$ rpki-client -vvf rpki.apnic.net/member_repository/A919DD44/D8E31E763A1E11EBAE4ED41AC4F9AE02/nwZsuF9biPgjeA1flmJfQ4VIG78.mft File: nwZsuF9biPgjeA1flmJfQ4VIG78.mft (raw, json) Hash identifier: L9dGqE8YrJkcjeUkIZ0A4+gewk2jC6lOOeGZu2f97M0= Subject key identifier: 45:AA:9F:3E:97:E0:A2:0E:B3:CB:45:34:89:5C:6C:6E:AD:7E:31:0C Authority key identifier: 9F:06:6C:B8:5F:5B:88:F8:23:78:0D:5F:96:62:5F:43:85:48:1B:BF Certificate issuer: /CN=A919DD44/serialNumber=9F066CB85F5B88F823780D5F96625F4385481BBF Certificate serial: 072C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nwZsuF9biPgjeA1flmJfQ4VIG78.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919DD44/D8E31E763A1E11EBAE4ED41AC4F9AE02/nwZsuF9biPgjeA1flmJfQ4VIG78.mft Manifest number: 071F Signing time: Fri 16 May 2025 22:09:15 +0000 Manifest this update: Fri 16 May 2025 22:09:14 +0000 Manifest next update: Fri 23 May 2025 22:09:14 +0000 Files and hashes: 1: nwZsuF9biPgjeA1flmJfQ4VIG78.crl (hash: IM0tY0bwFuJeGkLnklAjA3TpnoxaRUOPqbl5Zb/i/NU=) 2: 788169BE3AAC11EBBEE1E81AC4F9AE02.roa (hash: t/R4fAlXQzy9ztNMWRdnB87GayGaEVACHRV/q2Z5jVE=) 3: 026A84FC4C3211ECB9639932C4F9AE02.roa (hash: uBkySuw/pyK9tvxApltYqkUVTPyi7oX70MF7KU+NjE0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919DD44/D8E31E763A1E11EBAE4ED41AC4F9AE02/nwZsuF9biPgjeA1flmJfQ4VIG78.crl rsync://rpki.apnic.net/member_repository/A919DD44/D8E31E763A1E11EBAE4ED41AC4F9AE02/nwZsuF9biPgjeA1flmJfQ4VIG78.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nwZsuF9biPgjeA1flmJfQ4VIG78.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 23 May 2025 22:09:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1836 (0x72c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919DD44, serialNumber=9F066CB85F5B88F823780D5F96625F4385481BBF Validity Not Before: May 16 22:09:14 2025 GMT Not After : May 23 22:09:14 2025 GMT Subject: CN=6827b78b-42c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:77:d7:22:74:87:e0:2d:2f:ed:9d:b1:2b:85: 9c:25:2c:9a:b2:a7:66:0f:3b:5c:6b:d8:e1:eb:b2: be:b1:8b:22:c3:4e:09:e5:5f:96:9a:23:48:e7:be: 11:ab:37:51:3b:36:0b:a4:2e:8a:3e:bc:a6:4e:0e: b3:6b:d7:c3:ef:30:0a:33:c4:10:21:a0:65:45:3c: 87:1d:52:6f:7e:c8:e0:d4:e4:85:2c:98:08:30:78: ff:4a:74:24:3c:85:3c:21:05:09:c2:66:43:6b:67: fa:0f:5f:b6:53:e0:c3:7b:86:17:4b:92:c0:8d:71: e4:25:47:1a:c1:46:0d:d5:4a:62:19:a5:c2:00:10: 98:cd:2e:9c:53:2c:42:ff:29:38:40:c6:1d:8b:03: 51:2b:82:16:b1:4c:59:46:94:b3:06:5e:f1:62:44: 78:21:a9:16:da:31:7c:28:90:16:a8:0e:e0:bc:f7: 25:d1:d7:0f:cf:cd:3a:2b:e0:9d:1a:dc:3f:bd:95: 96:70:4f:8a:12:a1:b3:09:53:1e:44:57:41:27:49: 94:47:3b:34:4a:ca:c5:77:0b:44:77:69:89:6e:d9: 84:22:ef:11:ca:ef:fd:80:52:b5:af:d0:3d:ec:af: 60:eb:e5:b4:89:1e:5c:54:97:c4:90:ca:14:23:10: 0d:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:AA:9F:3E:97:E0:A2:0E:B3:CB:45:34:89:5C:6C:6E:AD:7E:31:0C X509v3 Authority Key Identifier: keyid:9F:06:6C:B8:5F:5B:88:F8:23:78:0D:5F:96:62:5F:43:85:48:1B:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919DD44/D8E31E763A1E11EBAE4ED41AC4F9AE02/nwZsuF9biPgjeA1flmJfQ4VIG78.