$ rpki-client -vvf rpki.apnic.net/member_repository/A914E01E/C5C6F05E9EA611EC8FB03654C4F9AE02/nlcX9fFLsp9ntXrX2dXweRWunEM.mft File: nlcX9fFLsp9ntXrX2dXweRWunEM.mft (raw, json) Hash identifier: D9EqsalmLHBU9szI7PWB7NZzC0bqMLBX+7LJk0YC9AI= Subject key identifier: 78:BB:90:32:60:65:A7:3B:4B:9C:DD:D2:50:D9:4C:4B:E6:77:DF:29 Authority key identifier: 9E:57:17:F5:F1:4B:B2:9F:67:B5:7A:D7:D9:D5:F0:79:15:AE:9C:43 Certificate issuer: /CN=A914E01E/serialNumber=9E5717F5F14BB29F67B57AD7D9D5F07915AE9C43 Certificate serial: 038D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nlcX9fFLsp9ntXrX2dXweRWunEM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914E01E/C5C6F05E9EA611EC8FB03654C4F9AE02/nlcX9fFLsp9ntXrX2dXweRWunEM.mft Manifest number: 0389 Signing time: Tue 13 May 2025 00:37:36 +0000 Manifest this update: Tue 13 May 2025 00:37:36 +0000 Manifest next update: Tue 20 May 2025 00:37:36 +0000 Files and hashes: 1: nlcX9fFLsp9ntXrX2dXweRWunEM.crl (hash: Di1eP58Ld52m1a/R7vDpAgjGourBl7Up/6Why0t0yoo=) 2: B775BD7A9EA911EC95EBD87CC4F9AE02.roa (hash: 92HIEbj2G47MSTH5iEgpWYXExI9zDOC82XtCwVyLKgU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914E01E/C5C6F05E9EA611EC8FB03654C4F9AE02/nlcX9fFLsp9ntXrX2dXweRWunEM.crl rsync://rpki.apnic.net/member_repository/A914E01E/C5C6F05E9EA611EC8FB03654C4F9AE02/nlcX9fFLsp9ntXrX2dXweRWunEM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nlcX9fFLsp9ntXrX2dXweRWunEM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 00:37:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 909 (0x38d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914E01E, serialNumber=9E5717F5F14BB29F67B57AD7D9D5F07915AE9C43 Validity Not Before: May 13 00:37:36 2025 GMT Not After : May 20 00:37:36 2025 GMT Subject: CN=68229450-3431 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:dd:68:5f:a1:d7:bf:79:de:7d:93:a3:a2:5b: 76:fa:61:63:8f:d6:56:f5:68:82:a8:7e:f6:1a:eb: ed:b5:45:01:4f:ba:17:44:f8:cb:5b:1a:0e:1c:ad: fb:d8:1b:e0:c2:05:44:a3:7e:ac:8f:24:5b:51:ee: f9:28:5f:d8:ac:84:bb:c6:5d:06:ac:50:fd:a5:82: 89:3f:a5:bd:8e:43:a1:f1:9b:da:01:2e:af:97:78: eb:06:e8:b5:9f:41:80:df:72:1c:eb:7d:fc:30:57: f3:88:7d:78:74:6a:be:ef:d2:88:f6:16:4a:01:8e: 6a:27:e8:cc:4d:ab:3f:0d:4f:7e:4a:c5:c3:24:6d: 81:86:6d:2e:62:45:3a:98:18:74:5c:5f:cf:06:ef: c7:f1:d5:52:7a:49:cb:31:c1:88:81:7f:f6:4b:9d: f1:57:20:68:6a:c5:d9:e0:6c:97:7a:1f:6b:94:42: b4:52:2c:58:a7:db:fe:67:a7:02:67:a2:e7:54:74: 23:ef:77:6c:ad:c5:51:b3:6b:ef:27:9f:7e:94:2a: 7f:91:2c:97:36:ee:6e:2b:91:f1:97:21:23:64:36: 28:da:91:3d:cc:87:05:01:2c:66:6c:b8:aa:44:79: 89:7e:bd:5d:ae:c5:3f:0e:69:18:ae:86:56:1c:00: b8:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:BB:90:32:60:65:A7:3B:4B:9C:DD:D2:50:D9:4C:4B:E6:77:DF:29 X509v3 Authority Key Identifier: keyid:9E:57:17:F5:F1:4B:B2:9F:67:B5:7A:D7:D9:D5:F0:79:15:AE:9C:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914E01E/C5C6F05E9EA611EC8FB03654C4F9AE02/nlcX9fFLsp9ntXrX2dXweRWunEM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nlcX9fFLsp9ntXrX2dXweRWunEM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E01E/C5C6F05E9EA611EC8FB03654C4F9AE02/nlcX9fFLsp9ntXrX2dXweRWunEM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 40:2a:22:01:74:30:b2:ed:f3:9f:b9:59:6e:bd:70:c9:7d:28: 4d:45:a3:80:b2:99:b5:3e:0b:9b:af:74:87:01:01:94:a0:1d: 04:12:8b:73:1c:6a:d3:a3:f5:8b:09:ff:a4:50:cc:fb:f8:68: ee:40:4c:ad:00:94:09:1e:e0:b8:56:f7:b9:b4:15:15:bb:2c: 73:b5:dd:d9:cd:1a:bc:d5:53:47:15:d7:06:e8:ff:fd:02:b5: e4:92:d8:9f:08:08:48:e2:d5:6a:56:fb:f6:20:3d:5c:46:25: 8d:b7:91:53:6a:70:8f:ca:c9:a8:4b:1a:1b:5b:15:0a:bf:43: 89:f3:d9:c4:de:2a:8e:11:d5:2d:b7:c7:d2:47:3e:8f:51:56: a1:1f:6f:a4:ca:d5:b9:79:27:61:70:59:fb:9e:b2:b9:3d:ad: 4f:0a:8e:90:dd:8e:d9:c0:eb:bd:8d:f2:df:a8:4a:b7:82:40: 37:aa:3b:38:8d:70:ab:ee:05:94:c0:0b:bd:0b:14:51:8a:90: 77:09:6f:2a:2e:3b:47:e4:0d:d5:f8:d9:01:9a:9f:a0:7f:67: 33:db:51:aa:90:71:74:48:98:d8:7f:e2:8c:d7:14:96:81:28: d3:6e:37:03:d9:33:01:85:a0:4b:74:6c:ed:cf:33:a6:3c:6a: ce:5a:cf:5f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA40wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEUwMUUxMTAvBgNVBAUTKDlFNTcxN0Y1RjE0QkIyOUY2N0I1N0FEN0Q5RDVGMDc5 MTVBRTlDNDMwHhcNMjUwNTEzMDAzNzM2WhcNMjUwNTIwMDAzNzM2WjAYMRYwFAYD VQQDEw02ODIyOTQ1MC0zNDMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu91oX6HXv3nefZOjolt2+mFjj9ZW9WiCqH72GuvttUUBT7oXRPjLWxoOHK37 2BvgwgVEo36sjyRbUe75KF/YrIS7xl0GrFD9pYKJP6W9jkOh8ZvaAS6vl3jrBui1 n0GA33Ic6338MFfziH14dGq+79KI9hZKAY5qJ+jMTas/DU9+SsXDJG2Bhm0uYkU6 mBh0XF/PBu/H8dVSeknLMcGIgX/2S53xVyBoasXZ4GyXeh9rlEK0UixYp9v+Z6cC Z6LnVHQj73dsrcVRs2vvJ59+lCp/kSyXNu5uK5HxlyEjZDYo2pE9zIcFASxmbLiq RHmJfr1drsU/DmkYroZWHAC4yQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHi7kDJg Zac7S5zd0lDZTEvmd98pMB8GA1UdIwQYMBaAFJ5XF/XxS7KfZ7V619nV8HkVrpxD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RTAxRS9DNUM2RjA1RTlF QTYxMUVDOEZCMDM2NTRDNEY5QUUwMi9ubGNYOWZGTHNwOW50WHJYMmRYd2VSV3Vu RU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25sY1g5ZkZMc3A5bnRYclgyZFh3ZVJXdW5FTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RTAxRS9DNUM2RjA1RTlFQTYxMUVDOEZCMDM2NTRDNEY5QUUwMi9ubGNYOWZGTHNw OW50WHJYMmRYd2VSV3VuRU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBAKiIBdDCy7fOfuVluvXDJfShNRaOAspm1Pgubr3SHAQGUoB0EEotz HGrTo/WLCf+kUMz7+GjuQEytAJQJHuC4Vve5tBUVuyxztd3ZzRq81VNHFdcG6P/9 ArXkktifCAhI4tVqVvv2ID1cRiWNt5FTanCPysmoSxobWxUKv0OJ89nE3iqOEdUt t8fSRz6PUVahH2+kytW5eSdhcFn7nrK5Pa1PCo6Q3Y7ZwOu9jfLfqEq3gkA3qjs4 jXCr7gWUwAu9CxRRipB3CW8qLjtH5A3V+NkBmp+gf2cz21GqkHF0SJjYf+KM1xSW gSjTbjcD2TMBhaBLdGztzzOmPGrOWs9f -----END CERTIFICATE-----Generated at Wed May 14 16:19:26 2025 by rpki-client