$ rpki-client -vvf rpki.apnic.net/member_repository/A912929D/6E050EF6B13011EFAA0BB53AC4F9AE02/NYQa4z32kxIBQGeYrmT8wIf1oeU.mft File: NYQa4z32kxIBQGeYrmT8wIf1oeU.mft (raw, json) Hash identifier: AQlGy6CpUx9Oa6XqfgtJGyRr+YKRLj3lV+EczPKfQAM= Subject key identifier: AE:10:E5:AB:B5:D9:FE:C5:1D:08:5D:25:25:60:F0:C0:67:14:62:54 Authority key identifier: 35:84:1A:E3:3D:F6:93:12:01:40:67:98:AE:64:FC:C0:87:F5:A1:E5 Certificate issuer: /CN=A912929D/serialNumber=35841AE33DF6931201406798AE64FCC087F5A1E5 Certificate serial: 54 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NYQa4z32kxIBQGeYrmT8wIf1oeU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912929D/6E050EF6B13011EFAA0BB53AC4F9AE02/NYQa4z32kxIBQGeYrmT8wIf1oeU.mft Manifest number: 53 Signing time: Sun 11 May 2025 05:59:30 +0000 Manifest this update: Sun 11 May 2025 05:59:29 +0000 Manifest next update: Sun 18 May 2025 05:59:29 +0000 Files and hashes: 1: NYQa4z32kxIBQGeYrmT8wIf1oeU.crl (hash: SzzIxwGAp78m3fNgCFKIky7WqFS4MUr3NFq0RQVwhV0=) 2: AC205A92B13011EFB45E6B3BC4F9AE02.roa (hash: uKwkZfPxaBZe+NEWyqJ10DRoEbJiI4u5JFaaWffNJlI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912929D/6E050EF6B13011EFAA0BB53AC4F9AE02/NYQa4z32kxIBQGeYrmT8wIf1oeU.crl rsync://rpki.apnic.net/member_repository/A912929D/6E050EF6B13011EFAA0BB53AC4F9AE02/NYQa4z32kxIBQGeYrmT8wIf1oeU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NYQa4z32kxIBQGeYrmT8wIf1oeU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 May 2025 05:59:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 84 (0x54) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912929D, serialNumber=35841AE33DF6931201406798AE64FCC087F5A1E5 Validity Not Before: May 11 05:59:29 2025 GMT Not After : May 18 05:59:29 2025 GMT Subject: CN=68203cc1-8ed4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:4a:06:76:e3:00:65:e1:4f:e2:57:4a:b9:4f: ac:b1:1b:b7:86:f7:f5:11:45:95:75:df:2d:bc:8d: 50:4a:fd:81:55:e9:45:c3:0d:2a:2c:4a:43:29:cd: aa:b9:ce:28:e3:d2:26:c1:43:47:41:cf:49:d6:da: ad:42:f7:5a:72:79:95:70:c4:56:f2:b1:6b:04:e7: 26:ed:9a:f2:6a:66:5d:e2:be:c2:a7:56:1a:0e:76: e9:20:95:ec:a7:0f:7c:8b:63:6c:7b:34:8d:d3:98: 8b:29:e6:9b:06:09:a9:60:0a:98:70:98:0f:7e:36: b3:9d:34:d1:8f:cc:a8:0e:79:80:b9:b6:39:bf:0d: 36:e5:02:b7:4f:e1:a5:3b:d1:76:ac:b4:73:70:79: 82:22:ef:ee:9c:c9:ee:69:03:81:0f:d8:02:ff:2d: d6:14:c0:75:7f:00:0c:28:7e:d2:27:12:39:c7:08: 9b:e6:1c:c9:ea:6d:1c:03:3d:b3:05:a8:61:de:7f: e7:cb:8b:a7:4f:c7:dc:41:59:9a:db:b9:1e:5a:d0: ae:cd:45:a7:f6:d4:91:f1:45:11:d1:bc:e0:a2:21: 3f:b1:1e:d9:39:58:9d:4e:fc:e2:17:19:c1:bc:cb: 3a:47:07:ec:22:6a:7c:d0:5d:cc:81:cb:ca:da:7a: ad:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:10:E5:AB:B5:D9:FE:C5:1D:08:5D:25:25:60:F0:C0:67:14:62:54 X509v3 Authority Key Identifier: