$ rpki-client -vvf rpki.apnic.net/member_repository/A916DA1F/81A04448362711E8A2108F74C4F9AE02/N-Z4kuvCt8JBAuhSfpB8_q71yVA.mft File: N-Z4kuvCt8JBAuhSfpB8_q71yVA.mft (raw, json) Hash identifier: Kp5bfE9riSVWweKvhaQzuc9qJ3epfTN5fKP4TVPTSnU= Subject key identifier: 8E:EC:FB:EA:D9:57:CF:1B:7E:40:31:2E:F5:2F:22:09:FB:2A:E7:84 Authority key identifier: 37:E6:78:92:EB:C2:B7:C2:41:02:E8:52:7E:90:7C:FE:AE:F5:C9:50 Certificate issuer: /CN=A916DA1F/serialNumber=37E67892EBC2B7C24102E8527E907CFEAEF5C950 Certificate serial: 1576 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N-Z4kuvCt8JBAuhSfpB8_q71yVA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916DA1F/81A04448362711E8A2108F74C4F9AE02/N-Z4kuvCt8JBAuhSfpB8_q71yVA.mft Manifest number: 156E Signing time: Mon 12 May 2025 16:43:42 +0000 Manifest this update: Mon 12 May 2025 16:43:41 +0000 Manifest next update: Mon 19 May 2025 16:43:41 +0000 Files and hashes: 1: N-Z4kuvCt8JBAuhSfpB8_q71yVA.crl (hash: vXBdsqYzsCd0b/IjoMbICH86r0MDpqGGEkGy0nS9KGY=) 2: 2036C856362911E8B6C37C78C4F9AE02.roa (hash: VjPDMCTDAl0F+kUlLL83qcuxLts9GNlg09c0jF2guQg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916DA1F/81A04448362711E8A2108F74C4F9AE02/N-Z4kuvCt8JBAuhSfpB8_q71yVA.crl rsync://rpki.apnic.net/member_repository/A916DA1F/81A04448362711E8A2108F74C4F9AE02/N-Z4kuvCt8JBAuhSfpB8_q71yVA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N-Z4kuvCt8JBAuhSfpB8_q71yVA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 16:43:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5494 (0x1576) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916DA1F, serialNumber=37E67892EBC2B7C24102E8527E907CFEAEF5C950 Validity Not Before: May 12 16:43:41 2025 GMT Not After : May 19 16:43:41 2025 GMT Subject: CN=6822253d-98e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:52:ef:63:cb:f4:85:62:6a:b2:13:db:e2:2e: 7c:54:b5:45:63:59:6e:ed:a7:11:8e:e2:1b:c7:93: 95:57:22:34:1c:4b:9a:b0:ab:57:a8:5e:0c:1c:a6: e8:d9:11:5d:45:52:73:48:1d:8e:3d:cb:00:01:65: 9d:a9:23:36:a4:66:84:44:18:7b:ca:98:b3:0c:40: d8:f1:ae:99:ce:84:4d:db:f9:14:04:ea:55:53:72: ef:ed:cd:b9:03:28:7f:be:ee:d1:53:c3:f7:3b:b0: 7a:51:0a:92:93:e6:04:cb:62:ed:ce:e5:ee:c6:03: 31:cc:3b:37:64:b4:3d:23:a3:6f:4d:24:83:ed:05: a2:da:10:66:36:48:b6:97:07:3b:e1:df:2a:93:ec: a2:71:f6:9e:e6:95:bf:c1:f0:21:97:d1:ad:37:ba: 96:7c:e5:5d:39:d9:cd:c7:0c:1f:52:f9:e5:23:39: bc:e4:27:b1:9f:32:b4:68:b2:ce:ae:f5:dd:5b:04: 87:34:a9:e2:46:10:db:e0:b8:b3:0e:9c:b8:ae:13: 0d:86:b8:ab:24:31:3c:a6:c2:03:9b:75:56:17:a9: f2:2e:b6:01:47:c2:97:b6:a6:93:59:e4:ae:7e:99: 28:1a:b5:b7:76:f3:b2:ee:2a:ef:07:dd:dc:40:d3: bb:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:EC:FB:EA:D9:57:CF:1B:7E:40:31:2E:F5:2F:22:09:FB:2A:E7:84 X509v3 Authority Key Identifier: keyid:37:E6:78:92:EB:C2:B7:C2:41:02:E8:52:7E:90:7C:FE:AE:F5:C9:50 