$ rpki-client -vvf rpki.apnic.net/member_repository/A91CA3CD/26453FA0905711EE86493613C4F9AE02/NctCHFV3F3WBziSzai9syTGEYFI.mft File: NctCHFV3F3WBziSzai9syTGEYFI.mft (raw, json) Hash identifier: 0PmRRLKtJYagTnJceOx+ZS7yzluP3aIrD5GZT+EN8SQ= Subject key identifier: C0:E6:77:0B:5B:4E:12:4E:FE:78:3C:F2:48:BA:05:07:A1:D6:6A:D8 Authority key identifier: 35:CB:42:1C:55:77:17:75:81:CE:24:B3:6A:2F:6C:C9:31:84:60:52 Certificate issuer: /CN=A91CA3CD/serialNumber=35CB421C5577177581CE24B36A2F6CC931846052 Certificate serial: 011F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NctCHFV3F3WBziSzai9syTGEYFI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CA3CD/26453FA0905711EE86493613C4F9AE02/NctCHFV3F3WBziSzai9syTGEYFI.mft Manifest number: 011B Signing time: Sat 31 May 2025 04:26:53 +0000 Manifest this update: Sat 31 May 2025 04:26:52 +0000 Manifest next update: Sat 07 Jun 2025 04:26:52 +0000 Files and hashes: 1: NctCHFV3F3WBziSzai9syTGEYFI.crl (hash: ojWjsz/ckV8K4qmLsZaTHUBLYRC6Q5UVf9FazDJRiSE=) 2: F5121FB090CF11EE8036815AC4F9AE02.roa (hash: cuDY334MkIVtRBq3o3ujGRQ6jR/z000CC0KgPqw5K+Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CA3CD/26453FA0905711EE86493613C4F9AE02/NctCHFV3F3WBziSzai9syTGEYFI.crl rsync://rpki.apnic.net/member_repository/A91CA3CD/26453FA0905711EE86493613C4F9AE02/NctCHFV3F3WBziSzai9syTGEYFI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NctCHFV3F3WBziSzai9syTGEYFI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 04:26:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 287 (0x11f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CA3CD, serialNumber=35CB421C5577177581CE24B36A2F6CC931846052 Validity Not Before: May 31 04:26:52 2025 GMT Not After : Jun 7 04:26:52 2025 GMT Subject: CN=683a850d-8fac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:b8:8a:67:c7:b6:22:fe:7c:06:e2:06:fb:64: 4e:73:82:a7:a0:18:33:83:2d:d4:d8:f4:fd:e3:a2: 70:d4:35:4c:b9:9b:e8:73:29:6d:3b:b0:69:af:f6: cf:d3:e1:59:44:86:98:b5:26:a6:43:79:c1:59:9b: 75:08:04:75:80:5c:6a:bb:31:01:90:c6:d4:ad:eb: e0:c8:fc:17:4e:80:f6:d9:c9:70:cf:46:2b:eb:53: 6a:f3:df:43:64:63:60:83:b1:4e:42:a9:bd:3a:7f: 7d:c1:01:e1:ac:37:f9:c2:0d:81:74:41:a9:51:0b: 13:ee:31:4d:c5:e7:83:1c:d1:19:59:45:69:d1:0c: d5:7e:e0:e5:3d:93:84:ac:f8:57:85:5d:5e:4a:b2: 72:76:5f:6a:de:1b:58:5c:3a:22:76:f8:90:4f:ac: a8:80:ae:bf:53:cb:85:de:33:cb:97:60:23:56:9f: ec:15:fe:35:b3:f5:73:52:c0:84:8a:5c:e3:90:d0: 7f:5f:c1:12:91:cd:d1:1c:00:9e:ff:c5:f6:bc:cf: 78:a6:66:6c:74:aa:27:0f:7d:4d:b7:61:b7:e3:c6: 0c:ae:65:69:20:ae:7d:0d:d3:e2:18:32:21:52:ec: df:a8:3d:62:c3:11:68:cf:26:82:13:c8:dd:cb:bf: 95:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:E6:77:0B:5B:4E:12:4E:FE:78:3C:F2:48:BA:05:07:A1:D6:6A:D8 X509v3 Authority Key Identifier: keyid:35:CB:42:1C:55:77:17:75:81:CE:24:B3:6A:2F:6C:C9:31:84:60:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CA3CD/26453FA0905711EE86493613C4F9AE02/NctCHFV3F3WBziSzai9syTGEYFI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NctCHFV3F3WBziSzai9syTGEYFI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CA3CD/26453FA0905711EE86493613C4F9AE02/NctCHFV3F3WBziSzai9syTGEYFI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 48:41:9f:ed:8a:55:49:3d:8c:50:bc:3b:33:54:0b:bf:dd:49: da:b8:50:d1:8e:89:e9:7b:90:f5:0f:b4:6e:12:6a:36:7e:5e: 79:b3:24:d0:33:28:d6:fa:a3:27:0f:24:65:f9:b0:07:e8:f8: b1:90:a5:22:01:4c:d5:ef:a4:82:9d:ab:58:06:c7:23:b4:07: 15:6d:d6:db:db:29:53:6a:b8:74:11:90:4c:e1:80:0d:81:de: a0:ae:94:d5:60:a6:49:8b:c2:ef:a7:4d:67:d4:96:38:3c:9c: fe:89:8e:37:c2:d5:aa:a2:0f:49:23:11:9e:6f:55:7c:10:26: b9:7a:e9:74:70:c2:57:84:0c:04:af:16:0b:29:b3:d3:54:66: b7:7b:43:0a:1c:df:c9:ed:62:14:1e:61:9f:da:be:30:1e:cf: c1:08:e4:0e:a7:40:0f:39:1c:6f:2d:9c:e2:8d:f2:c2:59:69: 95:1f:df:ec:b7:47:c7:cf:04:96:14:60:b2:94:f0:10:d5:76: be:1d:15:e5:59:7b:09:28:1c:ff:26:96:84:03:45:3b:29:cd: c8:6f:be:68:60:19:0e:d5:fa:97:16:28:f8:44:9b:e1:16:86: 41:d8:07:79:9b:d8:4e:05:72:b6:d8:78:89:ce:dd:98:67:a7: b2:3f:a0:99 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAR8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0EzQ0QxMTAvBgNVBAUTKDM1Q0I0MjFDNTU3NzE3NzU4MUNFMjRCMzZBMkY2Q0M5 MzE4NDYwNTIwHhcNMjUwNTMxMDQyNjUyWhcNMjUwNjA3MDQyNjUyWjAYMRYwFAYD VQQDEw02ODNhODUwZC04ZmFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtriKZ8e2Iv58BuIG+2ROc4KnoBgzgy3U2PT946Jw1DVMuZvocyltO7Bpr/bP 0+FZRIaYtSamQ3nBWZt1CAR1gFxquzEBkMbUrevgyPwXToD22clwz0Yr61Nq899D ZGNgg7FOQqm9On99wQHhrDf5wg2BdEGpUQsT7jFNxeeDHNEZWUVp0QzVfuDlPZOE rPhXhV1eSrJydl9q3htYXDoidviQT6yogK6/U8uF3jPLl2AjVp/sFf41s/VzUsCE ilzjkNB/X8ESkc3RHACe/8X2vM94pmZsdKonD31Nt2G348YMrmVpIK59DdPiGDIh UuzfqD1iwxFozyaCE8jdy7+VOwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMDmdwtb ThJO/ng88ki6BQeh1mrYMB8GA1UdIwQYMBaAFDXLQhxVdxd1gc4ks2ovbMkxhGBS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQTNDRC8yNjQ1M0ZBMDkw NTcxMUVFODY0OTM2MTNDNEY5QUUwMi9OY3RDSEZWM0YzV0J6aVN6YWk5c3lUR0VZ RkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05jdENIRlYzRjNXQnppU3phaTlzeVRHRVlGSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QTNDRC8yNjQ1M0ZBMDkwNTcxMUVFODY0OTM2MTNDNEY5QUUwMi9OY3RDSEZWM0Yz V0J6aVN6YWk5c3lUR0VZRkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBIQZ/tilVJPYxQvDszVAu/3UnauFDRjonpe5D1D7RuEmo2fl55syTQ MyjW+qMnDyRl+bAH6PixkKUiAUzV76SCnatYBscjtAcVbdbb2ylTarh0EZBM4YAN gd6grpTVYKZJi8Lvp01n1JY4PJz+iY43wtWqog9JIxGeb1V8ECa5eul0cMJXhAwE rxYLKbPTVGa3e0MKHN/J7WIUHmGf2r4wHs/BCOQOp0APORxvLZzijfLCWWmVH9/s t0fHzwSWFGCylPAQ1Xa+HRXlWXsJKBz/JpaEA0U7Kc3Ib75oYBkO1fqXFij4RJvh FoZB2Ad5m9hOBXK22HiJzt2YZ6eyP6CZ -----END CERTIFICATE-----Generated at Sat May 31 17:50:33 2025 by rpki-client