$ rpki-client -vvf rpki.apnic.net/member_repository/A91BBBA5/E6484ACE9B2D11E8B465D80FC4F9AE02/NZYOHhaeA_Rvr5H04_8TUUamMTo.mft File: NZYOHhaeA_Rvr5H04_8TUUamMTo.mft (raw, json) Hash identifier: fL2Cxlk6dMQLWpjxQ8a/51SHcCLW/5HWj4lP0jTFm7E= Subject key identifier: 56:73:36:F1:F5:1B:53:A9:33:82:98:DC:A6:3B:80:02:04:70:4B:80 Authority key identifier: 35:96:0E:1E:16:9E:03:F4:6F:AF:91:F4:E3:FF:13:51:46:A6:31:3A Certificate issuer: /CN=A91BBBA5/serialNumber=35960E1E169E03F46FAF91F4E3FF135146A6313A Certificate serial: 136D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NZYOHhaeA_Rvr5H04_8TUUamMTo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BBBA5/E6484ACE9B2D11E8B465D80FC4F9AE02/NZYOHhaeA_Rvr5H04_8TUUamMTo.mft Manifest number: 1366 Signing time: Sat 10 May 2025 16:53:26 +0000 Manifest this update: Sat 10 May 2025 16:53:25 +0000 Manifest next update: Sat 17 May 2025 16:53:25 +0000 Files and hashes: 1: NZYOHhaeA_Rvr5H04_8TUUamMTo.crl (hash: I3cWNRmTEEKD0enQ0MMSgVtCSGlkvdxjmA7qUSa3NhM=) 2: 21333DA69B2E11E8908CC50FC4F9AE02.roa (hash: +1SNSIFs+P7lOAKW1zIJPA5+xtDNMIC4L/Fb0Zo2lHo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BBBA5/E6484ACE9B2D11E8B465D80FC4F9AE02/NZYOHhaeA_Rvr5H04_8TUUamMTo.crl rsync://rpki.apnic.net/member_repository/A91BBBA5/E6484ACE9B2D11E8B465D80FC4F9AE02/NZYOHhaeA_Rvr5H04_8TUUamMTo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NZYOHhaeA_Rvr5H04_8TUUamMTo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 16:53:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4973 (0x136d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BBBA5, serialNumber=35960E1E169E03F46FAF91F4E3FF135146A6313A Validity Not Before: May 10 16:53:25 2025 GMT Not After : May 17 16:53:25 2025 GMT Subject: CN=681f8485-6370 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:bb:8d:09:c7:2f:eb:c7:08:45:78:07:b5:20: 0e:c9:3a:5f:14:6d:cc:8b:64:62:f3:9c:ae:c9:4d: ea:45:d4:42:ae:f1:52:cf:fd:fc:ce:a3:ab:33:ab: a9:c5:e2:27:39:ab:18:37:d8:43:cc:00:f7:e6:de: 70:f7:21:3c:2d:9c:23:bb:df:58:0a:c7:4f:bc:ed: 15:34:c4:62:c6:0c:1c:b4:74:b5:63:60:5c:52:e4: 52:ba:ef:2a:17:c5:c1:64:7e:39:6b:20:c8:03:a2: f6:b0:61:89:2c:bb:d6:e7:f6:3c:6c:b4:cc:23:42: e7:e8:04:82:50:39:33:69:fa:bc:e8:05:dc:9e:77: 0b:30:af:33:3b:5f:0a:13:78:4d:8a:47:6c:89:00: 4d:7b:9b:49:05:7a:47:52:a3:f7:12:4e:1a:69:e6: d8:d6:f4:8c:f8:61:1a:cb:fd:fe:3e:c9:38:cc:9c: cb:7b:cd:19:ac:94:51:e8:84:a0:7e:30:25:52:a6: c9:58:0f:04:a1:40:36:fe:6a:82:96:1b:35:40:58: ba:5c:5c:ea:ca:f9:4f:bc:2d:98:ad:3f:5f:ec:5a: d0:8b:8b:15:77:3c:7a:98:b8:e6:5c:0e:05:62:5a: 66:cc:28:55:a2:6c:be:85:85:f1:36:75:7c:7c:2e: 4f:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:73:36:F1:F5:1B:53:A9:33:82:98:DC:A6:3B:80:02:04:70:4B:80 X509v3 Authority Key Identifier: keyid:35:96:0E:1E:16:9E:03:F4:6F:AF:91:F4:E3:FF:13:51:46:A6:31:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BBBA5/E6484ACE9B2D11E8B465D80FC4F9AE02/NZYOHhaeA_Rvr5H04_8TUUamMTo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NZYOHhaeA_Rvr5H04_8TUUamMTo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BBBA5/E6484ACE9B2D11E8B465D80FC4F9AE02/NZYOHhaeA_Rvr5H04_8TUUamMTo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8e:73:74:f2:3e:10:fd:87:f6:ea:62:0b:4f:e8:62:50:0f:53: 2a:01:ca:8e:e2:a2:77:69:3e:7c:42:35:52:97:23:0a:db:ec: 80:bd:78:ba:b8:10:d1:37:17:0e:1a:ec:50:9c:84:4b:14:58: b7:fc:64:09:98:9e:17:65:f4:9d:99:1f:87:b5:ee:c3:22:64: 7f:de:02:12:c2:ea:ea:0b:07:eb:31:6e:ad:0a:8b:4a:b8:2f: f6:16:30:6c:f3:8d:15:cc:e8:bb:8a:27:09:0d:43:74:04:cf: f1:10:73:f5:99:69:fa:14:09:d8:4a:5d:26:db:0c:91:a8:b4: 69:23:77:82:8f:2d:bd:14:b1:1a:db:90:70:c5:72:34:86:e7: d8:c9:04:5b:b4:73:12:d7:9b:61:3c:8b:6b:a7:71:03:2f:7c: 05:d7:c1:24:fa:83:76:14:09:5e:f5:ae:e8:03:90:ae:62:d1: dc:93:89:8a:28:1b:15:b2:36:5f:51:6e:ed:61:4e:ba:9c:cd: a3:c4:b4:6e:ea:d0:e8:ec:fc:bc:33:f2:e7:07:16:1a:d8:07: a1:18:bd:da:51:03:38:14:db:7c:53:01:b0:a6:4a:7c:6e:15: f0:c5:d3:10:98:7a:0d:0f:f9:07:90:ab:e2:f3:1c:7d:cd:35: 27:bf:ef:8e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICE20wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkJCQTUxMTAvBgNVBAUTKDM1OTYwRTFFMTY5RTAzRjQ2RkFGOTFGNEUzRkYxMzUx NDZBNjMxM0EwHhcNMjUwNTEwMTY1MzI1WhcNMjUwNTE3MTY1MzI1WjAYMRYwFAYD VQQDEw02ODFmODQ4NS02MzcwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy7uNCccv68cIRXgHtSAOyTpfFG3Mi2Ri85yuyU3qRdRCrvFSz/38zqOrM6up xeInOasYN9hDzAD35t5w9yE8LZwju99YCsdPvO0VNMRixgwctHS1Y2BcUuRSuu8q F8XBZH45ayDIA6L2sGGJLLvW5/Y8bLTMI0Ln6ASCUDkzafq86AXcnncLMK8zO18K E3hNikdsiQBNe5tJBXpHUqP3Ek4aaebY1vSM+GEay/3+Psk4zJzLe80ZrJRR6ISg fjAlUqbJWA8EoUA2/mqClhs1QFi6XFzqyvlPvC2YrT9f7FrQi4sVdzx6mLjmXA4F YlpmzChVomy+hYXxNnV8fC5PMQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFZzNvH1 G1OpM4KY3KY7gAIEcEuAMB8GA1UdIwQYMBaAFDWWDh4WngP0b6+R9OP/E1FGpjE6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQkJBNS9FNjQ4NEFDRTlC MkQxMUU4QjQ2NUQ4MEZDNEY5QUUwMi9OWllPSGhhZUFfUnZyNUgwNF84VFVVYW1N VG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05aWU9IaGFlQV9SdnI1SDA0XzhUVVVhbU1Uby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QkJBNS9FNjQ4NEFDRTlCMkQxMUU4QjQ2NUQ4MEZDNEY5QUUwMi9OWllPSGhhZUFf UnZyNUgwNF84VFVVYW1NVG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCOc3TyPhD9h/bqYgtP6GJQD1MqAcqO4qJ3aT58QjVSlyMK2+yAvXi6 uBDRNxcOGuxQnIRLFFi3/GQJmJ4XZfSdmR+Hte7DImR/3gISwurqCwfrMW6tCotK uC/2FjBs840VzOi7iicJDUN0BM/xEHP1mWn6FAnYSl0m2wyRqLRpI3eCjy29FLEa 25BwxXI0hufYyQRbtHMS15thPItrp3EDL3wF18Ek+oN2FAle9a7oA5CuYtHck4mK KBsVsjZfUW7tYU66nM2jxLRu6tDo7Py8M/LnBxYa2AehGL3aUQM4FNt8UwGwpkp8 bhXwxdMQmHoND/kHkKvi8xx9zTUnv++O -----END CERTIFICATE-----Generated at Sun May 11 22:11:24 2025 by rpki-client