYJb8ccK8gjaM3s.mft File: Ngx8e1xsaakGnYJb8ccK8gjaM3s.mft (raw, json) Hash identifier: 8zjdpyZRtqecdrRzWSda1OV2DaPpUWJVqJPs1Mqnrhg= Subject key identifier: 0E:02:2E:BA:5C:15:71:50:CA:45:81:F2:DC:A6:08:22:50:B0:E7:E8 Authority key identifier: 36:0C:7C:7B:5C:6C:69:A9:06:9D:82:5B:F1:C7:0A:F2:08:DA:33:7B Certificate issuer: /CN=A9146251/serialNumber=360C7C7B5C6C69A9069D825BF1C70AF208DA337B Certificate serial: 46 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Ngx8e1xsaakGnYJb8ccK8gjaM3s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9146251/0B16EAA4D87111EF98C26075C4F9AE02/Ngx8e1xsaakGnYJb8ccK8gjaM3s.mft Manifest number: 46 Signing time: Thu 05 Jun 2025 06:47:20 +0000 Manifest this update: Thu 05 Jun 2025 06:47:20 +0000 Manifest next update: Thu 12 Jun 2025 06:47:19 +0000 Files and hashes: 1: Ngx8e1xsaakGnYJb8ccK8gjaM3s.crl (hash: 0hiQK/N6+rUd+w4IRD7hPdSxy6lgSBFOBILhGikSCn0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9146251/0B16EAA4D87111EF98C26075C4F9AE02/Ngx8e1xsaakGnYJb8ccK8gjaM3s.crl rsync://rpki.apnic.net/member_repository/A9146251/0B16EAA4D87111EF98C26075C4F9AE02/Ngx8e1xsaakGnYJb8ccK8gjaM3s.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Ngx8e1xsaakGnYJb8ccK8gjaM3s.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 12 Jun 2025 06:47:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70 (0x46) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9146251, serialNumber=360C7C7B5C6C69A9069D825BF1C70AF208DA337B Validity Not Before: Jun 5 06:47:20 2025 GMT Not After : Jun 12 06:47:19 2025 GMT Subject: CN=68413d78-1267 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:3e:c7:b6:b4:b7:61:5a:04:cd:08:71:de:c6: ab:a6:04:fe:a5:60:a3:4f:54:ba:1c:aa:c1:1c:89: 3d:0c:0f:76:81:32:64:1e:0b:22:2b:73:18:95:15: 3a:ba:94:3d:47:36:b2:37:f8:f3:20:13:67:8c:d8: d0:5b:38:78:60:3e:2b:16:86:2f:10:b3:89:1a:04: 57:02:ce:4d:51:f7:fc:82:1a:87:88:ff:34:42:58: b3:76:c8:97:c0:a8:2b:8d:11:d5:82:a7:b9:73:fa: 50:71:07:49:52:e4:ac:84:73:9f:bb:b7:b2:0a:de: 2a:e1:42:47:50:30:0f:e9:f0:54:1e:de:cd:53:0a: fa:cc:2a:a9:28:3b:b6:3c:bb:03:5c:52:27:42:d4: fa:2d:ba:4b:d8:0e:67:42:ef:ae:b6:bb:b2:f4:31: 3e:99:8c:04:71:d7:31:31:cd:af:71:9d:b4:a8:cf: 04:9a:3f:7b:eb:3e:37:f9:d9:1d:73:ac:6c:13:3a: 9a:74:65:be:33:35:68:58:7e:4d:12:47:e2:30:ab: 5b:84:71:e3:27:e0:08:9d:d9:60:67:6b:72:88:8e: dd:26:ac:97:2d:f4:30:61:0b:3d:51:0f:7c:45:4b: 0b:f8:af:58:be:8f:2e:b6:3c:21:73:12:99:37:4f: 51:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:02:2E:BA:5C:15:71:50:CA:45:81:F2:DC:A6:08:22:50:B0:E7:E8 X509v3 Authority Key Identifier: