$ rpki-client -vvf rpki.apnic.net/member_repository/A9135F07/3737A2BCC35A11EF8314C43FC4F9AE02/Nzj_PFuvGRGC66FLeMhIpa76TKo.mft File: Nzj_PFuvGRGC66FLeMhIpa76TKo.mft (raw, json) Hash identifier: qyHzn/lCkQciJ2unKa6cQELLZQ7stIN99kCeN6l5bKI= Subject key identifier: 18:07:82:B5:6F:13:E1:43:3C:FA:C3:A1:8D:7C:FF:5D:7C:CF:8C:B2 Authority key identifier: 37:38:FF:3C:5B:AF:19:11:82:EB:A1:4B:78:C8:48:A5:AE:FA:4C:AA Certificate issuer: /CN=A9135F07/serialNumber=3738FF3C5BAF191182EBA14B78C848A5AEFA4CAA Certificate serial: 52 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nzj_PFuvGRGC66FLeMhIpa76TKo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9135F07/3737A2BCC35A11EF8314C43FC4F9AE02/Nzj_PFuvGRGC66FLeMhIpa76TKo.mft Manifest number: 52 Signing time: Sat 31 May 2025 06:49:17 +0000 Manifest this update: Sat 31 May 2025 06:49:16 +0000 Manifest next update: Sat 07 Jun 2025 06:49:16 +0000 Files and hashes: 1: Nzj_PFuvGRGC66FLeMhIpa76TKo.crl (hash: QmMz6H5oPjTJEYQ8Ia4Io2GWwpLLZYkjlsxUYHsQY4M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9135F07/3737A2BCC35A11EF8314C43FC4F9AE02/Nzj_PFuvGRGC66FLeMhIpa76TKo.crl rsync://rpki.apnic.net/member_repository/A9135F07/3737A2BCC35A11EF8314C43FC4F9AE02/Nzj_PFuvGRGC66FLeMhIpa76TKo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nzj_PFuvGRGC66FLeMhIpa76TKo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 06:49:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 82 (0x52) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9135F07, serialNumber=3738FF3C5BAF191182EBA14B78C848A5AEFA4CAA Validity Not Before: May 31 06:49:16 2025 GMT Not After : Jun 7 06:49:16 2025 GMT Subject: CN=683aa66c-1fa7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:59:88:54:6c:13:05:9f:06:15:60:cf:71:b2: 9b:a1:22:fd:b9:b7:e7:b3:8d:c4:52:ac:2a:47:60: 39:e1:04:83:ca:15:44:58:84:d0:91:b0:b9:ba:dd: c7:c4:93:62:f1:13:d5:03:59:fe:f5:72:b0:b5:ea: b9:d8:5b:b5:1d:bf:51:86:de:15:7d:39:bb:af:58: 58:3a:72:54:68:f2:e3:bd:67:0e:91:59:60:77:a5: e8:13:48:75:58:cf:16:0a:16:bc:c3:f6:72:4d:6c: 95:1c:6e:e3:e2:37:6c:ce:e1:55:82:d9:61:74:3b: 31:3f:87:94:f8:9e:0d:b4:55:97:0f:0e:9b:46:62: af:c9:4b:64:63:f7:1d:7e:2e:05:93:89:ba:c4:d1: 89:e6:07:53:9a:e8:12:9d:67:47:a9:f7:da:b3:11: d4:48:a8:32:ae:a8:1c:c8:9e:77:00:4c:c3:82:0b: c7:a7:6c:2d:ea:88:34:7b:74:6b:5f:f0:10:c2:ec: aa:ad:1f:1f:d8:72:3f:98:e3:ae:66:23:b8:31:51: 34:ac:9b:5c:87:77:3c:a4:11:1e:44:f3:5f:8c:00: ca:7e:aa:73:65:ef:8a:a9:4c:1f:2b:f4:91:0e:c4: 22:1a:4f:68:d4:70:5a:5f:9e:81:7d:4b:5c:24:0e: db:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:07:82:B5:6F:13:E1:43:3C:FA:C3:A1:8D:7C:FF:5D:7C:CF:8C:B2 X509v3 Authority Key Identifier: keyid:37:38:FF:3C:5B:AF:19:11:82:EB:A1:4B:78:C8:48:A5:AE:FA:4C:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9135F07/3737A2BCC35A11EF8314C43FC4F9AE02/Nzj_PFuvGRGC66FLeMhIpa76TKo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nzj_PFuvGRGC66FLeMhIpa76TKo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9135F07/3737A2BCC35A11EF8314C43FC4F9AE02/Nzj_PFuvGRGC66FLeMhIpa76TKo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3b:2c:84:97:6c:77:a2:76:a3:34:c4:cc:6c:97:1a:cb:8b:fe: 26:da:4f:8c:8a:44:a4:df:d9:4b:ad:bc:d9:e9:db:a5:80:8a: 7e:23:14:8e:52:e8:5d:3a:f3:a4:e7:92:60:a9:91:73:85:17: 3c:87:19:04:2a:b7:5a:a9:da:3a:4e:e3:4d:ee:eb:58:80:0a: 50:92:53:39:dc:5e:e3:a9:20:1e:0b:69:d0:44:a5:c7:15:c2: 20:b4:fb:0a:10:57:0d:a9:81:5c:b5:db:4d:46:ec:7e:2d:78: 60:c8:26:bd:99:2b:20:63:a6:74:31:f1:51:1b:61:3a:4f:44: 34:19:14:f0:92:1a:c1:56:1a:fe:32:ce:53:5c:f8:7f:b9:bf: 39:b7:c5:89:ad:02:9c:cf:38:a0:53:ca:8f:f2:99:ee:c9:92: 2c:21:22:51:bc:9a:d9:88:36:e5:63:96:68:0c:83:0b:8f:bd: bf:91:e1:6f:81:52:52:73:f2:e8:d6:9c:8c:64:cc:c6:04:41: 59:be:11:95:29:58:e0:bc:2a:c6:21:c4:ab:2a:5f:3e:12:08: 47:c7:c1:c9:cd:36:90:e4:d1:39:4a:d1:5d:99:ea:e8:4f:54: 83:06:c3:a3:e4:97:3d:13:ee:b1:fb:df:29:78:00:be:00:ad: 52:5a:05:79 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBUjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz NUYwNzExMC8GA1UEBRMoMzczOEZGM0M1QkFGMTkxMTgyRUJBMTRCNzhDODQ4QTVB RUZBNENBQTAeFw0yNTA1MzEwNjQ5MTZaFw0yNTA2MDcwNjQ5MTZaMBgxFjAUBgNV BAMTDTY4M2FhNjZjLTFmYTcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDHWYhUbBMFnwYVYM9xspuhIv25t+ezjcRSrCpHYDnhBIPKFURYhNCRsLm63cfE k2LxE9UDWf71crC16rnYW7Udv1GG3hV9ObuvWFg6clRo8uO9Zw6RWWB3pegTSHVY zxYKFrzD9nJNbJUcbuPiN2zO4VWC2WF0OzE/h5T4ng20VZcPDptGYq/JS2Rj9x1+ LgWTibrE0YnmB1Oa6BKdZ0ep99qzEdRIqDKuqBzInncATMOCC8enbC3qiDR7dGtf 8BDC7KqtHx/Ycj+Y465mI7gxUTSsm1yHdzykER5E81+MAMp+qnNl74qpTB8r9JEO xCIaT2jUcFpfnoF9S1wkDtu1AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUGAeCtW8T 4UM8+sOhjXz/XXzPjLIwHwYDVR0jBBgwFoAUNzj/PFuvGRGC66FLeMhIpa76TKow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM1RjA3LzM3MzdBMkJDQzM1 QTExRUY4MzE0QzQzRkM0RjlBRTAyL056al9QRnV2R1JHQzY2RkxlTWhJcGE3NlRL by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvTnpqX1BGdXZHUkdDNjZGTGVNaElwYTc2VEtvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM1 RjA3LzM3MzdBMkJDQzM1QTExRUY4MzE0QzQzRkM0RjlBRTAyL056al9QRnV2R1JH QzY2RkxlTWhJcGE3NlRLby5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBADsshJdsd6J2ozTEzGyXGsuL/ibaT4yKRKTf2UutvNnp26WAin4jFI5S 6F0686TnkmCpkXOFFzyHGQQqt1qp2jpO403u61iAClCSUzncXuOpIB4LadBEpccV wiC0+woQVw2pgVy1201G7H4teGDIJr2ZKyBjpnQx8VEbYTpPRDQZFPCSGsFWGv4y zlNc+H+5vzm3xYmtApzPOKBTyo/yme7JkiwhIlG8mtmINuVjlmgMgwuPvb+R4W+B UlJz8ujWnIxkzMYEQVm+EZUpWOC8KsYhxKsqXz4SCEfHwcnNNpDk0TlK0V2Z6uhP VIMGw6Pklz0T7rH73yl4AL4ArVJaBXk= -----END CERTIFICATE-----Generated at Sat May 31 16:59:29 2025 by rpki-client