$ rpki-client -vvf rpki.apnic.net/member_repository/A918233C/E6491FE2621411ECB006712CC4F9AE02/_NTfjrSqZK9Wt9DHMm4pEEVDzFU.mft File: _NTfjrSqZK9Wt9DHMm4pEEVDzFU.mft (raw, json) Hash identifier: wBhXufAnZre4wW5/I+ZZxpdHmCcxDwdHhgPMFyLbFx0= Subject key identifier: B8:38:2A:A8:C6:71:3D:2A:6C:BB:E1:42:B4:0B:66:12:1C:70:64:66 Authority key identifier: FC:D4:DF:8E:B4:AA:64:AF:56:B7:D0:C7:32:6E:29:10:45:43:CC:55 Certificate issuer: /CN=A918233C/serialNumber=FCD4DF8EB4AA64AF56B7D0C7326E29104543CC55 Certificate serial: 16 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_NTfjrSqZK9Wt9DHMm4pEEVDzFU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918233C/E6491FE2621411ECB006712CC4F9AE02/_NTfjrSqZK9Wt9DHMm4pEEVDzFU.mft Manifest number: 043E Signing time: Thu 15 May 2025 00:24:30 +0000 Manifest this update: Thu 15 May 2025 00:24:29 +0000 Manifest next update: Thu 22 May 2025 00:24:29 +0000 Files and hashes: 1: _NTfjrSqZK9Wt9DHMm4pEEVDzFU.crl (hash: hcmNtPqm6PFaPexCJ3u4PKGbr+linEoAJ6etdYBm/Jw=) 2: 34E594A215C511F09562D30FC4F9AE02.roa (hash: hO8cBpPkkXeK8WAFYmWHFGS1BpcqmFyN9GM5+DFTdqE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918233C/E6491FE2621411ECB006712CC4F9AE02/_NTfjrSqZK9Wt9DHMm4pEEVDzFU.crl rsync://rpki.apnic.net/member_repository/A918233C/E6491FE2621411ECB006712CC4F9AE02/_NTfjrSqZK9Wt9DHMm4pEEVDzFU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_NTfjrSqZK9Wt9DHMm4pEEVDzFU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 22 May 2025 00:24:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22 (0x16) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918233C, serialNumber=FCD4DF8EB4AA64AF56B7D0C7326E29104543CC55 Validity Not Before: May 15 00:24:29 2025 GMT Not After : May 22 00:24:29 2025 GMT Subject: CN=6825343e-5032 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:f3:64:3c:00:00:56:58:6a:59:96:df:44:0c: a2:d7:43:db:88:1c:56:92:d5:15:d9:3d:c7:28:c8: bb:78:c2:a6:78:bf:be:ab:18:9e:1c:20:bc:66:08: bd:86:59:66:0b:53:ac:f7:df:9b:f7:62:a1:b1:26: 47:08:a8:83:72:21:66:6e:5e:92:bc:95:af:a2:66: a7:da:e9:0a:96:29:7d:57:fa:cc:81:1b:bc:e4:15: 16:37:0a:b5:be:ac:5d:d8:6a:97:7c:32:96:6a:17: 56:5f:ce:e2:24:f1:2d:1f:84:29:c5:6b:1f:d3:08: f7:9e:48:5b:e4:a4:f5:1f:83:7c:40:fe:72:96:79: 1d:8d:97:8a:d8:97:f9:ac:8b:4a:7b:a6:ab:a3:ad: 1f:cf:cf:97:db:fc:12:9b:66:73:42:02:b2:b1:53: 07:d8:bb:15:8b:ed:1e:0d:7a:b0:86:58:b1:b4:a6: 46:28:e5:71:b4:4f:6a:6b:27:44:70:d5:a3:2c:17: c0:e0:98:39:32:1e:c6:89:91:8e:a8:76:11:dd:c9: c8:ca:75:7b:ae:b6:ae:46:96:9e:6f:fd:f3:d6:2a: 45:09:3d:2b:01:76:53:d6:cd:2a:e6:2f:ce:1c:f2: bc:71:00:3a:60:1b:a8:68:a9:6e:ce:c6:f3:ed:f8: 9e:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:38:2A:A8:C6:71:3D:2A:6C:BB:E1:42:B4:0B:66:12:1C:70:64:66 X509v3 Authority Key Identifier: keyid:FC:D4:DF:8E:B4:AA:64:AF:56:B7:D0:C7:32:6E:29:10:45:43:CC:55 