$ rpki-client -vvf rpki.apnic.net/member_repository/A917FFBF/ED52F030C5F411EC8E80D886C4F9AE02/nPqGncMGNX16wwkuT__QTKUCd14.mft File: nPqGncMGNX16wwkuT__QTKUCd14.mft (raw, json) Hash identifier: gOgq3eqctIPm+HR2SkDU2mfHHleexEEB9riLbUXwAXU= Subject key identifier: 6F:0C:75:51:A6:F5:AB:BD:EB:4A:20:8B:09:1A:9C:D5:89:62:78:EA Authority key identifier: 9C:FA:86:9D:C3:06:35:7D:7A:C3:09:2E:4F:FF:D0:4C:A5:02:77:5E Certificate issuer: /CN=A917FFBF/serialNumber=9CFA869DC306357D7AC3092E4FFFD04CA502775E Certificate serial: 0321 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nPqGncMGNX16wwkuT__QTKUCd14.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917FFBF/ED52F030C5F411EC8E80D886C4F9AE02/nPqGncMGNX16wwkuT__QTKUCd14.mft Manifest number: 031D Signing time: Fri 25 Apr 2025 00:54:27 +0000 Manifest this update: Fri 25 Apr 2025 00:54:27 +0000 Manifest next update: Fri 02 May 2025 00:54:27 +0000 Files and hashes: 1: nPqGncMGNX16wwkuT__QTKUCd14.crl (hash: AQCZ2taVwm668T/Kjm4rlD3LFGLkZ3E1UjlvU7oijqE=) 2: 6AE91888C5FC11EC9127557EC4F9AE02.roa (hash: Upjs7verB9kHZN2eaB1a6dX0s9sFshQhi4VCB4ap3GQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917FFBF/ED52F030C5F411EC8E80D886C4F9AE02/nPqGncMGNX16wwkuT__QTKUCd14.crl rsync://rpki.apnic.net/member_repository/A917FFBF/ED52F030C5F411EC8E80D886C4F9AE02/nPqGncMGNX16wwkuT__QTKUCd14.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nPqGncMGNX16wwkuT__QTKUCd14.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 00:54:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 801 (0x321) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917FFBF, serialNumber=9CFA869DC306357D7AC3092E4FFFD04CA502775E Validity Not Before: Apr 25 00:54:27 2025 GMT Not After : May 2 00:54:27 2025 GMT Subject: CN=680add43-21bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:61:e0:13:1e:9f:24:aa:4b:bd:e2:9f:c5:8c: ac:79:9b:0a:e3:5b:a9:4f:b6:d1:9c:a6:64:44:fb: db:be:72:ca:00:e6:83:25:f0:58:86:27:a4:53:c9: 42:20:35:8c:e7:3b:9e:c7:a5:88:4c:92:16:9b:d7: dc:05:01:2c:24:c5:0e:b8:74:4b:7c:47:52:a8:0e: f4:e5:5f:79:9b:44:9d:05:fc:2c:5a:d4:6d:e0:56: 63:f3:ce:a9:8c:38:92:7a:b8:ba:5c:68:e6:f8:fe: f8:73:b4:05:55:b9:f3:be:24:43:d6:0a:28:3b:cc: b5:41:96:8e:b5:94:35:8c:0f:9f:78:a0:41:a8:1a: c3:5b:7a:5d:5b:d7:27:b1:3c:ed:6f:07:8b:c6:fc: 31:ef:b0:3a:65:57:a9:d3:8f:e7:86:66:28:eb:d0: 04:cf:55:4f:6b:bf:31:c6:3d:bf:48:6d:f0:bc:8b: a6:22:9a:c2:c6:f4:4a:d0:a9:64:b6:60:4b:fe:df: a1:1e:1e:dd:94:90:e9:61:8a:65:39:70:f7:00:59: 76:16:18:f2:08:9d:7e:ce:61:58:16:37:2a:81:5d: 20:a9:c9:a4:93:2b:a0:78:22:0a:a8:a8:dc:93:8f: 19:c6:e3:c6:39:26:4e:45:48:09:69:a9:66:e1:3c: 21:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:0C:75:51:A6:F5:AB:BD:EB:4A:20:8B:09:1A:9C:D5:89:62:78:EA X509v3 Authority Key Identifier: keyid:9C:FA:86:9D:C3:06:35:7D:7A:C3:09:2E:4F:FF:D0:4C:A5:02:77:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917FFBF/ED52F030C5F411EC8E80D886C4F9AE02/nPqGncMGNX16wwkuT__QTKUCd14.