$ rpki-client -vvf rpki.apnic.net/member_repository/A913EFAB/E82D06FE057411ECA242C57FC4F9AE02/nyv9fYAM-hPpBIrhALSFFDASb9M.mft File: nyv9fYAM-hPpBIrhALSFFDASb9M.mft (raw, json) Hash identifier: aOQr9ww3v95LWxjZ89b2zj1I4EWTNXemVGEQFQQ+QkM= Subject key identifier: B3:BA:25:34:20:EA:6D:21:68:9A:46:BE:2F:F3:5E:C9:43:64:0E:81 Authority key identifier: 9F:2B:FD:7D:80:0C:FA:13:E9:04:8A:E1:00:B4:85:14:30:12:6F:D3 Certificate issuer: /CN=A913EFAB/serialNumber=9F2BFD7D800CFA13E9048AE100B4851430126FD3 Certificate serial: 0522 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nyv9fYAM-hPpBIrhALSFFDASb9M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913EFAB/E82D06FE057411ECA242C57FC4F9AE02/nyv9fYAM-hPpBIrhALSFFDASb9M.mft Manifest number: 051C Signing time: Fri 06 Jun 2025 23:38:17 +0000 Manifest this update: Fri 06 Jun 2025 23:38:16 +0000 Manifest next update: Fri 13 Jun 2025 23:38:16 +0000 Files and hashes: 1: nyv9fYAM-hPpBIrhALSFFDASb9M.crl (hash: B5UWgp3fcb30bYl3/zss/6aCOwbtG2no4LG2tumfWFQ=) 2: 06D647D4057811EC8BCE3783C4F9AE02.roa (hash: grJhcWmzDCOgdxUnDbK2ZLr2jRQYlivgBq7XqkPgbbI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913EFAB/E82D06FE057411ECA242C57FC4F9AE02/nyv9fYAM-hPpBIrhALSFFDASb9M.crl rsync://rpki.apnic.net/member_repository/A913EFAB/E82D06FE057411ECA242C57FC4F9AE02/nyv9fYAM-hPpBIrhALSFFDASb9M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nyv9fYAM-hPpBIrhALSFFDASb9M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 13 Jun 2025 23:38:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1314 (0x522) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913EFAB, serialNumber=9F2BFD7D800CFA13E9048AE100B4851430126FD3 Validity Not Before: Jun 6 23:38:16 2025 GMT Not After : Jun 13 23:38:16 2025 GMT Subject: CN=68437be8-7343 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:b8:4d:a4:0e:48:bd:a1:22:01:fd:62:b5:8c: b1:44:b0:57:d7:d9:42:b0:3d:b6:60:e0:a0:5f:44: 7f:cb:5c:87:73:2b:f7:da:61:c1:a7:51:d1:95:42: f6:a8:7a:a1:7f:37:96:d7:76:40:81:a3:d3:24:12: 24:b7:1a:60:e0:ea:2c:a2:36:4f:1a:fe:8c:42:15: e4:77:0f:05:13:b9:a3:80:14:62:47:90:ec:f8:ef: b0:5a:1f:42:65:7b:69:83:ff:19:9e:0e:48:a1:54: c0:8b:04:0a:b7:77:ef:7b:e5:d1:9b:99:94:8f:78: 83:83:36:86:48:c3:b1:6e:1f:12:d5:7c:d9:38:c7: df:18:92:7b:39:99:6a:ab:d9:44:2c:7b:5d:8b:24: 5c:b6:07:5c:3c:99:cc:d6:31:99:cf:8b:ad:e4:c3: d9:fb:5d:ea:e2:12:10:a9:0a:99:18:87:6a:ad:d4: 0c:8a:22:4d:13:e6:c1:b7:6a:d8:9a:10:6d:5f:6e: 0f:fb:4b:2f:40:ec:f5:95:85:b0:93:26:57:36:32: f0:28:55:2b:86:af:a8:01:96:4f:f5:f6:c0:2b:63: e4:46:4f:82:1f:43:a8:90:08:06:d5:d3:ca:f1:87: f8:00:93:38:1f:23:08:17:c2:96:cc:80:89:0f:6e: a3:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:BA:25:34:20:EA:6D:21:68:9A:46:BE:2F:F3:5E:C9:43:64:0E:81 X509v3 Authority Key Identifier: keyid:9F:2B:FD:7D:80:0C:FA:13:E9:04:8A:E1:00:B4:85:14:30:12:6F:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913EFAB/E82D06FE057411ECA242C57FC4F9AE02/nyv9fYAM-hPpBIrhALSFFDASb9M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nyv9fYAM-hPpBIrhALSFFDASb9M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913EFAB/E82D06FE057411ECA242C57FC4F9AE02/nyv9fYAM-hPpBIrhALSFFDASb9M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7c:fa:24:5a:5b:54:42:7c:2c:49:6c:e6:9a:75:2d:5f:69:8b: d9:66:42:10:d6:4c:d6:bb:1f:6c:a6:85:0c:2b:65:26:30:b8: 21:fd:0c:fc:25:ab:dc:27:68:76:43:a4:31:e0:af:43:d5:45: 89:65:31:9f:29:50:70:c7:28:64:7f:cd:d8:96:dc:2e:66:17: b5:4f:75:ed:1c:b5:6e:5d:26:9a:2c:ad:ce:a6:94:f0:30:b0: 5f:49:fe:5f:7e:9a:41:6b:e0:93:97:20:cb:f8:99:de:85:39: 6d:4d:d3:47:cf:f6:e9:bd:b2:fe:b3:2c:6e:c9:d6:6e:ce:2c: 19:39:f7:dc:0f:a5:00:df:ac:47:bd:38:43:0e:af:d0:e0:5f: b9:d6:16:fc:04:08:a5:68:b7:3b:e5:01:0e:59:2a:8e:4f:c1: 52:c4:3a:90:6f:aa:de:a5:88:5b:2c:5c:f9:3f:0e:57:de:1d: 16:37:6b:5d:61:5d:8e:ea:9f:11:ba:99:4f:71:c0:ce:3c:4b: 79:f7:0e:3d:28:70:39:c1:22:da:0e:e8:06:55:8f:6c:db:64: 12:69:81:48:f4:38:b1:81:c9:a2:14:16:bb:3d:69:fd:98:f7: 9c:5e:71:c9:dd:9e:f8:ef:53:e8:cb:06:08:75:a8:31:87:1a: e8:3c:93:91 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBSIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0VGQUIxMTAvBgNVBAUTKDlGMkJGRDdEODAwQ0ZBMTNFOTA0OEFFMTAwQjQ4NTE0 MzAxMjZGRDMwHhcNMjUwNjA2MjMzODE2WhcNMjUwNjEzMjMzODE2WjAYMRYwFAYD VQQDEw02ODQzN2JlOC03MzQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxLhNpA5IvaEiAf1itYyxRLBX19lCsD22YOCgX0R/y1yHcyv32mHBp1HRlUL2 qHqhfzeW13ZAgaPTJBIktxpg4OosojZPGv6MQhXkdw8FE7mjgBRiR5Ds+O+wWh9C ZXtpg/8Zng5IoVTAiwQKt3fve+XRm5mUj3iDgzaGSMOxbh8S1XzZOMffGJJ7OZlq q9lELHtdiyRctgdcPJnM1jGZz4ut5MPZ+13q4hIQqQqZGIdqrdQMiiJNE+bBt2rY mhBtX24P+0svQOz1lYWwkyZXNjLwKFUrhq+oAZZP9fbAK2PkRk+CH0OokAgG1dPK 8Yf4AJM4HyMIF8KWzICJD26jAwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLO6JTQg 6m0haJpGvi/zXslDZA6BMB8GA1UdIwQYMBaAFJ8r/X2ADPoT6QSK4QC0hRQwEm/T MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRUZBQi9FODJEMDZGRTA1 NzQxMUVDQTI0MkM1N0ZDNEY5QUUwMi9ueXY5ZllBTS1oUHBCSXJoQUxTRkZEQVNi OU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL255djlmWUFNLWhQcEJJcmhBTFNGRkRBU2I5TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RUZBQi9FODJEMDZGRTA1NzQxMUVDQTI0MkM1N0ZDNEY5QUUwMi9ueXY5ZllBTS1o UHBCSXJoQUxTRkZEQVNiOU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB8+iRaW1RCfCxJbOaadS1faYvZZkIQ1kzWux9spoUMK2UmMLgh/Qz8 JavcJ2h2Q6Qx4K9D1UWJZTGfKVBwxyhkf83YltwuZhe1T3XtHLVuXSaaLK3OppTw MLBfSf5ffppBa+CTlyDL+JnehTltTdNHz/bpvbL+syxuydZuziwZOffcD6UA36xH vThDDq/Q4F+51hb8BAilaLc75QEOWSqOT8FSxDqQb6repYhbLFz5Pw5X3h0WN2td YV2O6p8RuplPccDOPEt59w49KHA5wSLaDugGVY9s22QSaYFI9DixgcmiFBa7PWn9 mPecXnHJ3Z7471PoywYIdagxhxroPJOR -----END CERTIFICATE-----Generated at Sat Jun 7 05:08:47 2025 by rpki-client