$ rpki-client -vvf rpki.apnic.net/member_repository/A9151AC7/41A46B50F39711EF9101D210C4F9AE02/NS1M7Db4784NhRINl9keIqNY9Ys.mft File: NS1M7Db4784NhRINl9keIqNY9Ys.mft (raw, json) Hash identifier: 6gNkAGSaXyGWMVwP9NKKTiUqRCDoBXy2YEnCMj/S6E0= Subject key identifier: 78:83:CE:53:04:9C:BC:2D:4E:04:6A:4F:C1:FA:B1:A7:45:F8:61:3C Authority key identifier: 35:2D:4C:EC:36:F8:EF:CE:0D:85:12:0D:97:D9:1E:22:A3:58:F5:8B Certificate issuer: /CN=A9151AC7/serialNumber=352D4CEC36F8EFCE0D85120D97D91E22A358F58B Certificate serial: 32 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NS1M7Db4784NhRINl9keIqNY9Ys.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9151AC7/41A46B50F39711EF9101D210C4F9AE02/NS1M7Db4784NhRINl9keIqNY9Ys.mft Manifest number: 32 Signing time: Sat 31 May 2025 07:12:09 +0000 Manifest this update: Sat 31 May 2025 07:12:08 +0000 Manifest next update: Sat 07 Jun 2025 07:12:08 +0000 Files and hashes: 1: NS1M7Db4784NhRINl9keIqNY9Ys.crl (hash: IbZES7DnpMbnEw72THHB9K5FHUSp2Ch+4gUh1zEL8Fw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9151AC7/41A46B50F39711EF9101D210C4F9AE02/NS1M7Db4784NhRINl9keIqNY9Ys.crl rsync://rpki.apnic.net/member_repository/A9151AC7/41A46B50F39711EF9101D210C4F9AE02/NS1M7Db4784NhRINl9keIqNY9Ys.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NS1M7Db4784NhRINl9keIqNY9Ys.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 07:12:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50 (0x32) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9151AC7, serialNumber=352D4CEC36F8EFCE0D85120D97D91E22A358F58B Validity Not Before: May 31 07:12:08 2025 GMT Not After : Jun 7 07:12:08 2025 GMT Subject: CN=683aabc9-939c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:dc:2f:ff:6a:7b:f0:df:95:f6:00:63:63:81: 9b:be:77:40:42:b4:d3:0c:24:eb:b2:f2:ca:be:e1: 9f:cd:66:35:84:6e:f5:92:c2:10:ab:6e:19:c0:b2: c4:fb:f6:77:bc:c1:90:1b:e2:95:c5:fb:f9:ce:b2: ed:de:f9:40:a6:b9:3d:67:de:12:c9:1f:20:f7:55: d5:b3:f3:22:fb:91:31:89:dd:fe:05:65:ab:43:aa: 06:65:80:00:dc:b9:2a:aa:bf:d4:48:d6:8b:4c:de: e8:2b:85:c6:22:b2:30:4d:99:e5:71:14:3e:35:3a: 08:28:5b:3d:c5:98:ca:00:cd:c7:40:a3:76:68:5e: 54:0f:eb:bc:04:86:8f:f3:94:0e:d0:a7:dc:b4:90: fd:ec:31:c1:cb:38:4e:d6:d3:26:e4:f9:2e:ce:17: 32:7f:68:0e:d7:1e:79:ee:5a:c4:c2:11:97:6a:0e: 3e:09:c9:7d:13:fc:dc:d0:14:cc:d1:0e:6f:7c:5a: 70:ae:3d:02:1c:81:cd:bc:0b:fd:c1:a6:d6:dd:8c: 2b:7d:e4:5a:d6:fa:5b:9c:ba:00:ad:e6:2e:6b:ac: a9:f4:7f:31:60:73:ec:0e:6c:c1:7b:97:69:49:02: bc:d1:6b:93:ae:22:5d:b2:08:33:aa:3a:9a:20:53: 9d:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:83:CE:53:04:9C:BC:2D:4E:04:6A:4F:C1:FA:B1:A7:45:F8:61:3C X509v3 Authority Key Identifier: keyid:35:2D:4C:EC:36:F8:EF:CE:0D:85:12:0D:97:D9:1E:22:A3:58:F5:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9151AC7/41A46B50F39711EF9101D210C4F9AE02/NS1M7Db4784NhRINl9keIqNY9Ys.