$ rpki-client -vvf rpki.apnic.net/member_repository/A9135F07/3737A2BCC35A11EF8314C43FC4F9AE02/Nzj_PFuvGRGC66FLeMhIpa76TKo.mft File: Nzj_PFuvGRGC66FLeMhIpa76TKo.mft (raw, json) Hash identifier: +TPymqF1HI+uw+edNmGiiK88MkqORq73rdg2wOq2gWs= Subject key identifier: 15:1B:08:53:3C:29:34:89:A1:A4:7F:B2:22:FC:BC:25:73:99:1F:3B Authority key identifier: 37:38:FF:3C:5B:AF:19:11:82:EB:A1:4B:78:C8:48:A5:AE:FA:4C:AA Certificate issuer: /CN=A9135F07/serialNumber=3738FF3C5BAF191182EBA14B78C848A5AEFA4CAA Certificate serial: 43 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nzj_PFuvGRGC66FLeMhIpa76TKo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9135F07/3737A2BCC35A11EF8314C43FC4F9AE02/Nzj_PFuvGRGC66FLeMhIpa76TKo.mft Manifest number: 43 Signing time: Tue 29 Apr 2025 07:24:33 +0000 Manifest this update: Tue 29 Apr 2025 07:24:32 +0000 Manifest next update: Tue 06 May 2025 07:24:32 +0000 Files and hashes: 1: Nzj_PFuvGRGC66FLeMhIpa76TKo.crl (hash: qq0YcmuVxm9ktz5go4vcLCJiQPtMw3Lj98v1wsRTmz0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9135F07/3737A2BCC35A11EF8314C43FC4F9AE02/Nzj_PFuvGRGC66FLeMhIpa76TKo.crl rsync://rpki.apnic.net/member_repository/A9135F07/3737A2BCC35A11EF8314C43FC4F9AE02/Nzj_PFuvGRGC66FLeMhIpa76TKo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nzj_PFuvGRGC66FLeMhIpa76TKo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 06 May 2025 07:24:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67 (0x43) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9135F07, serialNumber=3738FF3C5BAF191182EBA14B78C848A5AEFA4CAA Validity Not Before: Apr 29 07:24:32 2025 GMT Not After : May 6 07:24:32 2025 GMT Subject: CN=68107eb1-0090 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:e7:57:1d:cf:36:ab:02:73:33:9f:78:cd:31: 05:a6:eb:6a:3d:bd:a8:08:94:fd:83:93:b8:90:79: 14:84:29:43:d1:cb:19:82:01:69:37:0b:45:d8:7b: ef:f4:4a:30:44:87:81:f6:ed:b8:e9:3d:c4:be:85: 17:a8:49:86:76:30:61:25:61:cf:c0:19:dd:f4:6c: e6:a1:09:a3:8b:7d:03:87:6a:0c:a6:9e:7e:62:92: 3f:29:cf:de:bc:6a:ae:5f:db:1f:3f:80:c3:70:ba: f3:43:0c:8e:62:fd:1a:05:65:ce:25:05:1c:9d:e6: 00:b6:06:e7:47:80:9b:61:a8:a8:9f:55:4f:6b:5b: 73:40:d9:a4:ae:42:04:ac:26:f9:07:15:aa:d0:9b: 63:5d:30:6b:57:6b:53:2f:85:bb:ee:1a:44:99:48: 4a:a5:1a:f8:14:f3:4a:88:73:6d:20:a9:39:6a:4b: b3:70:a9:ad:b0:ff:7c:70:a8:63:a9:22:94:6c:ed: 5f:51:df:eb:3f:e7:53:1d:04:59:31:1e:e5:ef:2b: ba:22:30:21:6d:29:90:09:f6:6d:7d:ca:a2:c3:d8: 21:be:a4:10:e6:3e:20:0e:ef:c8:51:4c:1d:f7:91: dd:5e:4c:92:a4:1b:f0:96:df:44:d5:0e:56:d9:d7: 8d:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:1B:08:53:3C:29:34:89:A1:A4:7F:B2:22:FC:BC:25:73:99:1F:3B X509v3 Authority Key Identifier: keyid:37:38:FF:3C:5B:AF:19:11:82:EB:A1:4B:78:C8:48:A5:AE:FA:4C:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9135F07/3737A2BCC35A11EF8314C43FC4F9AE02/Nzj_PFuvGRGC66FLeMhIpa76TKo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nzj_PFuvGRGC66FLeMhIpa76TKo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9135F07/3737A2BCC35A11EF8314C43FC4F9AE02/Nzj_PFuvGRGC66FLeMhIpa76TKo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 26:6f:da:7e:13:f7:13:af:1e:87:a5:39:f1:eb:48:d6:12:0b: e9:3e:bb:30:5a:d4:54:2f:56:a3:c6:47:a8:b4:dd:7c:76:77: 9e:d6:cc:ab:8f:0d:15:05:5b:0f:26:1a:b8:a9:8d:0b:a9:78: 62:46:67:d9:08:81:04:17:69:a0:1c:19:3b:98:ca:14:f8:a1: ec:e0:91:02:7e:72:85:2f:53:bb:f4:e5:a2:19:bd:65:ff:75: 49:a2:32:c3:86:64:e1:1c:f1:26:d3:6f:c8:ef:49:0a:47:78: 38:d2:ce:1d:84:09:42:e1:d0:eb:44:66:00:8c:0d:8e:08:88: 9b:cc:37:e6:7a:20:3e:43:ee:8d:32:5b:62:be:d7:65:b3:77: 79:de:66:a2:cf:fb:7d:51:a9:3c:1b:92:2b:39:47:a0:1c:53: 92:64:ec:54:7c:5b:3f:b2:37:ba:76:7d:87:85:be:0e:b9:b1: e1:c8:f6:98:ea:80:df:fe:91:43:d0:d5:f2:ba:9e:69:0d:e5: 81:48:cd:9b:75:60:b0:9c:e6:b6:f4:42:69:06:b5:36:ad:bf: 03:4f:a5:f9:95:6d:56:c6:41:10:bc:80:c9:15:b6:de:4b:c8: fb:3d:b7:67:96:69:5e:f2:3a:f4:a5:ed:03:f3:4a:a8:7a:ca: 47:ca:2c:a4 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBQzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz NUYwNzExMC8GA1UEBRMoMzczOEZGM0M1QkFGMTkxMTgyRUJBMTRCNzhDODQ4QTVB RUZBNENBQTAeFw0yNTA0MjkwNzI0MzJaFw0yNTA1MDYwNzI0MzJaMBgxFjAUBgNV BAMTDTY4MTA3ZWIxLTAwOTAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCq51cdzzarAnMzn3jNMQWm62o9vagIlP2Dk7iQeRSEKUPRyxmCAWk3C0XYe+/0 SjBEh4H27bjpPcS+hReoSYZ2MGElYc/AGd30bOahCaOLfQOHagymnn5ikj8pz968 aq5f2x8/gMNwuvNDDI5i/RoFZc4lBRyd5gC2BudHgJthqKifVU9rW3NA2aSuQgSs JvkHFarQm2NdMGtXa1MvhbvuGkSZSEqlGvgU80qIc20gqTlqS7Nwqa2w/3xwqGOp IpRs7V9R3+s/51MdBFkxHuXvK7oiMCFtKZAJ9m19yqLD2CG+pBDmPiAO78hRTB33 kd1eTJKkG/CW30TVDlbZ1433AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUFRsIUzwp NImhpH+yIvy8JXOZHzswHwYDVR0jBBgwFoAUNzj/PFuvGRGC66FLeMhIpa76TKow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM1RjA3LzM3MzdBMkJDQzM1 QTExRUY4MzE0QzQzRkM0RjlBRTAyL056al9QRnV2R1JHQzY2RkxlTWhJcGE3NlRL by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvTnpqX1BGdXZHUkdDNjZGTGVNaElwYTc2VEtvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM1 RjA3LzM3MzdBMkJDQzM1QTExRUY4MzE0QzQzRkM0RjlBRTAyL056al9QRnV2R1JH QzY2RkxlTWhJcGE3NlRLby5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBACZv2n4T9xOvHoelOfHrSNYSC+k+uzBa1FQvVqPGR6i03Xx2d57WzKuP DRUFWw8mGripjQupeGJGZ9kIgQQXaaAcGTuYyhT4oezgkQJ+coUvU7v05aIZvWX/ dUmiMsOGZOEc8SbTb8jvSQpHeDjSzh2ECULh0OtEZgCMDY4IiJvMN+Z6ID5D7o0y W2K+12Wzd3neZqLP+31RqTwbkis5R6AcU5Jk7FR8Wz+yN7p2fYeFvg65seHI9pjq gN/+kUPQ1fK6nmkN5YFIzZt1YLCc5rb0QmkGtTatvwNPpfmVbVbGQRC8gMkVtt5L yPs9t2eWaV7yOvSl7QPzSqh6ykfKLKQ= -----END CERTIFICATE-----Generated at Thu May 1 05:04:19 2025 by rpki-client