$ rpki-client -vvf rpki.apnic.net/member_repository/A913CADE/F02AB17CFAE611E7923EA150C4F9AE02/NyWy6X3UXcC3UhwKG7XkBgmwXZY.mft File: NyWy6X3UXcC3UhwKG7XkBgmwXZY.mft (raw, json) Hash identifier: uS4ASw1AsNjBXtruUl8f6R8FKrKOGmIfa6hWSPyRQ1E= Subject key identifier: 60:0C:27:19:A8:F7:47:FB:72:CF:F6:D1:87:26:1F:8D:5F:51:63:F7 Authority key identifier: 37:25:B2:E9:7D:D4:5D:C0:B7:52:1C:0A:1B:B5:E4:06:09:B0:5D:96 Certificate issuer: /CN=A913CADE/serialNumber=3725B2E97DD45DC0B7521C0A1BB5E40609B05D96 Certificate serial: 16B1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NyWy6X3UXcC3UhwKG7XkBgmwXZY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913CADE/F02AB17CFAE611E7923EA150C4F9AE02/NyWy6X3UXcC3UhwKG7XkBgmwXZY.mft Manifest number: 16A8 Signing time: Fri 30 May 2025 16:51:42 +0000 Manifest this update: Fri 30 May 2025 16:51:42 +0000 Manifest next update: Fri 06 Jun 2025 16:51:42 +0000 Files and hashes: 1: NyWy6X3UXcC3UhwKG7XkBgmwXZY.crl (hash: +YAJmdjZTKKINlp65qwvE3rab5g1Wbye1RcIzNXnIH8=) 2: DDDE13B8FAE811E7A715F157C4F9AE02.roa (hash: ZIFDDGs8pzafe5+UUxAyWx6ARFXkQp6Z5m5nmDElxJA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913CADE/F02AB17CFAE611E7923EA150C4F9AE02/NyWy6X3UXcC3UhwKG7XkBgmwXZY.crl rsync://rpki.apnic.net/member_repository/A913CADE/F02AB17CFAE611E7923EA150C4F9AE02/NyWy6X3UXcC3UhwKG7XkBgmwXZY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NyWy6X3UXcC3UhwKG7XkBgmwXZY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 16:51:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5809 (0x16b1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913CADE, serialNumber=3725B2E97DD45DC0B7521C0A1BB5E40609B05D96 Validity Not Before: May 30 16:51:42 2025 GMT Not After : Jun 6 16:51:42 2025 GMT Subject: CN=6839e21e-1c33 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:5b:c0:18:71:db:60:a8:23:f3:f2:ca:db:00: fe:33:5a:14:11:60:00:12:cf:59:35:71:fb:8e:0f: 8c:9b:7f:2b:ea:69:9f:47:3d:cc:c5:5f:d4:aa:7f: 0c:93:57:65:e9:57:c5:f1:ff:4c:a2:1d:ab:71:bf: e9:8e:a8:25:08:41:d7:34:62:32:61:2c:0a:20:92: 89:3d:4d:32:ed:f9:a0:41:64:3e:09:04:dc:f1:06: 88:a2:e1:52:f4:e5:bc:88:13:83:83:af:e2:97:8a: 21:28:99:08:a7:ca:8a:17:e1:13:18:6d:bc:2f:16: ce:21:66:11:e4:ba:af:71:be:70:6b:19:07:42:e9: 79:30:94:8c:44:81:9e:05:fc:5b:a2:a8:84:41:56: 68:2a:ff:1c:44:0c:c7:bf:ba:ae:f1:19:03:d8:d3: 38:b2:e5:a3:27:fb:90:89:44:d7:2a:34:37:95:51: e4:66:94:3a:23:42:62:c9:d3:da:67:c5:3d:0c:96: 79:cd:51:47:4e:5d:96:b0:87:8a:81:1f:01:0b:d1: 6d:28:61:fb:e4:db:80:bb:c4:ba:3b:f7:e4:24:a6: 38:d9:22:d1:f0:d1:1b:e1:ed:c1:e4:e5:19:89:50: d9:af:d8:c7:11:d1:5f:2b:27:58:05:e5:8c:b5:f5: 48:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:0C:27:19:A8:F7:47:FB:72:CF:F6:D1:87:26:1F:8D:5F:51:63:F7 X509v3 Authority Key Identifier: keyid:37:25:B2:E9:7D:D4:5D:C0:B7:52:1C:0A:1B:B5:E4:06:09:B0:5D:96 