$ rpki-client -vvf rpki.apnic.net/member_repository/A913EFAB/E82D06FE057411ECA242C57FC4F9AE02/nyv9fYAM-hPpBIrhALSFFDASb9M.mft File: nyv9fYAM-hPpBIrhALSFFDASb9M.mft (raw, json) Hash identifier: IDqXNefZjg6hFIab/FnW8z6hcpYjO80sSbJH/FWgw3o= Subject key identifier: 16:38:CC:80:15:C8:1A:B4:EF:71:0A:FC:4D:83:FC:96:6A:00:AD:F6 Authority key identifier: 9F:2B:FD:7D:80:0C:FA:13:E9:04:8A:E1:00:B4:85:14:30:12:6F:D3 Certificate issuer: /CN=A913EFAB/serialNumber=9F2BFD7D800CFA13E9048AE100B4851430126FD3 Certificate serial: 0515 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nyv9fYAM-hPpBIrhALSFFDASb9M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913EFAB/E82D06FE057411ECA242C57FC4F9AE02/nyv9fYAM-hPpBIrhALSFFDASb9M.mft Manifest number: 050F Signing time: Sat 10 May 2025 23:14:02 +0000 Manifest this update: Sat 10 May 2025 23:14:01 +0000 Manifest next update: Sat 17 May 2025 23:14:01 +0000 Files and hashes: 1: nyv9fYAM-hPpBIrhALSFFDASb9M.crl (hash: lcQg8t4suo2hHH/rasZqKLwpSbQFXlQzfOLofxufzKI=) 2: 06D647D4057811EC8BCE3783C4F9AE02.roa (hash: grJhcWmzDCOgdxUnDbK2ZLr2jRQYlivgBq7XqkPgbbI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913EFAB/E82D06FE057411ECA242C57FC4F9AE02/nyv9fYAM-hPpBIrhALSFFDASb9M.crl rsync://rpki.apnic.net/member_repository/A913EFAB/E82D06FE057411ECA242C57FC4F9AE02/nyv9fYAM-hPpBIrhALSFFDASb9M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nyv9fYAM-hPpBIrhALSFFDASb9M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 18:24:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1301 (0x515) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913EFAB, serialNumber=9F2BFD7D800CFA13E9048AE100B4851430126FD3 Validity Not Before: May 10 23:14:01 2025 GMT Not After : May 17 23:14:01 2025 GMT Subject: CN=681fddba-e863 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:97:10:4b:65:92:23:58:45:00:60:33:32:fe: 12:21:f0:4a:f5:f8:a6:f4:9d:88:f7:cc:d4:6b:3c: 01:7d:fe:99:43:05:61:c4:13:39:db:2e:0a:5d:46: ba:1c:47:28:36:fd:d2:c5:e2:a8:44:df:f4:a9:c3: 70:9e:a7:6d:7e:b1:a7:02:e7:66:93:f9:48:15:de: 18:00:84:df:16:39:a2:ee:a8:9b:85:59:7c:4b:b7: 93:e7:a8:64:50:8c:4e:c6:9e:25:fd:3d:f2:09:cb: 33:c6:05:0d:13:d6:c1:e7:cf:e9:7f:7e:a0:ca:4c: 26:5e:3f:6a:6f:00:41:ed:a0:e8:6c:6b:03:02:78: 13:1c:f1:ff:5d:8a:80:8e:bb:36:57:bd:f8:64:f7: 9f:f3:c7:4a:ec:1b:20:30:1c:1c:0c:82:9b:ae:80: a8:7f:69:46:dc:66:f0:f5:b9:34:47:89:61:4f:20: 24:ab:c1:0d:29:0d:b7:06:a1:70:91:57:81:07:fb: 77:bf:71:5d:65:7d:51:97:c7:35:cc:68:c5:a6:21: ef:63:77:30:d4:6e:99:8f:44:e4:1f:7d:f9:6f:34: a1:46:e4:ed:bb:92:05:ec:e6:94:50:f3:ed:8d:7c: fa:ad:6b:1b:2d:d6:27:23:b3:0b:0f:79:d6:69:f4: 04:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:38:CC:80:15:C8:1A:B4:EF:71:0A:FC:4D:83:FC:96:6A:00:AD:F6 X509v3 Authority Key Identifier: keyid:9F:2B:FD:7D:80:0C:FA:13:E9:04:8A:E1:00:B4:85:14:30:12:6F:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913EFAB/E82D06FE057411ECA242C57FC4F9AE02/nyv9fYAM-hPpBIrhALSFFDASb9M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nyv9fYAM-hPpBIrhALSFFDASb9M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913EFAB/E82D06FE057411ECA242C57FC4F9AE02/nyv9fYAM-hPpBIrhALSFFDASb9M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 51:9c:a6:99:a3:a6:b4:18:fd:75:02:3d:d8:32:f0:b3:38:8a: 0c:f6:a0:4c:cb:30:91:a4:de:39:7b:e7:a4:6f:49:53:0b:87: 92:13:8a:5a:a2:7e:bf:c1:3b:02:ea:d3:fa:be:23:38:d6:5b: a9:0a:da:2a:42:43:5f:6a:97:dd:69:5d:ff:95:b2:42:e4:1d: 2d:92:a8:95:ef:35:60:0c:45:e5:50:74:c7:19:c4:dc:70:bd: d8:54:73:50:92:6f:4e:a2:fb:9c:f3:7e:d2:88:09:c9:56:d5: 76:29:3b:30:1b:ce:7a:e6:8e:34:3e:fe:6a:7f:18:67:6a:33: f1:dd:34:b5:f7:68:13:40:38:8c:82:b8:3b:37:af:96:8d:38: 5d:88:f5:31:ca:c5:37:ad:22:22:94:25:e4:53:4a:c4:68:0f: 03:2b:a0:4b:99:b4:07:0e:a9:00:5d:09:ca:ef:92:7c:be:52: 0b:48:b6:9f:2f:12:fb:52:ab:f5:a5:92:d8:69:4c:ed:43:c3: 3d:e6:3c:87:f2:20:00:56:25:5e:05:69:b8:29:70:d6:82:67: 15:c4:9a:3b:b5:c8:37:ae:a5:35:6c:74:cd:f2:67:b6:35:b5: ca:13:fe:4d:f1:d9:65:55:a6:c6:48:51:7c:1c:f0:14:d1:6e: 96:ea:73:05 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBRUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0VGQUIxMTAvBgNVBAUTKDlGMkJGRDdEODAwQ0ZBMTNFOTA0OEFFMTAwQjQ4NTE0 MzAxMjZGRDMwHhcNMjUwNTEwMjMxNDAxWhcNMjUwNTE3MjMxNDAxWjAYMRYwFAYD VQQDEw02ODFmZGRiYS1lODYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwJcQS2WSI1hFAGAzMv4SIfBK9fim9J2I98zUazwBff6ZQwVhxBM52y4KXUa6 HEcoNv3SxeKoRN/0qcNwnqdtfrGnAudmk/lIFd4YAITfFjmi7qibhVl8S7eT56hk UIxOxp4l/T3yCcszxgUNE9bB58/pf36gykwmXj9qbwBB7aDobGsDAngTHPH/XYqA jrs2V734ZPef88dK7BsgMBwcDIKbroCof2lG3Gbw9bk0R4lhTyAkq8ENKQ23BqFw kVeBB/t3v3FdZX1Rl8c1zGjFpiHvY3cw1G6Zj0TkH335bzShRuTtu5IF7OaUUPPt jXz6rWsbLdYnI7MLD3nWafQEUQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBY4zIAV yBq073EK/E2D/JZqAK32MB8GA1UdIwQYMBaAFJ8r/X2ADPoT6QSK4QC0hRQwEm/T MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRUZBQi9FODJEMDZGRTA1 NzQxMUVDQTI0MkM1N0ZDNEY5QUUwMi9ueXY5ZllBTS1oUHBCSXJoQUxTRkZEQVNi OU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL255djlmWUFNLWhQcEJJcmhBTFNGRkRBU2I5TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RUZBQi9FODJEMDZGRTA1NzQxMUVDQTI0MkM1N0ZDNEY5QUUwMi9ueXY5ZllBTS1o UHBCSXJoQUxTRkZEQVNiOU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBRnKaZo6a0GP11Aj3YMvCzOIoM9qBMyzCRpN45e+ekb0lTC4eSE4pa on6/wTsC6tP6viM41lupCtoqQkNfapfdaV3/lbJC5B0tkqiV7zVgDEXlUHTHGcTc cL3YVHNQkm9Oovuc837SiAnJVtV2KTswG8565o40Pv5qfxhnajPx3TS192gTQDiM grg7N6+WjThdiPUxysU3rSIilCXkU0rEaA8DK6BLmbQHDqkAXQnK75J8vlILSLaf LxL7Uqv1pZLYaUztQ8M95jyH8iAAViVeBWm4KXDWgmcVxJo7tcg3rqU1bHTN8me2 NbXKE/5N8dllVabGSFF8HPAU0W6W6nMF -----END CERTIFICATE-----Generated at Sun May 11 01:39:06 2025 by rpki-client