$ rpki-client -vvf rpki.apnic.net/member_repository/A9186684/36B86ADCD89F11EBAB98C55AC4F9AE02/NKEjLqcYRp6tt628TNngDfaoUgY.mft File: NKEjLqcYRp6tt628TNngDfaoUgY.mft (raw, json) Hash identifier: rDzpfhldhclwsA/+ES79+O08XL072euGBNgwVw3ieU4= Subject key identifier: CE:31:D0:88:6D:0D:A0:D0:4F:FC:8C:22:A6:21:42:3B:CF:1C:DA:10 Authority key identifier: 34:A1:23:2E:A7:18:46:9E:AD:B7:AD:BC:4C:D9:E0:0D:F6:A8:52:06 Certificate issuer: /CN=A9186684/serialNumber=34A1232EA718469EADB7ADBC4CD9E00DF6A85206 Certificate serial: 058E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NKEjLqcYRp6tt628TNngDfaoUgY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9186684/36B86ADCD89F11EBAB98C55AC4F9AE02/NKEjLqcYRp6tt628TNngDfaoUgY.mft Manifest number: 0583 Signing time: Wed 14 May 2025 23:18:52 +0000 Manifest this update: Wed 14 May 2025 23:18:52 +0000 Manifest next update: Wed 21 May 2025 23:18:52 +0000 Files and hashes: 1: NKEjLqcYRp6tt628TNngDfaoUgY.crl (hash: 0+k2kkSRlY1ndUDOd4cMPGVy5h2d6KRQh3sUOVzNfIg=) 2: D737BB744B4111ECACAF3B6FC4F9AE02.roa (hash: 78UGN0+7orQTcucSGGqLKKQdBZ/eBwdHdIbrun6HmgE=) 3: 80D77ED8D8A811EB85D5E456C4F9AE02.roa (hash: 5vdLLR7SsjyoWbJEWGx2u6gT4judyFxezvmtzE9hlfI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9186684/36B86ADCD89F11EBAB98C55AC4F9AE02/NKEjLqcYRp6tt628TNngDfaoUgY.crl rsync://rpki.apnic.net/member_repository/A9186684/36B86ADCD89F11EBAB98C55AC4F9AE02/NKEjLqcYRp6tt628TNngDfaoUgY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NKEjLqcYRp6tt628TNngDfaoUgY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 21 May 2025 23:18:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1422 (0x58e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9186684, serialNumber=34A1232EA718469EADB7ADBC4CD9E00DF6A85206 Validity Not Before: May 14 23:18:52 2025 GMT Not After : May 21 23:18:52 2025 GMT Subject: CN=682524dc-e58c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:dd:59:bb:24:70:c2:ec:2f:f4:8c:ae:8c:55: a2:42:c4:89:7a:6a:a9:c9:34:ad:72:89:48:c4:f3: ee:47:e4:9f:cb:80:ff:a3:f6:ef:72:71:f0:81:cb: b5:b7:66:7e:ff:25:eb:cd:96:e2:e9:63:1b:62:aa: 0c:31:25:f7:2d:2b:b7:34:11:1c:eb:2c:76:10:f5: 7d:70:8c:14:26:fe:39:14:58:3a:98:a5:05:c1:8f: df:14:10:be:d8:c9:38:06:6d:0f:3f:e0:39:be:b5: b0:3d:68:04:77:46:67:f8:e9:8c:8c:b3:93:23:e2: b3:f9:fb:ef:e6:31:8a:6a:8f:97:a5:ef:58:1d:25: 96:48:fc:c8:e7:37:81:ae:51:2e:a4:99:65:c6:84: 11:70:23:86:42:5e:8e:b9:f4:b8:56:05:86:6e:8e: b8:2b:74:c1:7f:8e:26:da:5e:09:4e:08:81:4e:5e: 00:c9:5c:e7:b2:8e:dd:30:e1:33:11:59:a1:43:1c: 49:dd:bb:6e:8b:8e:a3:29:4f:3c:e4:83:7b:d5:a9: 49:73:04:32:bd:d2:39:75:e9:c9:e3:6b:44:af:1f: a7:82:75:1f:f1:de:62:0e:e5:f8:c5:88:7b:21:ab: b1:03:f1:5c:5d:6b:cf:1b:60:ce:e4:37:7c:f7:2a: 4f:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:31:D0:88:6D:0D:A0:D0:4F:FC:8C:22:A6:21:42:3B:CF:1C:DA:10 X509v3 Authority Key Identifier: