$ rpki-client -vvf rpki.apnic.net/member_repository/A919819A/63EA20921D9E11E2ADB73F8E08B02CD2/NYOZxzbvBV1dWSyrGQFv44FvZgg.mft File: NYOZxzbvBV1dWSyrGQFv44FvZgg.mft (raw, json) Hash identifier: PbHoBDDiomWdD+V1tH/GVKZPbUTyXERV4qPFQzWS0Z8= Subject key identifier: 3B:7F:A5:71:01:D1:41:9F:59:8D:B8:BA:0F:E1:C5:E1:CD:F5:6F:32 Authority key identifier: 35:83:99:C7:36:EF:05:5D:5D:59:2C:AB:19:01:6F:E3:81:6F:66:08 Certificate issuer: /CN=A919819A/serialNumber=358399C736EF055D5D592CAB19016FE3816F6608 Certificate serial: 34BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NYOZxzbvBV1dWSyrGQFv44FvZgg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919819A/63EA20921D9E11E2ADB73F8E08B02CD2/NYOZxzbvBV1dWSyrGQFv44FvZgg.mft Manifest number: 34AC Signing time: Wed 02 Jul 2025 15:20:58 +0000 Manifest this update: Wed 02 Jul 2025 15:20:58 +0000 Manifest next update: Wed 09 Jul 2025 15:20:58 +0000 Files and hashes: 1: NYOZxzbvBV1dWSyrGQFv44FvZgg.crl (hash: af9y5NC4YcQ4KBkvOaSmwVcbkZZn234ffhgvFTIkmFI=) 2: 73462B74643C11EB9E7DF918C4F9AE02.roa (hash: OVp7PpV4WrIA8CZ/VZbdyu0UkcIERq8sMNiqxbn0hvE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919819A/63EA20921D9E11E2ADB73F8E08B02CD2/NYOZxzbvBV1dWSyrGQFv44FvZgg.crl rsync://rpki.apnic.net/member_repository/A919819A/63EA20921D9E11E2ADB73F8E08B02CD2/NYOZxzbvBV1dWSyrGQFv44FvZgg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NYOZxzbvBV1dWSyrGQFv44FvZgg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 15:20:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13498 (0x34ba) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919819A, serialNumber=358399C736EF055D5D592CAB19016FE3816F6608 Validity Not Before: Jul 2 15:20:58 2025 GMT Not After : Jul 9 15:20:58 2025 GMT Subject: CN=68654e5a-6216 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:58:7c:c5:fd:2b:42:19:aa:68:d4:ee:4d:8e: 01:a1:ad:10:03:52:5e:bf:aa:a2:3e:5b:1f:f8:a3: 18:12:e1:a8:0a:49:05:e2:b6:3c:ed:a3:4f:25:38: ea:8f:6e:bf:51:c3:c2:ca:23:7d:3d:2d:5b:ab:34: 14:54:74:77:90:0b:3a:bf:ed:bd:ff:5e:10:c7:59: 28:fc:6b:c3:4d:54:41:d1:e3:aa:00:82:5c:15:87: 3b:84:8a:a5:c5:a0:0c:10:8d:c0:ee:f8:15:45:d6: e2:54:b7:67:ff:4d:93:5d:19:63:da:47:d7:45:c4: d0:c2:0b:af:72:96:c8:a1:86:b6:47:d7:ee:3c:dc: 8c:f2:dc:98:7e:ab:85:77:32:fe:51:e6:5f:52:98: 3b:1c:97:b6:b1:10:28:ce:1a:5a:2e:4a:59:b2:59: fc:e4:88:90:d0:20:e6:5f:58:7c:8b:7d:e0:f3:08: 8b:f7:c4:58:7d:ef:f1:7a:8c:63:4e:9d:ba:d1:00: fa:d9:4b:f8:01:ba:ad:98:9c:8d:d6:08:e7:30:98: 8d:fc:fa:12:10:9c:1c:09:9b:ea:4c:f3:1b:a6:62: f0:fc:3e:dc:44:55:6b:76:9c:91:96:32:10:21:e2: 56:1a:a7:a1:2b:af:06:33:0a:66:80:40:93:74:f2: 5c:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:7F:A5:71:01:D1:41:9F:59:8D:B8:BA:0F:E1:C5:E1:CD:F5:6F:32 X509v3 Authority Key Identifier: keyid:35:83:99:C7:36:EF:05:5D:5D:59:2C:AB:19:01:6F:E3:81:6F:66:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919819A/63EA20921D9E11E2ADB73F8E08B02CD2/NYOZxzbvBV1dWSyrGQFv44FvZgg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NYOZxzbvBV1dWSyrGQFv44FvZgg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919819A/63EA20921D9E11E2ADB73F8E08B02CD2/NYOZxzbvBV1dWSyrGQFv44FvZgg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 22:ad:e9:38:0c:8f:55:bf:2d:98:c3:3e:c2:54:7a:37:90:c0: 43:4d:05:00:bd:a0:8c:1a:b1:b9:25:eb:65:92:b5:77:0a:bc: 6e:7c:c6:78:45:41:f7:b0:5d:c3:e4:f6:93:5a:cf:c4:5c:14: 81:65:84:2e:23:2c:5c:02:56:3b:98:3d:94:4f:65:4b:f9:43: 0e:d0:bc:d9:32:63:dd:0b:63:4c:4a:8f:9e:c6:0c:1c:d7:d3: c2:25:a3:cf:44:9f:8e:cb:a4:94:53:ad:b9:81:96:31:f0:8a: 6a:3f:62:9c:11:c9:49:b2:20:16:96:1e:10:1a:9f:d7:cd:03: 03:71:88:98:28:c9:48:a3:e5:21:c5:73:2d:b5:0b:e6:b2:de: 3a:cb:60:f8:b9:ff:19:af:e7:a1:25:90:e5:d9:5a:e6:e9:1f: b3:41:b4:80:f8:78:71:dd:c2:c6:7e:fa:d7:56:96:71:95:61: 1c:42:b2:6a:fd:18:d7:36:2d:7f:a0:83:8e:0c:e4:af:ea:97: df:d7:11:70:32:85:5e:bc:95:b8:22:eb:17:4d:8a:36:48:73: f6:ef:29:c9:90:c8:ca:36:a9:a7:5b:c4:23:d4:2d:b4:4a:b6: c3:4d:0e:cc:05:ae:26:ed:3e:94:26:d3:33:09:6c:63:c3:0a: 11:59:2d:c1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNLowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTgxOUExMTAvBgNVBAUTKDM1ODM5OUM3MzZFRjA1NUQ1RDU5MkNBQjE5MDE2RkUz ODE2RjY2MDgwHhcNMjUwNzAyMTUyMDU4WhcNMjUwNzA5MTUyMDU4WjAYMRYwFAYD VQQDEw02ODY1NGU1YS02MjE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoFh8xf0rQhmqaNTuTY4Boa0QA1Jev6qiPlsf+KMYEuGoCkkF4rY87aNPJTjq j26/UcPCyiN9PS1bqzQUVHR3kAs6v+29/14Qx1ko/GvDTVRB0eOqAIJcFYc7hIql xaAMEI3A7vgVRdbiVLdn/02TXRlj2kfXRcTQwguvcpbIoYa2R9fuPNyM8tyYfquF dzL+UeZfUpg7HJe2sRAozhpaLkpZsln85IiQ0CDmX1h8i33g8wiL98RYfe/xeoxj Tp260QD62Uv4AbqtmJyN1gjnMJiN/PoSEJwcCZvqTPMbpmLw/D7cRFVrdpyRljIQ IeJWGqehK68GMwpmgECTdPJcfwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDt/pXEB 0UGfWY24ug/hxeHN9W8yMB8GA1UdIwQYMBaAFDWDmcc27wVdXVksqxkBb+OBb2YI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5ODE5QS82M0VBMjA5MjFE OUUxMUUyQURCNzNGOEUwOEIwMkNEMi9OWU9aeHpidkJWMWRXU3lyR1FGdjQ0RnZa Z2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05ZT1p4emJ2QlYxZFdTeXJHUUZ2NDRGdlpnZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 ODE5QS82M0VBMjA5MjFEOUUxMUUyQURCNzNGOEUwOEIwMkNEMi9OWU9aeHpidkJW MWRXU3lyR1FGdjQ0RnZaZ2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAirek4DI9Vvy2Ywz7CVHo3kMBDTQUAvaCMGrG5JetlkrV3CrxufMZ4 RUH3sF3D5PaTWs/EXBSBZYQuIyxcAlY7mD2UT2VL+UMO0LzZMmPdC2NMSo+exgwc 19PCJaPPRJ+Oy6SUU625gZYx8IpqP2KcEclJsiAWlh4QGp/XzQMDcYiYKMlIo+Uh xXMttQvmst46y2D4uf8Zr+ehJZDl2Vrm6R+zQbSA+Hhx3cLGfvrXVpZxlWEcQrJq /RjXNi1/oIOODOSv6pff1xFwMoVevJW4IusXTYo2SHP27ynJkMjKNqmnW8Qj1C20 SrbDTQ7MBa4m7T6UJtMzCWxjwwoRWS3B -----END CERTIFICATE-----Generated at Thu Jul 3 18:19:42 2025 by rpki-client