$ rpki-client -vvf rpki.apnic.net/member_repository/A914DC56/CDBCF63A669311EE98CEAA50C4F9AE02/nmoKpDnP40ewT3RoQKbkNMUJsac.mft File: nmoKpDnP40ewT3RoQKbkNMUJsac.mft (raw, json) Hash identifier: OZ+veyvovHCP/k6wR/RPRTXZKUdKVX1ZuFtGpuX8Po0= Subject key identifier: 52:C5:3F:E8:F2:64:D4:6B:EA:04:FD:DE:85:22:E2:3F:44:35:8A:A9 Authority key identifier: 9E:6A:0A:A4:39:CF:E3:47:B0:4F:74:68:40:A6:E4:34:C5:09:B1:A7 Certificate issuer: /CN=A914DC56/serialNumber=9E6A0AA439CFE347B04F746840A6E434C509B1A7 Certificate serial: 0131 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nmoKpDnP40ewT3RoQKbkNMUJsac.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914DC56/CDBCF63A669311EE98CEAA50C4F9AE02/nmoKpDnP40ewT3RoQKbkNMUJsac.mft Manifest number: 012E Signing time: Tue 13 May 2025 03:47:26 +0000 Manifest this update: Tue 13 May 2025 03:47:25 +0000 Manifest next update: Tue 20 May 2025 03:47:25 +0000 Files and hashes: 1: nmoKpDnP40ewT3RoQKbkNMUJsac.crl (hash: F1e1EnFNi1XGNKAjiwbWbKsTDRMAPrdfU56KZZ9o8/A=) 2: 11A843B467D811EEA0543B5CC4F9AE02.roa (hash: JGrxdfcTXN7WXmiB33mKDnWSPFdrh+A/TvrelqjBL5s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914DC56/CDBCF63A669311EE98CEAA50C4F9AE02/nmoKpDnP40ewT3RoQKbkNMUJsac.crl rsync://rpki.apnic.net/member_repository/A914DC56/CDBCF63A669311EE98CEAA50C4F9AE02/nmoKpDnP40ewT3RoQKbkNMUJsac.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nmoKpDnP40ewT3RoQKbkNMUJsac.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 03:47:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 305 (0x131) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914DC56, serialNumber=9E6A0AA439CFE347B04F746840A6E434C509B1A7 Validity Not Before: May 13 03:47:25 2025 GMT Not After : May 20 03:47:25 2025 GMT Subject: CN=6822c0ce-1c6c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:02:97:69:d1:41:c8:9e:03:21:a0:6e:0c:de: af:0c:7b:26:bd:60:04:57:33:d9:97:d7:fc:82:bc: 34:d0:0b:e1:5f:e3:dd:df:49:4c:d7:f1:a1:cf:7f: d2:10:28:54:19:3f:97:4b:81:b1:14:e7:63:3a:b6: 46:83:2d:a6:6e:87:d5:ff:33:b8:3f:13:a4:13:c5: 6c:e9:bd:b1:7b:3b:22:76:fd:96:de:24:78:3f:e5: f6:79:a0:8f:13:c0:cb:f6:c0:92:14:4d:8f:d3:ad: 80:30:39:79:c8:45:8e:71:af:5c:8e:52:ad:1b:74: 9f:c6:b0:1f:aa:ba:83:e9:12:95:90:77:3e:e3:c0: db:e7:0d:66:48:b8:e4:05:c4:eb:3b:db:5e:87:82: 49:83:09:27:57:ba:78:de:dd:26:1a:e9:7c:43:3b: 83:a9:34:ed:97:c5:ae:dd:42:5f:d9:54:7e:30:39: 02:c0:8d:5e:bb:a3:9b:91:90:e6:01:1c:82:cb:03: 10:b6:d4:1c:4b:f6:dd:0a:11:4e:2f:d2:3a:b1:b4: 1b:fd:37:e9:36:11:58:53:26:7c:98:b9:c5:76:05: 09:75:e5:65:90:95:ae:f5:52:d4:2a:13:bb:9b:3a: 31:c2:2b:14:ca:ac:ee:3e:ce:0a:d4:b2:54:e9:97: 3a:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:C5:3F:E8:F2:64:D4:6B:EA:04:FD:DE:85:22:E2:3F:44:35:8A:A9 X509v3 Authority Key Identifier: keyid:9E:6A:0A:A4:39:CF:E3:47:B0:4F:74:68:40:A6:E4:34:C5:09:B1:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914DC56/CDBCF63A669311EE98CEAA50C4F9AE02/nmoKpDnP40ewT3RoQKbkNMUJsac.