$ rpki-client -vvf rpki.apnic.net/member_repository/A91C97F5/9170C42A274411ED8C139B51C4F9AE02/Nocz_cVgxeuJ5FJA331AOcsvYQg.mft File: Nocz_cVgxeuJ5FJA331AOcsvYQg.mft (raw, json) Hash identifier: OTx8fT2xnF6fKJ6u6j58bFcEiR8zlG6uSgNZr+B2fGE= Subject key identifier: 59:73:34:D9:2F:5D:5A:BD:92:93:6B:1B:10:8C:DA:2B:5D:42:83:8D Authority key identifier: 36:87:33:FD:C5:60:C5:EB:89:E4:52:40:DF:7D:40:39:CB:2F:61:08 Certificate issuer: /CN=A91C97F5/serialNumber=368733FDC560C5EB89E45240DF7D4039CB2F6108 Certificate serial: 023D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nocz_cVgxeuJ5FJA331AOcsvYQg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C97F5/9170C42A274411ED8C139B51C4F9AE02/Nocz_cVgxeuJ5FJA331AOcsvYQg.mft Manifest number: 0238 Signing time: Sat 31 May 2025 02:04:35 +0000 Manifest this update: Sat 31 May 2025 02:04:35 +0000 Manifest next update: Sat 07 Jun 2025 02:04:35 +0000 Files and hashes: 1: Nocz_cVgxeuJ5FJA331AOcsvYQg.crl (hash: qYQjQc15meIi4/wsw2NGQFDYnC0yWzJ7GIZSyUGNKTo=) 2: 020D49E0283211ED9E29FA70C4F9AE02.roa (hash: LQxrSI0KNNYbihu8S9SLx+zDE07D+HfcizadCn96Tg0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C97F5/9170C42A274411ED8C139B51C4F9AE02/Nocz_cVgxeuJ5FJA331AOcsvYQg.crl rsync://rpki.apnic.net/member_repository/A91C97F5/9170C42A274411ED8C139B51C4F9AE02/Nocz_cVgxeuJ5FJA331AOcsvYQg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nocz_cVgxeuJ5FJA331AOcsvYQg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 02:04:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 573 (0x23d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C97F5, serialNumber=368733FDC560C5EB89E45240DF7D4039CB2F6108 Validity Not Before: May 31 02:04:35 2025 GMT Not After : Jun 7 02:04:35 2025 GMT Subject: CN=683a63b3-32f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:48:0f:e6:f3:2d:b9:d6:67:56:56:d2:f5:1d: 41:7c:e6:9e:fb:70:b3:94:d0:1e:0a:ac:ca:88:87: 66:33:bf:1a:86:bb:2b:da:88:1d:71:a0:ef:cd:42: ef:55:29:c9:bb:8b:17:4e:5d:b2:27:f5:05:1d:9e: b2:7c:e2:54:c0:1e:74:d0:40:e2:51:a5:38:12:63: fa:6e:7c:60:9f:35:3a:f8:d6:60:02:66:a0:7b:79: 35:05:00:6d:bc:e5:b7:77:a9:25:74:5b:de:d4:eb: b1:f5:71:51:81:24:f1:4c:7b:96:e5:9d:8c:1b:00: ed:dc:0f:fb:22:fc:19:11:db:b6:df:b0:95:92:f0: 89:60:74:f5:bf:62:43:4f:fe:a3:f6:de:99:c1:67: 45:33:98:a7:fd:ae:9d:a8:2f:b9:6f:b4:45:de:5f: 77:9e:8d:45:5b:bb:c2:14:ca:53:74:7c:1d:54:ea: f5:08:a8:c6:76:8e:13:31:96:aa:f4:fc:25:41:07: dd:71:10:58:60:52:14:20:be:19:52:58:05:57:13: ad:bb:da:c0:b1:c3:29:e5:08:68:91:07:8a:3a:55: 48:a1:82:30:5b:fe:e0:01:a2:b5:59:f2:77:80:52: 6b:e5:19:1c:d1:7e:2e:ed:09:07:55:75:be:f4:b5: 72:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:73:34:D9:2F:5D:5A:BD:92:93:6B:1B:10:8C:DA:2B:5D:42:83:8D X509v3 Authority Key Identifier: keyid:36:87:33:FD:C5:60:C5:EB:89:E4:52:40:DF:7D:40:39:CB:2F:61:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C97F5/9170C42A274411ED8C139B51C4F9AE02/Nocz_cVgxeuJ5FJA331AOcsvYQg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nocz_cVgxeuJ5FJA331AOcsvYQg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C97F5/9170C42A274411ED8C139B51C4F9AE02/Nocz_cVgxeuJ5FJA331AOcsvYQg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 77:0e:a4:7d:a5:75:a5:60:8b:96:6f:62:d4:b1:a8:27:ce:db: 93:19:91:73:64:94:c1:24:39:a2:c9:b3:9d:3e:db:c7:ae:12: da:b2:77:b4:aa:b8:39:0f:bf:da:5f:5f:be:3b:bb:40:0b:e1: 71:d9:fb:a3:85:10:5e:3e:18:ef:cd:a9:d8:c6:9a:0b:20:35: c4:be:dc:66:c7:0f:ed:c5:34:1f:32:8a:94:41:3e:90:5e:7d: d5:5e:c5:e3:45:5d:c7:31:c6:61:14:ab:b0:a9:9a:5e:ff:ae: 75:2b:ef:bc:d6:45:a2:30:04:ba:19:76:bb:29:dc:a9:a1:c2: 1e:84:d6:91:c1:1a:89:0c:5c:92:fd:5c:7a:f7:bf:9f:33:02: 25:ad:e5:b1:4d:71:65:f5:8d:2a:dc:1d:3e:21:24:0a:6b:00: 43:c3:6c:b3:f2:80:85:98:98:6d:62:dc:32:cb:f0:2c:0a:4e: 21:1c:e2:58:0d:02:68:25:9d:18:10:34:6a:a0:cb:5e:65:62: 47:6b:04:17:50:97:e5:b8:fb:08:70:a0:bc:b9:58:f3:af:35: aa:7e:41:c1:52:3c:f1:fd:2f:df:4f:61:5b:4d:15:6f:94:59: 09:5b:59:e3:42:89:40:bd:4a:46:17:b7:7f:07:1d:64:74:89: fa:18:0b:9e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAj0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qzk3RjUxMTAvBgNVBAUTKDM2ODczM0ZEQzU2MEM1RUI4OUU0NTI0MERGN0Q0MDM5 Q0IyRjYxMDgwHhcNMjUwNTMxMDIwNDM1WhcNMjUwNjA3MDIwNDM1WjAYMRYwFAYD VQQDEw02ODNhNjNiMy0zMmY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw0gP5vMtudZnVlbS9R1BfOae+3CzlNAeCqzKiIdmM78ahrsr2ogdcaDvzULv VSnJu4sXTl2yJ/UFHZ6yfOJUwB500EDiUaU4EmP6bnxgnzU6+NZgAmage3k1BQBt vOW3d6kldFve1Oux9XFRgSTxTHuW5Z2MGwDt3A/7IvwZEdu237CVkvCJYHT1v2JD T/6j9t6ZwWdFM5in/a6dqC+5b7RF3l93no1FW7vCFMpTdHwdVOr1CKjGdo4TMZaq 9PwlQQfdcRBYYFIUIL4ZUlgFVxOtu9rAscMp5QhokQeKOlVIoYIwW/7gAaK1WfJ3 gFJr5Rkc0X4u7QkHVXW+9LVygQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFlzNNkv XVq9kpNrGxCM2itdQoONMB8GA1UdIwQYMBaAFDaHM/3FYMXrieRSQN99QDnLL2EI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOTdGNS85MTcwQzQyQTI3 NDQxMUVEOEMxMzlCNTFDNEY5QUUwMi9Ob2N6X2NWZ3hldUo1RkpBMzMxQU9jc3ZZ UWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05vY3pfY1ZneGV1SjVGSkEzMzFBT2NzdllRZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD OTdGNS85MTcwQzQyQTI3NDQxMUVEOEMxMzlCNTFDNEY5QUUwMi9Ob2N6X2NWZ3hl dUo1RkpBMzMxQU9jc3ZZUWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB3DqR9pXWlYIuWb2LUsagnztuTGZFzZJTBJDmiybOdPtvHrhLasne0 qrg5D7/aX1++O7tAC+Fx2fujhRBePhjvzanYxpoLIDXEvtxmxw/txTQfMoqUQT6Q Xn3VXsXjRV3HMcZhFKuwqZpe/651K++81kWiMAS6GXa7KdypocIehNaRwRqJDFyS /Vx697+fMwIlreWxTXFl9Y0q3B0+ISQKawBDw2yz8oCFmJhtYtwyy/AsCk4hHOJY DQJoJZ0YEDRqoMteZWJHawQXUJfluPsIcKC8uVjzrzWqfkHBUjzx/S/fT2FbTRVv lFkJW1njQolAvUpGF7d/Bx1kdIn6GAue -----END CERTIFICATE-----Generated at Sat May 31 16:38:56 2025 by rpki-client