$ rpki-client -vvf rpki.apnic.net/member_repository/A9131579/2D2F437414E611EA929BBC45C4F9AE02/nwwVII1-5i6Ay5dc_kzsnL8dJ1Y.mft File: nwwVII1-5i6Ay5dc_kzsnL8dJ1Y.mft (raw, json) Hash identifier: aEERvSDzaEyoq58MfJWRMSlSHRL3mUmebvoKpS9u/ig= Subject key identifier: FE:84:7B:5C:50:C1:79:E3:75:6B:8D:39:6E:44:C8:00:CA:72:38:15 Authority key identifier: 9F:0C:15:20:8D:7E:E6:2E:80:CB:97:5C:FE:4C:EC:9C:BF:1D:27:56 Certificate issuer: /CN=A9131579/serialNumber=9F0C15208D7EE62E80CB975CFE4CEC9CBF1D2756 Certificate serial: 0BE9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nwwVII1-5i6Ay5dc_kzsnL8dJ1Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9131579/2D2F437414E611EA929BBC45C4F9AE02/nwwVII1-5i6Ay5dc_kzsnL8dJ1Y.mft Manifest number: 0BDB Signing time: Fri 04 Apr 2025 18:55:13 +0000 Manifest this update: Fri 04 Apr 2025 18:55:13 +0000 Manifest next update: Fri 11 Apr 2025 18:55:13 +0000 Files and hashes: 1: nwwVII1-5i6Ay5dc_kzsnL8dJ1Y.crl (hash: 7VYGxGL+wALtBiu1yVD5eCudzlhsDEYRyjqsNSiI2yc=) 2: 7E565BCC02EB11F084618D33C4F9AE02.roa (hash: AZHVgAf1kSXl8BI/BQ5H295EutsYIoNTNb8l2dBtz+M=) 3: 702B683202E911F097290F2EC4F9AE02.roa (hash: K+XoaDEFz5EZQGsqk/BrrsJpJvi+KU83oJ9JVUv/YSY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9131579/2D2F437414E611EA929BBC45C4F9AE02/nwwVII1-5i6Ay5dc_kzsnL8dJ1Y.crl rsync://rpki.apnic.net/member_repository/A9131579/2D2F437414E611EA929BBC45C4F9AE02/nwwVII1-5i6Ay5dc_kzsnL8dJ1Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nwwVII1-5i6Ay5dc_kzsnL8dJ1Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 18:55:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3049 (0xbe9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9131579 Validity Not Before: Apr 4 18:55:13 2025 GMT Not After : Apr 11 18:55:13 2025 GMT Subject: CN=67f02b11-055d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:c2:49:3c:7d:e5:dd:76:6f:e7:5f:e5:b4:90: fc:f3:51:b7:db:38:f9:dc:8e:d8:1c:75:ab:b4:5d: 44:5d:a3:fa:79:b9:f4:34:b9:7e:62:9c:e4:b5:69: ae:e2:52:55:a5:e8:13:bc:64:63:9c:25:e7:a2:c2: ee:58:f4:a0:55:a1:02:fd:c6:ea:31:e5:35:31:a6: 16:26:9b:9c:94:de:e3:38:3b:b5:83:73:47:76:f3: 87:f8:da:92:7a:15:92:d1:d7:c8:45:71:cf:a0:65: 7c:fb:5f:02:9e:45:4c:27:67:61:f6:15:77:2b:52: 2e:2f:04:75:de:aa:05:54:a0:a1:c2:c9:95:b4:55: e3:41:31:e3:74:fd:a1:8c:93:03:a8:62:fe:3b:31: 68:c2:20:37:15:c6:36:ac:a2:ef:c8:2a:08:9c:a0: e0:a6:b0:48:49:0d:02:16:a8:76:2f:65:68:70:c4: 09:8e:63:a6:9b:2e:54:66:b8:da:2a:c1:70:01:77: 92:bb:7d:05:aa:80:c7:37:08:39:24:6e:6d:3b:ac: 04:ad:1d:86:f1:95:60:1a:b3:17:ae:36:3a:2e:00: 87:68:a7:e0:3a:e6:49:7f:d9:d0:69:1e:a1:06:77: 31:d2:ae:6c:7d:b0:22:ae:29:e5:67:d8:dc:0c:b9: 15:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:84:7B:5C:50:C1:79:E3:75:6B:8D:39:6E:44:C8:00:CA:72:38:15 X509v3 Authority Key Identifier: keyid:9F:0C:15:20:8D:7E:E6:2E:80:CB:97:5C:FE:4C:EC:9C:BF:1D:27:56 