$ rpki-client -vvf rpki.apnic.net/member_repository/A911ED2C/00373C6C9BBC11EE851ADD50C4F9AE02/nTQUKDsie49RLzBfKs20PN6eTRI.mft File: nTQUKDsie49RLzBfKs20PN6eTRI.mft (raw, json) Hash identifier: vGcQGQ7MTuIxo9xq0ZW+8e/OqykaeyAwCjZfPqvbyfw= Subject key identifier: 6C:5C:66:F5:6E:49:ED:44:42:A3:4A:44:DE:DB:36:7A:46:C3:65:6E Authority key identifier: 9D:34:14:28:3B:22:7B:8F:51:2F:30:5F:2A:CD:B4:3C:DE:9E:4D:12 Certificate issuer: /CN=A911ED2C/serialNumber=9D3414283B227B8F512F305F2ACDB43CDE9E4D12 Certificate serial: 0145 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nTQUKDsie49RLzBfKs20PN6eTRI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911ED2C/00373C6C9BBC11EE851ADD50C4F9AE02/nTQUKDsie49RLzBfKs20PN6eTRI.mft Manifest number: 0121 Signing time: Fri 25 Apr 2025 04:12:18 +0000 Manifest this update: Fri 25 Apr 2025 04:12:18 +0000 Manifest next update: Fri 02 May 2025 04:12:18 +0000 Files and hashes: 1: nTQUKDsie49RLzBfKs20PN6eTRI.crl (hash: 9qx+mE4a8bSdyD7Orf4wVimFFHsS0PnwJCYsACU8OgM=) 2: CA364B681A1711F0A1D93523C4F9AE02.roa (hash: H7vVzWCwUc4gHrSDyxvt/Abb/5bSd+LGYG3bv6YBZ6Q=) 3: C75B642268F211EFB7A6A06EC4F9AE02.roa (hash: kOYdujebZuJtzPQYq/KrU4LAvGLUwAviwH7iInIzQIw=) 4: 908E69B20D4311F0B83AB36BC4F9AE02.roa (hash: T3LJotaESWHFF09iX5g1WTlmIxWJcjLGAaC0q00LC9A=) 5: 551036FCF1CA11EFA1495230C4F9AE02.roa (hash: arzezzJwAi/t7BgHje9UcAsQE7JCDVVYoepFJmOQbF8=) 6: EDAA86E4AD6D11EE83DA6253C4F9AE02.roa (hash: lAFnFIzcRDVgDsSYcjZRPgQLtWezbOK+1/I57oP5hYQ=) 7: 3C880EBABEEF11EF9178186BC4F9AE02.roa (hash: iJAvuEQuZJZzuKlMozj/voZPn9Nd6pZK++lpcpudEMw=) 8: EC985F92AD6D11EE83DA6253C4F9AE02.roa (hash: w8uUD+FE/qLP77HxuP2e7CVi5lI4nhNhSCuDldSdTWM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911ED2C/00373C6C9BBC11EE851ADD50C4F9AE02/nTQUKDsie49RLzBfKs20PN6eTRI.crl rsync://rpki.apnic.net/member_repository/A911ED2C/00373C6C9BBC11EE851ADD50C4F9AE02/nTQUKDsie49RLzBfKs20PN6eTRI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nTQUKDsie49RLzBfKs20PN6eTRI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 04:12:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 325 (0x145) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911ED2C, serialNumber=9D3414283B227B8F512F305F2ACDB43CDE9E4D12 Validity Not Before: Apr 25 04:12:18 2025 GMT Not After : May 2 04:12:18 2025 GMT Subject: CN=680b0ba2-2dfd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:f8:96:e6:a2:45:91:8b:bf:d5:65:b7:1a:bf: d6:8a:7b:1c:fe:8b:d2:3c:06:d8:90:78:01:c2:2e: b7:da:ba:40:2a:be:d0:29:34:46:79:a2:0b:21:35: 96:f3:a9:ce:b0:ac:80:7d:ad:87:44:08:c0:b1:59: a1:fb:d6:85:8a:ea:6f:99:de:ec:71:02:45:8d:09: ae:6c:66:b4:b8:41:5e:15:d5:b9:c9:d0:1b:4f:af: a1:23:e0:de:10:fd:0c:2d:40:17:3f:45:34:b5:54: 0a:ef:53:6c:d0:2b:91:b2:8f:36:c3:27:4a:f7:ae: d5:07:f0:20:90:c8:88:af:4c:22:c7:ac:0f:cc:25: 93:cf:43:37:54:a9:b9:e9:5c:1a:18:a6:51:e6:1d: e4:dc:63:5c:d9:48:74:d9:72:cc:9c:1f:e1:0d:5c: 92:10:53:74:4f:f5:75:61:37:c7:65:99:ba:e9:4c: 96:b5:18:e2:e3:27:18:fa:69:fe:19:bb:c0:fd:2a: ac:4d:76:4b:29:36:40:8b:f8:b7:4a:f2:ff:41:8c: 1e:93:bf:8f:3c:b7:06:e5:5d:8c:a0:c6:ce:c5:03: 