$ rpki-client -vvf rpki.apnic.net/member_repository/A915A268/541F3888B35011EE925D771AC4F9AE02/NO_XxNZs-jS4RWayYjnZCoyR7Lc.mft File: NO_XxNZs-jS4RWayYjnZCoyR7Lc.mft (raw, json) Hash identifier: XRHc1SzGIAdFDzNFCTl6y/5mMhGb0Flqde79o77sfK4= Subject key identifier: AF:39:9C:5E:DC:E5:4F:89:B8:1B:7B:98:72:DB:74:4A:78:9D:60:5C Authority key identifier: 34:EF:D7:C4:D6:6C:FA:34:B8:45:66:B2:62:39:D9:0A:8C:91:EC:B7 Certificate issuer: /CN=A915A268/serialNumber=34EFD7C4D66CFA34B84566B26239D90A8C91ECB7 Certificate serial: EF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NO_XxNZs-jS4RWayYjnZCoyR7Lc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915A268/541F3888B35011EE925D771AC4F9AE02/NO_XxNZs-jS4RWayYjnZCoyR7Lc.mft Manifest number: EF Signing time: Fri 25 Apr 2025 04:20:12 +0000 Manifest this update: Fri 25 Apr 2025 04:20:11 +0000 Manifest next update: Fri 02 May 2025 04:20:11 +0000 Files and hashes: 1: NO_XxNZs-jS4RWayYjnZCoyR7Lc.crl (hash: qnneNmt5MJt9exFmIjHPgu6RdC0zxjBtAlaMh3ih2uI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915A268/541F3888B35011EE925D771AC4F9AE02/NO_XxNZs-jS4RWayYjnZCoyR7Lc.crl rsync://rpki.apnic.net/member_repository/A915A268/541F3888B35011EE925D771AC4F9AE02/NO_XxNZs-jS4RWayYjnZCoyR7Lc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NO_XxNZs-jS4RWayYjnZCoyR7Lc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 04:20:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 239 (0xef) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915A268, serialNumber=34EFD7C4D66CFA34B84566B26239D90A8C91ECB7 Validity Not Before: Apr 25 04:20:11 2025 GMT Not After : May 2 04:20:11 2025 GMT Subject: CN=680b0d7b-96ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:f7:2d:88:37:81:f4:c3:81:44:e4:20:25:3b: a0:75:6f:60:36:20:39:b7:12:05:bc:4e:0b:69:71: dc:85:40:81:a5:7e:67:be:54:9f:2e:20:68:a4:20: 8c:f6:5d:5a:e5:b3:e0:be:8a:ca:ae:20:39:8e:9f: ba:2c:d7:3d:87:2f:65:6a:03:e3:ff:ef:7f:02:52: 28:be:c3:3e:1c:b7:93:81:0e:20:10:6b:ac:80:88: df:a9:ea:c2:43:ae:32:09:2f:cd:3c:6c:0d:40:e1: d1:a0:1f:e2:dc:95:ad:25:2a:db:ea:d3:f4:18:75: b7:26:44:93:3e:b6:bf:e0:46:0f:23:24:3c:1d:39: d5:5f:1a:9f:0b:05:fd:32:7d:e9:3d:b5:c4:d8:c8: ca:5b:f1:aa:76:06:c1:66:73:b5:f2:7f:93:90:9c: ed:89:41:0d:10:c1:8f:f0:30:b5:97:bb:de:cc:11: d8:aa:e4:c2:93:14:91:57:a0:f7:5c:49:ec:b5:1d: c6:f6:f9:bf:9e:eb:3f:6c:bd:77:b2:33:ce:c0:2c: 3c:7b:1b:ce:48:12:1a:ef:8c:6a:5a:36:60:aa:62: fe:f8:4a:3c:f6:14:da:ca:01:1a:5e:c5:6b:c9:d0: 43:f0:ff:66:e2:9c:b8:3b:1a:1e:e5:37:ac:e3:a4: e6:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:39:9C:5E:DC:E5:4F:89:B8:1B:7B:98:72:DB:74:4A:78:9D:60:5C X509v3 Authority Key Identifier: keyid:34:EF:D7:C4:D6:6C:FA:34:B8:45:66:B2:62:39:D9:0A:8C:91:EC:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915A268/541F3888B35011EE925D771AC4F9AE02/NO_XxNZs-jS4RWayYjnZCoyR7Lc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NO_XxNZs-jS4RWayYjnZCoyR7Lc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A268/541F3888B35011EE925D771AC4F9AE02/NO_XxNZs-jS4RWayYjnZCoyR7Lc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7f:af:13:d0:29:81:f6:d8:33:75:22:bf:22:ba:b7:c9:d8:f9: c6:60:3a:49:24:6a:24:c6:73:b2:ad:79:21:06:d4:8a:ee:b0: f1:39:b6:78:de:66:c2:fa:8f:f8:aa:3d:ea:50:74:df:92:3a: 63:39:6e:42:a4:65:05:25:38:0f:1b:b3:68:52:34:e3:ee:38: 7a:0f:45:a8:77:35:d9:31:36:e4:37:b1:e9:27:8e:2c:a7:e2: e7:bd:12:24:4e:93:5e:b5:54:dc:dd:76:4a:bc:17:c6:2b:77: b6:70:61:62:e8:78:61:fb:05:ad:38:ff:a2:ff:7c:19:7b:c1: 40:92:9c:47:6b:d8:c4:97:7e:77:3e:0f:36:4b:94:3d:e8:78: 6a:4c:45:4e:5b:18:e4:72:47:d8:80:a5:81:bd:df:52:91:b4: 71:10:93:cc:88:f3:5d:8b:f1:28:39:42:fb:c8:33:a1:25:f8: 5e:aa:fc:72:7c:cb:ef:17:b2:b2:16:55:84:d4:63:ed:05:7b: 79:c0:3b:70:82:ce:7f:5c:e2:92:7f:22:6e:15:1b:06:de:eb: f3:cb:f8:a0:96:c7:c6:67:3b:10:dc:3e:46:5a:c1:25:b0:52: 28:58:0a:c6:92:c2:03:1a:28:0a:a6:5c:48:58:b3:d9:d3:66: d9:5b:e6:35 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAO8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUEyNjgxMTAvBgNVBAUTKDM0RUZEN0M0RDY2Q0ZBMzRCODQ1NjZCMjYyMzlEOTBB OEM5MUVDQjcwHhcNMjUwNDI1MDQyMDExWhcNMjUwNTAyMDQyMDExWjAYMRYwFAYD VQQDEw02ODBiMGQ3Yi05NmFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuPctiDeB9MOBROQgJTugdW9gNiA5txIFvE4LaXHchUCBpX5nvlSfLiBopCCM 9l1a5bPgvorKriA5jp+6LNc9hy9lagPj/+9/AlIovsM+HLeTgQ4gEGusgIjfqerC Q64yCS/NPGwNQOHRoB/i3JWtJSrb6tP0GHW3JkSTPra/4EYPIyQ8HTnVXxqfCwX9 Mn3pPbXE2MjKW/GqdgbBZnO18n+TkJztiUENEMGP8DC1l7vezBHYquTCkxSRV6D3 XEnstR3G9vm/nus/bL13sjPOwCw8exvOSBIa74xqWjZgqmL++Eo89hTaygEaXsVr ydBD8P9m4py4Oxoe5Tes46TmwQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK85nF7c 5U+JuBt7mHLbdEp4nWBcMB8GA1UdIwQYMBaAFDTv18TWbPo0uEVmsmI52QqMkey3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QTI2OC81NDFGMzg4OEIz NTAxMUVFOTI1RDc3MUFDNEY5QUUwMi9OT19YeE5acy1qUzRSV2F5WWpuWkNveVI3 TGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05PX1h4TlpzLWpTNFJXYXlZam5aQ295UjdMYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QTI2OC81NDFGMzg4OEIzNTAxMUVFOTI1RDc3MUFDNEY5QUUwMi9OT19YeE5acy1q UzRSV2F5WWpuWkNveVI3TGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB/rxPQKYH22DN1Ir8iurfJ2PnGYDpJJGokxnOyrXkhBtSK7rDxObZ4 3mbC+o/4qj3qUHTfkjpjOW5CpGUFJTgPG7NoUjTj7jh6D0WodzXZMTbkN7HpJ44s p+LnvRIkTpNetVTc3XZKvBfGK3e2cGFi6Hhh+wWtOP+i/3wZe8FAkpxHa9jEl353 Pg82S5Q96HhqTEVOWxjkckfYgKWBvd9SkbRxEJPMiPNdi/EoOUL7yDOhJfheqvxy fMvvF7KyFlWE1GPtBXt5wDtwgs5/XOKSfyJuFRsG3uvzy/iglsfGZzsQ3D5GWsEl sFIoWArGksIDGigKplxIWLPZ02bZW+Y1 -----END CERTIFICATE-----Generated at Sat Apr 26 17:08:50 2025 by rpki-client