$ rpki-client -vvf rpki.apnic.net/member_repository/A918233C/E6491FE2621411ECB006712CC4F9AE02/_NTfjrSqZK9Wt9DHMm4pEEVDzFU.mft File: _NTfjrSqZK9Wt9DHMm4pEEVDzFU.mft (raw, json) Hash identifier: ujvAM9pvavO44UbAOpLWBoGcI/K+AJcnOzsg/Kzfzh8= Subject key identifier: D4:0E:44:33:BE:E5:C4:DD:EE:48:4D:BF:C7:DD:05:DA:87:DE:DE:AD Authority key identifier: FC:D4:DF:8E:B4:AA:64:AF:56:B7:D0:C7:32:6E:29:10:45:43:CC:55 Certificate issuer: /CN=A918233C/serialNumber=FCD4DF8EB4AA64AF56B7D0C7326E29104543CC55 Certificate serial: 0C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_NTfjrSqZK9Wt9DHMm4pEEVDzFU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918233C/E6491FE2621411ECB006712CC4F9AE02/_NTfjrSqZK9Wt9DHMm4pEEVDzFU.mft Manifest number: 042A Signing time: Fri 25 Apr 2025 00:10:41 +0000 Manifest this update: Fri 25 Apr 2025 00:10:41 +0000 Manifest next update: Fri 02 May 2025 00:10:41 +0000 Files and hashes: 1: _NTfjrSqZK9Wt9DHMm4pEEVDzFU.crl (hash: vA7w+OPED2VrA9o0WmCC49GMk3kbTV2tFAmTkgfXHH4=) 2: 34E594A215C511F09562D30FC4F9AE02.roa (hash: hO8cBpPkkXeK8WAFYmWHFGS1BpcqmFyN9GM5+DFTdqE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918233C/E6491FE2621411ECB006712CC4F9AE02/_NTfjrSqZK9Wt9DHMm4pEEVDzFU.crl rsync://rpki.apnic.net/member_repository/A918233C/E6491FE2621411ECB006712CC4F9AE02/_NTfjrSqZK9Wt9DHMm4pEEVDzFU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_NTfjrSqZK9Wt9DHMm4pEEVDzFU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 00:10:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12 (0xc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918233C, serialNumber=FCD4DF8EB4AA64AF56B7D0C7326E29104543CC55 Validity Not Before: Apr 25 00:10:41 2025 GMT Not After : May 2 00:10:41 2025 GMT Subject: CN=680ad301-fcae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:10:2a:ab:29:d4:0f:33:e1:54:d2:67:c2:6f: 8a:37:2a:75:df:53:9f:29:95:14:bc:04:10:86:44: 08:c7:78:a0:61:78:f0:34:2e:c2:93:b1:ca:db:74: 91:32:48:51:76:81:ae:62:bd:bb:ec:84:2b:4f:96: 3d:6c:18:b0:53:7f:af:7b:c1:1a:fa:68:f4:57:87: 27:6c:4a:73:fd:ac:6f:72:54:f4:a0:60:6d:53:3e: c0:73:fb:4a:77:f0:28:0f:60:ed:57:f3:10:8c:37: 48:7a:13:b7:20:6d:a8:b4:02:d6:05:8e:1e:cc:51: 1f:37:21:c7:d5:cf:99:c8:b4:19:ed:04:16:1e:a8: cb:da:98:d8:62:85:2e:55:c2:b2:16:78:b1:33:89: 5f:7c:ee:17:e3:6e:d8:7b:e3:f3:cb:3a:2f:1f:87: cb:c4:78:be:fc:24:83:ff:45:f8:88:61:02:25:79: d6:0e:e0:28:32:7a:b3:48:0d:53:9b:b9:91:ad:1b: cf:89:75:e6:60:8e:c1:d6:0b:1f:0c:2a:11:d7:30: 55:57:ab:1b:89:27:46:0f:d2:1c:78:95:72:21:e8: 98:9c:8c:75:79:62:8b:45:4a:16:32:84:8f:07:cc: 59:99:19:ef:24:7b:a6:7f:c2:eb:87:42:15:45:6d: a6:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:0E:44:33:BE:E5:C4:DD:EE:48:4D:BF:C7:DD:05:DA:87:DE:DE:AD X509v3 Authority Key Identifier: keyid:FC:D4:DF:8E:B4:AA:64:AF:56:B7:D0:C7:32:6E:29:10:45:43:CC:55 