$ rpki-client -vvf rpki.apnic.net/member_repository/A91BBBA5/E6484ACE9B2D11E8B465D80FC4F9AE02/NZYOHhaeA_Rvr5H04_8TUUamMTo.mft File: NZYOHhaeA_Rvr5H04_8TUUamMTo.mft (raw, json) Hash identifier: 7dw4KdOaTCOsuwpYz6/TOdD2Hm2Ee4xBBKwvMZc/hvc= Subject key identifier: 7E:CF:99:67:A0:5A:EA:FE:CC:E1:E3:B9:9A:59:0F:3C:E6:B0:AE:B8 Authority key identifier: 35:96:0E:1E:16:9E:03:F4:6F:AF:91:F4:E3:FF:13:51:46:A6:31:3A Certificate issuer: /CN=A91BBBA5/serialNumber=35960E1E169E03F46FAF91F4E3FF135146A6313A Certificate serial: 137E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NZYOHhaeA_Rvr5H04_8TUUamMTo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BBBA5/E6484ACE9B2D11E8B465D80FC4F9AE02/NZYOHhaeA_Rvr5H04_8TUUamMTo.mft Manifest number: 1377 Signing time: Thu 12 Jun 2025 16:55:17 +0000 Manifest this update: Thu 12 Jun 2025 16:55:17 +0000 Manifest next update: Thu 19 Jun 2025 16:55:17 +0000 Files and hashes: 1: NZYOHhaeA_Rvr5H04_8TUUamMTo.crl (hash: /341ZNrZulqUT+TNsn1AAqmjvEIdc09W5oPfilmbsD4=) 2: 21333DA69B2E11E8908CC50FC4F9AE02.roa (hash: +1SNSIFs+P7lOAKW1zIJPA5+xtDNMIC4L/Fb0Zo2lHo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BBBA5/E6484ACE9B2D11E8B465D80FC4F9AE02/NZYOHhaeA_Rvr5H04_8TUUamMTo.crl rsync://rpki.apnic.net/member_repository/A91BBBA5/E6484ACE9B2D11E8B465D80FC4F9AE02/NZYOHhaeA_Rvr5H04_8TUUamMTo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NZYOHhaeA_Rvr5H04_8TUUamMTo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 16:55:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4990 (0x137e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BBBA5, serialNumber=35960E1E169E03F46FAF91F4E3FF135146A6313A Validity Not Before: Jun 12 16:55:17 2025 GMT Not After : Jun 19 16:55:17 2025 GMT Subject: CN=684b0675-e414 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:44:65:14:b8:df:c7:52:4f:88:a4:94:3f:d3: 22:ec:84:90:73:15:d9:36:70:55:2b:c8:5d:52:cc: e3:55:68:a3:37:d0:5e:ab:d0:b9:84:63:70:f1:d0: bc:06:8e:cd:b6:9d:c8:b9:7d:52:ad:2e:b8:60:29: 5d:5e:6c:69:78:53:5d:0e:f6:cd:5c:4e:dc:1e:41: d5:bf:53:e1:4c:d9:c0:4d:d7:24:c8:27:8a:0e:b7: ad:09:60:9b:8e:e9:a9:ee:47:78:18:8b:79:f1:a4: ab:3e:e5:55:03:7b:3e:68:0c:49:84:ea:38:3d:81: 5c:ba:1f:ff:21:c7:8f:95:30:5a:f0:8b:a7:1e:1e: 5b:5c:35:00:b1:19:7b:44:13:42:c3:a2:67:c3:11: e7:54:2c:46:f6:6c:78:e5:3d:25:b9:ae:91:22:dd: 0a:43:b6:f1:92:0f:9d:be:47:10:eb:0a:b6:0e:9e: 0a:bc:7c:95:d8:16:b8:dd:e5:5a:f4:c3:20:a9:89: 4c:18:87:8e:1e:07:3a:b0:36:ef:e2:38:95:35:03: e1:f1:b7:31:09:51:8d:cc:a8:e0:8d:ed:b7:92:c7: cb:b3:d7:59:05:24:39:54:7e:68:df:dc:ac:6b:c3: 0d:86:72:c8:19:3d:84:1d:c8:a1:3f:3e:b9:8e:a9: 8b:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:CF:99:67:A0:5A:EA:FE:CC:E1:E3:B9:9A:59:0F:3C:E6:B0:AE:B8 X509v3 Authority Key Identifier: