$ rpki-client -vvf rpki.apnic.net/member_repository/A91577A2/8BC15C407B0411EA9DAAD432C4F9AE02/NtqOcqrHflUzc5DvTGHJVAtFldc.mft File: NtqOcqrHflUzc5DvTGHJVAtFldc.mft (raw, json) Hash identifier: hiWaq/2S3LqIo1IClxxt3pExXA4RdC2N1VvLnhPCJ10= Subject key identifier: 9E:18:4A:B0:B6:74:18:B7:24:75:A4:09:DA:92:FF:43:61:0E:A1:B9 Authority key identifier: 36:DA:8E:72:AA:C7:7E:55:33:73:90:EF:4C:61:C9:54:0B:45:95:D7 Certificate issuer: /CN=A91577A2/serialNumber=36DA8E72AAC77E55337390EF4C61C9540B4595D7 Certificate serial: 0A01 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NtqOcqrHflUzc5DvTGHJVAtFldc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91577A2/8BC15C407B0411EA9DAAD432C4F9AE02/NtqOcqrHflUzc5DvTGHJVAtFldc.mft Manifest number: 09ED Signing time: Sat 26 Apr 2025 19:42:47 +0000 Manifest this update: Sat 26 Apr 2025 19:42:47 +0000 Manifest next update: Sat 03 May 2025 19:42:47 +0000 Files and hashes: 1: NtqOcqrHflUzc5DvTGHJVAtFldc.crl (hash: //VZN03NMW4ZW9+5x2v5oD12L6QZePIzvM33+w+GAmQ=) 2: 6A23E166499211ED879F2D11C4F9AE02.roa (hash: menbjtgG3OL9FP2gHIv3HpKwGpwOaKUkt24pbDLYnNA=) 3: 6B5765BC499211ED879F2D11C4F9AE02.roa (hash: bMJemH5ceUwe7SSoHueO95SQnaFhnEbPA4cUZ9QObys=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91577A2/8BC15C407B0411EA9DAAD432C4F9AE02/NtqOcqrHflUzc5DvTGHJVAtFldc.crl rsync://rpki.apnic.net/member_repository/A91577A2/8BC15C407B0411EA9DAAD432C4F9AE02/NtqOcqrHflUzc5DvTGHJVAtFldc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NtqOcqrHflUzc5DvTGHJVAtFldc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 May 2025 19:42:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2561 (0xa01) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91577A2, serialNumber=36DA8E72AAC77E55337390EF4C61C9540B4595D7 Validity Not Before: Apr 26 19:42:47 2025 GMT Not After : May 3 19:42:47 2025 GMT Subject: CN=680d3737-4044 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:a5:03:3d:76:5d:2e:46:03:d7:c7:71:12:53: 35:0b:2e:10:d0:44:d1:da:48:4a:cc:42:4c:2b:ed: 94:08:c1:5f:d5:eb:61:36:72:c1:12:b8:bf:f5:53: 34:ab:5a:7d:1e:84:80:c7:4d:b2:de:a1:99:ec:8e: 9f:61:94:9c:5e:da:a3:9d:7c:3a:f6:f2:43:ba:21: 48:15:e7:3d:4f:4e:4c:42:43:cb:db:f6:ee:f8:9a: 69:ca:0a:d2:9d:62:a3:1e:cc:d1:c1:c4:6b:0f:28: 16:5a:d3:80:de:36:cb:b9:6a:ee:b8:a4:71:1d:12: 87:d3:c1:29:62:f9:f0:a9:f6:a8:87:0e:85:1f:07: 0a:83:14:1b:39:d8:c3:1b:a0:60:f7:1d:a3:76:f0: 2e:42:41:8e:2d:bf:94:35:cb:be:ad:ba:f2:92:80: 87:9a:75:a4:9b:d2:c8:2c:e4:48:5c:cb:4f:f3:a6: 78:7d:7c:60:16:38:e5:3a:45:19:2f:7a:a0:80:8c: d8:b1:da:63:5a:a6:c2:c3:f0:21:5c:d5:0b:df:16: 8f:e8:7a:d1:33:7a:cc:1b:a5:9c:dd:1b:b6:52:7c: 41:7a:61:94:61:37:92:3d:30:ae:8b:84:2f:6f:95: 54:56:20:23:9c:66:31:96:df:0f:f8:96:17:3d:63: 0e:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:18:4A:B0:B6:74:18:B7:24:75:A4:09:DA:92:FF:43:61:0E:A1:B9 X509v3 Authority Key Identifier: keyid:36:DA:8E:72:AA:C7:7E:55:33:73:90:EF:4C:61:C9:54:0B:45:95:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91577A2/8BC15C407B0411EA9DAAD432C4F9AE02/NtqOcqrHflUzc5DvTGHJVAtFldc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NtqOcqrHflUzc5DvTGHJVAtFldc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91577A2/8BC15C407B0411EA9DAAD432C4F9AE02/NtqOcqrHflUzc5DvTGHJVAtFldc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 79:00:c4:c3:5e:b2:98:d5:5e:23:e2:8d:6a:1c:f8:ad:87:49: df:ba:f6:91:99:58:b0:69:a2:86:16:61:cc:49:43:fd:36:92: 99:1e:f7:78:82:99:11:21:e8:e4:1a:a7:09:f5:a5:ec:5b:65: 20:23:f4:32:5b:43:aa:7e:cf:31:84:13:8a:5c:35:7a:54:bc: 7e:f7:03:de:a2:f2:66:99:14:7f:c1:8c:d5:bf:44:c5:b7:26: d9:aa:23:54:5a:6e:b6:77:9d:be:9e:18:95:8b:25:b9:12:b3: a9:9e:66:7d:53:e1:12:ac:29:7f:69:a6:47:fe:4f:97:3b:08: e4:25:67:aa:59:af:dd:8e:43:2f:56:59:b7:29:4a:9b:69:cd: 77:e7:00:ed:13:a7:4d:7a:bb:97:89:4c:19:bf:42:12:0b:69: 06:09:1f:86:66:6a:50:6f:3a:e9:60:96:b8:26:45:76:17:2b: 22:6a:fb:c8:b7:7a:a1:2c:3e:21:a1:86:49:bc:d5:ad:f6:8b: e0:99:07:f5:cc:01:49:0f:60:30:69:d8:fd:85:87:b1:53:9e: 8f:56:08:f9:ff:7e:39:eb:5f:96:d6:02:ae:1a:2b:b6:78:43: 30:d0:35:a4:3d:ff:42:04:92:52:c0:63:4a:68:8b:51:60:35: a8:f8:8f:17 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCgEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTc3QTIxMTAvBgNVBAUTKDM2REE4RTcyQUFDNzdFNTUzMzczOTBFRjRDNjFDOTU0 MEI0NTk1RDcwHhcNMjUwNDI2MTk0MjQ3WhcNMjUwNTAzMTk0MjQ3WjAYMRYwFAYD VQQDEw02ODBkMzczNy00MDQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzaUDPXZdLkYD18dxElM1Cy4Q0ETR2khKzEJMK+2UCMFf1ethNnLBEri/9VM0 q1p9HoSAx02y3qGZ7I6fYZScXtqjnXw69vJDuiFIFec9T05MQkPL2/bu+JppygrS nWKjHszRwcRrDygWWtOA3jbLuWruuKRxHRKH08EpYvnwqfaohw6FHwcKgxQbOdjD G6Bg9x2jdvAuQkGOLb+UNcu+rbrykoCHmnWkm9LILORIXMtP86Z4fXxgFjjlOkUZ L3qggIzYsdpjWqbCw/AhXNUL3xaP6HrRM3rMG6Wc3Ru2UnxBemGUYTeSPTCui4Qv b5VUViAjnGYxlt8P+JYXPWMORQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ4YSrC2 dBi3JHWkCdqS/0NhDqG5MB8GA1UdIwQYMBaAFDbajnKqx35VM3OQ70xhyVQLRZXX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NzdBMi84QkMxNUM0MDdC MDQxMUVBOURBQUQ0MzJDNEY5QUUwMi9OdHFPY3FySGZsVXpjNUR2VEdISlZBdEZs ZGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL050cU9jcXJIZmxVemM1RHZUR0hKVkF0RmxkYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NzdBMi84QkMxNUM0MDdCMDQxMUVBOURBQUQ0MzJDNEY5QUUwMi9OdHFPY3FySGZs VXpjNUR2VEdISlZBdEZsZGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB5AMTDXrKY1V4j4o1qHPith0nfuvaRmViwaaKGFmHMSUP9NpKZHvd4 gpkRIejkGqcJ9aXsW2UgI/QyW0Oqfs8xhBOKXDV6VLx+9wPeovJmmRR/wYzVv0TF tybZqiNUWm62d52+nhiViyW5ErOpnmZ9U+ESrCl/aaZH/k+XOwjkJWeqWa/djkMv Vlm3KUqbac135wDtE6dNeruXiUwZv0ISC2kGCR+GZmpQbzrpYJa4JkV2FysiavvI t3qhLD4hoYZJvNWt9ovgmQf1zAFJD2Awadj9hYexU56PVgj5/34561+W1gKuGiu2 eEMw0DWkPf9CBJJSwGNKaItRYDWo+I8X -----END CERTIFICATE-----Generated at Mon Apr 28 03:23:10 2025 by rpki-client