$ rpki-client -vvf rpki.apnic.net/member_repository/A9172154/39A6CF2A809111EAAD134D6BC4F9AE02/nplO914RM-YPAbmkigkmGVL7G4E.mft File: nplO914RM-YPAbmkigkmGVL7G4E.mft (raw, json) Hash identifier: ch9xy10HQcYIowKkd+AcIBSrx8ZiNROclHwD4mCFDKc= Subject key identifier: AB:2B:65:17:16:2C:73:1E:C2:D7:8D:9F:A9:86:CF:81:BA:E1:D8:FE Authority key identifier: 9E:99:4E:F7:5E:11:33:E6:0F:01:B9:A4:8A:09:26:19:52:FB:1B:81 Certificate issuer: /CN=A9172154/serialNumber=9E994EF75E1133E60F01B9A48A09261952FB1B81 Certificate serial: 09CF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nplO914RM-YPAbmkigkmGVL7G4E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9172154/39A6CF2A809111EAAD134D6BC4F9AE02/nplO914RM-YPAbmkigkmGVL7G4E.mft Manifest number: 09C8 Signing time: Fri 30 May 2025 20:08:57 +0000 Manifest this update: Fri 30 May 2025 20:08:57 +0000 Manifest next update: Fri 06 Jun 2025 20:08:57 +0000 Files and hashes: 1: nplO914RM-YPAbmkigkmGVL7G4E.crl (hash: EKBU0EOFG1ge4B6dEh66Huez/QB4lopB6mNRw4dLpLw=) 2: 95A08652730D11ECAB074439C4F9AE02.roa (hash: 8SZ9w1bXpjgmgqCHhkJA4hqFkmJXaJwJe1y4R5qoWpI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9172154/39A6CF2A809111EAAD134D6BC4F9AE02/nplO914RM-YPAbmkigkmGVL7G4E.crl rsync://rpki.apnic.net/member_repository/A9172154/39A6CF2A809111EAAD134D6BC4F9AE02/nplO914RM-YPAbmkigkmGVL7G4E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nplO914RM-YPAbmkigkmGVL7G4E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 20:08:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2511 (0x9cf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9172154, serialNumber=9E994EF75E1133E60F01B9A48A09261952FB1B81 Validity Not Before: May 30 20:08:57 2025 GMT Not After : Jun 6 20:08:57 2025 GMT Subject: CN=683a1059-fed6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:58:ee:1d:2d:49:bd:6f:f7:d1:69:6e:aa:b4: b5:25:e5:55:1e:4f:e4:2c:da:37:6b:7a:a1:25:a7: 10:34:b3:aa:61:2a:be:ef:5b:52:c1:1d:91:83:2c: 2a:a1:31:ef:fa:00:29:11:bf:a3:cd:51:59:a8:8d: a7:4a:da:58:d4:e4:46:9d:95:dc:5a:26:35:fc:ef: 34:a5:81:bf:df:be:4a:a2:e8:8c:17:b0:a6:26:cb: 3a:1b:80:19:83:a7:13:f2:bf:74:ee:a0:6e:1c:41: 16:eb:34:7a:ca:fa:f5:d1:f0:3a:41:a5:1f:39:cb: f6:80:58:39:1a:c2:ab:47:c3:af:fc:1f:db:80:7f: 21:98:7f:73:b5:56:69:e2:53:61:83:64:13:24:4d: 41:f3:03:40:ca:01:bd:43:38:b1:c5:79:50:9f:40: a3:e2:07:32:84:29:da:87:ae:1e:98:dc:c6:d0:e0: 34:5e:08:39:3d:ac:6a:72:8d:00:3a:4e:53:9a:13: 29:c1:84:e4:7d:73:ce:98:70:3f:8d:cb:71:99:ec: 05:57:86:7c:e7:e8:6f:6d:ec:c0:88:a8:fc:a4:68: 10:88:72:27:7d:80:5a:5f:93:8e:88:3d:f3:93:73: ee:ef:09:ea:6a:fd:7a:a1:8f:0a:ad:92:bd:a1:9f: 78:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:2B:65:17:16:2C:73:1E:C2:D7:8D:9F:A9:86:CF:81:BA:E1:D8:FE X509v3 Authority Key Identifier: