$ rpki-client -vvf rpki.apnic.net/member_repository/A9157DAE/104A7E1EDFAD11ED95153D31C4F9AE02/NCaEGmQGa3hlW77KDAH9CfZXBTY.mft File: NCaEGmQGa3hlW77KDAH9CfZXBTY.mft (raw, json) Hash identifier: AuS1UicSCXHJ9DoHto3kwysyELcugMzpWqe5B7taydY= Subject key identifier: 6F:A6:A6:C1:1A:77:91:65:00:4C:35:31:0F:96:5A:77:55:E7:0A:66 Authority key identifier: 34:26:84:1A:64:06:6B:78:65:5B:BE:CA:0C:01:FD:09:F6:57:05:36 Certificate issuer: /CN=A9157DAE/serialNumber=3426841A64066B78655BBECA0C01FD09F6570536 Certificate serial: 017E Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/NCaEGmQGa3hlW77KDAH9CfZXBTY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9157DAE/104A7E1EDFAD11ED95153D31C4F9AE02/NCaEGmQGa3hlW77KDAH9CfZXBTY.mft Manifest number: 017E Signing time: Thu 24 Apr 2025 17:08:24 +0000 Manifest this update: Thu 24 Apr 2025 17:08:23 +0000 Manifest next update: Thu 01 May 2025 17:08:23 +0000 Files and hashes: 1: NCaEGmQGa3hlW77KDAH9CfZXBTY.crl (hash: wEah3AFMv2Bd2QWIeI2kwMiWXLjsbHlF3n4U+AFDMBE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9157DAE/104A7E1EDFAD11ED95153D31C4F9AE02/NCaEGmQGa3hlW77KDAH9CfZXBTY.crl rsync://rpki.apnic.net/member_repository/A9157DAE/104A7E1EDFAD11ED95153D31C4F9AE02/NCaEGmQGa3hlW77KDAH9CfZXBTY.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/NCaEGmQGa3hlW77KDAH9CfZXBTY.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 17:08:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 382 (0x17e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9157DAE, serialNumber=3426841A64066B78655BBECA0C01FD09F6570536 Validity Not Before: Apr 24 17:08:23 2025 GMT Not After : May 1 17:08:23 2025 GMT Subject: CN=680a7007-10c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:58:8b:12:83:86:c7:e6:04:8b:e2:b3:f3:be: 1b:a3:da:ed:df:62:7f:75:1c:74:c7:54:03:24:32: 68:70:9e:3c:a9:a8:00:b0:14:40:5c:62:5e:dc:18: 44:f1:32:00:c1:5b:26:3b:1c:10:57:ba:d0:ca:15: a8:7f:d5:53:5f:63:28:99:94:6c:18:e3:bf:62:d9: 44:ff:a8:1f:89:ba:96:e1:c2:1c:8d:dc:1c:25:64: e9:90:f4:b6:46:75:af:f1:5b:cb:91:fa:23:21:cd: 5a:9c:83:ea:e3:7e:27:d4:c5:d9:c9:f8:2b:ab:ff: b3:16:54:67:20:85:bb:c9:80:71:2b:6a:fc:95:8a: b5:c0:50:c5:09:d6:35:f2:59:a1:5a:3e:21:f7:65: ca:42:c4:46:97:7b:52:1f:ad:21:1f:14:ee:72:b8: bf:67:7e:6e:75:2c:4a:28:50:94:51:29:0a:39:d4: c0:1d:b8:af:05:7b:f9:e9:89:3f:10:be:3f:5f:99: 16:af:15:bb:77:c3:4a:05:02:de:2c:91:75:f4:00: 07:4c:13:53:2f:45:b9:7f:36:50:05:bd:0b:9b:73: 40:62:50:d8:89:1e:76:cb:e3:6a:88:24:49:25:59: 58:52:f3:dc:ff:89:57:71:aa:d2:31:a1:c5:a0:8f: 1c:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:A6:A6:C1:1A:77:91:65:00:4C:35:31:0F:96:5A:77:55:E7:0A:66 X509v3 Authority Key Identifier: keyid:34:26:84:1A:64:06:6B:78:65:5B:BE:CA:0C:01:FD:09:F6:57:05:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9157DAE/104A7E1EDFAD11ED95153D31C4F9AE02/NCaEGmQGa3hlW77KDAH9CfZXBTY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/NCaEGmQGa3hlW77KDAH9CfZXBTY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157DAE/104A7E1EDFAD11ED95153D31C4F9AE02/NCaEGmQGa3hlW77KDAH9CfZXBTY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5e:fc:ee:e0:d6:71:79:f5:c5:a9:65:38:df:f7:5a:00:cd:97: e5:84:00:2f:c4:99:3c:83:5d:64:bd:d2:17:43:cf:a4:b7:83: a6:43:75:00:c3:75:73:d4:39:af:4e:d8:33:b2:c8:c6:5c:cf: 0c:64:45:e7:44:4f:29:e0:41:ac:68:19:5c:50:ff:f1:bc:8b: 23:54:98:00:2b:68:67:d2:f1:7f:b2:79:1d:7f:eb:40:ac:7b: 2a:5d:8e:0a:0c:b7:c1:26:8c:60:be:63:9a:9e:ec:2f:b1:83: 4b:38:25:48:6c:aa:6f:e9:e7:9b:78:fc:ef:5e:6f:5d:3c:7b: ef:35:df:7e:32:df:37:fd:07:9e:31:36:ae:6b:b5:3c:40:d9: 12:8b:15:01:59:d7:e6:f9:5d:cb:f2:3a:d1:58:3e:10:f3:17: 6c:6b:30:4a:be:89:b5:d3:21:52:86:51:7f:78:66:d1:c2:20: d2:8e:7b:81:a2:ae:92:9e:8b:10:df:3f:a1:e2:c6:8f:67:51: 7a:06:02:87:8b:7d:ec:67:49:8b:66:a9:c3:b2:61:ce:e5:d5: 60:95:1a:db:ee:e7:33:8d:ce:55:30:5d:2c:03:4f:81:6e:c2: 07:35:f3:64:13:0a:a1:d0:62:2f:d5:91:7e:f5:2d:84:26:4b: 24:f1:31:0a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAX4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTdEQUUxMTAvBgNVBAUTKDM0MjY4NDFBNjQwNjZCNzg2NTVCQkVDQTBDMDFGRDA5 RjY1NzA1MzYwHhcNMjUwNDI0MTcwODIzWhcNMjUwNTAxMTcwODIzWjAYMRYwFAYD VQQDEw02ODBhNzAwNy0xMGM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwViLEoOGx+YEi+Kz874bo9rt32J/dRx0x1QDJDJocJ48qagAsBRAXGJe3BhE 8TIAwVsmOxwQV7rQyhWof9VTX2MomZRsGOO/YtlE/6gfibqW4cIcjdwcJWTpkPS2 RnWv8VvLkfojIc1anIPq434n1MXZyfgrq/+zFlRnIIW7yYBxK2r8lYq1wFDFCdY1 8lmhWj4h92XKQsRGl3tSH60hHxTucri/Z35udSxKKFCUUSkKOdTAHbivBXv56Yk/ EL4/X5kWrxW7d8NKBQLeLJF19AAHTBNTL0W5fzZQBb0Lm3NAYlDYiR52y+NqiCRJ JVlYUvPc/4lXcarSMaHFoI8cnwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG+mpsEa d5FlAEw1MQ+WWndV5wpmMB8GA1UdIwQYMBaAFDQmhBpkBmt4ZVu+ygwB/Qn2VwU2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1N0RBRS8xMDRBN0UxRURG QUQxMUVEOTUxNTNEMzFDNEY5QUUwMi9OQ2FFR21RR2EzaGxXNzdLREFIOUNmWlhC VFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL05DYUVHbVFHYTNobFc3N0tEQUg5Q2ZaWEJUWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 N0RBRS8xMDRBN0UxRURGQUQxMUVEOTUxNTNEMzFDNEY5QUUwMi9OQ2FFR21RR2Ez aGxXNzdLREFIOUNmWlhCVFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBe/O7g1nF59cWpZTjf91oAzZflhAAvxJk8g11kvdIXQ8+kt4OmQ3UA w3Vz1DmvTtgzssjGXM8MZEXnRE8p4EGsaBlcUP/xvIsjVJgAK2hn0vF/snkdf+tA rHsqXY4KDLfBJoxgvmOanuwvsYNLOCVIbKpv6eebePzvXm9dPHvvNd9+Mt83/Qee MTaua7U8QNkSixUBWdfm+V3L8jrRWD4Q8xdsazBKvom10yFShlF/eGbRwiDSjnuB oq6SnosQ3z+h4saPZ1F6BgKHi33sZ0mLZqnDsmHO5dVglRrb7uczjc5VMF0sA0+B bsIHNfNkEwqh0GIv1ZF+9S2EJksk8TEK -----END CERTIFICATE-----Generated at Sat Apr 26 15:01:13 2025 by rpki-client