$ rpki-client -vvf rpki.apnic.net/member_repository/A911E351/5BCF88A6784E11EC8A44450EC4F9AE02/NdqtT3Wuk43GUzSEzejIF93Csig.mft File: NdqtT3Wuk43GUzSEzejIF93Csig.mft (raw, json) Hash identifier: QCHfkOd1ar4D+1JHaV1g5FXyFeTEKsSt+rlAme6v5q8= Subject key identifier: 3B:13:73:1A:AB:96:DA:D4:AC:1C:17:D3:97:79:BD:D4:06:33:40:26 Authority key identifier: 35:DA:AD:4F:75:AE:93:8D:C6:53:34:84:CD:E8:C8:17:DD:C2:B2:28 Certificate issuer: /CN=A911E351/serialNumber=35DAAD4F75AE938DC6533484CDE8C817DDC2B228 Certificate serial: 03E8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NdqtT3Wuk43GUzSEzejIF93Csig.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911E351/5BCF88A6784E11EC8A44450EC4F9AE02/NdqtT3Wuk43GUzSEzejIF93Csig.mft Manifest number: 03E4 Signing time: Fri 25 Apr 2025 00:18:10 +0000 Manifest this update: Fri 25 Apr 2025 00:18:09 +0000 Manifest next update: Fri 02 May 2025 00:18:09 +0000 Files and hashes: 1: NdqtT3Wuk43GUzSEzejIF93Csig.crl (hash: oZvxNPd2WtwadY+1fejb537JJV9ROuVbgbdpd5liKn8=) 2: E9ED080A785011ECBD2B6A10C4F9AE02.roa (hash: iYM80ZUZv11SjTkmdUWv3G7CQp9g2JbkQfuMruAgJ5Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911E351/5BCF88A6784E11EC8A44450EC4F9AE02/NdqtT3Wuk43GUzSEzejIF93Csig.crl rsync://rpki.apnic.net/member_repository/A911E351/5BCF88A6784E11EC8A44450EC4F9AE02/NdqtT3Wuk43GUzSEzejIF93Csig.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NdqtT3Wuk43GUzSEzejIF93Csig.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 00:18:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1000 (0x3e8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911E351, serialNumber=35DAAD4F75AE938DC6533484CDE8C817DDC2B228 Validity Not Before: Apr 25 00:18:09 2025 GMT Not After : May 2 00:18:09 2025 GMT Subject: CN=680ad4c2-0060 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:31:ea:80:37:fd:d8:fe:62:57:8d:77:a1:34: 69:2a:69:5a:6d:fb:3b:d5:5d:20:df:4a:56:04:09: 06:bb:cc:50:f7:51:da:08:52:9c:b6:e9:31:1a:4a: 99:68:e9:35:8f:f7:28:21:8f:07:32:d6:ff:55:5a: 39:ab:80:eb:c7:12:0b:25:85:71:bc:8c:3c:10:a4: 33:75:71:69:80:a8:e5:f0:c7:f7:37:f6:4b:8f:5a: ae:f6:5b:84:4e:f5:48:ab:07:d2:a7:7b:e4:80:a5: 0a:93:5f:f5:5b:bc:2b:a2:cc:e8:d5:79:ad:b8:fa: 4c:fe:36:cb:cd:2c:88:f7:ec:5a:76:3e:2e:60:a5: de:d7:1a:c8:13:fd:a6:f2:32:d5:2e:0c:a6:3e:81: d8:b7:fe:24:6b:53:59:43:88:f2:69:ad:a0:a1:bf: aa:78:ea:2f:74:a3:ab:83:2a:8f:79:6a:52:d7:bc: 2f:83:da:b0:fc:21:1d:53:24:0c:a2:db:1f:4d:4c: 0a:d1:0a:02:39:b7:1f:d7:c3:00:cc:09:43:05:6e: 90:e5:fe:07:8c:97:c2:42:ef:01:3b:96:41:bc:be: 58:90:a5:7b:9e:6d:86:38:4d:d7:af:a4:88:03:97: 01:cb:a5:06:7f:cd:5b:77:f2:0a:f6:a0:6b:f1:dd: 72:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:13:73:1A:AB:96:DA:D4:AC:1C:17:D3:97:79:BD:D4:06:33:40:26 X509v3 Authority Key Identifier: keyid:35:DA:AD:4F:75:AE:93:8D:C6:53:34:84:CD:E8:C8:17:DD:C2:B2:28 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911E351/5BCF88A6784E11EC8A44450EC4F9AE02/NdqtT3Wuk43GUzSEzejIF93Csig.