$ rpki-client -vvf rpki.apnic.net/member_repository/A9192491/D0626D92AD2F11E98FF8D77FC4F9AE02/NMONZkm5DWjTzmwJ8euU0-V5_J0.mft File: NMONZkm5DWjTzmwJ8euU0-V5_J0.mft (raw, json) Hash identifier: gl/LZkJh2bofkUqXjBF4MCiU9rjQKnsRAZrNGoZKDSo= Subject key identifier: FF:7B:B3:2F:01:05:04:3D:B7:73:C7:4F:01:30:A1:87:D0:E0:57:3B Authority key identifier: 34:C3:8D:66:49:B9:0D:68:D3:CE:6C:09:F1:EB:94:D3:E5:79:FC:9D Certificate issuer: /CN=A9192491/serialNumber=34C38D6649B90D68D3CE6C09F1EB94D3E579FC9D Certificate serial: 0DF5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NMONZkm5DWjTzmwJ8euU0-V5_J0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9192491/D0626D92AD2F11E98FF8D77FC4F9AE02/NMONZkm5DWjTzmwJ8euU0-V5_J0.mft Manifest number: 0DEC Signing time: Thu 24 Apr 2025 17:49:02 +0000 Manifest this update: Thu 24 Apr 2025 17:49:01 +0000 Manifest next update: Thu 01 May 2025 17:49:01 +0000 Files and hashes: 1: NMONZkm5DWjTzmwJ8euU0-V5_J0.crl (hash: 1kQtTaGYClAKxM7SWm33owaqEnDFqbSgA8DJNJAARIs=) 2: 54AE11C6AD3211E9B3BC7385C4F9AE02.roa (hash: a2Zz+SuX3DCfdSuIf8QT+Sa+cHmZnSxsIqO80zeBe3c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9192491/D0626D92AD2F11E98FF8D77FC4F9AE02/NMONZkm5DWjTzmwJ8euU0-V5_J0.crl rsync://rpki.apnic.net/member_repository/A9192491/D0626D92AD2F11E98FF8D77FC4F9AE02/NMONZkm5DWjTzmwJ8euU0-V5_J0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NMONZkm5DWjTzmwJ8euU0-V5_J0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 17:49:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3573 (0xdf5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9192491, serialNumber=34C38D6649B90D68D3CE6C09F1EB94D3E579FC9D Validity Not Before: Apr 24 17:49:01 2025 GMT Not After : May 1 17:49:01 2025 GMT Subject: CN=680a798d-379d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:fb:8f:cf:40:79:10:78:d9:c3:bd:b2:60:6c: c5:9d:46:50:9d:4f:a0:e0:41:da:40:d0:61:42:6e: f5:54:65:bd:94:c5:da:30:ae:22:a6:3f:54:1c:7e: 26:a3:11:ea:b5:f0:68:ca:aa:d1:57:b9:f8:84:b2: 41:30:a7:ef:0a:9e:c2:5d:6e:93:a5:a5:e8:4d:7f: e3:28:48:65:17:f4:e6:c8:fd:ff:a3:49:d6:4a:29: 90:c4:fd:2d:b1:2a:71:14:74:b0:17:05:d0:2f:4d: da:a1:d0:0a:c5:d6:73:ad:61:3d:1f:10:ce:7e:08: 88:22:97:69:eb:96:bf:e5:ed:3e:75:ee:7c:6c:ff: 64:67:3e:9a:bf:23:d1:13:b8:b3:e9:6f:d7:0a:c7: b6:58:f8:60:53:3b:31:50:38:36:fb:4b:ca:76:cc: 5f:38:6f:32:d0:82:7e:66:f0:87:db:07:bd:b1:46: d9:1e:af:6c:80:7f:8e:09:c3:4d:f4:bb:1a:77:35: 38:c6:99:f1:95:05:69:2c:ac:d1:98:17:b8:8b:15: 50:77:fc:b6:df:56:d1:d0:9b:c1:82:e8:cf:7a:f0: 87:b8:39:a0:73:67:82:9f:a4:8c:9e:39:02:49:fe: 38:e6:f7:41:b1:a5:2e:7c:7a:1a:43:26:4e:a4:1c: 31:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:7B:B3:2F:01:05:04:3D:B7:73:C7:4F:01:30:A1:87:D0:E0:57:3B X509v3 Authority Key Identifier: