$ rpki-client -vvf rpki.apnic.net/member_repository/A9146251/0B16EAA4D87111EF98C26075C4F9AE02/Ngx8e1xsaakGnYJb8ccK8gjaM3s.mft File: Ngx8e1xsaakGnYJb8ccK8gjaM3s.mft (raw, json) Hash identifier: vz+4oHP21PonekkpI8RzJYY+ThtIA00cdaA0y1TaPpM= Subject key identifier: 88:4E:06:E2:3C:CF:15:8C:34:ED:7F:4E:28:5B:B4:EA:7A:00:26:AF Authority key identifier: 36:0C:7C:7B:5C:6C:69:A9:06:9D:82:5B:F1:C7:0A:F2:08:DA:33:7B Certificate issuer: /CN=A9146251/serialNumber=360C7C7B5C6C69A9069D825BF1C70AF208DA337B Certificate serial: 32 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Ngx8e1xsaakGnYJb8ccK8gjaM3s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9146251/0B16EAA4D87111EF98C26075C4F9AE02/Ngx8e1xsaakGnYJb8ccK8gjaM3s.mft Manifest number: 32 Signing time: Fri 25 Apr 2025 06:38:32 +0000 Manifest this update: Fri 25 Apr 2025 06:38:32 +0000 Manifest next update: Fri 02 May 2025 06:38:32 +0000 Files and hashes: 1: Ngx8e1xsaakGnYJb8ccK8gjaM3s.crl (hash: ampXmn+lvpRL8MuXblumH2VbbJfq1Gl2dnKckTl3n04=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9146251/0B16EAA4D87111EF98C26075C4F9AE02/Ngx8e1xsaakGnYJb8ccK8gjaM3s.crl rsync://rpki.apnic.net/member_repository/A9146251/0B16EAA4D87111EF98C26075C4F9AE02/Ngx8e1xsaakGnYJb8ccK8gjaM3s.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Ngx8e1xsaakGnYJb8ccK8gjaM3s.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 06:38:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50 (0x32) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9146251, serialNumber=360C7C7B5C6C69A9069D825BF1C70AF208DA337B Validity Not Before: Apr 25 06:38:32 2025 GMT Not After : May 2 06:38:32 2025 GMT Subject: CN=680b2de8-8bb0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:c1:da:fc:92:ac:69:c3:80:8f:bf:e5:bc:de: 3b:54:bb:27:d9:55:e4:f1:a1:2d:e6:b8:fc:56:f5: e0:38:63:52:31:29:19:f0:bc:a3:4d:dc:ef:9b:b0: 37:e1:64:b9:e2:92:75:5a:88:08:05:1b:91:5b:dc: 52:6d:64:ff:f9:b9:74:f7:5b:4c:2b:29:97:f9:53: 49:de:91:bd:47:fa:9b:e1:2d:91:8b:36:2d:a8:67: a6:d3:ce:74:ef:32:07:8b:dd:89:24:c2:ef:98:01: e5:bf:54:a3:5b:84:06:97:91:19:6a:0e:eb:ac:d5: 41:b2:04:c4:70:5f:7d:8a:ae:92:ed:8e:5f:b2:69: 97:55:04:8c:8d:2f:22:cc:45:f0:8f:d3:ce:cc:d0: 22:3c:b9:45:a9:38:6d:47:b4:e4:89:fa:fa:94:9c: f5:a4:fa:60:7e:ba:8c:9d:c4:6c:ff:50:43:67:72: ad:91:d2:21:41:d2:70:be:ec:95:02:50:7a:0d:8a: c6:82:95:85:bf:0c:c5:fb:10:59:4c:36:77:d7:54: 29:db:c0:d1:f1:ae:7f:8d:25:6a:18:b1:55:13:76: 51:94:bc:a4:3f:06:8f:63:e1:e4:82:c9:d4:a8:26: 41:7d:9f:e3:99:79:26:33:33:38:93:42:48:1b:59: bc:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:4E:06:E2:3C:CF:15:8C:34:ED:7F:4E:28:5B:B4:EA:7A:00:26:AF X509v3 Authority Key Identifier: keyid:36:0C:7C:7B:5C:6C:69:A9:06:9D:82:5B:F1:C7:0A:F2:08:DA:33:7B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9146251/0B16EAA4D87111EF98C26075C4F9AE02/Ngx8e1xsaakGnYJb8ccK8gjaM3s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Ngx8e1xsaakGnYJb8ccK8gjaM3s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146251/0B16EAA4D87111EF98C26075C4F9AE02/Ngx8e1xsaakGnYJb8ccK8gjaM3s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8b:dd:48:92:d0:05:6b:08:7a:fe:7a:25:2d:4c:1f:0d:98:c0: 81:26:f2:68:b5:dc:bc:3c:8c:11:fd:bd:61:01:dd:e8:58:bd: a7:d9:75:27:e4:a5:84:87:7f:65:04:1b:c5:09:f5:08:e9:86: b1:fd:01:dc:4d:b8:80:93:b7:7c:8a:0b:83:66:d4:bb:92:58: b9:0a:33:cf:be:4c:c4:f9:bd:7f:ab:37:82:2d:4a:66:13:36: 3f:27:c6:84:9c:ff:9e:b3:71:46:04:e5:7d:85:0a:b9:d7:c6: d8:73:21:3a:7a:56:9e:4b:04:4b:b3:d8:73:e5:c7:21:4b:29: d3:0b:12:ff:9e:f8:c0:eb:b4:6a:d7:71:76:34:83:af:a9:61: 84:68:a0:7c:a7:2e:dd:01:96:25:06:98:c7:ff:c6:64:9c:f7: df:86:3f:5f:3e:26:46:d9:3b:e9:10:8c:5a:fc:1a:65:04:fa: a2:9c:81:a8:cf:6c:e8:10:f2:e3:18:43:f1:12:64:9e:53:4c: bd:dd:af:c4:e9:1f:87:db:46:d8:90:29:b8:87:00:68:20:33: f0:30:98:8d:f1:bf:02:df:55:8d:a8:b9:28:e5:e4:1d:3d:68: f8:e5:44:bb:ca:80:43:3d:44:97:36:e3:d9:24:c0:75:4b:5c: 5b:57:48:2e -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBMjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 NjI1MTExMC8GA1UEBRMoMzYwQzdDN0I1QzZDNjlBOTA2OUQ4MjVCRjFDNzBBRjIw OERBMzM3QjAeFw0yNTA0MjUwNjM4MzJaFw0yNTA1MDIwNjM4MzJaMBgxFjAUBgNV BAMTDTY4MGIyZGU4LThiYjAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDJwdr8kqxpw4CPv+W83jtUuyfZVeTxoS3muPxW9eA4Y1IxKRnwvKNN3O+bsDfh ZLniknVaiAgFG5Fb3FJtZP/5uXT3W0wrKZf5U0nekb1H+pvhLZGLNi2oZ6bTznTv MgeL3Ykkwu+YAeW/VKNbhAaXkRlqDuus1UGyBMRwX32KrpLtjl+yaZdVBIyNLyLM RfCP087M0CI8uUWpOG1HtOSJ+vqUnPWk+mB+uoydxGz/UENncq2R0iFB0nC+7JUC UHoNisaClYW/DMX7EFlMNnfXVCnbwNHxrn+NJWoYsVUTdlGUvKQ/Bo9j4eSCydSo JkF9n+OZeSYzMziTQkgbWby9AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUiE4G4jzP FYw07X9OKFu06noAJq8wHwYDVR0jBBgwFoAUNgx8e1xsaakGnYJb8ccK8gjaM3sw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ2MjUxLzBCMTZFQUE0RDg3 MTExRUY5OEMyNjA3NUM0RjlBRTAyL05neDhlMXhzYWFrR25ZSmI4Y2NLOGdqYU0z cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjMyMkE1RjQxRDY2MTFFMkEzRjI3RjdDNzJG RDFGRjIvTmd4OGUxeHNhYWtHbllKYjhjY0s4Z2phTTNzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ2 MjUxLzBCMTZFQUE0RDg3MTExRUY5OEMyNjA3NUM0RjlBRTAyL05neDhlMXhzYWFr R25ZSmI4Y2NLOGdqYU0zcy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAIvdSJLQBWsIev56JS1MHw2YwIEm8mi13Lw8jBH9vWEB3ehYvafZdSfk pYSHf2UEG8UJ9QjphrH9AdxNuICTt3yKC4Nm1LuSWLkKM8++TMT5vX+rN4ItSmYT Nj8nxoSc/56zcUYE5X2FCrnXxthzITp6Vp5LBEuz2HPlxyFLKdMLEv+e+MDrtGrX cXY0g6+pYYRooHynLt0BliUGmMf/xmSc99+GP18+JkbZO+kQjFr8GmUE+qKcgajP bOgQ8uMYQ/ESZJ5TTL3dr8TpH4fbRtiQKbiHAGggM/AwmI3xvwLfVY2ouSjl5B09 aPjlRLvKgEM9RJc249kkwHVLXFtXSC4= -----END CERTIFICATE-----Generated at Sat Apr 26 15:03:53 2025 by rpki-client