$ rpki-client -vvf rpki.apnic.net/member_repository/A912929D/6E050EF6B13011EFAA0BB53AC4F9AE02/NYQa4z32kxIBQGeYrmT8wIf1oeU.mft File: NYQa4z32kxIBQGeYrmT8wIf1oeU.mft (raw, json) Hash identifier: Yjskf6rNO/DMwlj49GuFx9sMd1++8Z9Cmwub83HSGHY= Subject key identifier: 89:9F:6D:25:3A:2E:09:FD:5A:6B:08:60:18:4C:28:5E:FF:82:BE:93 Authority key identifier: 35:84:1A:E3:3D:F6:93:12:01:40:67:98:AE:64:FC:C0:87:F5:A1:E5 Certificate issuer: /CN=A912929D/serialNumber=35841AE33DF6931201406798AE64FCC087F5A1E5 Certificate serial: 5D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NYQa4z32kxIBQGeYrmT8wIf1oeU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912929D/6E050EF6B13011EFAA0BB53AC4F9AE02/NYQa4z32kxIBQGeYrmT8wIf1oeU.mft Manifest number: 5C Signing time: Sat 31 May 2025 06:42:18 +0000 Manifest this update: Sat 31 May 2025 06:42:18 +0000 Manifest next update: Sat 07 Jun 2025 06:42:18 +0000 Files and hashes: 1: NYQa4z32kxIBQGeYrmT8wIf1oeU.crl (hash: jvYeLaH/sPAn4fe8sHQ4p+6B+cRnYw5wEMzdDA9iZS8=) 2: AC205A92B13011EFB45E6B3BC4F9AE02.roa (hash: uKwkZfPxaBZe+NEWyqJ10DRoEbJiI4u5JFaaWffNJlI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912929D/6E050EF6B13011EFAA0BB53AC4F9AE02/NYQa4z32kxIBQGeYrmT8wIf1oeU.crl rsync://rpki.apnic.net/member_repository/A912929D/6E050EF6B13011EFAA0BB53AC4F9AE02/NYQa4z32kxIBQGeYrmT8wIf1oeU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NYQa4z32kxIBQGeYrmT8wIf1oeU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 06:42:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 93 (0x5d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912929D, serialNumber=35841AE33DF6931201406798AE64FCC087F5A1E5 Validity Not Before: May 31 06:42:18 2025 GMT Not After : Jun 7 06:42:18 2025 GMT Subject: CN=683aa4ca-adf7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:e4:05:ba:ea:cd:9b:ae:07:5a:c4:37:f1:ec: ef:12:6d:3a:61:2a:83:99:ec:4d:f5:0c:8d:f8:db: c5:c4:e4:a8:11:16:41:58:b5:a9:14:47:d5:57:71: 0f:b8:f5:37:3e:6f:be:fd:9b:c4:b3:86:fe:45:34: 0f:da:ac:dc:dc:5f:d4:85:dc:67:bb:c8:ad:94:54: bc:03:c5:60:5b:10:aa:72:c2:65:f0:4f:bb:31:54: 0d:64:0c:f9:55:87:f1:2b:b7:cc:3a:49:f3:a7:b4: 21:32:94:76:63:56:5e:28:da:48:26:46:63:6e:18: e0:e9:d1:fd:41:7b:52:72:73:dc:89:ce:98:91:0d: a6:82:c7:2f:5a:9d:db:16:82:1c:e9:5a:5b:5f:36: c4:eb:25:c4:8b:58:30:e3:8f:6b:8f:4e:7b:76:c2: 97:ae:99:1a:41:b0:67:a4:0c:d9:cb:57:05:72:75: 63:42:d6:ed:eb:8a:64:ae:c4:75:f1:cc:ca:e3:79: ec:9a:51:86:be:4d:52:b7:84:9b:32:c6:79:97:7b: 14:ff:1f:d1:3f:64:bc:d1:42:5d:0a:d2:21:cd:63: 4c:1f:21:5e:fe:c5:33:a4:c7:1e:03:25:9e:4d:0c: 0a:2e:1b:78:52:2a:f7:4c:25:b1:27:01:3b:b2:65: 9b:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:9F:6D:25:3A:2E:09:FD:5A:6B:08:60:18:4C:28:5E:FF:82:BE:93 X509v3 Authority Key Identifier: keyid:35:84:1A:E3:3D:F6:93:12:01:40:67:98:AE:64:FC:C0:87:F5:A1:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912929D/6E050EF6B13011EFAA0BB53AC4F9AE02/NYQa4z32kxIBQGeYrmT8wIf1oeU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NYQa4z32kxIBQGeYrmT8wIf1oeU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912929D/6E050EF6B13011EFAA0BB53AC4F9AE02/NYQa4z32kxIBQGeYrmT8wIf1oeU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d5:21:86:29:98:c6:1b:76:a7:dd:5d:0d:fc:3b:59:19:5e:c3: 03:57:ac:36:02:8b:0b:a5:ad:05:b3:ae:34:ee:82:f3:72:2b: c7:e8:14:a2:7a:69:00:39:75:21:0a:dc:83:d8:4e:57:19:ca: fb:e3:ef:44:3e:d4:f6:31:81:6b:61:fa:ca:d1:31:be:c5:86: c6:05:f9:57:91:00:53:57:49:69:a4:39:f1:a6:e4:1b:05:ed: cd:ee:7d:da:72:8e:ca:4e:22:a3:2f:65:9c:ce:fa:a9:c2:51: 0d:d1:28:a5:82:dc:91:b7:b1:d8:52:5d:af:a2:d8:b7:e2:6c: b5:c1:f6:31:74:cd:31:93:30:d7:89:b8:4a:5b:c6:cb:51:74: db:48:22:4a:88:f5:a0:3b:88:a6:1d:59:f0:f6:f7:8a:ae:d6: 06:49:8c:7d:ec:35:8e:ed:c0:84:44:46:7c:64:a0:30:79:1b: 7f:52:b7:f5:18:79:3b:a8:56:52:70:69:43:06:3b:1c:05:c3: e6:f4:ce:44:8c:d4:0d:d5:ad:a2:e8:14:d8:ed:9e:05:0e:0a: 9b:6c:4b:54:ed:37:d3:5b:26:bf:03:3e:be:70:32:61:b5:26: 7a:9d:18:50:eb:72:08:7b:a5:7a:97:79:c0:50:cc:d0:e3:00: bb:9a:af:34 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBXTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy OTI5RDExMC8GA1UEBRMoMzU4NDFBRTMzREY2OTMxMjAxNDA2Nzk4QUU2NEZDQzA4 N0Y1QTFFNTAeFw0yNTA1MzEwNjQyMThaFw0yNTA2MDcwNjQyMThaMBgxFjAUBgNV BAMTDTY4M2FhNGNhLWFkZjcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCr5AW66s2brgdaxDfx7O8SbTphKoOZ7E31DI3428XE5KgRFkFYtakUR9VXcQ+4 9Tc+b779m8Szhv5FNA/arNzcX9SF3Ge7yK2UVLwDxWBbEKpywmXwT7sxVA1kDPlV h/Ert8w6SfOntCEylHZjVl4o2kgmRmNuGODp0f1Be1Jyc9yJzpiRDaaCxy9andsW ghzpWltfNsTrJcSLWDDjj2uPTnt2wpeumRpBsGekDNnLVwVydWNC1u3rimSuxHXx zMrjeeyaUYa+TVK3hJsyxnmXexT/H9E/ZLzRQl0K0iHNY0wfIV7+xTOkxx4DJZ5N DAouG3hSKvdMJbEnATuyZZtnAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUiZ9tJTou Cf1aawhgGEwoXv+CvpMwHwYDVR0jBBgwFoAUNYQa4z32kxIBQGeYrmT8wIf1oeUw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI5MjlELzZFMDUwRUY2QjEz MDExRUZBQTBCQjUzQUM0RjlBRTAyL05ZUWE0ejMya3hJQlFHZVlybVQ4d0lmMW9l VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvTllRYTR6MzJreElCUUdlWXJtVDh3SWYxb2VVLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI5 MjlELzZFMDUwRUY2QjEzMDExRUZBQTBCQjUzQUM0RjlBRTAyL05ZUWE0ejMya3hJ QlFHZVlybVQ4d0lmMW9lVS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBANUhhimYxht2p91dDfw7WRlewwNXrDYCiwulrQWzrjTugvNyK8foFKJ6 aQA5dSEK3IPYTlcZyvvj70Q+1PYxgWth+srRMb7FhsYF+VeRAFNXSWmkOfGm5BsF 7c3ufdpyjspOIqMvZZzO+qnCUQ3RKKWC3JG3sdhSXa+i2LfibLXB9jF0zTGTMNeJ uEpbxstRdNtIIkqI9aA7iKYdWfD294qu1gZJjH3sNY7twIRERnxkoDB5G39St/UY eTuoVlJwaUMGOxwFw+b0zkSM1A3VraLoFNjtngUOCptsS1TtN9NbJr8DPr5wMmG1 JnqdGFDrcgh7pXqXecBQzNDjALuarzQ= -----END CERTIFICATE-----Generated at Sat May 31 17:02:16 2025 by rpki-client