$ rpki-client -vvf rpki.apnic.net/member_repository/A918ACDD/2A2CFC464DCF11EDBF05FA53C4F9AE02/NpFTMwCsweAQXuAxcGNQf4e0AS0.mft File: NpFTMwCsweAQXuAxcGNQf4e0AS0.mft (raw, json) Hash identifier: lUMqO7vOSMXMb7O8W4uczIGa7XwYaRddkG2+JWoD3mA= Subject key identifier: AB:2A:2F:8E:1D:4D:20:B5:15:FE:9F:CF:EE:BC:D5:68:6F:57:11:57 Authority key identifier: 36:91:53:33:00:AC:C1:E0:10:5E:E0:31:70:63:50:7F:87:B4:01:2D Certificate issuer: /CN=A918ACDD/serialNumber=3691533300ACC1E0105EE0317063507F87B4012D Certificate serial: 01E3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NpFTMwCsweAQXuAxcGNQf4e0AS0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918ACDD/2A2CFC464DCF11EDBF05FA53C4F9AE02/NpFTMwCsweAQXuAxcGNQf4e0AS0.mft Manifest number: 01DF Signing time: Tue 29 Apr 2025 02:49:01 +0000 Manifest this update: Tue 29 Apr 2025 02:49:01 +0000 Manifest next update: Tue 06 May 2025 02:49:01 +0000 Files and hashes: 1: NpFTMwCsweAQXuAxcGNQf4e0AS0.crl (hash: dPWdDdgVpbKRBunjHOQ+WFdkbIfAhmz3M/ceHOQWZHk=) 2: 397504CA4DD211ED8314A659C4F9AE02.roa (hash: IA7ndlMtzlimkIY6svrVtb7hYj1DKuX/Dcj54QQRijI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918ACDD/2A2CFC464DCF11EDBF05FA53C4F9AE02/NpFTMwCsweAQXuAxcGNQf4e0AS0.crl rsync://rpki.apnic.net/member_repository/A918ACDD/2A2CFC464DCF11EDBF05FA53C4F9AE02/NpFTMwCsweAQXuAxcGNQf4e0AS0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NpFTMwCsweAQXuAxcGNQf4e0AS0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 06 May 2025 02:49:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 483 (0x1e3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918ACDD, serialNumber=3691533300ACC1E0105EE0317063507F87B4012D Validity Not Before: Apr 29 02:49:01 2025 GMT Not After : May 6 02:49:01 2025 GMT Subject: CN=68103e1d-2648 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:82:95:a6:ab:c6:9e:e3:67:9c:b9:b6:e3:f9: eb:04:83:6a:d7:bf:1c:b5:15:0f:58:3b:4f:57:4d: 3f:75:2a:d0:00:28:be:19:b1:e2:ff:f2:6a:bd:fd: 5b:a3:8a:b1:a0:78:9b:4b:a8:58:21:b1:46:8a:a4: 8d:a3:8c:02:dd:d6:57:22:fe:0d:c7:4e:8b:47:19: ab:53:ff:34:77:3f:2f:cd:cf:8a:9d:80:08:d7:dc: 9f:bb:d9:59:02:de:46:ee:9d:90:98:9b:c6:e2:ab: 77:a6:ca:bc:36:84:42:42:d2:21:6f:f1:86:79:de: 2e:40:89:af:a2:3b:b9:b1:c8:ad:82:5c:ee:bc:6c: e0:f7:b9:14:b0:66:1e:24:12:73:eb:c3:3e:56:7c: b0:3b:0d:ae:96:7d:07:55:04:0d:e3:2c:05:f4:e7: d2:61:13:93:3e:ca:6b:c9:81:98:66:f0:0a:91:c4: 8b:84:16:8a:1f:05:2d:91:72:0e:bd:80:47:7a:09: 05:69:df:b7:62:09:71:6d:7c:69:81:28:49:90:24: 19:7c:01:a8:e7:90:6b:2a:72:9c:c9:a7:a5:51:d4: 67:d3:e7:f9:1c:35:5b:d8:34:e4:f5:ac:94:91:3b: 69:3b:4b:31:57:db:76:9b:a2:a1:e2:cd:0f:ac:74: d8:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:2A:2F:8E:1D:4D:20:B5:15:FE:9F:CF:EE:BC:D5:68:6F:57:11:57 X509v3 Authority Key Identifier: keyid:36:91:53:33:00:AC:C1:E0:10:5E:E0:31:70:63:50:7F:87:B4:01:2D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918ACDD/2A2CFC464DCF11EDBF05FA53C4F9AE02/NpFTMwCsweAQXuAxcGNQf4e0AS0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NpFTMwCsweAQXuAxcGNQf4e0AS0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918ACDD/2A2CFC464DCF11EDBF05FA53C4F9AE02/NpFTMwCsweAQXuAxcGNQf4e0AS0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c5:89:ef:5a:98:3b:60:b9:e3:4e:7e:d6:d3:16:95:66:8d:fc: a5:7d:f4:b5:c1:5a:05:49:c8:62:f6:7a:ca:44:1e:24:de:f1: 77:9b:b1:ee:1a:2d:a3:e1:07:15:0c:95:6d:c3:5c:43:21:12: 7a:a9:f3:98:cc:cf:15:80:d3:e2:02:00:96:7c:94:79:d2:9c: d4:01:6a:ce:98:9c:f9:a1:b9:8b:c1:e4:b3:59:70:1c:dc:6f: df:9a:09:11:f0:de:2a:58:76:d6:b7:2f:05:6c:a9:05:73:07: b0:8b:8f:5b:ce:73:e6:45:48:69:f0:c8:00:4b:d2:6b:c3:77: 52:d7:51:c4:a6:32:ba:ac:34:5f:e9:c6:3a:a0:ce:3a:08:25: 4f:8a:29:08:03:69:35:6e:72:4b:5e:45:b6:ef:68:79:d3:ba: 60:fd:e0:06:fe:b8:a4:21:51:56:1d:38:b7:03:ae:eb:25:e1: a6:3e:bd:a4:d4:74:b0:6d:df:77:30:6a:48:66:cc:13:62:17: 8b:8e:01:20:df:eb:f9:eb:b8:cb:2d:c4:36:97:9c:d0:e5:70: 0c:77:84:55:85:b1:61:a6:5f:e4:44:e7:63:87:6c:97:8c:5b: e3:46:1c:c9:8d:1c:28:7a:14:77:76:53:15:97:50:ae:f6:a9: 21:c6:d9:8d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAeMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEFDREQxMTAvBgNVBAUTKDM2OTE1MzMzMDBBQ0MxRTAxMDVFRTAzMTcwNjM1MDdG ODdCNDAxMkQwHhcNMjUwNDI5MDI0OTAxWhcNMjUwNTA2MDI0OTAxWjAYMRYwFAYD VQQDEw02ODEwM2UxZC0yNjQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA44KVpqvGnuNnnLm24/nrBINq178ctRUPWDtPV00/dSrQACi+GbHi//Jqvf1b o4qxoHibS6hYIbFGiqSNo4wC3dZXIv4Nx06LRxmrU/80dz8vzc+KnYAI19yfu9lZ At5G7p2QmJvG4qt3psq8NoRCQtIhb/GGed4uQImvoju5scitglzuvGzg97kUsGYe JBJz68M+VnywOw2uln0HVQQN4ywF9OfSYROTPspryYGYZvAKkcSLhBaKHwUtkXIO vYBHegkFad+3YglxbXxpgShJkCQZfAGo55BrKnKcyaelUdRn0+f5HDVb2DTk9ayU kTtpO0sxV9t2m6Kh4s0PrHTY1QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKsqL44d TSC1Ff6fz+681WhvVxFXMB8GA1UdIwQYMBaAFDaRUzMArMHgEF7gMXBjUH+HtAEt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QUNERC8yQTJDRkM0NjRE Q0YxMUVEQkYwNUZBNTNDNEY5QUUwMi9OcEZUTXdDc3dlQVFYdUF4Y0dOUWY0ZTBB UzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05wRlRNd0Nzd2VBUVh1QXhjR05RZjRlMEFTMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QUNERC8yQTJDRkM0NjREQ0YxMUVEQkYwNUZBNTNDNEY5QUUwMi9OcEZUTXdDc3dl QVFYdUF4Y0dOUWY0ZTBBUzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDFie9amDtgueNOftbTFpVmjfylffS1wVoFSchi9nrKRB4k3vF3m7Hu Gi2j4QcVDJVtw1xDIRJ6qfOYzM8VgNPiAgCWfJR50pzUAWrOmJz5obmLweSzWXAc 3G/fmgkR8N4qWHbWty8FbKkFcwewi49bznPmRUhp8MgAS9Jrw3dS11HEpjK6rDRf 6cY6oM46CCVPiikIA2k1bnJLXkW272h507pg/eAG/rikIVFWHTi3A67rJeGmPr2k 1HSwbd93MGpIZswTYheLjgEg3+v567jLLcQ2l5zQ5XAMd4RVhbFhpl/kROdjh2yX jFvjRhzJjRwoehR3dlMVl1Cu9qkhxtmN -----END CERTIFICATE-----Generated at Tue Apr 29 05:44:44 2025 by rpki-client