$ rpki-client -vvf rpki.apnic.net/member_repository/A9131690/15B41B8863F311E9A0854C47C4F9AE02/NHTJTDbo-aDToNIuHdoQjNNAqyg.mft File: NHTJTDbo-aDToNIuHdoQjNNAqyg.mft (raw, json) Hash identifier: Fzq79yrDRMAD8VgIZoC5qaweHyM1INli7PXvaCLKCH0= Subject key identifier: A2:C6:01:9F:C3:06:22:32:EF:E0:70:40:92:02:CB:DA:F2:E8:C9:88 Authority key identifier: 34:74:C9:4C:36:E8:F9:A0:D3:A0:D2:2E:1D:DA:10:8C:D3:40:AB:28 Certificate issuer: /CN=A9131690/serialNumber=3474C94C36E8F9A0D3A0D22E1DDA108CD340AB28 Certificate serial: 0F91 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NHTJTDbo-aDToNIuHdoQjNNAqyg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9131690/15B41B8863F311E9A0854C47C4F9AE02/NHTJTDbo-aDToNIuHdoQjNNAqyg.mft Manifest number: 0F68 Signing time: Thu 24 Apr 2025 17:33:29 +0000 Manifest this update: Thu 24 Apr 2025 17:33:29 +0000 Manifest next update: Thu 01 May 2025 17:33:29 +0000 Files and hashes: 1: NHTJTDbo-aDToNIuHdoQjNNAqyg.crl (hash: SJ19f9BXK3bE2qKJrf60vsfU41Fd7HOLo5QoDZrdPhQ=) 2: B2B24A4221D711EB9CFAC46EC4F9AE02.roa (hash: WopX8EPUj9ND6qcXFWft9CyuoZSX2+UxPu40b2aj+pc=) 3: B3682FEC21D711EB9CFAC46EC4F9AE02.roa (hash: 77t9c6veUMOt4XPOFIwWe8FztnDBdg3DuRHonRmM4pA=) 4: A7BDC50C7A4811EBA907BB5BC4F9AE02.roa (hash: 0RWvLgLQMfYKcMt6aIpCTG3MXhhitrR5pPiP2zQ4NcY=) 5: B47C278021D711EB9CFAC46EC4F9AE02.roa (hash: kt6+dcMSnt8HtFoNHoxve7SwNMn6XsQ5fmhhFuEOZOM=) 6: 5E0253B6232111EB9896B783C4F9AE02.roa (hash: S7XAN9hoPkMQD1dwIo9UheEK0CbHpWptDyxJHPNt49g=) 7: 08CD1510027011EB98FEC44BC4F9AE02.roa (hash: KmlW5cxQJtlnajXFs7j5PHn6wJjQG7ZZKRzUGo5l5KM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9131690/15B41B8863F311E9A0854C47C4F9AE02/NHTJTDbo-aDToNIuHdoQjNNAqyg.crl rsync://rpki.apnic.net/member_repository/A9131690/15B41B8863F311E9A0854C47C4F9AE02/NHTJTDbo-aDToNIuHdoQjNNAqyg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NHTJTDbo-aDToNIuHdoQjNNAqyg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 17:33:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3985 (0xf91) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9131690, serialNumber=3474C94C36E8F9A0D3A0D22E1DDA108CD340AB28 Validity Not Before: Apr 24 17:33:29 2025 GMT Not After : May 1 17:33:29 2025 GMT Subject: CN=680a75e9-7410 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:2a:eb:7a:49:35:03:b2:71:aa:8b:9c:20:e7: 4a:2a:6e:a8:12:5c:78:db:95:f4:3f:32:a9:29:b9: 6f:39:86:7b:c5:4c:87:77:c9:3f:24:a2:f8:6c:de: 44:1b:c1:6d:77:a6:cb:27:ad:b8:24:ae:a1:a7:1e: 93:3f:ed:b9:b3:6b:8c:0c:9d:4b:03:31:02:84:33: ea:5f:d6:e6:e8:54:89:46:ea:ad:06:15:72:25:c1: f9:58:fe:f5:4a:66:fe:ba:61:23:55:f3:50:1b:66: e3:a2:b3:fb:76:28:d1:88:42:9f:53:49:ec:f9:1c: b2:4d:67:95:cc:0c:e8:e0:dd:17:a5:bc:d9:75:ee: 99:1d:ba:f5:4c:9d:99:23:a5:de:c1:ae:93:50:2e: 7d:29:ed:a4:ce:5c:5a:be:79:e9:7f:68:8c:66:07: f8:54:b7:e1:15:09:87:f7:f5:b0:ca:98:c5:09:23: cf:83:b5:2d:37:ed:4b:66:d4:69:41:75:44:39:87: 45:1d:aa:5a:2f:54:99:5d:56:73:ea:29:0c:06:a6: ce:f1:8e:08:1b:e1:54:bc:c6:5a:d3:85:9e:67:83: c1:e9:c1:fc:f4:21:c0:23:6c:98:ed:a7:fa:26:62: 