$ rpki-client -vvf rpki.apnic.net/member_repository/A916714C/3FED6608DFEC11EB8F704D12C4F9AE02/NT5Ih1N2xtuX40JjZcx_GMlFaHc.mft File: NT5Ih1N2xtuX40JjZcx_GMlFaHc.mft (raw, json) Hash identifier: HA2RdPTwytsV0ubNnGuzmkHsu4WAaJ6zZGUXh1YZYxg= Subject key identifier: DB:01:28:FB:AB:79:4C:77:22:77:52:E5:DA:16:2B:35:01:47:2C:A3 Authority key identifier: 35:3E:48:87:53:76:C6:DB:97:E3:42:63:65:CC:7F:18:C9:45:68:77 Certificate issuer: /CN=A916714C/serialNumber=353E48875376C6DB97E3426365CC7F18C9456877 Certificate serial: 056E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NT5Ih1N2xtuX40JjZcx_GMlFaHc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916714C/3FED6608DFEC11EB8F704D12C4F9AE02/NT5Ih1N2xtuX40JjZcx_GMlFaHc.mft Manifest number: 0569 Signing time: Thu 08 May 2025 23:10:40 +0000 Manifest this update: Thu 08 May 2025 23:10:40 +0000 Manifest next update: Thu 15 May 2025 23:10:40 +0000 Files and hashes: 1: NT5Ih1N2xtuX40JjZcx_GMlFaHc.crl (hash: X+cJYkUfvNTg6J5qFkFFbr8vqY+IaEGpVFL2ZL9rYNg=) 2: E50353FEDFED11EBA155C712C4F9AE02.roa (hash: +hS0TVD0X9uG67g79eiaJGg+9lKriguUI4QCyoszmNs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916714C/3FED6608DFEC11EB8F704D12C4F9AE02/NT5Ih1N2xtuX40JjZcx_GMlFaHc.crl rsync://rpki.apnic.net/member_repository/A916714C/3FED6608DFEC11EB8F704D12C4F9AE02/NT5Ih1N2xtuX40JjZcx_GMlFaHc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NT5Ih1N2xtuX40JjZcx_GMlFaHc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 15 May 2025 23:10:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1390 (0x56e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916714C, serialNumber=353E48875376C6DB97E3426365CC7F18C9456877 Validity Not Before: May 8 23:10:40 2025 GMT Not After : May 15 23:10:40 2025 GMT Subject: CN=681d39f0-fd91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:e5:1e:7f:57:32:4e:f9:6a:8d:38:72:09:e6: c2:27:ca:d7:2f:a3:2c:02:20:eb:93:86:63:2d:c2: 91:a9:2b:5a:aa:5c:69:12:7c:85:b7:cd:5e:de:cb: ae:fd:74:20:9a:c0:bc:d7:8c:1a:ea:fc:ba:96:93: 18:7e:0f:da:04:2e:2b:6c:d9:6e:5d:ee:6d:63:6f: b8:b7:3c:a9:9e:bc:5b:a8:13:73:e2:53:29:d2:4c: e8:ef:8e:67:66:76:00:de:44:f1:f6:1a:19:6e:a0: ed:48:ba:b9:fa:9a:a4:a2:66:e3:c6:e5:e4:7e:39: dd:12:50:7d:81:71:00:9f:ef:f5:d6:00:9c:0a:87: 0e:eb:7e:36:8c:2c:66:e5:df:cd:24:23:f8:8e:40: 6c:f9:f4:30:95:f2:ba:c0:05:71:c9:15:60:6f:a7: a6:2f:30:63:91:8a:35:02:c6:2b:78:02:f2:3e:be: d4:62:43:01:e4:12:02:24:c8:d3:c0:52:58:60:ed: a0:27:fc:a5:b8:66:af:3e:88:27:47:b9:b0:62:26: d6:04:88:08:83:7d:86:14:15:6e:95:b0:71:64:5c: d4:5e:ab:55:fe:2f:cd:36:28:d1:c3:70:e3:e5:04: 42:dc:ce:fd:ab:69:7f:04:c6:ab:26:44:0a:50:5c: 91:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:01:28:FB:AB:79:4C:77:22:77:52:E5:DA:16:2B:35:01:47:2C:A3 X509v3 Authority Key Identifier: keyid:35:3E:48:87:53:76:C6:DB:97:E3:42:63:65:CC:7F:18:C9:45:68:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916714C/3FED6608DFEC11EB8F704D12C4F9AE02/NT5Ih1N2xtuX40JjZcx_GMlFaHc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NT5Ih1N2xtuX40JjZcx_GMlFaHc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916714C/3FED6608DFEC11EB8F704D12C4F9AE02/NT5Ih1N2xtuX40JjZcx_GMlFaHc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 42:85:e9:3a:07:db:1c:08:c5:36:75:22:46:5b:66:2e:23:a4: 48:5c:99:7f:98:da:a6:69:c2:0d:69:77:62:5a:17:e5:9b:85: 0d:a1:28:48:22:8d:35:cc:04:8d:3f:65:55:aa:c7:c8:15:12: 38:2a:d2:3c:6a:be:cd:a0:a1:dc:f2:46:c5:e8:7a:24:d8:f3: e0:74:19:4c:13:7b:41:63:6d:15:74:c6:9f:e1:7e:ae:0d:38: 64:a3:9d:18:f9:31:65:eb:57:81:72:19:6a:12:15:a4:57:39: 96:7b:58:64:b6:77:e2:1a:73:35:53:0a:45:4c:2b:f5:79:29: 6a:74:b0:f0:b3:86:b5:9b:8b:32:69:e3:a5:f8:e3:09:81:23: 35:ca:cd:91:5d:96:fa:82:e7:21:53:64:9c:af:da:1a:18:bd: 14:21:c7:c5:46:ad:24:d4:c0:6b:00:36:3e:ce:92:62:42:18: 98:57:17:d9:e8:79:ca:a1:47:2c:49:29:1c:29:96:ac:f0:04: 77:47:81:99:96:c8:bf:05:64:c6:db:fa:36:f7:47:e3:1e:d9: 8a:c4:4a:51:11:34:56:e7:44:63:ee:12:89:44:72:7a:f0:c2: f6:14:ec:49:6f:b1:6b:3e:b9:8f:a7:9e:aa:a1:05:c2:3b:de: d2:3a:54:d1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBW4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjcxNEMxMTAvBgNVBAUTKDM1M0U0ODg3NTM3NkM2REI5N0UzNDI2MzY1Q0M3RjE4 Qzk0NTY4NzcwHhcNMjUwNTA4MjMxMDQwWhcNMjUwNTE1MjMxMDQwWjAYMRYwFAYD VQQDEw02ODFkMzlmMC1mZDkxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwuUef1cyTvlqjThyCebCJ8rXL6MsAiDrk4ZjLcKRqStaqlxpEnyFt81e3suu /XQgmsC814wa6vy6lpMYfg/aBC4rbNluXe5tY2+4tzypnrxbqBNz4lMp0kzo745n ZnYA3kTx9hoZbqDtSLq5+pqkombjxuXkfjndElB9gXEAn+/11gCcCocO6342jCxm 5d/NJCP4jkBs+fQwlfK6wAVxyRVgb6emLzBjkYo1AsYreALyPr7UYkMB5BICJMjT wFJYYO2gJ/yluGavPognR7mwYibWBIgIg32GFBVulbBxZFzUXqtV/i/NNijRw3Dj 5QRC3M79q2l/BMarJkQKUFyRZwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNsBKPur eUx3IndS5doWKzUBRyyjMB8GA1UdIwQYMBaAFDU+SIdTdsbbl+NCY2XMfxjJRWh3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NzE0Qy8zRkVENjYwOERG RUMxMUVCOEY3MDREMTJDNEY5QUUwMi9OVDVJaDFOMnh0dVg0MEpqWmN4X0dNbEZh SGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05UNUloMU4yeHR1WDQwSmpaY3hfR01sRmFIYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NzE0Qy8zRkVENjYwOERGRUMxMUVCOEY3MDREMTJDNEY5QUUwMi9OVDVJaDFOMnh0 dVg0MEpqWmN4X0dNbEZhSGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBChek6B9scCMU2dSJGW2YuI6RIXJl/mNqmacINaXdiWhflm4UNoShI Io01zASNP2VVqsfIFRI4KtI8ar7NoKHc8kbF6Hok2PPgdBlME3tBY20VdMaf4X6u DThko50Y+TFl61eBchlqEhWkVzmWe1hktnfiGnM1UwpFTCv1eSlqdLDws4a1m4sy aeOl+OMJgSM1ys2RXZb6guchU2Scr9oaGL0UIcfFRq0k1MBrADY+zpJiQhiYVxfZ 6HnKoUcsSSkcKZas8AR3R4GZlsi/BWTG2/o290fjHtmKxEpRETRW50Rj7hKJRHJ6 8ML2FOxJb7FrPrmPp56qoQXCO97SOlTR -----END CERTIFICATE-----Generated at Sat May 10 19:45:35 2025 by rpki-client