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NS1M7Db4784NhRINl9keIqNY9Ys.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9151AC7/41A46B50F39711EF9101D210C4F9AE02/NS1M7Db4784NhRINl9keIqNY9Ys.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2a:0d:ed:dc:af:38:83:0c:e7:6a:62:ab:72:bc:1a:5a:70:69: de:2e:f8:a6:06:b9:df:37:37:f3:c1:5c:83:2a:3f:4e:73:e4: fd:48:ca:3b:3a:ab:4b:75:e4:d0:1a:f7:d4:3d:9a:52:37:87: 70:53:92:cb:e0:61:a1:09:0d:1e:11:35:3e:87:67:33:67:67: 41:a5:2a:c9:51:4c:87:4a:63:b4:a5:38:b8:70:75:53:1b:b2: 50:8d:e4:17:9b:5e:17:de:ef:ae:e4:63:81:35:dc:8f:c9:bf: 86:d6:b7:79:f3:7e:fb:84:25:c1:e3:c7:52:a2:e2:6d:45:a8: a7:80:de:b0:27:a5:d2:3b:66:a8:13:14:d6:08:bc:e0:ba:d8: da:7e:86:81:69:47:c4:db:d7:17:39:cb:b1:16:4b:5d:00:00: bd:ec:44:05:f2:23:15:ce:53:55:4e:75:48:f2:b7:b1:98:a1: 6d:db:63:15:a7:61:e8:2c:d9:1f:2b:86:56:65:81:ae:8c:0a: 98:50:5e:8d:f4:e7:4b:50:c1:17:58:75:b1:be:a6:a6:31:d2: 34:d4:6a:8d:19:60:e3:d0:38:e2:79:99:ac:05:ce:42:96:71: df:1e:9f:3b:dc:1d:b3:3a:26:42:50:5a:70:e8:40:2a:39:f0: e5:80:a2:cc -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBMjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 MUFDNzExMC8GA1UEBRMoMzUyRDRDRUMzNkY4RUZDRTBEODUxMjBEOTdEOTFFMjJB MzU4RjU4QjAeFw0yNTA1MzEwNzEyMDhaFw0yNTA2MDcwNzEyMDhaMBgxFjAUBgNV BAMTDTY4M2FhYmM5LTkzOWMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDc3C//anvw35X2AGNjgZu+d0BCtNMMJOuy8sq+4Z/NZjWEbvWSwhCrbhnAssT7 9ne8wZAb4pXF+/nOsu3e+UCmuT1n3hLJHyD3VdWz8yL7kTGJ3f4FZatDqgZlgADc uSqqv9RI1otM3ugrhcYisjBNmeVxFD41OggoWz3FmMoAzcdAo3ZoXlQP67wEho/z lA7Qp9y0kP3sMcHLOE7W0ybk+S7OFzJ/aA7XHnnuWsTCEZdqDj4JyX0T/NzQFMzR Dm98WnCuPQIcgc28C/3BptbdjCt95FrW+lucugCt5i5rrKn0fzFgc+wObMF7l2lJ ArzRa5OuIl2yCDOqOpogU53dAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUeIPOUwSc vC1OBGpPwfqxp0X4YTwwHwYDVR0jBBgwFoAUNS1M7Db4784NhRINl9keIqNY9Ysw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTUxQUM3LzQxQTQ2QjUwRjM5 NzExRUY5MTAxRDIxMEM0RjlBRTAyL05TMU03RGI0Nzg0TmhSSU5sOWtlSXFOWTlZ cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvTlMxTTdEYjQ3ODROaFJJTmw5a2VJcU5ZOVlzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTUx QUM3LzQxQTQ2QjUwRjM5NzExRUY5MTAxRDIxMEM0RjlBRTAyL05TMU03RGI0Nzg0 TmhSSU5sOWtlSXFOWTlZcy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBACoN7dyvOIMM52piq3K8Glpwad4u+KYGud83N/PBXIMqP05z5P1Iyjs6 q0t15NAa99Q9mlI3h3BTksvgYaEJDR4RNT6HZzNnZ0GlKslRTIdKY7SlOLhwdVMb slCN5BebXhfe767kY4E13I/Jv4bWt3nzfvuEJcHjx1Ki4m1FqKeA3rAnpdI7ZqgT FNYIvOC62Np+hoFpR8Tb1xc5y7EWS10AAL3sRAXyIxXOU1VOdUjyt7GYoW3bYxWn Yegs2R8rhlZlga6MCphQXo3050tQwRdYdbG+pqYx0jTUao0ZYOPQOOJ5mawFzkKW cd8enzvcHbM6JkJQWnDoQCo58OWAosw= -----END CERTIFICATE-----Generated at Sat May 31 17:27:56 2025 by rpki-client