$ rpki-client -vvf rpki.apnic.net/member_repository/A91577A2/8BC15C407B0411EA9DAAD432C4F9AE02/NtqOcqrHflUzc5DvTGHJVAtFldc.mft File: NtqOcqrHflUzc5DvTGHJVAtFldc.mft (raw, json) Hash identifier: hyk1JlrhkYdrqHPwWOCpqB57hNPGA5YactIw6fARXfA= Subject key identifier: 86:F8:BC:1E:53:E1:06:22:48:C9:4F:85:5A:61:1E:82:F1:F3:D8:88 Authority key identifier: 36:DA:8E:72:AA:C7:7E:55:33:73:90:EF:4C:61:C9:54:0B:45:95:D7 Certificate issuer: /CN=A91577A2/serialNumber=36DA8E72AAC77E55337390EF4C61C9540B4595D7 Certificate serial: 0A08 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NtqOcqrHflUzc5DvTGHJVAtFldc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91577A2/8BC15C407B0411EA9DAAD432C4F9AE02/NtqOcqrHflUzc5DvTGHJVAtFldc.mft Manifest number: 09F4 Signing time: Sat 10 May 2025 19:39:08 +0000 Manifest this update: Sat 10 May 2025 19:39:07 +0000 Manifest next update: Sat 17 May 2025 19:39:07 +0000 Files and hashes: 1: NtqOcqrHflUzc5DvTGHJVAtFldc.crl (hash: FnMCQUiUexKY/Ogrlm48h6Q7WTUPBOhPKtb0TZ58xAA=) 2: 6A23E166499211ED879F2D11C4F9AE02.roa (hash: menbjtgG3OL9FP2gHIv3HpKwGpwOaKUkt24pbDLYnNA=) 3: 6B5765BC499211ED879F2D11C4F9AE02.roa (hash: bMJemH5ceUwe7SSoHueO95SQnaFhnEbPA4cUZ9QObys=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91577A2/8BC15C407B0411EA9DAAD432C4F9AE02/NtqOcqrHflUzc5DvTGHJVAtFldc.crl rsync://rpki.apnic.net/member_repository/A91577A2/8BC15C407B0411EA9DAAD432C4F9AE02/NtqOcqrHflUzc5DvTGHJVAtFldc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NtqOcqrHflUzc5DvTGHJVAtFldc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 19:39:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2568 (0xa08) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91577A2, serialNumber=36DA8E72AAC77E55337390EF4C61C9540B4595D7 Validity Not Before: May 10 19:39:07 2025 GMT Not After : May 17 19:39:07 2025 GMT Subject: CN=681fab5c-9290 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:1e:bc:bf:a7:8b:7d:c1:16:eb:85:a5:f4:6f: ce:c6:3e:16:69:96:3b:37:64:e7:10:8d:ac:7c:70: f3:13:30:22:26:a1:82:ae:32:97:3d:18:2d:06:7e: 01:df:c9:df:58:4d:0f:e3:62:ad:fd:a9:a4:49:ba: 11:03:36:9b:db:f9:f9:fe:45:c7:cc:c3:55:06:33: 56:5f:7c:76:79:78:3f:d9:6f:05:9b:3f:2c:9a:67: 7e:e2:94:e1:94:e9:b7:42:fd:ea:5b:a6:8d:db:eb: fe:aa:c1:c9:13:1c:6c:dd:eb:e2:08:37:ea:5e:bb: 36:83:93:cd:ed:08:0e:a0:1f:21:fa:b1:17:3d:a6: 9c:2a:b6:23:30:d9:9a:35:38:8f:78:7a:7f:d4:4f: f4:26:3f:1b:91:09:f5:ac:e6:50:10:c3:ec:f1:75: 63:04:2d:54:ca:33:fd:0a:51:42:cf:37:e2:23:27: 60:25:a1:82:0c:6a:bf:42:1a:8d:a6:bd:e3:30:f4: bf:03:a4:7d:ca:6b:6f:ba:28:fd:3e:4f:2a:f4:06: 8a:59:99:75:cf:d9:7c:dd:fc:b3:ea:3a:4c:2e:16: f8:38:c0:be:9b:1f:4f:2f:33:16:c2:f8:18:2b:f4: ee:81:df:2e:e3:39:6c:0f:75:3e:2d:36:9a:de:1d: fb:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:F8:BC:1E:53:E1:06:22:48:C9:4F:85:5A:61:1E:82:F1:F3:D8:88 X509v3 Authority Key Identifier: keyid:36:DA:8E:72:AA:C7:7E:55:33:73:90:EF:4C:61:C9:54:0B:45:95:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91577A2/8BC15C407B0411EA9DAAD432C4F9AE02/NtqOcqrHflUzc5DvTGHJVAtFldc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NtqOcqrHflUzc5DvTGHJVAtFldc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91577A2/8BC15C407B0411EA9DAAD432C4F9AE02/NtqOcqrHflUzc5DvTGHJVAtFldc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 11:09:9c:35:2b:2e:31:2e:a9:81:db:25:c0:02:6d:e6:8d:77: 5b:1c:b4:0e:15:4f:13:9d:a4:c6:9f:82:35:9e:e2:e4:52:e9: a3:40:0a:a2:75:86:d2:d2:21:58:b2:28:4f:e5:c6:71:60:a8: d6:fe:26:48:2a:45:b3:0f:53:d9:44:4a:ac:dc:9e:d1:55:3e: 12:39:c1:55:fe:38:c3:09:40:46:92:16:10:6c:6f:b7:6a:9d: 51:2c:d7:ec:fb:61:2c:b5:60:d6:51:94:da:8c:2f:01:f9:ca: c5:dc:3e:42:20:16:8d:18:91:57:56:39:63:82:e4:20:29:12: 24:49:84:ef:58:bf:27:2c:a2:b1:4b:93:2b:fd:b0:9d:af:39: 40:7d:1a:35:66:0a:ec:e1:aa:25:f5:1e:f9:39:08:e0:c4:aa: fc:a6:0c:ee:30:15:7a:e0:be:93:85:eb:22:b1:0a:7b:15:9d: 0a:86:c1:b0:19:dd:1e:a3:1c:f0:c2:83:ab:4e:f7:5f:17:b5: cb:60:26:79:94:49:ee:9f:1d:e5:24:9d:17:26:b4:1a:4b:61: 67:a3:8c:5c:84:cf:07:7b:6f:f9:92:45:79:1f:81:c8:b4:07: 97:78:13:bd:25:ac:11:bd:7b:00:eb:fb:10:bd:2a:3e:66:6f: c6:19:4a:80 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCggwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTc3QTIxMTAvBgNVBAUTKDM2REE4RTcyQUFDNzdFNTUzMzczOTBFRjRDNjFDOTU0 MEI0NTk1RDcwHhcNMjUwNTEwMTkzOTA3WhcNMjUwNTE3MTkzOTA3WjAYMRYwFAYD VQQDEw02ODFmYWI1Yy05MjkwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzB68v6eLfcEW64Wl9G/Oxj4WaZY7N2TnEI2sfHDzEzAiJqGCrjKXPRgtBn4B 38nfWE0P42Kt/amkSboRAzab2/n5/kXHzMNVBjNWX3x2eXg/2W8Fmz8smmd+4pTh lOm3Qv3qW6aN2+v+qsHJExxs3eviCDfqXrs2g5PN7QgOoB8h+rEXPaacKrYjMNma NTiPeHp/1E/0Jj8bkQn1rOZQEMPs8XVjBC1UyjP9ClFCzzfiIydgJaGCDGq/QhqN pr3jMPS/A6R9ymtvuij9Pk8q9AaKWZl1z9l83fyz6jpMLhb4OMC+mx9PLzMWwvgY K/Tugd8u4zlsD3U+LTaa3h371QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIb4vB5T 4QYiSMlPhVphHoLx89iIMB8GA1UdIwQYMBaAFDbajnKqx35VM3OQ70xhyVQLRZXX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NzdBMi84QkMxNUM0MDdC MDQxMUVBOURBQUQ0MzJDNEY5QUUwMi9OdHFPY3FySGZsVXpjNUR2VEdISlZBdEZs ZGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL050cU9jcXJIZmxVemM1RHZUR0hKVkF0RmxkYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NzdBMi84QkMxNUM0MDdCMDQxMUVBOURBQUQ0MzJDNEY5QUUwMi9OdHFPY3FySGZs VXpjNUR2VEdISlZBdEZsZGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQARCZw1Ky4xLqmB2yXAAm3mjXdbHLQOFU8TnaTGn4I1nuLkUumjQAqi dYbS0iFYsihP5cZxYKjW/iZIKkWzD1PZREqs3J7RVT4SOcFV/jjDCUBGkhYQbG+3 ap1RLNfs+2EstWDWUZTajC8B+crF3D5CIBaNGJFXVjljguQgKRIkSYTvWL8nLKKx S5Mr/bCdrzlAfRo1Zgrs4aol9R75OQjgxKr8pgzuMBV64L6ThesisQp7FZ0KhsGw Gd0eoxzwwoOrTvdfF7XLYCZ5lEnunx3lJJ0XJrQaS2Fno4xchM8He2/5kkV5H4HI tAeXeBO9JawRvXsA6/sQvSo+Zm/GGUqA -----END CERTIFICATE-----Generated at Sun May 11 09:06:14 2025 by rpki-client