$ rpki-client -vvf rpki.apnic.net/member_repository/A9152329/D086D55EA26811EF9D914118C4F9AE02/NsqppHOp6nOCn3NWgJvBYQOtA64.mft File: NsqppHOp6nOCn3NWgJvBYQOtA64.mft (raw, json) Hash identifier: qVSql1ltEjMJcKi4HJdp7FzzyJ4sHux/o/z+BQPHfTM= Subject key identifier: E9:15:20:02:91:A9:51:5E:25:BF:67:75:B3:01:62:10:FD:7E:57:DC Authority key identifier: 36:CA:A9:A4:73:A9:EA:73:82:9F:73:56:80:9B:C1:61:03:AD:03:AE Certificate issuer: /CN=A9152329/serialNumber=36CAA9A473A9EA73829F7356809BC16103AD03AE Certificate serial: 5F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NsqppHOp6nOCn3NWgJvBYQOtA64.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9152329/D086D55EA26811EF9D914118C4F9AE02/NsqppHOp6nOCn3NWgJvBYQOtA64.mft Manifest number: 5F Signing time: Thu 15 May 2025 06:22:28 +0000 Manifest this update: Thu 15 May 2025 06:22:27 +0000 Manifest next update: Thu 22 May 2025 06:22:27 +0000 Files and hashes: 1: NsqppHOp6nOCn3NWgJvBYQOtA64.crl (hash: HatC6ZSgqR/1MP7clD+wZ45qB7HZvH7uGrwoazHnX9c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9152329/D086D55EA26811EF9D914118C4F9AE02/NsqppHOp6nOCn3NWgJvBYQOtA64.crl rsync://rpki.apnic.net/member_repository/A9152329/D086D55EA26811EF9D914118C4F9AE02/NsqppHOp6nOCn3NWgJvBYQOtA64.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NsqppHOp6nOCn3NWgJvBYQOtA64.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 22 May 2025 06:22:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 95 (0x5f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9152329, serialNumber=36CAA9A473A9EA73829F7356809BC16103AD03AE Validity Not Before: May 15 06:22:27 2025 GMT Not After : May 22 06:22:27 2025 GMT Subject: CN=68258823-69f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:26:6e:f5:94:df:1c:51:aa:4e:3e:a8:01:30: 28:25:b9:8e:0c:93:b5:ed:e6:c3:1a:65:fb:8d:5e: cd:5e:c7:0a:f8:af:5a:ca:81:1b:1a:0b:2a:f2:89: 91:75:7c:77:31:2b:07:c4:31:b2:ab:a2:01:d9:4e: 44:eb:20:55:71:1d:fd:0d:14:65:e3:e6:29:5e:02: 3e:fb:f1:e8:34:d3:ac:e0:ff:f0:70:a5:f6:e8:7d: 4d:0e:9f:7b:90:1f:b8:06:77:19:b5:92:84:ca:a9: e5:e9:5f:13:a9:bb:ef:97:5c:4f:61:b5:ac:a2:cb: 78:da:3f:a1:e2:a5:1c:3c:2b:79:28:90:af:b6:ea: 87:ae:5a:d2:aa:20:ab:9e:e6:dd:18:05:49:70:ad: 7a:c5:32:59:9a:4d:a2:48:01:7b:74:51:85:78:fa: 27:90:c3:c1:e1:80:ea:92:85:29:ee:b1:b4:99:c3: e0:40:a8:2c:81:8e:ca:61:30:a1:3d:ab:d1:27:8b: 62:87:08:33:1c:12:08:f4:11:49:76:3f:1e:7d:5b: 6b:9b:38:75:60:90:9b:aa:df:db:36:c3:16:e8:c0: 6a:8a:06:70:5c:31:c1:11:6a:f2:6c:50:ee:bf:c1: b0:fd:ae:68:b7:e0:22:3a:3a:34:af:fd:42:05:0d: f8:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:15:20:02:91:A9:51:5E:25:BF:67:75:B3:01:62:10:FD:7E:57:DC X509v3 Authority Key Identifier: keyid:36:CA:A9:A4:73:A9:EA:73:82:9F:73:56:80:9B:C1:61:03:AD:03:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9152329/D086D55EA26811EF9D914118C4F9AE02/NsqppHOp6nOCn3NWgJvBYQOtA64.