$ rpki-client -vvf rpki.apnic.net/member_repository/A9131579/2D2F437414E611EA929BBC45C4F9AE02/nwwVII1-5i6Ay5dc_kzsnL8dJ1Y.mft File: nwwVII1-5i6Ay5dc_kzsnL8dJ1Y.mft (raw, json) Hash identifier: BUtzFOT7YffgpqlJxS/hb3xlSNVJSYXu1x8NJWq6POI= Subject key identifier: A6:1E:65:AE:BA:E6:55:EF:D4:A5:2B:A3:60:FB:68:4A:DA:3D:EE:08 Authority key identifier: 9F:0C:15:20:8D:7E:E6:2E:80:CB:97:5C:FE:4C:EC:9C:BF:1D:27:56 Certificate issuer: /CN=A9131579/serialNumber=9F0C15208D7EE62E80CB975CFE4CEC9CBF1D2756 Certificate serial: 0BFE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nwwVII1-5i6Ay5dc_kzsnL8dJ1Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9131579/2D2F437414E611EA929BBC45C4F9AE02/nwwVII1-5i6Ay5dc_kzsnL8dJ1Y.mft Manifest number: 0BF0 Signing time: Fri 16 May 2025 18:59:57 +0000 Manifest this update: Fri 16 May 2025 18:59:57 +0000 Manifest next update: Fri 23 May 2025 18:59:57 +0000 Files and hashes: 1: nwwVII1-5i6Ay5dc_kzsnL8dJ1Y.crl (hash: Fk8v32GIq3FToQKPzbtsdyGmQSeCXue8ShNsjbhvG0M=) 2: 7E565BCC02EB11F084618D33C4F9AE02.roa (hash: AZHVgAf1kSXl8BI/BQ5H295EutsYIoNTNb8l2dBtz+M=) 3: 702B683202E911F097290F2EC4F9AE02.roa (hash: K+XoaDEFz5EZQGsqk/BrrsJpJvi+KU83oJ9JVUv/YSY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9131579/2D2F437414E611EA929BBC45C4F9AE02/nwwVII1-5i6Ay5dc_kzsnL8dJ1Y.crl rsync://rpki.apnic.net/member_repository/A9131579/2D2F437414E611EA929BBC45C4F9AE02/nwwVII1-5i6Ay5dc_kzsnL8dJ1Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nwwVII1-5i6Ay5dc_kzsnL8dJ1Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 23 May 2025 18:59:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3070 (0xbfe) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9131579, serialNumber=9F0C15208D7EE62E80CB975CFE4CEC9CBF1D2756 Validity Not Before: May 16 18:59:57 2025 GMT Not After : May 23 18:59:57 2025 GMT Subject: CN=68278b2d-206c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:41:b2:be:07:99:67:a5:66:81:57:dc:91:04: 6b:60:a7:a6:ed:3b:0a:5c:b4:ca:43:f2:3b:31:02: 38:3b:f3:15:44:97:31:09:e4:69:cc:ed:53:b5:22: 2d:04:5a:41:e2:45:f2:c3:3e:52:cb:cc:f9:55:2c: 70:ae:c8:56:1b:f7:33:7f:3c:05:49:74:99:2b:57: f6:c8:36:b2:42:f1:80:dd:30:b1:a5:16:a0:b2:49: 91:3c:47:96:05:ac:99:dc:9a:5b:7e:a0:04:c3:e0: 71:5a:f1:94:10:13:87:6d:a7:53:b3:d0:f8:a0:9a: 59:89:06:19:85:c4:ff:e4:de:f5:09:12:4b:95:40: 6a:2f:49:8c:f4:8e:3d:5b:48:2a:c9:42:91:7d:01: dc:a2:f3:23:68:56:a3:b6:3f:d0:88:9f:0b:e0:82: 5c:0c:db:cc:ce:c6:23:56:20:be:28:75:3f:1c:99: dd:fd:73:3a:e6:c6:55:b1:e2:a8:5c:bc:c0:c0:c1: 3e:43:ae:a5:6b:9f:b1:76:81:0d:17:c5:a1:26:2b: df:59:f0:67:42:58:e2:f7:c6:ac:99:11:0d:d1:d6: 01:f5:ac:2a:16:de:0e:0f:8d:a2:00:35:78:b4:13: 13:4c:47:07:73:08:a4:9d:2b:61:3d:ae:43:2e:85: e1:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:1E:65:AE:BA:E6:55:EF:D4:A5:2B:A3:60:FB:68:4A:DA:3D:EE:08 X509v3 Authority Key Identifier: keyid:9F:0C:15:20:8D:7E:E6:2E:80:CB:97:5C:FE:4C:EC:9C:BF:1D:27:56 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9131579/2D2F437414E611EA929BBC45C4F9AE02/nwwVII1-5i6Ay5dc_kzsnL8dJ1Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nwwVII1-5i6Ay5dc_kzsnL8dJ1Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9131579/2D2F437414E611EA929BBC45C4F9AE02/nwwVII1-5i6Ay5dc_kzsnL8dJ1Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2f:50:dc:5a:c2:14:41:45:a5:d4:0e:9c:c1:ae:f1:4f:14:1f: 0a:d9:ce:4a:4f:05:a2:ff:36:83:ab:c7:0f:6c:33:23:e3:1b: 47:a6:4a:70:c0:e0:d6:16:8f:0f:02:94:17:b3:eb:80:60:4e: 5d:91:50:03:67:08:b2:a7:72:37:d4:e6:dc:48:9b:0d:c5:d9: ca:5b:6e:43:09:50:4f:29:35:74:51:a9:cc:5a:fd:b1:ba:f2: 6c:e7:07:84:22:ae:ad:be:b8:17:79:3d:71:5a:e9:fb:10:70: 02:02:53:0c:8d:e1:e4:4f:9e:e0:bd:89:5c:1c:53:d1:21:ce: c2:79:ee:97:6d:3b:7d:72:b8:d3:fe:c3:21:8b:47:0e:9c:42: 1a:6a:ac:4e:68:90:f9:de:ce:95:77:d4:59:7f:52:6c:24:35: ed:fe:29:bd:ee:3f:69:a3:50:53:d8:18:3d:90:b1:0f:d9:c0: 8c:d3:b0:0a:ad:06:68:54:2b:99:dc:35:0a:30:15:01:e4:ac: 77:82:e7:4a:0e:f3:b2:a5:d4:2b:9e:ea:40:6e:d7:a6:85:b7: f3:0d:21:2f:cf:f9:7a:dd:21:b8:18:bf:01:c7:b4:bc:bd:9a: 7c:b0:8c:cd:0e:6c:86:c4:c3:03:cf:cf:fe:15:7b:63:e5:e3: f6:25:a6:84 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC/4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzE1NzkxMTAvBgNVBAUTKDlGMEMxNTIwOEQ3RUU2MkU4MENCOTc1Q0ZFNENFQzlD QkYxRDI3NTYwHhcNMjUwNTE2MTg1OTU3WhcNMjUwNTIzMTg1OTU3WjAYMRYwFAYD VQQDEw02ODI3OGIyZC0yMDZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4kGyvgeZZ6VmgVfckQRrYKem7TsKXLTKQ/I7MQI4O/MVRJcxCeRpzO1TtSIt BFpB4kXywz5Sy8z5VSxwrshWG/czfzwFSXSZK1f2yDayQvGA3TCxpRagskmRPEeW BayZ3JpbfqAEw+BxWvGUEBOHbadTs9D4oJpZiQYZhcT/5N71CRJLlUBqL0mM9I49 W0gqyUKRfQHcovMjaFajtj/QiJ8L4IJcDNvMzsYjViC+KHU/HJnd/XM65sZVseKo XLzAwME+Q66la5+xdoENF8WhJivfWfBnQlji98asmREN0dYB9awqFt4OD42iADV4 tBMTTEcHcwiknSthPa5DLoXhRQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKYeZa66 5lXv1KUro2D7aEraPe4IMB8GA1UdIwQYMBaAFJ8MFSCNfuYugMuXXP5M7Jy/HSdW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMTU3OS8yRDJGNDM3NDE0 RTYxMUVBOTI5QkJDNDVDNEY5QUUwMi9ud3dWSUkxLTVpNkF5NWRjX2t6c25MOGRK MVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL253d1ZJSTEtNWk2QXk1ZGNfa3pzbkw4ZEoxWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MTU3OS8yRDJGNDM3NDE0RTYxMUVBOTI5QkJDNDVDNEY5QUUwMi9ud3dWSUkxLTVp NkF5NWRjX2t6c25MOGRKMVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAvUNxawhRBRaXUDpzBrvFPFB8K2c5KTwWi/zaDq8cPbDMj4xtHpkpw wODWFo8PApQXs+uAYE5dkVADZwiyp3I31ObcSJsNxdnKW25DCVBPKTV0UanMWv2x uvJs5weEIq6tvrgXeT1xWun7EHACAlMMjeHkT57gvYlcHFPRIc7Cee6XbTt9crjT /sMhi0cOnEIaaqxOaJD53s6Vd9RZf1JsJDXt/im97j9po1BT2Bg9kLEP2cCM07AK rQZoVCuZ3DUKMBUB5Kx3gudKDvOypdQrnupAbtemhbfzDSEvz/l63SG4GL8Bx7S8 vZp8sIzNDmyGxMMDz8/+FXtj5eP2JaaE -----END CERTIFICATE-----Generated at Sun May 18 17:53:12 2025 by rpki-client