40:4e:9b:65:7d:d0:ba:cd:94:cc:d1:71:91:85:81: bb:b4:5e:3c:41:50:50:36:6c:2d:3e:1d:a6:27:00: 6e:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:5C:66:F5:6E:49:ED:44:42:A3:4A:44:DE:DB:36:7A:46:C3:65:6E X509v3 Authority Key Identifier: keyid:9D:34:14:28:3B:22:7B:8F:51:2F:30:5F:2A:CD:B4:3C:DE:9E:4D:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911ED2C/00373C6C9BBC11EE851ADD50C4F9AE02/nTQUKDsie49RLzBfKs20PN6eTRI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nTQUKDsie49RLzBfKs20PN6eTRI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911ED2C/00373C6C9BBC11EE851ADD50C4F9AE02/nTQUKDsie49RLzBfKs20PN6eTRI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b6:76:7d:1a:09:7c:42:f4:58:0b:d3:6f:34:02:37:54:b5:62: fb:d2:7a:db:56:73:b5:8c:06:36:fe:a6:ef:12:e0:e5:da:5a: ad:4e:35:54:7a:66:d8:e1:63:e2:8c:a8:94:a3:fd:cd:ab:81: 6e:72:02:9c:12:63:f1:16:d0:3d:12:9e:56:6e:b3:25:32:96: 48:4c:ac:25:6f:4a:7a:a4:35:1b:55:ff:a3:13:ff:bc:df:06: c6:88:c1:a0:7b:dc:ba:ab:ad:a5:b0:9d:e1:63:c4:c6:fe:fb: 02:17:9d:c8:40:cd:55:03:b4:6c:dd:49:ad:8b:cb:a7:f8:8a: e8:c8:30:e1:cf:91:50:22:c9:ea:4f:3a:46:47:65:5d:5c:57: 30:8d:d9:37:2a:3c:8e:61:2b:b4:b2:26:c7:ac:54:34:3a:59: 4d:3e:0f:f7:ed:2f:4f:99:08:a5:a7:e0:cb:dd:10:f7:9f:aa: df:ad:44:60:7c:03:92:49:f3:4f:fa:e6:09:44:96:85:9e:40: 68:6e:e7:31:a9:3b:31:c3:d6:68:20:97:59:c2:0e:25:a6:e8: e3:df:7a:8c:2b:31:3b:e2:e0:36:fe:12:cd:13:9f:4a:02:8c: 51:e4:d2:d4:39:63:ee:7a:2f:cf:3b:9b:81:1d:a4:b5:52:26: 74:3b:f8:27 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAUUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUVEMkMxMTAvBgNVBAUTKDlEMzQxNDI4M0IyMjdCOEY1MTJGMzA1RjJBQ0RCNDND REU5RTREMTIwHhcNMjUwNDI1MDQxMjE4WhcNMjUwNTAyMDQxMjE4WjAYMRYwFAYD VQQDEw02ODBiMGJhMi0yZGZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1viW5qJFkYu/1WW3Gr/Winsc/ovSPAbYkHgBwi632rpAKr7QKTRGeaILITWW 86nOsKyAfa2HRAjAsVmh+9aFiupvmd7scQJFjQmubGa0uEFeFdW5ydAbT6+hI+De EP0MLUAXP0U0tVQK71Ns0CuRso82wydK967VB/AgkMiIr0wix6wPzCWTz0M3VKm5 6VwaGKZR5h3k3GNc2Uh02XLMnB/hDVySEFN0T/V1YTfHZZm66UyWtRji4ycY+mn+ GbvA/SqsTXZLKTZAi/i3SvL/QYwek7+PPLcG5V2MoMbOxQNATptlfdC6zZTM0XGR hYG7tF48QVBQNmwtPh2mJwButwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGxcZvVu Se1EQqNKRN7bNnpGw2VuMB8GA1UdIwQYMBaAFJ00FCg7InuPUS8wXyrNtDzenk0S MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRUQyQy8wMDM3M0M2QzlC QkMxMUVFODUxQURENTBDNEY5QUUwMi9uVFFVS0RzaWU0OVJMekJmS3MyMFBONmVU UkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25UUVVLRHNpZTQ5Ukx6QmZLczIwUE42ZVRSSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RUQyQy8wMDM3M0M2QzlCQkMxMUVFODUxQURENTBDNEY5QUUwMi9uVFFVS0RzaWU0 OVJMekJmS3MyMFBONmVUUkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC2dn0aCXxC9FgL0280AjdUtWL70nrbVnO1jAY2/qbvEuDl2lqtTjVU embY4WPijKiUo/3Nq4FucgKcEmPxFtA9Ep5WbrMlMpZITKwlb0p6pDUbVf+jE/+8 3wbGiMGge9y6q62lsJ3hY8TG/vsCF53IQM1VA7Rs3Umti8un+IroyDDhz5FQIsnq TzpGR2VdXFcwjdk3KjyOYSu0sibHrFQ0OllNPg/37S9PmQilp+DL3RD3n6rfrURg fAOSSfNP+uYJRJaFnkBobucxqTsxw9ZoIJdZwg4lpujj33qMKzE74uA2/hLNE59K AoxR5NLUOWPuei/PO5uBHaS1UiZ0O/gn -----END CERTIFICATE-----Generated at Sat Apr 26 04:23:49 2025 by rpki-client