$ rpki-client -vvf rpki.apnic.net/member_repository/A91452AC/A48D5966BB3E11EAA29EE321C4F9AE02/Ntd-kkOrui_VSWopGDC304sLy8Q.mft File: Ntd-kkOrui_VSWopGDC304sLy8Q.mft (raw, json) Hash identifier: SVKGJk2XqdhmFJ7R9beHJYgdCyBXjTfAGa6HZnNiSDM= Subject key identifier: 12:40:F4:DA:58:2E:FB:2E:74:3A:10:02:3A:D9:64:DB:EC:B9:0F:1C Authority key identifier: 36:D7:7E:92:43:AB:BA:2F:D5:49:6A:29:18:30:B7:D3:8B:0B:CB:C4 Certificate issuer: /CN=A91452AC/serialNumber=36D77E9243ABBA2FD5496A291830B7D38B0BCBC4 Certificate serial: 08B8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ntd-kkOrui_VSWopGDC304sLy8Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91452AC/A48D5966BB3E11EAA29EE321C4F9AE02/Ntd-kkOrui_VSWopGDC304sLy8Q.mft Manifest number: 089C Signing time: Thu 24 Apr 2025 20:27:10 +0000 Manifest this update: Thu 24 Apr 2025 20:27:09 +0000 Manifest next update: Thu 01 May 2025 20:27:09 +0000 Files and hashes: 1: Ntd-kkOrui_VSWopGDC304sLy8Q.crl (hash: oC/z8lLWb1rxbYKTwqUbo8Bxn1feu8NMbpiPUSX0zl4=) 2: B453EBC4BB4011EAAF70B028C4F9AE02.roa (hash: Nz/7xCUgKfmqkXApuxeo5myCUO+mgajFtNE4r7Ggzao=) 3: A58B9338AD4A11EBA6B48687C4F9AE02.roa (hash: 9S3WJERMTtwQwqkFdyQh2FAfBQXuWIoDgdAQjyhftzk=) 4: 72E60DEA3CC911EDA5EBD21DC4F9AE02.roa (hash: zq2Qkn/Tk6HTf9mmAUUEV4eovm/AM6TvEoGB/VFCywQ=) 5: 0F91DE9EAD4C11EB903C150DC4F9AE02.roa (hash: KYXdBuY8eVoROAmSDw7JnT54RB6WWf5lcCmMUouYwzY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91452AC/A48D5966BB3E11EAA29EE321C4F9AE02/Ntd-kkOrui_VSWopGDC304sLy8Q.crl rsync://rpki.apnic.net/member_repository/A91452AC/A48D5966BB3E11EAA29EE321C4F9AE02/Ntd-kkOrui_VSWopGDC304sLy8Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ntd-kkOrui_VSWopGDC304sLy8Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 20:27:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2232 (0x8b8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91452AC, serialNumber=36D77E9243ABBA2FD5496A291830B7D38B0BCBC4 Validity Not Before: Apr 24 20:27:09 2025 GMT Not After : May 1 20:27:09 2025 GMT Subject: CN=680a9e9e-a3c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:47:1f:cf:19:74:71:78:64:e5:58:43:b1:0c: 54:4d:22:6f:b5:cb:81:12:9b:9b:66:41:73:2f:46: 07:04:ba:ae:da:03:27:f6:6a:7c:17:d2:57:25:3e: e2:24:65:a6:83:01:c0:c3:9e:de:a0:2b:76:ef:08: 49:71:18:1e:4a:46:00:2d:06:df:74:66:fa:a1:75: 8b:79:a7:71:fe:d3:6a:a4:e1:ca:9b:3c:b5:28:f5: ab:50:52:a0:6d:f4:54:18:c9:8d:b5:01:31:5c:b3: b9:28:c5:ce:e7:2d:5e:af:a6:e0:df:3f:13:99:6e: b5:d2:93:93:27:56:19:13:d0:e8:46:06:3e:03:dc: b6:73:f9:df:e2:43:61:0c:24:4d:45:48:86:70:40: 52:35:0c:41:47:e9:db:0f:ce:dc:a7:eb:80:4e:8d: 0e:e9:9c:27:48:40:92:e6:b4:a4:2e:c5:64:d6:00: 07:93:7c:d0:71:bc:81:f8:f3:73:14:61:97:21:31: 2a:8b:b3:dc:35:1b:16:fb:ed:01:91:4a:3b:76:42: 79:97:c6:ee:87:39:0f:96:3e:3e:58:6c:84:d3:15: c6:3f:01:a6:54:6d:16:ac:6a:74:2b:12:3c:02:af: 32:a6:dc:ad:6c:39:64:8d:af:72:88:6b:d3:3b:ef: 43:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:40:F4:DA:58:2E:FB:2E:74:3A:10:02:3A:D9:64:DB:EC:B9:0F:1C