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nwZsuF9biPgjeA1flmJfQ4VIG78.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919DD44/D8E31E763A1E11EBAE4ED41AC4F9AE02/nwZsuF9biPgjeA1flmJfQ4VIG78.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4c:6d:8d:c9:26:8a:b7:09:f3:42:bd:b3:e7:cb:57:fd:f8:ed: 03:5f:4c:32:16:3e:3e:37:16:54:02:50:22:54:8c:65:4c:4f: b9:92:34:1b:39:2e:78:86:f1:d1:15:0c:d0:12:67:82:70:cd: 85:0f:56:f7:42:5a:ef:0f:d1:f5:5d:2b:50:7d:b5:ef:86:dd: f4:5d:39:e4:da:7d:63:fd:9d:f3:e2:a8:08:37:2b:2f:11:b9: 45:4a:42:5c:66:0f:63:79:9f:2f:69:4b:9a:d5:f0:79:71:52: 4e:a2:3c:86:8f:9c:fe:e1:11:2d:fe:07:df:07:30:c1:59:ad: dc:01:c9:36:d8:64:a4:32:95:90:d7:87:01:eb:2d:5b:a7:00: b2:af:43:72:28:df:19:21:a8:57:72:ff:e5:bd:0b:90:5f:5e: 44:cc:23:8c:16:79:00:4e:1f:65:1a:9d:53:73:ab:57:f4:db: 45:cf:74:46:40:c0:1f:2d:3f:b1:25:c9:b2:ba:04:7f:d5:b2: 68:e8:13:56:82:9f:3d:8a:71:91:79:af:da:ee:34:40:65:75: 07:18:b1:15:03:fa:cc:b1:8c:04:6c:2f:2b:8d:8f:03:68:fa: 9f:2e:5b:a1:8f:73:a4:22:7a:50:17:24:11:28:cf:20:35:53: 85:ec:03:d9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBywwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OURENDQxMTAvBgNVBAUTKDlGMDY2Q0I4NUY1Qjg4RjgyMzc4MEQ1Rjk2NjI1RjQz ODU0ODFCQkYwHhcNMjUwNTE2MjIwOTE0WhcNMjUwNTIzMjIwOTE0WjAYMRYwFAYD VQQDEw02ODI3Yjc4Yi00MmM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqXfXInSH4C0v7Z2xK4WcJSyasqdmDztca9jh67K+sYsiw04J5V+WmiNI574R qzdROzYLpC6KPrymTg6za9fD7zAKM8QQIaBlRTyHHVJvfsjg1OSFLJgIMHj/SnQk PIU8IQUJwmZDa2f6D1+2U+DDe4YXS5LAjXHkJUcawUYN1UpiGaXCABCYzS6cUyxC /yk4QMYdiwNRK4IWsUxZRpSzBl7xYkR4IakW2jF8KJAWqA7gvPcl0dcPz806K+Cd Gtw/vZWWcE+KEqGzCVMeRFdBJ0mURzs0SsrFdwtEd2mJbtmEIu8Ryu/9gFK1r9A9 7K9g6+W0iR5cVJfEkMoUIxANHwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEWqnz6X 4KIOs8tFNIlcbG6tfjEMMB8GA1UdIwQYMBaAFJ8GbLhfW4j4I3gNX5ZiX0OFSBu/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5REQ0NC9EOEUzMUU3NjNB MUUxMUVCQUU0RUQ0MUFDNEY5QUUwMi9ud1pzdUY5YmlQZ2plQTFmbG1KZlE0VklH NzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL253WnN1RjliaVBnamVBMWZsbUpmUTRWSUc3OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 REQ0NC9EOEUzMUU3NjNBMUUxMUVCQUU0RUQ0MUFDNEY5QUUwMi9ud1pzdUY5YmlQ Z2plQTFmbG1KZlE0VklHNzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBMbY3JJoq3CfNCvbPny1f9+O0DX0wyFj4+NxZUAlAiVIxlTE+5kjQb OS54hvHRFQzQEmeCcM2FD1b3QlrvD9H1XStQfbXvht30XTnk2n1j/Z3z4qgINysv EblFSkJcZg9jeZ8vaUua1fB5cVJOojyGj5z+4REt/gffBzDBWa3cAck22GSkMpWQ 14cB6y1bpwCyr0NyKN8ZIahXcv/lvQuQX15EzCOMFnkATh9lGp1Tc6tX9NtFz3RG QMAfLT+xJcmyugR/1bJo6BNWgp89inGRea/a7jRAZXUHGLEVA/rMsYwEbC8rjY8D aPqfLluhj3OkInpQFyQRKM8gNVOF7APZ -----END CERTIFICATE-----Generated at Sat May 17 08:00:48 2025 by rpki-client