$ rpki-client -vvf rpki.apnic.net/member_repository/A913CADE/F02AB17CFAE611E7923EA150C4F9AE02/NyWy6X3UXcC3UhwKG7XkBgmwXZY.mft File: NyWy6X3UXcC3UhwKG7XkBgmwXZY.mft (raw, json) Hash identifier: /39FJZyCfHTJOrDvOBA+qdJOP9fW1tUah0zm8HDKFRE= Subject key identifier: A8:81:25:51:00:B7:7F:D5:CF:9F:03:5B:58:51:A0:BC:0D:FD:07:98 Authority key identifier: 37:25:B2:E9:7D:D4:5D:C0:B7:52:1C:0A:1B:B5:E4:06:09:B0:5D:96 Certificate issuer: /CN=A913CADE/serialNumber=3725B2E97DD45DC0B7521C0A1BB5E40609B05D96 Certificate serial: 169F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NyWy6X3UXcC3UhwKG7XkBgmwXZY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913CADE/F02AB17CFAE611E7923EA150C4F9AE02/NyWy6X3UXcC3UhwKG7XkBgmwXZY.mft Manifest number: 1696 Signing time: Thu 24 Apr 2025 16:42:06 +0000 Manifest this update: Thu 24 Apr 2025 16:42:06 +0000 Manifest next update: Thu 01 May 2025 16:42:06 +0000 Files and hashes: 1: NyWy6X3UXcC3UhwKG7XkBgmwXZY.crl (hash: lPt1ruiYXzA6zd/cfrYAfJ8Wsu5Bnx2ynOKzoIV2zBQ=) 2: DDDE13B8FAE811E7A715F157C4F9AE02.roa (hash: ZIFDDGs8pzafe5+UUxAyWx6ARFXkQp6Z5m5nmDElxJA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913CADE/F02AB17CFAE611E7923EA150C4F9AE02/NyWy6X3UXcC3UhwKG7XkBgmwXZY.crl rsync://rpki.apnic.net/member_repository/A913CADE/F02AB17CFAE611E7923EA150C4F9AE02/NyWy6X3UXcC3UhwKG7XkBgmwXZY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NyWy6X3UXcC3UhwKG7XkBgmwXZY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 16:42:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5791 (0x169f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913CADE, serialNumber=3725B2E97DD45DC0B7521C0A1BB5E40609B05D96 Validity Not Before: Apr 24 16:42:06 2025 GMT Not After : May 1 16:42:06 2025 GMT Subject: CN=680a69de-0404 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:3b:05:6e:c8:95:20:c5:02:f0:f7:a2:e6:26: 87:77:c0:25:19:71:57:f4:da:a7:53:3c:f9:f1:4a: e2:a5:70:48:1b:ba:27:4a:8b:43:0a:d5:8c:27:43: fd:80:4b:f5:0e:1c:ec:67:6f:17:24:f8:20:76:e1: b0:61:6d:9a:a8:09:d4:34:11:e6:ed:3b:14:37:b6: ef:59:1a:46:0e:18:70:0d:2b:9e:09:31:5e:f7:9e: 74:40:46:ee:ec:58:9c:43:d8:ab:4c:63:d7:bb:91: 0c:29:e2:dd:39:1e:68:ee:98:11:d7:80:ee:bd:bb: 53:56:65:d2:5c:d9:79:44:70:fb:8b:b7:80:62:37: 93:64:c5:7d:3c:0e:a0:04:63:43:69:7d:ac:29:3a: c2:84:2b:19:cf:1d:dd:c5:9d:c6:bb:07:41:b0:96: 81:0d:24:81:e0:64:57:b8:9c:2a:8c:17:5b:d0:f9: 68:30:2a:eb:d5:ce:13:79:0d:a0:6b:66:68:d0:dd: 3f:e3:23:80:d6:8a:9f:17:6c:4c:f6:24:d7:6c:9b: 28:5a:a0:e2:97:e9:f4:86:1c:32:6e:dc:93:61:7e: 7c:86:1a:39:50:7f:a9:02:f5:9f:36:41:8a:b4:84: 72:e2:80:39:87:30:f3:e2:a8:dc:1e:27:49:3b:66: 3d:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:81:25:51:00:B7:7F:D5:CF:9F:03:5B:58:51:A0:BC:0D:FD:07:98 X509v3 Authority Key Identifier: keyid:37:25:B2:E9:7D:D4:5D:C0:B7:52:1C:0A:1B:B5:E4:06:09:B0:5D:96 