$ rpki-client -vvf rpki.apnic.net/member_repository/A91BBBA5/E6484ACE9B2D11E8B465D80FC4F9AE02/NZYOHhaeA_Rvr5H04_8TUUamMTo.mft File: NZYOHhaeA_Rvr5H04_8TUUamMTo.mft (raw, json) Hash identifier: aFdIVB5KTbHf5IPbCg8GVS61DDEMGlVPNG5soiODXyk= Subject key identifier: A8:C0:4D:F6:0F:6B:2B:D3:E7:20:A0:4F:BB:26:65:F0:1D:A7:37:A3 Authority key identifier: 35:96:0E:1E:16:9E:03:F4:6F:AF:91:F4:E3:FF:13:51:46:A6:31:3A Certificate issuer: /CN=A91BBBA5/serialNumber=35960E1E169E03F46FAF91F4E3FF135146A6313A Certificate serial: 139B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NZYOHhaeA_Rvr5H04_8TUUamMTo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BBBA5/E6484ACE9B2D11E8B465D80FC4F9AE02/NZYOHhaeA_Rvr5H04_8TUUamMTo.mft Manifest number: 1394 Signing time: Fri 08 Aug 2025 17:08:28 +0000 Manifest this update: Fri 08 Aug 2025 17:08:28 +0000 Manifest next update: Fri 15 Aug 2025 17:08:28 +0000 Files and hashes: 1: NZYOHhaeA_Rvr5H04_8TUUamMTo.crl (hash: LYZ4xxHxgPgABijWjMu822NN98Yx3vGushVvdBoxAe4=) 2: 21333DA69B2E11E8908CC50FC4F9AE02.roa (hash: +1SNSIFs+P7lOAKW1zIJPA5+xtDNMIC4L/Fb0Zo2lHo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BBBA5/E6484ACE9B2D11E8B465D80FC4F9AE02/NZYOHhaeA_Rvr5H04_8TUUamMTo.crl rsync://rpki.apnic.net/member_repository/A91BBBA5/E6484ACE9B2D11E8B465D80FC4F9AE02/NZYOHhaeA_Rvr5H04_8TUUamMTo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NZYOHhaeA_Rvr5H04_8TUUamMTo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5019 (0x139b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BBBA5, serialNumber=35960E1E169E03F46FAF91F4E3FF135146A6313A Validity Not Before: Aug 8 17:08:28 2025 GMT Not After : Aug 15 17:08:28 2025 GMT Subject: CN=68962f0c-0a1c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:2a:8f:50:9d:29:f0:bf:e5:91:6c:a9:c9:cb: 89:65:00:69:07:1a:b5:5a:5b:00:fd:e3:a2:0b:ea: 38:c4:cc:20:90:08:8f:15:97:37:00:8c:36:03:80: 3f:43:a5:46:fe:e1:cc:54:b7:b7:ce:c8:22:e1:36: a7:83:f6:42:99:c6:53:55:ac:bf:bc:f9:27:51:ac: 6c:8a:33:21:90:12:d9:3a:23:b4:8b:84:37:1c:1b: 98:7e:6f:6c:91:26:32:0e:85:c9:5f:c8:11:00:5d: d6:73:fc:8a:4e:6e:f6:81:f8:4d:64:0f:ef:f7:c3: fd:13:ac:8f:c5:78:5b:b0:c6:7b:d4:b6:74:86:ed: b6:af:ff:9e:ad:f9:5d:65:88:5e:da:2d:99:a9:9e: fd:44:26:a7:22:41:33:fc:82:4c:e4:60:1c:08:95: e9:4e:a7:17:12:ea:e2:ac:46:06:62:41:a0:b3:6e: 40:9e:47:4e:d2:49:2f:39:2f:9e:9f:1a:ce:77:ea: 5a:27:f4:c9:52:e8:33:8c:d0:41:6e:53:0e:9a:28: af:b9:a8:5b:c8:ec:13:57:5a:4d:9d:c1:89:bb:33: f8:5f:86:37:b4:18:33:4e:53:81:82:81:65:fc:7a: 6a:fa:1e:8c:f8:2a:6d:34:d6:bd:92:30:db:d2:1d: 15:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:C0:4D:F6:0F:6B:2B:D3:E7:20:A0:4F:BB:26:65:F0:1D:A7:37:A3 X509v3 Authority Key Identifier: keyid:35:96:0E:1E:16:9E:03:F4:6F:AF:91:F4:E3:FF:13:51:46:A6:31:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BBBA5/E6484ACE9B2D11E8B465D80FC4F9AE02/NZYOHhaeA_Rvr5H04_8TUUamMTo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NZYOHhaeA_Rvr5H04_8TUUamMTo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BBBA5/E6484ACE9B2D11E8B465D80FC4F9AE02/NZYOHhaeA_Rvr5H04_8TUUamMTo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2e:de:34:a8:bc:66:66:9d:5b:4e:00:d8:4e:16:28:73:e2:84: 78:d0:94:71:e4:8e:38:e4:a6:31:fc:87:61:be:2f:36:68:35: 99:86:90:58:bb:63:d9:14:83:2a:9b:7c:b5:47:38:c8:17:23: 25:23:28:2a:7d:7a:3b:0a:87:5c:05:20:48:1a:48:08:a6:f2: 5c:d1:77:05:fd:9b:08:b8:30:3d:31:11:b3:e5:e6:74:77:bd: cc:b4:35:6c:ba:5d:6a:65:10:da:7b:72:cb:a1:4b:03:20:c8: 70:e9:d5:51:40:f5:57:14:77:52:79:7e:91:93:bb:e3:9f:c9: ab:06:e2:c6:a2:09:28:dd:a9:3b:89:df:ff:f8:14:6f:2b:31: 0b:92:6c:3c:8b:74:45:f1:e4:c4:52:4c:8b:03:2c:9e:a5:c5: 44:ca:6c:c9:09:86:fe:b5:ed:35:fb:4e:59:7e:26:3d:ea:1f: 66:8b:9b:94:7a:75:d8:55:f5:36:fc:0a:6d:06:5e:34:b2:55: fd:15:72:ea:9f:25:d9:66:a5:9a:3b:af:34:58:de:72:69:6e: da:8f:cf:cc:c1:c8:b9:a3:78:7a:3c:bd:0b:6b:24:1f:8c:c7: 84:2f:b3:4b:cf:78:c0:99:6c:c2:db:2b:27:3b:0c:f3:0d:4c: da:3a:ac:61 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICE5swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkJCQTUxMTAvBgNVBAUTKDM1OTYwRTFFMTY5RTAzRjQ2RkFGOTFGNEUzRkYxMzUx NDZBNjMxM0EwHhcNMjUwODA4MTcwODI4WhcNMjUwODE1MTcwODI4WjAYMRYwFAYD VQQDEw02ODk2MmYwYy0wYTFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvyqPUJ0p8L/lkWypycuJZQBpBxq1WlsA/eOiC+o4xMwgkAiPFZc3AIw2A4A/ Q6VG/uHMVLe3zsgi4Tang/ZCmcZTVay/vPknUaxsijMhkBLZOiO0i4Q3HBuYfm9s kSYyDoXJX8gRAF3Wc/yKTm72gfhNZA/v98P9E6yPxXhbsMZ71LZ0hu22r/+erfld ZYhe2i2ZqZ79RCanIkEz/IJM5GAcCJXpTqcXEurirEYGYkGgs25AnkdO0kkvOS+e nxrOd+paJ/TJUugzjNBBblMOmiivuahbyOwTV1pNncGJuzP4X4Y3tBgzTlOBgoFl /Hpq+h6M+CptNNa9kjDb0h0VHQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKjATfYP ayvT5yCgT7smZfAdpzejMB8GA1UdIwQYMBaAFDWWDh4WngP0b6+R9OP/E1FGpjE6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQkJBNS9FNjQ4NEFDRTlC MkQxMUU4QjQ2NUQ4MEZDNEY5QUUwMi9OWllPSGhhZUFfUnZyNUgwNF84VFVVYW1N VG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05aWU9IaGFlQV9SdnI1SDA0XzhUVVVhbU1Uby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QkJBNS9FNjQ4NEFDRTlCMkQxMUU4QjQ2NUQ4MEZDNEY5QUUwMi9OWllPSGhhZUFf UnZyNUgwNF84VFVVYW1NVG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAu3jSovGZmnVtOANhOFihz4oR40JRx5I445KYx/Idhvi82aDWZhpBY u2PZFIMqm3y1RzjIFyMlIygqfXo7CodcBSBIGkgIpvJc0XcF/ZsIuDA9MRGz5eZ0 d73MtDVsul1qZRDae3LLoUsDIMhw6dVRQPVXFHdSeX6Rk7vjn8mrBuLGogko3ak7 id//+BRvKzELkmw8i3RF8eTEUkyLAyyepcVEymzJCYb+te01+05ZfiY96h9mi5uU enXYVfU2/AptBl40slX9FXLqnyXZZqWaO680WN5yaW7aj8/Mwci5o3h6PL0LayQf jMeEL7NLz3jAmWzC2ysnOwzzDUzaOqxh -----END CERTIFICATE-----Generated at Fri Aug 8 19:36:50 2025 by rpki-client