$ rpki-client -vvf rpki.apnic.net/member_repository/A919C318/65B671B6A82211EAABAA2F19C4F9AE02/NAcoRkbqh4WDwlsPqefW7aCRMpg.mft File: NAcoRkbqh4WDwlsPqefW7aCRMpg.mft (raw, json) Hash identifier: 8t20QJSidp8XV1aYrkP3oWRVQvhd27ONSRI47skN89k= Subject key identifier: 09:34:82:39:3B:5C:2F:47:39:24:12:92:16:56:79:14:F1:CE:27:48 Authority key identifier: 34:07:28:46:46:EA:87:85:83:C2:5B:0F:A9:E7:D6:ED:A0:91:32:98 Certificate issuer: /CN=A919C318/serialNumber=3407284646EA878583C25B0FA9E7D6EDA0913298 Certificate serial: 08F2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NAcoRkbqh4WDwlsPqefW7aCRMpg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919C318/65B671B6A82211EAABAA2F19C4F9AE02/NAcoRkbqh4WDwlsPqefW7aCRMpg.mft Manifest number: 08EB Signing time: Thu 24 Apr 2025 20:15:20 +0000 Manifest this update: Thu 24 Apr 2025 20:15:19 +0000 Manifest next update: Thu 01 May 2025 20:15:19 +0000 Files and hashes: 1: NAcoRkbqh4WDwlsPqefW7aCRMpg.crl (hash: 4yXev/02FNh2rF+PDBG1mU2FZRdkTEl01CtAiGAgByQ=) 2: 9AA539E6A82411EA996D5F41C4F9AE02.roa (hash: pMMXr/lqWr+5GcVstLkkyd8gkDTgGy1DHQolAjMLixQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919C318/65B671B6A82211EAABAA2F19C4F9AE02/NAcoRkbqh4WDwlsPqefW7aCRMpg.crl rsync://rpki.apnic.net/member_repository/A919C318/65B671B6A82211EAABAA2F19C4F9AE02/NAcoRkbqh4WDwlsPqefW7aCRMpg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NAcoRkbqh4WDwlsPqefW7aCRMpg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 20:15:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2290 (0x8f2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919C318, serialNumber=3407284646EA878583C25B0FA9E7D6EDA0913298 Validity Not Before: Apr 24 20:15:19 2025 GMT Not After : May 1 20:15:19 2025 GMT Subject: CN=680a9bd7-9b13 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:25:27:1e:86:17:43:e9:47:ae:c5:ce:bc:d1: 0b:f2:37:99:32:4e:2e:28:6f:fb:2e:50:ec:13:44: 81:03:f1:42:26:dc:8d:42:b4:0e:65:10:90:32:b3: 77:1f:13:fd:f4:bc:02:c2:f7:20:b2:4d:61:4d:4a: a6:85:01:53:0e:21:60:05:27:2f:ce:7b:fd:b6:de: 48:b0:d6:a6:34:4a:7f:ff:c0:b9:35:f6:5a:49:43: ed:c2:cc:19:0f:9b:fe:ca:9a:dc:35:ec:68:9c:50: 22:9d:a0:88:52:77:4d:f2:d9:a8:75:02:d6:b5:6c: eb:97:39:68:42:fa:bd:9a:04:9c:ac:4f:65:93:e3: 9e:69:82:de:8f:9e:97:97:9b:5e:a9:7c:9b:39:35: 99:69:d0:82:35:de:e6:25:d2:b2:2f:68:ab:cb:e6: ea:f8:4f:23:32:c5:24:19:3a:20:00:f3:15:5d:e7: 36:65:5f:59:c4:59:4a:1b:67:69:41:38:f5:4d:36: 3e:d2:59:56:e4:e6:8a:7b:28:b9:f6:13:15:bb:a4: 4e:a7:de:f5:11:53:26:57:6b:cd:b0:ba:0d:40:f0: 0b:26:e1:af:6c:08:91:48:92:8c:c0:63:e2:ca:9d: f4:f4:1e:42:14:4f:67:28:6d:43:dc:ac:bd:7e:d6: f2:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:34:82:39:3B:5C:2F:47:39:24:12:92:16:56:79:14:F1:CE:27:48 X509v3 Authority Key Identifier: keyid:34:07:28:46:46:EA:87:85:83:C2:5B:0F:A9:E7:D6:ED:A0:91:32:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919C318/65B671B6A82211EAABAA2F19C4F9AE02/NAcoRkbqh4WDwlsPqefW7aCRMpg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NAcoRkbqh4WDwlsPqefW7aCRMpg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919C318/65B671B6A82211EAABAA2F19C4F9AE02/NAcoRkbqh4WDwlsPqefW7aCRMpg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8c:b8:80:bf:0c:75:d8:57:92:80:e8:a1:8f:43:f3:21:89:18: 8a:ee:49:1c:47:63:45:29:17:1f:e6:e0:c2:22:c6:52:ad:1c: da:88:5c:e1:34:a5:27:65:7b:7e:83:38:74:bb:30:42:a9:d4: f2:09:3f:3c:7f:2a:c6:8e:34:14:9d:d2:f3:98:55:45:94:45: 0d:5a:b5:69:5b:b7:51:ca:6b:4a:a5:91:cc:9f:5b:4d:ad:6c: 04:02:06:21:d6:36:81:f1:f9:ab:a7:9b:96:01:33:bd:24:f4: 9f:f2:8e:54:36:60:83:db:78:4c:e5:e2:6f:2a:4c:5f:c2:ad: fe:3a:a9:c3:77:bc:ce:1a:48:ab:a6:8e:5a:a7:fc:d8:61:fa: f8:ba:16:ef:31:9d:6e:f9:2c:2b:40:16:8a:ca:c0:c7:ca:fe: df:96:02:80:7d:66:bb:50:14:ca:9b:1a:08:ec:1a:cf:42:2a: 97:ca:41:9f:ad:1d:84:2f:58:f2:b3:5d:a9:9c:9e:3a:32:9f: 20:5e:c8:eb:a0:83:a1:79:82:b4:fa:bc:38:42:bf:6c:08:bd: 3a:f7:9f:72:5f:0d:fb:59:4b:48:a5:ce:90:b1:dc:56:72:ca: d4:ce:89:43:b3:db:b6:8c:aa:ab:a1:63:ff:56:15:26:c7:4f: 25:00:91:51 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCPIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUMzMTgxMTAvBgNVBAUTKDM0MDcyODQ2NDZFQTg3ODU4M0MyNUIwRkE5RTdENkVE QTA5MTMyOTgwHhcNMjUwNDI0MjAxNTE5WhcNMjUwNTAxMjAxNTE5WjAYMRYwFAYD VQQDEw02ODBhOWJkNy05YjEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0CUnHoYXQ+lHrsXOvNEL8jeZMk4uKG/7LlDsE0SBA/FCJtyNQrQOZRCQMrN3 HxP99LwCwvcgsk1hTUqmhQFTDiFgBScvznv9tt5IsNamNEp//8C5NfZaSUPtwswZ D5v+yprcNexonFAinaCIUndN8tmodQLWtWzrlzloQvq9mgScrE9lk+OeaYLej56X l5teqXybOTWZadCCNd7mJdKyL2iry+bq+E8jMsUkGTogAPMVXec2ZV9ZxFlKG2dp QTj1TTY+0llW5OaKeyi59hMVu6ROp971EVMmV2vNsLoNQPALJuGvbAiRSJKMwGPi yp309B5CFE9nKG1D3Ky9ftbyhQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAk0gjk7 XC9HOSQSkhZWeRTxzidIMB8GA1UdIwQYMBaAFDQHKEZG6oeFg8JbD6nn1u2gkTKY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QzMxOC82NUI2NzFCNkE4 MjIxMUVBQUJBQTJGMTlDNEY5QUUwMi9OQWNvUmticWg0V0R3bHNQcWVmVzdhQ1JN cGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05BY29Sa2JxaDRXRHdsc1BxZWZXN2FDUk1wZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 QzMxOC82NUI2NzFCNkE4MjIxMUVBQUJBQTJGMTlDNEY5QUUwMi9OQWNvUmticWg0 V0R3bHNQcWVmVzdhQ1JNcGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCMuIC/DHXYV5KA6KGPQ/MhiRiK7kkcR2NFKRcf5uDCIsZSrRzaiFzh NKUnZXt+gzh0uzBCqdTyCT88fyrGjjQUndLzmFVFlEUNWrVpW7dRymtKpZHMn1tN rWwEAgYh1jaB8fmrp5uWATO9JPSf8o5UNmCD23hM5eJvKkxfwq3+OqnDd7zOGkir po5ap/zYYfr4uhbvMZ1u+SwrQBaKysDHyv7flgKAfWa7UBTKmxoI7BrPQiqXykGf rR2EL1jys12pnJ46Mp8gXsjroIOheYK0+rw4Qr9sCL06959yXw37WUtIpc6QsdxW csrUzolDs9u2jKqroWP/VhUmx08lAJFR -----END CERTIFICATE-----Generated at Sat Apr 26 13:03:30 2025 by rpki-client