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9131579/2D2F437414E611EA929BBC45C4F9AE02/nwwVII1-5i6Ay5dc_kzsnL8dJ1Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nwwVII1-5i6Ay5dc_kzsnL8dJ1Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9131579/2D2F437414E611EA929BBC45C4F9AE02/nwwVII1-5i6Ay5dc_kzsnL8dJ1Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 76:d3:9b:10:99:31:d4:54:5d:cf:72:35:b7:7b:9f:47:69:e0: 2d:8b:a7:e6:1c:61:30:ae:00:29:18:e8:73:13:60:c5:d5:dd: 87:c3:0a:13:08:86:17:ba:7a:72:8b:84:9a:6c:1d:a5:11:db: 3e:62:20:4a:45:5d:74:82:cc:8a:7d:54:4d:85:3f:ab:c6:bf: cb:29:ce:5e:28:8d:47:cb:ce:f1:a6:35:30:c9:19:aa:80:97: eb:09:d2:51:3a:89:b7:03:40:7f:ab:87:43:4e:6f:c2:91:f6: 14:4c:8d:54:ee:c5:e6:4a:22:42:12:0c:5f:ff:71:f5:6f:0a: c4:e4:3d:39:be:e3:d3:f4:2c:33:a3:4a:fe:18:3b:53:1b:85: 3b:c2:16:a4:a9:0a:ce:58:48:43:f7:ed:59:8d:22:91:01:d0: 6b:a6:a1:62:e5:39:e5:1a:cd:bd:42:a6:da:30:8d:20:cc:e7: da:14:bb:03:91:9d:8d:f3:5b:d3:d1:8b:f1:7f:3f:bd:67:db: e8:25:50:35:27:e5:43:92:58:31:07:c6:4a:34:76:c6:2f:e4: 62:83:66:c3:c4:68:75:7e:82:18:d8:37:fa:0e:75:0b:4f:b4: 07:b3:4e:40:4f:52:66:03:b2:4d:00:37:73:ea:2c:5e:71:07: 73:c6:7a:5b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC+kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzE1NzkxMTAvBgNVBAUTKDlGMEMxNTIwOEQ3RUU2MkU4MENCOTc1Q0ZFNENFQzlD QkYxRDI3NTYwHhcNMjUwNDA0MTg1NTEzWhcNMjUwNDExMTg1NTEzWjAYMRYwFAYD VQQDEw02N2YwMmIxMS0wNTVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmcJJPH3l3XZv51/ltJD881G32zj53I7YHHWrtF1EXaP6ebn0NLl+YpzktWmu 4lJVpegTvGRjnCXnosLuWPSgVaEC/cbqMeU1MaYWJpuclN7jODu1g3NHdvOH+NqS ehWS0dfIRXHPoGV8+18CnkVMJ2dh9hV3K1IuLwR13qoFVKChwsmVtFXjQTHjdP2h jJMDqGL+OzFowiA3FcY2rKLvyCoInKDgprBISQ0CFqh2L2VocMQJjmOmmy5UZrja KsFwAXeSu30FqoDHNwg5JG5tO6wErR2G8ZVgGrMXrjY6LgCHaKfgOuZJf9nQaR6h Bncx0q5sfbAirinlZ9jcDLkVQwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP6Ee1xQ wXnjdWuNOW5EyADKcjgVMB8GA1UdIwQYMBaAFJ8MFSCNfuYugMuXXP5M7Jy/HSdW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMTU3OS8yRDJGNDM3NDE0 RTYxMUVBOTI5QkJDNDVDNEY5QUUwMi9ud3dWSUkxLTVpNkF5NWRjX2t6c25MOGRK MVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL253d1ZJSTEtNWk2QXk1ZGNfa3pzbkw4ZEoxWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MTU3OS8yRDJGNDM3NDE0RTYxMUVBOTI5QkJDNDVDNEY5QUUwMi9ud3dWSUkxLTVp NkF5NWRjX2t6c25MOGRKMVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB205sQmTHUVF3PcjW3e59HaeAti6fmHGEwrgApGOhzE2DF1d2HwwoT CIYXunpyi4SabB2lEds+YiBKRV10gsyKfVRNhT+rxr/LKc5eKI1Hy87xpjUwyRmq gJfrCdJROom3A0B/q4dDTm/CkfYUTI1U7sXmSiJCEgxf/3H1bwrE5D05vuPT9Cwz o0r+GDtTG4U7whakqQrOWEhD9+1ZjSKRAdBrpqFi5TnlGs29QqbaMI0gzOfaFLsD kZ2N81vT0Yvxfz+9Z9voJVA1J+VDklgxB8ZKNHbGL+Rig2bDxGh1foIY2Df6DnUL T7QHs05AT1JmA7JNADdz6ixecQdzxnpb -----END CERTIFICATE-----Generated at Fri Apr 4 22:42:14 2025 by rpki-client