$ rpki-client -vvf rpki.apnic.net/member_repository/A918ACDD/2A2CFC464DCF11EDBF05FA53C4F9AE02/NpFTMwCsweAQXuAxcGNQf4e0AS0.mft File: NpFTMwCsweAQXuAxcGNQf4e0AS0.mft (raw, json) Hash identifier: dIlq6pPDeLOsIh5pcRcwK4rZtM+XqU9g+5FBb0MWrIA= Subject key identifier: 5A:E4:37:9B:B7:7E:28:7E:63:9A:88:51:93:BF:88:F4:A2:78:DB:0E Authority key identifier: 36:91:53:33:00:AC:C1:E0:10:5E:E0:31:70:63:50:7F:87:B4:01:2D Certificate issuer: /CN=A918ACDD/serialNumber=3691533300ACC1E0105EE0317063507F87B4012D Certificate serial: 01E9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NpFTMwCsweAQXuAxcGNQf4e0AS0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918ACDD/2A2CFC464DCF11EDBF05FA53C4F9AE02/NpFTMwCsweAQXuAxcGNQf4e0AS0.mft Manifest number: 01E5 Signing time: Sun 11 May 2025 01:40:22 +0000 Manifest this update: Sun 11 May 2025 01:40:22 +0000 Manifest next update: Sun 18 May 2025 01:40:22 +0000 Files and hashes: 1: NpFTMwCsweAQXuAxcGNQf4e0AS0.crl (hash: qc4aBcbGb2jogPUXG08A5RyFRn0xaaG4SnijQmBhuoI=) 2: 397504CA4DD211ED8314A659C4F9AE02.roa (hash: IA7ndlMtzlimkIY6svrVtb7hYj1DKuX/Dcj54QQRijI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918ACDD/2A2CFC464DCF11EDBF05FA53C4F9AE02/NpFTMwCsweAQXuAxcGNQf4e0AS0.crl rsync://rpki.apnic.net/member_repository/A918ACDD/2A2CFC464DCF11EDBF05FA53C4F9AE02/NpFTMwCsweAQXuAxcGNQf4e0AS0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NpFTMwCsweAQXuAxcGNQf4e0AS0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 May 2025 01:40:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 489 (0x1e9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918ACDD, serialNumber=3691533300ACC1E0105EE0317063507F87B4012D Validity Not Before: May 11 01:40:22 2025 GMT Not After : May 18 01:40:22 2025 GMT Subject: CN=68200006-d84e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:cd:28:51:3f:4f:97:c1:73:18:c2:aa:03:3a: 2f:dc:79:27:cd:6c:a3:aa:a8:08:75:a4:90:4f:36: e3:fe:65:d6:14:eb:83:b9:fc:a8:d3:8b:0e:f5:3e: 44:a3:9b:14:77:6a:fd:c2:9b:fc:9b:98:ab:58:aa: 67:c4:4b:79:a6:9f:c3:11:c0:f7:79:fc:5d:5b:f3: 6f:6c:93:6e:a9:9a:3f:ac:61:d7:1b:67:a2:21:a4: 59:59:b4:34:22:4c:02:7d:38:5e:23:1e:42:9f:a2: 9b:b1:9b:16:b6:d2:71:c7:7b:8f:7e:5a:5d:a1:72: b4:87:ea:c9:55:e3:71:1e:38:22:90:72:db:d2:d5: 06:ab:41:67:40:93:f6:5c:79:cd:ed:a7:01:18:a6: 61:60:61:3a:ed:c8:d7:c3:94:ae:cb:1f:3a:ef:7b: 59:12:36:9a:9e:58:73:14:f0:df:1d:f1:35:f8:0f: 80:e3:54:eb:e2:08:1a:22:2d:cf:2d:66:71:f9:58: e8:30:17:b2:b6:e7:12:cd:a4:9f:3e:91:b2:d0:bd: e6:bc:bb:e0:ef:0e:04:ae:88:e5:62:a0:08:be:32: d2:53:7a:82:b7:33:92:26:6c:2f:3b:0c:50:fd:c3: 61:24:16:a5:7b:94:06:68:18:4f:25:ec:a9:c7:16: a4:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:E4:37:9B:B7:7E:28:7E:63:9A:88:51:93:BF:88:F4:A2:78:DB:0E X509v3 Authority Key Identifier: keyid:36:91:53:33:00:AC:C1:E0:10:5E:E0:31:70:63:50:7F:87:B4:01:2D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918ACDD/2A2CFC464DCF11EDBF05FA53C4F9AE02/NpFTMwCsweAQXuAxcGNQf4e0AS0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NpFTMwCsweAQXuAxcGNQf4e0AS0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918ACDD/2A2CFC464DCF11EDBF05FA53C4F9AE02/NpFTMwCsweAQXuAxcGNQf4e0AS0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 81:23:db:5a:20:4e:a0:02:4a:98:f7:af:75:16:b9:d1:ce:7b: b6:f3:cd:fd:e6:fd:40:62:94:ec:bb:e1:09:86:78:8a:d7:9f: 0b:ac:4a:0a:c5:04:8e:b2:03:cb:a8:23:f7:64:1d:7a:8b:9a: b3:0b:1e:33:e2:bc:4a:4b:50:d4:a8:f7:3a:36:de:60:50:b6: e1:e9:6b:ea:11:b9:80:0e:47:79:1f:ec:4c:53:8b:38:8f:04: 0b:b3:2b:87:58:99:68:48:0d:a7:03:98:7c:5d:5c:4e:09:2c: 38:bc:5a:62:50:4c:4e:90:fb:74:96:c7:92:3c:fe:dc:cb:cd: 2c:b8:1c:4e:dc:77:c7:d8:b8:ef:8e:9f:1b:67:a3:7b:95:63: 0d:8a:6e:36:eb:3d:62:67:cf:40:60:58:b0:73:36:58:ea:c3: 6d:77:b3:cb:64:d8:cc:5f:67:dc:a2:9d:91:47:2b:28:bc:ea: 73:d0:3f:1b:cc:74:cc:c1:fb:7e:2e:f6:6d:07:bb:c8:2f:87: 34:10:d6:60:56:11:fa:cc:6d:79:f9:2f:7a:72:2b:6f:0e:8c: b5:8e:24:60:85:0f:c8:ba:9e:74:cd:5b:d2:e8:72:f4:0d:c0: 39:b3:8b:29:a4:65:42:7b:db:ad:a5:e0:f6:fc:e7:9e:70:15: b5:da:0d:73 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAekwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEFDREQxMTAvBgNVBAUTKDM2OTE1MzMzMDBBQ0MxRTAxMDVFRTAzMTcwNjM1MDdG ODdCNDAxMkQwHhcNMjUwNTExMDE0MDIyWhcNMjUwNTE4MDE0MDIyWjAYMRYwFAYD VQQDEw02ODIwMDAwNi1kODRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqs0oUT9Pl8FzGMKqAzov3HknzWyjqqgIdaSQTzbj/mXWFOuDufyo04sO9T5E o5sUd2r9wpv8m5irWKpnxEt5pp/DEcD3efxdW/NvbJNuqZo/rGHXG2eiIaRZWbQ0 IkwCfTheIx5Cn6KbsZsWttJxx3uPflpdoXK0h+rJVeNxHjgikHLb0tUGq0FnQJP2 XHnN7acBGKZhYGE67cjXw5Suyx8673tZEjaanlhzFPDfHfE1+A+A41Tr4ggaIi3P LWZx+VjoMBeytucSzaSfPpGy0L3mvLvg7w4ErojlYqAIvjLSU3qCtzOSJmwvOwxQ /cNhJBale5QGaBhPJeypxxakawIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFrkN5u3 fih+Y5qIUZO/iPSieNsOMB8GA1UdIwQYMBaAFDaRUzMArMHgEF7gMXBjUH+HtAEt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QUNERC8yQTJDRkM0NjRE Q0YxMUVEQkYwNUZBNTNDNEY5QUUwMi9OcEZUTXdDc3dlQVFYdUF4Y0dOUWY0ZTBB UzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05wRlRNd0Nzd2VBUVh1QXhjR05RZjRlMEFTMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QUNERC8yQTJDRkM0NjREQ0YxMUVEQkYwNUZBNTNDNEY5QUUwMi9OcEZUTXdDc3dl QVFYdUF4Y0dOUWY0ZTBBUzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCBI9taIE6gAkqY9691FrnRznu288395v1AYpTsu+EJhniK158LrEoK xQSOsgPLqCP3ZB16i5qzCx4z4rxKS1DUqPc6Nt5gULbh6WvqEbmADkd5H+xMU4s4 jwQLsyuHWJloSA2nA5h8XVxOCSw4vFpiUExOkPt0lseSPP7cy80suBxO3HfH2Ljv jp8bZ6N7lWMNim426z1iZ89AYFiwczZY6sNtd7PLZNjMX2fcop2RRysovOpz0D8b zHTMwft+LvZtB7vIL4c0ENZgVhH6zG15+S96citvDoy1jiRghQ/Iup50zVvS6HL0 DcA5s4sppGVCe9utpeD2/OeecBW12g1z -----END CERTIFICATE-----Generated at Mon May 12 19:45:49 2025 by rpki-client