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NsqppHOp6nOCn3NWgJvBYQOtA64.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9152329/D086D55EA26811EF9D914118C4F9AE02/NsqppHOp6nOCn3NWgJvBYQOtA64.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8d:26:1f:a0:d7:ec:c9:4f:0b:7d:62:37:ed:64:da:a1:00:4b: 2f:fa:9a:11:4e:15:6f:71:e7:84:9d:23:48:ba:0c:f3:c1:66: c0:ee:da:67:04:26:8d:0e:ce:7e:12:86:43:22:c4:8a:da:c3: 6f:1d:a4:d3:37:9e:f6:c0:97:66:0b:d7:07:7c:9e:4a:0f:eb: aa:fb:59:9c:ed:ba:a8:b9:4e:87:a3:c6:51:32:d8:62:14:ab: a1:ca:54:8d:b1:50:3e:a7:5e:e2:2e:23:b0:55:7d:b9:39:82: 3d:e6:f6:74:98:7c:8c:d1:0d:3a:ea:1b:81:ad:c7:f8:81:21: 11:e8:27:eb:ab:6e:5e:6a:5f:ac:3c:51:a0:62:78:9c:77:db: bc:73:6a:2e:ef:0a:7d:67:30:b9:f4:d4:2a:44:0c:b1:52:b3: 58:7b:ab:fe:42:95:3a:01:b0:83:62:32:e8:44:56:00:49:c7: 36:27:c3:c8:e6:63:ca:aa:55:02:ee:c4:9f:df:28:d4:dd:70: e0:c1:f5:e5:39:65:74:c7:22:9c:ee:36:e8:94:65:cd:d4:19: 6d:d2:f3:d0:c2:98:af:34:0c:a5:98:9d:55:8c:e5:41:e1:a8: dc:ab:44:d0:16:60:07:0f:4e:91:ed:32:66:0c:ad:05:b4:53: 9c:5a:10:fa -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBXzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 MjMyOTExMC8GA1UEBRMoMzZDQUE5QTQ3M0E5RUE3MzgyOUY3MzU2ODA5QkMxNjEw M0FEMDNBRTAeFw0yNTA1MTUwNjIyMjdaFw0yNTA1MjIwNjIyMjdaMBgxFjAUBgNV BAMTDTY4MjU4ODIzLTY5ZjkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC8Jm71lN8cUapOPqgBMCgluY4Mk7Xt5sMaZfuNXs1exwr4r1rKgRsaCyryiZF1 fHcxKwfEMbKrogHZTkTrIFVxHf0NFGXj5ileAj778eg006zg//BwpfbofU0On3uQ H7gGdxm1koTKqeXpXxOpu++XXE9htayiy3jaP6HipRw8K3kokK+26oeuWtKqIKue 5t0YBUlwrXrFMlmaTaJIAXt0UYV4+ieQw8HhgOqShSnusbSZw+BAqCyBjsphMKE9 q9Eni2KHCDMcEgj0EUl2Px59W2ubOHVgkJuq39s2wxbowGqKBnBcMcERavJsUO6/ wbD9rmi34CI6OjSv/UIFDfhdAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU6RUgApGp UV4lv2d1swFiEP1+V9wwHwYDVR0jBBgwFoAUNsqppHOp6nOCn3NWgJvBYQOtA64w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTUyMzI5L0QwODZENTVFQTI2 ODExRUY5RDkxNDExOEM0RjlBRTAyL05zcXBwSE9wNm5PQ24zTldnSnZCWVFPdEE2 NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvTnNxcHBIT3A2bk9DbjNOV2dKdkJZUU90QTY0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTUy MzI5L0QwODZENTVFQTI2ODExRUY5RDkxNDExOEM0RjlBRTAyL05zcXBwSE9wNm5P Q24zTldnSnZCWVFPdEE2NC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAI0mH6DX7MlPC31iN+1k2qEASy/6mhFOFW9x54SdI0i6DPPBZsDu2mcE Jo0Ozn4ShkMixIraw28dpNM3nvbAl2YL1wd8nkoP66r7WZztuqi5ToejxlEy2GIU q6HKVI2xUD6nXuIuI7BVfbk5gj3m9nSYfIzRDTrqG4Gtx/iBIRHoJ+urbl5qX6w8 UaBieJx327xzai7vCn1nMLn01CpEDLFSs1h7q/5ClToBsINiMuhEVgBJxzYnw8jm Y8qqVQLuxJ/fKNTdcODB9eU5ZXTHIpzuNuiUZc3UGW3S89DCmK80DKWYnVWM5UHh qNyrRNAWYAcPTpHtMmYMrQW0U5xaEPo= -----END CERTIFICATE-----Generated at Fri May 16 22:41:16 2025 by rpki-client