keyid:34:A1:23:2E:A7:18:46:9E:AD:B7:AD:BC:4C:D9:E0:0D:F6:A8:52:06 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9186684/36B86ADCD89F11EBAB98C55AC4F9AE02/NKEjLqcYRp6tt628TNngDfaoUgY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NKEjLqcYRp6tt628TNngDfaoUgY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186684/36B86ADCD89F11EBAB98C55AC4F9AE02/NKEjLqcYRp6tt628TNngDfaoUgY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a5:55:72:02:99:6c:16:53:a0:c9:92:b8:3f:2f:01:ab:b1:01: 4d:a3:98:55:0c:cf:09:76:bb:7a:f3:c6:26:41:11:1b:8f:bd: 32:b8:bf:7f:fb:3c:0a:86:ba:83:a2:a8:d6:8c:2a:85:11:ba: 18:ac:03:4e:b3:d4:0e:ab:20:03:7e:e6:f9:97:53:db:b7:65: 90:42:0c:42:fe:cb:42:31:45:93:9f:c8:07:fc:b4:88:42:ac: 0b:e4:7d:2c:3c:ad:4c:3c:8f:6a:f1:c3:34:da:f5:bf:f5:a4: 29:80:4c:55:01:92:fc:9f:22:ea:aa:f9:20:df:11:16:d0:00: e3:7c:19:51:3c:aa:bb:f5:cd:20:ce:9b:55:5c:26:be:e8:48: c4:81:0d:af:f0:df:fd:af:50:ca:95:79:8e:c2:0d:4b:fa:82: de:2b:c7:5d:74:ff:32:f3:a2:ee:15:b7:5d:41:70:d5:65:a9: ef:8b:77:08:4a:56:10:a9:3a:ae:e3:a8:9e:ad:73:92:d3:a0: 54:73:8f:22:cd:7b:5a:da:94:22:1d:00:19:c9:77:bb:78:e7: 1e:48:b1:a8:08:08:de:65:ca:7c:29:78:e9:1d:00:bf:3c:ef: 53:f3:f6:81:83:ca:5e:f0:69:ec:4e:46:ad:70:49:74:b5:d4: 39:7e:9f:73 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBY4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODY2ODQxMTAvBgNVBAUTKDM0QTEyMzJFQTcxODQ2OUVBREI3QURCQzRDRDlFMDBE RjZBODUyMDYwHhcNMjUwNTE0MjMxODUyWhcNMjUwNTIxMjMxODUyWjAYMRYwFAYD VQQDEw02ODI1MjRkYy1lNThjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6t1ZuyRwwuwv9IyujFWiQsSJemqpyTStcolIxPPuR+Sfy4D/o/bvcnHwgcu1 t2Z+/yXrzZbi6WMbYqoMMSX3LSu3NBEc6yx2EPV9cIwUJv45FFg6mKUFwY/fFBC+ 2Mk4Bm0PP+A5vrWwPWgEd0Zn+OmMjLOTI+Kz+fvv5jGKao+Xpe9YHSWWSPzI5zeB rlEupJllxoQRcCOGQl6OufS4VgWGbo64K3TBf44m2l4JTgiBTl4AyVznso7dMOEz EVmhQxxJ3btui46jKU885IN71alJcwQyvdI5denJ42tErx+ngnUf8d5iDuX4xYh7 IauxA/FcXWvPG2DO5Dd89ypPOQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM4x0Iht DaDQT/yMIqYhQjvPHNoQMB8GA1UdIwQYMBaAFDShIy6nGEaerbetvEzZ4A32qFIG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NjY4NC8zNkI4NkFEQ0Q4 OUYxMUVCQUI5OEM1NUFDNEY5QUUwMi9OS0VqTHFjWVJwNnR0NjI4VE5uZ0RmYW9V Z1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05LRWpMcWNZUnA2dHQ2MjhUTm5nRGZhb1VnWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NjY4NC8zNkI4NkFEQ0Q4OUYxMUVCQUI5OEM1NUFDNEY5QUUwMi9OS0VqTHFjWVJw NnR0NjI4VE5uZ0RmYW9VZ1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQClVXICmWwWU6DJkrg/LwGrsQFNo5hVDM8Jdrt688YmQREbj70yuL9/ +zwKhrqDoqjWjCqFEboYrANOs9QOqyADfub5l1Pbt2WQQgxC/stCMUWTn8gH/LSI QqwL5H0sPK1MPI9q8cM02vW/9aQpgExVAZL8nyLqqvkg3xEW0ADjfBlRPKq79c0g zptVXCa+6EjEgQ2v8N/9r1DKlXmOwg1L+oLeK8dddP8y86LuFbddQXDVZanvi3cI SlYQqTqu46ierXOS06BUc48izXta2pQiHQAZyXe7eOceSLGoCAjeZcp8KXjpHQC/ PO9T8/aBg8pe8GnsTkatcEl0tdQ5fp9z -----END CERTIFICATE-----Generated at Fri May 16 19:30:10 2025 by rpki-client