$ rpki-client -vvf rpki.apnic.net/member_repository/A911B5B4/709F7A26B82911E993738A09C4F9AE02/nflMM9P2R649kTYeHxcsIGhvWYk.mft File: nflMM9P2R649kTYeHxcsIGhvWYk.mft (raw, json) Hash identifier: jdMwCM0R9zom2M4/f/AMOKCqTYgQdawXrP13SLQAu+0= Subject key identifier: E1:F5:B8:89:33:92:F3:5D:88:AD:A6:66:8B:3D:66:77:7B:2B:59:61 Authority key identifier: 9D:F9:4C:33:D3:F6:47:AE:3D:91:36:1E:1F:17:2C:20:68:6F:59:89 Certificate issuer: /CN=A911B5B4/serialNumber=9DF94C33D3F647AE3D91361E1F172C20686F5989 Certificate serial: 0E0C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nflMM9P2R649kTYeHxcsIGhvWYk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911B5B4/709F7A26B82911E993738A09C4F9AE02/nflMM9P2R649kTYeHxcsIGhvWYk.mft Manifest number: 0DE9 Signing time: Fri 18 Jul 2025 18:02:38 +0000 Manifest this update: Fri 18 Jul 2025 18:02:38 +0000 Manifest next update: Fri 25 Jul 2025 18:02:38 +0000 Files and hashes: 1: nflMM9P2R649kTYeHxcsIGhvWYk.crl (hash: K4B9EJB/UPfhVLWy3y4BGad9Bz0jeDdGBxeshnvg954=) 2: 46B27CC6B82A11E9843DEE0AC4F9AE02.roa (hash: 8a6WJtEg8FJ5eHnpvgMwqod0UL5e0zTS0SwjCaK0jd4=) 3: 9E78AEC4C78E11EBB4983F5BC4F9AE02.roa (hash: kN9kZZVIv74yYHGXDsanuB3xPPBPu4OVgy2TpSGU+PU=) 4: 47E67066B82A11E9843DEE0AC4F9AE02.roa (hash: YggXfy20kvjf1iFOsIwuuVFkMi74/bpO/23VT4jrnTE=) 5: 9F8B79C2C78E11EBB4983F5BC4F9AE02.roa (hash: n/ZkcBxXbOU1wyzDS48DMJkcfdrM8k6k+BibFqk5ai8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911B5B4/709F7A26B82911E993738A09C4F9AE02/nflMM9P2R649kTYeHxcsIGhvWYk.crl rsync://rpki.apnic.net/member_repository/A911B5B4/709F7A26B82911E993738A09C4F9AE02/nflMM9P2R649kTYeHxcsIGhvWYk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nflMM9P2R649kTYeHxcsIGhvWYk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 18:02:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3596 (0xe0c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911B5B4, serialNumber=9DF94C33D3F647AE3D91361E1F172C20686F5989 Validity Not Before: Jul 18 18:02:38 2025 GMT Not After : Jul 25 18:02:38 2025 GMT Subject: CN=687a8c3e-ff6e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:46:5b:cf:40:f1:6b:14:d0:3f:15:e7:af:d2: 80:27:72:42:82:89:c1:dc:6d:89:0f:92:93:97:12: 09:98:df:71:ba:67:6e:7e:ed:db:05:fc:19:fa:fa: 21:93:0f:9b:27:f1:bd:cb:a8:01:a5:d3:4d:77:3e: d7:71:62:98:3c:1d:5b:08:b3:ec:dd:32:fe:b8:56: 0b:c3:74:73:3c:a6:f0:9e:67:64:02:2c:72:6e:b0: 82:ec:99:d5:d0:7b:44:16:7a:d4:47:3f:b6:e3:2e: 1c:fe:c6:eb:15:d3:e0:97:bd:e0:bc:4b:d6:d3:af: 0c:9b:c0:17:f8:8d:4c:db:92:60:70:25:f8:11:06: 6c:89:b7:f4:53:06:6d:a1:d0:94:79:79:d8:62:8a: e7:50:be:a8:2f:6e:d5:c6:1c:f9:e5:ea:7b:81:5b: b4:1c:cc:33:7f:44:2f:82:e1:4a:af:95:de:b2:de: 3c:a1:b1:60:72:29:9c:b5:dc:a6:28:ee:c0:2b:b8: 8f:89:6a:d3:13:37:ff:27:e3:22:42:fc:e5:66:bd: 72:00:53:bd:08:ff:93:c4:9a:d6:e3:0b:07:fb:7f: 85:6f:7b:bd:ea:99:de:40:6e:fe:0c:0b:70:d3:69: 60:a9:e8:e9:43:13:d8:31:b9:60:14:a6:49:8b:8f: 5e:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:F5:B8:89:33:92:F3:5D:88:AD:A6:66:8B:3D:66:77:7B:2B:59:61 