keyid:9E:99:4E:F7:5E:11:33:E6:0F:01:B9:A4:8A:09:26:19:52:FB:1B:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9172154/39A6CF2A809111EAAD134D6BC4F9AE02/nplO914RM-YPAbmkigkmGVL7G4E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nplO914RM-YPAbmkigkmGVL7G4E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172154/39A6CF2A809111EAAD134D6BC4F9AE02/nplO914RM-YPAbmkigkmGVL7G4E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4f:6c:b7:19:6f:9a:c4:a4:cd:8c:c4:75:72:13:b5:93:33:a1: c4:41:1a:ef:16:80:11:72:32:c9:12:6d:10:61:67:f5:eb:72: 50:64:00:e8:10:e2:16:33:77:e1:95:c5:5a:3b:ae:bb:6a:a3: 57:41:ff:e3:ac:36:39:e0:d5:9a:c5:5a:e9:da:67:15:90:7e: 94:27:31:03:6b:12:b2:48:91:c2:81:a3:73:07:56:6c:3a:8e: be:a7:2d:01:18:cb:09:e4:f3:9e:0a:8a:dc:2f:36:10:25:ea: 26:ef:f3:cd:82:61:f6:57:bd:58:88:a1:4a:17:05:b6:53:db: 65:79:6b:b6:35:f7:70:73:df:15:95:80:41:35:97:09:4f:c8: 80:88:32:d2:a3:b1:be:4a:7b:85:63:8e:2e:90:10:77:33:98: 8c:02:6c:72:cc:75:d4:d1:b6:70:e6:c7:4b:35:a8:47:11:d5: ae:a6:b9:be:02:18:34:db:8f:ed:7c:04:16:bd:47:ed:db:94: a8:2f:09:b3:0c:2c:18:0b:ed:46:32:8e:73:2e:6f:b0:88:24: 39:af:ae:1f:d9:52:d8:71:45:31:84:f5:1d:01:41:82:44:46: 2f:2e:55:6b:60:cf:c0:73:4b:09:e4:ef:f7:4f:55:18:69:63: a8:d5:b7:ae -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCc8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzIxNTQxMTAvBgNVBAUTKDlFOTk0RUY3NUUxMTMzRTYwRjAxQjlBNDhBMDkyNjE5 NTJGQjFCODEwHhcNMjUwNTMwMjAwODU3WhcNMjUwNjA2MjAwODU3WjAYMRYwFAYD VQQDEw02ODNhMTA1OS1mZWQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu1juHS1JvW/30WluqrS1JeVVHk/kLNo3a3qhJacQNLOqYSq+71tSwR2Rgywq oTHv+gApEb+jzVFZqI2nStpY1ORGnZXcWiY1/O80pYG/375KouiMF7CmJss6G4AZ g6cT8r907qBuHEEW6zR6yvr10fA6QaUfOcv2gFg5GsKrR8Ov/B/bgH8hmH9ztVZp 4lNhg2QTJE1B8wNAygG9QzixxXlQn0Cj4gcyhCnah64emNzG0OA0Xgg5Paxqco0A Ok5TmhMpwYTkfXPOmHA/jctxmewFV4Z85+hvbezAiKj8pGgQiHInfYBaX5OOiD3z k3Pu7wnqav16oY8KrZK9oZ94qQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKsrZRcW LHMewteNn6mGz4G64dj+MB8GA1UdIwQYMBaAFJ6ZTvdeETPmDwG5pIoJJhlS+xuB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MjE1NC8zOUE2Q0YyQTgw OTExMUVBQUQxMzRENkJDNEY5QUUwMi9ucGxPOTE0Uk0tWVBBYm1raWdrbUdWTDdH NEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25wbE85MTRSTS1ZUEFibWtpZ2ttR1ZMN0c0RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MjE1NC8zOUE2Q0YyQTgwOTExMUVBQUQxMzRENkJDNEY5QUUwMi9ucGxPOTE0Uk0t WVBBYm1raWdrbUdWTDdHNEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBPbLcZb5rEpM2MxHVyE7WTM6HEQRrvFoARcjLJEm0QYWf163JQZADo EOIWM3fhlcVaO667aqNXQf/jrDY54NWaxVrp2mcVkH6UJzEDaxKySJHCgaNzB1Zs Oo6+py0BGMsJ5POeCorcLzYQJeom7/PNgmH2V71YiKFKFwW2U9tleWu2Nfdwc98V lYBBNZcJT8iAiDLSo7G+SnuFY44ukBB3M5iMAmxyzHXU0bZw5sdLNahHEdWuprm+ Ahg024/tfAQWvUft25SoLwmzDCwYC+1GMo5zLm+wiCQ5r64f2VLYcUUxhPUdAUGC REYvLlVrYM/Ac0sJ5O/3T1UYaWOo1beu -----END CERTIFICATE-----Generated at Sat May 31 17:48:38 2025 by rpki-client