$ rpki-client -vvf rpki.apnic.net/member_repository/A9131579/2D2F437414E611EA929BBC45C4F9AE02/nwwVII1-5i6Ay5dc_kzsnL8dJ1Y.mft File: nwwVII1-5i6Ay5dc_kzsnL8dJ1Y.mft (raw, json) Hash identifier: n86xhHstVZ0bAUJX2fIb6UhXpRxOJozMgAOojlaYqXc= Subject key identifier: 64:94:17:1B:99:85:BD:BE:3C:DA:BA:0E:7C:A5:2C:1D:7C:7B:2A:AC Authority key identifier: 9F:0C:15:20:8D:7E:E6:2E:80:CB:97:5C:FE:4C:EC:9C:BF:1D:27:56 Certificate issuer: /CN=A9131579/serialNumber=9F0C15208D7EE62E80CB975CFE4CEC9CBF1D2756 Certificate serial: 0C04 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nwwVII1-5i6Ay5dc_kzsnL8dJ1Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9131579/2D2F437414E611EA929BBC45C4F9AE02/nwwVII1-5i6Ay5dc_kzsnL8dJ1Y.mft Manifest number: 0BF6 Signing time: Fri 30 May 2025 18:57:00 +0000 Manifest this update: Fri 30 May 2025 18:57:00 +0000 Manifest next update: Fri 06 Jun 2025 18:57:00 +0000 Files and hashes: 1: nwwVII1-5i6Ay5dc_kzsnL8dJ1Y.crl (hash: Rlmk7pqIbrSJ5aSBo9QRMjcBQeot/QycbThQwzkChiQ=) 2: 7E565BCC02EB11F084618D33C4F9AE02.roa (hash: AZHVgAf1kSXl8BI/BQ5H295EutsYIoNTNb8l2dBtz+M=) 3: 702B683202E911F097290F2EC4F9AE02.roa (hash: K+XoaDEFz5EZQGsqk/BrrsJpJvi+KU83oJ9JVUv/YSY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9131579/2D2F437414E611EA929BBC45C4F9AE02/nwwVII1-5i6Ay5dc_kzsnL8dJ1Y.crl rsync://rpki.apnic.net/member_repository/A9131579/2D2F437414E611EA929BBC45C4F9AE02/nwwVII1-5i6Ay5dc_kzsnL8dJ1Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nwwVII1-5i6Ay5dc_kzsnL8dJ1Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 18:56:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3076 (0xc04) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9131579, serialNumber=9F0C15208D7EE62E80CB975CFE4CEC9CBF1D2756 Validity Not Before: May 30 18:57:00 2025 GMT Not After : Jun 6 18:57:00 2025 GMT Subject: CN=6839ff7c-8026 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:fa:00:85:84:ad:32:61:ec:af:c1:02:b8:09: 58:65:55:e9:fb:e2:95:3c:9f:fe:d6:55:bf:23:ba: 63:30:3a:a3:18:9b:80:d9:41:f7:ff:59:11:e0:1e: d4:ec:31:1a:9c:80:9e:7c:47:c7:91:04:82:a5:1d: 68:bc:f4:20:d3:4f:f2:cc:3f:88:0c:85:78:9a:15: 04:cc:69:f1:4e:4a:86:b4:63:f5:39:07:6b:37:3c: 00:66:4d:36:60:03:8b:b1:d6:c1:69:db:88:99:85: 79:af:0d:94:fd:36:60:23:48:9e:fe:60:ce:3f:11: 01:68:2f:39:4b:39:3a:92:8a:5c:a3:35:9f:f8:4a: 5f:98:68:41:a2:54:bb:f3:07:b7:e3:06:1f:b6:8f: 12:2a:80:a2:5f:54:d4:87:6f:83:28:98:3c:88:ba: 7a:94:89:ed:10:47:eb:68:b9:51:29:be:41:9e:ed: 1b:c3:9d:e6:97:f7:9a:a5:1f:d4:31:6c:94:4c:0d: cf:8a:2a:06:f3:58:60:24:9e:7c:9a:8b:04:fa:4b: e2:54:73:d2:16:03:a2:e5:02:05:08:9c:9a:ab:2b: d4:df:e2:cd:7a:b8:70:87:d8:37:0c:36:16:14:94: 2f:50:ec:4c:3e:2c:55:3b:7c:b2:2d:72:16:12:96: bd:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:94:17:1B:99:85:BD:BE:3C:DA:BA:0E:7C:A5:2C:1D:7C:7B:2A:AC X509v3 Authority Key Identifier: keyid:9F:0C:15:20:8D:7E:E6:2E:80:CB:97:5C:FE:4C:EC:9C:BF:1D:27:56 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9131579/2D2F437414E611EA929BBC45C4F9AE02/nwwVII1-5i6Ay5dc_kzsnL8dJ1Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nwwVII1-5i6Ay5dc_kzsnL8dJ1Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9131579/2D2F437414E611EA929BBC45C4F9AE02/nwwVII1-5i6Ay5dc_kzsnL8dJ1Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 00:a1:fa:1a:77:e6:1a:75:0d:8e:f2:e2:cb:4f:5c:1e:be:e3: f8:f4:7a:bd:62:1e:7d:1f:81:07:59:70:43:99:c1:bd:ba:42: 79:63:44:4d:70:ac:51:19:25:e6:ff:e2:28:88:ff:f9:57:da: 74:c4:5a:63:60:ba:7a:ce:ed:b1:a0:ac:f6:49:b6:11:f6:d4: 0a:6d:a6:c2:94:e3:f2:12:be:01:66:c8:f3:f1:b9:ab:e3:8d: ef:c0:e6:34:f3:5f:ff:dd:10:19:bd:0e:24:12:fe:51:ff:55: 17:ec:f3:f1:3e:7a:ed:ac:ed:a7:a5:a8:ef:1a:60:bb:cd:78: 87:fa:da:a3:fe:e4:55:3f:8a:05:78:c2:79:1b:73:d0:e2:e9: c1:39:0c:94:b0:8a:8b:26:9f:c4:19:46:00:76:fe:f7:2f:80: b9:a5:04:4c:82:cb:30:d5:be:75:64:ce:3d:ee:f7:88:7b:55: 81:30:28:5a:0d:01:be:29:e4:32:8c:06:82:cc:8f:0d:96:bd: ad:ec:11:74:91:95:80:9b:fe:38:76:07:06:77:b1:d1:b2:fc: 12:a4:e5:13:4f:d5:7b:c6:f2:d4:4d:f7:32:74:39:83:06:f5: 08:1c:1c:29:9b:89:8d:3d:87:5b:51:fc:45:0a:61:13:5a:57: 07:f3:63:2e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDAQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzE1NzkxMTAvBgNVBAUTKDlGMEMxNTIwOEQ3RUU2MkU4MENCOTc1Q0ZFNENFQzlD QkYxRDI3NTYwHhcNMjUwNTMwMTg1NzAwWhcNMjUwNjA2MTg1NzAwWjAYMRYwFAYD VQQDEw02ODM5ZmY3Yy04MDI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlPoAhYStMmHsr8ECuAlYZVXp++KVPJ/+1lW/I7pjMDqjGJuA2UH3/1kR4B7U 7DEanICefEfHkQSCpR1ovPQg00/yzD+IDIV4mhUEzGnxTkqGtGP1OQdrNzwAZk02 YAOLsdbBaduImYV5rw2U/TZgI0ie/mDOPxEBaC85Szk6kopcozWf+EpfmGhBolS7 8we34wYfto8SKoCiX1TUh2+DKJg8iLp6lIntEEfraLlRKb5Bnu0bw53ml/eapR/U MWyUTA3PiioG81hgJJ58mosE+kviVHPSFgOi5QIFCJyaqyvU3+LNerhwh9g3DDYW FJQvUOxMPixVO3yyLXIWEpa9OwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGSUFxuZ hb2+PNq6DnylLB18eyqsMB8GA1UdIwQYMBaAFJ8MFSCNfuYugMuXXP5M7Jy/HSdW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMTU3OS8yRDJGNDM3NDE0 RTYxMUVBOTI5QkJDNDVDNEY5QUUwMi9ud3dWSUkxLTVpNkF5NWRjX2t6c25MOGRK MVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL253d1ZJSTEtNWk2QXk1ZGNfa3pzbkw4ZEoxWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MTU3OS8yRDJGNDM3NDE0RTYxMUVBOTI5QkJDNDVDNEY5QUUwMi9ud3dWSUkxLTVp NkF5NWRjX2t6c25MOGRKMVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAAofoad+YadQ2O8uLLT1wevuP49Hq9Yh59H4EHWXBDmcG9ukJ5Y0RN cKxRGSXm/+IoiP/5V9p0xFpjYLp6zu2xoKz2SbYR9tQKbabClOPyEr4BZsjz8bmr 443vwOY081//3RAZvQ4kEv5R/1UX7PPxPnrtrO2npajvGmC7zXiH+tqj/uRVP4oF eMJ5G3PQ4unBOQyUsIqLJp/EGUYAdv73L4C5pQRMgssw1b51ZM497veIe1WBMCha DQG+KeQyjAaCzI8Nlr2t7BF0kZWAm/44dgcGd7HRsvwSpOUTT9V7xvLUTfcydDmD BvUIHBwpm4mNPYdbUfxFCmETWlcH82Mu -----END CERTIFICATE-----Generated at Sat May 31 17:58:50 2025 by rpki-client