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913CADE/F02AB17CFAE611E7923EA150C4F9AE02/NyWy6X3UXcC3UhwKG7XkBgmwXZY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NyWy6X3UXcC3UhwKG7XkBgmwXZY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913CADE/F02AB17CFAE611E7923EA150C4F9AE02/NyWy6X3UXcC3UhwKG7XkBgmwXZY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7a:ff:36:11:42:20:c1:2e:d6:4d:ce:f5:0c:dd:f7:d6:69:b7: 78:3f:08:91:4f:11:8f:23:ac:52:df:4d:22:88:2d:9d:58:bc: 7b:0c:10:48:e2:2c:34:44:c7:62:2b:6f:ce:2b:a1:2a:25:dd: fb:69:ee:cb:86:aa:96:46:3f:27:69:2d:c1:87:65:46:60:1c: 87:9c:2c:bb:6b:20:fc:ce:2f:c8:9c:9c:9f:49:3e:b6:f8:19: d0:7e:b3:c7:7a:db:1b:ae:5c:e4:05:2e:30:15:46:7a:c0:9c: 5e:ec:62:82:51:23:fa:f6:45:d1:fb:e4:e4:45:5d:54:04:f2: 34:7d:ad:06:77:6d:18:e4:9f:91:f3:bf:9a:3e:96:56:6f:d2: c8:ef:fe:3f:a2:c5:b5:a4:7a:89:8a:ab:ff:72:68:d5:2f:89: e3:76:6b:41:b8:dc:e4:f8:1f:35:be:f0:02:ad:a2:43:1d:91: 02:02:3d:1c:8a:a3:a2:7f:66:b0:3e:ea:ca:be:1b:1e:80:4c: e0:bf:3b:a6:e6:c9:f3:ab:b0:4f:45:26:f7:27:7a:a2:98:8a: 56:48:da:d4:c1:44:c0:c2:ad:19:a7:20:fe:3f:db:e1:b2:49: 92:dd:b5:cb:3e:1b:30:24:20:9c:0a:7f:46:59:60:71:45:cb: e1:c4:be:d6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFp8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0NBREUxMTAvBgNVBAUTKDM3MjVCMkU5N0RENDVEQzBCNzUyMUMwQTFCQjVFNDA2 MDlCMDVEOTYwHhcNMjUwNDI0MTY0MjA2WhcNMjUwNTAxMTY0MjA2WjAYMRYwFAYD VQQDEw02ODBhNjlkZS0wNDA0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvjsFbsiVIMUC8Pei5iaHd8AlGXFX9NqnUzz58UripXBIG7onSotDCtWMJ0P9 gEv1DhzsZ28XJPggduGwYW2aqAnUNBHm7TsUN7bvWRpGDhhwDSueCTFe9550QEbu 7FicQ9irTGPXu5EMKeLdOR5o7pgR14DuvbtTVmXSXNl5RHD7i7eAYjeTZMV9PA6g BGNDaX2sKTrChCsZzx3dxZ3GuwdBsJaBDSSB4GRXuJwqjBdb0PloMCrr1c4TeQ2g a2Zo0N0/4yOA1oqfF2xM9iTXbJsoWqDil+n0hhwybtyTYX58hho5UH+pAvWfNkGK tIRy4oA5hzDz4qjcHidJO2Y9XQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKiBJVEA t3/Vz58DW1hRoLwN/QeYMB8GA1UdIwQYMBaAFDclsul91F3At1IcChu15AYJsF2W MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQ0FERS9GMDJBQjE3Q0ZB RTYxMUU3OTIzRUExNTBDNEY5QUUwMi9OeVd5NlgzVVhjQzNVaHdLRzdYa0JnbXdY WlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL055V3k2WDNVWGNDM1Vod0tHN1hrQmdtd1haWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz Q0FERS9GMDJBQjE3Q0ZBRTYxMUU3OTIzRUExNTBDNEY5QUUwMi9OeVd5NlgzVVhj QzNVaHdLRzdYa0JnbXdYWlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB6/zYRQiDBLtZNzvUM3ffWabd4PwiRTxGPI6xS300iiC2dWLx7DBBI 4iw0RMdiK2/OK6EqJd37ae7LhqqWRj8naS3Bh2VGYByHnCy7ayD8zi/InJyfST62 +BnQfrPHetsbrlzkBS4wFUZ6wJxe7GKCUSP69kXR++TkRV1UBPI0fa0Gd20Y5J+R 87+aPpZWb9LI7/4/osW1pHqJiqv/cmjVL4njdmtBuNzk+B81vvACraJDHZECAj0c iqOif2awPurKvhsegEzgvzum5snzq7BPRSb3J3qimIpWSNrUwUTAwq0ZpyD+P9vh skmS3bXLPhswJCCcCn9GWWBxRcvhxL7W -----END CERTIFICATE-----Generated at Sat Apr 26 14:10:36 2025 by rpki-client