$ rpki-client -vvf rpki.apnic.net/member_repository/A9121821/AB22EAC4D54911EE9497D880C4F9AE02/nryww05Pd_InjbFcWeHtrH5VdW4.mft File: nryww05Pd_InjbFcWeHtrH5VdW4.mft (raw, json) Hash identifier: 9s5COBaik+kRaqhqJSjV00JntiTybEBa1Z0O5qlH464= Subject key identifier: A5:94:DC:B8:BC:F4:8A:7C:90:44:DA:73:64:F5:12:3A:EC:AC:AA:89 Authority key identifier: 9E:BC:B0:C3:4E:4F:77:F2:27:8D:B1:5C:59:E1:ED:AC:7E:55:75:6E Certificate issuer: /CN=A9121821/serialNumber=9EBCB0C34E4F77F2278DB15C59E1EDAC7E55756E Certificate serial: F2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nryww05Pd_InjbFcWeHtrH5VdW4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9121821/AB22EAC4D54911EE9497D880C4F9AE02/nryww05Pd_InjbFcWeHtrH5VdW4.mft Manifest number: EE Signing time: Sat 31 May 2025 04:58:50 +0000 Manifest this update: Sat 31 May 2025 04:58:50 +0000 Manifest next update: Sat 07 Jun 2025 04:58:50 +0000 Files and hashes: 1: nryww05Pd_InjbFcWeHtrH5VdW4.crl (hash: 530Es9M1yqBERLbTy2UR7k4ymHmN25DFxzorDN3N+ws=) 2: B999A66AD54E11EE842E2F58C4F9AE02.roa (hash: vw+/iUHoOFUwAmpBNT98n/MAMjwloVjL5FS/iwIttZ8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9121821/AB22EAC4D54911EE9497D880C4F9AE02/nryww05Pd_InjbFcWeHtrH5VdW4.crl rsync://rpki.apnic.net/member_repository/A9121821/AB22EAC4D54911EE9497D880C4F9AE02/nryww05Pd_InjbFcWeHtrH5VdW4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nryww05Pd_InjbFcWeHtrH5VdW4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 04:58:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 242 (0xf2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9121821, serialNumber=9EBCB0C34E4F77F2278DB15C59E1EDAC7E55756E Validity Not Before: May 31 04:58:50 2025 GMT Not After : Jun 7 04:58:50 2025 GMT Subject: CN=683a8c8a-40a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:20:6b:d3:0a:71:70:4b:3b:20:e1:8d:a3:6f: 1d:46:77:12:21:fc:4c:66:f5:7d:1e:32:6b:47:4c: 99:36:13:65:15:7e:61:c9:a0:57:71:20:a0:c7:06: 72:04:3e:c5:cc:21:45:41:9c:7a:87:2e:b2:5e:81: 09:4f:35:88:fe:fe:5f:7f:37:c2:48:55:af:58:b9: 97:0a:f6:89:b8:e8:bc:cf:58:d8:65:77:13:cd:96: b4:37:9c:8b:3b:8f:39:8c:26:4e:0b:56:84:0b:a9: 70:17:ce:6b:91:9a:70:4a:20:0f:39:f2:14:14:dd: 90:b0:c7:ed:ad:90:7d:f0:c3:6e:e3:20:ff:ab:61: 33:9b:32:9f:4d:f7:75:d4:03:63:0b:87:1b:0f:7a: 6c:40:93:52:a0:9d:04:81:fc:c3:1c:23:3b:04:bf: 61:9e:14:88:d4:5c:67:26:29:7f:61:90:17:56:9c: 85:31:b5:a5:d9:13:30:3f:f1:fa:8d:9d:63:68:32: ce:19:15:91:b2:40:a2:fe:d8:c0:3d:e8:24:90:91: 8f:dd:37:59:ab:73:a8:03:48:05:47:c9:d7:59:f2: 59:0a:6b:7e:5d:4a:30:28:be:e4:16:7f:4a:64:d1: 36:1c:32:39:a5:47:92:28:5f:9b:72:5d:a9:24:60: d7:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:94:DC:B8:BC:F4:8A:7C:90:44:DA:73:64:F5:12:3A:EC:AC:AA:89 X509v3 Authority Key Identifier: keyid:9E:BC:B0:C3:4E:4F:77:F2:27:8D:B1:5C:59:E1:ED:AC:7E:55:75:6E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9121821/AB22EAC4D54911EE9497D880C4F9AE02/nryww05Pd_InjbFcWeHtrH5VdW4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nryww05Pd_InjbFcWeHtrH5VdW4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9121821/AB22EAC4D54911EE9497D880C4F9AE02/nryww05Pd_InjbFcWeHtrH5VdW4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 75:a1:da:3e:63:7a:9e:1e:c3:61:9f:5e:2b:e8:19:62:e1:c4: a9:28:47:ea:1e:ab:26:78:1d:3d:16:84:21:05:ea:1c:39:f0: b0:14:78:2c:55:81:a0:ae:32:6d:a3:2a:d9:6b:60:d0:c2:94: 02:ea:4d:51:42:5b:84:4d:6a:9d:ce:40:a0:cf:b3:11:04:30: 7e:41:51:21:bb:03:9a:5a:11:04:83:0e:12:98:8c:7a:e2:07: 46:fb:ba:02:42:0a:4f:21:ce:bb:83:d4:52:9f:6e:c3:04:a6: 26:89:01:f6:95:88:5f:d5:5e:c8:66:18:63:3c:70:8a:80:de: 43:24:92:ad:33:29:8f:db:3e:16:fe:a2:c6:64:a2:0f:d0:a4: 1d:70:f6:aa:d7:82:3a:43:69:ca:f6:94:b8:6a:0e:e8:0b:21: a1:15:28:ea:c4:75:24:ee:e0:09:f4:73:bb:35:f8:2b:0d:e0: 8b:08:ed:c6:d5:eb:4f:95:fc:4e:aa:37:43:ca:50:78:50:5d: a5:b5:6e:77:52:0f:c8:f8:40:77:c7:26:74:c5:46:4d:f5:23: e9:89:90:a3:8b:03:93:f7:dd:52:e1:d8:23:92:aa:93:fd:e1: f9:a8:02:46:e0:46:39:a7:c5:dc:28:c6:0b:b4:4e:78:2c:fc: 09:8e:ac:ae -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjE4MjExMTAvBgNVBAUTKDlFQkNCMEMzNEU0Rjc3RjIyNzhEQjE1QzU5RTFFREFD N0U1NTc1NkUwHhcNMjUwNTMxMDQ1ODUwWhcNMjUwNjA3MDQ1ODUwWjAYMRYwFAYD VQQDEw02ODNhOGM4YS00MGEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvSBr0wpxcEs7IOGNo28dRncSIfxMZvV9HjJrR0yZNhNlFX5hyaBXcSCgxwZy BD7FzCFFQZx6hy6yXoEJTzWI/v5ffzfCSFWvWLmXCvaJuOi8z1jYZXcTzZa0N5yL O485jCZOC1aEC6lwF85rkZpwSiAPOfIUFN2QsMftrZB98MNu4yD/q2EzmzKfTfd1 1ANjC4cbD3psQJNSoJ0EgfzDHCM7BL9hnhSI1FxnJil/YZAXVpyFMbWl2RMwP/H6 jZ1jaDLOGRWRskCi/tjAPegkkJGP3TdZq3OoA0gFR8nXWfJZCmt+XUowKL7kFn9K ZNE2HDI5pUeSKF+bcl2pJGDXgwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKWU3Li8 9Ip8kETac2T1EjrsrKqJMB8GA1UdIwQYMBaAFJ68sMNOT3fyJ42xXFnh7ax+VXVu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMTgyMS9BQjIyRUFDNEQ1 NDkxMUVFOTQ5N0Q4ODBDNEY5QUUwMi9ucnl3dzA1UGRfSW5qYkZjV2VIdHJINVZk VzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25yeXd3MDVQZF9JbmpiRmNXZUh0ckg1VmRXNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MTgyMS9BQjIyRUFDNEQ1NDkxMUVFOTQ5N0Q4ODBDNEY5QUUwMi9ucnl3dzA1UGRf SW5qYkZjV2VIdHJINVZkVzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB1odo+Y3qeHsNhn14r6Bli4cSpKEfqHqsmeB09FoQhBeocOfCwFHgs VYGgrjJtoyrZa2DQwpQC6k1RQluETWqdzkCgz7MRBDB+QVEhuwOaWhEEgw4SmIx6 4gdG+7oCQgpPIc67g9RSn27DBKYmiQH2lYhf1V7IZhhjPHCKgN5DJJKtMymP2z4W /qLGZKIP0KQdcPaq14I6Q2nK9pS4ag7oCyGhFSjqxHUk7uAJ9HO7NfgrDeCLCO3G 1etPlfxOqjdDylB4UF2ltW53Ug/I+EB3xyZ0xUZN9SPpiZCjiwOT991S4dgjkqqT /eH5qAJG4EY5p8XcKMYLtE54LPwJjqyu -----END CERTIFICATE-----Generated at Sat May 31 16:57:42 2025 by rpki-client