$ rpki-client -vvf rpki.apnic.net/member_repository/A91F473F/1D17EDB42B9011EE8B5DE470C4F9AE02/NcbYSDFsIdmTz25MBtYB3AXvxOE.mft File: NcbYSDFsIdmTz25MBtYB3AXvxOE.mft (raw, json) Hash identifier: nl3C/aV91+VlOvMSGdl2IV851mCLLHXf3Xhshzz8uRc= Subject key identifier: F4:5E:C8:F7:AD:15:78:37:32:A9:87:20:00:20:01:BA:65:BB:62:8F Authority key identifier: 35:C6:D8:48:31:6C:21:D9:93:CF:6E:4C:06:D6:01:DC:05:EF:C4:E1 Certificate issuer: /CN=A91F473F/serialNumber=35C6D848316C21D993CF6E4C06D601DC05EFC4E1 Certificate serial: 0156 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NcbYSDFsIdmTz25MBtYB3AXvxOE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F473F/1D17EDB42B9011EE8B5DE470C4F9AE02/NcbYSDFsIdmTz25MBtYB3AXvxOE.mft Manifest number: 0154 Signing time: Tue 13 May 2025 03:21:40 +0000 Manifest this update: Tue 13 May 2025 03:21:39 +0000 Manifest next update: Tue 20 May 2025 03:21:39 +0000 Files and hashes: 1: NcbYSDFsIdmTz25MBtYB3AXvxOE.crl (hash: +VKbNoT7B4UjvT87m5QpzOzznuWjDqyHbSgYdHdDMt4=) 2: C416FBB02D6F11EEAC755B42C4F9AE02.roa (hash: ABFFM1PxoSUJD+uYz/pY10lv6OnyO7PHPufaHPjtOBE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F473F/1D17EDB42B9011EE8B5DE470C4F9AE02/NcbYSDFsIdmTz25MBtYB3AXvxOE.crl rsync://rpki.apnic.net/member_repository/A91F473F/1D17EDB42B9011EE8B5DE470C4F9AE02/NcbYSDFsIdmTz25MBtYB3AXvxOE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NcbYSDFsIdmTz25MBtYB3AXvxOE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 03:21:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 342 (0x156) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F473F, serialNumber=35C6D848316C21D993CF6E4C06D601DC05EFC4E1 Validity Not Before: May 13 03:21:39 2025 GMT Not After : May 20 03:21:39 2025 GMT Subject: CN=6822bac3-59d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:db:98:e0:2b:b2:75:ea:d5:09:89:30:59:11: 7e:25:55:10:f4:c9:8e:28:8e:f5:f0:da:0c:04:3b: 13:ef:97:8f:01:cc:ae:13:99:c8:cb:d7:60:a3:c8: a6:eb:e5:1f:ac:4a:e5:fd:3b:61:09:a8:28:a1:e6: 55:57:47:5d:35:cc:cb:e3:33:0f:33:56:ba:8e:13: 7a:0a:72:77:2c:6a:8f:5a:9f:a0:f5:0a:80:66:d3: 56:ba:ae:84:84:4a:7a:dd:74:8f:b9:7b:7f:ff:0f: e5:78:14:60:0a:fd:2d:81:fd:f8:9c:9c:b4:40:fb: 65:00:10:de:0a:91:5f:fc:39:cb:d0:e1:e4:91:19: 10:db:bd:91:22:50:25:8e:bd:f9:11:e0:6d:3e:e3: 35:51:0d:f2:14:72:ea:f9:8a:df:a9:59:27:6e:41: a9:32:ee:66:4f:39:34:f9:64:e9:fc:a0:84:bb:c5: d9:11:57:b9:1b:d9:72:50:11:5a:18:b1:b3:25:28: a2:fd:4d:bc:00:77:d2:39:6e:03:b1:57:ee:32:6e: dc:01:03:54:3e:a2:4a:8d:09:7f:94:c0:46:ee:e9: 32:26:89:5b:4a:dd:61:4f:58:18:fa:4e:c1:b6:d2: 72:8a:5d:d3:fd:76:21:30:27:99:aa:c7:3a:48:1e: 7c:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:5E:C8:F7:AD:15:78:37:32:A9:87:20:00:20:01:BA:65:BB:62:8F X509v3 Authority Key Identifier: keyid:35:C6:D8:48:31:6C:21:D9:93:CF:6E:4C:06:D6:01:DC:05:EF:C4:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F473F/1D17EDB42B9011EE8B5DE470C4F9AE02/NcbYSDFsIdmTz25MBtYB3AXvxOE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NcbYSDFsIdmTz25MBtYB3AXvxOE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F473F/1D17EDB42B9011EE8B5DE470C4F9AE02/NcbYSDFsIdmTz25MBtYB3AXvxOE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 12:8d:93:de:c5:20:a2:18:1d:05:d0:3d:ed:3e:07:3b:aa:20: 3a:e4:e2:cd:aa:c1:76:51:4a:32:98:52:e8:ac:73:d5:c1:e4: 16:ab:82:2c:d7:ee:d4:86:7c:39:cb:d2:bf:ab:eb:68:1a:0e: 65:74:55:2a:f1:7e:0d:e2:b8:e0:a3:06:e6:7d:ee:e5:b7:30: 96:f4:c6:94:a1:f5:32:d6:b6:6e:b3:a6:8d:8d:a7:54:fe:3f: db:ab:b8:c7:0b:12:b5:cf:5d:76:ab:a3:36:4e:ea:6e:71:33: ce:dc:f2:64:4a:44:77:13:c4:20:6a:44:13:dc:86:b8:6c:e4: 29:64:81:3a:d2:9e:8a:bf:96:5e:fe:77:39:c8:bf:b2:ac:b5: 67:2c:50:58:be:30:04:e8:6e:c3:a6:c1:e3:65:61:64:80:05: 79:59:f9:fd:7b:9d:80:b3:3c:52:9d:47:bd:c0:c0:63:43:c5: 8c:28:0b:fb:4f:9a:61:3c:41:98:af:4d:ec:93:30:91:c3:3e: 1f:e2:74:d9:3e:41:61:2c:18:cb:36:24:92:85:d9:8d:0e:9e: 70:d0:ad:66:5f:db:41:6f:c2:d7:7f:59:23:ca:6a:6b:7f:db: a3:01:b7:a5:10:03:47:a2:04:2f:17:fe:ab:3c:ed:10:8a:3d: 1b:57:4d:39 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAVYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjQ3M0YxMTAvBgNVBAUTKDM1QzZEODQ4MzE2QzIxRDk5M0NGNkU0QzA2RDYwMURD MDVFRkM0RTEwHhcNMjUwNTEzMDMyMTM5WhcNMjUwNTIwMDMyMTM5WjAYMRYwFAYD VQQDEw02ODIyYmFjMy01OWQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApduY4CuyderVCYkwWRF+JVUQ9MmOKI718NoMBDsT75ePAcyuE5nIy9dgo8im 6+UfrErl/TthCagooeZVV0ddNczL4zMPM1a6jhN6CnJ3LGqPWp+g9QqAZtNWuq6E hEp63XSPuXt//w/leBRgCv0tgf34nJy0QPtlABDeCpFf/DnL0OHkkRkQ272RIlAl jr35EeBtPuM1UQ3yFHLq+YrfqVknbkGpMu5mTzk0+WTp/KCEu8XZEVe5G9lyUBFa GLGzJSii/U28AHfSOW4DsVfuMm7cAQNUPqJKjQl/lMBG7ukyJolbSt1hT1gY+k7B ttJyil3T/XYhMCeZqsc6SB587QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPReyPet FXg3MqmHIAAgAbplu2KPMB8GA1UdIwQYMBaAFDXG2EgxbCHZk89uTAbWAdwF78Th MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNDczRi8xRDE3RURCNDJC OTAxMUVFOEI1REU0NzBDNEY5QUUwMi9OY2JZU0RGc0lkbVR6MjVNQnRZQjNBWHZ4 T0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05jYllTREZzSWRtVHoyNU1CdFlCM0FYdnhPRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NDczRi8xRDE3RURCNDJCOTAxMUVFOEI1REU0NzBDNEY5QUUwMi9OY2JZU0RGc0lk bVR6MjVNQnRZQjNBWHZ4T0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQASjZPexSCiGB0F0D3tPgc7qiA65OLNqsF2UUoymFLorHPVweQWq4Is 1+7Uhnw5y9K/q+toGg5ldFUq8X4N4rjgowbmfe7ltzCW9MaUofUy1rZus6aNjadU /j/bq7jHCxK1z112q6M2TupucTPO3PJkSkR3E8QgakQT3Ia4bOQpZIE60p6Kv5Ze /nc5yL+yrLVnLFBYvjAE6G7DpsHjZWFkgAV5Wfn9e52AszxSnUe9wMBjQ8WMKAv7 T5phPEGYr03skzCRwz4f4nTZPkFhLBjLNiSShdmNDp5w0K1mX9tBb8LXf1kjympr f9ujAbelEANHogQvF/6rPO0Qij0bV005 -----END CERTIFICATE-----Generated at Wed May 14 12:37:17 2025 by rpki-client