$ rpki-client -vvf rpki.apnic.net/member_repository/A9131579/2D2F437414E611EA929BBC45C4F9AE02/nwwVII1-5i6Ay5dc_kzsnL8dJ1Y.mft File: nwwVII1-5i6Ay5dc_kzsnL8dJ1Y.mft (raw, json) Hash identifier: 4tz6TqqO484Ccb7ikZrDDGWwdrx9X0iN7zB3+qCACiA= Subject key identifier: 84:E9:78:FE:C4:C7:13:87:5D:90:36:AF:22:18:42:43:92:C6:5A:92 Authority key identifier: 9F:0C:15:20:8D:7E:E6:2E:80:CB:97:5C:FE:4C:EC:9C:BF:1D:27:56 Certificate issuer: /CN=A9131579/serialNumber=9F0C15208D7EE62E80CB975CFE4CEC9CBF1D2756 Certificate serial: 0BF3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nwwVII1-5i6Ay5dc_kzsnL8dJ1Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9131579/2D2F437414E611EA929BBC45C4F9AE02/nwwVII1-5i6Ay5dc_kzsnL8dJ1Y.mft Manifest number: 0BE5 Signing time: Thu 24 Apr 2025 18:42:59 +0000 Manifest this update: Thu 24 Apr 2025 18:42:59 +0000 Manifest next update: Thu 01 May 2025 18:42:59 +0000 Files and hashes: 1: nwwVII1-5i6Ay5dc_kzsnL8dJ1Y.crl (hash: i6CmHnI+zIxzDOMxdj8GwOymIaGKn9JfgTZ4z+F0p/8=) 2: 7E565BCC02EB11F084618D33C4F9AE02.roa (hash: AZHVgAf1kSXl8BI/BQ5H295EutsYIoNTNb8l2dBtz+M=) 3: 702B683202E911F097290F2EC4F9AE02.roa (hash: K+XoaDEFz5EZQGsqk/BrrsJpJvi+KU83oJ9JVUv/YSY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9131579/2D2F437414E611EA929BBC45C4F9AE02/nwwVII1-5i6Ay5dc_kzsnL8dJ1Y.crl rsync://rpki.apnic.net/member_repository/A9131579/2D2F437414E611EA929BBC45C4F9AE02/nwwVII1-5i6Ay5dc_kzsnL8dJ1Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nwwVII1-5i6Ay5dc_kzsnL8dJ1Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 18:42:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3059 (0xbf3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9131579, serialNumber=9F0C15208D7EE62E80CB975CFE4CEC9CBF1D2756 Validity Not Before: Apr 24 18:42:59 2025 GMT Not After : May 1 18:42:59 2025 GMT Subject: CN=680a8633-2cd7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:0a:ad:6d:5b:75:e1:88:41:dd:df:2d:90:7a: 2b:40:6e:e7:4b:2e:fd:3a:cf:f6:2d:53:4d:36:59: d0:ee:da:c5:d7:9c:be:22:49:32:7a:04:15:49:08: c7:a4:88:f0:0a:14:4d:39:86:6f:c6:72:58:6b:4f: de:fa:0c:a8:41:d3:6c:43:66:22:9b:54:7b:7c:67: 3b:2e:c6:eb:b9:f6:07:39:03:f4:59:de:55:4d:85: 5a:c9:a1:d4:ca:e3:49:42:be:c2:1d:06:47:25:29: 7a:e9:c7:73:7e:3c:00:f2:c7:a0:e5:00:b5:00:d6: 4c:d1:d2:aa:54:83:de:90:a0:15:4d:a1:b9:75:cf: ad:33:31:05:66:50:21:0a:33:86:79:f8:65:13:bc: 75:cc:ac:66:7f:7f:65:7a:6c:77:61:17:c7:9b:e2: 6e:f5:5e:b8:60:5f:f7:c0:ae:ec:4d:48:62:c3:22: 32:7f:c0:cb:e2:57:93:ed:cc:fe:6f:25:4b:20:0e: d7:42:bd:49:be:71:79:9c:0e:73:d5:82:7a:f6:81: ef:d5:88:00:41:ca:c5:18:59:b8:0b:04:82:42:b4: ec:8f:02:67:9b:8c:b9:ee:c1:a7:33:37:f5:2e:e7: a1:24:27:e9:5e:a9:22:c3:36:97:36:67:c5:67:f8: 5e:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:E9:78:FE:C4:C7:13:87:5D:90:36:AF:22:18:42:43:92:C6:5A:92 X509v3 Authority Key Identifier: