$ rpki-client -vvf rpki.apnic.net/member_repository/A918D5CF/98D0B4F87B1A11E88F3D0C14C4F9AE02/NwOTvGRg5S0PXgIdVS9YF0M-suc.mft File: NwOTvGRg5S0PXgIdVS9YF0M-suc.mft (raw, json) Hash identifier: pulbLzx4Ku6vbKASEcEGHNxIKmdVgrIXtcP9PUulkhI= Subject key identifier: C6:84:24:77:9B:16:63:A4:A9:73:0D:D9:AC:E3:90:2C:5E:52:9F:1A Authority key identifier: 37:03:93:BC:64:60:E5:2D:0F:5E:02:1D:55:2F:58:17:43:3E:B2:E7 Certificate issuer: /CN=A918D5CF/serialNumber=370393BC6460E52D0F5E021D552F5817433EB2E7 Certificate serial: 1415 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NwOTvGRg5S0PXgIdVS9YF0M-suc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918D5CF/98D0B4F87B1A11E88F3D0C14C4F9AE02/NwOTvGRg5S0PXgIdVS9YF0M-suc.mft Manifest number: 140E Signing time: Fri 16 May 2025 17:10:14 +0000 Manifest this update: Fri 16 May 2025 17:10:13 +0000 Manifest next update: Fri 23 May 2025 17:10:13 +0000 Files and hashes: 1: NwOTvGRg5S0PXgIdVS9YF0M-suc.crl (hash: 9lJgNv/4G5jnVi60+srU66iSaJIJWWPugvbEAtBXsp0=) 2: 0802DFC67B1C11E8BC732C17C4F9AE02.roa (hash: HvY8aLOLbIu6vAeI5+MTO3AgRFsW1gggDw/k0s0xJwI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918D5CF/98D0B4F87B1A11E88F3D0C14C4F9AE02/NwOTvGRg5S0PXgIdVS9YF0M-suc.crl rsync://rpki.apnic.net/member_repository/A918D5CF/98D0B4F87B1A11E88F3D0C14C4F9AE02/NwOTvGRg5S0PXgIdVS9YF0M-suc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NwOTvGRg5S0PXgIdVS9YF0M-suc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 23 May 2025 17:10:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5141 (0x1415) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918D5CF, serialNumber=370393BC6460E52D0F5E021D552F5817433EB2E7 Validity Not Before: May 16 17:10:13 2025 GMT Not After : May 23 17:10:13 2025 GMT Subject: CN=68277175-a9bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:f5:8d:c8:6f:29:87:09:66:80:16:b4:94:14: 06:87:12:0e:8a:c9:2f:03:2e:2f:32:00:c7:5a:fd: 27:24:8b:c0:7e:d4:35:9a:6a:11:e0:7e:56:b2:18: 31:f6:5b:aa:34:36:c5:57:8d:e1:25:22:24:3c:a8: f3:66:08:84:8c:8c:df:5c:13:dd:af:de:8b:c3:81: 7b:67:3b:62:8f:10:e1:9a:42:fe:6a:41:d0:75:14: 2a:92:b6:fa:77:03:92:6e:9d:56:42:64:2e:0c:c6: 17:dd:a1:eb:f9:30:72:4a:31:59:bf:90:07:0b:40: 4f:b5:64:ce:3b:05:cd:df:4c:a7:a7:65:d3:db:b9: f9:ba:f5:fb:89:93:22:de:22:75:92:85:78:2c:71: cb:ca:1e:12:43:29:77:da:9c:4b:77:76:3a:ba:da: 3b:63:bb:80:c0:4d:50:56:b1:aa:20:6b:ec:65:bb: 5b:1d:7a:32:e5:1e:97:a1:6f:19:01:ff:a1:88:9c: d2:19:db:73:e6:d1:e1:6c:73:f5:9a:d3:a3:d8:d2: b6:96:93:04:54:45:07:97:53:0f:f0:99:e3:3c:cc: c3:21:ae:fc:3a:80:6d:c6:9c:82:ab:99:29:aa:ba: bc:60:98:ab:f8:9e:43:4b:03:a5:ba:88:1a:1a:06: 9c:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:84:24:77:9B:16:63:A4:A9:73:0D:D9:AC:E3:90:2C:5E:52:9F:1A X509v3 Authority Key Identifier: keyid:37:03:93:BC:64:60:E5:2D:0F:5E:02:1D:55:2F:58:17:43:3E:B2:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918D5CF/98D0B4F87B1A11E88F3D0C14C4F9AE02/NwOTvGRg5S0PXgIdVS9YF0M-suc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NwOTvGRg5S0PXgIdVS9YF0M-suc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D5CF/98D0B4F87B1A11E88F3D0C14C4F9AE02/NwOTvGRg5S0PXgIdVS9YF0M-suc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 54:19:1d:d4:ea:33:3d:c1:53:55:8a:ac:02:ea:c5:c3:95:dc: 4b:fd:63:48:44:d8:25:08:dc:ea:5f:96:d5:f2:04:c6:e1:05: dd:1c:62:5d:49:e9:27:b4:ca:43:3b:51:06:72:7f:5f:fd:ed: d9:19:05:a6:77:55:bc:97:35:11:e3:36:fa:e8:34:3d:2d:ed: 81:ae:b7:76:a9:ad:e6:a9:d9:d2:2d:96:fe:ce:65:53:0b:4a: ce:5a:e1:8a:b8:ab:f8:28:2e:13:69:db:0d:ee:3b:a2:28:9d: ec:a7:97:d9:f8:79:6d:77:a7:23:20:df:a4:48:51:8d:ae:99: a2:44:92:0b:4d:7b:97:e3:73:c2:c5:df:53:43:51:24:88:6b: 31:c3:65:66:bf:c0:24:da:62:da:57:ca:00:94:50:b6:1f:16: 31:ea:f3:8b:05:ed:fb:90:97:c7:6a:5e:a4:2c:bb:0a:e3:86: ae:73:1d:96:a8:27:c5:cd:3f:a6:21:00:f1:86:cb:e5:a4:5b: 87:cf:27:03:51:5b:5a:8d:15:0f:fd:ea:0d:95:b0:24:f0:3f: ac:23:bf:c1:97:38:b7:60:ff:cf:c2:03:ae:2c:8e:52:16:03: e6:29:64:63:82:df:04:1a:8d:2e:ce:99:67:33:69:24:c2:07: 04:6c:96:cb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFBUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEQ1Q0YxMTAvBgNVBAUTKDM3MDM5M0JDNjQ2MEU1MkQwRjVFMDIxRDU1MkY1ODE3 NDMzRUIyRTcwHhcNMjUwNTE2MTcxMDEzWhcNMjUwNTIzMTcxMDEzWjAYMRYwFAYD VQQDEw02ODI3NzE3NS1hOWJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvPWNyG8phwlmgBa0lBQGhxIOiskvAy4vMgDHWv0nJIvAftQ1mmoR4H5Wshgx 9luqNDbFV43hJSIkPKjzZgiEjIzfXBPdr96Lw4F7ZztijxDhmkL+akHQdRQqkrb6 dwOSbp1WQmQuDMYX3aHr+TBySjFZv5AHC0BPtWTOOwXN30ynp2XT27n5uvX7iZMi 3iJ1koV4LHHLyh4SQyl32pxLd3Y6uto7Y7uAwE1QVrGqIGvsZbtbHXoy5R6XoW8Z Af+hiJzSGdtz5tHhbHP1mtOj2NK2lpMEVEUHl1MP8JnjPMzDIa78OoBtxpyCq5kp qrq8YJir+J5DSwOluogaGgacjQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMaEJHeb FmOkqXMN2azjkCxeUp8aMB8GA1UdIwQYMBaAFDcDk7xkYOUtD14CHVUvWBdDPrLn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RDVDRi85OEQwQjRGODdC MUExMUU4OEYzRDBDMTRDNEY5QUUwMi9Od09UdkdSZzVTMFBYZ0lkVlM5WUYwTS1z dWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL053T1R2R1JnNVMwUFhnSWRWUzlZRjBNLXN1Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RDVDRi85OEQwQjRGODdCMUExMUU4OEYzRDBDMTRDNEY5QUUwMi9Od09UdkdSZzVT MFBYZ0lkVlM5WUYwTS1zdWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBUGR3U6jM9wVNViqwC6sXDldxL/WNIRNglCNzqX5bV8gTG4QXdHGJd SekntMpDO1EGcn9f/e3ZGQWmd1W8lzUR4zb66DQ9Le2Brrd2qa3mqdnSLZb+zmVT C0rOWuGKuKv4KC4TadsN7juiKJ3sp5fZ+Hltd6cjIN+kSFGNrpmiRJILTXuX43PC xd9TQ1EkiGsxw2Vmv8Ak2mLaV8oAlFC2HxYx6vOLBe37kJfHal6kLLsK44aucx2W qCfFzT+mIQDxhsvlpFuHzycDUVtajRUP/eoNlbAk8D+sI7/Blzi3YP/PwgOuLI5S FgPmKWRjgt8EGo0uzplnM2kkwgcEbJbL -----END CERTIFICATE-----Generated at Sun May 18 14:18:30 2025 by rpki-client