$ rpki-client -vvf rpki.apnic.net/member_repository/A914E01E/C5C6F05E9EA611EC8FB03654C4F9AE02/nlcX9fFLsp9ntXrX2dXweRWunEM.mft File: nlcX9fFLsp9ntXrX2dXweRWunEM.mft (raw, json) Hash identifier: xkUJKCYrCsYRAiv2vBfNW67Vy+PVhvWsoChpko7pSy4= Subject key identifier: CA:AB:FC:C8:74:A3:CF:C5:08:ED:8A:3B:0C:BA:C8:70:61:0E:B0:00 Authority key identifier: 9E:57:17:F5:F1:4B:B2:9F:67:B5:7A:D7:D9:D5:F0:79:15:AE:9C:43 Certificate issuer: /CN=A914E01E/serialNumber=9E5717F5F14BB29F67B57AD7D9D5F07915AE9C43 Certificate serial: 0384 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nlcX9fFLsp9ntXrX2dXweRWunEM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914E01E/C5C6F05E9EA611EC8FB03654C4F9AE02/nlcX9fFLsp9ntXrX2dXweRWunEM.mft Manifest number: 0380 Signing time: Fri 25 Apr 2025 00:36:58 +0000 Manifest this update: Fri 25 Apr 2025 00:36:58 +0000 Manifest next update: Fri 02 May 2025 00:36:58 +0000 Files and hashes: 1: nlcX9fFLsp9ntXrX2dXweRWunEM.crl (hash: hysNFMXYFj+0KEs+9puaToHda5pqnWw9NKyeRUT/q0w=) 2: B775BD7A9EA911EC95EBD87CC4F9AE02.roa (hash: 92HIEbj2G47MSTH5iEgpWYXExI9zDOC82XtCwVyLKgU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914E01E/C5C6F05E9EA611EC8FB03654C4F9AE02/nlcX9fFLsp9ntXrX2dXweRWunEM.crl rsync://rpki.apnic.net/member_repository/A914E01E/C5C6F05E9EA611EC8FB03654C4F9AE02/nlcX9fFLsp9ntXrX2dXweRWunEM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nlcX9fFLsp9ntXrX2dXweRWunEM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 00:36:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 900 (0x384) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914E01E, serialNumber=9E5717F5F14BB29F67B57AD7D9D5F07915AE9C43 Validity Not Before: Apr 25 00:36:58 2025 GMT Not After : May 2 00:36:58 2025 GMT Subject: CN=680ad92a-41d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:4c:56:c9:62:47:2b:d4:33:e9:35:d6:a7:d7: 76:91:d5:f2:5d:80:09:cb:6b:40:99:c3:14:76:40: 68:34:a0:af:d3:fa:bc:08:da:6a:50:ca:10:0a:aa: 14:ae:8b:ef:05:78:fc:cb:76:ec:ae:15:f8:65:72: a7:8a:93:6b:7f:d3:5a:3f:6c:e4:a2:81:1a:a3:69: 68:85:94:e5:49:ba:7e:f9:4f:53:a1:62:fe:2d:b5: 70:b8:2b:37:b1:f0:88:03:22:78:c3:8c:c0:29:5c: 6b:79:d9:bf:ce:ce:9e:b9:d0:c8:f2:01:60:bc:4a: ac:f2:37:e2:81:ec:e4:de:83:d5:c5:0c:4b:9c:76: 4e:6d:70:10:ea:13:c5:55:db:62:74:d6:a5:e5:d5: eb:3f:c3:db:6b:4b:5f:22:bd:3d:2a:19:66:44:c6: a3:15:11:0c:ca:0c:78:1d:b0:39:6e:15:4c:68:00: 46:56:7d:a9:83:4f:5f:91:81:0c:55:15:65:18:61: 58:64:7c:66:a8:a4:5c:be:9a:9d:85:cd:3d:b4:51: d7:df:03:09:59:ea:2b:8d:b0:f5:a1:ad:d2:90:50: 99:49:01:9e:2e:f5:e1:d5:01:f7:a4:73:2b:87:43: 9d:05:61:1b:78:a6:69:75:df:f7:d8:2c:7d:0e:b7: 6c:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:AB:FC:C8:74:A3:CF:C5:08:ED:8A:3B:0C:BA:C8:70:61:0E:B0:00 X509v3 Authority Key Identifier: keyid:9E:57:17:F5:F1:4B:B2:9F:67:B5:7A:D7:D9:D5:F0:79:15:AE:9C:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914E01E/C5C6F05E9EA611EC8FB03654C4F9AE02/nlcX9fFLsp9ntXrX2dXweRWunEM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nlcX9fFLsp9ntXrX2dXweRWunEM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E01E/C5C6F05E9EA611EC8FB03654C4F9AE02/nlcX9fFLsp9ntXrX2dXweRWunEM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 67:54:15:cc:d3:9f:a2:b4:f5:64:45:4e:58:0f:94:61:df:a0: a0:3c:5c:b4:8a:3d:e7:0e:be:9c:6a:54:e0:f2:e6:df:06:cd: cb:7d:ce:4c:b5:a2:90:e0:64:c1:b8:da:bf:85:67:99:48:dd: db:97:93:1a:27:98:b7:05:80:f5:5d:f3:ad:b8:fa:65:b4:04: e8:a6:7d:9a:62:53:ef:58:47:0c:27:b6:3c:cf:99:44:dc:95: b4:d9:3d:fd:c9:18:da:a6:1f:d7:c9:72:30:b3:04:82:81:86: 5b:1c:45:ab:20:4e:68:42:c9:fb:52:da:25:1e:ef:6c:e1:65: cd:4d:40:9b:45:ce:9f:aa:85:e6:56:4f:dd:ea:e5:ed:7c:a1: 60:fa:78:0a:45:ce:56:4c:3f:b2:8f:32:0c:07:d9:b0:86:32: e2:5c:ca:9d:e6:18:2f:4c:d3:ac:78:96:1b:9c:75:9a:c7:e5: 6d:6c:55:6d:01:92:05:24:4b:4a:96:0d:d0:fb:68:a3:5b:94: ee:12:ea:f2:6a:02:d3:3e:39:b5:b5:e3:1a:e3:18:f6:2f:ed: e2:69:fa:82:bd:86:a5:8c:3d:6c:b7:34:cb:f2:49:76:5f:29: 76:c7:95:89:2f:c0:a6:83:f3:ba:39:b3:87:ef:93:13:0a:73: 65:71:c6:d8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA4QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEUwMUUxMTAvBgNVBAUTKDlFNTcxN0Y1RjE0QkIyOUY2N0I1N0FEN0Q5RDVGMDc5 MTVBRTlDNDMwHhcNMjUwNDI1MDAzNjU4WhcNMjUwNTAyMDAzNjU4WjAYMRYwFAYD VQQDEw02ODBhZDkyYS00MWQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyUxWyWJHK9Qz6TXWp9d2kdXyXYAJy2tAmcMUdkBoNKCv0/q8CNpqUMoQCqoU rovvBXj8y3bsrhX4ZXKnipNrf9NaP2zkooEao2lohZTlSbp++U9ToWL+LbVwuCs3 sfCIAyJ4w4zAKVxredm/zs6eudDI8gFgvEqs8jfigezk3oPVxQxLnHZObXAQ6hPF VdtidNal5dXrP8Pba0tfIr09KhlmRMajFREMygx4HbA5bhVMaABGVn2pg09fkYEM VRVlGGFYZHxmqKRcvpqdhc09tFHX3wMJWeorjbD1oa3SkFCZSQGeLvXh1QH3pHMr h0OdBWEbeKZpdd/32Cx9DrdsJQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMqr/Mh0 o8/FCO2KOwy6yHBhDrAAMB8GA1UdIwQYMBaAFJ5XF/XxS7KfZ7V619nV8HkVrpxD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RTAxRS9DNUM2RjA1RTlF QTYxMUVDOEZCMDM2NTRDNEY5QUUwMi9ubGNYOWZGTHNwOW50WHJYMmRYd2VSV3Vu RU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25sY1g5ZkZMc3A5bnRYclgyZFh3ZVJXdW5FTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RTAxRS9DNUM2RjA1RTlFQTYxMUVDOEZCMDM2NTRDNEY5QUUwMi9ubGNYOWZGTHNw OW50WHJYMmRYd2VSV3VuRU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBnVBXM05+itPVkRU5YD5Rh36CgPFy0ij3nDr6calTg8ubfBs3Lfc5M taKQ4GTBuNq/hWeZSN3bl5MaJ5i3BYD1XfOtuPpltATopn2aYlPvWEcMJ7Y8z5lE 3JW02T39yRjaph/XyXIwswSCgYZbHEWrIE5oQsn7UtolHu9s4WXNTUCbRc6fqoXm Vk/d6uXtfKFg+ngKRc5WTD+yjzIMB9mwhjLiXMqd5hgvTNOseJYbnHWax+VtbFVt AZIFJEtKlg3Q+2ijW5TuEuryagLTPjm1teMa4xj2L+3iafqCvYaljD1stzTL8kl2 Xyl2x5WJL8Cmg/O6ObOH75MTCnNlccbY -----END CERTIFICATE-----Generated at Sat Apr 26 16:57:53 2025 by rpki-client