$ rpki-client -vvf rpki.apnic.net/member_repository/A913EFAB/E82D06FE057411ECA242C57FC4F9AE02/nyv9fYAM-hPpBIrhALSFFDASb9M.mft File: nyv9fYAM-hPpBIrhALSFFDASb9M.mft (raw, json) Hash identifier: WRNtnvU9TN0aOC8wWCKwUx57t2L/la6SfTZhES+jJ6g= Subject key identifier: 68:7B:FB:ED:58:69:58:C5:54:75:86:DD:33:E1:8A:8C:9B:9F:F1:AB Authority key identifier: 9F:2B:FD:7D:80:0C:FA:13:E9:04:8A:E1:00:B4:85:14:30:12:6F:D3 Certificate issuer: /CN=A913EFAB/serialNumber=9F2BFD7D800CFA13E9048AE100B4851430126FD3 Certificate serial: 050D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nyv9fYAM-hPpBIrhALSFFDASb9M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913EFAB/E82D06FE057411ECA242C57FC4F9AE02/nyv9fYAM-hPpBIrhALSFFDASb9M.mft Manifest number: 0507 Signing time: Thu 24 Apr 2025 23:26:26 +0000 Manifest this update: Thu 24 Apr 2025 23:26:26 +0000 Manifest next update: Thu 01 May 2025 23:26:26 +0000 Files and hashes: 1: nyv9fYAM-hPpBIrhALSFFDASb9M.crl (hash: KoepXw39vRaQq5UhpOMWPvE4a3uRUyX/TEiBmXRdiKU=) 2: 06D647D4057811EC8BCE3783C4F9AE02.roa (hash: grJhcWmzDCOgdxUnDbK2ZLr2jRQYlivgBq7XqkPgbbI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913EFAB/E82D06FE057411ECA242C57FC4F9AE02/nyv9fYAM-hPpBIrhALSFFDASb9M.crl rsync://rpki.apnic.net/member_repository/A913EFAB/E82D06FE057411ECA242C57FC4F9AE02/nyv9fYAM-hPpBIrhALSFFDASb9M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nyv9fYAM-hPpBIrhALSFFDASb9M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 23:26:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1293 (0x50d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913EFAB, serialNumber=9F2BFD7D800CFA13E9048AE100B4851430126FD3 Validity Not Before: Apr 24 23:26:26 2025 GMT Not After : May 1 23:26:26 2025 GMT Subject: CN=680ac8a2-52f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:d1:30:d7:a8:54:58:fe:1f:bc:d0:e2:42:24: 2f:82:98:a2:47:68:6c:11:2a:34:76:e9:f2:b0:57: 70:73:40:dd:45:5b:f3:06:16:6c:fe:78:23:53:ac: 1e:43:9a:2b:77:f6:0b:34:b9:b6:c4:8c:7c:53:8f: 4e:84:2e:73:d8:cf:58:ed:fb:02:70:dc:79:ee:d0: 40:ba:d9:28:c2:36:36:ee:84:3c:66:56:f6:f2:5d: f6:99:51:87:b5:de:c3:51:40:b0:80:0b:62:d8:a2: e4:a8:01:38:6a:83:9e:97:4a:96:0d:ef:f2:a3:7e: e3:b3:61:6d:1f:21:51:d7:1c:43:fb:01:9b:c0:27: ba:dc:c8:58:fd:a2:7e:e2:31:0b:eb:b8:eb:40:6b: 3f:5b:8b:19:92:e6:91:7f:4a:e1:5d:26:17:9d:7d: 96:9e:b5:ef:f5:4b:a4:60:c2:8b:70:0d:b8:00:ce: 30:02:8f:77:00:f4:c1:c7:e5:ca:f8:88:0c:0d:39: 7a:e0:77:b3:be:fe:09:d5:f9:1f:4f:aa:5d:16:b9: 6d:c1:35:42:80:fb:06:19:f7:b8:99:fa:02:50:c8: 0b:8a:71:2e:16:35:04:f3:f7:b0:ed:85:6a:cd:18: 09:ab:2d:fb:53:7b:00:ea:24:b8:bb:17:15:17:59: 47:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:7B:FB:ED:58:69:58:C5:54:75:86:DD:33:E1:8A:8C:9B:9F:F1:AB X509v3 Authority Key Identifier: keyid:9F:2B:FD:7D:80:0C:FA:13:E9:04:8A:E1:00:B4:85:14:30:12:6F:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913EFAB/E82D06FE057411ECA242C57FC4F9AE02/nyv9fYAM-hPpBIrhALSFFDASb9M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nyv9fYAM-hPpBIrhALSFFDASb9M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913EFAB/E82D06FE057411ECA242C57FC4F9AE02/nyv9fYAM-hPpBIrhALSFFDASb9M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2b:88:6f:b4:57:e0:7d:23:39:0b:a3:4d:d4:02:9d:fe:38:98: 1a:0c:3c:3c:82:d8:5a:6a:e6:77:5b:7f:35:ee:0f:09:0c:85: f5:d7:8f:7d:b4:32:d8:fa:66:41:8b:4c:3a:50:ec:3d:2e:43: 6a:e7:13:d5:e5:7b:39:98:68:4d:f0:80:98:ad:66:b4:5a:8e: 74:d1:b8:dd:20:a9:e0:9f:72:f3:ad:24:b4:1a:6e:d7:e7:bb: 2a:08:96:36:bf:54:39:0f:3e:39:29:71:96:fe:2e:96:c5:0e: 59:6b:a6:90:f1:17:9e:31:c1:1d:13:01:d3:67:29:9d:c3:af: 57:c6:05:9e:67:d0:56:de:ae:c2:0c:02:8e:9a:fb:c2:35:86: af:bf:13:5e:52:09:51:64:a0:c4:6b:01:aa:f6:dc:cd:4d:17: 5b:88:ea:b2:36:92:ea:81:e7:50:03:97:a9:8d:c4:f0:84:fb: 24:50:88:28:9c:a7:22:f2:ab:50:3d:2b:c9:a1:a4:7f:c9:4f: 87:95:0c:f2:c3:68:cc:d3:17:67:b9:35:13:54:9b:77:19:b8: 39:47:17:39:ec:5e:52:f1:6a:c1:19:ad:f0:65:b0:e5:76:10: a1:2c:47:05:0f:4d:c3:56:1a:d4:d6:07:3b:6f:b3:30:19:b3: 8c:90:2a:82 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBQ0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0VGQUIxMTAvBgNVBAUTKDlGMkJGRDdEODAwQ0ZBMTNFOTA0OEFFMTAwQjQ4NTE0 MzAxMjZGRDMwHhcNMjUwNDI0MjMyNjI2WhcNMjUwNTAxMjMyNjI2WjAYMRYwFAYD VQQDEw02ODBhYzhhMi01MmYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmdEw16hUWP4fvNDiQiQvgpiiR2hsESo0dunysFdwc0DdRVvzBhZs/ngjU6we Q5ord/YLNLm2xIx8U49OhC5z2M9Y7fsCcNx57tBAutkowjY27oQ8Zlb28l32mVGH td7DUUCwgAti2KLkqAE4aoOel0qWDe/yo37js2FtHyFR1xxD+wGbwCe63MhY/aJ+ 4jEL67jrQGs/W4sZkuaRf0rhXSYXnX2WnrXv9UukYMKLcA24AM4wAo93APTBx+XK +IgMDTl64Hezvv4J1fkfT6pdFrltwTVCgPsGGfe4mfoCUMgLinEuFjUE8/ew7YVq zRgJqy37U3sA6iS4uxcVF1lHRwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGh7++1Y aVjFVHWG3TPhioybn/GrMB8GA1UdIwQYMBaAFJ8r/X2ADPoT6QSK4QC0hRQwEm/T MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRUZBQi9FODJEMDZGRTA1 NzQxMUVDQTI0MkM1N0ZDNEY5QUUwMi9ueXY5ZllBTS1oUHBCSXJoQUxTRkZEQVNi OU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL255djlmWUFNLWhQcEJJcmhBTFNGRkRBU2I5TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RUZBQi9FODJEMDZGRTA1NzQxMUVDQTI0MkM1N0ZDNEY5QUUwMi9ueXY5ZllBTS1o UHBCSXJoQUxTRkZEQVNiOU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAriG+0V+B9IzkLo03UAp3+OJgaDDw8gthaauZ3W3817g8JDIX11499 tDLY+mZBi0w6UOw9LkNq5xPV5Xs5mGhN8ICYrWa0Wo500bjdIKngn3LzrSS0Gm7X 57sqCJY2v1Q5Dz45KXGW/i6WxQ5Za6aQ8ReeMcEdEwHTZymdw69XxgWeZ9BW3q7C DAKOmvvCNYavvxNeUglRZKDEawGq9tzNTRdbiOqyNpLqgedQA5epjcTwhPskUIgo nKci8qtQPSvJoaR/yU+HlQzyw2jM0xdnuTUTVJt3Gbg5Rxc57F5S8WrBGa3wZbDl dhChLEcFD03DVhrU1gc7b7MwGbOMkCqC -----END CERTIFICATE-----Generated at Sat Apr 26 04:21:54 2025 by rpki-client