$ rpki-client -vvf rpki.apnic.net/member_repository/A9172154/39A6CF2A809111EAAD134D6BC4F9AE02/nplO914RM-YPAbmkigkmGVL7G4E.mft File: nplO914RM-YPAbmkigkmGVL7G4E.mft (raw, json) Hash identifier: wYy+3qzYJLFYkOUIjTvelg0taesQ/gBsm0BNqwRpeok= Subject key identifier: B4:D4:49:4A:9A:3E:DE:22:70:60:4B:25:9E:B9:C6:DF:F8:DF:95:D0 Authority key identifier: 9E:99:4E:F7:5E:11:33:E6:0F:01:B9:A4:8A:09:26:19:52:FB:1B:81 Certificate issuer: /CN=A9172154/serialNumber=9E994EF75E1133E60F01B9A48A09261952FB1B81 Certificate serial: 09BE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nplO914RM-YPAbmkigkmGVL7G4E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9172154/39A6CF2A809111EAAD134D6BC4F9AE02/nplO914RM-YPAbmkigkmGVL7G4E.mft Manifest number: 09B7 Signing time: Thu 24 Apr 2025 19:52:47 +0000 Manifest this update: Thu 24 Apr 2025 19:52:46 +0000 Manifest next update: Thu 01 May 2025 19:52:46 +0000 Files and hashes: 1: nplO914RM-YPAbmkigkmGVL7G4E.crl (hash: x99x/g8wXQf9uL958LOnlHgYDP9hQBmnw4KvsK5IZtY=) 2: 95A08652730D11ECAB074439C4F9AE02.roa (hash: 8SZ9w1bXpjgmgqCHhkJA4hqFkmJXaJwJe1y4R5qoWpI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9172154/39A6CF2A809111EAAD134D6BC4F9AE02/nplO914RM-YPAbmkigkmGVL7G4E.crl rsync://rpki.apnic.net/member_repository/A9172154/39A6CF2A809111EAAD134D6BC4F9AE02/nplO914RM-YPAbmkigkmGVL7G4E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nplO914RM-YPAbmkigkmGVL7G4E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 19:52:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2494 (0x9be) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9172154, serialNumber=9E994EF75E1133E60F01B9A48A09261952FB1B81 Validity Not Before: Apr 24 19:52:46 2025 GMT Not After : May 1 19:52:46 2025 GMT Subject: CN=680a968f-04ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:00:20:c2:0a:64:ee:ed:e3:7b:63:af:4f:46: 58:b3:e6:8c:5f:93:b0:dd:af:20:3e:8a:5d:3b:9b: 6e:ea:cc:25:0e:7f:6a:f2:0d:42:a5:c9:ba:e3:53: a0:e6:cb:63:72:c5:9b:7f:75:86:57:9a:12:a3:c1: 23:06:35:ee:6f:83:a0:5d:8a:d8:ef:8f:fd:9b:79: 24:c2:6a:6d:4c:2f:e5:da:71:54:2c:e9:78:27:7c: 17:74:31:75:d7:21:27:76:0d:34:43:66:19:2b:19: 44:58:9f:48:2f:75:5a:a2:8c:ad:d0:f6:fd:bc:80: 3c:8b:d6:3d:91:b2:cb:22:87:e5:50:38:33:e3:e8: b8:19:b0:9d:f7:63:cd:96:66:e8:7e:56:1a:73:ef: 91:72:6b:54:7e:5c:a0:db:c2:3d:7a:13:45:a0:50: aa:73:d5:35:e7:71:68:02:d0:70:e1:9a:a2:63:bd: 16:fb:eb:72:49:cd:67:07:a1:be:d7:99:b3:60:ad: 1b:fd:be:06:18:52:72:22:48:74:3a:ab:50:7f:9c: 31:1b:dd:88:e1:b4:69:40:68:f5:7c:13:4e:55:f8: 4d:ac:0f:9d:17:b5:3c:22:40:fc:67:4e:dc:14:67: 94:df:7b:e4:f6:ac:f8:bb:71:26:a1:2b:9d:6d:2b: 68:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:D4:49:4A:9A:3E:DE:22:70:60:4B:25:9E:B9:C6:DF:F8:DF:95:D0 X509v3 Authority Key Identifier: keyid:9E:99:4E:F7:5E:11:33:E6:0F:01:B9:A4:8A:09:26:19:52:FB:1B:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9172154/39A6CF2A809111EAAD134D6BC4F9AE02/nplO914RM-YPAbmkigkmGVL7G4E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nplO914RM-YPAbmkigkmGVL7G4E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172154/39A6CF2A809111EAAD134D6BC4F9AE02/nplO914RM-YPAbmkigkmGVL7G4E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0c:40:ab:d6:e0:ea:61:f4:d5:bd:07:b6:e2:9e:6d:2a:76:d8: 9c:fe:61:3a:ac:68:0b:c5:de:76:0e:df:5d:da:68:90:7d:25: fb:2f:73:e4:21:d7:11:5c:42:78:07:79:cf:28:57:6c:30:09: b9:be:f1:8b:2e:c8:68:ad:44:25:7c:99:a4:3e:e8:c0:00:65: d0:c5:85:0f:8e:73:e8:18:5c:32:9a:e4:e4:6b:d8:00:0a:4c: 5f:77:08:cf:e4:8c:62:d5:bc:f8:53:81:bd:9d:5d:d8:f6:4b: c8:4c:90:68:19:70:da:e9:9d:c9:f7:86:de:f6:bd:5e:4b:f9: 9f:dd:7a:a5:c0:f1:0c:7d:d9:33:64:74:dd:5c:4a:c3:ef:c7: 00:53:31:33:12:33:c3:9d:c1:18:6b:99:0b:62:52:43:76:68: 7a:11:d6:63:28:5d:8f:53:29:91:ef:0f:3e:0c:41:96:d1:91: a3:f0:7d:07:ba:6a:ea:d6:05:d6:fd:80:13:51:22:1a:ab:d4: 83:94:e2:6b:bb:11:2e:42:2a:b5:fa:d4:fb:f7:d6:7f:0f:26: 54:2b:cd:99:33:d9:62:ec:71:de:69:c1:a7:05:a0:9a:3a:24: 54:9b:d5:34:dc:01:cc:1b:fb:c2:62:00:7b:d2:41:66:1c:0b: c6:c7:73:d2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCb4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzIxNTQxMTAvBgNVBAUTKDlFOTk0RUY3NUUxMTMzRTYwRjAxQjlBNDhBMDkyNjE5 NTJGQjFCODEwHhcNMjUwNDI0MTk1MjQ2WhcNMjUwNTAxMTk1MjQ2WjAYMRYwFAYD VQQDEw02ODBhOTY4Zi0wNGFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqQAgwgpk7u3je2OvT0ZYs+aMX5Ow3a8gPopdO5tu6swlDn9q8g1Cpcm641Og 5stjcsWbf3WGV5oSo8EjBjXub4OgXYrY74/9m3kkwmptTC/l2nFULOl4J3wXdDF1 1yEndg00Q2YZKxlEWJ9IL3Vaooyt0Pb9vIA8i9Y9kbLLIoflUDgz4+i4GbCd92PN lmboflYac++RcmtUflyg28I9ehNFoFCqc9U153FoAtBw4ZqiY70W++tySc1nB6G+ 15mzYK0b/b4GGFJyIkh0OqtQf5wxG92I4bRpQGj1fBNOVfhNrA+dF7U8IkD8Z07c FGeU33vk9qz4u3EmoSudbStoewIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLTUSUqa Pt4icGBLJZ65xt/435XQMB8GA1UdIwQYMBaAFJ6ZTvdeETPmDwG5pIoJJhlS+xuB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MjE1NC8zOUE2Q0YyQTgw OTExMUVBQUQxMzRENkJDNEY5QUUwMi9ucGxPOTE0Uk0tWVBBYm1raWdrbUdWTDdH NEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25wbE85MTRSTS1ZUEFibWtpZ2ttR1ZMN0c0RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MjE1NC8zOUE2Q0YyQTgwOTExMUVBQUQxMzRENkJDNEY5QUUwMi9ucGxPOTE0Uk0t WVBBYm1raWdrbUdWTDdHNEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAMQKvW4Oph9NW9B7binm0qdtic/mE6rGgLxd52Dt9d2miQfSX7L3Pk IdcRXEJ4B3nPKFdsMAm5vvGLLshorUQlfJmkPujAAGXQxYUPjnPoGFwymuTka9gA CkxfdwjP5Ixi1bz4U4G9nV3Y9kvITJBoGXDa6Z3J94be9r1eS/mf3XqlwPEMfdkz ZHTdXErD78cAUzEzEjPDncEYa5kLYlJDdmh6EdZjKF2PUymR7w8+DEGW0ZGj8H0H umrq1gXW/YATUSIaq9SDlOJruxEuQiq1+tT799Z/DyZUK82ZM9li7HHeacGnBaCa OiRUm9U03AHMG/vCYgB70kFmHAvGx3PS -----END CERTIFICATE-----Generated at Sat Apr 26 04:04:54 2025 by rpki-client