$ rpki-client -vvf rpki.apnic.net/member_repository/A916378F/A5A9C4A8127111EB88D4BD80C4F9AE02/NYjxu1y2mbA0gR0Xknm_W5u8Hls.mft File: NYjxu1y2mbA0gR0Xknm_W5u8Hls.mft (raw, json) Hash identifier: sfLSIgqUIpJJUlDh/UHFLrwsye5WFTx8YWBOrlxpktg= Subject key identifier: D0:1A:D3:EE:20:23:AD:39:01:34:23:B5:BD:36:7D:16:25:49:40:35 Authority key identifier: 35:88:F1:BB:5C:B6:99:B0:34:81:1D:17:92:79:BF:5B:9B:BC:1E:5B Certificate issuer: /CN=A916378F/serialNumber=3588F1BB5CB699B034811D179279BF5B9BBC1E5B Certificate serial: 078B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NYjxu1y2mbA0gR0Xknm_W5u8Hls.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916378F/A5A9C4A8127111EB88D4BD80C4F9AE02/NYjxu1y2mbA0gR0Xknm_W5u8Hls.mft Manifest number: 0773 Signing time: Wed 02 Apr 2025 21:29:48 +0000 Manifest this update: Wed 02 Apr 2025 21:29:48 +0000 Manifest next update: Wed 09 Apr 2025 21:29:48 +0000 Files and hashes: 1: NYjxu1y2mbA0gR0Xknm_W5u8Hls.crl (hash: b4oiOJb1veIdxFovLXjjmTAJjlHqs1+r+NzEuo9vZjQ=) 2: 579AC748232011EB99F53580C4F9AE02.roa (hash: YqjBxojwPaCwMm/XINEnANNU5YkC9/n1OyLFodaayD0=) 3: 82F92248127411EBAA54D786C4F9AE02.roa (hash: M4MOSHD8C3zUn5WtSLqHZosv2F6Rib+YwJz1DiCIB90=) 4: 4D47DE5A127E11EB91021F3AC4F9AE02.roa (hash: 0sTO565z2noH8B1LWmmqLTh0cgNZKxMSa14Hsw0ys7s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916378F/A5A9C4A8127111EB88D4BD80C4F9AE02/NYjxu1y2mbA0gR0Xknm_W5u8Hls.crl rsync://rpki.apnic.net/member_repository/A916378F/A5A9C4A8127111EB88D4BD80C4F9AE02/NYjxu1y2mbA0gR0Xknm_W5u8Hls.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NYjxu1y2mbA0gR0Xknm_W5u8Hls.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Apr 2025 21:29:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1931 (0x78b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916378F Validity Not Before: Apr 2 21:29:48 2025 GMT Not After : Apr 9 21:29:48 2025 GMT Subject: CN=67edac4c-3968 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:f1:e0:a8:90:59:0f:7b:86:89:71:5c:21:b5: 8b:f8:b0:29:51:c8:a0:08:af:ec:be:5f:36:3a:03: a2:67:39:18:9c:dd:47:8c:ab:2c:2e:f9:49:f6:91: 61:06:b4:4c:64:c7:5f:ce:3c:65:2e:cf:5b:3b:52: 05:ca:ff:fd:08:91:a2:1a:8b:e8:47:54:9c:32:ab: 9c:ab:60:9a:39:55:c2:ab:f1:ae:30:53:45:5c:89: 9f:f6:98:3a:9b:9e:de:33:c3:4b:9e:de:f9:93:cd: 1e:60:1a:fe:24:1d:62:f2:c4:02:e9:42:0d:8d:51: da:f8:88:ac:58:35:73:07:19:43:99:b3:be:a0:82: c8:fe:16:c7:6f:e6:6d:8b:79:9b:a5:91:57:8d:37: 2b:ae:a0:c6:f9:61:38:81:61:80:f7:44:f4:13:51: ce:14:2f:3d:fa:f2:90:20:77:14:1f:44:0b:e5:c5: d3:d8:87:ad:8f:ac:ac:c0:1f:33:9e:e2:e8:53:22: f5:1a:65:bb:1c:fc:ee:24:b1:29:97:5b:01:d2:a8: 40:94:e2:ca:9f:06:e8:c3:db:59:9f:b9:c0:ef:67: f5:a6:f6:3c:ac:72:e4:3d:b1:09:ac:f4:cd:d6:05: e0:ae:e0:71:eb:15:5a:92:ae:e4:af:90:95:7b:92: b8:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:1A:D3:EE:20:23:AD:39:01:34:23:B5:BD:36:7D:16:25:49:40:35 X509v3 Authority Key Identifier: keyid:35:88:F1:BB:5C:B6:99:B0:34:81:1D:17:92:79:BF:5B:9B:BC:1E:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916378F/A5A9C4A8127111EB88D4BD80C4F9AE02/NYjxu1y2mbA0gR0Xknm_W5u8Hls.