$ rpki-client -vvf rpki.apnic.net/member_repository/A9134285/6F15B572928311EB80970420C4F9AE02/NxkwlLzz42Ui-tvxlU7l_51gHg4.mft File: NxkwlLzz42Ui-tvxlU7l_51gHg4.mft (raw, json) Hash identifier: tDTC6DiMvgMmaIPITj2qT38/szPWbOt3RM8ePKdLFCk= Subject key identifier: F1:0C:7E:D1:36:0A:4F:5F:45:38:3D:86:0D:34:15:D2:4E:82:E8:F9 Authority key identifier: 37:19:30:94:BC:F3:E3:65:22:FA:DB:F1:95:4E:E5:FF:9D:60:1E:0E Certificate issuer: /CN=A9134285/serialNumber=37193094BCF3E36522FADBF1954EE5FF9D601E0E Certificate serial: 065A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NxkwlLzz42Ui-tvxlU7l_51gHg4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9134285/6F15B572928311EB80970420C4F9AE02/NxkwlLzz42Ui-tvxlU7l_51gHg4.mft Manifest number: 0654 Signing time: Sun 20 Jul 2025 22:44:54 +0000 Manifest this update: Sun 20 Jul 2025 22:44:53 +0000 Manifest next update: Sun 27 Jul 2025 22:44:53 +0000 Files and hashes: 1: NxkwlLzz42Ui-tvxlU7l_51gHg4.crl (hash: e+IkwdcwakPlNLGlaiJfGKH4ykC3Sn7hPSvkIMC+X4U=) 2: 3A00D342928511EB8B3AAC22C4F9AE02.roa (hash: aj64AT3Eg74eRiHek2DyIpF1DXkedRqzt0byGVydNm8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9134285/6F15B572928311EB80970420C4F9AE02/NxkwlLzz42Ui-tvxlU7l_51gHg4.crl rsync://rpki.apnic.net/member_repository/A9134285/6F15B572928311EB80970420C4F9AE02/NxkwlLzz42Ui-tvxlU7l_51gHg4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NxkwlLzz42Ui-tvxlU7l_51gHg4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Jul 2025 22:44:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1626 (0x65a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9134285, serialNumber=37193094BCF3E36522FADBF1954EE5FF9D601E0E Validity Not Before: Jul 20 22:44:53 2025 GMT Not After : Jul 27 22:44:53 2025 GMT Subject: CN=687d7165-28fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:e1:44:09:41:91:b2:1c:81:45:5c:8c:be:11: a9:c4:d6:4b:31:62:51:17:39:39:8f:6f:5e:95:c1: a7:f3:55:97:f8:af:dc:bc:66:91:81:41:a2:93:16: 6c:4e:b7:90:c0:0a:72:86:a4:00:f3:e4:32:68:3d: be:d6:fd:d0:b3:8d:3a:ad:dd:a3:03:c1:a6:37:fa: af:c2:51:f4:00:76:9a:2b:14:78:0f:41:95:57:02: f5:5a:50:8e:9d:62:79:5c:df:ae:1e:3e:15:d3:bc: 68:ff:72:9f:fc:64:46:a2:6e:bd:31:25:39:be:f4: a0:c3:66:74:a7:1d:c4:2a:94:8a:93:fd:d5:0e:77: 62:d8:eb:f0:0a:75:6c:f4:14:39:ce:e1:d1:84:e5: 44:a2:e6:dd:e8:93:fb:2b:59:fe:83:0f:a5:59:b7: 64:77:d1:a6:44:26:fc:2f:13:e5:b7:3f:9e:4f:0e: 01:e7:6f:8a:bf:c4:ac:26:5c:10:8b:80:f5:ab:36: eb:22:a6:60:78:88:32:28:49:6d:bd:5d:69:c9:52: 15:38:67:01:f5:c9:3b:e5:be:95:ee:6f:e0:01:14: 6f:50:30:68:ae:0a:02:00:70:92:99:d4:42:7d:43: a7:f8:30:06:fb:a7:b2:f2:c4:c1:fa:a4:9d:be:6a: 97:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:0C:7E:D1:36:0A:4F:5F:45:38:3D:86:0D:34:15:D2:4E:82:E8:F9 X509v3 Authority Key Identifier: keyid:37:19:30:94:BC:F3:E3:65:22:FA:DB:F1:95:4E:E5:FF:9D:60:1E:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9134285/6F15B572928311EB80970420C4F9AE02/NxkwlLzz42Ui-tvxlU7l_51gHg4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NxkwlLzz42Ui-tvxlU7l_51gHg4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9134285/6F15B572928311EB80970420C4F9AE02/NxkwlLzz42Ui-tvxlU7l_51gHg4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 36:05:bf:53:9f:ec:fc:7a:5a:8d:60:70:69:f3:ab:cf:05:13: 56:ee:d4:14:b1:f3:80:64:5d:61:20:97:16:fa:13:26:07:df: 69:05:34:42:91:03:21:59:dd:6b:ca:0c:fc:46:f2:63:7d:73: a4:54:bb:e1:02:da:7d:65:33:07:ff:5c:11:8a:e5:18:60:96: fc:22:89:5f:d9:59:d6:43:19:9f:83:38:59:d5:2b:e2:f0:79: bb:81:17:54:81:2f:a5:cc:68:42:c4:e6:9b:74:3a:1c:66:67: b4:ae:56:e0:59:6a:eb:8c:f2:93:4c:32:67:df:c6:05:0d:a2: d9:c2:f5:e3:6d:33:52:b3:d7:fa:8e:29:86:fc:b0:b4:03:39: e0:c8:d9:09:d1:50:2d:dd:7b:03:a5:ac:77:59:e0:4f:68:f9: 70:bc:55:e5:6e:97:42:c9:a7:0b:95:36:84:8a:37:14:b2:f7: a1:1f:0e:1d:8a:10:57:20:79:17:9b:a1:be:bb:db:e9:62:f7: 3e:f2:4b:71:34:a5:51:63:57:62:be:40:dd:7d:96:5c:67:fd: e9:79:06:5b:7e:25:48:e7:bc:82:d8:f1:2e:95:26:bf:67:9e: 4a:15:12:dd:65:42:9e:d5:9c:19:71:e9:74:66:a1:e0:d5:11: 6c:fa:9f:ca -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBlowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzQyODUxMTAvBgNVBAUTKDM3MTkzMDk0QkNGM0UzNjUyMkZBREJGMTk1NEVFNUZG OUQ2MDFFMEUwHhcNMjUwNzIwMjI0NDUzWhcNMjUwNzI3MjI0NDUzWjAYMRYwFAYD VQQDEw02ODdkNzE2NS0yOGZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAveFECUGRshyBRVyMvhGpxNZLMWJRFzk5j29elcGn81WX+K/cvGaRgUGikxZs TreQwApyhqQA8+QyaD2+1v3Qs406rd2jA8GmN/qvwlH0AHaaKxR4D0GVVwL1WlCO nWJ5XN+uHj4V07xo/3Kf/GRGom69MSU5vvSgw2Z0px3EKpSKk/3VDndi2OvwCnVs 9BQ5zuHRhOVEoubd6JP7K1n+gw+lWbdkd9GmRCb8LxPltz+eTw4B52+Kv8SsJlwQ i4D1qzbrIqZgeIgyKEltvV1pyVIVOGcB9ck75b6V7m/gARRvUDBorgoCAHCSmdRC fUOn+DAG+6ey8sTB+qSdvmqXrQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPEMftE2 Ck9fRTg9hg00FdJOguj5MB8GA1UdIwQYMBaAFDcZMJS88+NlIvrb8ZVO5f+dYB4O MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNDI4NS82RjE1QjU3Mjky ODMxMUVCODA5NzA0MjBDNEY5QUUwMi9OeGt3bEx6ejQyVWktdHZ4bFU3bF81MWdI ZzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL054a3dsTHp6NDJVaS10dnhsVTdsXzUxZ0hnNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NDI4NS82RjE1QjU3MjkyODMxMUVCODA5NzA0MjBDNEY5QUUwMi9OeGt3bEx6ejQy VWktdHZ4bFU3bF81MWdIZzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA2Bb9Tn+z8elqNYHBp86vPBRNW7tQUsfOAZF1hIJcW+hMmB99pBTRC kQMhWd1rygz8RvJjfXOkVLvhAtp9ZTMH/1wRiuUYYJb8Iolf2VnWQxmfgzhZ1Svi 8Hm7gRdUgS+lzGhCxOabdDocZme0rlbgWWrrjPKTTDJn38YFDaLZwvXjbTNSs9f6 jimG/LC0AzngyNkJ0VAt3XsDpax3WeBPaPlwvFXlbpdCyacLlTaEijcUsvehHw4d ihBXIHkXm6G+u9vpYvc+8ktxNKVRY1divkDdfZZcZ/3peQZbfiVI57yC2PEulSa/ Z55KFRLdZUKe1ZwZcel0ZqHg1RFs+p/K -----END CERTIFICATE-----Generated at Mon Jul 21 08:07:58 2025 by rpki-client