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918233C/E6491FE2621411ECB006712CC4F9AE02/_NTfjrSqZK9Wt9DHMm4pEEVDzFU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_NTfjrSqZK9Wt9DHMm4pEEVDzFU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918233C/E6491FE2621411ECB006712CC4F9AE02/_NTfjrSqZK9Wt9DHMm4pEEVDzFU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a4:85:0c:ef:6c:36:4e:20:61:5b:48:87:7a:5b:32:01:d9:af: 06:40:1b:22:a2:ca:27:5e:07:cb:10:d1:aa:49:32:40:ed:99: fa:01:5c:46:5d:a3:eb:00:24:87:17:95:08:e7:7c:e5:6d:f3: 8b:fd:a4:70:d5:8d:9b:f9:0f:b2:db:fd:00:b3:7f:95:db:c6: 19:06:d4:66:ee:16:71:da:18:f7:d5:e3:28:c9:58:4e:02:ce: a5:ae:7d:1d:ea:0e:a5:67:38:53:a8:2a:b3:16:38:c1:d0:10: 00:6e:8b:b6:6f:50:30:a3:60:26:dc:45:46:37:b6:05:c0:0a: d0:4d:53:74:7d:08:b4:9b:b4:7a:55:47:69:a3:83:97:fe:e3: be:90:ed:e9:3a:53:de:64:e8:f0:0f:c7:bb:01:1e:d4:5d:df: 55:b5:94:76:33:25:7e:b6:95:13:47:2b:b6:bc:1f:e8:d0:ad: b7:16:3a:b2:4a:ec:cf:66:f2:50:14:eb:9c:2a:40:b9:de:37: fd:b8:cd:66:05:5f:46:18:da:5d:5b:e8:ba:7d:b9:3f:fa:3a: 5f:a7:b3:72:03:dc:4f:09:2c:67:58:40:3a:4a:9c:eb:c3:ec: a8:46:a5:41:b7:90:37:14:5f:8e:41:11:04:90:ce:4f:04:54: 80:2d:9c:1c -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBFjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 MjMzQzExMC8GA1UEBRMoRkNENERGOEVCNEFBNjRBRjU2QjdEMEM3MzI2RTI5MTA0 NTQzQ0M1NTAeFw0yNTA1MTUwMDI0MjlaFw0yNTA1MjIwMDI0MjlaMBgxFjAUBgNV BAMTDTY4MjUzNDNlLTUwMzIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDh82Q8AABWWGpZlt9EDKLXQ9uIHFaS1RXZPccoyLt4wqZ4v76rGJ4cILxmCL2G WWYLU6z335v3YqGxJkcIqINyIWZuXpK8la+iZqfa6QqWKX1X+syBG7zkFRY3CrW+ rF3Yapd8MpZqF1ZfzuIk8S0fhCnFax/TCPeeSFvkpPUfg3xA/nKWeR2Nl4rYl/ms i0p7pqujrR/Pz5fb/BKbZnNCArKxUwfYuxWL7R4NerCGWLG0pkYo5XG0T2prJ0Rw 1aMsF8DgmDkyHsaJkY6odhHdycjKdXuutq5Glp5v/fPWKkUJPSsBdlPWzSrmL84c 8rxxADpgG6hoqW7OxvPt+J6RAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUuDgqqMZx PSpsu+FCtAtmEhxwZGYwHwYDVR0jBBgwFoAU/NTfjrSqZK9Wt9DHMm4pEEVDzFUw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTgyMzNDL0U2NDkxRkUyNjIx NDExRUNCMDA2NzEyQ0M0RjlBRTAyL19OVGZqclNxWks5V3Q5REhNbTRwRUVWRHpG VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvX05UZmpyU3FaSzlXdDlESE1tNHBFRVZEekZVLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTgy MzNDL0U2NDkxRkUyNjIxNDExRUNCMDA2NzEyQ0M0RjlBRTAyL19OVGZqclNxWks5 V3Q5REhNbTRwRUVWRHpGVS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAKSFDO9sNk4gYVtIh3pbMgHZrwZAGyKiyideB8sQ0apJMkDtmfoBXEZd o+sAJIcXlQjnfOVt84v9pHDVjZv5D7Lb/QCzf5XbxhkG1GbuFnHaGPfV4yjJWE4C zqWufR3qDqVnOFOoKrMWOMHQEABui7ZvUDCjYCbcRUY3tgXACtBNU3R9CLSbtHpV R2mjg5f+476Q7ek6U95k6PAPx7sBHtRd31W1lHYzJX62lRNHK7a8H+jQrbcWOrJK 7M9m8lAU65wqQLneN/24zWYFX0YY2l1b6Lp9uT/6Ol+ns3ID3E8JLGdYQDpKnOvD 7KhGpUG3kDcUX45BEQSQzk8EVIAtnBw= -----END CERTIFICATE-----Generated at Thu May 15 12:29:15 2025 by rpki-client