98:45:69:5c:b1:0c:bd:c4:e6:20:3a:11:7e:51:f5: a4:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:C6:01:9F:C3:06:22:32:EF:E0:70:40:92:02:CB:DA:F2:E8:C9:88 X509v3 Authority Key Identifier: keyid:34:74:C9:4C:36:E8:F9:A0:D3:A0:D2:2E:1D:DA:10:8C:D3:40:AB:28 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9131690/15B41B8863F311E9A0854C47C4F9AE02/NHTJTDbo-aDToNIuHdoQjNNAqyg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NHTJTDbo-aDToNIuHdoQjNNAqyg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9131690/15B41B8863F311E9A0854C47C4F9AE02/NHTJTDbo-aDToNIuHdoQjNNAqyg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 15:0f:0e:94:3c:0f:b8:75:25:62:54:07:43:0b:12:c6:cb:24: ba:50:0d:b7:92:d5:de:d4:0c:24:ae:75:b3:ed:93:7f:61:79: ca:ab:e4:cc:21:9e:07:06:d9:d9:ec:13:d9:b1:e2:37:f5:16: 05:6c:b1:99:ba:05:07:5d:d2:81:a3:7d:46:5e:d0:f8:ff:06: 24:f0:8c:09:a3:4a:5e:eb:5c:2d:7d:60:ba:8c:d0:83:e7:b1: 9d:7b:0e:f2:cf:f0:91:f9:81:68:76:ba:ff:6e:ca:99:eb:04: c0:ac:16:69:52:77:4e:3e:82:e6:7a:84:e1:9b:fe:04:36:4d: 9a:d5:ac:34:0c:0b:06:41:f6:62:13:13:3f:87:90:0f:b1:af: 4f:1f:dc:05:dc:a7:54:26:d3:b7:73:9e:dd:d6:d6:bc:fc:9d: 2a:90:af:50:47:e9:01:bf:e5:6b:26:a8:ac:02:10:65:be:24: fb:c6:e1:a3:1b:41:7d:8f:09:68:0c:aa:ce:ff:34:40:d0:a1: 70:a6:98:a7:1c:27:43:6c:f5:9a:04:39:90:cb:ff:0f:1c:27: b7:39:4d:0e:73:62:87:2c:2a:28:b9:59:fb:de:08:d0:45:25: 4f:33:07:c1:fd:67:6f:e4:a9:c7:80:bf:fb:a0:66:46:db:c8: c2:b8:5a:e6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICD5EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzE2OTAxMTAvBgNVBAUTKDM0NzRDOTRDMzZFOEY5QTBEM0EwRDIyRTFEREExMDhD RDM0MEFCMjgwHhcNMjUwNDI0MTczMzI5WhcNMjUwNTAxMTczMzI5WjAYMRYwFAYD VQQDEw02ODBhNzVlOS03NDEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8Srrekk1A7JxqoucIOdKKm6oElx425X0PzKpKblvOYZ7xUyHd8k/JKL4bN5E G8Ftd6bLJ624JK6hpx6TP+25s2uMDJ1LAzEChDPqX9bm6FSJRuqtBhVyJcH5WP71 Smb+umEjVfNQG2bjorP7dijRiEKfU0ns+RyyTWeVzAzo4N0XpbzZde6ZHbr1TJ2Z I6Xewa6TUC59Ke2kzlxavnnpf2iMZgf4VLfhFQmH9/WwypjFCSPPg7UtN+1LZtRp QXVEOYdFHapaL1SZXVZz6ikMBqbO8Y4IG+FUvMZa04WeZ4PB6cH89CHAI2yY7af6 JmKYRWlcsQy9xOYgOhF+UfWkZQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKLGAZ/D BiIy7+BwQJICy9ry6MmIMB8GA1UdIwQYMBaAFDR0yUw26Pmg06DSLh3aEIzTQKso MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMTY5MC8xNUI0MUI4ODYz RjMxMUU5QTA4NTRDNDdDNEY5QUUwMi9OSFRKVERiby1hRFRvTkl1SGRvUWpOTkFx eWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05IVEpURGJvLWFEVG9OSXVIZG9Rak5OQXF5Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MTY5MC8xNUI0MUI4ODYzRjMxMUU5QTA4NTRDNDdDNEY5QUUwMi9OSFRKVERiby1h RFRvTkl1SGRvUWpOTkFxeWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAVDw6UPA+4dSViVAdDCxLGyyS6UA23ktXe1AwkrnWz7ZN/YXnKq+TM IZ4HBtnZ7BPZseI39RYFbLGZugUHXdKBo31GXtD4/wYk8IwJo0pe61wtfWC6jNCD 57Gdew7yz/CR+YFodrr/bsqZ6wTArBZpUndOPoLmeoThm/4ENk2a1aw0DAsGQfZi ExM/h5APsa9PH9wF3KdUJtO3c57d1ta8/J0qkK9QR+kBv+VrJqisAhBlviT7xuGj G0F9jwloDKrO/zRA0KFwppinHCdDbPWaBDmQy/8PHCe3OU0Oc2KHLCoouVn73gjQ RSVPMwfB/Wdv5KnHgL/7oGZG28jCuFrm -----END CERTIFICATE-----Generated at Sat Apr 26 13:05:47 2025 by rpki-client