$ rpki-client -vvf rpki.apnic.net/member_repository/A9113BE5/611C512CF0F311EC84B29C80C4F9AE02/NkbrHzcLfmPR823rNsJHbJbmuug.mft File: NkbrHzcLfmPR823rNsJHbJbmuug.mft (raw, json) Hash identifier: xCA6ztzpmvxSHAbOkhpjMs3VY63BAM8e9+GKC6gR6Og= Subject key identifier: 51:4C:44:E5:32:80:2C:9E:29:56:EC:CE:D2:78:28:50:CA:EA:EF:9C Authority key identifier: 36:46:EB:1F:37:0B:7E:63:D1:F3:6D:EB:36:C2:47:6C:96:E6:BA:E8 Certificate issuer: /CN=A9113BE5/serialNumber=3646EB1F370B7E63D1F36DEB36C2476C96E6BAE8 Certificate serial: 02E9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NkbrHzcLfmPR823rNsJHbJbmuug.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9113BE5/611C512CF0F311EC84B29C80C4F9AE02/NkbrHzcLfmPR823rNsJHbJbmuug.mft Manifest number: 02DF Signing time: Sat 19 Jul 2025 01:45:36 +0000 Manifest this update: Sat 19 Jul 2025 01:45:35 +0000 Manifest next update: Sat 26 Jul 2025 01:45:35 +0000 Files and hashes: 1: NkbrHzcLfmPR823rNsJHbJbmuug.crl (hash: qyB16i+zz16O1Ja3QCNfqNs8MKX+esd9vzn8UcaMAwY=) 2: 627A6758DF2A11EEBC440C5EC4F9AE02.roa (hash: Pd8L7s4R6wRwdLV9+7BZMCdFVQ0DCoXNeo8OuEc6g0M=) 3: F3B00CD2666C11EEB1B4711CC4F9AE02.roa (hash: R6LgYLeeG431V+MNRMFG0A1SQaUDq0hWnr4R0asmc6k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9113BE5/611C512CF0F311EC84B29C80C4F9AE02/NkbrHzcLfmPR823rNsJHbJbmuug.crl rsync://rpki.apnic.net/member_repository/A9113BE5/611C512CF0F311EC84B29C80C4F9AE02/NkbrHzcLfmPR823rNsJHbJbmuug.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NkbrHzcLfmPR823rNsJHbJbmuug.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 01:45:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 745 (0x2e9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9113BE5, serialNumber=3646EB1F370B7E63D1F36DEB36C2476C96E6BAE8 Validity Not Before: Jul 19 01:45:35 2025 GMT Not After : Jul 26 01:45:35 2025 GMT Subject: CN=687af8bf-ed31 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:54:53:be:4b:88:10:6a:91:a0:2c:fc:2e:e8: 93:bf:c7:6c:b7:e4:80:84:f9:b8:62:6b:26:12:b1: d2:ab:dc:bf:13:84:bc:d5:fd:bc:dc:fd:99:0c:c5: 09:c6:0a:6c:ea:4e:99:b3:95:d3:3d:67:b5:5b:72: 2e:3c:bc:e5:b7:54:7d:ac:aa:50:12:27:d7:07:82: a0:36:c4:b6:ff:89:64:c3:44:9b:a6:1a:46:e3:a4: d7:48:e4:78:6f:39:80:1b:34:44:68:73:38:f2:9f: 5b:da:51:e4:ca:6a:6a:97:87:b4:0b:4d:1c:d0:13: 63:7e:12:0e:23:30:29:03:23:ea:b0:64:66:cc:2f: bc:d8:c1:9e:32:4c:b2:c8:69:c8:14:95:29:40:e2: 74:09:92:13:6f:1e:3b:3f:83:74:4d:c5:80:5b:26: c7:f3:89:c0:71:9e:ce:43:ef:18:21:f7:76:4b:36: 7e:f5:2f:1f:53:18:53:96:42:56:2b:42:62:7a:b8: 85:ad:45:0c:93:e1:cc:b1:09:a1:94:eb:b0:9e:3f: dc:c5:06:c8:50:b0:fe:9d:19:a3:7a:d1:fb:8a:a2: 9b:f3:d0:2b:36:27:51:97:59:10:47:d8:2f:b6:7c: 5b:e4:e8:92:6e:6f:12:8e:d2:15:35:a9:7c:b6:31: 00:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:4C:44:E5:32:80:2C:9E:29:56:EC:CE:D2:78:28:50:CA:EA:EF:9C X509v3 Authority Key Identifier: keyid:36:46:EB:1F:37:0B:7E:63:D1:F3:6D:EB:36:C2:47:6C:96:E6:BA:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9113BE5/611C512CF0F311EC84B29C80C4F9AE02/NkbrHzcLfmPR823rNsJHbJbmuug.