$ rpki-client -vvf rpki.apnic.net/member_repository/A917FFBF/ED52F030C5F411EC8E80D886C4F9AE02/nPqGncMGNX16wwkuT__QTKUCd14.mft File: nPqGncMGNX16wwkuT__QTKUCd14.mft (raw, json) Hash identifier: Gcw8KB+v0tI1gjHu4PliQYw0mft/1Fh0FvTctYVU9Y8= Subject key identifier: 5C:B7:89:08:7E:74:16:FC:D8:26:93:D4:07:E5:59:27:56:0A:8F:99 Authority key identifier: 9C:FA:86:9D:C3:06:35:7D:7A:C3:09:2E:4F:FF:D0:4C:A5:02:77:5E Certificate issuer: /CN=A917FFBF/serialNumber=9CFA869DC306357D7AC3092E4FFFD04CA502775E Certificate serial: 032B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nPqGncMGNX16wwkuT__QTKUCd14.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917FFBF/ED52F030C5F411EC8E80D886C4F9AE02/nPqGncMGNX16wwkuT__QTKUCd14.mft Manifest number: 0327 Signing time: Thu 15 May 2025 01:07:46 +0000 Manifest this update: Thu 15 May 2025 01:07:46 +0000 Manifest next update: Thu 22 May 2025 01:07:46 +0000 Files and hashes: 1: nPqGncMGNX16wwkuT__QTKUCd14.crl (hash: aocCDLKNRCV+SGgERTWwQjO3568u0n1e9vEb4wMImsA=) 2: 6AE91888C5FC11EC9127557EC4F9AE02.roa (hash: Upjs7verB9kHZN2eaB1a6dX0s9sFshQhi4VCB4ap3GQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917FFBF/ED52F030C5F411EC8E80D886C4F9AE02/nPqGncMGNX16wwkuT__QTKUCd14.crl rsync://rpki.apnic.net/member_repository/A917FFBF/ED52F030C5F411EC8E80D886C4F9AE02/nPqGncMGNX16wwkuT__QTKUCd14.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nPqGncMGNX16wwkuT__QTKUCd14.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 22 May 2025 01:07:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 811 (0x32b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917FFBF, serialNumber=9CFA869DC306357D7AC3092E4FFFD04CA502775E Validity Not Before: May 15 01:07:46 2025 GMT Not After : May 22 01:07:46 2025 GMT Subject: CN=68253e62-69a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:d4:72:99:e6:db:1b:f2:2c:89:5d:fc:c9:fd: 51:49:70:6e:50:6b:78:65:f5:53:76:84:f3:81:65: ec:da:65:67:bf:8d:53:06:a2:b1:70:44:62:6f:01: fe:11:4c:ff:38:28:21:da:0b:f6:e4:92:18:6a:60: 7d:2d:24:5b:0f:6d:bb:b4:96:5f:ce:53:98:56:4a: 73:8d:f8:d5:5d:50:65:1e:6a:a1:d0:78:f0:d6:68: f2:fe:0e:3d:01:26:c7:ef:83:9f:ae:07:64:e1:af: 04:96:65:18:1c:a0:57:2a:0c:b0:8a:b9:ba:93:cc: 84:a4:cd:1f:f9:b8:61:3b:04:8e:01:9b:b1:85:3e: 97:23:f7:c6:05:1b:f5:76:91:47:60:fe:9d:4c:e3: ae:6f:c2:a0:1e:9c:c0:0b:77:ad:3b:71:95:96:47: 24:26:ca:30:5c:8a:e7:e2:8b:f5:a3:5d:f9:2a:f3: 5f:c6:33:01:52:3d:a0:f8:1d:6e:77:c3:07:df:78: 1e:11:20:73:66:19:5d:ee:a5:f7:c7:9f:51:87:37: b6:ef:c3:bf:2b:54:bf:b8:a2:41:08:3b:f8:4b:94: 0b:7b:ee:e6:ee:55:c6:ce:89:1b:c2:b8:52:7b:0c: 66:05:f5:d9:c3:53:e0:01:ee:28:77:26:05:9b:05: 06:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:B7:89:08:7E:74:16:FC:D8:26:93:D4:07:E5:59:27:56:0A:8F:99 X509v3 Authority Key Identifier: keyid:9C:FA:86:9D:C3:06:35:7D:7A:C3:09:2E:4F:FF:D0:4C:A5:02:77:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917FFBF/ED52F030C5F411EC8E80D886C4F9AE02/nPqGncMGNX16wwkuT__QTKUCd14.