$ rpki-client -vvf rpki.apnic.net/member_repository/A9148DB2/047DC388F93611EC921B810EC4F9AE02/NKvvhGR0u9oMVWRl3X6ewPpnS7U.mft File: NKvvhGR0u9oMVWRl3X6ewPpnS7U.mft (raw, json) Hash identifier: iJ7C0UH3Dh6pTiu8NEcgxlY80Jw9V4m+xro+/AY5gzI= Subject key identifier: C0:F2:5D:1C:9F:CD:7F:73:09:7B:25:90:0B:97:DC:F9:26:DF:A9:C8 Authority key identifier: 34:AB:EF:84:64:74:BB:DA:0C:55:64:65:DD:7E:9E:C0:FA:67:4B:B5 Certificate issuer: /CN=A9148DB2/serialNumber=34ABEF846474BBDA0C556465DD7E9EC0FA674BB5 Certificate serial: 02D1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NKvvhGR0u9oMVWRl3X6ewPpnS7U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9148DB2/047DC388F93611EC921B810EC4F9AE02/NKvvhGR0u9oMVWRl3X6ewPpnS7U.mft Manifest number: 02CC Signing time: Mon 21 Jul 2025 01:42:12 +0000 Manifest this update: Mon 21 Jul 2025 01:42:11 +0000 Manifest next update: Mon 28 Jul 2025 01:42:11 +0000 Files and hashes: 1: NKvvhGR0u9oMVWRl3X6ewPpnS7U.crl (hash: HVy56mCOsBgP3laLDDGyYCeoXRw9LHgMxF0ZE6Rk90c=) 2: F343C4ECF93911ECBD1E663DC4F9AE02.roa (hash: k5i1VxrRa6a+sKSG0LLgxBEmMPYmBZK6pl0sMM04Q2o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9148DB2/047DC388F93611EC921B810EC4F9AE02/NKvvhGR0u9oMVWRl3X6ewPpnS7U.crl rsync://rpki.apnic.net/member_repository/A9148DB2/047DC388F93611EC921B810EC4F9AE02/NKvvhGR0u9oMVWRl3X6ewPpnS7U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NKvvhGR0u9oMVWRl3X6ewPpnS7U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Jul 2025 01:42:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 721 (0x2d1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9148DB2, serialNumber=34ABEF846474BBDA0C556465DD7E9EC0FA674BB5 Validity Not Before: Jul 21 01:42:11 2025 GMT Not After : Jul 28 01:42:11 2025 GMT Subject: CN=687d9af4-99be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:67:63:04:17:47:f9:6a:00:d4:29:ae:cb:25: 5d:1b:9c:b0:5c:9c:ce:e5:c0:55:10:eb:23:6e:5b: c3:15:8d:00:ce:f6:39:f8:a3:d4:cd:0c:1d:d6:91: ac:2b:b6:f8:88:d8:30:c2:75:6a:36:33:d8:95:7c: d6:b0:6e:38:67:95:1f:e1:14:ea:6c:16:a3:fb:43: eb:07:e5:05:55:0d:34:89:05:52:cb:91:76:47:a4: f4:2c:77:dd:24:4d:16:79:6e:9a:fc:b6:60:34:64: 19:c9:81:d9:fb:7c:5c:a8:c4:19:1d:b4:3f:60:21: 30:a3:52:e2:12:1d:89:94:fe:89:c3:1e:21:94:01: 7d:4e:74:ca:ce:34:07:fc:ff:27:ff:5c:59:78:8b: 12:d0:85:72:ae:d2:b8:62:f7:02:32:1b:66:e1:80: 53:7e:2b:88:73:b3:bc:c9:7c:41:6e:2b:e9:25:a3: a2:2e:ec:c5:99:a2:6e:47:00:a5:ae:94:5a:42:8d: 50:16:40:df:a3:dc:9d:d8:3a:c8:13:18:1b:9d:b2: 5c:20:ad:a5:9f:9d:f4:75:e4:22:77:c9:1a:8d:f8: 24:cc:27:8f:38:08:47:da:8e:f3:7d:80:e5:48:6f: 4a:ca:bd:62:ad:59:88:3d:d2:2b:26:2c:7b:dd:07: d2:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:F2:5D:1C:9F:CD:7F:73:09:7B:25:90:0B:97:DC:F9:26:DF:A9:C8 X509v3 Authority Key Identifier: keyid:34:AB:EF:84:64:74:BB:DA:0C:55:64:65:DD:7E:9E:C0:FA:67:4B:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9148DB2/047DC388F93611EC921B810EC4F9AE02/NKvvhGR0u9oMVWRl3X6ewPpnS7U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NKvvhGR0u9oMVWRl3X6ewPpnS7U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148DB2/047DC388F93611EC921B810EC4F9AE02/NKvvhGR0u9oMVWRl3X6ewPpnS7U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5d:59:08:6f:59:9b:8b:30:96:fd:d7:a4:e4:e3:d9:10:8c:2d: 55:32:8f:cc:66:24:8d:81:e4:3e:3c:6a:48:f0:85:75:1e:c6: 83:f2:6d:67:1b:92:c0:2c:b8:d6:1e:f0:7d:a9:22:c6:83:4b: 7a:09:a3:fc:a9:46:5a:ee:62:ed:e6:28:3c:32:40:68:67:0b: da:bd:b5:27:bb:b8:71:ea:35:fe:f2:f4:7a:cc:50:84:13:e4: f7:9e:4f:c6:59:4a:0e:64:1a:d7:ae:01:66:0b:c2:38:e7:a7: 03:ce:51:df:ab:f1:89:19:3e:47:2a:6b:e5:0e:ce:5b:bc:bc: d3:fa:b9:ad:ca:dd:a9:06:b6:42:fe:8d:c3:51:c6:99:c1:c2: e7:4c:a5:f7:d9:5a:74:91:0c:0b:ca:d1:1b:76:a8:ed:aa:00: ac:db:61:99:68:33:6a:e1:97:82:c8:98:9b:9b:60:70:bd:45: b9:b1:03:e8:f4:a6:c8:dc:ee:a7:5b:5c:33:43:d2:ee:e6:94: 8a:42:92:8b:e1:f9:49:e2:9b:a4:c2:64:32:0d:08:71:30:0e: 6d:6d:cc:f3:70:7c:3a:2d:ad:68:16:38:70:65:06:05:c7:d0: 63:4a:5a:2f:82:bc:e8:6c:7f:15:38:da:e9:67:ba:8c:7a:53: 52:eb:95:93 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAtEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDhEQjIxMTAvBgNVBAUTKDM0QUJFRjg0NjQ3NEJCREEwQzU1NjQ2NUREN0U5RUMw RkE2NzRCQjUwHhcNMjUwNzIxMDE0MjExWhcNMjUwNzI4MDE0MjExWjAYMRYwFAYD VQQDEw02ODdkOWFmNC05OWJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz2djBBdH+WoA1CmuyyVdG5ywXJzO5cBVEOsjblvDFY0AzvY5+KPUzQwd1pGs K7b4iNgwwnVqNjPYlXzWsG44Z5Uf4RTqbBaj+0PrB+UFVQ00iQVSy5F2R6T0LHfd JE0WeW6a/LZgNGQZyYHZ+3xcqMQZHbQ/YCEwo1LiEh2JlP6Jwx4hlAF9TnTKzjQH /P8n/1xZeIsS0IVyrtK4YvcCMhtm4YBTfiuIc7O8yXxBbivpJaOiLuzFmaJuRwCl rpRaQo1QFkDfo9yd2DrIExgbnbJcIK2ln530deQid8kajfgkzCePOAhH2o7zfYDl SG9Kyr1irVmIPdIrJix73QfSJQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMDyXRyf zX9zCXslkAuX3Pkm36nIMB8GA1UdIwQYMBaAFDSr74RkdLvaDFVkZd1+nsD6Z0u1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OERCMi8wNDdEQzM4OEY5 MzYxMUVDOTIxQjgxMEVDNEY5QUUwMi9OS3Z2aEdSMHU5b01WV1JsM1g2ZXdQcG5T N1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05LdnZoR1IwdTlvTVZXUmwzWDZld1BwblM3VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OERCMi8wNDdEQzM4OEY5MzYxMUVDOTIxQjgxMEVDNEY5QUUwMi9OS3Z2aEdSMHU5 b01WV1JsM1g2ZXdQcG5TN1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBdWQhvWZuLMJb916Tk49kQjC1VMo/MZiSNgeQ+PGpI8IV1HsaD8m1n G5LALLjWHvB9qSLGg0t6CaP8qUZa7mLt5ig8MkBoZwvavbUnu7hx6jX+8vR6zFCE E+T3nk/GWUoOZBrXrgFmC8I456cDzlHfq/GJGT5HKmvlDs5bvLzT+rmtyt2pBrZC /o3DUcaZwcLnTKX32Vp0kQwLytEbdqjtqgCs22GZaDNq4ZeCyJibm2BwvUW5sQPo 9KbI3O6nW1wzQ9Lu5pSKQpKL4flJ4pukwmQyDQhxMA5tbczzcHw6La1oFjhwZQYF x9BjSlovgrzobH8VONrpZ7qMelNS65WT -----END CERTIFICATE-----Generated at Mon Jul 21 06:56:14 2025 by rpki-client