$ rpki-client -vvf rpki.apnic.net/member_repository/A9121821/AB22EAC4D54911EE9497D880C4F9AE02/nryww05Pd_InjbFcWeHtrH5VdW4.mft File: nryww05Pd_InjbFcWeHtrH5VdW4.mft (raw, json) Hash identifier: CvqWwSrw3a4tGllYBg8YSI3LFWjEUe1ms7jSG4G0WyU= Subject key identifier: 5E:1C:01:01:E4:42:CE:1A:1B:ED:AA:3D:A3:A4:50:FF:34:28:9A:A2 Authority key identifier: 9E:BC:B0:C3:4E:4F:77:F2:27:8D:B1:5C:59:E1:ED:AC:7E:55:75:6E Certificate issuer: /CN=A9121821/serialNumber=9EBCB0C34E4F77F2278DB15C59E1EDAC7E55756E Certificate serial: E1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nryww05Pd_InjbFcWeHtrH5VdW4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9121821/AB22EAC4D54911EE9497D880C4F9AE02/nryww05Pd_InjbFcWeHtrH5VdW4.mft Manifest number: DD Signing time: Fri 25 Apr 2025 04:37:24 +0000 Manifest this update: Fri 25 Apr 2025 04:37:24 +0000 Manifest next update: Fri 02 May 2025 04:37:24 +0000 Files and hashes: 1: nryww05Pd_InjbFcWeHtrH5VdW4.crl (hash: +dveqvffw8N7I0QWTWmD+9dkl2NeVbfIclwbdze5niQ=) 2: B999A66AD54E11EE842E2F58C4F9AE02.roa (hash: vw+/iUHoOFUwAmpBNT98n/MAMjwloVjL5FS/iwIttZ8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9121821/AB22EAC4D54911EE9497D880C4F9AE02/nryww05Pd_InjbFcWeHtrH5VdW4.crl rsync://rpki.apnic.net/member_repository/A9121821/AB22EAC4D54911EE9497D880C4F9AE02/nryww05Pd_InjbFcWeHtrH5VdW4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nryww05Pd_InjbFcWeHtrH5VdW4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 04:37:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 225 (0xe1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9121821, serialNumber=9EBCB0C34E4F77F2278DB15C59E1EDAC7E55756E Validity Not Before: Apr 25 04:37:24 2025 GMT Not After : May 2 04:37:24 2025 GMT Subject: CN=680b1184-535d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:dd:9a:09:ce:14:ca:0f:cc:a4:66:3d:ec:02: 23:f1:ad:3a:7f:35:fe:fb:e3:0a:72:26:81:0f:a2: 38:4c:df:b1:0d:84:99:f8:2e:84:c7:d1:b2:c2:a8: 19:ac:45:d4:9c:fa:fd:3f:d7:1d:5d:aa:e3:de:c2: 00:fd:23:40:b9:0c:67:dd:57:1c:55:7f:9a:da:c5: 9b:42:29:f5:93:52:23:e9:21:5d:34:9b:d6:14:31: 31:2c:1f:bf:b0:ac:64:4f:b4:9e:14:1e:10:09:77: 80:0a:cf:e3:e0:a1:94:0b:d7:f1:e6:99:8b:83:a7: dd:90:7d:ae:01:f6:27:d0:84:03:67:24:93:d8:19: e8:2e:d1:9c:b5:62:44:41:ca:f8:d1:36:55:a0:a0: d9:32:4c:97:fe:3e:36:27:84:81:4e:66:41:ee:08: 4b:80:45:c9:e1:6a:af:cc:93:4e:86:1b:7b:ea:fa: e7:27:ab:98:2c:9d:9a:fb:c2:b6:a4:da:9a:60:2d: 26:ba:98:c2:b5:a4:24:a3:80:5d:d8:76:e8:a0:51: e6:33:c6:3b:6f:ed:6f:17:a0:2f:ef:78:73:f6:5a: ac:7d:e7:14:4b:69:f8:e5:ba:d1:1d:f9:43:ee:45: 4f:18:31:42:fd:e8:4e:08:ca:53:f4:51:8b:64:fc: 89:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:1C:01:01:E4:42:CE:1A:1B:ED:AA:3D:A3:A4:50:FF:34:28:9A:A2 X509v3 Authority Key Identifier: keyid:9E:BC:B0:C3:4E:4F:77:F2:27:8D:B1:5C:59:E1:ED:AC:7E:55:75:6E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9121821/AB22EAC4D54911EE9497D880C4F9AE02/nryww05Pd_InjbFcWeHtrH5VdW4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nryww05Pd_InjbFcWeHtrH5VdW4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9121821/AB22EAC4D54911EE9497D880C4F9AE02/nryww05Pd_InjbFcWeHtrH5VdW4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 40:7f:e8:e6:cc:3e:bc:04:cf:1e:0c:76:18:b1:c4:ff:56:76: 6b:08:a1:f0:c1:d0:43:5d:71:0b:0d:4c:5c:4c:a0:20:87:03: 63:37:bc:99:a2:bc:56:10:75:32:0e:51:f9:46:15:11:e4:34: 1f:00:47:83:8c:88:2b:be:78:d1:ce:4c:9f:38:c0:46:af:49: c5:2d:69:fb:58:57:d9:18:29:f9:7e:aa:cb:34:4a:07:99:2c: 29:85:2a:fb:5c:60:7d:97:b8:f5:cc:ea:6f:fa:b3:b7:fc:65: 72:9a:05:db:dc:8d:dd:af:cf:ab:1d:8d:d3:1d:83:5a:86:8c: 4f:c7:31:dc:81:4b:80:f6:c0:17:f1:cd:f0:eb:a6:2e:8a:b9: 55:07:ab:c2:45:69:9f:d5:82:07:72:74:35:21:5f:54:67:26: d4:35:8b:e9:7e:cc:c2:2a:0c:b7:96:76:ac:e5:a7:fd:8d:92: 30:42:c9:09:ab:70:80:86:6c:4e:c3:b2:f9:4f:9a:d8:3a:25: cd:cc:07:d4:52:f2:cf:5a:67:53:21:36:9d:92:ee:7f:95:e0: 44:8b:bb:5f:1d:c0:c9:68:07:87:c4:ff:a1:33:87:d3:e0:e9: 4b:37:7a:c7:e2:2e:73:b1:6c:14:1f:b7:3b:21:70:ef:4a:92: 01:32:a0:37 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjE4MjExMTAvBgNVBAUTKDlFQkNCMEMzNEU0Rjc3RjIyNzhEQjE1QzU5RTFFREFD N0U1NTc1NkUwHhcNMjUwNDI1MDQzNzI0WhcNMjUwNTAyMDQzNzI0WjAYMRYwFAYD VQQDEw02ODBiMTE4NC01MzVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArN2aCc4Uyg/MpGY97AIj8a06fzX+++MKciaBD6I4TN+xDYSZ+C6Ex9GywqgZ rEXUnPr9P9cdXarj3sIA/SNAuQxn3VccVX+a2sWbQin1k1Ij6SFdNJvWFDExLB+/ sKxkT7SeFB4QCXeACs/j4KGUC9fx5pmLg6fdkH2uAfYn0IQDZyST2BnoLtGctWJE Qcr40TZVoKDZMkyX/j42J4SBTmZB7ghLgEXJ4WqvzJNOhht76vrnJ6uYLJ2a+8K2 pNqaYC0mupjCtaQko4Bd2HbooFHmM8Y7b+1vF6Av73hz9lqsfecUS2n45brRHflD 7kVPGDFC/ehOCMpT9FGLZPyJYwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF4cAQHk Qs4aG+2qPaOkUP80KJqiMB8GA1UdIwQYMBaAFJ68sMNOT3fyJ42xXFnh7ax+VXVu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMTgyMS9BQjIyRUFDNEQ1 NDkxMUVFOTQ5N0Q4ODBDNEY5QUUwMi9ucnl3dzA1UGRfSW5qYkZjV2VIdHJINVZk VzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25yeXd3MDVQZF9JbmpiRmNXZUh0ckg1VmRXNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MTgyMS9BQjIyRUFDNEQ1NDkxMUVFOTQ5N0Q4ODBDNEY5QUUwMi9ucnl3dzA1UGRf SW5qYkZjV2VIdHJINVZkVzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBAf+jmzD68BM8eDHYYscT/VnZrCKHwwdBDXXELDUxcTKAghwNjN7yZ orxWEHUyDlH5RhUR5DQfAEeDjIgrvnjRzkyfOMBGr0nFLWn7WFfZGCn5fqrLNEoH mSwphSr7XGB9l7j1zOpv+rO3/GVymgXb3I3dr8+rHY3THYNahoxPxzHcgUuA9sAX 8c3w66YuirlVB6vCRWmf1YIHcnQ1IV9UZybUNYvpfszCKgy3lnas5af9jZIwQskJ q3CAhmxOw7L5T5rYOiXNzAfUUvLPWmdTITadku5/leBEi7tfHcDJaAeHxP+hM4fT 4OlLN3rH4i5zsWwUH7c7IXDvSpIBMqA3 -----END CERTIFICATE-----Generated at Sat Apr 26 15:03:17 2025 by rpki-client