$ rpki-client -vvf rpki.apnic.net/member_repository/A915BC2A/ED9F8DBADE1111ED85EC0A49C4F9AE02/ngVdNc8yklM1zJQMyIKLY91gcws.mft File: ngVdNc8yklM1zJQMyIKLY91gcws.mft (raw, json) Hash identifier: ATG6is+Qu+kyG0EHmsMdgvwg8r2VAvrtU1Qw38AEHS0= Subject key identifier: 36:6E:7E:21:F6:5C:04:FF:FB:F3:BD:FC:4D:8F:68:3C:40:C7:83:A6 Authority key identifier: 9E:05:5D:35:CF:32:92:53:35:CC:94:0C:C8:82:8B:63:DD:60:73:0B Certificate issuer: /CN=A915BC2A/serialNumber=9E055D35CF32925335CC940CC8828B63DD60730B Certificate serial: 0187 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ngVdNc8yklM1zJQMyIKLY91gcws.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915BC2A/ED9F8DBADE1111ED85EC0A49C4F9AE02/ngVdNc8yklM1zJQMyIKLY91gcws.mft Manifest number: 0181 Signing time: Fri 09 May 2025 02:48:09 +0000 Manifest this update: Fri 09 May 2025 02:48:08 +0000 Manifest next update: Fri 16 May 2025 02:48:08 +0000 Files and hashes: 1: ngVdNc8yklM1zJQMyIKLY91gcws.crl (hash: x6u6GXl7MqYvuKVVzImKbIF7bYhgUHl7SL4h2Lph/s8=) 2: 3A173FE4DE1C11ED8935D41DC4F9AE02.roa (hash: YAYh7VPX1+fJkNqhGMAOJAwYwHnzOloh8Ae+N/XNZQY=) 3: 398211B2DE1C11ED8935D41DC4F9AE02.roa (hash: 0dIV1BuMrGTI1eJ/F5rbagneYyyNugrEiUlk6vS+T68=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915BC2A/ED9F8DBADE1111ED85EC0A49C4F9AE02/ngVdNc8yklM1zJQMyIKLY91gcws.crl rsync://rpki.apnic.net/member_repository/A915BC2A/ED9F8DBADE1111ED85EC0A49C4F9AE02/ngVdNc8yklM1zJQMyIKLY91gcws.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ngVdNc8yklM1zJQMyIKLY91gcws.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 16 May 2025 02:48:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 391 (0x187) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915BC2A, serialNumber=9E055D35CF32925335CC940CC8828B63DD60730B Validity Not Before: May 9 02:48:08 2025 GMT Not After : May 16 02:48:08 2025 GMT Subject: CN=681d6ce9-bbfe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:42:b4:68:25:84:eb:cc:48:e1:2d:52:bc:e1: 8b:87:de:92:71:76:55:db:29:b1:40:02:56:fc:2d: 43:33:cc:39:a8:89:dd:10:f9:43:55:74:4d:bb:dc: 91:35:70:b6:be:93:a8:1d:d8:3f:de:14:43:c5:71: e8:3c:55:40:3d:18:2a:64:64:b4:26:a1:4f:6b:14: 79:ed:21:94:13:31:0a:a7:74:35:f4:50:b7:21:83: 64:25:09:53:33:71:ab:b9:ea:75:3e:ad:6d:a4:74: 42:6b:6a:7d:7d:82:66:a2:71:f8:2d:44:13:71:9c: fb:93:17:0c:43:20:dd:f0:29:e5:be:17:a7:e9:6b: 35:76:8b:57:e7:fd:0f:8f:36:d3:8b:e2:c1:e5:6e: 3e:91:1e:25:59:5c:56:68:4a:cd:70:74:02:6a:e8: ec:b8:2b:f8:e6:ec:ee:60:26:fb:af:21:e8:b5:5d: 45:7a:67:eb:a0:b7:24:f2:e3:a5:19:73:4d:3a:54: fc:21:f7:bd:f7:9f:36:bb:59:6a:d3:35:3b:bc:fb: c0:ab:95:40:cb:d7:95:14:28:6f:e4:30:9c:5f:57: 3f:73:29:1d:b9:3c:3c:90:34:ee:67:13:bc:50:6f: ec:69:01:55:2b:95:1b:30:5a:e0:cc:a4:4c:25:19: 28:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:6E:7E:21:F6:5C:04:FF:FB:F3:BD:FC:4D:8F:68:3C:40:C7:83:A6 X509v3 Authority Key Identifier: keyid:9E:05:5D:35:CF:32:92:53:35:CC:94:0C:C8:82:8B:63:DD:60:73:0B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915BC2A/ED9F8DBADE1111ED85EC0A49C4F9AE02/ngVdNc8yklM1zJQMyIKLY91gcws.