$ rpki-client -vvf rpki.apnic.net/member_repository/A9157DAE/104A7E1EDFAD11ED95153D31C4F9AE02/NCaEGmQGa3hlW77KDAH9CfZXBTY.mft File: NCaEGmQGa3hlW77KDAH9CfZXBTY.mft (raw, json) Hash identifier: wSv+eJlMb2NPBXNZdDX66yzr4OpBCzeW1GeWNqUloXk= Subject key identifier: 82:D1:0C:DA:F6:AD:B7:94:E8:B2:A7:45:76:0C:E4:9D:C7:A1:82:DA Authority key identifier: 34:26:84:1A:64:06:6B:78:65:5B:BE:CA:0C:01:FD:09:F6:57:05:36 Certificate issuer: /CN=A9157DAE/serialNumber=3426841A64066B78655BBECA0C01FD09F6570536 Certificate serial: 0180 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/NCaEGmQGa3hlW77KDAH9CfZXBTY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9157DAE/104A7E1EDFAD11ED95153D31C4F9AE02/NCaEGmQGa3hlW77KDAH9CfZXBTY.mft Manifest number: 0180 Signing time: Mon 28 Apr 2025 17:20:43 +0000 Manifest this update: Mon 28 Apr 2025 17:20:43 +0000 Manifest next update: Mon 05 May 2025 17:20:43 +0000 Files and hashes: 1: NCaEGmQGa3hlW77KDAH9CfZXBTY.crl (hash: 3DS0NFgy6tNDTs5HKMPtWRQdi8Xru0zk20hAqoRKXt8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9157DAE/104A7E1EDFAD11ED95153D31C4F9AE02/NCaEGmQGa3hlW77KDAH9CfZXBTY.crl rsync://rpki.apnic.net/member_repository/A9157DAE/104A7E1EDFAD11ED95153D31C4F9AE02/NCaEGmQGa3hlW77KDAH9CfZXBTY.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/NCaEGmQGa3hlW77KDAH9CfZXBTY.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 May 2025 14:50:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 384 (0x180) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9157DAE, serialNumber=3426841A64066B78655BBECA0C01FD09F6570536 Validity Not Before: Apr 28 17:20:43 2025 GMT Not After : May 5 17:20:43 2025 GMT Subject: CN=680fb8eb-9e26 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:20:3e:e3:cd:21:18:c8:b5:3f:ba:3d:aa:eb: 83:0e:65:b1:71:72:03:85:3e:74:f2:68:52:3a:8d: 3d:86:eb:1d:cc:ca:5e:d3:30:f0:7d:25:21:6c:35: bb:f6:84:51:ab:d1:3b:9e:24:10:fd:0b:f8:2e:14: 0d:95:48:ba:19:0a:60:67:37:16:14:fc:09:bc:55: 29:08:d4:9d:b1:6c:6b:81:ba:b2:1c:76:54:3a:5b: f7:e2:79:2c:07:be:e2:16:05:84:ea:52:ba:fa:71: fa:4e:5b:1d:bf:4f:f3:67:77:61:d9:e8:e5:b8:dc: 7b:ff:de:80:9c:f8:78:70:37:0d:98:f3:64:5e:2f: b4:ae:c1:be:eb:ea:45:6d:19:c1:3e:3d:f6:8a:bf: 00:5f:8a:c5:8b:d6:98:6e:e6:6f:ad:a4:97:57:1d: e1:00:18:51:f5:5e:9b:c0:68:e9:2f:f9:f8:43:97: 71:9f:72:5b:15:88:84:00:0e:88:4b:1d:e4:58:29: 6a:f7:2c:e7:53:55:eb:ff:6c:ea:ec:e0:bd:d5:fa: c0:91:b8:4b:58:a2:7d:93:c7:05:23:ec:bf:25:e9: a5:e1:31:22:ae:0c:85:8a:01:cc:62:fd:5e:f3:31: 10:f1:69:ac:98:42:92:48:3f:da:4f:a1:12:80:06: fe:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:D1:0C:DA:F6:AD:B7:94:E8:B2:A7:45:76:0C:E4:9D:C7:A1:82:DA X509v3 Authority Key Identifier: keyid:34:26:84:1A:64:06:6B:78:65:5B:BE:CA:0C:01:FD:09:F6:57:05:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9157DAE/104A7E1EDFAD11ED95153D31C4F9AE02/NCaEGmQGa3hlW77KDAH9CfZXBTY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/NCaEGmQGa3hlW77KDAH9CfZXBTY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157DAE/104A7E1EDFAD11ED95153D31C4F9AE02/NCaEGmQGa3hlW77KDAH9CfZXBTY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 03:5a:7b:2f:11:94:38:8e:92:62:07:71:cd:de:c4:a4:3f:f9: e9:8e:e6:d0:e4:be:bc:4a:b2:1e:03:ad:a7:8e:b1:b7:7f:59: 1c:8e:6d:9b:58:77:ff:a1:d5:ae:94:44:45:43:6f:35:b1:ee: 84:51:0c:2f:5b:f4:82:2b:4c:a9:66:fe:f7:80:cc:aa:99:89: ea:51:de:47:2f:42:43:ca:05:d0:53:2d:a2:1d:c3:34:6e:4f: aa:4c:eb:14:66:36:cf:23:d8:3f:68:e3:25:f3:41:c2:13:38: 9d:79:3b:bf:d7:8b:5c:8a:c8:ef:b7:80:d0:f2:ef:e0:85:da: 66:99:80:fe:44:b6:b5:21:1e:2f:3f:4b:c3:55:0d:af:2a:42: bf:b4:55:1d:61:20:65:c7:e4:54:01:cb:ae:96:4d:db:e5:93: a8:0d:dd:be:c0:e1:15:db:61:70:b0:48:40:73:33:69:55:20: 05:a5:56:70:7f:40:ed:85:8d:60:48:46:55:a6:78:05:85:6e: af:b5:62:b3:35:cb:55:b5:a4:bb:8b:8b:17:cf:04:dc:de:1d: 9c:07:5a:27:c8:5b:65:dd:0e:7c:c9:f6:72:bb:ac:cc:2f:4c: c7:f9:fb:9a:10:ae:b7:51:d9:2d:d1:81:52:52:17:6b:fc:43: 14:38:45:03 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAYAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTdEQUUxMTAvBgNVBAUTKDM0MjY4NDFBNjQwNjZCNzg2NTVCQkVDQTBDMDFGRDA5 RjY1NzA1MzYwHhcNMjUwNDI4MTcyMDQzWhcNMjUwNTA1MTcyMDQzWjAYMRYwFAYD VQQDEw02ODBmYjhlYi05ZTI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuiA+480hGMi1P7o9quuDDmWxcXIDhT508mhSOo09husdzMpe0zDwfSUhbDW7 9oRRq9E7niQQ/Qv4LhQNlUi6GQpgZzcWFPwJvFUpCNSdsWxrgbqyHHZUOlv34nks B77iFgWE6lK6+nH6Tlsdv0/zZ3dh2ejluNx7/96AnPh4cDcNmPNkXi+0rsG+6+pF bRnBPj32ir8AX4rFi9aYbuZvraSXVx3hABhR9V6bwGjpL/n4Q5dxn3JbFYiEAA6I Sx3kWClq9yznU1Xr/2zq7OC91frAkbhLWKJ9k8cFI+y/Jeml4TEirgyFigHMYv1e 8zEQ8WmsmEKSSD/aT6ESgAb+ZwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFILRDNr2 rbeU6LKnRXYM5J3HoYLaMB8GA1UdIwQYMBaAFDQmhBpkBmt4ZVu+ygwB/Qn2VwU2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1N0RBRS8xMDRBN0UxRURG QUQxMUVEOTUxNTNEMzFDNEY5QUUwMi9OQ2FFR21RR2EzaGxXNzdLREFIOUNmWlhC VFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL05DYUVHbVFHYTNobFc3N0tEQUg5Q2ZaWEJUWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 N0RBRS8xMDRBN0UxRURGQUQxMUVEOTUxNTNEMzFDNEY5QUUwMi9OQ2FFR21RR2Ez aGxXNzdLREFIOUNmWlhCVFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQADWnsvEZQ4jpJiB3HN3sSkP/npjubQ5L68SrIeA62njrG3f1kcjm2b WHf/odWulERFQ281se6EUQwvW/SCK0ypZv73gMyqmYnqUd5HL0JDygXQUy2iHcM0 bk+qTOsUZjbPI9g/aOMl80HCEzideTu/14tcisjvt4DQ8u/ghdpmmYD+RLa1IR4v P0vDVQ2vKkK/tFUdYSBlx+RUAcuulk3b5ZOoDd2+wOEV22FwsEhAczNpVSAFpVZw f0DthY1gSEZVpngFhW6vtWKzNctVtaS7i4sXzwTc3h2cB1onyFtl3Q58yfZyu6zM L0zH+fuaEK63Udkt0YFSUhdr/EMUOEUD -----END CERTIFICATE-----Generated at Mon Apr 28 20:10:35 2025 by rpki-client on console.sobornost.net