$ rpki-client -vvf rpki.apnic.net/member_repository/A9134285/6F15B572928311EB80970420C4F9AE02/NxkwlLzz42Ui-tvxlU7l_51gHg4.mft File: NxkwlLzz42Ui-tvxlU7l_51gHg4.mft (raw, json) Hash identifier: SkVeMPR/u6SqAwsQIcYcf5C8Jo6vQ+RMyYETY+fvgWk= Subject key identifier: 97:D8:BE:1E:DC:27:10:FC:57:7E:43:D5:4A:1B:CF:88:0E:AF:FF:4C Authority key identifier: 37:19:30:94:BC:F3:E3:65:22:FA:DB:F1:95:4E:E5:FF:9D:60:1E:0E Certificate issuer: /CN=A9134285/serialNumber=37193094BCF3E36522FADBF1954EE5FF9D601E0E Certificate serial: 0621 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NxkwlLzz42Ui-tvxlU7l_51gHg4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9134285/6F15B572928311EB80970420C4F9AE02/NxkwlLzz42Ui-tvxlU7l_51gHg4.mft Manifest number: 061C Signing time: Wed 02 Apr 2025 22:45:46 +0000 Manifest this update: Wed 02 Apr 2025 22:45:46 +0000 Manifest next update: Wed 09 Apr 2025 22:45:46 +0000 Files and hashes: 1: NxkwlLzz42Ui-tvxlU7l_51gHg4.crl (hash: tb1jZEfDg9vECoEVuupwHTzYYqSMaTxESBtCovTcwfA=) 2: 3A00D342928511EB8B3AAC22C4F9AE02.roa (hash: XhabguNmfoaoaLydzPCMcINuMUCMOCq7nXAwub1uejA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9134285/6F15B572928311EB80970420C4F9AE02/NxkwlLzz42Ui-tvxlU7l_51gHg4.crl rsync://rpki.apnic.net/member_repository/A9134285/6F15B572928311EB80970420C4F9AE02/NxkwlLzz42Ui-tvxlU7l_51gHg4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NxkwlLzz42Ui-tvxlU7l_51gHg4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Apr 2025 22:45:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1569 (0x621) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9134285 Validity Not Before: Apr 2 22:45:46 2025 GMT Not After : Apr 9 22:45:46 2025 GMT Subject: CN=67edbe1a-afda Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:41:75:a1:24:7c:4f:5d:63:15:69:f7:4c:1c: 74:14:57:5f:0a:ed:f6:dc:a0:66:13:f3:9f:33:e2: 6a:36:5d:20:65:f5:6f:72:8f:41:93:9a:e9:44:93: 45:4d:f3:d7:63:09:1c:96:1b:ce:d9:fa:e1:d6:85: 79:48:ac:db:ef:29:a8:37:8f:96:29:c8:6e:3b:6a: 94:83:01:67:9e:f7:20:bf:20:69:a2:f3:eb:56:df: 19:08:6a:66:2e:53:a3:d1:07:60:eb:38:3f:31:fd: ac:68:0d:e7:d7:4e:81:af:a2:03:00:11:bc:c4:3d: d7:e5:aa:97:bb:48:08:03:4f:9e:e0:c0:12:83:33: f7:d8:f4:78:8b:be:a5:96:60:fa:55:c0:82:96:75: 34:c2:c4:a6:97:e7:23:6a:bc:05:38:60:30:d5:51: 8c:8f:3f:ad:83:da:f7:1f:fa:0a:1e:6f:0c:1d:63: 69:76:ac:56:2d:ee:8f:e3:48:9f:b1:ce:0d:a9:38: 35:2d:1a:b3:b3:7e:06:ee:c8:e2:9e:9f:06:8c:06: ab:cd:af:69:4f:b9:3d:61:63:2d:67:03:25:fa:12: 31:38:f7:58:4e:27:f1:6f:d9:1b:98:fd:48:fb:43: d5:8e:44:91:d4:96:c5:9d:51:3f:a4:03:ca:17:0d: 27:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:D8:BE:1E:DC:27:10:FC:57:7E:43:D5:4A:1B:CF:88:0E:AF:FF:4C X509v3 Authority Key Identifier: keyid:37:19:30:94:BC:F3:E3:65:22:FA:DB:F1:95:4E:E5:FF:9D:60:1E:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9134285/6F15B572928311EB80970420C4F9AE02/NxkwlLzz42Ui-tvxlU7l_51gHg4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NxkwlLzz42Ui-tvxlU7l_51gHg4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9134285/6F15B572928311EB80970420C4F9AE02/NxkwlLzz42Ui-tvxlU7l_51gHg4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 70:d9:88:ca:b5:e6:20:27:ad:91:c5:e4:ac:3f:26:21:40:3b: a4:eb:f2:b8:5b:a5:35:ac:72:98:6b:dd:d6:9c:83:07:5c:30: 88:85:c7:4e:0d:73:2b:4d:f0:99:b7:84:a7:98:75:4d:9b:bf: 0f:3c:70:dc:b3:f4:64:32:ac:6f:04:84:11:da:f9:a3:f5:a7: 08:6f:66:b2:7c:9f:f3:e8:1a:3e:1a:a2:13:ac:57:84:82:bb: 91:4b:58:02:96:ce:2e:57:74:16:1b:24:59:b7:99:c5:81:5e: c6:a3:a5:8d:2b:b8:af:27:da:1e:3b:50:a1:0f:69:dd:65:d8: 52:c7:0c:07:cb:5a:81:69:82:ad:39:39:06:c5:4b:58:aa:00: 45:c4:a1:d5:61:29:ab:e2:e1:48:e8:85:72:c9:18:5a:41:50: 76:a9:91:9e:5a:90:d7:ab:aa:b6:f9:6d:5b:c0:67:6f:7a:9f: 8a:68:fb:c6:d2:f6:42:19:31:78:65:e5:3a:49:ed:cb:6a:58: 74:c9:c5:71:7b:43:da:68:ae:6f:b6:62:4a:35:a7:e0:1e:b7: a2:3d:29:91:b2:67:6f:b7:10:84:42:a2:f5:d3:e0:43:fc:60: fe:c0:32:9e:51:60:9e:66:4a:41:af:af:67:7e:60:dd:df:2b: 9f:75:07:5e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBiEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzQyODUxMTAvBgNVBAUTKDM3MTkzMDk0QkNGM0UzNjUyMkZBREJGMTk1NEVFNUZG OUQ2MDFFMEUwHhcNMjUwNDAyMjI0NTQ2WhcNMjUwNDA5MjI0NTQ2WjAYMRYwFAYD VQQDEw02N2VkYmUxYS1hZmRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxEF1oSR8T11jFWn3TBx0FFdfCu323KBmE/OfM+JqNl0gZfVvco9Bk5rpRJNF TfPXYwkclhvO2frh1oV5SKzb7ymoN4+WKchuO2qUgwFnnvcgvyBpovPrVt8ZCGpm LlOj0Qdg6zg/Mf2saA3n106Br6IDABG8xD3X5aqXu0gIA0+e4MASgzP32PR4i76l lmD6VcCClnU0wsSml+cjarwFOGAw1VGMjz+tg9r3H/oKHm8MHWNpdqxWLe6P40if sc4NqTg1LRqzs34G7sjinp8GjAarza9pT7k9YWMtZwMl+hIxOPdYTifxb9kbmP1I +0PVjkSR1JbFnVE/pAPKFw0nrQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJfYvh7c JxD8V35D1Uobz4gOr/9MMB8GA1UdIwQYMBaAFDcZMJS88+NlIvrb8ZVO5f+dYB4O MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNDI4NS82RjE1QjU3Mjky ODMxMUVCODA5NzA0MjBDNEY5QUUwMi9OeGt3bEx6ejQyVWktdHZ4bFU3bF81MWdI ZzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL054a3dsTHp6NDJVaS10dnhsVTdsXzUxZ0hnNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NDI4NS82RjE1QjU3MjkyODMxMUVCODA5NzA0MjBDNEY5QUUwMi9OeGt3bEx6ejQy VWktdHZ4bFU3bF81MWdIZzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBw2YjKteYgJ62RxeSsPyYhQDuk6/K4W6U1rHKYa93WnIMHXDCIhcdO DXMrTfCZt4SnmHVNm78PPHDcs/RkMqxvBIQR2vmj9acIb2ayfJ/z6Bo+GqITrFeE gruRS1gCls4uV3QWGyRZt5nFgV7Go6WNK7ivJ9oeO1ChD2ndZdhSxwwHy1qBaYKt OTkGxUtYqgBFxKHVYSmr4uFI6IVyyRhaQVB2qZGeWpDXq6q2+W1bwGdvep+KaPvG 0vZCGTF4ZeU6Se3Lalh0ycVxe0PaaK5vtmJKNafgHreiPSmRsmdvtxCEQqL10+BD /GD+wDKeUWCeZkpBr69nfmDd3yufdQde -----END CERTIFICATE-----Generated at Fri Apr 4 18:37:27 2025 by rpki-client