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nPqGncMGNX16wwkuT__QTKUCd14.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917FFBF/ED52F030C5F411EC8E80D886C4F9AE02/nPqGncMGNX16wwkuT__QTKUCd14.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 27:f8:bb:13:9b:ef:c5:93:b3:55:6b:0c:29:76:43:6e:dd:09: a4:a1:24:6a:03:80:0a:ab:1f:1c:74:79:57:6f:e7:82:d6:1e: b3:42:e4:c7:7a:fc:68:be:e2:b0:b6:52:5f:d4:19:92:cd:7b: 64:19:ef:49:34:6b:7b:99:66:13:ac:be:32:44:1a:e9:41:0c: 1e:17:a9:63:4d:84:4f:bd:c7:3a:81:7d:c2:5c:1c:0b:a8:63: c3:e7:7d:65:5e:d2:03:f0:03:15:54:34:21:60:58:ce:77:22: d3:b7:c1:e8:50:c3:be:b5:13:0b:bf:6c:a4:9d:db:2d:53:ba: c8:07:2c:19:f9:38:4e:c4:e4:16:d4:ae:31:38:51:97:91:79: 04:1e:62:1c:c6:b4:31:a6:5b:e2:ac:26:e9:04:f6:5d:dd:53: 71:20:5c:18:0b:60:0d:f7:cb:4c:a6:8b:1e:df:ca:21:59:f5: f9:cd:12:58:b3:e5:42:68:08:21:ae:af:aa:25:e6:4b:35:cc: 73:5e:87:dc:77:9c:44:b7:64:d3:24:cd:9b:8a:40:ac:f1:b3: 4b:2a:0c:4d:d0:82:10:22:e2:1a:02:47:61:e1:78:54:21:d9: d4:f9:5f:ec:d8:73:9f:f8:e5:d1:3a:c4:42:33:39:63:11:fc: 9d:b8:8b:b3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAyswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0ZGQkYxMTAvBgNVBAUTKDlDRkE4NjlEQzMwNjM1N0Q3QUMzMDkyRTRGRkZEMDRD QTUwMjc3NUUwHhcNMjUwNTE1MDEwNzQ2WhcNMjUwNTIyMDEwNzQ2WjAYMRYwFAYD VQQDEw02ODI1M2U2Mi02OWE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw9RymebbG/IsiV38yf1RSXBuUGt4ZfVTdoTzgWXs2mVnv41TBqKxcERibwH+ EUz/OCgh2gv25JIYamB9LSRbD227tJZfzlOYVkpzjfjVXVBlHmqh0Hjw1mjy/g49 ASbH74Ofrgdk4a8ElmUYHKBXKgywirm6k8yEpM0f+bhhOwSOAZuxhT6XI/fGBRv1 dpFHYP6dTOOub8KgHpzAC3etO3GVlkckJsowXIrn4ov1o135KvNfxjMBUj2g+B1u d8MH33geESBzZhld7qX3x59Rhze278O/K1S/uKJBCDv4S5QLe+7m7lXGzokbwrhS ewxmBfXZw1PgAe4odyYFmwUGeQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFy3iQh+ dBb82CaT1AflWSdWCo+ZMB8GA1UdIwQYMBaAFJz6hp3DBjV9esMJLk//0EylAnde MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RkZCRi9FRDUyRjAzMEM1 RjQxMUVDOEU4MEQ4ODZDNEY5QUUwMi9uUHFHbmNNR05YMTZ3d2t1VF9fUVRLVUNk MTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25QcUduY01HTlgxNnd3a3VUX19RVEtVQ2QxNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RkZCRi9FRDUyRjAzMEM1RjQxMUVDOEU4MEQ4ODZDNEY5QUUwMi9uUHFHbmNNR05Y MTZ3d2t1VF9fUVRLVUNkMTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAn+LsTm+/Fk7NVawwpdkNu3QmkoSRqA4AKqx8cdHlXb+eC1h6zQuTH evxovuKwtlJf1BmSzXtkGe9JNGt7mWYTrL4yRBrpQQweF6ljTYRPvcc6gX3CXBwL qGPD531lXtID8AMVVDQhYFjOdyLTt8HoUMO+tRMLv2ykndstU7rIBywZ+ThOxOQW 1K4xOFGXkXkEHmIcxrQxplvirCbpBPZd3VNxIFwYC2AN98tMpose38ohWfX5zRJY s+VCaAghrq+qJeZLNcxzXofcd5xEt2TTJM2bikCs8bNLKgxN0IIQIuIaAkdh4XhU IdnU+V/s2HOf+OXROsRCMzljEfyduIuz -----END CERTIFICATE-----Generated at Fri May 16 07:13:47 2025 by rpki-client