X509v3 Authority Key Identifier: keyid:9D:F9:4C:33:D3:F6:47:AE:3D:91:36:1E:1F:17:2C:20:68:6F:59:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911B5B4/709F7A26B82911E993738A09C4F9AE02/nflMM9P2R649kTYeHxcsIGhvWYk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nflMM9P2R649kTYeHxcsIGhvWYk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911B5B4/709F7A26B82911E993738A09C4F9AE02/nflMM9P2R649kTYeHxcsIGhvWYk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 27:93:df:fa:14:ba:d4:e0:ff:18:ee:d0:27:77:d5:f5:2a:0f: d4:15:b8:3f:41:63:c3:ec:5d:e8:4a:32:27:a8:41:a8:80:84: 19:c9:31:3b:92:d5:c5:34:3f:4e:d6:8a:3e:47:05:b0:48:04: 24:5a:70:28:49:31:fe:a0:8c:f4:fa:e9:2b:09:21:55:00:c5: 78:1a:62:c0:c0:a8:5b:58:3b:2b:da:d7:8c:45:06:09:39:e5: 7c:04:97:4e:ee:ca:75:bb:93:0f:d9:5b:28:36:8d:ff:9b:ca: 21:28:ee:99:b4:af:05:e2:44:9f:ca:93:1e:d5:0d:3d:ce:7b: 50:37:c4:bd:fa:f2:9f:10:35:4c:9f:3c:e9:d6:16:0f:0d:28: 50:fb:02:1a:bb:c6:48:7f:03:a4:f9:56:89:17:69:ec:c9:f3: 92:54:f0:bd:91:56:d2:f3:41:c1:3f:91:dd:5f:27:bb:a1:30: ce:25:93:ca:a7:a5:5f:2a:55:a9:cf:cf:03:87:ae:04:91:5b: f9:7b:c1:07:c1:5f:64:49:03:36:6c:fa:bd:26:da:9e:10:4b: d3:b8:52:b0:f7:60:1e:ac:76:52:79:4e:bb:40:ac:c7:07:4a: 00:52:be:c1:ac:15:af:2f:d5:72:0a:06:42:fa:92:52:64:76: f0:b3:65:6f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDgwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUI1QjQxMTAvBgNVBAUTKDlERjk0QzMzRDNGNjQ3QUUzRDkxMzYxRTFGMTcyQzIw Njg2RjU5ODkwHhcNMjUwNzE4MTgwMjM4WhcNMjUwNzI1MTgwMjM4WjAYMRYwFAYD VQQDEw02ODdhOGMzZS1mZjZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4EZbz0DxaxTQPxXnr9KAJ3JCgonB3G2JD5KTlxIJmN9xumdufu3bBfwZ+voh kw+bJ/G9y6gBpdNNdz7XcWKYPB1bCLPs3TL+uFYLw3RzPKbwnmdkAixybrCC7JnV 0HtEFnrURz+24y4c/sbrFdPgl73gvEvW068Mm8AX+I1M25JgcCX4EQZsibf0UwZt odCUeXnYYornUL6oL27Vxhz55ep7gVu0HMwzf0QvguFKr5Xest48obFgcimctdym KO7AK7iPiWrTEzf/J+MiQvzlZr1yAFO9CP+TxJrW4wsH+3+Fb3u96pneQG7+DAtw 02lgqejpQxPYMblgFKZJi49eswIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOH1uIkz kvNdiK2mZos9Znd7K1lhMB8GA1UdIwQYMBaAFJ35TDPT9keuPZE2Hh8XLCBob1mJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQjVCNC83MDlGN0EyNkI4 MjkxMUU5OTM3MzhBMDlDNEY5QUUwMi9uZmxNTTlQMlI2NDlrVFllSHhjc0lHaHZX WWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25mbE1NOVAyUjY0OWtUWWVIeGNzSUdodldZay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QjVCNC83MDlGN0EyNkI4MjkxMUU5OTM3MzhBMDlDNEY5QUUwMi9uZmxNTTlQMlI2 NDlrVFllSHhjc0lHaHZXWWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAnk9/6FLrU4P8Y7tAnd9X1Kg/UFbg/QWPD7F3oSjInqEGogIQZyTE7 ktXFND9O1oo+RwWwSAQkWnAoSTH+oIz0+ukrCSFVAMV4GmLAwKhbWDsr2teMRQYJ OeV8BJdO7sp1u5MP2VsoNo3/m8ohKO6ZtK8F4kSfypMe1Q09zntQN8S9+vKfEDVM nzzp1hYPDShQ+wIau8ZIfwOk+VaJF2nsyfOSVPC9kVbS80HBP5HdXye7oTDOJZPK p6VfKlWpz88Dh64EkVv5e8EHwV9kSQM2bPq9JtqeEEvTuFKw92AerHZSeU67QKzH B0oAUr7BrBWvL9VyCgZC+pJSZHbws2Vv -----END CERTIFICATE-----Generated at Sun Jul 20 07:48:21 2025 by rpki-client