$ rpki-client -vvf rpki.apnic.net/member_repository/A91B98F0/8A1AE1F4672C11EA8393DF25C4F9AE02/ntLhokBcme5158OQPfckDKqr-yU.mft File: ntLhokBcme5158OQPfckDKqr-yU.mft (raw, json) Hash identifier: mq7UoHtAIG9KOyvxtGNyDfJQJZgcNCxKaAvc+0IouLQ= Subject key identifier: 79:38:5F:36:59:BC:E9:3F:9F:D9:C5:60:DA:39:06:84:C5:01:F7:34 Authority key identifier: 9E:D2:E1:A2:40:5C:99:EE:75:E7:C3:90:3D:F7:24:0C:AA:AB:FB:25 Certificate issuer: /CN=A91B98F0/serialNumber=9ED2E1A2405C99EE75E7C3903DF7240CAAABFB25 Certificate serial: 0A6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ntLhokBcme5158OQPfckDKqr-yU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B98F0/8A1AE1F4672C11EA8393DF25C4F9AE02/ntLhokBcme5158OQPfckDKqr-yU.mft Manifest number: 0A52 Signing time: Mon 12 May 2025 19:33:35 +0000 Manifest this update: Mon 12 May 2025 19:33:35 +0000 Manifest next update: Mon 19 May 2025 19:33:35 +0000 Files and hashes: 1: ntLhokBcme5158OQPfckDKqr-yU.crl (hash: h0aMwJyMhC6W8v8Qs5jTlHwoC28ltmEZW48bFAJPcI0=) 2: A7C5E9A008C711F0A36DEF53C4F9AE02.roa (hash: 5bw02QPZALBVcPXao2om/7h5TeG43Lt0My2JIbwOjOs=) 3: A5980E1A08C711F0A36DEF53C4F9AE02.roa (hash: LEXFRzUj++AYS1bZVpScJtjHFnh8GD6doBgoF1ckC8A=) 4: A699CC5408C711F0A36DEF53C4F9AE02.roa (hash: 4Gb0oGZj79v5ouAdIBzDqoRNpL7kau5pEssgVRcrgRI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B98F0/8A1AE1F4672C11EA8393DF25C4F9AE02/ntLhokBcme5158OQPfckDKqr-yU.crl rsync://rpki.apnic.net/member_repository/A91B98F0/8A1AE1F4672C11EA8393DF25C4F9AE02/ntLhokBcme5158OQPfckDKqr-yU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ntLhokBcme5158OQPfckDKqr-yU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 19:33:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2667 (0xa6b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B98F0, serialNumber=9ED2E1A2405C99EE75E7C3903DF7240CAAABFB25 Validity Not Before: May 12 19:33:35 2025 GMT Not After : May 19 19:33:35 2025 GMT Subject: CN=68224d0f-42f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:50:ff:7b:d9:19:f3:3c:be:3f:10:da:e1:1b: 50:d1:77:35:41:da:91:83:17:56:d9:f7:21:c4:a0: 96:54:f7:ac:6c:3d:6c:9c:9a:14:04:f5:09:e4:84: 8d:5d:9f:02:50:e5:90:4f:fc:00:58:a7:9f:e2:fd: 33:78:02:d1:d7:f4:87:1a:d4:2c:27:29:04:1c:ed: d3:e3:ba:27:32:06:ab:61:ac:65:a8:f1:9d:b2:47: e8:1a:df:1c:c1:8b:f3:ef:f6:3a:7e:f4:73:c1:40: c4:4a:ae:e3:7c:0a:4e:5e:9d:87:25:6a:71:b8:e8: d4:9a:6a:61:5c:c4:26:18:bf:f5:f2:20:4f:6b:13: 8f:14:18:26:9e:21:9d:eb:85:ef:45:44:cb:20:84: 7f:58:ab:95:7b:f6:52:f2:6e:75:86:4e:cd:1c:09: 27:ad:49:bf:d4:2d:3a:36:b9:7a:3a:66:bd:9b:dd: c0:eb:10:9f:11:c3:a3:db:f1:d8:21:f5:1c:59:03: 82:a7:2c:95:87:3f:4c:51:0a:a6:2e:2f:b9:67:ec: 58:34:df:7f:51:7e:a8:a1:89:7c:40:67:c0:c5:14: 3c:be:48:48:e2:d3:3e:1e:3b:2b:7b:04:36:bf:f5: 9d:05:4e:c4:ad:90:0c:db:e7:65:10:62:c8:c1:6b: 33:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:38:5F:36:59:BC:E9:3F:9F:D9:C5:60:DA:39:06:84:C5:01:F7:34 X509v3 