$ rpki-client -vvf rpki.apnic.net/member_repository/A91F473F/1D17EDB42B9011EE8B5DE470C4F9AE02/NcbYSDFsIdmTz25MBtYB3AXvxOE.mft File: NcbYSDFsIdmTz25MBtYB3AXvxOE.mft (raw, json) Hash identifier: UBKzDO1/XOpRxTkA0xS7YxGFS5Rskf/w+ypo8ehcuLg= Subject key identifier: 92:DE:C8:83:5E:EA:57:41:88:FA:33:D7:1E:4E:92:0B:6D:8D:95:7E Authority key identifier: 35:C6:D8:48:31:6C:21:D9:93:CF:6E:4C:06:D6:01:DC:05:EF:C4:E1 Certificate issuer: /CN=A91F473F/serialNumber=35C6D848316C21D993CF6E4C06D601DC05EFC4E1 Certificate serial: 0167 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NcbYSDFsIdmTz25MBtYB3AXvxOE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F473F/1D17EDB42B9011EE8B5DE470C4F9AE02/NcbYSDFsIdmTz25MBtYB3AXvxOE.mft Manifest number: 0165 Signing time: Tue 17 Jun 2025 03:01:21 +0000 Manifest this update: Tue 17 Jun 2025 03:01:20 +0000 Manifest next update: Tue 24 Jun 2025 03:01:20 +0000 Files and hashes: 1: NcbYSDFsIdmTz25MBtYB3AXvxOE.crl (hash: +FWlzedss51Ta2oJRjUFemM4J36RCuTROoWIicsrgII=) 2: C416FBB02D6F11EEAC755B42C4F9AE02.roa (hash: ABFFM1PxoSUJD+uYz/pY10lv6OnyO7PHPufaHPjtOBE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F473F/1D17EDB42B9011EE8B5DE470C4F9AE02/NcbYSDFsIdmTz25MBtYB3AXvxOE.crl rsync://rpki.apnic.net/member_repository/A91F473F/1D17EDB42B9011EE8B5DE470C4F9AE02/NcbYSDFsIdmTz25MBtYB3AXvxOE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NcbYSDFsIdmTz25MBtYB3AXvxOE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 24 Jun 2025 03:01:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 359 (0x167) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F473F, serialNumber=35C6D848316C21D993CF6E4C06D601DC05EFC4E1 Validity Not Before: Jun 17 03:01:20 2025 GMT Not After : Jun 24 03:01:20 2025 GMT Subject: CN=6850da80-f15d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:48:88:df:64:fb:92:d5:d2:7d:73:96:9f:f5: 6c:df:5b:4a:f2:28:e8:a9:17:53:7f:c8:bc:26:39: 71:62:fc:a8:36:ab:84:c2:f6:4d:57:6b:d1:f1:5a: 52:93:aa:1f:4f:7b:57:d6:1e:0c:79:2a:9b:75:4e: 62:e4:73:68:8a:5a:d1:e7:aa:12:52:87:1d:38:e6: 5e:19:f6:91:7a:2b:2a:d1:2d:b5:b8:7e:fc:0f:b6: a9:87:00:53:5e:21:90:d0:cf:9b:c4:48:6d:a9:49: 23:15:e6:68:d0:d8:46:b9:80:8a:73:ca:73:e5:ba: 85:65:3c:e8:c0:62:87:bf:b1:fa:27:ea:e1:75:68: 57:69:8b:fb:5e:e4:e7:a4:53:b1:21:b8:94:e8:5f: 40:f1:c1:12:ed:df:b7:c2:be:98:b7:0c:5b:d3:53: 3d:5b:7e:82:36:e4:5e:bf:1d:8f:96:43:83:b6:55: 0b:74:f5:d3:96:0f:d3:15:29:ef:65:59:06:bf:88: 2a:42:8e:b8:ab:21:3d:af:3c:95:21:4c:fb:6b:fe: ba:2a:61:bd:78:54:65:e2:9d:fe:cf:d9:14:73:44: 3b:0f:ae:9d:e6:26:9d:f2:10:f9:9a:90:90:82:eb: de:7b:a1:d3:47:93:8b:4d:35:83:a9:2e:2d:c1:c0: a4:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:DE:C8:83:5E:EA:57:41:88:FA:33:D7:1E:4E:92:0B:6D:8D:95:7E X509v3 Authority Key Identifier: keyid:35:C6:D8:48:31:6C:21:D9:93:CF:6E:4C:06:D6:01:DC:05:EF:C4:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F473F/1D17EDB42B9011EE8B5DE470C4F9AE02/NcbYSDFsIdmTz25MBtYB3AXvxOE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NcbYSDFsIdmTz25MBtYB3AXvxOE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F473F/1D17EDB42B9011EE8B5DE470C4F9AE02/NcbYSDFsIdmTz25MBtYB3AXvxOE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3a:cc:49:f8:f0:1f:9c:26:25:d5:ab:a2:f5:f2:a8:53:3c:4d: 24:73:bd:d7:72:fa:92:09:07:9e:44:8c:c4:19:21:87:f2:b5: 42:72:c5:ac:97:b4:c0:43:d0:92:32:9d:e8:48:e6:89:16:78: 2d:08:1d:52:85:2a:a1:0f:a4:df:93:66:e6:11:d1:86:1e:43: 47:39:70:32:2b:9b:34:9e:d8:94:fa:ee:2e:93:89:40:36:c5: 57:12:5c:46:ec:ec:41:1c:f5:14:0f:65:27:f7:99:64:d4:c5: 39:f3:67:98:20:42:04:b0:f7:19:41:c8:19:93:82:bb:91:4c: 07:88:6e:d5:f9:42:80:3f:a3:fa:d3:8d:9c:fe:13:14:47:a7: d6:a7:81:64:7e:a9:8e:9b:ad:b8:c2:58:3c:35:02:56:98:0a: 25:5b:99:2c:9c:8b:8e:b0:d5:e2:04:a8:f2:f9:82:cb:90:5e: 6d:41:a3:6d:f5:ec:46:a3:e8:db:19:25:e7:71:2d:d1:f5:7b: 84:02:e7:69:42:06:1f:46:0b:74:2a:db:87:5b:fe:da:fd:63: bd:ac:57:aa:09:c9:3a:e7:19:c7:3e:b2:e8:ec:d1:9f:21:ab: 80:ad:43:4b:b3:41:2d:ea:69:13:65:94:92:a0:7b:2e:44:5f: 01:4b:63:88 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAWcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjQ3M0YxMTAvBgNVBAUTKDM1QzZEODQ4MzE2QzIxRDk5M0NGNkU0QzA2RDYwMURD MDVFRkM0RTEwHhcNMjUwNjE3MDMwMTIwWhcNMjUwNjI0MDMwMTIwWjAYMRYwFAYD VQQDEw02ODUwZGE4MC1mMTVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwEiI32T7ktXSfXOWn/Vs31tK8ijoqRdTf8i8JjlxYvyoNquEwvZNV2vR8VpS k6ofT3tX1h4MeSqbdU5i5HNoilrR56oSUocdOOZeGfaReisq0S21uH78D7aphwBT XiGQ0M+bxEhtqUkjFeZo0NhGuYCKc8pz5bqFZTzowGKHv7H6J+rhdWhXaYv7XuTn pFOxIbiU6F9A8cES7d+3wr6Ytwxb01M9W36CNuRevx2PlkODtlULdPXTlg/TFSnv ZVkGv4gqQo64qyE9rzyVIUz7a/66KmG9eFRl4p3+z9kUc0Q7D66d5iad8hD5mpCQ guvee6HTR5OLTTWDqS4twcCkUQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJLeyINe 6ldBiPoz1x5OkgttjZV+MB8GA1UdIwQYMBaAFDXG2EgxbCHZk89uTAbWAdwF78Th MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNDczRi8xRDE3RURCNDJC OTAxMUVFOEI1REU0NzBDNEY5QUUwMi9OY2JZU0RGc0lkbVR6MjVNQnRZQjNBWHZ4 T0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05jYllTREZzSWRtVHoyNU1CdFlCM0FYdnhPRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NDczRi8xRDE3RURCNDJCOTAxMUVFOEI1REU0NzBDNEY5QUUwMi9OY2JZU0RGc0lk bVR6MjVNQnRZQjNBWHZ4T0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA6zEn48B+cJiXVq6L18qhTPE0kc73XcvqSCQeeRIzEGSGH8rVCcsWs l7TAQ9CSMp3oSOaJFngtCB1ShSqhD6Tfk2bmEdGGHkNHOXAyK5s0ntiU+u4uk4lA NsVXElxG7OxBHPUUD2Un95lk1MU582eYIEIEsPcZQcgZk4K7kUwHiG7V+UKAP6P6 042c/hMUR6fWp4FkfqmOm624wlg8NQJWmAolW5ksnIuOsNXiBKjy+YLLkF5tQaNt 9exGo+jbGSXncS3R9XuEAudpQgYfRgt0KtuHW/7a/WO9rFeqCck65xnHPrLo7NGf IauArUNLs0Et6mkTZZSSoHsuRF8BS2OI -----END CERTIFICATE-----Generated at Wed Jun 18 18:37:43 2025 by rpki-client