$ rpki-client -vvf rpki.apnic.net/member_repository/A917C422/3E745368ED5511E38072C57E5911EA32/NUOeC_NciIu4TRsk7N5wYM90TpE.mft File: NUOeC_NciIu4TRsk7N5wYM90TpE.mft (raw, json) Hash identifier: Se6zCNqiB8ZUxFgKnZWd4L+UnssS+Q9OJGHeT3LeY/w= Subject key identifier: 67:F7:48:D3:88:A0:C0:15:FA:6D:85:44:A0:1C:97:EE:AC:DF:D2:A0 Authority key identifier: 35:43:9E:0B:F3:5C:88:8B:B8:4D:1B:24:EC:DE:70:60:CF:74:4E:91 Certificate issuer: /CN=A917C422/serialNumber=35439E0BF35C888BB84D1B24ECDE7060CF744E91 Certificate serial: 2B5C Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/NUOeC_NciIu4TRsk7N5wYM90TpE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917C422/3E745368ED5511E38072C57E5911EA32/NUOeC_NciIu4TRsk7N5wYM90TpE.mft Manifest number: 2B48 Signing time: Thu 24 Apr 2025 14:25:30 +0000 Manifest this update: Thu 24 Apr 2025 14:25:30 +0000 Manifest next update: Thu 01 May 2025 14:25:30 +0000 Files and hashes: 1: NUOeC_NciIu4TRsk7N5wYM90TpE.crl (hash: 7Kh1KnBFhxnevIStFXrNyWzhEzu1VbEs6+48RGgHlyU=) 2: F645F318500C11EBA2295426C4F9AE02.roa (hash: cs/JN2roMF9559frpHSU57kLMdZZdt/kq/+fgPXNaTg=) 3: 6313DADA500011EBB74A2C2AC4F9AE02.roa (hash: kOKMH7bC+n+8o1xcllbA3RXGetoc8aW0IIWJBu8P/uI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917C422/3E745368ED5511E38072C57E5911EA32/NUOeC_NciIu4TRsk7N5wYM90TpE.crl rsync://rpki.apnic.net/member_repository/A917C422/3E745368ED5511E38072C57E5911EA32/NUOeC_NciIu4TRsk7N5wYM90TpE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/NUOeC_NciIu4TRsk7N5wYM90TpE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 14:25:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11100 (0x2b5c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917C422, serialNumber=35439E0BF35C888BB84D1B24ECDE7060CF744E91 Validity Not Before: Apr 24 14:25:30 2025 GMT Not After : May 1 14:25:30 2025 GMT Subject: CN=680a49da-d30e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:e1:43:35:90:9a:f7:c6:39:a8:6b:d9:de:0e: 5a:3c:ae:3e:da:f7:15:c8:2d:f1:15:c0:14:6a:73: 55:17:30:8a:52:20:52:ab:76:47:6f:c4:ae:fd:75: a6:2c:33:c1:ea:fa:39:53:f5:49:87:83:be:a8:6f: ad:bf:ed:65:6c:6b:a2:a8:9f:2f:a4:0c:00:b2:c3: 56:92:29:66:6e:07:e0:8c:73:bd:a0:2e:f8:ba:9b: 96:9b:56:e0:ee:8f:ed:0f:25:11:ec:5e:e5:b2:45: 33:7a:81:b3:c9:ec:86:a7:b4:67:57:da:9e:59:70: f1:84:90:14:a6:bc:17:56:6e:20:4a:b6:80:0d:f9: ad:9e:f8:b2:8e:83:74:a5:48:3a:34:be:3d:13:9f: 3f:80:6a:07:0b:64:ee:7b:aa:1d:65:be:92:81:52: e6:9c:48:14:d8:e4:4d:81:b7:2a:41:02:d9:de:39: 72:84:33:29:49:42:d7:09:0a:20:89:54:65:ee:ab: f2:ab:11:c0:f3:01:9b:18:c2:f5:5a:6c:86:07:12: ea:8b:59:b6:a8:9d:ae:11:07:11:cc:f8:71:23:cf: 8b:93:a9:51:7f:9e:46:21:eb:5d:c3:95:2f:0b:63: 6e:75:48:ad:18:21:c4:cd:1e:07:08:86:ab:92:6b: 60:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:F7:48:D3:88:A0:C0:15:FA:6D:85:44:A0:1C:97:EE:AC:DF:D2:A0 X509v3 Authority Key Identifier: keyid:35:43:9E:0B:F3:5C:88:8B:B8:4D:1B:24:EC:DE:70:60:CF:74:4E:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917C422/3E745368ED5511E38072C57E5911EA32/NUOeC_NciIu4TRsk7N5wYM90TpE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/NUOeC_NciIu4TRsk7N5wYM90TpE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C422/3E745368ED5511E38072C57E5911EA32/NUOeC_NciIu4TRsk7N5wYM90TpE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9b:ed:e9:e6:13:7e:94:fa:98:8d:1c:2b:db:0e:0a:70:2d:e1: 7c:25:5a:f7:fe:bc:c9:f1:b4:c8:fe:00:bd:6d:d1:f2:da:b8: 8b:68:a5:66:e9:b7:fc:53:cb:0e:6d:73:28:ee:09:94:98:13: 27:f2:ea:c6:08:54:51:bc:c3:d4:25:65:d3:26:11:1b:03:df: 92:98:57:4a:8d:6c:95:7e:77:79:3d:b7:f1:c5:23:50:8a:95: 35:72:2c:bf:03:4f:e4:bf:d6:1a:f7:ef:5e:ee:89:8c:67:74: 8e:24:43:38:0c:0c:35:4b:91:c9:38:20:c2:08:9a:a3:03:d9: 0c:9d:c1:f5:68:29:ee:ee:7a:4e:c2:f4:57:f5:61:0e:d3:fe: 8c:08:7b:bf:09:88:c9:5b:22:83:a1:f8:a3:df:a7:f9:c3:3f: 9a:62:90:8d:4b:96:40:ba:3f:c4:c9:c6:75:45:f3:16:a5:49: d3:4d:5d:2d:17:10:ce:23:99:90:6a:04:a7:e7:f7:99:3a:7a: 77:5c:68:c0:8d:a3:21:b0:c4:38:c3:0e:3f:94:66:e8:a5:45: 16:19:35:72:35:dd:8a:b0:5a:05:db:26:a5:84:89:44:b3:ee: 1a:0e:a7:5e:90:30:47:67:63:ce:d5:9b:b9:d0:01:8e:74:b2: e4:50:08:f3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICK1wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0M0MjIxMTAvBgNVBAUTKDM1NDM5RTBCRjM1Qzg4OEJCODREMUIyNEVDREU3MDYw Q0Y3NDRFOTEwHhcNMjUwNDI0MTQyNTMwWhcNMjUwNTAxMTQyNTMwWjAYMRYwFAYD VQQDEw02ODBhNDlkYS1kMzBlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmeFDNZCa98Y5qGvZ3g5aPK4+2vcVyC3xFcAUanNVFzCKUiBSq3ZHb8Su/XWm LDPB6vo5U/VJh4O+qG+tv+1lbGuiqJ8vpAwAssNWkilmbgfgjHO9oC74upuWm1bg 7o/tDyUR7F7lskUzeoGzyeyGp7RnV9qeWXDxhJAUprwXVm4gSraADfmtnviyjoN0 pUg6NL49E58/gGoHC2Tue6odZb6SgVLmnEgU2ORNgbcqQQLZ3jlyhDMpSULXCQog iVRl7qvyqxHA8wGbGML1WmyGBxLqi1m2qJ2uEQcRzPhxI8+Lk6lRf55GIetdw5Uv C2NudUitGCHEzR4HCIarkmtg9QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGf3SNOI oMAV+m2FRKAcl+6s39KgMB8GA1UdIwQYMBaAFDVDngvzXIiLuE0bJOzecGDPdE6R MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QzQyMi8zRTc0NTM2OEVE NTUxMUUzODA3MkM1N0U1OTExRUEzMi9OVU9lQ19OY2lJdTRUUnNrN041d1lNOTBU cEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL05VT2VDX05jaUl1NFRSc2s3TjV3WU05MFRwRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QzQyMi8zRTc0NTM2OEVENTUxMUUzODA3MkM1N0U1OTExRUEzMi9OVU9lQ19OY2lJ dTRUUnNrN041d1lNOTBUcEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCb7enmE36U+piNHCvbDgpwLeF8JVr3/rzJ8bTI/gC9bdHy2riLaKVm 6bf8U8sObXMo7gmUmBMn8urGCFRRvMPUJWXTJhEbA9+SmFdKjWyVfnd5PbfxxSNQ ipU1ciy/A0/kv9Ya9+9e7omMZ3SOJEM4DAw1S5HJOCDCCJqjA9kMncH1aCnu7npO wvRX9WEO0/6MCHu/CYjJWyKDofij36f5wz+aYpCNS5ZAuj/EycZ1RfMWpUnTTV0t FxDOI5mQagSn5/eZOnp3XGjAjaMhsMQ4ww4/lGbopUUWGTVyNd2KsFoF2yalhIlE s+4aDqdekDBHZ2PO1Zu50AGOdLLkUAjz -----END CERTIFICATE-----Generated at Sat Apr 26 13:10:32 2025 by rpki-client