$ rpki-client -vvf rpki.apnic.net/member_repository/A915A268/541F3888B35011EE925D771AC4F9AE02/NO_XxNZs-jS4RWayYjnZCoyR7Lc.mft File: NO_XxNZs-jS4RWayYjnZCoyR7Lc.mft (raw, json) Hash identifier: zMLsGf0BgTfvDSy+ba0vyh2q19fUmz2sj1WuvyzrLJA= Subject key identifier: 73:39:49:A6:10:D5:5F:3C:AF:A0:5E:3D:AB:59:79:A2:90:D1:38:C2 Authority key identifier: 34:EF:D7:C4:D6:6C:FA:34:B8:45:66:B2:62:39:D9:0A:8C:91:EC:B7 Certificate issuer: /CN=A915A268/serialNumber=34EFD7C4D66CFA34B84566B26239D90A8C91ECB7 Certificate serial: 0100 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NO_XxNZs-jS4RWayYjnZCoyR7Lc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915A268/541F3888B35011EE925D771AC4F9AE02/NO_XxNZs-jS4RWayYjnZCoyR7Lc.mft Manifest number: 0100 Signing time: Sat 31 May 2025 04:41:44 +0000 Manifest this update: Sat 31 May 2025 04:41:43 +0000 Manifest next update: Sat 07 Jun 2025 04:41:43 +0000 Files and hashes: 1: NO_XxNZs-jS4RWayYjnZCoyR7Lc.crl (hash: UT5sIF9vgjxEAXfn+LOV3yOj8ikVQ2+x67Ti0/QU74I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915A268/541F3888B35011EE925D771AC4F9AE02/NO_XxNZs-jS4RWayYjnZCoyR7Lc.crl rsync://rpki.apnic.net/member_repository/A915A268/541F3888B35011EE925D771AC4F9AE02/NO_XxNZs-jS4RWayYjnZCoyR7Lc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NO_XxNZs-jS4RWayYjnZCoyR7Lc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 04:41:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 256 (0x100) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915A268, serialNumber=34EFD7C4D66CFA34B84566B26239D90A8C91ECB7 Validity Not Before: May 31 04:41:43 2025 GMT Not After : Jun 7 04:41:43 2025 GMT Subject: CN=683a8887-400b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:62:5d:29:93:09:af:38:a8:c2:8c:f0:ce:03: af:d5:1b:c6:ff:70:56:0b:ba:24:3e:4b:6e:8e:42: df:e7:cd:f3:e7:2f:78:27:fa:02:26:50:5f:cb:cb: 54:44:0d:dd:dd:e5:a8:09:89:c3:c4:d2:80:02:c9: 1c:ef:7b:b6:0a:d9:9b:77:87:58:22:b8:5e:5b:26: 3b:2c:c2:4d:3a:ec:98:51:67:69:2f:25:0f:6c:34: 05:16:56:a5:8b:31:38:8b:1e:b7:89:20:72:16:95: 3b:b2:df:c6:c5:8c:dc:30:c8:1d:67:c2:df:cd:ba: ec:94:f9:8c:6d:f7:e7:c6:f4:1e:74:3c:86:96:91: 33:db:21:54:6c:0c:62:4d:55:d0:5d:f2:10:7c:cb: 5b:af:52:6b:1c:8d:06:59:00:f3:a7:7b:a7:7d:99: 2f:51:ac:2e:b9:f8:2c:3a:67:70:cb:6f:25:55:b8: 9d:1e:a4:19:96:57:1f:04:71:70:74:4d:fd:a5:34: 19:11:9b:cf:1f:68:14:68:70:4e:1c:62:ec:ce:4c: 25:5e:44:52:dd:f5:09:5d:b3:dc:63:45:76:bb:9d: bf:02:be:51:3f:44:82:22:97:66:5c:56:5d:bb:4c: 3a:dc:31:db:0c:09:6b:64:cf:25:bc:27:a2:2c:08: cb:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:39:49:A6:10:D5:5F:3C:AF:A0:5E:3D:AB:59:79:A2:90:D1:38:C2 X509v3 Authority Key Identifier: keyid:34:EF:D7:C4:D6:6C:FA:34:B8:45:66:B2:62:39:D9:0A:8C:91:EC:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915A268/541F3888B35011EE925D771AC4F9AE02/NO_XxNZs-jS4RWayYjnZCoyR7Lc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NO_XxNZs-jS4RWayYjnZCoyR7Lc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A268/541F3888B35011EE925D771AC4F9AE02/NO_XxNZs-jS4RWayYjnZCoyR7Lc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1f:f6:7b:7d:2b:6e:68:7d:f7:d6:9f:d7:2b:90:4f:29:32:94: ee:e6:fc:b8:2f:82:f1:0a:3a:7b:0a:e0:6e:bf:0c:96:01:c4: b5:92:10:02:f2:fa:32:2d:1e:ab:db:f5:11:a2:da:be:af:be: 82:84:b6:7b:11:cd:d2:74:a9:81:88:5a:3f:cd:de:a8:d4:d4: b1:be:20:81:6e:47:a2:ec:66:d0:e2:64:fc:0b:51:aa:1d:ac: bc:76:84:cd:a4:8f:40:ba:f1:95:1d:36:83:10:8f:87:c6:f3: 9a:c7:e1:91:93:6c:da:8b:54:19:74:f2:98:0a:b5:3e:41:ee: 77:e5:04:80:4f:e0:f3:b0:f1:a1:7c:a0:33:30:c0:1b:6f:96: 14:0a:37:9e:ad:02:b1:09:6e:66:80:61:5e:7d:a9:62:19:2b: 29:ba:f1:e7:46:98:f5:11:07:75:b9:47:5b:07:86:6c:3e:d4: 47:12:aa:d0:60:3a:46:5e:03:60:89:2e:ee:9a:81:d7:b0:06: e0:9b:8e:38:49:ee:4b:a9:a4:3a:8c:84:a3:78:c8:25:94:51: f4:08:c9:cf:02:97:7c:4c:4f:18:ba:e3:7c:4f:ef:50:4c:2a: fe:c0:f9:e9:1e:a0:7a:89:73:9a:1c:da:4e:e6:5f:e8:e2:ff: 9f:4e:8d:14 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUEyNjgxMTAvBgNVBAUTKDM0RUZEN0M0RDY2Q0ZBMzRCODQ1NjZCMjYyMzlEOTBB OEM5MUVDQjcwHhcNMjUwNTMxMDQ0MTQzWhcNMjUwNjA3MDQ0MTQzWjAYMRYwFAYD VQQDEw02ODNhODg4Ny00MDBiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxGJdKZMJrziowozwzgOv1RvG/3BWC7okPktujkLf583z5y94J/oCJlBfy8tU RA3d3eWoCYnDxNKAAskc73u2Ctmbd4dYIrheWyY7LMJNOuyYUWdpLyUPbDQFFlal izE4ix63iSByFpU7st/GxYzcMMgdZ8LfzbrslPmMbffnxvQedDyGlpEz2yFUbAxi TVXQXfIQfMtbr1JrHI0GWQDzp3unfZkvUawuufgsOmdwy28lVbidHqQZllcfBHFw dE39pTQZEZvPH2gUaHBOHGLszkwlXkRS3fUJXbPcY0V2u52/Ar5RP0SCIpdmXFZd u0w63DHbDAlrZM8lvCeiLAjLZwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHM5SaYQ 1V88r6BePatZeaKQ0TjCMB8GA1UdIwQYMBaAFDTv18TWbPo0uEVmsmI52QqMkey3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QTI2OC81NDFGMzg4OEIz NTAxMUVFOTI1RDc3MUFDNEY5QUUwMi9OT19YeE5acy1qUzRSV2F5WWpuWkNveVI3 TGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05PX1h4TlpzLWpTNFJXYXlZam5aQ295UjdMYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QTI2OC81NDFGMzg4OEIzNTAxMUVFOTI1RDc3MUFDNEY5QUUwMi9OT19YeE5acy1q UzRSV2F5WWpuWkNveVI3TGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAf9nt9K25offfWn9crkE8pMpTu5vy4L4LxCjp7CuBuvwyWAcS1khAC 8voyLR6r2/URotq+r76ChLZ7Ec3SdKmBiFo/zd6o1NSxviCBbkei7GbQ4mT8C1Gq Hay8doTNpI9AuvGVHTaDEI+HxvOax+GRk2zai1QZdPKYCrU+Qe535QSAT+DzsPGh fKAzMMAbb5YUCjeerQKxCW5mgGFefaliGSspuvHnRpj1EQd1uUdbB4ZsPtRHEqrQ YDpGXgNgiS7umoHXsAbgm444Se5LqaQ6jISjeMgllFH0CMnPApd8TE8YuuN8T+9Q TCr+wPnpHqB6iXOaHNpO5l/o4v+fTo0U -----END CERTIFICATE-----Generated at Sat May 31 17:45:11 2025 by rpki-client