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nmoKpDnP40ewT3RoQKbkNMUJsac.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914DC56/CDBCF63A669311EE98CEAA50C4F9AE02/nmoKpDnP40ewT3RoQKbkNMUJsac.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 93:45:09:f1:32:c7:cd:2f:99:d9:1c:5c:e3:73:a3:f0:c1:7c: f5:d6:df:28:ac:bb:d5:f5:8e:25:22:ff:63:6b:76:7d:35:5e: a5:65:51:5f:e8:a5:0a:6e:36:ba:5d:35:90:11:c7:e9:10:4d: 66:04:10:88:c8:3d:e9:91:ba:08:a2:62:71:ac:0f:82:83:3b: 2c:20:7b:28:b5:85:7c:4b:0c:ac:1f:bc:1d:03:0a:25:06:7c: 94:e2:d7:6d:4a:bc:a0:6f:1b:ae:12:de:18:8b:e9:31:37:f3: fa:a9:b7:7f:c4:5a:e9:15:a3:e8:b4:ed:da:e2:a6:11:cd:de: b3:7c:3b:d2:99:d3:51:cf:f3:91:7a:b3:74:4d:f6:f1:8c:2c: 9c:8e:f4:3d:79:3a:85:a5:5a:db:df:36:f4:c3:88:3a:ba:83: 8b:3e:2b:41:63:d5:cc:b2:da:e6:b7:ec:a0:13:68:69:af:79: 71:f5:de:c5:da:df:2f:20:df:fd:c3:37:c1:fa:8b:85:bb:60: 28:04:cd:40:08:b4:b5:19:e7:d5:b0:64:8a:57:45:57:6c:74: 6d:da:3a:fb:54:f1:e9:4b:50:b3:46:72:e2:13:ea:f7:e7:3e: da:f8:54:ce:65:2c:d3:f4:af:ac:15:db:fa:d9:d6:f2:49:21: fe:3d:7a:ae -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICATEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NERDNTYxMTAvBgNVBAUTKDlFNkEwQUE0MzlDRkUzNDdCMDRGNzQ2ODQwQTZFNDM0 QzUwOUIxQTcwHhcNMjUwNTEzMDM0NzI1WhcNMjUwNTIwMDM0NzI1WjAYMRYwFAYD VQQDEw02ODIyYzBjZS0xYzZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6gKXadFByJ4DIaBuDN6vDHsmvWAEVzPZl9f8grw00AvhX+Pd30lM1/Ghz3/S EChUGT+XS4GxFOdjOrZGgy2mbofV/zO4PxOkE8Vs6b2xezsidv2W3iR4P+X2eaCP E8DL9sCSFE2P062AMDl5yEWOca9cjlKtG3SfxrAfqrqD6RKVkHc+48Db5w1mSLjk BcTrO9teh4JJgwknV7p43t0mGul8QzuDqTTtl8Wu3UJf2VR+MDkCwI1eu6ObkZDm ARyCywMQttQcS/bdChFOL9I6sbQb/TfpNhFYUyZ8mLnFdgUJdeVlkJWu9VLUKhO7 mzoxwisUyqzuPs4K1LJU6Zc6AQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFLFP+jy ZNRr6gT93oUi4j9ENYqpMB8GA1UdIwQYMBaAFJ5qCqQ5z+NHsE90aECm5DTFCbGn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0REM1Ni9DREJDRjYzQTY2 OTMxMUVFOThDRUFBNTBDNEY5QUUwMi9ubW9LcERuUDQwZXdUM1JvUUtia05NVUpz YWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25tb0twRG5QNDBld1QzUm9RS2JrTk1VSnNhYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 REM1Ni9DREJDRjYzQTY2OTMxMUVFOThDRUFBNTBDNEY5QUUwMi9ubW9LcERuUDQw ZXdUM1JvUUtia05NVUpzYWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCTRQnxMsfNL5nZHFzjc6PwwXz11t8orLvV9Y4lIv9ja3Z9NV6lZVFf 6KUKbja6XTWQEcfpEE1mBBCIyD3pkboIomJxrA+CgzssIHsotYV8SwysH7wdAwol BnyU4tdtSrygbxuuEt4Yi+kxN/P6qbd/xFrpFaPotO3a4qYRzd6zfDvSmdNRz/OR erN0TfbxjCycjvQ9eTqFpVrb3zb0w4g6uoOLPitBY9XMstrmt+ygE2hpr3lx9d7F 2t8vIN/9wzfB+ouFu2AoBM1ACLS1GefVsGSKV0VXbHRt2jr7VPHpS1CzRnLiE+r3 5z7a+FTOZSzT9K+sFdv62dbySSH+PXqu -----END CERTIFICATE-----Generated at Wed May 14 01:09:04 2025 by rpki-client