Authority Key Identifier: keyid:9E:D2:E1:A2:40:5C:99:EE:75:E7:C3:90:3D:F7:24:0C:AA:AB:FB:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B98F0/8A1AE1F4672C11EA8393DF25C4F9AE02/ntLhokBcme5158OQPfckDKqr-yU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ntLhokBcme5158OQPfckDKqr-yU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B98F0/8A1AE1F4672C11EA8393DF25C4F9AE02/ntLhokBcme5158OQPfckDKqr-yU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 42:50:29:56:99:30:1e:66:dc:d2:40:1d:47:73:95:a9:84:5a: 72:f0:4d:21:c8:9d:35:7d:f2:40:e5:45:11:f6:ac:98:e5:0d: b9:d7:fd:de:94:65:bd:26:c8:48:bb:fa:1a:ae:cd:e0:7f:c3: e3:9e:2e:f4:9d:50:27:37:3e:06:d8:24:3f:8e:78:b9:88:9b: a7:7e:42:79:5a:31:1e:9d:e4:7e:c8:0c:b2:8f:09:90:d4:55: c4:0b:7c:da:86:7c:54:2d:7a:03:96:c2:8f:37:99:0f:f2:2e: e0:6f:f5:c5:ec:ab:19:4d:bb:bc:01:c4:a8:15:21:72:70:4e: 9f:fe:45:9a:a4:9e:6b:8f:8d:33:f5:6f:4b:ac:7b:0c:12:cc: 31:7b:e8:d8:1b:82:9c:fb:25:df:a1:4e:f0:5f:fb:53:a1:2c: 96:c2:91:f8:2d:7b:5b:cf:42:e5:e6:6d:3f:85:0f:db:a8:ee: 1b:a1:dc:ea:ad:75:93:01:83:f2:1a:24:cb:99:bf:62:67:ae: db:61:6c:57:e6:22:3c:d3:c4:c5:72:be:03:9b:ee:cd:c6:2d: e4:c6:61:a1:28:74:46:23:47:6f:2b:00:8d:af:fd:19:02:c9: e8:61:16:0c:75:f8:8a:ec:ee:de:10:f6:88:8c:d3:10:d9:b6: ff:12:f2:25 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCmswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qjk4RjAxMTAvBgNVBAUTKDlFRDJFMUEyNDA1Qzk5RUU3NUU3QzM5MDNERjcyNDBD QUFBQkZCMjUwHhcNMjUwNTEyMTkzMzM1WhcNMjUwNTE5MTkzMzM1WjAYMRYwFAYD VQQDEw02ODIyNGQwZi00MmY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA31D/e9kZ8zy+PxDa4RtQ0Xc1QdqRgxdW2fchxKCWVPesbD1snJoUBPUJ5ISN XZ8CUOWQT/wAWKef4v0zeALR1/SHGtQsJykEHO3T47onMgarYaxlqPGdskfoGt8c wYvz7/Y6fvRzwUDESq7jfApOXp2HJWpxuOjUmmphXMQmGL/18iBPaxOPFBgmniGd 64XvRUTLIIR/WKuVe/ZS8m51hk7NHAknrUm/1C06Nrl6Oma9m93A6xCfEcOj2/HY IfUcWQOCpyyVhz9MUQqmLi+5Z+xYNN9/UX6ooYl8QGfAxRQ8vkhI4tM+HjsrewQ2 v/WdBU7ErZAM2+dlEGLIwWszFQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHk4XzZZ vOk/n9nFYNo5BoTFAfc0MB8GA1UdIwQYMBaAFJ7S4aJAXJnudefDkD33JAyqq/sl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOThGMC84QTFBRTFGNDY3 MkMxMUVBODM5M0RGMjVDNEY5QUUwMi9udExob2tCY21lNTE1OE9RUGZja0RLcXIt eVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL250TGhva0JjbWU1MTU4T1FQZmNrREtxci15VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC OThGMC84QTFBRTFGNDY3MkMxMUVBODM5M0RGMjVDNEY5QUUwMi9udExob2tCY21l NTE1OE9RUGZja0RLcXIteVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBCUClWmTAeZtzSQB1Hc5WphFpy8E0hyJ01ffJA5UUR9qyY5Q251/3e lGW9JshIu/oars3gf8Pjni70nVAnNz4G2CQ/jni5iJunfkJ5WjEeneR+yAyyjwmQ 1FXEC3zahnxULXoDlsKPN5kP8i7gb/XF7KsZTbu8AcSoFSFycE6f/kWapJ5rj40z 9W9LrHsMEswxe+jYG4Kc+yXfoU7wX/tToSyWwpH4LXtbz0Ll5m0/hQ/bqO4bodzq rXWTAYPyGiTLmb9iZ67bYWxX5iI808TFcr4Dm+7Nxi3kxmGhKHRGI0dvKwCNr/0Z AsnoYRYMdfiK7O7eEPaIjNMQ2bb/EvIl -----END CERTIFICATE-----Generated at Tue May 13 15:37:23 2025 by rpki-client