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NYjxu1y2mbA0gR0Xknm_W5u8Hls.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916378F/A5A9C4A8127111EB88D4BD80C4F9AE02/NYjxu1y2mbA0gR0Xknm_W5u8Hls.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 45:ca:5b:f6:da:ce:cc:be:9e:78:0d:05:08:a9:01:2d:21:02: 09:ad:80:ea:44:3b:45:22:66:69:0a:4c:ce:c3:91:a2:f2:8b: 21:16:af:92:72:37:9a:db:4e:eb:d7:72:92:ca:db:43:4e:27: 0c:27:fb:4e:d3:93:4d:19:5a:80:6e:58:8e:10:88:78:03:4a: 65:81:d9:f6:53:5a:b2:8f:cc:98:cf:b2:74:22:2f:07:ea:df: e8:26:0f:04:5d:64:2f:0c:31:12:7b:a9:c2:70:57:0b:f3:d0: 76:e2:f9:63:c0:4f:63:87:d3:87:6f:1f:d1:6f:8e:06:04:f1: 94:a0:58:ff:3b:69:a4:58:1b:90:70:96:91:c0:16:3d:f1:64: 7c:14:3d:6b:f3:5b:a4:c1:12:98:28:94:93:4a:09:d0:e6:af: 9d:75:78:93:c2:22:22:ac:bf:6d:fe:b8:a7:54:3f:a1:1a:c6: fa:f7:d1:d6:38:9b:1c:73:bf:97:2f:1c:4a:2c:ac:ed:83:42: 9c:df:94:39:03:16:93:58:8b:af:9c:10:cd:1b:94:a4:a9:ae: 13:3a:ac:eb:d4:a2:1c:3e:e6:cb:13:6b:7d:b3:ae:63:e1:a2: 7d:ee:60:43:11:12:16:12:ad:d4:41:05:a6:ab:7d:6a:56:f8: 8f:84:e0:af -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB4swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjM3OEYxMTAvBgNVBAUTKDM1ODhGMUJCNUNCNjk5QjAzNDgxMUQxNzkyNzlCRjVC OUJCQzFFNUIwHhcNMjUwNDAyMjEyOTQ4WhcNMjUwNDA5MjEyOTQ4WjAYMRYwFAYD VQQDEw02N2VkYWM0Yy0zOTY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApvHgqJBZD3uGiXFcIbWL+LApUcigCK/svl82OgOiZzkYnN1HjKssLvlJ9pFh BrRMZMdfzjxlLs9bO1IFyv/9CJGiGovoR1ScMqucq2CaOVXCq/GuMFNFXImf9pg6 m57eM8NLnt75k80eYBr+JB1i8sQC6UINjVHa+IisWDVzBxlDmbO+oILI/hbHb+Zt i3mbpZFXjTcrrqDG+WE4gWGA90T0E1HOFC89+vKQIHcUH0QL5cXT2Ietj6yswB8z nuLoUyL1GmW7HPzuJLEpl1sB0qhAlOLKnwbow9tZn7nA72f1pvY8rHLkPbEJrPTN 1gXgruBx6xVakq7kr5CVe5K42wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNAa0+4g I605ATQjtb02fRYlSUA1MB8GA1UdIwQYMBaAFDWI8btctpmwNIEdF5J5v1ubvB5b MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2Mzc4Ri9BNUE5QzRBODEy NzExMUVCODhENEJEODBDNEY5QUUwMi9OWWp4dTF5Mm1iQTBnUjBYa25tX1c1dThI bHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05Zanh1MXkybWJBMGdSMFhrbm1fVzV1OEhscy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 Mzc4Ri9BNUE5QzRBODEyNzExMUVCODhENEJEODBDNEY5QUUwMi9OWWp4dTF5Mm1i QTBnUjBYa25tX1c1dThIbHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBFylv22s7Mvp54DQUIqQEtIQIJrYDqRDtFImZpCkzOw5Gi8oshFq+S cjea207r13KSyttDTicMJ/tO05NNGVqAbliOEIh4A0plgdn2U1qyj8yYz7J0Ii8H 6t/oJg8EXWQvDDESe6nCcFcL89B24vljwE9jh9OHbx/Rb44GBPGUoFj/O2mkWBuQ cJaRwBY98WR8FD1r81ukwRKYKJSTSgnQ5q+ddXiTwiIirL9t/rinVD+hGsb699HW OJscc7+XLxxKLKztg0Kc35Q5AxaTWIuvnBDNG5Skqa4TOqzr1KIcPubLE2t9s65j 4aJ97mBDERIWEq3UQQWmq31qVviPhOCv -----END CERTIFICATE-----Generated at Fri Apr 4 22:19:47 2025 by rpki-client