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918233C/E6491FE2621411ECB006712CC4F9AE02/_NTfjrSqZK9Wt9DHMm4pEEVDzFU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_NTfjrSqZK9Wt9DHMm4pEEVDzFU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918233C/E6491FE2621411ECB006712CC4F9AE02/_NTfjrSqZK9Wt9DHMm4pEEVDzFU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 24:9e:0d:53:92:cb:1e:8b:19:90:4b:f5:90:62:69:35:16:d1: a0:ea:1b:cc:37:75:86:47:ad:aa:59:d4:05:86:1b:3c:6b:4a: 18:03:c0:74:a5:17:bf:71:7b:02:c1:03:c0:1a:a8:10:91:c2: 74:88:c1:04:79:67:7b:08:02:e2:9b:47:67:c5:1d:09:de:0a: e0:e9:46:15:5a:ec:60:0f:ff:f9:7e:dc:b6:79:34:58:dd:83: 3b:05:18:b9:88:d4:3a:2e:e0:a5:0b:d3:d2:0d:08:9f:54:59: 43:80:b0:2a:98:7a:62:98:ef:7d:c9:c1:33:a5:b4:6e:1e:36: 73:24:7d:47:01:9e:a1:d2:c7:a1:58:d8:d2:ca:3d:74:a4:af: 0e:22:2c:e1:c7:b4:2e:48:90:cb:57:05:6e:b6:fe:3d:f2:68: dc:39:18:fc:6c:4d:c6:6d:1a:dd:da:32:b0:07:e2:37:25:d1: 7f:57:a9:be:ab:47:04:08:4f:ae:9f:ea:e3:ba:9a:b4:c9:88: ac:38:df:85:51:ab:92:70:66:57:ee:5c:db:a1:c1:f6:06:b5: 52:43:cb:3c:8a:da:b6:a2:1e:e7:53:f4:ed:25:85:e8:02:96: 53:1e:46:4a:72:e2:cd:e2:66:63:98:82:b0:6e:cf:96:31:f6: 39:9d:ec:72 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBDDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 MjMzQzExMC8GA1UEBRMoRkNENERGOEVCNEFBNjRBRjU2QjdEMEM3MzI2RTI5MTA0 NTQzQ0M1NTAeFw0yNTA0MjUwMDEwNDFaFw0yNTA1MDIwMDEwNDFaMBgxFjAUBgNV BAMTDTY4MGFkMzAxLWZjYWUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDJECqrKdQPM+FU0mfCb4o3KnXfU58plRS8BBCGRAjHeKBhePA0LsKTscrbdJEy SFF2ga5ivbvshCtPlj1sGLBTf697wRr6aPRXhydsSnP9rG9yVPSgYG1TPsBz+0p3 8CgPYO1X8xCMN0h6E7cgbai0AtYFjh7MUR83IcfVz5nItBntBBYeqMvamNhihS5V wrIWeLEziV987hfjbth74/PLOi8fh8vEeL78JIP/RfiIYQIledYO4CgyerNIDVOb uZGtG8+JdeZgjsHWCx8MKhHXMFVXqxuJJ0YP0hx4lXIh6JicjHV5YotFShYyhI8H zFmZGe8ke6Z/wuuHQhVFbaaFAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU1A5EM77l xN3uSE2/x90F2ofe3q0wHwYDVR0jBBgwFoAU/NTfjrSqZK9Wt9DHMm4pEEVDzFUw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTgyMzNDL0U2NDkxRkUyNjIx NDExRUNCMDA2NzEyQ0M0RjlBRTAyL19OVGZqclNxWks5V3Q5REhNbTRwRUVWRHpG VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvX05UZmpyU3FaSzlXdDlESE1tNHBFRVZEekZVLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTgy MzNDL0U2NDkxRkUyNjIxNDExRUNCMDA2NzEyQ0M0RjlBRTAyL19OVGZqclNxWks5 V3Q5REhNbTRwRUVWRHpGVS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBACSeDVOSyx6LGZBL9ZBiaTUW0aDqG8w3dYZHrapZ1AWGGzxrShgDwHSl F79xewLBA8AaqBCRwnSIwQR5Z3sIAuKbR2fFHQneCuDpRhVa7GAP//l+3LZ5NFjd gzsFGLmI1Dou4KUL09INCJ9UWUOAsCqYemKY733JwTOltG4eNnMkfUcBnqHSx6FY 2NLKPXSkrw4iLOHHtC5IkMtXBW62/j3yaNw5GPxsTcZtGt3aMrAH4jcl0X9Xqb6r RwQIT66f6uO6mrTJiKw434VRq5JwZlfuXNuhwfYGtVJDyzyK2raiHudT9O0lhegC llMeRkpy4s3iZmOYgrBuz5Yx9jmd7HI= -----END CERTIFICATE-----Generated at Sat Apr 26 17:04:34 2025 by rpki-client