$ rpki-client -vvf rpki.apnic.net/member_repository/A916DA1F/81A04448362711E8A2108F74C4F9AE02/N-Z4kuvCt8JBAuhSfpB8_q71yVA.mft File: N-Z4kuvCt8JBAuhSfpB8_q71yVA.mft (raw, json) Hash identifier: 9Q6TQ/oK6jvXWdlY6DNdqFb9ShB5j90g5HuGHyeGVyw= Subject key identifier: E4:3A:5E:EF:5A:2A:80:8D:4B:08:33:37:33:78:80:84:F8:49:D5:A2 Authority key identifier: 37:E6:78:92:EB:C2:B7:C2:41:02:E8:52:7E:90:7C:FE:AE:F5:C9:50 Certificate issuer: /CN=A916DA1F/serialNumber=37E67892EBC2B7C24102E8527E907CFEAEF5C950 Certificate serial: 157F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N-Z4kuvCt8JBAuhSfpB8_q71yVA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916DA1F/81A04448362711E8A2108F74C4F9AE02/N-Z4kuvCt8JBAuhSfpB8_q71yVA.mft Manifest number: 1577 Signing time: Fri 30 May 2025 16:58:28 +0000 Manifest this update: Fri 30 May 2025 16:58:28 +0000 Manifest next update: Fri 06 Jun 2025 16:58:28 +0000 Files and hashes: 1: N-Z4kuvCt8JBAuhSfpB8_q71yVA.crl (hash: C6DN4bTurXZuXRpUK/1kWYCRMlWirtL7SP4LCTQI3r4=) 2: 2036C856362911E8B6C37C78C4F9AE02.roa (hash: VjPDMCTDAl0F+kUlLL83qcuxLts9GNlg09c0jF2guQg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916DA1F/81A04448362711E8A2108F74C4F9AE02/N-Z4kuvCt8JBAuhSfpB8_q71yVA.crl rsync://rpki.apnic.net/member_repository/A916DA1F/81A04448362711E8A2108F74C4F9AE02/N-Z4kuvCt8JBAuhSfpB8_q71yVA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N-Z4kuvCt8JBAuhSfpB8_q71yVA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 16:58:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5503 (0x157f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916DA1F, serialNumber=37E67892EBC2B7C24102E8527E907CFEAEF5C950 Validity Not Before: May 30 16:58:28 2025 GMT Not After : Jun 6 16:58:28 2025 GMT Subject: CN=6839e3b4-fc26 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:d7:51:72:7d:b3:20:54:52:d3:dd:05:1b:0f: 86:6f:52:b2:34:7a:ba:40:dc:2c:19:ac:2e:07:ac: db:9e:f5:6c:00:d8:6c:c5:d6:13:5d:0a:6f:29:1c: 14:b7:0c:f7:8d:b1:4f:7e:8f:1f:95:8a:72:10:a2: c0:8c:35:4d:71:ee:d0:d5:5c:05:8e:fb:2b:c1:99: 13:96:ca:e9:ba:6f:c6:04:69:50:03:04:2c:fe:cc: 08:ec:6f:fb:14:90:c6:13:f6:cd:2c:6d:48:21:26: f8:17:82:f6:68:20:4b:f1:25:56:ee:7a:22:f1:08: 9b:4f:d3:ad:58:df:93:9e:05:a0:9e:35:33:1e:c8: 5e:bb:d5:62:c2:88:c4:83:3a:4e:fe:4b:c3:67:4f: 72:0e:15:44:66:31:7d:b0:66:24:1c:ac:34:d3:47: 16:1d:11:e7:28:21:9c:a7:49:2f:00:fb:0d:f4:1b: c5:6a:6f:12:03:15:6f:51:1e:f1:bc:d1:53:08:9b: 50:01:c6:3e:ca:74:83:b8:ad:df:1b:f7:7e:49:15: 8f:d8:ff:0e:a7:3e:60:c9:de:58:91:1d:a9:00:21: 16:7e:77:ad:88:3f:bb:55:9f:4d:c3:3c:e0:a2:56: be:1a:92:ca:c9:c7:29:e5:38:16:cc:2c:2a:f9:dd: 19:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:3A:5E:EF:5A:2A:80:8D:4B:08:33:37:33:78:80:84:F8:49:D5:A2 X509v3 Authority Key Identifier: keyid:37:E6:78:92:EB:C2:B7:C2:41:02:E8:52:7E:90:7C:FE:AE:F5:C9:50 