$ rpki-client -vvf rpki.apnic.net/member_repository/A913CADE/F02AB17CFAE611E7923EA150C4F9AE02/NyWy6X3UXcC3UhwKG7XkBgmwXZY.mft File: NyWy6X3UXcC3UhwKG7XkBgmwXZY.mft (raw, json) Hash identifier: bahDc/HaCxBGrWkEfcMdL4rO/UPchTSZ2MirsoEVXGQ= Subject key identifier: 83:01:74:FC:82:A1:55:3A:F6:AE:0A:79:9D:52:65:72:31:50:33:BF Authority key identifier: 37:25:B2:E9:7D:D4:5D:C0:B7:52:1C:0A:1B:B5:E4:06:09:B0:5D:96 Certificate issuer: /CN=A913CADE/serialNumber=3725B2E97DD45DC0B7521C0A1BB5E40609B05D96 Certificate serial: 16A8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NyWy6X3UXcC3UhwKG7XkBgmwXZY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913CADE/F02AB17CFAE611E7923EA150C4F9AE02/NyWy6X3UXcC3UhwKG7XkBgmwXZY.mft Manifest number: 169F Signing time: Mon 12 May 2025 16:36:56 +0000 Manifest this update: Mon 12 May 2025 16:36:56 +0000 Manifest next update: Mon 19 May 2025 16:36:56 +0000 Files and hashes: 1: NyWy6X3UXcC3UhwKG7XkBgmwXZY.crl (hash: YWGIKUkbw0otfuT1SnUk5mKq1QLVzSm7sIYizSy2TPk=) 2: DDDE13B8FAE811E7A715F157C4F9AE02.roa (hash: ZIFDDGs8pzafe5+UUxAyWx6ARFXkQp6Z5m5nmDElxJA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913CADE/F02AB17CFAE611E7923EA150C4F9AE02/NyWy6X3UXcC3UhwKG7XkBgmwXZY.crl rsync://rpki.apnic.net/member_repository/A913CADE/F02AB17CFAE611E7923EA150C4F9AE02/NyWy6X3UXcC3UhwKG7XkBgmwXZY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NyWy6X3UXcC3UhwKG7XkBgmwXZY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 16:36:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5800 (0x16a8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913CADE, serialNumber=3725B2E97DD45DC0B7521C0A1BB5E40609B05D96 Validity Not Before: May 12 16:36:56 2025 GMT Not After : May 19 16:36:56 2025 GMT Subject: CN=682223a8-2d78 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:cb:a3:5a:d0:e4:30:34:92:dc:43:14:70:b0: 1d:87:00:9c:81:f6:d7:74:52:17:19:3d:68:f9:a1: bf:dd:23:fb:ea:92:85:4b:46:0b:94:c8:ea:ef:30: ba:1b:1a:2a:1e:af:79:e9:24:97:e9:d6:de:36:4f: 02:b1:c7:f6:92:a9:ed:b6:b9:d5:a0:5a:d2:d4:26: e8:74:ea:8d:d7:0f:16:4e:99:97:6a:27:5b:a8:a4: d4:6b:5a:e5:d8:d7:f9:27:60:59:61:3d:d8:e4:b0: 10:40:58:83:78:6e:50:4e:d6:8a:be:e0:15:c6:c2: b4:26:ef:cf:92:e9:02:f2:22:d3:5b:53:40:fc:64: 18:dc:92:76:13:1d:1c:08:88:7e:b5:1a:9c:68:8b: 39:ac:d4:b1:ec:4c:01:0c:08:36:67:7c:51:1b:99: ad:8e:c6:c6:6c:2f:a1:7c:bd:b2:59:d9:99:df:72: ce:53:ed:80:6a:f9:d2:3d:f3:7d:75:49:92:2a:a8: 46:ec:30:e5:ea:e0:bd:d2:ee:95:90:45:b3:79:52: 49:01:ad:77:3a:6e:ba:0e:49:f4:78:e8:58:7b:bc: d7:8e:b5:24:6d:d8:c6:9f:8a:df:d8:60:62:03:3d: 1e:46:0e:29:09:49:28:e7:22:d5:91:3a:34:ef:81: 2a:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:01:74:FC:82:A1:55:3A:F6:AE:0A:79:9D:52:65:72:31:50:33:BF X509v3 Authority Key Identifier: keyid:37:25:B2:E9:7D:D4:5D:C0:B7:52:1C:0A:1B:B5:E4:06:09:B0:5D:96 