$ rpki-client -vvf rpki.apnic.net/member_repository/A919819A/63EA20921D9E11E2ADB73F8E08B02CD2/NYOZxzbvBV1dWSyrGQFv44FvZgg.mft File: NYOZxzbvBV1dWSyrGQFv44FvZgg.mft (raw, json) Hash identifier: 92PLV0e6JnloryUKCQK0N3kpJ6R2C5Sv5JkciHNqLWA= Subject key identifier: 33:EC:E2:1E:F0:0C:1D:5B:BD:33:22:E3:A8:87:A6:EE:96:13:DE:65 Authority key identifier: 35:83:99:C7:36:EF:05:5D:5D:59:2C:AB:19:01:6F:E3:81:6F:66:08 Certificate issuer: /CN=A919819A/serialNumber=358399C736EF055D5D592CAB19016FE3816F6608 Certificate serial: 349F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NYOZxzbvBV1dWSyrGQFv44FvZgg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919819A/63EA20921D9E11E2ADB73F8E08B02CD2/NYOZxzbvBV1dWSyrGQFv44FvZgg.mft Manifest number: 3492 Signing time: Fri 16 May 2025 15:05:30 +0000 Manifest this update: Fri 16 May 2025 15:05:30 +0000 Manifest next update: Fri 23 May 2025 15:05:30 +0000 Files and hashes: 1: NYOZxzbvBV1dWSyrGQFv44FvZgg.crl (hash: mLP+kMbVReyL6VC+9UPKhFGZia5l7F27vi/wOCPKfp8=) 2: 73462B74643C11EB9E7DF918C4F9AE02.roa (hash: OiW89qQFovmBoY5voLYQMPJS/gYyS8nvSRtkPJR5YIU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919819A/63EA20921D9E11E2ADB73F8E08B02CD2/NYOZxzbvBV1dWSyrGQFv44FvZgg.crl rsync://rpki.apnic.net/member_repository/A919819A/63EA20921D9E11E2ADB73F8E08B02CD2/NYOZxzbvBV1dWSyrGQFv44FvZgg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NYOZxzbvBV1dWSyrGQFv44FvZgg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 23 May 2025 15:05:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13471 (0x349f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919819A, serialNumber=358399C736EF055D5D592CAB19016FE3816F6608 Validity Not Before: May 16 15:05:30 2025 GMT Not After : May 23 15:05:30 2025 GMT Subject: CN=6827543a-59f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:0b:33:6b:1c:9d:b9:b8:d0:3a:16:54:af:a0: f0:51:6c:d3:9d:c6:0a:22:93:4f:1f:67:c4:25:3c: e8:f2:32:25:41:52:c5:67:26:0d:23:6b:29:22:5d: 57:46:93:f2:5b:3d:80:9c:4e:84:a6:f9:c8:a5:1c: aa:36:68:85:59:8c:24:78:f4:4d:b1:05:05:cc:ad: 3e:38:72:e9:7e:72:78:24:50:af:19:e6:2e:82:f1: ec:d7:d2:08:9c:4f:d4:ee:61:f3:6d:53:63:41:1a: 3c:2b:17:0a:89:b8:fd:4e:c4:b6:c1:74:4c:fc:0e: fe:8f:36:da:5c:1c:d8:db:66:1a:3a:61:60:c8:48: 85:e7:67:9a:52:cd:c0:c2:bc:2a:95:47:d6:6c:3e: 1f:df:28:d2:b6:78:cb:a0:20:a4:6d:af:f2:71:b9: 1e:a4:7e:fb:5e:c7:bd:9a:5d:6b:24:02:16:18:eb: a0:3c:51:24:a7:2f:a7:c6:93:5f:52:18:b0:94:66: 3e:e7:7a:22:da:4e:f0:16:04:0f:60:49:e2:48:ec: 30:ef:b4:1d:27:4e:37:a8:7b:4f:6a:d5:d0:7a:c4: 7f:c5:df:87:14:73:39:43:8d:2a:8d:00:2d:66:a5: a7:0c:a6:27:ae:68:5b:6f:39:92:ef:e2:eb:7a:1b: 5f:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:EC:E2:1E:F0:0C:1D:5B:BD:33:22:E3:A8:87:A6:EE:96:13:DE:65 X509v3 Authority Key Identifier: keyid:35:83:99:C7:36:EF:05:5D:5D:59:2C:AB:19:01:6F:E3:81:6F:66:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919819A/63EA20921D9E11E2ADB73F8E08B02CD2/NYOZxzbvBV1dWSyrGQFv44FvZgg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NYOZxzbvBV1dWSyrGQFv44FvZgg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919819A/63EA20921D9E11E2ADB73F8E08B02CD2/NYOZxzbvBV1dWSyrGQFv44FvZgg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 19:fd:91:a5:ea:46:92:13:3c:4e:32:10:82:e6:05:c2:f5:72: 6e:07:ec:7a:dd:e3:a3:35:16:d2:f6:96:f0:56:26:fe:93:c5: ae:4a:f4:35:23:22:88:ff:6d:56:4b:e6:44:02:eb:0f:0e:ff: 9d:88:02:c2:ee:61:ab:10:1e:2a:14:fc:26:d5:b3:af:26:4f: b5:04:95:1e:91:55:dc:90:de:56:fa:04:bb:89:74:5d:5c:27: 1c:1a:85:e4:44:74:32:b9:ef:52:c1:7a:b3:7d:42:4b:2f:64: 7b:36:cc:ac:12:0d:83:f2:fa:60:4d:c5:a1:e5:44:96:7e:62: 8d:1d:22:ce:7d:03:28:7c:2d:29:82:d6:e0:d9:60:d2:5c:01: 48:6b:06:0c:9a:9c:54:74:dc:47:57:cb:c8:92:72:a4:ed:b9: 4c:7a:ec:5c:63:53:8f:37:33:42:8a:bd:c8:c6:f4:f3:dd:a5: 08:02:bb:ae:51:c6:43:d5:13:cc:64:c6:82:f4:d6:2d:9c:df: 47:f3:67:da:8d:6e:96:a0:e2:ed:94:ec:1e:97:82:d7:dc:b3: 86:79:da:38:81:bf:68:0a:39:93:b3:6e:e2:7c:00:08:7e:81: 74:67:d5:8d:64:5a:1b:04:9f:36:95:0c:78:c3:c3:d3:ad:6e: ee:26:96:d3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNJ8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTgxOUExMTAvBgNVBAUTKDM1ODM5OUM3MzZFRjA1NUQ1RDU5MkNBQjE5MDE2RkUz ODE2RjY2MDgwHhcNMjUwNTE2MTUwNTMwWhcNMjUwNTIzMTUwNTMwWjAYMRYwFAYD VQQDEw02ODI3NTQzYS01OWYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApwszaxydubjQOhZUr6DwUWzTncYKIpNPH2fEJTzo8jIlQVLFZyYNI2spIl1X RpPyWz2AnE6EpvnIpRyqNmiFWYwkePRNsQUFzK0+OHLpfnJ4JFCvGeYugvHs19II nE/U7mHzbVNjQRo8KxcKibj9TsS2wXRM/A7+jzbaXBzY22YaOmFgyEiF52eaUs3A wrwqlUfWbD4f3yjStnjLoCCkba/ycbkepH77Xse9ml1rJAIWGOugPFEkpy+nxpNf UhiwlGY+53oi2k7wFgQPYEniSOww77QdJ043qHtPatXQesR/xd+HFHM5Q40qjQAt ZqWnDKYnrmhbbzmS7+LrehtfUwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDPs4h7w DB1bvTMi46iHpu6WE95lMB8GA1UdIwQYMBaAFDWDmcc27wVdXVksqxkBb+OBb2YI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5ODE5QS82M0VBMjA5MjFE OUUxMUUyQURCNzNGOEUwOEIwMkNEMi9OWU9aeHpidkJWMWRXU3lyR1FGdjQ0RnZa Z2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05ZT1p4emJ2QlYxZFdTeXJHUUZ2NDRGdlpnZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 ODE5QS82M0VBMjA5MjFEOUUxMUUyQURCNzNGOEUwOEIwMkNEMi9OWU9aeHpidkJW MWRXU3lyR1FGdjQ0RnZaZ2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAZ/ZGl6kaSEzxOMhCC5gXC9XJuB+x63eOjNRbS9pbwVib+k8WuSvQ1 IyKI/21WS+ZEAusPDv+diALC7mGrEB4qFPwm1bOvJk+1BJUekVXckN5W+gS7iXRd XCccGoXkRHQyue9SwXqzfUJLL2R7NsysEg2D8vpgTcWh5USWfmKNHSLOfQMofC0p gtbg2WDSXAFIawYMmpxUdNxHV8vIknKk7blMeuxcY1OPNzNCir3IxvTz3aUIAruu UcZD1RPMZMaC9NYtnN9H82fajW6WoOLtlOwel4LX3LOGedo4gb9oCjmTs27ifAAI foF0Z9WNZFobBJ82lQx4w8PTrW7uJpbT -----END CERTIFICATE-----Generated at Sat May 17 10:43:47 2025 by rpki-client