$ rpki-client -vvf rpki.apnic.net/member_repository/A91FB8C8/C44C04528EC911EE9F8E447FC4F9AE02/Nps-m3tm6PW7l5puLy56rPUA0_E.mft File: Nps-m3tm6PW7l5puLy56rPUA0_E.mft (raw, json) Hash identifier: nkH1PB3B6xpW4R08P2VZtU6odbLF7xALyKtj03Jq8LY= Subject key identifier: A8:72:34:7E:60:A6:7A:EE:C3:83:4D:22:4E:F8:09:36:EF:FF:F9:64 Authority key identifier: 36:9B:3E:9B:7B:66:E8:F5:BB:97:9A:6E:2F:2E:7A:AC:F5:00:D3:F1 Certificate issuer: /CN=A91FB8C8/serialNumber=369B3E9B7B66E8F5BB979A6E2F2E7AACF500D3F1 Certificate serial: 010F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nps-m3tm6PW7l5puLy56rPUA0_E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FB8C8/C44C04528EC911EE9F8E447FC4F9AE02/Nps-m3tm6PW7l5puLy56rPUA0_E.mft Manifest number: 010C Signing time: Fri 25 Apr 2025 04:04:37 +0000 Manifest this update: Fri 25 Apr 2025 04:04:37 +0000 Manifest next update: Fri 02 May 2025 04:04:36 +0000 Files and hashes: 1: Nps-m3tm6PW7l5puLy56rPUA0_E.crl (hash: RW6BIF7qRl7rS5EE4B3b3D9V6BEf/+iGQ72ZTp9XZqk=) 2: CA5B7DA48ECA11EEA3901581C4F9AE02.roa (hash: NP1KRG9waDvIQkw5KUdNc2k+dz2A2AWeqBvOhbZYwI8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FB8C8/C44C04528EC911EE9F8E447FC4F9AE02/Nps-m3tm6PW7l5puLy56rPUA0_E.crl rsync://rpki.apnic.net/member_repository/A91FB8C8/C44C04528EC911EE9F8E447FC4F9AE02/Nps-m3tm6PW7l5puLy56rPUA0_E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nps-m3tm6PW7l5puLy56rPUA0_E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 04:04:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 271 (0x10f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FB8C8, serialNumber=369B3E9B7B66E8F5BB979A6E2F2E7AACF500D3F1 Validity Not Before: Apr 25 04:04:37 2025 GMT Not After : May 2 04:04:36 2025 GMT Subject: CN=680b09d5-e1d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:a4:d6:67:52:4c:56:c4:cc:dd:25:49:8c:90: 91:5d:e9:6d:94:39:39:34:aa:c4:21:86:5a:64:fb: 37:55:65:cb:61:29:e8:cf:d3:f6:c5:41:b2:35:42: 35:be:06:90:a1:ac:fe:40:d3:d4:e6:b0:e2:a4:a4: 0c:8e:6a:ad:ef:bb:72:13:73:09:b0:89:65:bd:96: 5d:c5:cd:79:b5:0e:b5:31:e8:81:4e:60:a5:e9:d5: 4c:cc:61:e1:9e:6e:7a:de:7f:b1:9f:07:5c:74:9c: c1:6b:d0:59:f4:b1:ca:97:94:1d:26:4e:6c:f4:8a: be:ac:71:c6:3b:d1:df:7e:73:04:e5:d1:4c:44:b1: 35:de:83:e9:4d:7d:c1:0a:23:c0:11:06:77:84:32: 43:c1:97:02:4a:62:63:19:d4:d8:bf:2c:19:af:aa: d2:a1:9b:76:6c:c2:21:21:08:00:0a:c5:07:28:64: e3:ca:14:44:3d:c9:25:ae:51:50:e6:36:e7:6d:12: 35:f9:39:0d:27:e0:1f:d4:93:f6:2f:4e:11:bc:3c: e2:f9:37:09:80:16:5c:a7:0b:b4:d6:c6:8a:d5:cd: 38:43:d4:d1:fc:fd:19:ed:27:1f:76:d2:df:fe:be: 22:8d:b2:b4:35:46:7b:d4:16:37:54:1c:73:8d:70: 2f:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:72:34:7E:60:A6:7A:EE:C3:83:4D:22:4E:F8:09:36:EF:FF:F9:64 X509v3 Authority Key Identifier: keyid:36:9B:3E:9B:7B:66:E8:F5:BB:97:9A:6E:2F:2E:7A:AC:F5:00:D3:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FB8C8/C44C04528EC911EE9F8E447FC4F9AE02/Nps-m3tm6PW7l5puLy56rPUA0_E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nps-m3tm6PW7l5puLy56rPUA0_E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FB8C8/C44C04528EC911EE9F8E447FC4F9AE02/Nps-m3tm6PW7l5puLy56rPUA0_E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 05:65:e1:3f:af:37:e5:82:1a:cf:c5:01:18:df:bb:f2:ae:bb: 22:5a:f7:c8:9f:43:a1:57:c4:41:33:d1:dc:6a:9f:f7:c4:48: 95:a4:f9:a0:16:c8:7c:ed:78:cb:94:2d:ad:2b:ce:44:e1:a5: 02:8d:e8:af:cf:7a:74:81:f7:a1:75:19:c7:3b:b6:0e:d8:7d: 00:45:7e:c6:2f:2d:98:87:64:48:0c:eb:d8:13:76:22:16:b3: d8:cf:7b:79:b2:3c:e7:28:83:b2:0f:f7:d8:07:05:1a:54:f0: 67:64:72:56:ec:a4:dc:70:b0:f5:bd:f6:d9:c7:81:6c:26:51: f9:d5:72:f7:4e:11:5f:4d:05:81:f9:96:ea:82:d7:79:f0:66: d8:45:22:76:90:bc:cf:ed:2f:e6:c2:10:91:66:04:19:46:30: 1e:a3:09:1a:16:02:5e:8c:5c:6d:4c:fa:b9:00:16:74:4d:1f: 70:ad:7b:69:99:b3:55:3e:7a:ae:4d:db:a1:6d:6b:1b:82:65: 68:60:07:a5:c9:62:5f:ed:44:16:64:90:22:07:f5:5e:b0:37: cc:0c:55:2b:6c:e6:0d:50:af:fc:08:0f:38:b2:88:0c:97:c3: ef:5c:36:f0:9a:94:3e:0f:34:ea:96:c3:00:6b:23:27:48:70: 34:2e:1d:9d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQ8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkI4QzgxMTAvBgNVBAUTKDM2OUIzRTlCN0I2NkU4RjVCQjk3OUE2RTJGMkU3QUFD RjUwMEQzRjEwHhcNMjUwNDI1MDQwNDM3WhcNMjUwNTAyMDQwNDM2WjAYMRYwFAYD VQQDEw02ODBiMDlkNS1lMWQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2qTWZ1JMVsTM3SVJjJCRXeltlDk5NKrEIYZaZPs3VWXLYSnoz9P2xUGyNUI1 vgaQoaz+QNPU5rDipKQMjmqt77tyE3MJsIllvZZdxc15tQ61MeiBTmCl6dVMzGHh nm563n+xnwdcdJzBa9BZ9LHKl5QdJk5s9Iq+rHHGO9HffnME5dFMRLE13oPpTX3B CiPAEQZ3hDJDwZcCSmJjGdTYvywZr6rSoZt2bMIhIQgACsUHKGTjyhREPcklrlFQ 5jbnbRI1+TkNJ+Af1JP2L04RvDzi+TcJgBZcpwu01saK1c04Q9TR/P0Z7ScfdtLf /r4ijbK0NUZ71BY3VBxzjXAvLQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKhyNH5g pnruw4NNIk74CTbv//lkMB8GA1UdIwQYMBaAFDabPpt7Zuj1u5eabi8ueqz1ANPx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQjhDOC9DNDRDMDQ1MjhF QzkxMUVFOUY4RTQ0N0ZDNEY5QUUwMi9OcHMtbTN0bTZQVzdsNXB1THk1NnJQVUEw X0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05wcy1tM3RtNlBXN2w1cHVMeTU2clBVQTBfRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QjhDOC9DNDRDMDQ1MjhFQzkxMUVFOUY4RTQ0N0ZDNEY5QUUwMi9OcHMtbTN0bTZQ VzdsNXB1THk1NnJQVUEwX0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAFZeE/rzflghrPxQEY37vyrrsiWvfIn0OhV8RBM9Hcap/3xEiVpPmg Fsh87XjLlC2tK85E4aUCjeivz3p0gfehdRnHO7YO2H0ARX7GLy2Yh2RIDOvYE3Yi FrPYz3t5sjznKIOyD/fYBwUaVPBnZHJW7KTccLD1vfbZx4FsJlH51XL3ThFfTQWB +Zbqgtd58GbYRSJ2kLzP7S/mwhCRZgQZRjAeowkaFgJejFxtTPq5ABZ0TR9wrXtp mbNVPnquTduhbWsbgmVoYAelyWJf7UQWZJAiB/VesDfMDFUrbOYNUK/8CA84sogM l8PvXDbwmpQ+DzTqlsMAayMnSHA0Lh2d -----END CERTIFICATE-----Generated at Sat Apr 26 03:42:17 2025 by rpki-client