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916DA1F/81A04448362711E8A2108F74C4F9AE02/N-Z4kuvCt8JBAuhSfpB8_q71yVA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N-Z4kuvCt8JBAuhSfpB8_q71yVA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916DA1F/81A04448362711E8A2108F74C4F9AE02/N-Z4kuvCt8JBAuhSfpB8_q71yVA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5f:97:a5:cd:90:16:d1:bd:1b:8a:77:e3:dd:2f:94:09:82:67: 2f:90:d5:61:b0:9b:77:ab:f3:da:2b:43:14:49:33:e7:9f:ed: 25:a8:56:60:1c:af:d8:50:41:f5:f9:b0:96:40:6a:08:59:3f: 3f:40:9f:4c:f1:4c:d7:7c:cd:b6:ca:c7:dc:02:0f:1a:79:48: d1:7f:5b:50:74:b4:c1:62:0e:68:43:82:89:ec:8e:a6:71:37: bc:51:d4:92:3a:d8:52:c2:9b:d5:d7:de:8d:56:b8:9f:23:e8: 25:5b:32:de:5e:8c:e4:1c:d6:74:71:b9:65:1b:31:8b:60:8d: ab:3b:09:30:8b:8b:32:18:fe:2a:fe:d5:c7:4d:81:32:f5:43: 6f:f7:9a:96:4f:83:fb:eb:68:5f:c7:0b:11:ae:eb:12:3e:73: f0:2c:43:a7:c9:19:e4:08:14:a1:c1:1c:eb:37:73:ca:3e:5e: 1e:f4:aa:19:f3:83:f9:f7:42:65:f7:d9:7f:2f:db:ac:69:b6: 03:41:22:be:57:80:f7:cb:9b:a6:c9:8e:8a:ab:e9:24:e8:db: b4:45:da:85:2e:bf:a6:4b:a3:1e:e7:a3:9e:4e:cf:06:ff:85: 2e:d5:3a:14:24:9e:0c:70:9a:fb:86:c3:c8:61:18:3b:74:9e: 92:8f:d9:d5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFX8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkRBMUYxMTAvBgNVBAUTKDM3RTY3ODkyRUJDMkI3QzI0MTAyRTg1MjdFOTA3Q0ZF QUVGNUM5NTAwHhcNMjUwNTMwMTY1ODI4WhcNMjUwNjA2MTY1ODI4WjAYMRYwFAYD VQQDEw02ODM5ZTNiNC1mYzI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuNdRcn2zIFRS090FGw+Gb1KyNHq6QNwsGawuB6zbnvVsANhsxdYTXQpvKRwU twz3jbFPfo8flYpyEKLAjDVNce7Q1VwFjvsrwZkTlsrpum/GBGlQAwQs/swI7G/7 FJDGE/bNLG1IISb4F4L2aCBL8SVW7noi8QibT9OtWN+TngWgnjUzHsheu9ViwojE gzpO/kvDZ09yDhVEZjF9sGYkHKw000cWHRHnKCGcp0kvAPsN9BvFam8SAxVvUR7x vNFTCJtQAcY+ynSDuK3fG/d+SRWP2P8Opz5gyd5YkR2pACEWfnetiD+7VZ9Nwzzg ola+GpLKyccp5TgWzCwq+d0Z2QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOQ6Xu9a KoCNSwgzNzN4gIT4SdWiMB8GA1UdIwQYMBaAFDfmeJLrwrfCQQLoUn6QfP6u9clQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2REExRi84MUEwNDQ0ODM2 MjcxMUU4QTIxMDhGNzRDNEY5QUUwMi9OLVo0a3V2Q3Q4SkJBdWhTZnBCOF9xNzF5 VkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL04tWjRrdXZDdDhKQkF1aFNmcEI4X3E3MXlWQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 REExRi84MUEwNDQ0ODM2MjcxMUU4QTIxMDhGNzRDNEY5QUUwMi9OLVo0a3V2Q3Q4 SkJBdWhTZnBCOF9xNzF5VkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBfl6XNkBbRvRuKd+PdL5QJgmcvkNVhsJt3q/PaK0MUSTPnn+0lqFZg HK/YUEH1+bCWQGoIWT8/QJ9M8UzXfM22ysfcAg8aeUjRf1tQdLTBYg5oQ4KJ7I6m cTe8UdSSOthSwpvV196NVrifI+glWzLeXozkHNZ0cbllGzGLYI2rOwkwi4syGP4q /tXHTYEy9UNv95qWT4P762hfxwsRrusSPnPwLEOnyRnkCBShwRzrN3PKPl4e9KoZ 84P590Jl99l/L9usabYDQSK+V4D3y5umyY6Kq+kk6Nu0RdqFLr+mS6Me56OeTs8G /4Uu1ToUJJ4McJr7hsPIYRg7dJ6Sj9nV -----END CERTIFICATE-----Generated at Sat May 31 17:16:10 2025 by rpki-client