$ rpki-client -vvf rpki.apnic.net/member_repository/A91BBBA5/E6484ACE9B2D11E8B465D80FC4F9AE02/NZYOHhaeA_Rvr5H04_8TUUamMTo.mft File: NZYOHhaeA_Rvr5H04_8TUUamMTo.mft (raw, json) Hash identifier: daoGMZ45gOnkonR1aGsEZJbNXtnow8DWWcMvz8s2MWQ= Subject key identifier: 49:30:AF:25:FA:2C:52:3C:40:32:5E:05:17:7D:2B:A4:EE:32:20:92 Authority key identifier: 35:96:0E:1E:16:9E:03:F4:6F:AF:91:F4:E3:FF:13:51:46:A6:31:3A Certificate issuer: /CN=A91BBBA5/serialNumber=35960E1E169E03F46FAF91F4E3FF135146A6313A Certificate serial: 1365 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NZYOHhaeA_Rvr5H04_8TUUamMTo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BBBA5/E6484ACE9B2D11E8B465D80FC4F9AE02/NZYOHhaeA_Rvr5H04_8TUUamMTo.mft Manifest number: 135E Signing time: Thu 24 Apr 2025 17:00:02 +0000 Manifest this update: Thu 24 Apr 2025 17:00:02 +0000 Manifest next update: Thu 01 May 2025 17:00:02 +0000 Files and hashes: 1: NZYOHhaeA_Rvr5H04_8TUUamMTo.crl (hash: 96wBY40xpps6LIAepyY2Nsqb1tf5W5DdLwE79tbxh7g=) 2: 21333DA69B2E11E8908CC50FC4F9AE02.roa (hash: +1SNSIFs+P7lOAKW1zIJPA5+xtDNMIC4L/Fb0Zo2lHo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BBBA5/E6484ACE9B2D11E8B465D80FC4F9AE02/NZYOHhaeA_Rvr5H04_8TUUamMTo.crl rsync://rpki.apnic.net/member_repository/A91BBBA5/E6484ACE9B2D11E8B465D80FC4F9AE02/NZYOHhaeA_Rvr5H04_8TUUamMTo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NZYOHhaeA_Rvr5H04_8TUUamMTo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 17:00:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4965 (0x1365) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BBBA5, serialNumber=35960E1E169E03F46FAF91F4E3FF135146A6313A Validity Not Before: Apr 24 17:00:02 2025 GMT Not After : May 1 17:00:02 2025 GMT Subject: CN=680a6e12-23c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:ec:8a:53:5f:cc:ae:75:35:68:e5:b1:84:7d: ac:5b:ce:c3:86:4c:02:59:21:36:48:19:3a:82:49: 4c:0b:bc:27:10:29:d8:cb:dd:34:e7:68:85:09:ea: 03:7d:35:0d:f8:96:47:52:8d:93:2f:50:b5:28:32: 6f:73:8e:6e:fb:2e:e1:ee:bc:0d:32:cf:11:7f:56: 83:02:bc:59:6c:3e:8f:ea:8e:3e:f1:1d:6b:61:3d: 83:cc:d5:54:d4:a4:b8:47:cf:ce:56:cf:30:42:06: 8b:62:2c:13:8f:e9:01:1b:2c:0a:3e:25:fa:79:1c: 6b:87:c5:d1:2f:3b:c3:fd:e3:70:34:7e:84:fb:90: 95:e0:1c:00:d8:b0:78:95:d2:97:81:bb:ef:6b:3f: 28:cd:44:b7:ce:6b:03:6b:49:77:4e:ab:5f:bb:35: 77:0a:4d:f7:50:26:6e:d5:70:1d:d0:a2:36:49:e1: e8:b8:07:2d:59:0b:4f:0c:7f:80:ff:5b:f3:73:8c: fe:2a:33:5a:fe:30:14:29:e8:34:b5:c0:7b:73:72: ac:7f:59:f2:c7:57:1d:47:13:6b:6d:60:fb:0e:4f: 8f:ff:25:3f:79:30:b0:59:d3:66:17:ee:15:1f:0c: 07:f6:70:5e:77:ed:c1:e8:ca:e4:2c:3b:91:27:2a: 21:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:30:AF:25:FA:2C:52:3C:40:32:5E:05:17:7D:2B:A4:EE:32:20:92 X509v3 Authority Key Identifier: keyid:35:96:0E:1E:16:9E:03:F4:6F:AF:91:F4:E3:FF:13:51:46:A6:31:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BBBA5/E6484ACE9B2D11E8B465D80FC4F9AE02/NZYOHhaeA_Rvr5H04_8TUUamMTo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NZYOHhaeA_Rvr5H04_8TUUamMTo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BBBA5/E6484ACE9B2D11E8B465D80FC4F9AE02/NZYOHhaeA_Rvr5H04_8TUUamMTo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 67:54:0a:41:cf:7e:a6:5d:9f:0c:de:31:ad:47:88:8d:7b:a4: 3a:0c:df:3c:da:0c:52:ca:ee:0b:8a:a3:66:61:5c:df:95:89: 41:9d:0c:ba:5c:c1:0e:e1:df:a6:82:57:8d:ff:29:1c:0d:6b: 3b:3d:e8:cf:c6:0a:b5:e9:a6:62:e9:bd:11:a6:4e:76:c2:13: 9d:6a:ca:62:e3:75:0d:4a:12:54:e6:06:89:d9:96:77:44:a7: 0c:47:f7:84:60:1c:83:fc:eb:c5:69:74:d6:d0:a0:07:0d:dd: 28:78:2b:47:d9:af:15:9c:8d:e5:52:ec:fd:a7:b4:a4:62:63: 53:0b:53:c3:2c:06:d6:43:97:b8:f4:e1:1a:c6:21:47:29:35: 53:29:53:a1:ab:93:b8:8a:68:35:91:87:92:1e:60:1c:57:5d: 46:04:dd:c3:3a:82:5b:88:62:91:58:5d:7c:c9:3e:d2:4d:d8: 38:6a:cb:83:fe:81:2c:a8:90:4a:94:83:19:6b:26:a5:22:87: eb:2f:80:eb:4e:30:2c:64:97:6e:b3:22:7a:81:ae:ff:91:4d: ce:2c:44:1a:ec:0e:4d:f6:c1:a9:69:ef:8f:e3:b1:d4:ed:24: 1b:0b:8e:71:cd:86:22:c2:32:99:3e:11:f7:73:49:f1:f1:22: 90:a1:26:32 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICE2UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkJCQTUxMTAvBgNVBAUTKDM1OTYwRTFFMTY5RTAzRjQ2RkFGOTFGNEUzRkYxMzUx NDZBNjMxM0EwHhcNMjUwNDI0MTcwMDAyWhcNMjUwNTAxMTcwMDAyWjAYMRYwFAYD VQQDEw02ODBhNmUxMi0yM2M1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2uyKU1/MrnU1aOWxhH2sW87DhkwCWSE2SBk6gklMC7wnECnYy90052iFCeoD fTUN+JZHUo2TL1C1KDJvc45u+y7h7rwNMs8Rf1aDArxZbD6P6o4+8R1rYT2DzNVU 1KS4R8/OVs8wQgaLYiwTj+kBGywKPiX6eRxrh8XRLzvD/eNwNH6E+5CV4BwA2LB4 ldKXgbvvaz8ozUS3zmsDa0l3TqtfuzV3Ck33UCZu1XAd0KI2SeHouActWQtPDH+A /1vzc4z+KjNa/jAUKeg0tcB7c3Ksf1nyx1cdRxNrbWD7Dk+P/yU/eTCwWdNmF+4V HwwH9nBed+3B6MrkLDuRJyohpQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEkwryX6 LFI8QDJeBRd9K6TuMiCSMB8GA1UdIwQYMBaAFDWWDh4WngP0b6+R9OP/E1FGpjE6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQkJBNS9FNjQ4NEFDRTlC MkQxMUU4QjQ2NUQ4MEZDNEY5QUUwMi9OWllPSGhhZUFfUnZyNUgwNF84VFVVYW1N VG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05aWU9IaGFlQV9SdnI1SDA0XzhUVVVhbU1Uby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QkJBNS9FNjQ4NEFDRTlCMkQxMUU4QjQ2NUQ4MEZDNEY5QUUwMi9OWllPSGhhZUFf UnZyNUgwNF84VFVVYW1NVG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBnVApBz36mXZ8M3jGtR4iNe6Q6DN882gxSyu4LiqNmYVzflYlBnQy6 XMEO4d+mgleN/ykcDWs7PejPxgq16aZi6b0Rpk52whOdaspi43UNShJU5gaJ2ZZ3 RKcMR/eEYByD/OvFaXTW0KAHDd0oeCtH2a8VnI3lUuz9p7SkYmNTC1PDLAbWQ5e4 9OEaxiFHKTVTKVOhq5O4img1kYeSHmAcV11GBN3DOoJbiGKRWF18yT7STdg4asuD /oEsqJBKlIMZayalIofrL4DrTjAsZJdusyJ6ga7/kU3OLEQa7A5N9sGpae+P47HU 7SQbC45xzYYiwjKZPhH3c0nx8SKQoSYy -----END CERTIFICATE-----Generated at Sat Apr 26 16:44:07 2025 by rpki-client