$ rpki-client -vvf rpki.apnic.net/member_repository/A912677F/C43D769663EC11EA97B72587C4F9AE02/NmQpLU_S3_HIhBdQ_IN58ZRaE34.mft File: NmQpLU_S3_HIhBdQ_IN58ZRaE34.mft (raw, json) Hash identifier: Sb8KC5qGQau6ubD2kuub6z/GlbkOEC3dR+gjjg06AnI= Subject key identifier: 3D:89:8C:05:27:B3:2F:26:6A:93:BB:F3:BE:FE:99:CE:DA:94:23:5C Authority key identifier: 36:64:29:2D:4F:D2:DF:F1:C8:84:17:50:FC:83:79:F1:94:5A:13:7E Certificate issuer: /CN=A912677F/serialNumber=3664292D4FD2DFF1C8841750FC8379F1945A137E Certificate serial: 0A53 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NmQpLU_S3_HIhBdQ_IN58ZRaE34.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912677F/C43D769663EC11EA97B72587C4F9AE02/NmQpLU_S3_HIhBdQ_IN58ZRaE34.mft Manifest number: 0A4C Signing time: Thu 24 Apr 2025 19:35:25 +0000 Manifest this update: Thu 24 Apr 2025 19:35:24 +0000 Manifest next update: Thu 01 May 2025 19:35:24 +0000 Files and hashes: 1: NmQpLU_S3_HIhBdQ_IN58ZRaE34.crl (hash: 43XTGtuH3tJ7azHZV0FhosCbFEWSgQhOQq/KlLe+fV8=) 2: B82FA738111C11EBB805F52AC4F9AE02.roa (hash: EJ4VnRATjOO9ERUrQeU1qxPXlhkEMnZWEHJLCS7gQyQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912677F/C43D769663EC11EA97B72587C4F9AE02/NmQpLU_S3_HIhBdQ_IN58ZRaE34.crl rsync://rpki.apnic.net/member_repository/A912677F/C43D769663EC11EA97B72587C4F9AE02/NmQpLU_S3_HIhBdQ_IN58ZRaE34.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NmQpLU_S3_HIhBdQ_IN58ZRaE34.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 19:35:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2643 (0xa53) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912677F, serialNumber=3664292D4FD2DFF1C8841750FC8379F1945A137E Validity Not Before: Apr 24 19:35:24 2025 GMT Not After : May 1 19:35:24 2025 GMT Subject: CN=680a927c-36d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:18:4e:df:3c:64:26:32:71:85:79:b0:5e:7f: bd:f4:a5:1a:a3:f9:a0:ae:b5:f6:8f:d4:7e:a3:6a: ab:92:d8:74:07:a9:77:24:64:58:bf:1c:14:3a:d7: 3f:db:23:5a:fe:61:af:84:ec:6d:69:d4:e2:c3:ae: 90:3a:8a:4c:79:59:02:7b:27:d3:25:21:e5:41:9e: f6:e0:6f:71:35:1c:1d:b1:ba:8e:42:7f:87:da:4d: c9:3f:de:cf:0e:99:9d:a9:04:00:cd:5b:30:a7:14: eb:4b:d2:70:25:0b:2b:2b:25:32:81:fe:6a:f0:e3: 78:8b:d0:49:7a:45:db:8e:41:99:de:f9:4a:ac:2c: c5:86:da:a8:76:d1:91:f0:29:72:8a:5c:30:16:06: 9d:0f:d5:0b:46:c5:5a:53:e1:56:58:14:4c:d9:89: fd:d6:fb:db:b5:23:ae:d7:6d:8a:eb:20:91:f6:75: af:7c:6c:e4:cf:e9:aa:c2:ec:f3:03:81:dc:34:87: 16:53:07:ad:29:d6:ed:e7:bb:6f:87:84:c3:a2:70: ed:f3:af:65:68:bc:04:e9:27:32:fe:50:f3:6f:9b: de:b9:f3:56:f8:41:df:61:05:81:fc:75:80:e9:4f: 2d:9e:7a:58:4b:e6:1f:35:0d:94:b4:03:72:19:7a: 2d:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:89:8C:05:27:B3:2F:26:6A:93:BB:F3:BE:FE:99:CE:DA:94:23:5C X509v3 Authority Key Identifier: keyid:36:64:29:2D:4F:D2:DF:F1:C8:84:17:50:FC:83:79:F1:94:5A:13:7E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912677F/C43D769663EC11EA97B72587C4F9AE02/NmQpLU_S3_HIhBdQ_IN58ZRaE34.