keyid:9F:0C:15:20:8D:7E:E6:2E:80:CB:97:5C:FE:4C:EC:9C:BF:1D:27:56 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9131579/2D2F437414E611EA929BBC45C4F9AE02/nwwVII1-5i6Ay5dc_kzsnL8dJ1Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nwwVII1-5i6Ay5dc_kzsnL8dJ1Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9131579/2D2F437414E611EA929BBC45C4F9AE02/nwwVII1-5i6Ay5dc_kzsnL8dJ1Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7f:43:a6:ea:6a:3a:f0:c4:30:b9:98:33:9d:bf:6c:a8:ad:0e: bb:b8:d3:b4:35:44:f8:4a:f9:d4:a3:9b:9f:14:0d:0a:52:1e: bc:87:bc:08:30:70:76:07:0a:a4:42:ff:ad:a7:a6:93:ae:54: 8c:e1:ac:ab:cd:39:7d:26:4f:0a:f1:5e:03:06:8b:f4:8b:25: b0:e5:3d:5b:38:ac:9a:7d:6d:ce:74:c4:9e:94:bb:66:d8:bc: 9e:16:86:89:44:48:e7:7b:81:21:c6:bd:9f:ee:30:27:65:4d: 85:54:4e:49:e7:ec:0e:d0:1c:e2:9b:60:8f:f4:9c:4f:15:d6: 41:98:b4:1a:10:ce:7d:0b:41:d8:fa:77:e5:a8:d7:3d:be:31: 32:95:a1:61:59:69:87:bc:f8:df:10:60:a4:2d:4d:85:f3:15: d6:3b:43:3f:ae:f7:6d:ab:00:01:73:c7:08:94:2a:4c:a1:49: 43:d8:71:54:5d:ee:65:8b:f4:d6:28:78:1d:5c:43:10:e5:dd: dc:60:ee:48:d1:4a:9b:4f:00:4a:21:b1:4a:b3:22:86:70:06: 4c:9f:9e:a2:b3:f8:86:b1:43:e8:7d:8c:cc:17:f3:67:56:b7: f8:94:2a:82:07:5a:ef:23:19:00:7f:35:44:cf:f1:75:82:31: 77:f2:66:43 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC/MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzE1NzkxMTAvBgNVBAUTKDlGMEMxNTIwOEQ3RUU2MkU4MENCOTc1Q0ZFNENFQzlD QkYxRDI3NTYwHhcNMjUwNDI0MTg0MjU5WhcNMjUwNTAxMTg0MjU5WjAYMRYwFAYD VQQDEw02ODBhODYzMy0yY2Q3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuwqtbVt14YhB3d8tkHorQG7nSy79Os/2LVNNNlnQ7trF15y+IkkyegQVSQjH pIjwChRNOYZvxnJYa0/e+gyoQdNsQ2Yim1R7fGc7LsbrufYHOQP0Wd5VTYVayaHU yuNJQr7CHQZHJSl66cdzfjwA8seg5QC1ANZM0dKqVIPekKAVTaG5dc+tMzEFZlAh CjOGefhlE7x1zKxmf39lemx3YRfHm+Ju9V64YF/3wK7sTUhiwyIyf8DL4leT7cz+ byVLIA7XQr1JvnF5nA5z1YJ69oHv1YgAQcrFGFm4CwSCQrTsjwJnm4y57sGnMzf1 LuehJCfpXqkiwzaXNmfFZ/heEQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFITpeP7E xxOHXZA2ryIYQkOSxlqSMB8GA1UdIwQYMBaAFJ8MFSCNfuYugMuXXP5M7Jy/HSdW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMTU3OS8yRDJGNDM3NDE0 RTYxMUVBOTI5QkJDNDVDNEY5QUUwMi9ud3dWSUkxLTVpNkF5NWRjX2t6c25MOGRK MVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL253d1ZJSTEtNWk2QXk1ZGNfa3pzbkw4ZEoxWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MTU3OS8yRDJGNDM3NDE0RTYxMUVBOTI5QkJDNDVDNEY5QUUwMi9ud3dWSUkxLTVp NkF5NWRjX2t6c25MOGRKMVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB/Q6bqajrwxDC5mDOdv2yorQ67uNO0NUT4SvnUo5ufFA0KUh68h7wI MHB2BwqkQv+tp6aTrlSM4ayrzTl9Jk8K8V4DBov0iyWw5T1bOKyafW3OdMSelLtm 2LyeFoaJREjne4Ehxr2f7jAnZU2FVE5J5+wO0Bzim2CP9JxPFdZBmLQaEM59C0HY +nflqNc9vjEylaFhWWmHvPjfEGCkLU2F8xXWO0M/rvdtqwABc8cIlCpMoUlD2HFU Xe5li/TWKHgdXEMQ5d3cYO5I0UqbTwBKIbFKsyKGcAZMn56is/iGsUPofYzMF/Nn Vrf4lCqCB1rvIxkAfzVEz/F1gjF38mZD -----END CERTIFICATE-----Generated at Sat Apr 26 15:26:46 2025 by rpki-client