$ rpki-client -vvf rpki.apnic.net/member_repository/A91C97F5/9170C42A274411ED8C139B51C4F9AE02/Nocz_cVgxeuJ5FJA331AOcsvYQg.mft File: Nocz_cVgxeuJ5FJA331AOcsvYQg.mft (raw, json) Hash identifier: Lc0flxtXjWhqXob1c6qeYyce67RG1lJx4bq9CQrFYUg= Subject key identifier: 31:73:AA:EE:B2:99:2B:6F:D4:F2:0D:91:B4:E5:27:5A:61:EF:AD:B0 Authority key identifier: 36:87:33:FD:C5:60:C5:EB:89:E4:52:40:DF:7D:40:39:CB:2F:61:08 Certificate issuer: /CN=A91C97F5/serialNumber=368733FDC560C5EB89E45240DF7D4039CB2F6108 Certificate serial: 0234 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nocz_cVgxeuJ5FJA331AOcsvYQg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C97F5/9170C42A274411ED8C139B51C4F9AE02/Nocz_cVgxeuJ5FJA331AOcsvYQg.mft Manifest number: 022F Signing time: Sun 11 May 2025 01:26:46 +0000 Manifest this update: Sun 11 May 2025 01:26:45 +0000 Manifest next update: Sun 18 May 2025 01:26:45 +0000 Files and hashes: 1: Nocz_cVgxeuJ5FJA331AOcsvYQg.crl (hash: W8E2X81nK1wfPdy6uyARCuR4z8aXS9gQIlTJlRCaHAA=) 2: 020D49E0283211ED9E29FA70C4F9AE02.roa (hash: LQxrSI0KNNYbihu8S9SLx+zDE07D+HfcizadCn96Tg0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C97F5/9170C42A274411ED8C139B51C4F9AE02/Nocz_cVgxeuJ5FJA331AOcsvYQg.crl rsync://rpki.apnic.net/member_repository/A91C97F5/9170C42A274411ED8C139B51C4F9AE02/Nocz_cVgxeuJ5FJA331AOcsvYQg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nocz_cVgxeuJ5FJA331AOcsvYQg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 May 2025 01:26:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 564 (0x234) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C97F5, serialNumber=368733FDC560C5EB89E45240DF7D4039CB2F6108 Validity Not Before: May 11 01:26:45 2025 GMT Not After : May 18 01:26:45 2025 GMT Subject: CN=681ffcd6-58b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:5c:df:6a:56:28:03:87:55:e6:56:c0:c8:b9: c8:49:3c:a0:db:26:3b:f8:8a:7b:58:79:e0:45:fe: 00:9d:56:70:05:1a:0b:4c:4b:a0:57:88:85:d2:00: c3:b8:76:53:c5:e8:f7:2d:7a:9d:10:aa:38:73:64: 6e:4f:db:85:19:32:74:15:16:46:0a:7f:0b:b6:25: 9a:fa:19:a4:e2:c1:30:ca:1b:d0:56:6a:5c:a6:a7: 78:6c:b4:6e:fb:34:31:2a:e8:57:8f:ad:d2:c6:ab: be:c3:b8:82:99:0a:19:8b:87:65:e8:61:82:9c:c8: 8b:8e:1e:35:a5:74:73:8f:d0:9a:c4:eb:e0:b1:8f: 52:3f:ad:7b:80:89:c5:9c:86:29:2a:93:f6:35:4e: d3:1a:17:b8:42:83:b4:99:61:de:77:14:c5:d7:a4: e0:1a:43:9f:38:89:91:b4:52:e4:e9:f8:30:6e:4a: 5c:51:2f:d2:d6:69:94:70:76:0f:31:5d:de:b9:81: 67:e7:54:5c:68:74:24:f8:48:fd:8a:5f:04:fd:cd: 1d:48:3c:f9:fd:96:e5:e8:9a:b9:79:47:18:b1:30: 1d:b3:bf:9a:ae:ef:fc:d8:f2:4a:ab:ca:39:6c:f6: 6f:1e:69:98:a7:41:17:27:f2:fc:1e:e8:3b:20:ed: 0b:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:73:AA:EE:B2:99:2B:6F:D4:F2:0D:91:B4:E5:27:5A:61:EF:AD:B0 X509v3 Authority Key Identifier: keyid:36:87:33:FD:C5:60:C5:EB:89:E4:52:40:DF:7D:40:39:CB:2F:61:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C97F5/9170C42A274411ED8C139B51C4F9AE02/Nocz_cVgxeuJ5FJA331AOcsvYQg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nocz_cVgxeuJ5FJA331AOcsvYQg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C97F5/9170C42A274411ED8C139B51C4F9AE02/Nocz_cVgxeuJ5FJA331AOcsvYQg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3d:14:5f:1c:55:cf:28:66:7b:f1:ce:60:2d:83:10:35:9b:98: 7d:07:3a:83:d5:78:a8:03:d0:85:3b:44:65:27:c4:47:51:c3: 39:f9:4f:2c:d0:86:32:4b:66:7b:06:6a:0e:2d:a0:82:c7:e7: 9b:36:0b:2a:8e:d8:5c:60:7a:ad:f3:1d:77:67:f8:d0:af:0c: d4:14:dd:90:a1:07:25:30:e6:9f:85:87:0a:18:09:f6:e9:c9: 5f:2f:87:68:23:b5:b5:0c:5c:68:1d:20:b7:54:59:eb:63:06: 3b:2f:b1:a1:46:ef:87:9c:fe:8f:b2:5a:92:c2:7d:73:7b:22: 99:04:c2:1f:5f:bf:18:64:b3:b3:62:a6:bd:15:39:55:1a:ab: bf:c4:db:73:db:ce:e7:2d:e9:84:50:a2:6c:80:17:68:2c:5b: f8:94:b9:68:9e:11:28:47:56:21:77:0f:ea:fb:77:25:16:2d: 23:74:93:81:60:dc:3f:a2:c5:20:2d:0b:a6:58:9f:ea:73:8f: 64:55:4a:ac:76:61:bf:fc:04:35:41:6d:13:9e:98:36:08:89: 83:9d:61:4d:61:60:82:f5:13:5b:0f:64:0d:5c:cc:9f:0d:4f: 8e:de:8d:15:dd:84:75:d1:d3:05:c2:d1:8f:e3:a8:dd:73:08: a2:ef:ff:f1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAjQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qzk3RjUxMTAvBgNVBAUTKDM2ODczM0ZEQzU2MEM1RUI4OUU0NTI0MERGN0Q0MDM5 Q0IyRjYxMDgwHhcNMjUwNTExMDEyNjQ1WhcNMjUwNTE4MDEyNjQ1WjAYMRYwFAYD VQQDEw02ODFmZmNkNi01OGIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsVzfalYoA4dV5lbAyLnISTyg2yY7+Ip7WHngRf4AnVZwBRoLTEugV4iF0gDD uHZTxej3LXqdEKo4c2RuT9uFGTJ0FRZGCn8LtiWa+hmk4sEwyhvQVmpcpqd4bLRu +zQxKuhXj63Sxqu+w7iCmQoZi4dl6GGCnMiLjh41pXRzj9CaxOvgsY9SP617gInF nIYpKpP2NU7TGhe4QoO0mWHedxTF16TgGkOfOImRtFLk6fgwbkpcUS/S1mmUcHYP MV3euYFn51RcaHQk+Ej9il8E/c0dSDz5/Zbl6Jq5eUcYsTAds7+aru/82PJKq8o5 bPZvHmmYp0EXJ/L8Hug7IO0L3wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDFzqu6y mStv1PINkbTlJ1ph762wMB8GA1UdIwQYMBaAFDaHM/3FYMXrieRSQN99QDnLL2EI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOTdGNS85MTcwQzQyQTI3 NDQxMUVEOEMxMzlCNTFDNEY5QUUwMi9Ob2N6X2NWZ3hldUo1RkpBMzMxQU9jc3ZZ UWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05vY3pfY1ZneGV1SjVGSkEzMzFBT2NzdllRZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD OTdGNS85MTcwQzQyQTI3NDQxMUVEOEMxMzlCNTFDNEY5QUUwMi9Ob2N6X2NWZ3hl dUo1RkpBMzMxQU9jc3ZZUWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA9FF8cVc8oZnvxzmAtgxA1m5h9BzqD1XioA9CFO0RlJ8RHUcM5+U8s 0IYyS2Z7BmoOLaCCx+ebNgsqjthcYHqt8x13Z/jQrwzUFN2QoQclMOafhYcKGAn2 6clfL4doI7W1DFxoHSC3VFnrYwY7L7GhRu+HnP6PslqSwn1zeyKZBMIfX78YZLOz Yqa9FTlVGqu/xNtz287nLemEUKJsgBdoLFv4lLlonhEoR1Yhdw/q+3clFi0jdJOB YNw/osUgLQumWJ/qc49kVUqsdmG//AQ1QW0Tnpg2CImDnWFNYWCC9RNbD2QNXMyf DU+O3o0V3YR10dMFwtGP46jdcwii7//x -----END CERTIFICATE-----Generated at Sun May 11 10:20:24 2025 by rpki-client