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NmQpLU_S3_HIhBdQ_IN58ZRaE34.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912677F/C43D769663EC11EA97B72587C4F9AE02/NmQpLU_S3_HIhBdQ_IN58ZRaE34.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3c:d2:d8:ab:95:2e:b6:6a:5f:d6:35:1c:9b:1e:54:16:39:65: 5d:31:4a:36:07:39:83:33:66:50:96:4c:02:f1:3c:1c:eb:af: db:f7:b7:af:49:2c:de:4d:11:36:aa:8b:ed:76:29:c2:a1:b9: a1:b3:21:e2:a9:fb:a6:ea:c5:68:bb:b4:c1:62:5b:19:fd:a6: 2e:f6:5d:b3:a5:8d:4f:27:d0:90:f4:c6:91:3f:de:ef:39:cf: 1b:ed:fe:d1:13:a5:fb:96:a5:a4:db:ba:cf:5e:cc:ca:12:97: c6:97:bf:c1:ae:c5:2b:f2:94:a7:4a:f1:76:4c:0f:66:76:af: 04:1a:d4:88:e4:e2:45:43:ef:d6:11:53:91:58:4a:5b:73:08: 46:84:22:0a:ac:80:4a:a3:ce:31:d8:23:18:fa:29:32:16:d2: a1:3f:93:90:1c:7e:dd:7e:dc:ac:1f:cd:b2:1b:a9:c7:ec:9d: 91:be:79:18:66:b8:95:72:a1:a1:ba:7f:77:90:b0:7a:f9:1e: ea:09:07:a7:f6:d7:ed:2f:79:00:96:f9:31:6e:9e:8a:1b:8b: bc:ed:d7:36:d6:72:2f:fe:19:31:69:94:35:1a:61:ff:e7:d4: 32:24:95:55:5a:77:8e:12:1c:e5:07:44:99:ad:37:02:99:f9: 57:0b:b6:90 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICClMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjY3N0YxMTAvBgNVBAUTKDM2NjQyOTJENEZEMkRGRjFDODg0MTc1MEZDODM3OUYx OTQ1QTEzN0UwHhcNMjUwNDI0MTkzNTI0WhcNMjUwNTAxMTkzNTI0WjAYMRYwFAYD VQQDEw02ODBhOTI3Yy0zNmQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxhhO3zxkJjJxhXmwXn+99KUao/mgrrX2j9R+o2qrkth0B6l3JGRYvxwUOtc/ 2yNa/mGvhOxtadTiw66QOopMeVkCeyfTJSHlQZ724G9xNRwdsbqOQn+H2k3JP97P DpmdqQQAzVswpxTrS9JwJQsrKyUygf5q8ON4i9BJekXbjkGZ3vlKrCzFhtqodtGR 8ClyilwwFgadD9ULRsVaU+FWWBRM2Yn91vvbtSOu122K6yCR9nWvfGzkz+mqwuzz A4HcNIcWUwetKdbt57tvh4TDonDt869laLwE6Scy/lDzb5veufNW+EHfYQWB/HWA 6U8tnnpYS+YfNQ2UtANyGXotowIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD2JjAUn sy8mapO7877+mc7alCNcMB8GA1UdIwQYMBaAFDZkKS1P0t/xyIQXUPyDefGUWhN+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNjc3Ri9DNDNENzY5NjYz RUMxMUVBOTdCNzI1ODdDNEY5QUUwMi9ObVFwTFVfUzNfSEloQmRRX0lONThaUmFF MzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05tUXBMVV9TM19ISWhCZFFfSU41OFpSYUUzNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy Njc3Ri9DNDNENzY5NjYzRUMxMUVBOTdCNzI1ODdDNEY5QUUwMi9ObVFwTFVfUzNf SEloQmRRX0lONThaUmFFMzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA80tirlS62al/WNRybHlQWOWVdMUo2BzmDM2ZQlkwC8Twc66/b97ev SSzeTRE2qovtdinCobmhsyHiqfum6sVou7TBYlsZ/aYu9l2zpY1PJ9CQ9MaRP97v Oc8b7f7RE6X7lqWk27rPXszKEpfGl7/BrsUr8pSnSvF2TA9mdq8EGtSI5OJFQ+/W EVORWEpbcwhGhCIKrIBKo84x2CMY+ikyFtKhP5OQHH7dftysH82yG6nH7J2RvnkY ZriVcqGhun93kLB6+R7qCQen9tftL3kAlvkxbp6KG4u87dc21nIv/hkxaZQ1GmH/ 59QyJJVVWneOEhzlB0SZrTcCmflXC7aQ -----END CERTIFICATE-----Generated at Sat Apr 26 04:02:33 2025 by rpki-client