$ rpki-client -vvf rpki.apnic.net/member_repository/A913CADE/F02AB17CFAE611E7923EA150C4F9AE02/NyWy6X3UXcC3UhwKG7XkBgmwXZY.mft File: NyWy6X3UXcC3UhwKG7XkBgmwXZY.mft (raw, json) Hash identifier: E/eGY+t+bF/uUVNE8Hy1Bln3hnajslLtflUTTROkohA= Subject key identifier: 1D:CC:B4:E9:2C:E7:3A:34:86:DE:AE:62:2D:E7:88:79:25:8F:1C:B7 Authority key identifier: 37:25:B2:E9:7D:D4:5D:C0:B7:52:1C:0A:1B:B5:E4:06:09:B0:5D:96 Certificate issuer: /CN=A913CADE/serialNumber=3725B2E97DD45DC0B7521C0A1BB5E40609B05D96 Certificate serial: 16BB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NyWy6X3UXcC3UhwKG7XkBgmwXZY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913CADE/F02AB17CFAE611E7923EA150C4F9AE02/NyWy6X3UXcC3UhwKG7XkBgmwXZY.mft Manifest number: 16B2 Signing time: Wed 18 Jun 2025 16:40:15 +0000 Manifest this update: Wed 18 Jun 2025 16:40:14 +0000 Manifest next update: Wed 25 Jun 2025 16:40:14 +0000 Files and hashes: 1: NyWy6X3UXcC3UhwKG7XkBgmwXZY.crl (hash: U7rZKvBpExr83bBvBBoXtTFLwOxXZs9gTT9V3dxUfHo=) 2: DDDE13B8FAE811E7A715F157C4F9AE02.roa (hash: ZIFDDGs8pzafe5+UUxAyWx6ARFXkQp6Z5m5nmDElxJA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913CADE/F02AB17CFAE611E7923EA150C4F9AE02/NyWy6X3UXcC3UhwKG7XkBgmwXZY.crl rsync://rpki.apnic.net/member_repository/A913CADE/F02AB17CFAE611E7923EA150C4F9AE02/NyWy6X3UXcC3UhwKG7XkBgmwXZY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NyWy6X3UXcC3UhwKG7XkBgmwXZY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 25 Jun 2025 16:40:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5819 (0x16bb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913CADE, serialNumber=3725B2E97DD45DC0B7521C0A1BB5E40609B05D96 Validity Not Before: Jun 18 16:40:14 2025 GMT Not After : Jun 25 16:40:14 2025 GMT Subject: CN=6852ebee-5329 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:5b:85:e9:61:28:12:f0:52:e5:15:4d:c1:9c: bf:a0:81:ff:71:8c:89:75:4d:cc:03:e3:d5:15:70: 29:8f:da:2a:81:76:32:58:13:25:20:40:35:53:e7: ba:c1:31:af:c2:a2:62:e7:23:11:51:b7:77:a4:44: f5:f2:c4:f1:6c:4b:58:d8:66:ec:98:a8:6f:08:14: 3a:46:2c:9a:d4:c4:c1:4b:34:e2:98:02:75:81:7b: 26:ac:e8:99:04:73:19:52:28:8a:1f:11:3b:c0:0c: 52:11:9d:6c:f7:0f:8f:f9:df:98:a1:08:d7:61:bd: 0c:91:76:c4:96:6c:bb:98:9e:99:83:2b:b5:f6:32: 2e:10:56:9f:57:de:70:78:ad:24:b8:07:e5:f0:d1: b5:fb:a4:43:0b:04:18:6f:cd:f2:31:a5:aa:b2:19: b5:ea:78:19:39:3d:d2:48:3c:40:b1:88:2e:ad:19: c9:d0:50:82:bf:f8:9e:a9:4c:db:6f:27:97:8a:24: ae:77:d5:f4:91:81:a6:78:78:a3:9a:bc:01:75:ea: 43:d5:39:33:ce:42:b5:59:29:e0:2d:d4:80:e8:8d: e5:e2:32:61:d3:53:37:70:36:4b:c5:96:dc:7b:b4: d5:b1:8a:9e:f8:b6:4a:34:6d:ec:c5:37:39:a4:69: 2a:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:CC:B4:E9:2C:E7:3A:34:86:DE:AE:62:2D:E7:88:79:25:8F:1C:B7 X509v3 Authority Key Identifier: keyid:37:25:B2:E9:7D:D4:5D:C0:B7:52:1C:0A:1B:B5:E4:06:09:B0:5D:96 