$ rpki-client -vvf rpki.apnic.net/member_repository/A9134285/6F15B572928311EB80970420C4F9AE02/NxkwlLzz42Ui-tvxlU7l_51gHg4.mft File: NxkwlLzz42Ui-tvxlU7l_51gHg4.mft (raw, json) Hash identifier: XV1d3wIycEMuNOZhmf7fH/zxn2q0ZvmeG1XucPwQsOU= Subject key identifier: 06:49:28:4B:59:1A:BA:BE:CD:B0:E2:63:73:4F:12:BC:E0:E3:99:47 Authority key identifier: 37:19:30:94:BC:F3:E3:65:22:FA:DB:F1:95:4E:E5:FF:9D:60:1E:0E Certificate issuer: /CN=A9134285/serialNumber=37193094BCF3E36522FADBF1954EE5FF9D601E0E Certificate serial: 063A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NxkwlLzz42Ui-tvxlU7l_51gHg4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9134285/6F15B572928311EB80970420C4F9AE02/NxkwlLzz42Ui-tvxlU7l_51gHg4.mft Manifest number: 0634 Signing time: Fri 16 May 2025 22:56:58 +0000 Manifest this update: Fri 16 May 2025 22:56:58 +0000 Manifest next update: Fri 23 May 2025 22:56:58 +0000 Files and hashes: 1: NxkwlLzz42Ui-tvxlU7l_51gHg4.crl (hash: 0iXLYVn/pBJ/gRSeiHU9CU/IOrotk8WE51IYmVazdSE=) 2: 3A00D342928511EB8B3AAC22C4F9AE02.roa (hash: aj64AT3Eg74eRiHek2DyIpF1DXkedRqzt0byGVydNm8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9134285/6F15B572928311EB80970420C4F9AE02/NxkwlLzz42Ui-tvxlU7l_51gHg4.crl rsync://rpki.apnic.net/member_repository/A9134285/6F15B572928311EB80970420C4F9AE02/NxkwlLzz42Ui-tvxlU7l_51gHg4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NxkwlLzz42Ui-tvxlU7l_51gHg4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 23 May 2025 22:56:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1594 (0x63a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9134285, serialNumber=37193094BCF3E36522FADBF1954EE5FF9D601E0E Validity Not Before: May 16 22:56:58 2025 GMT Not After : May 23 22:56:58 2025 GMT Subject: CN=6827c2ba-fc40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:f1:ca:81:08:c6:d0:57:63:69:50:db:24:ba: 45:f4:3e:36:3e:5b:28:b0:fa:52:d6:90:ed:3d:84: 90:53:f7:55:7a:72:89:8e:3d:b4:90:cd:ec:0c:26: 7d:ab:93:e7:3f:f3:13:5b:52:53:ef:83:48:2b:1a: 40:30:55:2d:05:88:0b:2d:15:90:cc:fb:03:0a:26: b5:65:a8:96:93:5b:fb:af:79:50:8e:74:0a:75:32: d1:61:30:50:8d:4c:9f:64:4d:d6:53:25:49:fc:1a: bc:51:19:4b:75:29:98:1f:eb:f3:5f:77:75:c9:ce: 97:e6:4d:c3:c7:9a:f2:a5:3f:26:66:07:be:31:5c: f3:8a:88:0d:4e:9d:82:70:cb:be:59:ab:0a:a1:83: c9:f9:cc:b1:ba:47:c1:dd:78:55:e0:0b:63:44:a0: d4:f1:7c:50:cd:b2:3b:b2:a4:59:76:41:3c:5b:79: 43:46:2b:f1:b2:e3:62:1e:8e:24:be:fc:7a:dc:65: 63:96:1a:88:ca:21:fb:6e:0b:8f:b7:34:99:ac:90: 6a:ab:83:1d:72:30:a7:56:d1:d5:a2:1e:28:7b:b3: c1:1a:d1:e2:f3:15:a2:49:22:db:8f:d5:33:c0:aa: 71:26:8e:bf:4d:81:e3:a2:7e:51:57:45:28:fe:80: d5:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:49:28:4B:59:1A:BA:BE:CD:B0:E2:63:73:4F:12:BC:E0:E3:99:47 X509v3 Authority Key Identifier: keyid:37:19:30:94:BC:F3:E3:65:22:FA:DB:F1:95:4E:E5:FF:9D:60:1E:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9134285/6F15B572928311EB80970420C4F9AE02/NxkwlLzz42Ui-tvxlU7l_51gHg4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NxkwlLzz42Ui-tvxlU7l_51gHg4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9134285/6F15B572928311EB80970420C4F9AE02/NxkwlLzz42Ui-tvxlU7l_51gHg4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 18:e4:1f:7f:c1:4e:9c:fa:7e:4d:42:9e:ec:63:a1:c0:fa:9b: 6b:70:02:b5:48:7a:89:1c:a4:8c:b5:8f:c5:7b:6e:06:84:61: 3b:2f:18:d1:46:62:6f:b6:bd:14:68:0f:9e:a4:d5:d9:09:64: c1:bb:9f:72:fe:6e:62:a7:fc:a0:65:c8:67:25:47:4a:66:90: 17:a9:e9:0d:28:13:88:b3:88:7d:e6:77:8e:7a:9f:22:22:93: d1:8c:9c:31:1a:5e:1f:55:93:7c:b9:ab:e7:a8:33:99:13:f5: 58:09:84:3e:ed:bd:ff:9d:e5:11:38:55:2f:78:cc:b6:a1:90: 2a:50:5d:14:c8:72:00:40:ed:6b:16:73:73:d1:ce:b4:8d:1f: 30:4f:91:ec:f8:f2:0a:e5:1d:5b:72:02:34:09:99:41:2b:92: bf:4c:c5:7b:df:fe:ca:65:01:cf:ca:11:98:75:33:bb:21:4c: d1:68:25:82:ff:30:e1:43:1e:43:23:d3:66:11:95:36:48:ce: c8:2d:3e:f9:0b:1b:0c:94:7d:70:db:ed:8b:11:5f:c8:e7:1a: 3b:4e:03:7c:6e:0b:c0:5f:b9:b1:34:11:5e:39:00:30:7d:01: 88:5a:bc:d5:32:aa:46:7e:09:26:14:4f:eb:76:fc:0f:6b:0f: ee:3a:d8:00 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBjowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzQyODUxMTAvBgNVBAUTKDM3MTkzMDk0QkNGM0UzNjUyMkZBREJGMTk1NEVFNUZG OUQ2MDFFMEUwHhcNMjUwNTE2MjI1NjU4WhcNMjUwNTIzMjI1NjU4WjAYMRYwFAYD VQQDEw02ODI3YzJiYS1mYzQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6vHKgQjG0FdjaVDbJLpF9D42PlsosPpS1pDtPYSQU/dVenKJjj20kM3sDCZ9 q5PnP/MTW1JT74NIKxpAMFUtBYgLLRWQzPsDCia1ZaiWk1v7r3lQjnQKdTLRYTBQ jUyfZE3WUyVJ/Bq8URlLdSmYH+vzX3d1yc6X5k3Dx5rypT8mZge+MVzziogNTp2C cMu+WasKoYPJ+cyxukfB3XhV4AtjRKDU8XxQzbI7sqRZdkE8W3lDRivxsuNiHo4k vvx63GVjlhqIyiH7bguPtzSZrJBqq4MdcjCnVtHVoh4oe7PBGtHi8xWiSSLbj9Uz wKpxJo6/TYHjon5RV0Uo/oDVjQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAZJKEtZ Grq+zbDiY3NPErzg45lHMB8GA1UdIwQYMBaAFDcZMJS88+NlIvrb8ZVO5f+dYB4O MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNDI4NS82RjE1QjU3Mjky ODMxMUVCODA5NzA0MjBDNEY5QUUwMi9OeGt3bEx6ejQyVWktdHZ4bFU3bF81MWdI ZzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL054a3dsTHp6NDJVaS10dnhsVTdsXzUxZ0hnNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NDI4NS82RjE1QjU3MjkyODMxMUVCODA5NzA0MjBDNEY5QUUwMi9OeGt3bEx6ejQy VWktdHZ4bFU3bF81MWdIZzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAY5B9/wU6c+n5NQp7sY6HA+ptrcAK1SHqJHKSMtY/Fe24GhGE7LxjR RmJvtr0UaA+epNXZCWTBu59y/m5ip/ygZchnJUdKZpAXqekNKBOIs4h95neOep8i IpPRjJwxGl4fVZN8uavnqDOZE/VYCYQ+7b3/neUROFUveMy2oZAqUF0UyHIAQO1r FnNz0c60jR8wT5Hs+PIK5R1bcgI0CZlBK5K/TMV73/7KZQHPyhGYdTO7IUzRaCWC /zDhQx5DI9NmEZU2SM7ILT75CxsMlH1w2+2LEV/I5xo7TgN8bgvAX7mxNBFeOQAw fQGIWrzVMqpGfgkmFE/rdvwPaw/uOtgA -----END CERTIFICATE-----Generated at Sat May 17 14:14:14 2025 by rpki-client