X509v3 Authority Key Identifier: keyid:36:D7:7E:92:43:AB:BA:2F:D5:49:6A:29:18:30:B7:D3:8B:0B:CB:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91452AC/A48D5966BB3E11EAA29EE321C4F9AE02/Ntd-kkOrui_VSWopGDC304sLy8Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ntd-kkOrui_VSWopGDC304sLy8Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91452AC/A48D5966BB3E11EAA29EE321C4F9AE02/Ntd-kkOrui_VSWopGDC304sLy8Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 06:65:30:f5:71:2d:69:db:4a:7c:79:55:b3:24:ad:7a:3c:4d: d4:0f:28:20:97:3a:e1:60:2e:75:31:85:ce:d2:63:14:58:78: cd:f2:b9:2a:45:a8:5f:18:74:5b:29:eb:65:cb:50:75:7e:00: 6d:8a:97:f6:a0:89:32:3a:c9:18:a8:ff:7b:92:e1:e0:7c:d9: f1:cb:58:9a:6a:e8:67:38:97:ad:7d:18:e5:65:4d:cf:d2:03: 24:72:c4:7f:8a:16:ae:52:17:5a:13:36:15:ed:09:20:1a:ba: 9e:10:0c:f9:67:8a:6f:d8:39:40:ad:22:41:1b:df:24:7f:18: a4:45:ff:4d:6b:0e:dd:0c:40:f8:9c:54:dd:ce:c7:90:00:12: 80:2a:94:a3:5a:a8:f9:40:a2:53:c6:b2:06:5b:70:b8:83:b3: 7d:f0:e2:d9:4d:42:40:30:95:c9:4c:eb:77:d2:38:4f:0d:e6: a8:e6:80:f5:a5:a6:40:fd:10:c5:3b:fc:d4:97:7e:6b:8f:d5: ba:dc:80:f7:9a:6f:c5:ad:f3:32:8e:39:88:80:8e:4d:4f:bf: 29:a2:0b:5e:2b:7e:bf:e1:18:9c:38:8a:cc:fc:38:66:ec:53: d8:be:fa:a0:da:be:9c:f1:06:98:9a:6e:5f:0c:5c:a8:1b:2b: c9:4d:c8:4a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCLgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDUyQUMxMTAvBgNVBAUTKDM2RDc3RTkyNDNBQkJBMkZENTQ5NkEyOTE4MzBCN0Qz OEIwQkNCQzQwHhcNMjUwNDI0MjAyNzA5WhcNMjUwNTAxMjAyNzA5WjAYMRYwFAYD VQQDEw02ODBhOWU5ZS1hM2M1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvkcfzxl0cXhk5VhDsQxUTSJvtcuBEpubZkFzL0YHBLqu2gMn9mp8F9JXJT7i JGWmgwHAw57eoCt27whJcRgeSkYALQbfdGb6oXWLeadx/tNqpOHKmzy1KPWrUFKg bfRUGMmNtQExXLO5KMXO5y1er6bg3z8TmW610pOTJ1YZE9DoRgY+A9y2c/nf4kNh DCRNRUiGcEBSNQxBR+nbD87cp+uATo0O6ZwnSECS5rSkLsVk1gAHk3zQcbyB+PNz FGGXITEqi7PcNRsW++0BkUo7dkJ5l8buhzkPlj4+WGyE0xXGPwGmVG0WrGp0KxI8 Aq8yptytbDlkja9yiGvTO+9DRwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBJA9NpY LvsudDoQAjrZZNvsuQ8cMB8GA1UdIwQYMBaAFDbXfpJDq7ov1UlqKRgwt9OLC8vE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NTJBQy9BNDhENTk2NkJC M0UxMUVBQTI5RUUzMjFDNEY5QUUwMi9OdGQta2tPcnVpX1ZTV29wR0RDMzA0c0x5 OFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL050ZC1ra09ydWlfVlNXb3BHREMzMDRzTHk4US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NTJBQy9BNDhENTk2NkJCM0UxMUVBQTI5RUUzMjFDNEY5QUUwMi9OdGQta2tPcnVp X1ZTV29wR0RDMzA0c0x5OFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAGZTD1cS1p20p8eVWzJK16PE3UDygglzrhYC51MYXO0mMUWHjN8rkq RahfGHRbKetly1B1fgBtipf2oIkyOskYqP97kuHgfNnxy1iaauhnOJetfRjlZU3P 0gMkcsR/ihauUhdaEzYV7QkgGrqeEAz5Z4pv2DlArSJBG98kfxikRf9Naw7dDED4 nFTdzseQABKAKpSjWqj5QKJTxrIGW3C4g7N98OLZTUJAMJXJTOt30jhPDeao5oD1 paZA/RDFO/zUl35rj9W63ID3mm/FrfMyjjmIgI5NT78pogteK36/4RicOIrM/Dhm 7FPYvvqg2r6c8QaYmm5fDFyoGyvJTchK -----END CERTIFICATE-----Generated at Sat Apr 26 04:31:40 2025 by rpki-client