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916DA1F/81A04448362711E8A2108F74C4F9AE02/N-Z4kuvCt8JBAuhSfpB8_q71yVA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N-Z4kuvCt8JBAuhSfpB8_q71yVA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916DA1F/81A04448362711E8A2108F74C4F9AE02/N-Z4kuvCt8JBAuhSfpB8_q71yVA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b4:70:d6:e1:2d:75:95:80:30:50:23:80:fe:33:2c:14:90:dd: f9:c2:85:dd:3c:0a:95:7a:c5:86:4c:43:93:43:fc:22:f5:be: 5a:61:d8:77:82:92:e4:ac:f4:09:74:88:3d:a2:6b:6b:d5:84: f9:39:88:0a:79:df:c1:1d:f3:d1:f4:50:a9:ad:62:0b:67:3d: ad:d8:15:1b:f4:f6:5d:1e:29:8a:46:3f:7d:be:db:73:7f:b0: e4:38:7a:b3:f0:28:3e:d9:da:d6:e6:0b:21:c9:14:77:01:99: f4:1e:f5:ff:75:49:d3:3f:46:cd:80:bf:3c:50:86:ee:0d:c3: 76:77:3c:89:99:d6:99:c4:6f:22:b5:e0:00:cb:31:ec:67:fd: 05:c3:89:1a:b9:ef:36:9f:14:ad:36:b2:db:aa:ae:fd:4a:be: 9c:5f:4a:ce:41:9d:2e:f9:19:93:23:8f:a4:96:2e:ab:c3:c8: d2:d6:ee:da:c6:21:23:79:6a:5a:45:ac:4c:9c:c7:f4:4d:65: e2:fa:c4:fa:98:9b:15:b9:06:9f:f1:22:14:29:bf:31:44:a0: ef:4c:42:a7:9e:5c:f0:30:8f:40:91:04:62:d6:b9:dc:3e:50: 48:77:4c:d9:c7:93:25:9b:dc:0e:99:dd:5c:7a:10:3d:bc:0b: 0d:db:4e:8a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFXYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkRBMUYxMTAvBgNVBAUTKDM3RTY3ODkyRUJDMkI3QzI0MTAyRTg1MjdFOTA3Q0ZF QUVGNUM5NTAwHhcNMjUwNTEyMTY0MzQxWhcNMjUwNTE5MTY0MzQxWjAYMRYwFAYD VQQDEw02ODIyMjUzZC05OGU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx1LvY8v0hWJqshPb4i58VLVFY1lu7acRjuIbx5OVVyI0HEuasKtXqF4MHKbo 2RFdRVJzSB2OPcsAAWWdqSM2pGaERBh7ypizDEDY8a6ZzoRN2/kUBOpVU3Lv7c25 Ayh/vu7RU8P3O7B6UQqSk+YEy2LtzuXuxgMxzDs3ZLQ9I6NvTSSD7QWi2hBmNki2 lwc74d8qk+yicfae5pW/wfAhl9GtN7qWfOVdOdnNxwwfUvnlIzm85CexnzK0aLLO rvXdWwSHNKniRhDb4LizDpy4rhMNhrirJDE8psIDm3VWF6nyLrYBR8KXtqaTWeSu fpkoGrW3dvOy7irvB93cQNO7AQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI7s++rZ V88bfkAxLvUvIgn7KueEMB8GA1UdIwQYMBaAFDfmeJLrwrfCQQLoUn6QfP6u9clQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2REExRi84MUEwNDQ0ODM2 MjcxMUU4QTIxMDhGNzRDNEY5QUUwMi9OLVo0a3V2Q3Q4SkJBdWhTZnBCOF9xNzF5 VkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL04tWjRrdXZDdDhKQkF1aFNmcEI4X3E3MXlWQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 REExRi84MUEwNDQ0ODM2MjcxMUU4QTIxMDhGNzRDNEY5QUUwMi9OLVo0a3V2Q3Q4 SkJBdWhTZnBCOF9xNzF5VkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC0cNbhLXWVgDBQI4D+MywUkN35woXdPAqVesWGTEOTQ/wi9b5aYdh3 gpLkrPQJdIg9omtr1YT5OYgKed/BHfPR9FCprWILZz2t2BUb9PZdHimKRj99vttz f7DkOHqz8Cg+2drW5gshyRR3AZn0HvX/dUnTP0bNgL88UIbuDcN2dzyJmdaZxG8i teAAyzHsZ/0Fw4kaue82nxStNrLbqq79Sr6cX0rOQZ0u+RmTI4+kli6rw8jS1u7a xiEjeWpaRaxMnMf0TWXi+sT6mJsVuQaf8SIUKb8xRKDvTEKnnlzwMI9AkQRi1rnc PlBId0zZx5Mlm9wOmd1cehA9vAsN206K -----END CERTIFICATE-----Generated at Wed May 14 04:56:06 2025 by rpki-client