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913CADE/F02AB17CFAE611E7923EA150C4F9AE02/NyWy6X3UXcC3UhwKG7XkBgmwXZY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NyWy6X3UXcC3UhwKG7XkBgmwXZY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913CADE/F02AB17CFAE611E7923EA150C4F9AE02/NyWy6X3UXcC3UhwKG7XkBgmwXZY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 90:aa:32:e7:c2:98:3b:cf:5f:f5:a3:54:82:a0:65:78:8a:f4: d6:58:f6:cb:e0:3e:34:40:36:22:46:56:7b:c9:30:12:90:4d: 6d:1d:16:a6:99:70:21:51:63:4f:31:af:01:ba:16:98:85:cd: b6:63:5b:bd:89:4a:1a:12:0d:65:5e:ef:00:03:a8:a3:9c:cf: d6:b1:19:6d:a9:92:f5:50:b0:b1:93:b7:eb:b6:d8:da:83:c8: 32:94:05:c6:8b:ba:bc:4b:af:f8:03:07:4a:6f:46:78:6c:09: 08:77:b1:33:27:54:22:83:8a:f7:c8:41:a5:ea:ae:e4:03:6e: 5e:d7:f0:83:f9:d7:34:08:95:01:d7:74:4f:62:7c:36:85:54: e4:13:c5:8f:83:21:15:53:fa:ee:35:e2:d6:4d:a4:ef:39:9c: 47:04:1e:f5:44:89:96:31:b0:1d:e3:cd:e0:11:d2:61:10:3e: 6a:5f:2e:49:76:a4:8e:10:6f:6d:49:2b:2b:db:3a:37:c7:ed: c5:f0:83:6e:cc:36:50:f3:19:70:bb:59:a0:ab:2f:5a:c1:25: e2:12:26:5c:ff:da:55:d6:a1:24:de:70:6f:3c:a6:eb:9b:d1: 39:a3:28:43:d2:2f:73:8e:ed:2f:e3:f5:88:81:0b:fd:07:6b: 60:a6:a0:58 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFqgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0NBREUxMTAvBgNVBAUTKDM3MjVCMkU5N0RENDVEQzBCNzUyMUMwQTFCQjVFNDA2 MDlCMDVEOTYwHhcNMjUwNTEyMTYzNjU2WhcNMjUwNTE5MTYzNjU2WjAYMRYwFAYD VQQDEw02ODIyMjNhOC0yZDc4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAkcujWtDkMDSS3EMUcLAdhwCcgfbXdFIXGT1o+aG/3SP76pKFS0YLlMjq7zC6 GxoqHq956SSX6dbeNk8Cscf2kqnttrnVoFrS1CbodOqN1w8WTpmXaidbqKTUa1rl 2Nf5J2BZYT3Y5LAQQFiDeG5QTtaKvuAVxsK0Ju/PkukC8iLTW1NA/GQY3JJ2Ex0c CIh+tRqcaIs5rNSx7EwBDAg2Z3xRG5mtjsbGbC+hfL2yWdmZ33LOU+2AavnSPfN9 dUmSKqhG7DDl6uC90u6VkEWzeVJJAa13Om66Dkn0eOhYe7zXjrUkbdjGn4rf2GBi Az0eRg4pCUko5yLVkTo074EqcQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIMBdPyC oVU69q4KeZ1SZXIxUDO/MB8GA1UdIwQYMBaAFDclsul91F3At1IcChu15AYJsF2W MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQ0FERS9GMDJBQjE3Q0ZB RTYxMUU3OTIzRUExNTBDNEY5QUUwMi9OeVd5NlgzVVhjQzNVaHdLRzdYa0JnbXdY WlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL055V3k2WDNVWGNDM1Vod0tHN1hrQmdtd1haWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz Q0FERS9GMDJBQjE3Q0ZBRTYxMUU3OTIzRUExNTBDNEY5QUUwMi9OeVd5NlgzVVhj QzNVaHdLRzdYa0JnbXdYWlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCQqjLnwpg7z1/1o1SCoGV4ivTWWPbL4D40QDYiRlZ7yTASkE1tHRam mXAhUWNPMa8BuhaYhc22Y1u9iUoaEg1lXu8AA6ijnM/WsRltqZL1ULCxk7frttja g8gylAXGi7q8S6/4AwdKb0Z4bAkId7EzJ1Qig4r3yEGl6q7kA25e1/CD+dc0CJUB 13RPYnw2hVTkE8WPgyEVU/ruNeLWTaTvOZxHBB71RImWMbAd483gEdJhED5qXy5J dqSOEG9tSSsr2zo3x+3F8INuzDZQ8xlwu1mgqy9awSXiEiZc/9pV1qEk3nBvPKbr m9E5oyhD0i9zju0v4/WIgQv9B2tgpqBY -----END CERTIFICATE-----Generated at Tue May 13 23:00:16 2025 by rpki-client