$ rpki-client -vvf rpki.apnic.net/member_repository/A9135F07/3737A2BCC35A11EF8314C43FC4F9AE02/Nzj_PFuvGRGC66FLeMhIpa76TKo.mft File: Nzj_PFuvGRGC66FLeMhIpa76TKo.mft (raw, json) Hash identifier: alL/L2bgn33fEKELxE+UKBYj6WRFTsh+DI+oQ0O82H4= Subject key identifier: B4:4A:AF:50:88:A9:93:FE:5B:FC:1C:36:B8:FD:16:6D:84:56:8D:76 Authority key identifier: 37:38:FF:3C:5B:AF:19:11:82:EB:A1:4B:78:C8:48:A5:AE:FA:4C:AA Certificate issuer: /CN=A9135F07/serialNumber=3738FF3C5BAF191182EBA14B78C848A5AEFA4CAA Certificate serial: 4A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nzj_PFuvGRGC66FLeMhIpa76TKo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9135F07/3737A2BCC35A11EF8314C43FC4F9AE02/Nzj_PFuvGRGC66FLeMhIpa76TKo.mft Manifest number: 4A Signing time: Tue 13 May 2025 06:33:42 +0000 Manifest this update: Tue 13 May 2025 06:33:41 +0000 Manifest next update: Tue 20 May 2025 06:33:41 +0000 Files and hashes: 1: Nzj_PFuvGRGC66FLeMhIpa76TKo.crl (hash: hl1z+gb98WcPik98WYEtNb8QZLE7IHbyDbXsCqLK78U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9135F07/3737A2BCC35A11EF8314C43FC4F9AE02/Nzj_PFuvGRGC66FLeMhIpa76TKo.crl rsync://rpki.apnic.net/member_repository/A9135F07/3737A2BCC35A11EF8314C43FC4F9AE02/Nzj_PFuvGRGC66FLeMhIpa76TKo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nzj_PFuvGRGC66FLeMhIpa76TKo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 06:33:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74 (0x4a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9135F07, serialNumber=3738FF3C5BAF191182EBA14B78C848A5AEFA4CAA Validity Not Before: May 13 06:33:41 2025 GMT Not After : May 20 06:33:41 2025 GMT Subject: CN=6822e7c6-17d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:4b:1e:cf:96:0a:ae:b3:93:3c:36:80:14:cc: 63:c4:87:0d:de:6a:a0:4d:2f:20:c1:ef:a7:8e:60: b1:3e:6e:71:ab:de:20:f8:a8:8e:9f:b3:a9:7e:e6: 87:44:1c:7f:7f:cf:db:ee:77:1e:42:b2:19:94:4a: 17:07:8c:1d:b6:7c:18:bb:16:0a:85:00:e6:57:3a: 57:93:57:89:d4:ff:56:66:7c:e6:1b:cb:3a:7f:f8: 74:4a:12:75:ca:8c:17:c3:ff:2a:de:8d:2b:4f:0e: d4:c2:32:a3:ba:eb:d7:12:a8:77:6d:4f:2f:55:ee: 1a:1a:b1:40:6b:b0:82:3a:ca:de:0d:7a:66:4e:11: ad:ef:5c:17:20:1c:bf:b5:0e:10:f9:87:25:87:1b: cb:ed:84:05:09:18:b6:36:8c:c4:96:39:35:96:78: 69:3b:f8:82:ea:ed:59:8a:7d:22:f8:ce:d9:48:44: 41:db:48:ae:98:c6:7e:7c:cc:4c:41:8a:5a:04:b1: 57:32:30:6e:a8:ca:3e:8c:2a:fa:07:e1:bf:c8:ec: 88:4d:fb:3b:cd:7a:44:fd:34:7d:44:4f:dc:1a:f5: ac:ef:ed:2a:86:d4:3b:ec:f9:c3:41:1b:fa:53:a2: 29:f7:ce:30:46:a7:9f:14:a5:00:7a:03:2b:c3:c3: 98:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:4A:AF:50:88:A9:93:FE:5B:FC:1C:36:B8:FD:16:6D:84:56:8D:76 X509v3 Authority Key Identifier: keyid:37:38:FF:3C:5B:AF:19:11:82:EB:A1:4B:78:C8:48:A5:AE:FA:4C:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9135F07/3737A2BCC35A11EF8314C43FC4F9AE02/Nzj_PFuvGRGC66FLeMhIpa76TKo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nzj_PFuvGRGC66FLeMhIpa76TKo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9135F07/3737A2BCC35A11EF8314C43FC4F9AE02/Nzj_PFuvGRGC66FLeMhIpa76TKo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4c:f1:87:6a:9f:4b:f1:bf:37:7a:f0:45:98:4c:98:f9:ed:d0: 80:4c:a2:f0:36:51:f3:67:79:8f:55:f1:aa:be:1a:66:ae:10: 0c:47:d6:db:6e:b7:fe:c4:6b:22:9d:5d:2a:7f:b8:bf:6d:54: bc:71:5f:d7:e0:1a:e8:f8:fe:68:af:38:56:21:5b:97:97:11: 88:b2:89:bf:5d:56:00:ab:24:e1:89:5b:b6:10:1a:73:36:da: 81:0b:ff:1f:65:ff:64:15:f3:05:dd:f6:d4:61:4b:82:7a:bf: 25:a8:53:f8:13:c0:16:56:3a:5f:2a:67:06:53:a0:8d:91:54: 7a:66:25:e4:85:ce:9c:b4:53:57:2f:36:c8:73:fc:f3:32:bd: c0:6c:40:2f:7f:ad:37:88:49:9a:5a:51:3e:76:69:4b:1b:92: 5f:ce:54:4a:75:6d:51:36:bc:4f:3e:59:6a:05:c0:ea:34:ce: b0:f0:97:57:aa:82:9b:0d:e8:55:73:1a:ab:e9:68:f5:84:50: 7a:be:04:e5:2a:b4:6e:5b:42:bf:e1:6e:5a:22:97:76:ca:cb: dc:e0:f3:88:90:81:e7:dc:b9:ac:dc:c6:3a:f9:35:eb:03:f0: cd:6d:b8:a8:0d:6e:da:54:a9:1e:a3:5c:06:09:75:a0:8a:2d: ee:b8:72:08 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBSjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz NUYwNzExMC8GA1UEBRMoMzczOEZGM0M1QkFGMTkxMTgyRUJBMTRCNzhDODQ4QTVB RUZBNENBQTAeFw0yNTA1MTMwNjMzNDFaFw0yNTA1MjAwNjMzNDFaMBgxFjAUBgNV BAMTDTY4MjJlN2M2LTE3ZDYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDKSx7Plgqus5M8NoAUzGPEhw3eaqBNLyDB76eOYLE+bnGr3iD4qI6fs6l+5odE HH9/z9vudx5CshmUShcHjB22fBi7FgqFAOZXOleTV4nU/1ZmfOYbyzp/+HRKEnXK jBfD/yrejStPDtTCMqO669cSqHdtTy9V7hoasUBrsII6yt4NemZOEa3vXBcgHL+1 DhD5hyWHG8vthAUJGLY2jMSWOTWWeGk7+ILq7VmKfSL4ztlIREHbSK6Yxn58zExB iloEsVcyMG6oyj6MKvoH4b/I7IhN+zvNekT9NH1ET9wa9azv7SqG1Dvs+cNBG/pT oin3zjBGp58UpQB6AyvDw5jpAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUtEqvUIip k/5b/Bw2uP0WbYRWjXYwHwYDVR0jBBgwFoAUNzj/PFuvGRGC66FLeMhIpa76TKow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM1RjA3LzM3MzdBMkJDQzM1 QTExRUY4MzE0QzQzRkM0RjlBRTAyL056al9QRnV2R1JHQzY2RkxlTWhJcGE3NlRL by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvTnpqX1BGdXZHUkdDNjZGTGVNaElwYTc2VEtvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM1 RjA3LzM3MzdBMkJDQzM1QTExRUY4MzE0QzQzRkM0RjlBRTAyL056al9QRnV2R1JH QzY2RkxlTWhJcGE3NlRLby5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAEzxh2qfS/G/N3rwRZhMmPnt0IBMovA2UfNneY9V8aq+GmauEAxH1ttu t/7EayKdXSp/uL9tVLxxX9fgGuj4/mivOFYhW5eXEYiyib9dVgCrJOGJW7YQGnM2 2oEL/x9l/2QV8wXd9tRhS4J6vyWoU/gTwBZWOl8qZwZToI2RVHpmJeSFzpy0U1cv Nshz/PMyvcBsQC9/rTeISZpaUT52aUsbkl/OVEp1bVE2vE8+WWoFwOo0zrDwl1eq gpsN6FVzGqvpaPWEUHq+BOUqtG5bQr/hbloil3bKy9zg84iQgefcuazcxjr5NesD 8M1tuKgNbtpUqR6jXAYJdaCKLe64cgg= -----END CERTIFICATE-----Generated at Tue May 13 21:53:07 2025 by rpki-client