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nPqGncMGNX16wwkuT__QTKUCd14.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917FFBF/ED52F030C5F411EC8E80D886C4F9AE02/nPqGncMGNX16wwkuT__QTKUCd14.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 08:44:92:7e:8a:85:72:ee:e1:ad:cf:3a:6e:90:fb:ba:f4:f8: 1d:12:89:f5:d0:f3:f0:37:f8:34:3e:20:2d:a0:64:26:48:af: 71:9b:92:eb:0d:07:a2:c2:22:d6:6b:7d:2d:75:31:84:ce:e8: 0a:b4:73:d3:c9:0f:08:ef:da:0a:77:a3:8c:cf:0c:91:c6:32: 5c:00:f4:28:23:e0:0a:85:f5:e3:42:b5:ae:98:1a:7d:63:db: 92:8c:29:ae:08:06:ad:8f:c0:ca:4b:cb:36:a4:4a:85:c8:07: 20:e5:48:e0:29:4f:1a:7e:1d:8b:0c:c4:35:a1:d2:48:47:6c: ad:d9:67:32:2e:a6:22:f6:dd:9c:5c:7e:4d:a5:d4:d7:a9:f3: 38:d5:88:20:d7:f2:85:d8:94:ec:6c:0a:39:9c:8b:55:98:9d: dc:b9:91:80:8c:4d:a6:84:f5:0c:b2:17:dd:c1:eb:ac:a4:09: 61:9e:31:de:dc:63:c3:5b:42:61:92:1a:3d:79:87:6d:91:61: 75:7c:38:cf:42:72:4a:e1:4d:a1:e5:e2:95:da:28:f7:80:1d: dd:eb:e4:cc:db:6b:85:5b:b0:70:eb:aa:26:4f:3f:35:78:35: 22:d4:0c:47:44:f9:fe:d5:3b:03:bb:ee:41:88:44:09:90:2d: a8:39:7e:c8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAyEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0ZGQkYxMTAvBgNVBAUTKDlDRkE4NjlEQzMwNjM1N0Q3QUMzMDkyRTRGRkZEMDRD QTUwMjc3NUUwHhcNMjUwNDI1MDA1NDI3WhcNMjUwNTAyMDA1NDI3WjAYMRYwFAYD VQQDEw02ODBhZGQ0My0yMWJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyWHgEx6fJKpLveKfxYyseZsK41upT7bRnKZkRPvbvnLKAOaDJfBYhiekU8lC IDWM5zuex6WITJIWm9fcBQEsJMUOuHRLfEdSqA705V95m0SdBfwsWtRt4FZj886p jDiSeri6XGjm+P74c7QFVbnzviRD1gooO8y1QZaOtZQ1jA+feKBBqBrDW3pdW9cn sTztbweLxvwx77A6ZVep04/nhmYo69AEz1VPa78xxj2/SG3wvIumIprCxvRK0Klk tmBL/t+hHh7dlJDpYYplOXD3AFl2FhjyCJ1+zmFYFjcqgV0gqcmkkyugeCIKqKjc k48ZxuPGOSZORUgJaalm4Twh2QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG8MdVGm 9au960ogiwkanNWJYnjqMB8GA1UdIwQYMBaAFJz6hp3DBjV9esMJLk//0EylAnde MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RkZCRi9FRDUyRjAzMEM1 RjQxMUVDOEU4MEQ4ODZDNEY5QUUwMi9uUHFHbmNNR05YMTZ3d2t1VF9fUVRLVUNk MTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25QcUduY01HTlgxNnd3a3VUX19RVEtVQ2QxNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RkZCRi9FRDUyRjAzMEM1RjQxMUVDOEU4MEQ4ODZDNEY5QUUwMi9uUHFHbmNNR05Y MTZ3d2t1VF9fUVRLVUNkMTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAIRJJ+ioVy7uGtzzpukPu69PgdEon10PPwN/g0PiAtoGQmSK9xm5Lr DQeiwiLWa30tdTGEzugKtHPTyQ8I79oKd6OMzwyRxjJcAPQoI+AKhfXjQrWumBp9 Y9uSjCmuCAatj8DKS8s2pEqFyAcg5UjgKU8afh2LDMQ1odJIR2yt2WcyLqYi9t2c XH5NpdTXqfM41Ygg1/KF2JTsbAo5nItVmJ3cuZGAjE2mhPUMshfdweuspAlhnjHe 3GPDW0Jhkho9eYdtkWF1fDjPQnJK4U2h5eKV2ij3gB3d6+TM22uFW7Bw66omTz81 eDUi1AxHRPn+1TsDu+5BiEQJkC2oOX7I -----END CERTIFICATE-----Generated at Sat Apr 26 04:33:55 2025 by rpki-client