$ rpki-client -vvf rpki.apnic.net/member_repository/A91BBBA5/E6484ACE9B2D11E8B465D80FC4F9AE02/NZYOHhaeA_Rvr5H04_8TUUamMTo.mft File: NZYOHhaeA_Rvr5H04_8TUUamMTo.mft (raw, json) Hash identifier: dznU+BDOCR9rurwH6ZK5nH4Z63XJ3S0piQZbY6Y7O00= Subject key identifier: 08:43:FE:D3:AA:88:FE:A3:1C:59:6C:F1:83:45:2C:DB:D4:7E:33:61 Authority key identifier: 35:96:0E:1E:16:9E:03:F4:6F:AF:91:F4:E3:FF:13:51:46:A6:31:3A Certificate issuer: /CN=A91BBBA5/serialNumber=35960E1E169E03F46FAF91F4E3FF135146A6313A Certificate serial: 1390 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NZYOHhaeA_Rvr5H04_8TUUamMTo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BBBA5/E6484ACE9B2D11E8B465D80FC4F9AE02/NZYOHhaeA_Rvr5H04_8TUUamMTo.mft Manifest number: 1389 Signing time: Fri 18 Jul 2025 17:07:25 +0000 Manifest this update: Fri 18 Jul 2025 17:07:25 +0000 Manifest next update: Fri 25 Jul 2025 17:07:25 +0000 Files and hashes: 1: NZYOHhaeA_Rvr5H04_8TUUamMTo.crl (hash: qnG6S/0e53Icj4Py3kxFszRPFutsEkShWy/yYngw1Vk=) 2: 21333DA69B2E11E8908CC50FC4F9AE02.roa (hash: +1SNSIFs+P7lOAKW1zIJPA5+xtDNMIC4L/Fb0Zo2lHo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BBBA5/E6484ACE9B2D11E8B465D80FC4F9AE02/NZYOHhaeA_Rvr5H04_8TUUamMTo.crl rsync://rpki.apnic.net/member_repository/A91BBBA5/E6484ACE9B2D11E8B465D80FC4F9AE02/NZYOHhaeA_Rvr5H04_8TUUamMTo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NZYOHhaeA_Rvr5H04_8TUUamMTo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 17:07:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5008 (0x1390) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BBBA5, serialNumber=35960E1E169E03F46FAF91F4E3FF135146A6313A Validity Not Before: Jul 18 17:07:25 2025 GMT Not After : Jul 25 17:07:25 2025 GMT Subject: CN=687a7f4d-61a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:d1:b6:09:b2:f8:4a:30:3d:f4:bd:50:68:69: 17:db:27:89:17:3f:c1:f1:5a:3c:dc:06:39:86:5b: ad:fa:ee:af:13:6f:f4:09:6a:79:0f:65:f9:64:c7: a6:d9:c1:89:60:13:a6:af:c3:11:e3:4b:37:38:ce: 60:5e:7b:4e:84:8d:35:86:70:fc:e0:75:0d:62:f3: 92:a7:c7:2a:7f:d1:45:b1:79:dd:10:8d:e2:4e:26: 00:72:0d:7f:0e:e0:74:c3:d3:66:14:c5:48:e4:62: c9:47:f5:5c:40:08:0a:ba:6f:13:4a:6d:82:88:38: f2:26:71:bf:a8:74:71:6f:ba:79:7a:c7:10:26:a9: 9f:15:a5:74:9f:29:b7:0c:f5:9b:5b:c2:fc:bb:e7: f7:2a:4b:de:ce:ca:39:fe:12:36:2a:7a:42:38:7b: 6e:ae:22:0a:8d:0d:c7:7d:f3:04:ee:16:7c:f7:e5: 81:85:55:17:d0:e1:a5:56:e3:12:c8:76:a4:e5:ab: 80:85:70:9e:9a:3d:b3:1f:7e:78:3a:97:28:5a:1c: 23:14:e8:b7:96:9c:a8:a7:98:f8:4c:8c:55:6f:85: 79:70:d3:be:95:1b:44:9f:76:20:7e:e5:0a:4a:c2: 8d:f8:96:97:dc:32:20:57:dd:b4:69:65:3f:57:0e: 6e:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:43:FE:D3:AA:88:FE:A3:1C:59:6C:F1:83:45:2C:DB:D4:7E:33:61 X509v3 Authority Key Identifier: keyid:35:96:0E:1E:16:9E:03:F4:6F:AF:91:F4:E3:FF:13:51:46:A6:31:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BBBA5/E6484ACE9B2D11E8B465D80FC4F9AE02/NZYOHhaeA_Rvr5H04_8TUUamMTo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NZYOHhaeA_Rvr5H04_8TUUamMTo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BBBA5/E6484ACE9B2D11E8B465D80FC4F9AE02/NZYOHhaeA_Rvr5H04_8TUUamMTo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7e:b8:75:29:55:ff:37:ca:42:32:dd:6a:49:b4:66:94:17:20: 28:cc:59:0b:90:aa:9c:d3:ce:a0:be:c0:d0:93:db:db:19:5d: 6b:ca:de:86:13:85:ec:e2:26:06:d7:1d:0c:59:34:64:49:10: 0c:b9:d6:8e:16:42:1b:5c:ec:99:35:4c:45:09:02:9a:ad:1e: 92:0e:9c:1a:40:cf:9c:cc:5a:3e:fc:c1:e5:28:d6:26:15:84: 77:92:f9:73:fb:2c:50:6b:23:df:b5:4f:f3:ee:df:1d:66:ac: 60:b3:24:e1:f6:cb:86:15:e1:65:8b:0d:e8:a3:1e:05:d4:64: 16:98:b7:c2:27:b0:a9:c1:53:09:2a:72:dd:08:d6:b3:1c:5c: fd:0a:3a:14:a8:23:3f:5d:26:8d:92:72:40:de:3e:0e:8b:54: 09:9b:e1:e2:89:92:79:c6:fb:12:1a:4e:eb:71:de:db:d5:c8: e8:4e:65:33:9d:0e:e3:50:04:48:d8:1f:4c:b2:c0:dc:72:da: b8:1d:27:96:fa:d2:3b:63:05:ae:51:27:02:b6:37:57:7e:79: 76:3d:37:28:cb:e4:e7:bc:3c:fa:0e:72:6f:94:3a:71:d6:dd: 1c:6e:6c:35:96:d4:0f:84:4f:b5:7f:2a:01:ed:1c:55:58:5d: 2c:09:b4:49 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICE5AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkJCQTUxMTAvBgNVBAUTKDM1OTYwRTFFMTY5RTAzRjQ2RkFGOTFGNEUzRkYxMzUx NDZBNjMxM0EwHhcNMjUwNzE4MTcwNzI1WhcNMjUwNzI1MTcwNzI1WjAYMRYwFAYD VQQDEw02ODdhN2Y0ZC02MWE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwNG2CbL4SjA99L1QaGkX2yeJFz/B8Vo83AY5hlut+u6vE2/0CWp5D2X5ZMem 2cGJYBOmr8MR40s3OM5gXntOhI01hnD84HUNYvOSp8cqf9FFsXndEI3iTiYAcg1/ DuB0w9NmFMVI5GLJR/VcQAgKum8TSm2CiDjyJnG/qHRxb7p5escQJqmfFaV0nym3 DPWbW8L8u+f3Kkvezso5/hI2KnpCOHturiIKjQ3HffME7hZ89+WBhVUX0OGlVuMS yHak5auAhXCemj2zH354OpcoWhwjFOi3lpyop5j4TIxVb4V5cNO+lRtEn3YgfuUK SsKN+JaX3DIgV920aWU/Vw5umwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAhD/tOq iP6jHFls8YNFLNvUfjNhMB8GA1UdIwQYMBaAFDWWDh4WngP0b6+R9OP/E1FGpjE6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQkJBNS9FNjQ4NEFDRTlC MkQxMUU4QjQ2NUQ4MEZDNEY5QUUwMi9OWllPSGhhZUFfUnZyNUgwNF84VFVVYW1N VG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05aWU9IaGFlQV9SdnI1SDA0XzhUVVVhbU1Uby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QkJBNS9FNjQ4NEFDRTlCMkQxMUU4QjQ2NUQ4MEZDNEY5QUUwMi9OWllPSGhhZUFf UnZyNUgwNF84VFVVYW1NVG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB+uHUpVf83ykIy3WpJtGaUFyAozFkLkKqc086gvsDQk9vbGV1ryt6G E4Xs4iYG1x0MWTRkSRAMudaOFkIbXOyZNUxFCQKarR6SDpwaQM+czFo+/MHlKNYm FYR3kvlz+yxQayPftU/z7t8dZqxgsyTh9suGFeFliw3oox4F1GQWmLfCJ7CpwVMJ KnLdCNazHFz9CjoUqCM/XSaNknJA3j4Oi1QJm+HiiZJ5xvsSGk7rcd7b1cjoTmUz nQ7jUARI2B9MssDcctq4HSeW+tI7YwWuUScCtjdXfnl2PTcoy+TnvDz6DnJvlDpx 1t0cbmw1ltQPhE+1fyoB7RxVWF0sCbRJ -----END CERTIFICATE-----Generated at Sun Jul 20 10:03:00 2025 by rpki-client