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NdqtT3Wuk43GUzSEzejIF93Csig.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911E351/5BCF88A6784E11EC8A44450EC4F9AE02/NdqtT3Wuk43GUzSEzejIF93Csig.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b0:c3:d9:14:91:d3:bb:e3:67:79:6a:38:df:89:c4:d2:71:e6: ef:2a:66:24:b2:26:1c:4e:f1:c9:fb:84:ec:18:31:d0:c6:0c: 9a:75:c5:ad:1d:66:43:68:fb:d5:e4:f2:6d:02:d8:97:bd:3c: b4:56:33:2e:a3:11:0b:df:71:7f:6d:3f:93:f5:dd:33:10:3b: c4:c3:67:1d:9f:b5:9b:42:3f:f8:bc:be:81:21:c4:7e:01:27: 3c:b6:7a:89:9d:e9:08:9d:3c:bd:5c:87:df:f0:72:fe:cb:f3: 95:94:ea:ec:ef:72:8b:bd:b3:0a:e4:b4:32:cc:03:23:6d:49: 8e:62:77:bb:81:77:3a:7e:6b:10:8e:46:74:0b:7f:32:45:85: dc:4e:60:ab:8b:07:77:78:46:e2:d4:30:e4:b7:91:eb:be:58: 70:d2:26:1f:50:0a:60:f1:c3:32:ca:c2:db:ea:68:f4:d1:cc: be:d7:c3:bb:9d:88:9f:8b:93:ba:76:08:a4:9d:33:ca:a8:eb: f5:a3:64:c9:d2:33:81:f5:54:32:61:c6:71:b8:e7:69:0a:ab: 84:90:98:e4:b4:9f:3a:ea:e9:ea:bc:fd:6e:bf:73:50:9d:17: 4d:0d:d8:af:7a:26:75:da:8d:d7:b3:75:6e:2a:14:50:7c:e8: 9c:df:bd:ea -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA+gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUUzNTExMTAvBgNVBAUTKDM1REFBRDRGNzVBRTkzOERDNjUzMzQ4NENERThDODE3 RERDMkIyMjgwHhcNMjUwNDI1MDAxODA5WhcNMjUwNTAyMDAxODA5WjAYMRYwFAYD VQQDEw02ODBhZDRjMi0wMDYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyjHqgDf92P5iV413oTRpKmlabfs71V0g30pWBAkGu8xQ91HaCFKctukxGkqZ aOk1j/coIY8HMtb/VVo5q4DrxxILJYVxvIw8EKQzdXFpgKjl8Mf3N/ZLj1qu9luE TvVIqwfSp3vkgKUKk1/1W7wroszo1XmtuPpM/jbLzSyI9+xadj4uYKXe1xrIE/2m 8jLVLgymPoHYt/4ka1NZQ4jyaa2gob+qeOovdKOrgyqPeWpS17wvg9qw/CEdUyQM otsfTUwK0QoCObcf18MAzAlDBW6Q5f4HjJfCQu8BO5ZBvL5YkKV7nm2GOE3Xr6SI A5cBy6UGf81bd/IK9qBr8d1yCwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDsTcxqr ltrUrBwX05d5vdQGM0AmMB8GA1UdIwQYMBaAFDXarU91rpONxlM0hM3oyBfdwrIo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRTM1MS81QkNGODhBNjc4 NEUxMUVDOEE0NDQ1MEVDNEY5QUUwMi9OZHF0VDNXdWs0M0dVelNFemVqSUY5M0Nz aWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05kcXRUM1d1azQzR1V6U0V6ZWpJRjkzQ3NpZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RTM1MS81QkNGODhBNjc4NEUxMUVDOEE0NDQ1MEVDNEY5QUUwMi9OZHF0VDNXdWs0 M0dVelNFemVqSUY5M0NzaWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCww9kUkdO742d5ajjficTScebvKmYksiYcTvHJ+4TsGDHQxgyadcWt HWZDaPvV5PJtAtiXvTy0VjMuoxEL33F/bT+T9d0zEDvEw2cdn7WbQj/4vL6BIcR+ ASc8tnqJnekInTy9XIff8HL+y/OVlOrs73KLvbMK5LQyzAMjbUmOYne7gXc6fmsQ jkZ0C38yRYXcTmCriwd3eEbi1DDkt5Hrvlhw0iYfUApg8cMyysLb6mj00cy+18O7 nYifi5O6dgiknTPKqOv1o2TJ0jOB9VQyYcZxuOdpCquEkJjktJ866unqvP1uv3NQ nRdNDdiveiZ12o3Xs3VuKhRQfOic373q -----END CERTIFICATE-----Generated at Sat Apr 26 04:29:43 2025 by rpki-client