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913CADE/F02AB17CFAE611E7923EA150C4F9AE02/NyWy6X3UXcC3UhwKG7XkBgmwXZY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NyWy6X3UXcC3UhwKG7XkBgmwXZY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913CADE/F02AB17CFAE611E7923EA150C4F9AE02/NyWy6X3UXcC3UhwKG7XkBgmwXZY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 29:d8:f4:94:3a:c7:9f:40:88:a5:5a:d1:08:97:9a:bd:77:34: e4:d9:68:e7:b5:56:60:db:f5:2d:61:16:2f:97:af:ae:be:e0: a0:2b:11:05:54:9a:34:38:3d:43:6b:f0:46:1d:8b:76:12:ee: 8e:e1:b8:3f:d3:48:b8:be:51:8b:66:9e:a5:ba:46:31:b2:b1: 61:66:4c:e9:3e:87:46:ae:d5:b2:12:0d:8b:da:c1:46:cf:a4: 30:2c:b7:d9:49:f0:78:b9:9d:1b:9f:85:9f:4e:f4:2e:ed:38: 43:54:df:9c:13:c8:9d:60:0d:7b:e2:88:a3:b1:84:63:3f:d6: 45:c6:47:da:85:f5:f7:c6:65:06:78:d4:90:d6:24:ef:57:c3: 1e:e0:a5:33:92:09:ee:57:86:13:b6:17:16:5b:47:f0:47:5d: 8f:a8:e6:64:ca:3f:c5:db:fe:1c:61:bc:f3:46:7e:2b:01:6c: 41:03:c7:95:82:2e:23:57:d5:2b:14:2c:73:3d:1f:14:fe:89: 4c:65:a3:ac:98:e5:26:24:e5:75:97:ee:e5:6e:33:1d:8f:41: ef:67:ce:48:9b:18:26:a9:5c:c3:58:9b:9c:1a:2d:c5:ff:88: 42:cd:d0:6b:28:8a:a3:e6:ae:e0:65:fc:37:2c:77:bc:b7:67: bf:ef:08:63 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFrswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0NBREUxMTAvBgNVBAUTKDM3MjVCMkU5N0RENDVEQzBCNzUyMUMwQTFCQjVFNDA2 MDlCMDVEOTYwHhcNMjUwNjE4MTY0MDE0WhcNMjUwNjI1MTY0MDE0WjAYMRYwFAYD VQQDEw02ODUyZWJlZS01MzI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5luF6WEoEvBS5RVNwZy/oIH/cYyJdU3MA+PVFXApj9oqgXYyWBMlIEA1U+e6 wTGvwqJi5yMRUbd3pET18sTxbEtY2GbsmKhvCBQ6Riya1MTBSzTimAJ1gXsmrOiZ BHMZUiiKHxE7wAxSEZ1s9w+P+d+YoQjXYb0MkXbElmy7mJ6Zgyu19jIuEFafV95w eK0kuAfl8NG1+6RDCwQYb83yMaWqshm16ngZOT3SSDxAsYgurRnJ0FCCv/ieqUzb byeXiiSud9X0kYGmeHijmrwBdepD1TkzzkK1WSngLdSA6I3l4jJh01M3cDZLxZbc e7TVsYqe+LZKNG3sxTc5pGkqIQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB3MtOks 5zo0ht6uYi3niHkljxy3MB8GA1UdIwQYMBaAFDclsul91F3At1IcChu15AYJsF2W MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQ0FERS9GMDJBQjE3Q0ZB RTYxMUU3OTIzRUExNTBDNEY5QUUwMi9OeVd5NlgzVVhjQzNVaHdLRzdYa0JnbXdY WlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL055V3k2WDNVWGNDM1Vod0tHN1hrQmdtd1haWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz Q0FERS9GMDJBQjE3Q0ZBRTYxMUU3OTIzRUExNTBDNEY5QUUwMi9OeVd5NlgzVVhj QzNVaHdLRzdYa0JnbXdYWlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAp2PSUOsefQIilWtEIl5q9dzTk2WjntVZg2/UtYRYvl6+uvuCgKxEF VJo0OD1Da/BGHYt2Eu6O4bg/00i4vlGLZp6lukYxsrFhZkzpPodGrtWyEg2L2sFG z6QwLLfZSfB4uZ0bn4WfTvQu7ThDVN+cE8idYA174oijsYRjP9ZFxkfahfX3xmUG eNSQ1iTvV8Me4KUzkgnuV4YTthcWW0fwR12PqOZkyj/F2/4cYbzzRn4rAWxBA8eV gi4jV9UrFCxzPR8U/olMZaOsmOUmJOV1l+7lbjMdj0HvZ85ImxgmqVzDWJucGi3F /4hCzdBrKIqj5q7gZfw3LHe8t2e/7whj -----END CERTIFICATE-----Generated at Thu Jun 19 21:33:34 2025 by rpki-client