$ rpki-client -vvf rpki.apnic.net/member_repository/A91B927E/CCD6ED1C68DF11EA97B15524C4F9AE02/NG3w702Lxjw4JNbkkAZ0YyVHsIo.mft File: NG3w702Lxjw4JNbkkAZ0YyVHsIo.mft (raw, json) Hash identifier: oxNS6Bvf3xVt3Xmg76rtBb5HcT4/6vdGQVDxK5XCHsg= Subject key identifier: 26:FB:D3:53:45:8C:14:8E:B1:E6:9E:AC:DF:CF:DB:8A:51:18:9F:06 Authority key identifier: 34:6D:F0:EF:4D:8B:C6:3C:38:24:D6:E4:90:06:74:63:25:47:B0:8A Certificate issuer: /CN=A91B927E/serialNumber=346DF0EF4D8BC63C3824D6E4900674632547B08A Certificate serial: 0A2E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NG3w702Lxjw4JNbkkAZ0YyVHsIo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B927E/CCD6ED1C68DF11EA97B15524C4F9AE02/NG3w702Lxjw4JNbkkAZ0YyVHsIo.mft Manifest number: 1107 Signing time: Thu 24 Apr 2025 19:39:25 +0000 Manifest this update: Thu 24 Apr 2025 19:39:24 +0000 Manifest next update: Thu 01 May 2025 19:39:24 +0000 Files and hashes: 1: NG3w702Lxjw4JNbkkAZ0YyVHsIo.crl (hash: SWq9I5S/5wZvnjTc9l7E/AcozY0/9B+Ww2rt7EDG/0Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B927E/CCD6ED1C68DF11EA97B15524C4F9AE02/NG3w702Lxjw4JNbkkAZ0YyVHsIo.crl rsync://rpki.apnic.net/member_repository/A91B927E/CCD6ED1C68DF11EA97B15524C4F9AE02/NG3w702Lxjw4JNbkkAZ0YyVHsIo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NG3w702Lxjw4JNbkkAZ0YyVHsIo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 19:39:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2606 (0xa2e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B927E, serialNumber=346DF0EF4D8BC63C3824D6E4900674632547B08A Validity Not Before: Apr 24 19:39:24 2025 GMT Not After : May 1 19:39:24 2025 GMT Subject: CN=680a936d-a635 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:38:c5:3e:a9:72:9e:81:46:3c:a5:33:00:ea: 9b:b8:59:4d:2d:51:a3:05:ff:77:fd:4d:99:4b:d9: d4:44:da:28:57:e3:f4:34:8a:8d:58:5a:4b:9b:7a: 6d:9c:71:9e:33:99:01:37:b5:00:16:05:ef:93:89: 6d:aa:c6:33:66:6a:4e:38:e8:a2:65:23:f9:38:56: 13:06:e1:24:25:fe:18:37:dd:7c:12:a3:80:70:1f: a2:58:4f:ab:bd:48:b4:c3:9d:ee:42:f5:d1:e8:93: dc:83:71:fd:88:b2:0b:3e:ab:4b:01:5b:ab:ac:f8: 96:7c:1e:f0:87:53:cc:04:dc:d2:15:a3:03:42:21: d6:85:b0:d5:dc:7f:a1:b0:ce:7c:ba:33:80:a9:bb: 27:81:3f:18:0e:6f:f3:6b:28:e7:24:f2:1a:a7:00: 0c:db:0c:68:6d:8c:65:84:8d:d0:aa:c7:50:c4:74: 26:db:72:e8:7f:17:63:6f:ae:21:b5:e9:f1:14:54: 7d:33:6f:7b:86:3d:80:55:da:81:4a:86:b1:d6:d6: 3c:be:53:02:8f:67:5e:67:fb:75:af:d8:57:1b:a2: 48:ac:4b:a0:c5:a0:1f:57:d7:62:19:73:3a:3c:2d: fb:09:83:8e:e8:59:fc:0d:24:42:05:d3:f9:f1:00: a2:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:FB:D3:53:45:8C:14:8E:B1:E6:9E:AC:DF:CF:DB:8A:51:18:9F:06 X509v3 Authority Key Identifier: keyid:34:6D:F0:EF:4D:8B:C6:3C:38:24:D6:E4:90:06:74:63:25:47:B0:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B927E/CCD6ED1C68DF11EA97B15524C4F9AE02/NG3w702Lxjw4JNbkkAZ0YyVHsIo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NG3w702Lxjw4JNbkkAZ0YyVHsIo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B927E/CCD6ED1C68DF11EA97B15524C4F9AE02/NG3w702Lxjw4JNbkkAZ0YyVHsIo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8c:10:0c:1e:2d:bd:7c:db:fb:54:a4:f7:23:f0:75:fa:a1:60: 5c:4f:d9:f4:a3:c0:ae:9c:cb:c5:3b:41:f6:19:f7:f7:03:2d: 9b:00:c4:09:13:cb:1f:45:26:3f:1b:b6:d7:ef:b8:c3:e0:6d: 45:8f:ca:b2:9c:af:7a:0d:07:17:18:7d:de:ad:bd:84:ae:8d: 09:ee:a6:bb:1b:98:50:dd:fd:23:1d:55:1e:0f:b6:4c:c0:c1: bf:73:09:eb:d4:bf:3e:1d:82:08:80:cd:d9:b1:70:cb:9a:56: 0d:b6:fb:8e:f8:50:e4:27:78:2c:c5:01:b0:a4:5d:c0:a4:eb: 8c:77:6a:8d:d3:6b:63:6c:e0:af:5c:b1:e8:a6:63:95:a3:b0: 1e:59:6c:68:70:97:19:3f:ce:46:d8:da:91:b8:81:cb:52:8f: be:94:0b:a4:b8:36:4c:f1:5a:ac:e9:b7:76:13:d9:64:ce:0d: cb:fc:8c:fc:71:59:10:3d:2f:df:1a:ff:02:67:2a:5b:7b:95: 2f:ab:8b:16:75:3c:66:ef:ed:32:54:db:da:44:92:9c:ea:80: 7b:39:18:06:00:68:3e:8d:1e:24:f4:24:db:6c:71:45:c6:85: 24:78:26:f7:5c:f1:01:a2:ec:30:b3:88:96:6d:38:09:a5:28: 90:26:25:f3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCi4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjkyN0UxMTAvBgNVBAUTKDM0NkRGMEVGNEQ4QkM2M0MzODI0RDZFNDkwMDY3NDYz MjU0N0IwOEEwHhcNMjUwNDI0MTkzOTI0WhcNMjUwNTAxMTkzOTI0WjAYMRYwFAYD VQQDEw02ODBhOTM2ZC1hNjM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwTjFPqlynoFGPKUzAOqbuFlNLVGjBf93/U2ZS9nURNooV+P0NIqNWFpLm3pt nHGeM5kBN7UAFgXvk4ltqsYzZmpOOOiiZSP5OFYTBuEkJf4YN918EqOAcB+iWE+r vUi0w53uQvXR6JPcg3H9iLILPqtLAVurrPiWfB7wh1PMBNzSFaMDQiHWhbDV3H+h sM58ujOAqbsngT8YDm/zayjnJPIapwAM2wxobYxlhI3QqsdQxHQm23Lofxdjb64h tenxFFR9M297hj2AVdqBSoax1tY8vlMCj2deZ/t1r9hXG6JIrEugxaAfV9diGXM6 PC37CYOO6Fn8DSRCBdP58QCi8wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCb701NF jBSOseaerN/P24pRGJ8GMB8GA1UdIwQYMBaAFDRt8O9Ni8Y8OCTW5JAGdGMlR7CK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOTI3RS9DQ0Q2RUQxQzY4 REYxMUVBOTdCMTU1MjRDNEY5QUUwMi9ORzN3NzAyTHhqdzRKTmJra0FaMFl5Vkhz SW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05HM3c3MDJMeGp3NEpOYmtrQVowWXlWSHNJby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC OTI3RS9DQ0Q2RUQxQzY4REYxMUVBOTdCMTU1MjRDNEY5QUUwMi9ORzN3NzAyTHhq dzRKTmJra0FaMFl5VkhzSW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCMEAweLb182/tUpPcj8HX6oWBcT9n0o8CunMvFO0H2Gff3Ay2bAMQJ E8sfRSY/G7bX77jD4G1Fj8qynK96DQcXGH3erb2Ero0J7qa7G5hQ3f0jHVUeD7ZM wMG/cwnr1L8+HYIIgM3ZsXDLmlYNtvuO+FDkJ3gsxQGwpF3ApOuMd2qN02tjbOCv XLHopmOVo7AeWWxocJcZP85G2NqRuIHLUo++lAukuDZM8Vqs6bd2E9lkzg3L/Iz8 cVkQPS/fGv8CZypbe5Uvq4sWdTxm7+0yVNvaRJKc6oB7ORgGAGg+jR4k9CTbbHFF xoUkeCb3XPEBouwws4iWbTgJpSiQJiXz -----END CERTIFICATE-----Generated at Sat Apr 26 03:46:32 2025 by rpki-client