$ rpki-client -vvf rpki.apnic.net/member_repository/A9151AC7/41A46B50F39711EF9101D210C4F9AE02/NS1M7Db4784NhRINl9keIqNY9Ys.mft File: NS1M7Db4784NhRINl9keIqNY9Ys.mft (raw, json) Hash identifier: /Om8S09Nk3Wz7ejB3Ukf8Z5Ldc7WZCP4PYXbLpGc03k= Subject key identifier: 96:DC:83:0B:08:5B:63:49:A7:E8:CD:F0:0F:02:54:31:52:DD:A3:21 Authority key identifier: 35:2D:4C:EC:36:F8:EF:CE:0D:85:12:0D:97:D9:1E:22:A3:58:F5:8B Certificate issuer: /CN=A9151AC7/serialNumber=352D4CEC36F8EFCE0D85120D97D91E22A358F58B Certificate serial: 2A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NS1M7Db4784NhRINl9keIqNY9Ys.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9151AC7/41A46B50F39711EF9101D210C4F9AE02/NS1M7Db4784NhRINl9keIqNY9Ys.mft Manifest number: 2A Signing time: Tue 13 May 2025 06:56:41 +0000 Manifest this update: Tue 13 May 2025 06:56:41 +0000 Manifest next update: Tue 20 May 2025 06:56:41 +0000 Files and hashes: 1: NS1M7Db4784NhRINl9keIqNY9Ys.crl (hash: Yk9E8RwLrQb0wNZjP3TeaSfuZmIlnsFoDkyxstu8tl4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9151AC7/41A46B50F39711EF9101D210C4F9AE02/NS1M7Db4784NhRINl9keIqNY9Ys.crl rsync://rpki.apnic.net/member_repository/A9151AC7/41A46B50F39711EF9101D210C4F9AE02/NS1M7Db4784NhRINl9keIqNY9Ys.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NS1M7Db4784NhRINl9keIqNY9Ys.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 06:56:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42 (0x2a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9151AC7, serialNumber=352D4CEC36F8EFCE0D85120D97D91E22A358F58B Validity Not Before: May 13 06:56:41 2025 GMT Not After : May 20 06:56:41 2025 GMT Subject: CN=6822ed29-f4a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:76:3d:6c:bf:59:fb:87:b5:53:f7:37:d8:4f: 65:5e:2a:89:3c:15:f5:81:28:7c:e0:58:89:b3:29: f4:7e:b7:5c:f4:75:9d:88:f2:29:cf:8e:f4:16:52: 25:37:c9:49:d1:26:05:6d:9a:48:31:d9:55:26:a9: 31:b8:70:80:5e:17:2f:e9:67:98:7d:6e:1b:ab:78: 57:53:7e:27:59:20:1c:1e:50:45:c2:4e:ce:55:11: 26:b5:1d:46:51:58:bc:cb:d0:89:48:71:a2:3c:25: 79:df:67:46:9d:bd:b0:09:84:73:81:c7:60:0a:da: 5a:de:3f:fc:c5:f6:a5:3e:9e:ff:14:71:d1:40:f5: 38:fe:2c:82:26:18:28:14:68:0a:11:80:a8:c5:84: 1d:13:ed:b7:2e:a5:94:2d:41:b7:d0:8f:74:13:13: 32:ee:d8:3b:79:72:c0:12:89:64:38:55:6b:73:af: 53:48:6a:28:49:c9:23:bc:7e:d8:e5:22:34:65:0f: 03:1f:e8:90:7a:b5:44:71:79:75:31:82:04:78:56: a6:69:f4:dc:ed:05:e4:4f:a1:dd:b8:06:8e:f2:62: c6:a9:35:26:8c:cd:48:23:a3:0c:0d:02:bb:bf:c8: 6f:5f:5f:a2:3d:96:74:9c:ef:fa:e5:f9:52:65:f0: 2f:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:DC:83:0B:08:5B:63:49:A7:E8:CD:F0:0F:02:54:31:52:DD:A3:21 X509v3 Authority Key Identifier: keyid:35:2D:4C:EC:36:F8:EF:CE:0D:85:12:0D:97:D9:1E:22:A3:58:F5:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9151AC7/41A46B50F39711EF9101D210C4F9AE02/NS1M7Db4784NhRINl9keIqNY9Ys.