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NkbrHzcLfmPR823rNsJHbJbmuug.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9113BE5/611C512CF0F311EC84B29C80C4F9AE02/NkbrHzcLfmPR823rNsJHbJbmuug.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 34:41:a4:46:92:62:a0:3c:cb:68:d6:9c:1a:ba:0a:01:60:c4: 17:90:08:0c:0a:0a:08:0d:3e:72:1e:0d:17:12:5e:a7:c7:dd: 08:8e:ce:c9:4f:14:07:f2:59:c4:73:5f:3b:7b:2c:97:ea:01: ab:f1:a4:e6:9a:20:76:96:ca:5d:5b:67:7a:cc:b4:7f:86:98: 29:ee:7e:dd:f5:42:f5:e1:1e:e8:a3:2b:fe:56:7d:55:4f:7f: 74:94:1d:5a:cd:1c:29:27:cc:1e:46:40:c4:cf:4d:d9:1a:56: 57:28:ee:ec:62:83:b2:36:8d:42:47:26:86:b6:a5:89:11:6c: a6:ec:17:51:d9:bf:ca:81:bc:c1:64:42:66:f7:ed:6f:f5:c9: 91:02:6c:cc:e3:09:77:4f:a9:6e:ba:98:7a:e9:a0:1b:8c:83: a9:ad:5e:b3:03:e3:bf:e1:e4:6d:a2:1e:e7:a1:8b:e3:ec:3b: 9c:62:49:90:4e:24:bf:cc:4f:0d:3b:aa:40:f3:cd:da:32:42: b3:a3:30:e5:9b:6e:d3:fb:b6:d8:c2:11:9e:f4:e4:d0:8d:74: 51:75:55:22:89:d2:a2:50:36:10:22:a7:53:ef:f2:c9:1e:f9: cd:55:d8:eb:fa:4b:bc:68:7e:ba:20:36:ec:cf:d4:d3:a0:f1: df:e0:3f:43 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAukwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTNCRTUxMTAvBgNVBAUTKDM2NDZFQjFGMzcwQjdFNjNEMUYzNkRFQjM2QzI0NzZD OTZFNkJBRTgwHhcNMjUwNzE5MDE0NTM1WhcNMjUwNzI2MDE0NTM1WjAYMRYwFAYD VQQDEw02ODdhZjhiZi1lZDMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAo1RTvkuIEGqRoCz8LuiTv8dst+SAhPm4YmsmErHSq9y/E4S81f283P2ZDMUJ xgps6k6Zs5XTPWe1W3IuPLzlt1R9rKpQEifXB4KgNsS2/4lkw0SbphpG46TXSOR4 bzmAGzREaHM48p9b2lHkympql4e0C00c0BNjfhIOIzApAyPqsGRmzC+82MGeMkyy yGnIFJUpQOJ0CZITbx47P4N0TcWAWybH84nAcZ7OQ+8YIfd2SzZ+9S8fUxhTlkJW K0JieriFrUUMk+HMsQmhlOuwnj/cxQbIULD+nRmjetH7iqKb89ArNidRl1kQR9gv tnxb5OiSbm8SjtIVNal8tjEA5QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFFMROUy gCyeKVbsztJ4KFDK6u+cMB8GA1UdIwQYMBaAFDZG6x83C35j0fNt6zbCR2yW5rro MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExM0JFNS82MTFDNTEyQ0Yw RjMxMUVDODRCMjlDODBDNEY5QUUwMi9Oa2JySHpjTGZtUFI4MjNyTnNKSGJKYm11 dWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05rYnJIemNMZm1QUjgyM3JOc0pIYkpibXV1Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx M0JFNS82MTFDNTEyQ0YwRjMxMUVDODRCMjlDODBDNEY5QUUwMi9Oa2JySHpjTGZt UFI4MjNyTnNKSGJKYm11dWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA0QaRGkmKgPMto1pwaugoBYMQXkAgMCgoIDT5yHg0XEl6nx90Ijs7J TxQH8lnEc187eyyX6gGr8aTmmiB2lspdW2d6zLR/hpgp7n7d9UL14R7ooyv+Vn1V T390lB1azRwpJ8weRkDEz03ZGlZXKO7sYoOyNo1CRyaGtqWJEWym7BdR2b/KgbzB ZEJm9+1v9cmRAmzM4wl3T6luuph66aAbjIOprV6zA+O/4eRtoh7noYvj7DucYkmQ TiS/zE8NO6pA883aMkKzozDlm27T+7bYwhGe9OTQjXRRdVUiidKiUDYQIqdT7/LJ HvnNVdjr+ku8aH66IDbsz9TToPHf4D9D -----END CERTIFICATE-----Generated at Sun Jul 20 10:36:22 2025 by rpki-client