$ rpki-client -vvf rpki.apnic.net/member_repository/A912677F/C43D769663EC11EA97B72587C4F9AE02/NmQpLU_S3_HIhBdQ_IN58ZRaE34.mft File: NmQpLU_S3_HIhBdQ_IN58ZRaE34.mft (raw, json) Hash identifier: 6kzkC8gYg9P7Ses1KC7z78Xd298dLftrgvh8XGY7DCY= Subject key identifier: 23:D6:6F:D3:71:07:D7:B3:C1:FA:49:E5:6D:C1:DC:C3:84:7B:B1:6B Authority key identifier: 36:64:29:2D:4F:D2:DF:F1:C8:84:17:50:FC:83:79:F1:94:5A:13:7E Certificate issuer: /CN=A912677F/serialNumber=3664292D4FD2DFF1C8841750FC8379F1945A137E Certificate serial: 0A5D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NmQpLU_S3_HIhBdQ_IN58ZRaE34.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912677F/C43D769663EC11EA97B72587C4F9AE02/NmQpLU_S3_HIhBdQ_IN58ZRaE34.mft Manifest number: 0A56 Signing time: Wed 14 May 2025 19:47:26 +0000 Manifest this update: Wed 14 May 2025 19:47:26 +0000 Manifest next update: Wed 21 May 2025 19:47:26 +0000 Files and hashes: 1: NmQpLU_S3_HIhBdQ_IN58ZRaE34.crl (hash: Rj9p6GtSpxoqkZVT8ZIIZhXP8ekAk03GyYILewEkfZY=) 2: B82FA738111C11EBB805F52AC4F9AE02.roa (hash: EJ4VnRATjOO9ERUrQeU1qxPXlhkEMnZWEHJLCS7gQyQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912677F/C43D769663EC11EA97B72587C4F9AE02/NmQpLU_S3_HIhBdQ_IN58ZRaE34.crl rsync://rpki.apnic.net/member_repository/A912677F/C43D769663EC11EA97B72587C4F9AE02/NmQpLU_S3_HIhBdQ_IN58ZRaE34.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NmQpLU_S3_HIhBdQ_IN58ZRaE34.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 21 May 2025 19:47:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2653 (0xa5d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912677F, serialNumber=3664292D4FD2DFF1C8841750FC8379F1945A137E Validity Not Before: May 14 19:47:26 2025 GMT Not After : May 21 19:47:26 2025 GMT Subject: CN=6824f34e-fe82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:5e:12:05:30:d4:11:53:f0:e8:e6:73:94:56: d3:ab:fa:8d:5e:d2:8f:8c:d2:99:24:68:1e:28:d6: 9b:e3:fc:e0:36:5f:14:d8:7a:b5:f9:45:f3:bb:8e: 01:4a:a7:a6:52:75:f8:5f:48:b6:da:8c:27:69:3e: 7d:f6:c5:ca:ce:ef:0d:56:61:b7:d5:2c:a1:66:5d: f5:56:a1:65:91:88:dd:e1:f3:57:5b:0e:3f:d1:d6: c7:f3:a8:c7:c9:0f:06:87:32:56:0c:b6:d0:7d:d6: 85:7f:7f:e6:4d:b9:dc:bf:ed:bb:ee:08:fa:77:f3: d8:e2:08:8a:aa:28:13:3a:a1:bc:4c:1b:91:eb:a0: a2:f1:d0:49:a8:e4:2e:0d:94:0a:c7:d5:ee:1a:9f: cc:a6:53:cc:4e:b1:35:bc:53:cb:7a:67:d0:7a:36: 99:ba:d4:90:e3:de:1b:ce:05:0f:e5:bd:e1:16:b4: e4:54:04:4f:5e:11:f6:1a:9a:ba:f6:35:62:8c:21: e6:ab:51:dc:ee:26:6a:8e:ac:b5:16:6c:9a:2a:b9: ec:2a:f0:4a:f3:45:f1:ed:32:8f:9c:7a:38:e7:71: 7f:40:e7:00:2e:13:01:d6:95:3f:c6:73:c2:f2:69: 5e:2b:f6:13:51:b0:ad:ab:d3:cf:47:09:b3:65:1a: a3:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:D6:6F:D3:71:07:D7:B3:C1:FA:49:E5:6D:C1:DC:C3:84:7B:B1:6B X509v3 Authority Key Identifier: keyid:36:64:29:2D:4F:D2:DF:F1:C8:84:17:50:FC:83:79:F1:94:5A:13:7E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912677F/C43D769663EC11EA97B72587C4F9AE02/NmQpLU_S3_HIhBdQ_IN58ZRaE34.