keyid:35:84:1A:E3:3D:F6:93:12:01:40:67:98:AE:64:FC:C0:87:F5:A1:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912929D/6E050EF6B13011EFAA0BB53AC4F9AE02/NYQa4z32kxIBQGeYrmT8wIf1oeU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NYQa4z32kxIBQGeYrmT8wIf1oeU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912929D/6E050EF6B13011EFAA0BB53AC4F9AE02/NYQa4z32kxIBQGeYrmT8wIf1oeU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption de:aa:03:43:1f:af:44:34:30:a8:45:84:a9:ed:c5:29:ca:80: 35:cb:88:e8:1d:29:f0:e1:28:6d:26:b6:11:7c:4a:9c:cc:45: ad:e3:4b:32:73:7e:6e:83:03:32:ec:9e:ae:80:c3:98:ed:fb: f9:5c:ea:9b:cb:a7:3c:51:96:8a:8f:6c:a2:82:72:9c:cb:be: e1:11:e3:5e:90:36:c0:03:0f:03:94:d9:9f:40:66:2e:6e:5e: 71:16:93:fa:b8:44:f2:af:b3:7a:e6:74:30:46:4e:45:81:84: b1:60:b2:cd:9c:8b:46:b5:08:76:47:06:cd:a3:ad:af:89:0e: e8:f6:50:70:5c:c1:44:31:e7:6b:ff:bc:e4:02:04:93:30:59: 88:a6:7a:0e:08:42:14:24:47:de:9d:7c:05:02:68:31:49:dc: dc:33:3d:d3:bb:ab:58:5e:73:7f:56:d9:46:fa:43:69:82:1b: 74:ce:3f:1f:a8:7e:94:6e:b4:c6:0d:10:6c:16:49:a0:14:8e: fd:da:f1:e2:7d:df:c8:c4:7c:c6:63:79:98:49:34:b2:4b:53: 51:66:fd:8a:5e:6f:d7:ee:a3:79:be:91:b5:35:f2:f8:81:ea: 20:44:b9:8a:3e:3d:24:18:e4:3c:7a:a7:8c:4f:b6:44:92:19: 61:fb:6b:ad -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBVDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy OTI5RDExMC8GA1UEBRMoMzU4NDFBRTMzREY2OTMxMjAxNDA2Nzk4QUU2NEZDQzA4 N0Y1QTFFNTAeFw0yNTA1MTEwNTU5MjlaFw0yNTA1MTgwNTU5MjlaMBgxFjAUBgNV BAMTDTY4MjAzY2MxLThlZDQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDESgZ24wBl4U/iV0q5T6yxG7eG9/URRZV13y28jVBK/YFV6UXDDSosSkMpzaq5 zijj0ibBQ0dBz0nW2q1C91pyeZVwxFbysWsE5ybtmvJqZl3ivsKnVhoOdukgleyn D3yLY2x7NI3TmIsp5psGCalgCphwmA9+NrOdNNGPzKgOeYC5tjm/DTblArdP4aU7 0XastHNweYIi7+6cye5pA4EP2AL/LdYUwHV/AAwoftInEjnHCJvmHMnqbRwDPbMF qGHef+fLi6dPx9xBWZrbuR5a0K7NRaf21JHxRRHRvOCiIT+xHtk5WJ1O/OIXGcG8 yzpHB+wianzQXcyBy8raeq1JAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUrhDlq7XZ /sUdCF0lJWDwwGcUYlQwHwYDVR0jBBgwFoAUNYQa4z32kxIBQGeYrmT8wIf1oeUw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI5MjlELzZFMDUwRUY2QjEz MDExRUZBQTBCQjUzQUM0RjlBRTAyL05ZUWE0ejMya3hJQlFHZVlybVQ4d0lmMW9l VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvTllRYTR6MzJreElCUUdlWXJtVDh3SWYxb2VVLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI5 MjlELzZFMDUwRUY2QjEzMDExRUZBQTBCQjUzQUM0RjlBRTAyL05ZUWE0ejMya3hJ QlFHZVlybVQ4d0lmMW9lVS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAN6qA0Mfr0Q0MKhFhKntxSnKgDXLiOgdKfDhKG0mthF8SpzMRa3jSzJz fm6DAzLsnq6Aw5jt+/lc6pvLpzxRloqPbKKCcpzLvuER416QNsADDwOU2Z9AZi5u XnEWk/q4RPKvs3rmdDBGTkWBhLFgss2ci0a1CHZHBs2jra+JDuj2UHBcwUQx52v/ vOQCBJMwWYimeg4IQhQkR96dfAUCaDFJ3NwzPdO7q1hec39W2Ub6Q2mCG3TOPx+o fpRutMYNEGwWSaAUjv3a8eJ938jEfMZjeZhJNLJLU1Fm/Ypeb9fuo3m+kbU18viB 6iBEuYo+PSQY5Dx6p4xPtkSSGWH7a60= -----END CERTIFICATE-----Generated at Tue May 13 04:51:02 2025 by rpki-client