$ rpki-client -vvf rpki.apnic.net/member_repository/A9131690/15B41B8863F311E9A0854C47C4F9AE02/NHTJTDbo-aDToNIuHdoQjNNAqyg.mft File: NHTJTDbo-aDToNIuHdoQjNNAqyg.mft (raw, json) Hash identifier: tJX7rPlhEZcpvV0SGzobvTQgAaQb+l3dXWgJeft7ERo= Subject key identifier: 6E:73:18:08:2C:47:56:2D:67:11:7F:BF:9F:2D:44:91:ED:1B:8E:4F Authority key identifier: 34:74:C9:4C:36:E8:F9:A0:D3:A0:D2:2E:1D:DA:10:8C:D3:40:AB:28 Certificate issuer: /CN=A9131690/serialNumber=3474C94C36E8F9A0D3A0D22E1DDA108CD340AB28 Certificate serial: 0FBD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NHTJTDbo-aDToNIuHdoQjNNAqyg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9131690/15B41B8863F311E9A0854C47C4F9AE02/NHTJTDbo-aDToNIuHdoQjNNAqyg.mft Manifest number: 0F94 Signing time: Tue 22 Jul 2025 17:41:28 +0000 Manifest this update: Tue 22 Jul 2025 17:41:27 +0000 Manifest next update: Tue 29 Jul 2025 17:41:27 +0000 Files and hashes: 1: NHTJTDbo-aDToNIuHdoQjNNAqyg.crl (hash: fjJ4GdWHUZi9DUrfCEFtTB/1qydRfjAkIHVb9flJTPA=) 2: B2B24A4221D711EB9CFAC46EC4F9AE02.roa (hash: WopX8EPUj9ND6qcXFWft9CyuoZSX2+UxPu40b2aj+pc=) 3: B3682FEC21D711EB9CFAC46EC4F9AE02.roa (hash: 77t9c6veUMOt4XPOFIwWe8FztnDBdg3DuRHonRmM4pA=) 4: A7BDC50C7A4811EBA907BB5BC4F9AE02.roa (hash: 0RWvLgLQMfYKcMt6aIpCTG3MXhhitrR5pPiP2zQ4NcY=) 5: B47C278021D711EB9CFAC46EC4F9AE02.roa (hash: kt6+dcMSnt8HtFoNHoxve7SwNMn6XsQ5fmhhFuEOZOM=) 6: 5E0253B6232111EB9896B783C4F9AE02.roa (hash: S7XAN9hoPkMQD1dwIo9UheEK0CbHpWptDyxJHPNt49g=) 7: 08CD1510027011EB98FEC44BC4F9AE02.roa (hash: KmlW5cxQJtlnajXFs7j5PHn6wJjQG7ZZKRzUGo5l5KM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9131690/15B41B8863F311E9A0854C47C4F9AE02/NHTJTDbo-aDToNIuHdoQjNNAqyg.crl rsync://rpki.apnic.net/member_repository/A9131690/15B41B8863F311E9A0854C47C4F9AE02/NHTJTDbo-aDToNIuHdoQjNNAqyg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NHTJTDbo-aDToNIuHdoQjNNAqyg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Jul 2025 17:41:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4029 (0xfbd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9131690, serialNumber=3474C94C36E8F9A0D3A0D22E1DDA108CD340AB28 Validity Not Before: Jul 22 17:41:27 2025 GMT Not After : Jul 29 17:41:27 2025 GMT Subject: CN=687fcd48-5e37 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:fb:d8:01:b2:d3:12:2a:10:28:52:bf:f4:79: 9e:85:93:12:0b:c1:4f:e6:a3:e7:bf:78:0f:db:dc: 37:24:77:78:ad:40:ff:f9:8c:29:8a:65:d3:29:ce: 42:23:db:bb:5a:83:bf:23:0f:a4:1f:b1:73:09:cd: 44:70:a4:03:2e:e9:2b:8a:5f:fc:d6:02:01:b7:76: 0f:53:1d:e3:51:7c:28:30:af:df:d5:99:af:45:e0: 4c:2f:45:c8:f6:ce:35:fa:40:a4:5e:bc:0f:3f:d0: 42:87:98:a7:f8:b6:a4:40:23:ed:a2:93:2d:52:71: 62:6b:79:da:e7:76:11:37:e1:98:8f:d8:25:59:51: 91:a4:f0:1e:61:3f:2a:aa:a3:4c:a4:12:e1:7c:45: 64:33:d0:f6:20:89:b8:ed:67:be:4f:74:75:b7:05: 24:51:68:f1:65:fa:31:d3:88:ee:97:3a:f9:18:99: 5b:50:5e:0e:fe:1e:de:3c:0c:01:5f:a6:16:74:89: 06:05:ea:47:4e:27:e6:4d:64:60:04:73:e4:49:07: 44:6c:01:f6:b4:7c:85:cb:ac:7b:af:7c:1b:d3:41: fd:36:7d:a3:41:ab:3d:3c:a6:b4:f7:8c:dd:6d:5a: 