keyid:35:96:0E:1E:16:9E:03:F4:6F:AF:91:F4:E3:FF:13:51:46:A6:31:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BBBA5/E6484ACE9B2D11E8B465D80FC4F9AE02/NZYOHhaeA_Rvr5H04_8TUUamMTo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NZYOHhaeA_Rvr5H04_8TUUamMTo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BBBA5/E6484ACE9B2D11E8B465D80FC4F9AE02/NZYOHhaeA_Rvr5H04_8TUUamMTo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 15:57:cc:40:e4:76:be:96:c5:5a:2d:a9:3f:a3:5b:8a:2e:6f: 68:48:76:ef:a6:f5:d7:f0:ac:45:7a:f7:7b:8d:c4:8d:3c:a7: 51:79:aa:59:c2:46:6a:92:f2:cb:5e:78:bf:88:59:6b:78:c6: 80:91:79:b2:a2:4a:a1:3b:6e:52:db:18:24:2a:ed:85:e5:09: 5c:fa:67:4e:df:29:68:f3:05:e8:cb:b9:9a:ea:78:76:11:79: b9:4d:18:2c:a1:f9:52:4c:82:48:58:20:14:e0:dd:57:66:0e: 4f:a2:ea:e2:b3:42:75:71:df:02:c2:89:8a:c4:9e:f2:36:ba: 53:42:6c:88:04:e2:14:07:89:78:4b:32:90:8f:bb:65:0c:29: 8e:c2:53:6d:8c:78:7f:73:5a:61:df:e6:ca:1e:9a:8b:11:41: 73:f4:92:b8:25:27:0e:80:f2:21:ff:c3:ba:a4:cd:27:75:a6: 97:ff:e3:28:c0:86:a8:b9:2c:ad:73:95:a7:b8:b7:9f:bf:bd: d3:d4:5f:46:fd:b7:94:f2:43:2c:bd:17:5a:2d:17:4d:20:ca: 2c:d5:d2:2f:79:a9:23:f9:b0:21:cc:f5:0a:5b:69:2c:6b:b8: 5e:27:66:2c:bc:94:57:49:4a:7c:75:5f:59:86:01:78:75:12: d4:19:d7:75 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICE34wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkJCQTUxMTAvBgNVBAUTKDM1OTYwRTFFMTY5RTAzRjQ2RkFGOTFGNEUzRkYxMzUx NDZBNjMxM0EwHhcNMjUwNjEyMTY1NTE3WhcNMjUwNjE5MTY1NTE3WjAYMRYwFAYD VQQDEw02ODRiMDY3NS1lNDE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAukRlFLjfx1JPiKSUP9Mi7ISQcxXZNnBVK8hdUszjVWijN9Beq9C5hGNw8dC8 Bo7Ntp3IuX1SrS64YCldXmxpeFNdDvbNXE7cHkHVv1PhTNnATdckyCeKDretCWCb jump7kd4GIt58aSrPuVVA3s+aAxJhOo4PYFcuh//IcePlTBa8IunHh5bXDUAsRl7 RBNCw6JnwxHnVCxG9mx45T0lua6RIt0KQ7bxkg+dvkcQ6wq2Dp4KvHyV2Ba43eVa 9MMgqYlMGIeOHgc6sDbv4jiVNQPh8bcxCVGNzKjgje23ksfLs9dZBSQ5VH5o39ys a8MNhnLIGT2EHcihPz65jqmLwQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH7PmWeg Wur+zOHjuZpZDzzmsK64MB8GA1UdIwQYMBaAFDWWDh4WngP0b6+R9OP/E1FGpjE6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQkJBNS9FNjQ4NEFDRTlC MkQxMUU4QjQ2NUQ4MEZDNEY5QUUwMi9OWllPSGhhZUFfUnZyNUgwNF84VFVVYW1N VG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05aWU9IaGFlQV9SdnI1SDA0XzhUVVVhbU1Uby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QkJBNS9FNjQ4NEFDRTlCMkQxMUU4QjQ2NUQ4MEZDNEY5QUUwMi9OWllPSGhhZUFf UnZyNUgwNF84VFVVYW1NVG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAVV8xA5Ha+lsVaLak/o1uKLm9oSHbvpvXX8KxFevd7jcSNPKdReapZ wkZqkvLLXni/iFlreMaAkXmyokqhO25S2xgkKu2F5Qlc+mdO3ylo8wXoy7ma6nh2 EXm5TRgsoflSTIJIWCAU4N1XZg5Pouris0J1cd8CwomKxJ7yNrpTQmyIBOIUB4l4 SzKQj7tlDCmOwlNtjHh/c1ph3+bKHpqLEUFz9JK4JScOgPIh/8O6pM0ndaaX/+Mo wIaouSytc5WnuLefv73T1F9G/beU8kMsvRdaLRdNIMos1dIveakj+bAhzPUKW2ks a7heJ2YsvJRXSUp8dV9ZhgF4dRLUGdd1 -----END CERTIFICATE-----Generated at Sat Jun 14 18:58:33 2025 by rpki-client