$ rpki-client -vvf rpki.apnic.net/member_repository/A9186684/36B86ADCD89F11EBAB98C55AC4F9AE02/NKEjLqcYRp6tt628TNngDfaoUgY.mft File: NKEjLqcYRp6tt628TNngDfaoUgY.mft (raw, json) Hash identifier: qvFu62neMJF7fxzHl4PxZPBt8zBWCtJnhNLcfdE4y9A= Subject key identifier: F8:A4:81:54:12:8E:B6:84:E9:85:C0:60:94:42:01:B6:68:26:89:A1 Authority key identifier: 34:A1:23:2E:A7:18:46:9E:AD:B7:AD:BC:4C:D9:E0:0D:F6:A8:52:06 Certificate issuer: /CN=A9186684/serialNumber=34A1232EA718469EADB7ADBC4CD9E00DF6A85206 Certificate serial: 0595 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NKEjLqcYRp6tt628TNngDfaoUgY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9186684/36B86ADCD89F11EBAB98C55AC4F9AE02/NKEjLqcYRp6tt628TNngDfaoUgY.mft Manifest number: 058A Signing time: Fri 30 May 2025 23:27:08 +0000 Manifest this update: Fri 30 May 2025 23:27:07 +0000 Manifest next update: Fri 06 Jun 2025 23:27:07 +0000 Files and hashes: 1: NKEjLqcYRp6tt628TNngDfaoUgY.crl (hash: xEyBy8ard20eXNUiP97VvDq3v4A9iR0RqNivrDCHdP4=) 2: D737BB744B4111ECACAF3B6FC4F9AE02.roa (hash: 78UGN0+7orQTcucSGGqLKKQdBZ/eBwdHdIbrun6HmgE=) 3: 80D77ED8D8A811EB85D5E456C4F9AE02.roa (hash: 5vdLLR7SsjyoWbJEWGx2u6gT4judyFxezvmtzE9hlfI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9186684/36B86ADCD89F11EBAB98C55AC4F9AE02/NKEjLqcYRp6tt628TNngDfaoUgY.crl rsync://rpki.apnic.net/member_repository/A9186684/36B86ADCD89F11EBAB98C55AC4F9AE02/NKEjLqcYRp6tt628TNngDfaoUgY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NKEjLqcYRp6tt628TNngDfaoUgY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 23:27:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1429 (0x595) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9186684, serialNumber=34A1232EA718469EADB7ADBC4CD9E00DF6A85206 Validity Not Before: May 30 23:27:07 2025 GMT Not After : Jun 6 23:27:07 2025 GMT Subject: CN=683a3ecb-b8f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:d2:a0:37:03:48:5d:9c:6d:6a:e2:79:29:c3: 2b:a7:c3:6a:30:6f:8b:ff:29:45:c6:d6:b3:85:cc: 9c:05:9c:c5:ef:01:90:aa:58:ba:f3:58:06:2b:ed: 06:19:9a:a1:ab:62:a8:49:c5:01:b6:52:9d:a8:c9: 66:c7:4c:a6:ec:e2:d1:69:47:01:e7:23:a5:ca:92: 84:4f:32:df:b3:f0:3d:32:f4:8a:56:f5:6d:97:63: 5d:70:40:ed:18:0c:b7:ab:f5:60:2e:ec:44:54:e6: d7:ea:61:85:e8:25:ce:14:b4:5d:91:91:87:a2:b1: ce:32:8c:c3:c6:51:a5:9a:63:52:b6:f0:12:3e:a5: 1e:fa:da:37:74:ae:d0:c3:1f:ad:bf:35:27:31:82: 35:43:99:d0:21:1d:a0:3e:c2:e7:cc:1f:3d:f9:f5: d5:0c:c8:2d:2e:ab:aa:0e:64:47:87:50:6d:f2:b6: c3:f4:bf:c9:5f:67:d1:78:cd:cf:44:ff:37:57:05: 39:9b:0c:46:bc:5e:be:a7:1b:48:f8:16:c8:b1:de: 70:35:a3:7e:c9:43:c4:62:85:ee:3f:73:d3:17:76: ee:9e:97:0a:c9:6b:9b:51:fa:c7:e4:a2:27:2f:c6: a7:50:0d:a8:8e:67:f2:10:08:2b:bd:3c:68:17:0f: b4:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:A4:81:54:12:8E:B6:84:E9:85:C0:60:94:42:01:B6:68:26:89:A1 X509v3 Authority Key Identifier: keyid:34:A1:23:2E:A7:18:46:9E:AD:B7:AD:BC:4C:D9:E0:0D:F6:A8:52:06 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9186684/36B86ADCD89F11EBAB98C55AC4F9AE02/NKEjLqcYRp6tt628TNngDfaoUgY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NKEjLqcYRp6tt628TNngDfaoUgY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186684/36B86ADCD89F11EBAB98C55AC4F9AE02/NKEjLqcYRp6tt628TNngDfaoUgY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 99:51:14:c0:67:e3:47:08:ad:9c:64:47:0d:c9:31:b8:42:b9: f9:d8:8e:f1:64:64:76:4b:6d:cb:3b:c8:c2:bf:d0:8b:b3:71: c1:64:38:bf:87:69:88:35:f1:8b:8a:35:b0:60:c4:bf:c3:42: 36:c1:08:36:37:2c:26:33:ab:e0:45:e7:95:65:af:4b:c3:b1: b6:a1:c9:2a:b3:cc:0a:66:b3:2e:f6:41:90:3a:b8:80:e0:80: c1:c1:7d:f7:be:f1:41:fd:23:32:94:db:ac:0e:90:69:79:15: d3:f3:6c:37:cc:de:39:03:21:d3:10:2c:c3:47:f7:c0:38:49: 73:36:e4:72:0d:b1:c7:24:27:55:2b:ba:a0:3c:17:80:b9:b8: ef:a6:c4:b2:cb:a1:50:3b:d6:88:0e:f9:a1:75:4b:d2:8d:ed: cb:b0:b0:fb:19:e6:97:be:0f:26:83:7d:08:59:b3:4d:59:e3: ec:14:06:b3:1f:18:9e:f1:f3:fd:2c:ee:37:38:ce:b5:2a:06: 54:bf:f2:7c:8b:8b:6a:eb:ee:5d:aa:91:28:f2:db:06:aa:94: 50:7b:f2:b7:72:49:19:26:d2:01:f4:9b:d5:d0:c2:9b:68:e4: 6d:6b:5e:29:ba:67:74:3c:ea:07:f1:3a:b9:b4:7b:e9:d4:9c: 80:fd:2d:36 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBZUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODY2ODQxMTAvBgNVBAUTKDM0QTEyMzJFQTcxODQ2OUVBREI3QURCQzRDRDlFMDBE RjZBODUyMDYwHhcNMjUwNTMwMjMyNzA3WhcNMjUwNjA2MjMyNzA3WjAYMRYwFAYD VQQDEw02ODNhM2VjYi1iOGY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvtKgNwNIXZxtauJ5KcMrp8NqMG+L/ylFxtazhcycBZzF7wGQqli681gGK+0G GZqhq2KoScUBtlKdqMlmx0ym7OLRaUcB5yOlypKETzLfs/A9MvSKVvVtl2NdcEDt GAy3q/VgLuxEVObX6mGF6CXOFLRdkZGHorHOMozDxlGlmmNStvASPqUe+to3dK7Q wx+tvzUnMYI1Q5nQIR2gPsLnzB89+fXVDMgtLquqDmRHh1Bt8rbD9L/JX2fReM3P RP83VwU5mwxGvF6+pxtI+BbIsd5wNaN+yUPEYoXuP3PTF3bunpcKyWubUfrH5KIn L8anUA2ojmfyEAgrvTxoFw+0wQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPikgVQS jraE6YXAYJRCAbZoJomhMB8GA1UdIwQYMBaAFDShIy6nGEaerbetvEzZ4A32qFIG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NjY4NC8zNkI4NkFEQ0Q4 OUYxMUVCQUI5OEM1NUFDNEY5QUUwMi9OS0VqTHFjWVJwNnR0NjI4VE5uZ0RmYW9V Z1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05LRWpMcWNZUnA2dHQ2MjhUTm5nRGZhb1VnWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NjY4NC8zNkI4NkFEQ0Q4OUYxMUVCQUI5OEM1NUFDNEY5QUUwMi9OS0VqTHFjWVJw NnR0NjI4VE5uZ0RmYW9VZ1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCZURTAZ+NHCK2cZEcNyTG4Qrn52I7xZGR2S23LO8jCv9CLs3HBZDi/ h2mINfGLijWwYMS/w0I2wQg2NywmM6vgReeVZa9Lw7G2ockqs8wKZrMu9kGQOriA 4IDBwX33vvFB/SMylNusDpBpeRXT82w3zN45AyHTECzDR/fAOElzNuRyDbHHJCdV K7qgPBeAubjvpsSyy6FQO9aIDvmhdUvSje3LsLD7GeaXvg8mg30IWbNNWePsFAaz Hxie8fP9LO43OM61KgZUv/J8i4tq6+5dqpEo8tsGqpRQe/K3ckkZJtIB9JvV0MKb aORta14pumd0POoH8Tq5tHvp1JyA/S02 -----END CERTIFICATE-----Generated at Sat May 31 17:47:16 2025 by rpki-client