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NS1M7Db4784NhRINl9keIqNY9Ys.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9151AC7/41A46B50F39711EF9101D210C4F9AE02/NS1M7Db4784NhRINl9keIqNY9Ys.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 92:85:53:3a:f9:d2:52:96:72:6f:e6:5a:48:5b:7d:24:02:df: b8:06:3a:cd:02:a1:93:85:1a:89:92:14:45:bb:6c:df:48:09: a2:75:b0:31:c7:f5:d9:d2:c9:a1:ad:20:6d:bd:6c:fe:bc:dd: fe:87:b2:b2:24:c0:2b:bc:12:6c:ae:5a:de:fe:68:65:4d:62: 2c:bc:6d:3f:68:85:d9:cd:1a:2e:ac:93:ac:7b:a0:4a:3b:8c: 49:05:cb:cf:b0:b2:68:03:fa:87:57:4d:b0:c6:29:c6:a9:b5: 21:4e:c0:05:af:a1:04:eb:73:a1:e5:8d:b6:da:f7:0a:d3:3f: 68:a1:06:a5:fb:33:9a:30:ad:8f:20:30:a0:c8:13:ba:b4:19: f0:a6:9b:27:e0:4b:62:c6:14:7f:ed:1e:b1:05:a6:d7:87:3e: b2:f3:6d:59:1f:ca:bb:dd:e7:61:8f:19:48:c1:b6:2d:1c:78: 6e:c9:00:0a:41:78:f3:72:9c:03:09:87:22:0e:0f:7f:79:ce: 41:6d:84:75:93:b2:e5:2e:10:35:c6:37:72:bd:4b:59:af:ac: 1d:a3:72:8d:20:19:c3:ff:b2:bc:52:5a:b1:7a:04:67:1b:95: 00:f0:50:9e:fe:82:53:b0:40:7e:f5:d5:82:88:97:02:9f:27: 77:cd:b7:99 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBKjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 MUFDNzExMC8GA1UEBRMoMzUyRDRDRUMzNkY4RUZDRTBEODUxMjBEOTdEOTFFMjJB MzU4RjU4QjAeFw0yNTA1MTMwNjU2NDFaFw0yNTA1MjAwNjU2NDFaMBgxFjAUBgNV BAMTDTY4MjJlZDI5LWY0YTYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCldj1sv1n7h7VT9zfYT2VeKok8FfWBKHzgWImzKfR+t1z0dZ2I8inPjvQWUiU3 yUnRJgVtmkgx2VUmqTG4cIBeFy/pZ5h9bhureFdTfidZIBweUEXCTs5VESa1HUZR WLzL0IlIcaI8JXnfZ0advbAJhHOBx2AK2lreP/zF9qU+nv8UcdFA9Tj+LIImGCgU aAoRgKjFhB0T7bcupZQtQbfQj3QTEzLu2Dt5csASiWQ4VWtzr1NIaihJySO8ftjl IjRlDwMf6JB6tURxeXUxggR4VqZp9NztBeRPod24Bo7yYsapNSaMzUgjowwNAru/ yG9fX6I9lnSc7/rl+VJl8C+LAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUltyDCwhb Y0mn6M3wDwJUMVLdoyEwHwYDVR0jBBgwFoAUNS1M7Db4784NhRINl9keIqNY9Ysw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTUxQUM3LzQxQTQ2QjUwRjM5 NzExRUY5MTAxRDIxMEM0RjlBRTAyL05TMU03RGI0Nzg0TmhSSU5sOWtlSXFOWTlZ cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvTlMxTTdEYjQ3ODROaFJJTmw5a2VJcU5ZOVlzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTUx QUM3LzQxQTQ2QjUwRjM5NzExRUY5MTAxRDIxMEM0RjlBRTAyL05TMU03RGI0Nzg0 TmhSSU5sOWtlSXFOWTlZcy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJKFUzr50lKWcm/mWkhbfSQC37gGOs0CoZOFGomSFEW7bN9ICaJ1sDHH 9dnSyaGtIG29bP683f6HsrIkwCu8EmyuWt7+aGVNYiy8bT9ohdnNGi6sk6x7oEo7 jEkFy8+wsmgD+odXTbDGKcaptSFOwAWvoQTrc6Hljbba9wrTP2ihBqX7M5owrY8g MKDIE7q0GfCmmyfgS2LGFH/tHrEFpteHPrLzbVkfyrvd52GPGUjBti0ceG7JAApB ePNynAMJhyIOD395zkFthHWTsuUuEDXGN3K9S1mvrB2jco0gGcP/srxSWrF6BGcb lQDwUJ7+glOwQH711YKIlwKfJ3fNt5k= -----END CERTIFICATE-----Generated at Wed May 14 15:20:38 2025 by rpki-client