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ngVdNc8yklM1zJQMyIKLY91gcws.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915BC2A/ED9F8DBADE1111ED85EC0A49C4F9AE02/ngVdNc8yklM1zJQMyIKLY91gcws.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4e:66:ec:d1:90:e4:3d:e9:bf:e9:34:ab:ba:5c:ff:a1:ab:16: 79:c8:c6:8d:15:99:16:37:f6:14:cb:fb:f5:a9:4d:af:f9:7e: f3:a2:ee:15:50:be:59:99:88:73:c7:2f:58:f3:8a:b9:79:f2: 88:bd:f2:d2:03:78:48:96:33:ba:58:a2:6a:4d:ec:d9:c4:57: 65:20:bc:b1:4b:ad:d3:c4:08:24:03:02:8d:75:37:12:0e:58: ca:30:a0:49:d7:30:fb:0e:bc:1e:f5:e3:1b:08:bb:9b:ee:36: dc:0c:0a:61:d6:a8:88:a7:0c:c1:b4:0c:d3:da:28:10:ec:8e: 7a:37:b3:21:65:67:42:07:fe:16:43:9c:85:b6:e2:0d:a4:23: ff:45:d9:49:ce:8b:07:33:90:c0:fd:b9:68:a5:4d:82:6a:a6: f8:63:b4:c7:33:00:c8:3d:c7:e0:4e:f2:83:cd:03:fb:ef:30: 44:cb:a1:f0:c6:f6:67:e2:26:90:ff:0c:41:b7:e8:6e:37:b5: df:2d:33:e4:ac:08:eb:be:ef:40:34:90:81:ea:fb:80:aa:b1: f2:12:55:f3:71:44:80:df:54:0c:be:f8:58:ae:d7:51:99:c3: 00:3d:7c:f8:73:f4:1e:18:7b:8b:13:0b:32:ec:43:2e:09:c0: b8:aa:fd:5e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAYcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUJDMkExMTAvBgNVBAUTKDlFMDU1RDM1Q0YzMjkyNTMzNUNDOTQwQ0M4ODI4QjYz REQ2MDczMEIwHhcNMjUwNTA5MDI0ODA4WhcNMjUwNTE2MDI0ODA4WjAYMRYwFAYD VQQDEw02ODFkNmNlOS1iYmZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsUK0aCWE68xI4S1SvOGLh96ScXZV2ymxQAJW/C1DM8w5qIndEPlDVXRNu9yR NXC2vpOoHdg/3hRDxXHoPFVAPRgqZGS0JqFPaxR57SGUEzEKp3Q19FC3IYNkJQlT M3Gruep1Pq1tpHRCa2p9fYJmonH4LUQTcZz7kxcMQyDd8Cnlvhen6Ws1dotX5/0P jzbTi+LB5W4+kR4lWVxWaErNcHQCaujsuCv45uzuYCb7ryHotV1FemfroLck8uOl GXNNOlT8Ife99582u1lq0zU7vPvAq5VAy9eVFChv5DCcX1c/cykduTw8kDTuZxO8 UG/saQFVK5UbMFrgzKRMJRkorwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDZufiH2 XAT/+/O9/E2PaDxAx4OmMB8GA1UdIwQYMBaAFJ4FXTXPMpJTNcyUDMiCi2PdYHML MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QkMyQS9FRDlGOERCQURF MTExMUVEODVFQzBBNDlDNEY5QUUwMi9uZ1ZkTmM4eWtsTTF6SlFNeUlLTFk5MWdj d3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25nVmROYzh5a2xNMXpKUU15SUtMWTkxZ2N3cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QkMyQS9FRDlGOERCQURFMTExMUVEODVFQzBBNDlDNEY5QUUwMi9uZ1ZkTmM4eWts TTF6SlFNeUlLTFk5MWdjd3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBOZuzRkOQ96b/pNKu6XP+hqxZ5yMaNFZkWN/YUy/v1qU2v+X7zou4V UL5ZmYhzxy9Y84q5efKIvfLSA3hIljO6WKJqTezZxFdlILyxS63TxAgkAwKNdTcS DljKMKBJ1zD7Drwe9eMbCLub7jbcDAph1qiIpwzBtAzT2igQ7I56N7MhZWdCB/4W Q5yFtuINpCP/RdlJzosHM5DA/blopU2Caqb4Y7THMwDIPcfgTvKDzQP77zBEy6Hw xvZn4iaQ/wxBt+huN7XfLTPkrAjrvu9ANJCB6vuAqrHyElXzcUSA31QMvvhYrtdR mcMAPXz4c/QeGHuLEwsy7EMuCcC4qv1e -----END CERTIFICATE-----Generated at Sun May 11 01:40:44 2025 by rpki-client