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NmQpLU_S3_HIhBdQ_IN58ZRaE34.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912677F/C43D769663EC11EA97B72587C4F9AE02/NmQpLU_S3_HIhBdQ_IN58ZRaE34.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2d:94:cb:d8:34:e0:fa:76:1b:2c:10:74:45:d2:5f:6c:60:97: 78:86:57:e6:b6:83:06:d5:4f:84:fa:ff:1d:71:b7:3b:f3:b9: 49:d6:6d:d6:81:f3:2a:8b:07:31:1c:04:a1:e9:00:52:ff:ce: e4:f0:cd:e5:19:7c:f2:c3:94:f1:31:bd:9a:18:c1:09:c1:13: 49:6c:f5:09:98:37:75:b4:43:e1:44:a8:6f:1d:01:96:cb:41: 42:b3:c8:c0:0a:ce:b4:9b:28:90:1a:3f:22:d7:0c:b5:84:c1: 8b:05:0f:38:4a:39:bb:15:a9:7b:ad:1e:9a:3f:ec:14:8b:52: 57:5c:9c:de:d5:de:83:01:05:d3:21:1d:11:91:67:49:eb:99: 60:6f:59:68:5f:21:73:8e:e7:c4:0e:b0:5e:3c:70:ab:5a:20: 96:ef:f4:db:d5:35:a7:ee:8b:5c:74:28:5e:14:58:15:a3:a2: dd:0a:8a:bb:08:8e:38:f5:e9:cf:6e:21:93:b7:7a:b3:d2:64: 95:0d:a6:f9:7e:9c:d0:7c:93:15:3d:d2:23:d2:bd:ce:b4:14: 4f:fd:dd:65:5d:a6:7b:0e:9e:10:8f:e9:12:d4:4f:fd:32:4c: e9:1f:9c:7b:ab:2f:eb:1c:52:51:67:7e:43:5e:53:f4:65:6e: 03:2a:ea:05 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCl0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjY3N0YxMTAvBgNVBAUTKDM2NjQyOTJENEZEMkRGRjFDODg0MTc1MEZDODM3OUYx OTQ1QTEzN0UwHhcNMjUwNTE0MTk0NzI2WhcNMjUwNTIxMTk0NzI2WjAYMRYwFAYD VQQDEw02ODI0ZjM0ZS1mZTgyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA514SBTDUEVPw6OZzlFbTq/qNXtKPjNKZJGgeKNab4/zgNl8U2Hq1+UXzu44B SqemUnX4X0i22ownaT599sXKzu8NVmG31SyhZl31VqFlkYjd4fNXWw4/0dbH86jH yQ8GhzJWDLbQfdaFf3/mTbncv+277gj6d/PY4giKqigTOqG8TBuR66Ci8dBJqOQu DZQKx9XuGp/MplPMTrE1vFPLemfQejaZutSQ494bzgUP5b3hFrTkVARPXhH2Gpq6 9jVijCHmq1Hc7iZqjqy1FmyaKrnsKvBK80Xx7TKPnHo453F/QOcALhMB1pU/xnPC 8mleK/YTUbCtq9PPRwmzZRqjmwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCPWb9Nx B9ezwfpJ5W3B3MOEe7FrMB8GA1UdIwQYMBaAFDZkKS1P0t/xyIQXUPyDefGUWhN+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNjc3Ri9DNDNENzY5NjYz RUMxMUVBOTdCNzI1ODdDNEY5QUUwMi9ObVFwTFVfUzNfSEloQmRRX0lONThaUmFF MzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05tUXBMVV9TM19ISWhCZFFfSU41OFpSYUUzNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy Njc3Ri9DNDNENzY5NjYzRUMxMUVBOTdCNzI1ODdDNEY5QUUwMi9ObVFwTFVfUzNf SEloQmRRX0lONThaUmFFMzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAtlMvYNOD6dhssEHRF0l9sYJd4hlfmtoMG1U+E+v8dcbc787lJ1m3W gfMqiwcxHASh6QBS/87k8M3lGXzyw5TxMb2aGMEJwRNJbPUJmDd1tEPhRKhvHQGW y0FCs8jACs60myiQGj8i1wy1hMGLBQ84Sjm7Fal7rR6aP+wUi1JXXJze1d6DAQXT IR0RkWdJ65lgb1loXyFzjufEDrBePHCrWiCW7/Tb1TWn7otcdCheFFgVo6LdCoq7 CI449enPbiGTt3qz0mSVDab5fpzQfJMVPdIj0r3OtBRP/d1lXaZ7Dp4Qj+kS1E/9 MkzpH5x7qy/rHFJRZ35DXlP0ZW4DKuoF -----END CERTIFICATE-----Generated at Fri May 16 10:20:48 2025 by rpki-client