$ rpki-client -vvf rpki.apnic.net/member_repository/A911894F/963CF0CEEC5E11E48E7D0119C4F9AE02/NhKQaSiZCCzeI_UEU6QVXgqreXg.mft File: NhKQaSiZCCzeI_UEU6QVXgqreXg.mft (raw, json) Hash identifier: 2YFIInLiBLHBPXeSPuOnoF/o/1TvE3MZrJ13tH9ONww= Subject key identifier: 42:C7:B0:4F:B1:30:42:82:F0:8E:11:C8:E0:AB:89:E8:B2:71:BC:A4 Authority key identifier: 36:12:90:69:28:99:08:2C:DE:23:F5:04:53:A4:15:5E:0A:AB:79:78 Certificate issuer: /CN=A911894F/serialNumber=361290692899082CDE23F50453A4155E0AAB7978 Certificate serial: 2652 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NhKQaSiZCCzeI_UEU6QVXgqreXg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911894F/963CF0CEEC5E11E48E7D0119C4F9AE02/NhKQaSiZCCzeI_UEU6QVXgqreXg.mft Manifest number: 2640 Signing time: Sat 10 May 2025 15:38:22 +0000 Manifest this update: Sat 10 May 2025 15:38:22 +0000 Manifest next update: Sat 17 May 2025 15:38:22 +0000 Files and hashes: 1: NhKQaSiZCCzeI_UEU6QVXgqreXg.crl (hash: mE04J6TD8fBktPuN+PrAztzK19pyH4bd6MdnYZtH3W8=) 2: 802FBE707FEB11EB8B5E2817C4F9AE02.roa (hash: 9/RiaD7uB0sOA1UktuQmdvYmR8W/ohMuly3N0jCGO/k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911894F/963CF0CEEC5E11E48E7D0119C4F9AE02/NhKQaSiZCCzeI_UEU6QVXgqreXg.crl rsync://rpki.apnic.net/member_repository/A911894F/963CF0CEEC5E11E48E7D0119C4F9AE02/NhKQaSiZCCzeI_UEU6QVXgqreXg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NhKQaSiZCCzeI_UEU6QVXgqreXg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 15:38:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9810 (0x2652) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911894F, serialNumber=361290692899082CDE23F50453A4155E0AAB7978 Validity Not Before: May 10 15:38:22 2025 GMT Not After : May 17 15:38:22 2025 GMT Subject: CN=681f72ee-e5e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:b7:5a:e1:0e:08:7f:bf:5a:62:99:42:da:7a: bc:15:ac:46:03:af:85:c7:f5:90:cb:32:c6:9b:81: e7:1d:43:05:4d:95:33:2e:82:4f:5d:18:2f:ce:28: 39:9a:15:39:b1:0d:24:80:63:5e:e3:73:9a:d8:65: a8:f6:84:f3:a3:dd:83:a4:64:f0:fb:6f:bf:aa:c3: 9d:3e:81:7c:c3:14:a3:bf:28:23:54:6a:8b:ab:cd: 44:5d:ec:3c:52:0d:aa:f5:38:61:f5:f3:95:f3:93: de:48:7e:9d:cf:4c:30:f1:c3:50:39:3c:42:49:b4: 24:69:54:de:73:89:5b:23:53:b9:a9:e7:13:d3:ab: 98:a7:83:25:6b:3f:4a:23:d7:8f:65:50:e3:04:6c: eb:24:f9:0a:b3:28:07:2f:5c:7f:fb:a2:a5:06:9f: 36:12:6e:bc:d2:0a:3d:6f:18:e2:86:7c:df:b9:07: 38:9f:b1:07:4b:1a:a9:a2:df:25:f4:96:a9:80:b9: e8:e0:b4:2b:e0:e0:d0:b7:26:8c:11:8e:df:79:1c: e7:e4:8b:09:68:52:70:e2:6f:6e:71:c8:31:95:e1: 80:1c:8a:1b:57:5e:e0:4a:8e:b5:64:bf:6b:42:b4: 02:24:f1:97:d5:d2:87:44:0a:4d:ff:34:ad:83:f1: e6:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:C7:B0:4F:B1:30:42:82:F0:8E:11:C8:E0:AB:89:E8:B2:71:BC:A4 X509v3 Authority Key Identifier: keyid:36:12:90:69:28:99:08:2C:DE:23:F5:04:53:A4:15:5E:0A:AB:79:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911894F/963CF0CEEC5E11E48E7D0119C4F9AE02/NhKQaSiZCCzeI_UEU6QVXgqreXg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NhKQaSiZCCzeI_UEU6QVXgqreXg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911894F/963CF0CEEC5E11E48E7D0119C4F9AE02/NhKQaSiZCCzeI_UEU6QVXgqreXg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c3:de:c7:2d:25:7d:a8:4c:42:a5:db:2a:7e:df:c1:1d:b4:c8: ab:12:dd:cb:d5:5e:bf:06:e8:ae:f5:df:17:24:29:85:69:df: fd:3f:f5:c6:ab:56:fe:f5:f1:46:70:f0:6f:10:17:55:0e:d8: 1b:f2:e3:94:b7:6c:dd:df:b1:e0:82:36:f7:74:fd:c1:ec:02: ff:fa:66:5b:f3:75:98:09:38:02:28:e6:dd:e5:5c:29:99:95: 80:08:7f:03:90:bc:c5:1c:8b:6f:8f:2d:67:11:d6:11:06:2d: 23:4e:14:50:f3:0b:11:c7:9e:10:ad:f3:6a:7c:69:3a:98:be: fd:60:8d:94:e7:24:02:bb:b3:0d:ae:41:07:1e:35:c9:b6:98: ed:68:4d:44:87:d4:9f:1a:52:76:df:e0:fe:58:00:88:86:0e: 53:88:4b:aa:4e:d2:44:37:be:b0:a9:eb:6b:cd:eb:92:f8:0b: da:54:2a:79:0c:a5:7e:de:05:a1:78:dd:12:e1:e6:ca:f5:e0: 1e:ef:94:be:a5:a1:01:1f:de:04:b0:b0:d7:3f:b7:f2:7b:f9: 7a:c6:61:fe:08:74:50:37:8a:ec:95:c6:8b:11:69:43:ab:c5: a3:b6:0b:99:93:77:14:40:d7:e4:58:2d:5a:9f:23:99:91:43: 53:3f:30:cb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJlIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTg5NEYxMTAvBgNVBAUTKDM2MTI5MDY5Mjg5OTA4MkNERTIzRjUwNDUzQTQxNTVF MEFBQjc5NzgwHhcNMjUwNTEwMTUzODIyWhcNMjUwNTE3MTUzODIyWjAYMRYwFAYD VQQDEw02ODFmNzJlZS1lNWU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAorda4Q4If79aYplC2nq8FaxGA6+Fx/WQyzLGm4HnHUMFTZUzLoJPXRgvzig5 mhU5sQ0kgGNe43Oa2GWo9oTzo92DpGTw+2+/qsOdPoF8wxSjvygjVGqLq81EXew8 Ug2q9Thh9fOV85PeSH6dz0ww8cNQOTxCSbQkaVTec4lbI1O5qecT06uYp4Mlaz9K I9ePZVDjBGzrJPkKsygHL1x/+6KlBp82Em680go9bxjihnzfuQc4n7EHSxqpot8l 9JapgLno4LQr4ODQtyaMEY7feRzn5IsJaFJw4m9uccgxleGAHIobV17gSo61ZL9r QrQCJPGX1dKHRApN/zStg/HmnQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFELHsE+x MEKC8I4RyOCrieiycbykMB8GA1UdIwQYMBaAFDYSkGkomQgs3iP1BFOkFV4Kq3l4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExODk0Ri85NjNDRjBDRUVD NUUxMUU0OEU3RDAxMTlDNEY5QUUwMi9OaEtRYVNpWkNDemVJX1VFVTZRVlhncXJl WGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05oS1FhU2laQ0N6ZUlfVUVVNlFWWGdxcmVYZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx ODk0Ri85NjNDRjBDRUVDNUUxMUU0OEU3RDAxMTlDNEY5QUUwMi9OaEtRYVNpWkND emVJX1VFVTZRVlhncXJlWGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDD3sctJX2oTEKl2yp+38EdtMirEt3L1V6/Buiu9d8XJCmFad/9P/XG q1b+9fFGcPBvEBdVDtgb8uOUt2zd37Hggjb3dP3B7AL/+mZb83WYCTgCKObd5Vwp mZWACH8DkLzFHItvjy1nEdYRBi0jThRQ8wsRx54QrfNqfGk6mL79YI2U5yQCu7MN rkEHHjXJtpjtaE1Eh9SfGlJ23+D+WACIhg5TiEuqTtJEN76wqetrzeuS+AvaVCp5 DKV+3gWheN0S4ebK9eAe75S+paEBH94EsLDXP7fye/l6xmH+CHRQN4rslcaLEWlD q8WjtguZk3cUQNfkWC1anyOZkUNTPzDL -----END CERTIFICATE-----Generated at Mon May 12 16:11:06 2025 by rpki-client