$ rpki-client -vvf rpki.apnic.net/member_repository/A919819A/63EA20921D9E11E2ADB73F8E08B02CD2/NYOZxzbvBV1dWSyrGQFv44FvZgg.mft File: NYOZxzbvBV1dWSyrGQFv44FvZgg.mft (raw, json) Hash identifier: dH50SFtCWhZUv4rVwjV2NgYqrFeSH+cadKVQdWClK3s= Subject key identifier: 2A:2F:FC:05:09:65:B4:89:80:CB:1B:06:DD:68:2D:5A:C5:10:17:F8 Authority key identifier: 35:83:99:C7:36:EF:05:5D:5D:59:2C:AB:19:01:6F:E3:81:6F:66:08 Certificate issuer: /CN=A919819A/serialNumber=358399C736EF055D5D592CAB19016FE3816F6608 Certificate serial: 3499 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NYOZxzbvBV1dWSyrGQFv44FvZgg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919819A/63EA20921D9E11E2ADB73F8E08B02CD2/NYOZxzbvBV1dWSyrGQFv44FvZgg.mft Manifest number: 348C Signing time: Sun 04 May 2025 14:59:30 +0000 Manifest this update: Sun 04 May 2025 14:59:29 +0000 Manifest next update: Sun 11 May 2025 14:59:29 +0000 Files and hashes: 1: NYOZxzbvBV1dWSyrGQFv44FvZgg.crl (hash: zKZdekew5r1ezdCwUMequ90kzpwKPLT6kVQqnlfqCkM=) 2: 73462B74643C11EB9E7DF918C4F9AE02.roa (hash: OiW89qQFovmBoY5voLYQMPJS/gYyS8nvSRtkPJR5YIU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919819A/63EA20921D9E11E2ADB73F8E08B02CD2/NYOZxzbvBV1dWSyrGQFv44FvZgg.crl rsync://rpki.apnic.net/member_repository/A919819A/63EA20921D9E11E2ADB73F8E08B02CD2/NYOZxzbvBV1dWSyrGQFv44FvZgg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NYOZxzbvBV1dWSyrGQFv44FvZgg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 11 May 2025 14:59:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13465 (0x3499) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919819A, serialNumber=358399C736EF055D5D592CAB19016FE3816F6608 Validity Not Before: May 4 14:59:29 2025 GMT Not After : May 11 14:59:29 2025 GMT Subject: CN=681780d1-3ad6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:36:1f:dd:fc:3f:fe:e5:73:91:8b:2c:59:f1: be:c4:0d:d2:fe:2e:43:04:a8:72:c2:1f:d6:6c:5f: 8a:ce:61:2f:55:12:5f:07:40:f9:5f:85:de:60:87: d1:bd:8b:4c:84:02:e4:43:d1:c7:ad:09:9d:f7:3a: b5:6e:21:1b:22:83:8c:0d:ed:5a:01:a8:c5:d8:9f: ae:72:ee:24:c8:2f:ff:41:4e:f4:57:b4:56:d2:ed: db:0f:06:b0:9b:a2:af:33:b0:01:31:a5:83:d6:e1: f2:db:78:f9:21:bd:b9:82:b6:b2:da:64:ce:d3:64: 5c:fd:cd:80:45:eb:a9:b5:92:bd:43:9e:92:f2:8f: 39:12:0b:01:2c:06:93:3f:a1:3c:50:8a:e6:45:c1: d9:a2:0d:75:50:7e:27:ee:7c:02:cd:dd:79:a0:cb: 58:e9:09:ec:61:0d:42:c1:fa:6e:e6:c3:a9:77:90: f9:2d:b9:14:97:c8:88:cc:c1:37:b7:68:26:1c:e2: fe:ef:be:40:3a:4e:c7:81:b1:fb:e5:18:8f:25:ac: a0:7c:42:18:3f:ef:2a:1d:de:29:14:ab:43:68:4a: ff:27:28:cb:65:9f:a4:d9:e5:a3:5a:42:de:22:29: d2:64:dd:0d:70:ff:86:b8:3b:16:6a:be:48:da:dd: f8:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:2F:FC:05:09:65:B4:89:80:CB:1B:06:DD:68:2D:5A:C5:10:17:F8 X509v3 Authority Key Identifier: keyid:35:83:99:C7:36:EF:05:5D:5D:59:2C:AB:19:01:6F:E3:81:6F:66:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919819A/63EA20921D9E11E2ADB73F8E08B02CD2/NYOZxzbvBV1dWSyrGQFv44FvZgg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NYOZxzbvBV1dWSyrGQFv44FvZgg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919819A/63EA20921D9E11E2ADB73F8E08B02CD2/NYOZxzbvBV1dWSyrGQFv44FvZgg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0b:56:70:44:fd:c8:0b:be:0a:5a:16:b8:1d:c1:a9:69:e1:88: 35:4b:41:9b:1b:8b:40:c8:83:ea:b3:28:55:1a:76:a1:d6:2b: 6c:42:46:3c:49:1f:3f:b3:67:3c:ed:05:c3:78:59:91:a5:80: 7c:09:b1:7e:b1:71:b5:55:19:7e:66:b4:a7:02:98:84:89:f1: 85:09:71:8e:7c:1e:59:2e:3f:09:98:8d:61:bf:df:ed:3c:f7: a6:9b:15:0b:2c:d7:a7:1f:2d:6e:9e:1b:a3:cc:3a:b2:67:04: 78:1f:75:ad:27:46:11:de:d6:bb:7f:28:d4:af:7a:3c:96:24: 41:a2:0d:92:94:f2:92:a6:31:cd:bc:f0:3b:82:ea:9f:ec:b7: ca:54:7d:53:dc:50:a5:b1:3e:e0:a7:91:cb:54:bb:21:e1:f0: ba:6b:a8:6c:18:3e:b9:f2:85:df:a3:1d:c7:a6:ae:df:79:9d: c3:8f:99:4d:e2:27:07:df:b6:90:cb:8a:42:dd:f4:23:59:94: 43:02:43:86:34:57:82:9f:40:53:35:04:fb:fc:84:08:26:94: 61:83:14:e8:fc:4c:5f:d0:34:0e:c2:5a:20:bd:54:6a:14:90: 0f:32:f1:41:3a:22:6a:92:60:ea:13:db:5f:b6:26:ac:68:74: ec:41:b6:7b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNJkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTgxOUExMTAvBgNVBAUTKDM1ODM5OUM3MzZFRjA1NUQ1RDU5MkNBQjE5MDE2RkUz ODE2RjY2MDgwHhcNMjUwNTA0MTQ1OTI5WhcNMjUwNTExMTQ1OTI5WjAYMRYwFAYD VQQDEw02ODE3ODBkMS0zYWQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxDYf3fw//uVzkYssWfG+xA3S/i5DBKhywh/WbF+KzmEvVRJfB0D5X4XeYIfR vYtMhALkQ9HHrQmd9zq1biEbIoOMDe1aAajF2J+ucu4kyC//QU70V7RW0u3bDwaw m6KvM7ABMaWD1uHy23j5Ib25gray2mTO02Rc/c2AReuptZK9Q56S8o85EgsBLAaT P6E8UIrmRcHZog11UH4n7nwCzd15oMtY6QnsYQ1Cwfpu5sOpd5D5LbkUl8iIzME3 t2gmHOL+775AOk7HgbH75RiPJaygfEIYP+8qHd4pFKtDaEr/JyjLZZ+k2eWjWkLe IinSZN0NcP+GuDsWar5I2t34JwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCov/AUJ ZbSJgMsbBt1oLVrFEBf4MB8GA1UdIwQYMBaAFDWDmcc27wVdXVksqxkBb+OBb2YI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5ODE5QS82M0VBMjA5MjFE OUUxMUUyQURCNzNGOEUwOEIwMkNEMi9OWU9aeHpidkJWMWRXU3lyR1FGdjQ0RnZa Z2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05ZT1p4emJ2QlYxZFdTeXJHUUZ2NDRGdlpnZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 ODE5QS82M0VBMjA5MjFEOUUxMUUyQURCNzNGOEUwOEIwMkNEMi9OWU9aeHpidkJW MWRXU3lyR1FGdjQ0RnZaZ2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQALVnBE/cgLvgpaFrgdwalp4Yg1S0GbG4tAyIPqsyhVGnah1itsQkY8 SR8/s2c87QXDeFmRpYB8CbF+sXG1VRl+ZrSnApiEifGFCXGOfB5ZLj8JmI1hv9/t PPemmxULLNenHy1unhujzDqyZwR4H3WtJ0YR3ta7fyjUr3o8liRBog2SlPKSpjHN vPA7guqf7LfKVH1T3FClsT7gp5HLVLsh4fC6a6hsGD658oXfox3Hpq7feZ3Dj5lN 4icH37aQy4pC3fQjWZRDAkOGNFeCn0BTNQT7/IQIJpRhgxTo/Exf0DQOwlogvVRq FJAPMvFBOiJqkmDqE9tftiasaHTsQbZ7 -----END CERTIFICATE-----Generated at Sun May 4 21:11:46 2025 by rpki-client