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913CADE/F02AB17CFAE611E7923EA150C4F9AE02/NyWy6X3UXcC3UhwKG7XkBgmwXZY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NyWy6X3UXcC3UhwKG7XkBgmwXZY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913CADE/F02AB17CFAE611E7923EA150C4F9AE02/NyWy6X3UXcC3UhwKG7XkBgmwXZY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2e:a4:40:4e:73:39:2b:bf:79:32:20:47:a2:31:5d:0c:8f:bb: 0a:32:e4:41:cc:13:9e:2b:74:e1:40:a9:d3:53:da:cc:9b:bf: 8e:11:4f:9b:c4:dd:ff:13:41:10:51:27:dd:d6:4c:6d:5a:cd: a3:46:8a:88:6a:0b:16:49:37:24:0b:49:38:eb:fd:c1:8e:bd: f1:a4:25:6c:6a:49:ef:d5:c8:5a:1f:b1:b8:57:9a:16:e1:a0: 75:c1:0e:64:0c:e2:14:fa:78:6e:91:fb:77:94:f5:74:61:ed: 65:6c:19:f4:14:c7:de:69:60:26:71:71:b3:b8:5f:0a:bf:69: 13:3b:78:47:a0:11:e0:12:77:11:cf:fc:38:0d:ef:09:1b:54: 1c:d8:c3:9e:71:f2:39:df:ff:a4:9a:a1:73:b0:c2:60:38:c8: 68:40:93:59:36:3a:67:cf:9e:9e:56:87:c8:15:dc:4e:f7:2f: 04:1d:b2:3f:a9:5c:cf:06:f6:84:7c:63:21:31:47:c4:19:b9: 83:e1:0d:d6:95:7a:52:45:ad:fe:e7:65:c5:be:46:fa:8d:42: ee:6c:23:ba:d4:d0:2c:a4:76:61:79:a1:25:3b:45:d4:0e:64: aa:4b:90:e5:4d:4d:80:c7:d6:41:3f:8f:d1:8d:66:dc:83:9c: 33:9f:ac:76 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFrEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0NBREUxMTAvBgNVBAUTKDM3MjVCMkU5N0RENDVEQzBCNzUyMUMwQTFCQjVFNDA2 MDlCMDVEOTYwHhcNMjUwNTMwMTY1MTQyWhcNMjUwNjA2MTY1MTQyWjAYMRYwFAYD VQQDEw02ODM5ZTIxZS0xYzMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAm1vAGHHbYKgj8/LK2wD+M1oUEWAAEs9ZNXH7jg+Mm38r6mmfRz3MxV/Uqn8M k1dl6VfF8f9Moh2rcb/pjqglCEHXNGIyYSwKIJKJPU0y7fmgQWQ+CQTc8QaIouFS 9OW8iBODg6/il4ohKJkIp8qKF+ETGG28LxbOIWYR5Lqvcb5waxkHQul5MJSMRIGe BfxboqiEQVZoKv8cRAzHv7qu8RkD2NM4suWjJ/uQiUTXKjQ3lVHkZpQ6I0JiydPa Z8U9DJZ5zVFHTl2WsIeKgR8BC9FtKGH75NuAu8S6O/fkJKY42SLR8NEb4e3B5OUZ iVDZr9jHEdFfKydYBeWMtfVIYwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGAMJxmo 90f7cs/20YcmH41fUWP3MB8GA1UdIwQYMBaAFDclsul91F3At1IcChu15AYJsF2W MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQ0FERS9GMDJBQjE3Q0ZB RTYxMUU3OTIzRUExNTBDNEY5QUUwMi9OeVd5NlgzVVhjQzNVaHdLRzdYa0JnbXdY WlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL055V3k2WDNVWGNDM1Vod0tHN1hrQmdtd1haWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz Q0FERS9GMDJBQjE3Q0ZBRTYxMUU3OTIzRUExNTBDNEY5QUUwMi9OeVd5NlgzVVhj QzNVaHdLRzdYa0JnbXdYWlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAupEBOczkrv3kyIEeiMV0Mj7sKMuRBzBOeK3ThQKnTU9rMm7+OEU+b xN3/E0EQUSfd1kxtWs2jRoqIagsWSTckC0k46/3Bjr3xpCVsaknv1chaH7G4V5oW 4aB1wQ5kDOIU+nhukft3lPV0Ye1lbBn0FMfeaWAmcXGzuF8Kv2kTO3hHoBHgEncR z/w4De8JG1Qc2MOecfI53/+kmqFzsMJgOMhoQJNZNjpnz56eVofIFdxO9y8EHbI/ qVzPBvaEfGMhMUfEGbmD4Q3WlXpSRa3+52XFvkb6jULubCO61NAspHZheaElO0XU DmSqS5DlTU2Ax9ZBP4/RjWbcg5wzn6x2 -----END CERTIFICATE-----Generated at Sat May 31 17:12:52 2025 by rpki-client