$ rpki-client -vvf rpki.apnic.net/member_repository/A918779B/7CF59FAA4A7211E983912180C4F9AE02/NW_t_BUS-4gmB18NYmAOQK2Oeu0.mft File: NW_t_BUS-4gmB18NYmAOQK2Oeu0.mft (raw, json) Hash identifier: uhX09YX6HoigEfS9V/mjWpvvq4m0ZpatNMik8vMD0WU= Subject key identifier: D5:92:66:D7:AE:68:57:03:F2:E3:CC:3E:66:FE:9F:9B:63:CD:42:2C Authority key identifier: 35:6F:ED:FC:15:12:FB:88:26:07:5F:0D:62:60:0E:40:AD:8E:7A:ED Certificate issuer: /CN=A918779B/serialNumber=356FEDFC1512FB8826075F0D62600E40AD8E7AED Certificate serial: 06CD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NW_t_BUS-4gmB18NYmAOQK2Oeu0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918779B/7CF59FAA4A7211E983912180C4F9AE02/NW_t_BUS-4gmB18NYmAOQK2Oeu0.mft Manifest number: 16A4 Signing time: Thu 24 Apr 2025 17:27:51 +0000 Manifest this update: Thu 24 Apr 2025 17:27:51 +0000 Manifest next update: Thu 01 May 2025 17:27:51 +0000 Files and hashes: 1: NW_t_BUS-4gmB18NYmAOQK2Oeu0.crl (hash: 2V/n60iV2iWaMvjQW/aPo6x371D49hf2q/cajWk/N4I=) 2: 8C6A656045C211EE9E812B5BC4F9AE02.roa (hash: fwCgeha710zBVc9DVKrvgjPkENsseqZ6o3NwfIiCntM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918779B/7CF59FAA4A7211E983912180C4F9AE02/NW_t_BUS-4gmB18NYmAOQK2Oeu0.crl rsync://rpki.apnic.net/member_repository/A918779B/7CF59FAA4A7211E983912180C4F9AE02/NW_t_BUS-4gmB18NYmAOQK2Oeu0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NW_t_BUS-4gmB18NYmAOQK2Oeu0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 17:27:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1741 (0x6cd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918779B, serialNumber=356FEDFC1512FB8826075F0D62600E40AD8E7AED Validity Not Before: Apr 24 17:27:51 2025 GMT Not After : May 1 17:27:51 2025 GMT Subject: CN=680a7497-5d1f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:dd:21:5a:8b:e7:c4:1c:d7:d7:66:a8:fb:80: a5:aa:b4:ac:24:b7:bd:91:c3:18:a0:34:24:73:1a: 54:3f:dc:32:16:dc:6f:3c:4e:09:c3:18:2f:dc:5d: 9c:59:bc:3f:6d:55:15:d4:dd:eb:d8:c8:ee:b0:a2: ca:2b:fa:22:61:a0:68:d2:66:d8:1a:16:50:78:ab: 9e:0a:e4:02:8c:42:a4:a4:bc:d6:e5:1e:23:f9:47: 5c:f4:46:e0:8b:6b:e5:cc:3d:4a:40:3c:2f:0a:7e: 47:12:b9:20:d2:1b:98:80:d5:4d:ac:56:2d:09:ed: 18:09:65:f4:13:46:a9:49:f3:87:08:27:2b:f2:73: 31:6a:2a:ba:a6:85:2d:f4:32:49:eb:53:61:d6:22: 27:5f:6b:66:46:9a:19:bc:61:bc:95:6a:cb:83:8f: 0c:8a:e5:59:21:1b:a5:fe:c5:2f:ca:22:94:67:dc: 50:23:a7:b1:4a:94:46:b0:2a:c5:9b:a0:82:22:c9: 7a:25:ec:1e:55:87:85:09:1c:b9:2c:05:14:cc:0d: 4c:b6:23:47:f8:23:60:e2:4a:ef:2e:7c:56:3b:a8: 90:82:b6:60:3c:9d:fb:0d:2c:f6:df:6f:a5:67:70: 5d:29:02:f9:dc:8f:3e:cf:d6:e5:f8:59:22:03:b1: f5:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:92:66:D7:AE:68:57:03:F2:E3:CC:3E:66:FE:9F:9B:63:CD:42:2C X509v3 Authority Key Identifier: keyid:35:6F:ED:FC:15:12:FB:88:26:07:5F:0D:62:60:0E:40:AD:8E:7A:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918779B/7CF59FAA4A7211E983912180C4F9AE02/NW_t_BUS-4gmB18NYmAOQK2Oeu0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NW_t_BUS-4gmB18NYmAOQK2Oeu0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918779B/7CF59FAA4A7211E983912180C4F9AE02/NW_t_BUS-4gmB18NYmAOQK2Oeu0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 39:f1:fc:f1:b9:89:39:1f:46:c1:d4:16:f8:1e:d9:50:5b:3f: 3c:73:d3:52:7d:57:bc:4d:1b:36:53:69:66:b7:08:f3:66:1d: 13:5a:79:02:01:82:ce:03:61:89:0d:9c:90:63:32:1f:85:54: d2:58:cf:ca:e7:48:17:d7:85:15:97:88:c1:00:b4:96:4b:30: 4d:74:80:db:b6:70:8d:65:be:5e:6e:e2:b2:0a:6b:2d:5c:35: ea:e2:f3:ec:8a:23:16:30:ec:0e:d8:b4:a9:b4:ab:44:f7:f5: 99:64:56:d0:d5:4d:2c:8c:de:1f:ad:37:d1:5a:b1:cf:21:1e: 0d:e8:46:c6:ff:56:13:5e:b0:d0:94:ca:20:52:2e:92:08:b3: 00:f0:61:6b:20:be:b6:dc:5c:53:c7:ea:28:cc:ec:60:55:b0: ad:74:3d:7d:07:32:fb:0c:a2:f8:14:1c:43:77:9a:1a:1f:10: 28:88:3b:99:bd:cc:be:f2:65:e7:06:c0:3e:af:68:dd:ad:48: 55:b2:13:ae:c2:8b:ef:79:ea:cd:fb:ea:8b:26:04:ac:66:f3: a5:74:88:27:2e:7c:e6:aa:b0:91:52:7e:92:92:80:b0:91:70: d6:b9:88:b5:9a:83:fb:bf:7b:83:43:1d:95:5c:2c:d5:dc:44: 09:38:4e:bc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBs0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODc3OUIxMTAvBgNVBAUTKDM1NkZFREZDMTUxMkZCODgyNjA3NUYwRDYyNjAwRTQw QUQ4RTdBRUQwHhcNMjUwNDI0MTcyNzUxWhcNMjUwNTAxMTcyNzUxWjAYMRYwFAYD VQQDEw02ODBhNzQ5Ny01ZDFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxN0hWovnxBzX12ao+4ClqrSsJLe9kcMYoDQkcxpUP9wyFtxvPE4Jwxgv3F2c Wbw/bVUV1N3r2MjusKLKK/oiYaBo0mbYGhZQeKueCuQCjEKkpLzW5R4j+Udc9Ebg i2vlzD1KQDwvCn5HErkg0huYgNVNrFYtCe0YCWX0E0apSfOHCCcr8nMxaiq6poUt 9DJJ61Nh1iInX2tmRpoZvGG8lWrLg48MiuVZIRul/sUvyiKUZ9xQI6exSpRGsCrF m6CCIsl6JeweVYeFCRy5LAUUzA1MtiNH+CNg4krvLnxWO6iQgrZgPJ37DSz232+l Z3BdKQL53I8+z9bl+FkiA7H10wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNWSZteu aFcD8uPMPmb+n5tjzUIsMB8GA1UdIwQYMBaAFDVv7fwVEvuIJgdfDWJgDkCtjnrt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4Nzc5Qi83Q0Y1OUZBQTRB NzIxMUU5ODM5MTIxODBDNEY5QUUwMi9OV190X0JVUy00Z21CMThOWW1BT1FLMk9l dTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05XX3RfQlVTLTRnbUIxOE5ZbUFPUUsyT2V1MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 Nzc5Qi83Q0Y1OUZBQTRBNzIxMUU5ODM5MTIxODBDNEY5QUUwMi9OV190X0JVUy00 Z21CMThOWW1BT1FLMk9ldTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA58fzxuYk5H0bB1Bb4HtlQWz88c9NSfVe8TRs2U2lmtwjzZh0TWnkC AYLOA2GJDZyQYzIfhVTSWM/K50gX14UVl4jBALSWSzBNdIDbtnCNZb5ebuKyCmst XDXq4vPsiiMWMOwO2LSptKtE9/WZZFbQ1U0sjN4frTfRWrHPIR4N6EbG/1YTXrDQ lMogUi6SCLMA8GFrIL623FxTx+oozOxgVbCtdD19BzL7DKL4FBxDd5oaHxAoiDuZ vcy+8mXnBsA+r2jdrUhVshOuwovveerN++qLJgSsZvOldIgnLnzmqrCRUn6SkoCw kXDWuYi1moP7v3uDQx2VXCzV3EQJOE68 -----END CERTIFICATE-----Generated at Sat Apr 26 08:33:37 2025 by rpki-client