keyid:34:C3:8D:66:49:B9:0D:68:D3:CE:6C:09:F1:EB:94:D3:E5:79:FC:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9192491/D0626D92AD2F11E98FF8D77FC4F9AE02/NMONZkm5DWjTzmwJ8euU0-V5_J0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NMONZkm5DWjTzmwJ8euU0-V5_J0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9192491/D0626D92AD2F11E98FF8D77FC4F9AE02/NMONZkm5DWjTzmwJ8euU0-V5_J0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 17:08:ba:93:e6:96:4c:3c:4a:bb:75:78:e7:ab:5c:9f:51:bc: 00:fb:00:d7:4d:96:df:83:cb:3d:0f:cf:01:78:5f:da:8a:b7: 01:04:43:70:a1:83:1e:38:f5:8f:99:3b:ed:f1:11:90:00:7d: 3a:16:87:2b:29:95:c4:3d:ad:02:a0:bf:cc:e1:f3:bb:77:04: de:fc:e0:7b:fd:e3:2b:4b:8c:d6:1a:5c:76:b3:7a:55:06:23: 76:1f:09:f2:89:50:3b:b8:47:85:bd:72:88:fa:b3:dc:fc:ad: 04:2b:34:0e:b8:3a:a4:82:a5:d0:06:fb:8e:c7:8d:1f:48:f8: c7:4f:05:e0:ca:f2:68:f5:35:65:13:cc:c7:94:f8:ab:a9:bd: ce:25:97:ad:b7:05:9f:e5:c4:15:8c:d0:92:aa:4b:c1:dc:6c: 61:9c:86:88:b4:c5:85:bb:e5:ee:78:32:e7:1b:f1:a7:95:2b: e4:2f:f4:e6:e9:82:eb:2b:99:14:02:3c:34:2c:c1:27:df:4c: ff:29:63:68:2b:c0:5f:22:ac:81:2c:69:4c:ac:71:fa:6e:a9: 95:f1:29:41:ae:85:76:38:a0:36:7e:04:26:9c:cb:dc:13:83: 3f:e2:1c:44:b1:a7:e4:b0:24:4f:90:cd:ea:4a:2f:c9:e8:a0: b0:bb:2c:44 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDfUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTI0OTExMTAvBgNVBAUTKDM0QzM4RDY2NDlCOTBENjhEM0NFNkMwOUYxRUI5NEQz RTU3OUZDOUQwHhcNMjUwNDI0MTc0OTAxWhcNMjUwNTAxMTc0OTAxWjAYMRYwFAYD VQQDEw02ODBhNzk4ZC0zNzlkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsvuPz0B5EHjZw72yYGzFnUZQnU+g4EHaQNBhQm71VGW9lMXaMK4ipj9UHH4m oxHqtfBoyqrRV7n4hLJBMKfvCp7CXW6TpaXoTX/jKEhlF/TmyP3/o0nWSimQxP0t sSpxFHSwFwXQL03aodAKxdZzrWE9HxDOfgiIIpdp65a/5e0+de58bP9kZz6avyPR E7iz6W/XCse2WPhgUzsxUDg2+0vKdsxfOG8y0IJ+ZvCH2we9sUbZHq9sgH+OCcNN 9LsadzU4xpnxlQVpLKzRmBe4ixVQd/y231bR0JvBgujPevCHuDmgc2eCn6SMnjkC Sf445vdBsaUufHoaQyZOpBwxPQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP97sy8B BQQ9t3PHTwEwoYfQ4Fc7MB8GA1UdIwQYMBaAFDTDjWZJuQ1o085sCfHrlNPlefyd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MjQ5MS9EMDYyNkQ5MkFE MkYxMUU5OEZGOEQ3N0ZDNEY5QUUwMi9OTU9OWmttNURXalR6bXdKOGV1VTAtVjVf SjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05NT05aa201RFdqVHptd0o4ZXVVMC1WNV9KMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MjQ5MS9EMDYyNkQ5MkFEMkYxMUU5OEZGOEQ3N0ZDNEY5QUUwMi9OTU9OWmttNURX alR6bXdKOGV1VTAtVjVfSjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAXCLqT5pZMPEq7dXjnq1yfUbwA+wDXTZbfg8s9D88BeF/aircBBENw oYMeOPWPmTvt8RGQAH06FocrKZXEPa0CoL/M4fO7dwTe/OB7/eMrS4zWGlx2s3pV BiN2HwnyiVA7uEeFvXKI+rPc/K0EKzQOuDqkgqXQBvuOx40fSPjHTwXgyvJo9TVl E8zHlPirqb3OJZettwWf5cQVjNCSqkvB3GxhnIaItMWFu+XueDLnG/GnlSvkL/Tm 6YLrK5kUAjw0LMEn30z/KWNoK8BfIqyBLGlMrHH6bqmV8SlBroV2OKA2fgQmnMvc E4M/4hxEsafksCRPkM3qSi/J6KCwuyxE -----END CERTIFICATE-----Generated at Sat Apr 26 04:25:41 2025 by rpki-client