$ rpki-client -vvf rpki.apnic.net/member_repository/A9192491/D0626D92AD2F11E98FF8D77FC4F9AE02/NMONZkm5DWjTzmwJ8euU0-V5_J0.mft File: NMONZkm5DWjTzmwJ8euU0-V5_J0.mft (raw, json) Hash identifier: q7yCM076wtrmoroBg4vb4U0TAqYHf0vQCnyoHzNBWyw= Subject key identifier: 59:DC:47:D4:5A:64:3A:90:5B:E8:46:5B:4D:FE:98:60:CC:A2:D3:0E Authority key identifier: 34:C3:8D:66:49:B9:0D:68:D3:CE:6C:09:F1:EB:94:D3:E5:79:FC:9D Certificate issuer: /CN=A9192491/serialNumber=34C38D6649B90D68D3CE6C09F1EB94D3E579FC9D Certificate serial: 0E06 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NMONZkm5DWjTzmwJ8euU0-V5_J0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9192491/D0626D92AD2F11E98FF8D77FC4F9AE02/NMONZkm5DWjTzmwJ8euU0-V5_J0.mft Manifest number: 0DFD Signing time: Fri 30 May 2025 18:00:21 +0000 Manifest this update: Fri 30 May 2025 18:00:20 +0000 Manifest next update: Fri 06 Jun 2025 18:00:20 +0000 Files and hashes: 1: NMONZkm5DWjTzmwJ8euU0-V5_J0.crl (hash: gm2h5VT1PmJSvsMn+er8awGSKUqDd4DnqvERNJ3l+MY=) 2: 54AE11C6AD3211E9B3BC7385C4F9AE02.roa (hash: a2Zz+SuX3DCfdSuIf8QT+Sa+cHmZnSxsIqO80zeBe3c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9192491/D0626D92AD2F11E98FF8D77FC4F9AE02/NMONZkm5DWjTzmwJ8euU0-V5_J0.crl rsync://rpki.apnic.net/member_repository/A9192491/D0626D92AD2F11E98FF8D77FC4F9AE02/NMONZkm5DWjTzmwJ8euU0-V5_J0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NMONZkm5DWjTzmwJ8euU0-V5_J0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 18:00:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3590 (0xe06) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9192491, serialNumber=34C38D6649B90D68D3CE6C09F1EB94D3E579FC9D Validity Not Before: May 30 18:00:20 2025 GMT Not After : Jun 6 18:00:20 2025 GMT Subject: CN=6839f234-ee45 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:ad:e2:84:29:15:9a:29:69:e4:e1:0e:d8:8a: e3:61:eb:98:4f:ae:86:f3:26:dc:48:32:1a:30:df: 07:16:6e:9b:53:43:ae:21:78:1d:1d:cc:24:fd:4d: ca:e5:e0:68:f6:cc:40:f8:ba:f5:97:d5:b3:9e:2b: 7c:fb:ed:85:4f:1e:a0:65:e0:3c:a3:d7:38:3c:48: b0:6f:35:b1:47:96:92:47:2b:b0:40:ba:8c:22:8d: bf:61:0e:a2:69:ba:5c:fe:18:b7:c2:95:9a:13:5d: 42:24:c6:d0:50:80:27:b1:dd:85:a1:6a:8f:18:e9: 56:2f:80:9e:4d:d0:66:67:49:d3:dd:4c:50:7e:41: 2c:0d:6e:e5:a7:46:23:f1:51:2f:31:4b:a7:dd:bf: b5:61:8c:7f:61:77:c3:35:c3:2f:f0:99:54:7d:6b: 4a:7b:5f:88:f0:5d:ae:7a:ec:fc:4d:23:3a:03:ba: b3:db:44:90:99:a2:d6:fb:ad:31:e3:9e:a1:3a:f8: 46:d6:ce:89:52:d1:3a:df:f2:a1:8d:d8:2c:aa:40: 08:cb:76:b4:93:b2:4b:5a:9e:69:28:63:d4:5b:b1: 09:bf:9b:68:18:05:46:72:02:f1:4b:09:ca:15:bf: a1:73:ef:c2:c9:88:be:50:7e:1d:4b:df:22:4d:5e: bb:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:DC:47:D4:5A:64:3A:90:5B:E8:46:5B:4D:FE:98:60:CC:A2:D3:0E X509v3 Authority Key Identifier: keyid:34:C3:8D:66:49:B9:0D:68:D3:CE:6C:09:F1:EB:94:D3:E5:79:FC:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9192491/D0626D92AD2F11E98FF8D77FC4F9AE02/NMONZkm5DWjTzmwJ8euU0-V5_J0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NMONZkm5DWjTzmwJ8euU0-V5_J0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9192491/D0626D92AD2F11E98FF8D77FC4F9AE02/NMONZkm5DWjTzmwJ8euU0-V5_J0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 40:e5:39:0d:5e:fe:51:ea:62:68:5b:29:93:77:87:33:a7:53: 56:0b:85:85:45:d4:cf:33:55:eb:89:1d:a4:bf:61:19:af:0d: f6:09:23:76:99:03:08:1f:55:f8:2a:c3:50:6e:db:9c:93:65: 80:58:35:ac:b3:35:ab:bc:50:07:0f:e3:30:12:3e:20:ad:8b: 25:6a:d1:73:87:d5:f1:47:48:c2:fb:d1:65:7c:d7:9e:31:9f: 65:eb:47:41:34:33:24:3b:0f:a6:e7:83:41:6f:5b:8e:17:22: c6:71:1d:f3:34:a4:51:bd:33:4a:29:1b:96:0e:3c:6b:63:a2: 5f:49:09:8b:dd:e8:ad:27:9f:c4:b9:b6:52:5f:26:4a:bc:56: d2:f8:a2:c3:15:66:7c:d4:a7:e6:e3:18:70:83:b3:4a:aa:8a: 65:15:ff:5b:71:e5:81:6e:6d:56:32:7a:ad:ef:31:0d:f3:7c: df:32:f1:48:fc:32:54:41:6c:76:b0:c6:a8:46:59:a9:93:1a: a6:ba:d6:3e:ea:db:a3:78:32:d0:c6:3f:51:8f:02:00:f1:2e: fd:82:19:e1:04:7b:e7:85:4e:f6:d4:89:22:d7:aa:7d:62:f0: 8f:87:e7:eb:5b:54:53:98:da:de:a7:de:b8:98:ce:9a:05:20: 22:69:4b:7c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDgYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTI0OTExMTAvBgNVBAUTKDM0QzM4RDY2NDlCOTBENjhEM0NFNkMwOUYxRUI5NEQz RTU3OUZDOUQwHhcNMjUwNTMwMTgwMDIwWhcNMjUwNjA2MTgwMDIwWjAYMRYwFAYD VQQDEw02ODM5ZjIzNC1lZTQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvq3ihCkVmilp5OEO2IrjYeuYT66G8ybcSDIaMN8HFm6bU0OuIXgdHcwk/U3K 5eBo9sxA+Lr1l9Wznit8++2FTx6gZeA8o9c4PEiwbzWxR5aSRyuwQLqMIo2/YQ6i abpc/hi3wpWaE11CJMbQUIAnsd2FoWqPGOlWL4CeTdBmZ0nT3UxQfkEsDW7lp0Yj 8VEvMUun3b+1YYx/YXfDNcMv8JlUfWtKe1+I8F2ueuz8TSM6A7qz20SQmaLW+60x 456hOvhG1s6JUtE63/KhjdgsqkAIy3a0k7JLWp5pKGPUW7EJv5toGAVGcgLxSwnK Fb+hc+/CyYi+UH4dS98iTV67sQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFncR9Ra ZDqQW+hGW03+mGDMotMOMB8GA1UdIwQYMBaAFDTDjWZJuQ1o085sCfHrlNPlefyd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MjQ5MS9EMDYyNkQ5MkFE MkYxMUU5OEZGOEQ3N0ZDNEY5QUUwMi9OTU9OWmttNURXalR6bXdKOGV1VTAtVjVf SjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05NT05aa201RFdqVHptd0o4ZXVVMC1WNV9KMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MjQ5MS9EMDYyNkQ5MkFEMkYxMUU5OEZGOEQ3N0ZDNEY5QUUwMi9OTU9OWmttNURX alR6bXdKOGV1VTAtVjVfSjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBA5TkNXv5R6mJoWymTd4czp1NWC4WFRdTPM1XriR2kv2EZrw32CSN2 mQMIH1X4KsNQbtuck2WAWDWsszWrvFAHD+MwEj4grYslatFzh9XxR0jC+9FlfNee MZ9l60dBNDMkOw+m54NBb1uOFyLGcR3zNKRRvTNKKRuWDjxrY6JfSQmL3eitJ5/E ubZSXyZKvFbS+KLDFWZ81Kfm4xhwg7NKqoplFf9bceWBbm1WMnqt7zEN83zfMvFI /DJUQWx2sMaoRlmpkxqmutY+6tujeDLQxj9RjwIA8S79ghnhBHvnhU721Iki16p9 YvCPh+frW1RTmNrep964mM6aBSAiaUt8 -----END CERTIFICATE-----Generated at Sat May 31 16:52:17 2025 by rpki-client