53:37:66:04:bc:72:69:13:33:a2:61:e5:a8:12:aa: f7:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:73:18:08:2C:47:56:2D:67:11:7F:BF:9F:2D:44:91:ED:1B:8E:4F X509v3 Authority Key Identifier: keyid:34:74:C9:4C:36:E8:F9:A0:D3:A0:D2:2E:1D:DA:10:8C:D3:40:AB:28 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9131690/15B41B8863F311E9A0854C47C4F9AE02/NHTJTDbo-aDToNIuHdoQjNNAqyg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NHTJTDbo-aDToNIuHdoQjNNAqyg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9131690/15B41B8863F311E9A0854C47C4F9AE02/NHTJTDbo-aDToNIuHdoQjNNAqyg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3c:dc:07:ea:d7:b0:ac:b3:ea:bc:9e:de:c9:3c:63:b7:21:d0: 43:bb:f4:f9:1a:f2:48:1d:85:12:ee:e8:f6:31:3a:6b:cc:c8: 1e:86:83:fd:b6:55:7c:81:36:45:6f:7f:0f:fc:79:38:63:ef: e1:4a:55:cd:38:61:24:e2:8c:85:61:28:db:78:72:65:c7:ed: c8:d2:43:a0:58:b2:c7:38:d2:db:4b:37:6e:4e:55:a1:1f:37: 50:cc:37:43:05:2f:05:f3:b2:19:69:59:f3:8e:a1:76:4b:a8: 43:6b:9d:f7:a3:f4:1a:9f:92:f1:c2:67:7b:54:c5:6f:9b:8f: 19:7f:4f:2b:36:62:26:48:34:04:6c:f3:64:56:81:f2:82:09: 78:d0:6f:1b:5f:53:ee:b8:ae:bf:2c:f1:e2:53:c4:d2:cf:a1: 53:fc:d2:73:af:55:f7:cc:2a:94:3d:ae:d8:8a:a5:5c:c4:c4: 5a:45:17:42:b3:2a:b0:65:8e:b0:b4:15:3f:1d:8d:df:8b:58: d4:bd:10:35:0c:57:a8:12:26:a8:65:29:d8:34:1d:75:01:9b: 26:1d:23:9f:59:51:6d:e0:f8:ea:c1:50:5a:40:b1:93:0f:3f: e5:59:29:c3:9f:83:2d:64:16:da:c0:83:2c:e8:88:50:ce:89: 6e:c6:ae:92 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICD70wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzE2OTAxMTAvBgNVBAUTKDM0NzRDOTRDMzZFOEY5QTBEM0EwRDIyRTFEREExMDhD RDM0MEFCMjgwHhcNMjUwNzIyMTc0MTI3WhcNMjUwNzI5MTc0MTI3WjAYMRYwFAYD VQQDEw02ODdmY2Q0OC01ZTM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr/vYAbLTEioQKFK/9HmehZMSC8FP5qPnv3gP29w3JHd4rUD/+YwpimXTKc5C I9u7WoO/Iw+kH7FzCc1EcKQDLukril/81gIBt3YPUx3jUXwoMK/f1ZmvReBML0XI 9s41+kCkXrwPP9BCh5in+LakQCPtopMtUnFia3na53YRN+GYj9glWVGRpPAeYT8q qqNMpBLhfEVkM9D2IIm47We+T3R1twUkUWjxZfox04julzr5GJlbUF4O/h7ePAwB X6YWdIkGBepHTifmTWRgBHPkSQdEbAH2tHyFy6x7r3wb00H9Nn2jQas9PKa094zd bVpTN2YEvHJpEzOiYeWoEqr3ZwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG5zGAgs R1YtZxF/v58tRJHtG45PMB8GA1UdIwQYMBaAFDR0yUw26Pmg06DSLh3aEIzTQKso MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMTY5MC8xNUI0MUI4ODYz RjMxMUU5QTA4NTRDNDdDNEY5QUUwMi9OSFRKVERiby1hRFRvTkl1SGRvUWpOTkFx eWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05IVEpURGJvLWFEVG9OSXVIZG9Rak5OQXF5Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MTY5MC8xNUI0MUI4ODYzRjMxMUU5QTA4NTRDNDdDNEY5QUUwMi9OSFRKVERiby1h RFRvTkl1SGRvUWpOTkFxeWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA83Afq17Css+q8nt7JPGO3IdBDu/T5GvJIHYUS7uj2MTprzMgehoP9 tlV8gTZFb38P/Hk4Y+/hSlXNOGEk4oyFYSjbeHJlx+3I0kOgWLLHONLbSzduTlWh HzdQzDdDBS8F87IZaVnzjqF2S6hDa533o/Qan5Lxwmd7VMVvm48Zf08rNmImSDQE bPNkVoHyggl40G8bX1PuuK6/LPHiU8TSz6FT/NJzr1X3zCqUPa7YiqVcxMRaRRdC syqwZY6wtBU/HY3fi1jUvRA1DFeoEiaoZSnYNB11AZsmHSOfWVFt4PjqwVBaQLGT Dz/lWSnDn4MtZBbawIMs6IhQzoluxq6S -----END CERTIFICATE-----Generated at Wed Jul 23 02:31:28 2025 by rpki-client