keyid:36:0C:7C:7B:5C:6C:69:A9:06:9D:82:5B:F1:C7:0A:F2:08:DA:33:7B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9146251/0B16EAA4D87111EF98C26075C4F9AE02/Ngx8e1xsaakGnYJb8ccK8gjaM3s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Ngx8e1xsaakGnYJb8ccK8gjaM3s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146251/0B16EAA4D87111EF98C26075C4F9AE02/Ngx8e1xsaakGnYJb8ccK8gjaM3s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 81:20:e4:b3:1c:04:78:46:33:bb:20:46:ad:cd:58:a6:64:7d: 7c:eb:ee:85:e4:b0:ae:f5:af:53:9e:8c:2c:4f:2a:42:4c:0d: 07:94:26:6f:f2:31:23:37:0d:00:6d:75:91:9f:22:fe:30:b4: ae:7b:5d:21:35:fd:16:cb:66:67:e1:d1:16:60:4b:5e:35:16: d7:36:0c:b3:e8:87:5d:32:36:ad:15:81:cc:1c:d8:db:61:2c: d8:32:8e:4d:47:ff:75:cc:5d:0b:90:1e:76:01:34:24:00:fa: 50:ac:db:f0:28:28:f5:66:76:84:a6:3d:9f:2f:42:59:aa:3a: 18:a7:1f:8f:d9:86:30:1d:4a:31:cd:fe:10:d8:1f:8c:10:23: 5b:ff:6b:63:2d:17:c1:9f:c4:c5:37:5f:50:56:f7:cb:ac:03: 94:3e:4a:d6:58:66:38:86:da:8b:5e:8a:a5:7b:ce:c3:f9:6f: f8:0a:84:00:8a:21:5d:f6:67:b7:ef:fc:dd:0c:dc:2b:1a:7f: 5e:e0:f9:26:4f:ad:91:ac:0e:74:dc:9c:27:52:ef:55:65:b7: 17:2d:7a:f7:00:a1:bc:85:18:87:b7:6b:f4:ed:49:ee:82:b2: b0:dd:6f:9b:8e:01:ce:8e:84:3a:73:91:9e:99:c9:23:af:12: 18:0e:32:2f -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBRjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 NjI1MTExMC8GA1UEBRMoMzYwQzdDN0I1QzZDNjlBOTA2OUQ4MjVCRjFDNzBBRjIw OERBMzM3QjAeFw0yNTA2MDUwNjQ3MjBaFw0yNTA2MTIwNjQ3MTlaMBgxFjAUBgNV BAMTDTY4NDEzZDc4LTEyNjcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCkPse2tLdhWgTNCHHexqumBP6lYKNPVLocqsEciT0MD3aBMmQeCyIrcxiVFTq6 lD1HNrI3+PMgE2eM2NBbOHhgPisWhi8Qs4kaBFcCzk1R9/yCGoeI/zRCWLN2yJfA qCuNEdWCp7lz+lBxB0lS5KyEc5+7t7IK3irhQkdQMA/p8FQe3s1TCvrMKqkoO7Y8 uwNcUidC1PotukvYDmdC7662u7L0MT6ZjARx1zExza9xnbSozwSaP3vrPjf52R1z rGwTOpp0Zb4zNWhYfk0SR+Iwq1uEceMn4Aid2WBna3KIjt0mrJct9DBhCz1RD3xF Swv4r1i+jy62PCFzEpk3T1GTAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUDgIuulwV cVDKRYHy3KYIIlCw5+gwHwYDVR0jBBgwFoAUNgx8e1xsaakGnYJb8ccK8gjaM3sw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ2MjUxLzBCMTZFQUE0RDg3 MTExRUY5OEMyNjA3NUM0RjlBRTAyL05neDhlMXhzYWFrR25ZSmI4Y2NLOGdqYU0z cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjMyMkE1RjQxRDY2MTFFMkEzRjI3RjdDNzJG RDFGRjIvTmd4OGUxeHNhYWtHbllKYjhjY0s4Z2phTTNzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ2 MjUxLzBCMTZFQUE0RDg3MTExRUY5OEMyNjA3NUM0RjlBRTAyL05neDhlMXhzYWFr R25ZSmI4Y2NLOGdqYU0zcy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAIEg5LMcBHhGM7sgRq3NWKZkfXzr7oXksK71r1OejCxPKkJMDQeUJm/y MSM3DQBtdZGfIv4wtK57XSE1/RbLZmfh0RZgS141Ftc2DLPoh10yNq0Vgcwc2Nth LNgyjk1H/3XMXQuQHnYBNCQA+lCs2/AoKPVmdoSmPZ8vQlmqOhinH4/ZhjAdSjHN /hDYH4wQI1v/a2MtF8GfxMU3X1BW98usA5Q+StZYZjiG2oteiqV7zsP5b/gKhACK IV32Z7fv/N0M3Csaf17g+SZPrZGsDnTcnCdS71VltxctevcAobyFGIe3a/TtSe6C srDdb5uOAc6OhDpzkZ6ZySOvEhgOMi8= -----END CERTIFICATE-----Generated at Thu Jun 5 19:55:23 2025 by rpki-client