$ rpki-client -vvf rpki.apnic.net/member_repository/A9152D08/F9C333921D8711EAA9C5B170C4F9AE02/NNwgEp6tb0Gnyi2Zyb0-fmAzy4g.mft File: NNwgEp6tb0Gnyi2Zyb0-fmAzy4g.mft (raw, json) Hash identifier: eB9UqZ0XveR0c4GbOCqFwP9zvpjRgcENWHuNo1UlEBI= Subject key identifier: 2D:5C:50:08:96:A7:FE:DD:39:66:63:E8:9C:1C:F1:D9:8C:CB:23:8C Authority key identifier: 34:DC:20:12:9E:AD:6F:41:A7:CA:2D:99:C9:BD:3E:7E:60:33:CB:88 Certificate issuer: /CN=A9152D08/serialNumber=34DC20129EAD6F41A7CA2D99C9BD3E7E6033CB88 Certificate serial: 0C95 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NNwgEp6tb0Gnyi2Zyb0-fmAzy4g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9152D08/F9C333921D8711EAA9C5B170C4F9AE02/NNwgEp6tb0Gnyi2Zyb0-fmAzy4g.mft Manifest number: 0C34 Signing time: Fri 18 Jul 2025 19:01:50 +0000 Manifest this update: Fri 18 Jul 2025 19:01:50 +0000 Manifest next update: Fri 25 Jul 2025 19:01:50 +0000 Files and hashes: 1: NNwgEp6tb0Gnyi2Zyb0-fmAzy4g.crl (hash: a8nI75xVnOtOiWpJ+/HaZUH+UI/5q3cgX76LuSv730Q=) 2: D45F1712A8B311EFADA46649C4F9AE02.roa (hash: WVkxMnAPmYEx2pir9yJBj6S9Ri2HeWB84QrUcGBIgX0=) 3: 0592D90E02E111F0BFF53A15C4F9AE02.roa (hash: JKDdsewbmTds8DX8z5n44dixpiguXnj1mkHopckNnnI=) 4: 2F3FBD86F3E511EA871E451AC4F9AE02.roa (hash: yVyxrQ/XexxsyDCtzcGEooxv2C0cJKVEzNUoJUfFCpg=) 5: 30C3D4F81D8A11EA8ECDAA75C4F9AE02.roa (hash: mpanMW6E++IIJhwRfBokQkjYWR4BXeWQNkL+zlkPQk0=) 6: 31554CBC1D8A11EA8ECDAA75C4F9AE02.roa (hash: uM9esMnbJemVTDXSBi0eBdZiTFnt+Mq64Yuw7Vo5ff8=) 7: 9A8603FC93ED11ED931AB73CC4F9AE02.roa (hash: EXrq9SaZzH6ZvSPXc9dAkv/CRi57VwFICygbDK3FbAQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9152D08/F9C333921D8711EAA9C5B170C4F9AE02/NNwgEp6tb0Gnyi2Zyb0-fmAzy4g.crl rsync://rpki.apnic.net/member_repository/A9152D08/F9C333921D8711EAA9C5B170C4F9AE02/NNwgEp6tb0Gnyi2Zyb0-fmAzy4g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NNwgEp6tb0Gnyi2Zyb0-fmAzy4g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 19:01:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3221 (0xc95) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9152D08, serialNumber=34DC20129EAD6F41A7CA2D99C9BD3E7E6033CB88 Validity Not Before: Jul 18 19:01:50 2025 GMT Not After : Jul 25 19:01:50 2025 GMT Subject: CN=687a9a1e-09ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:62:75:90:b1:98:1e:15:f3:d9:4e:02:70:02: d1:52:48:c4:e4:a7:d4:00:b3:bf:fc:04:8d:7e:72: 68:11:8c:8a:12:30:cd:3c:e8:97:b2:68:52:e0:56: 85:4c:f1:3e:5f:6b:bd:11:2b:e8:df:26:d3:8c:ed: ca:a3:a4:98:fb:69:09:e6:05:fa:76:00:23:84:d7: 1a:fe:7f:5d:fe:ca:90:27:3d:03:a5:04:1d:7c:34: d9:d3:f1:1f:fd:bf:d7:2d:f2:7c:76:a8:72:79:6e: 97:3f:65:9f:64:96:43:53:d4:61:81:35:66:ec:49: f2:38:7c:59:b5:52:1f:82:08:4f:ce:23:c7:14:11: e9:cf:2f:98:c1:86:25:31:e4:ae:93:cc:bb:f1:85: 2c:18:4b:db:c4:73:12:c5:09:b5:43:10:1a:b5:10: aa:f6:70:9d:7c:cf:ae:04:8b:4e:33:04:fe:86:6a: 96:24:b9:80:97:b5:af:86:af:ed:73:45:5a:96:0e: af:f2:66:4a:9a:39:03:bc:63:cc:66:ce:24:d8:43: 82:1f:bd:e0:b0:ff:ba:7e:5e:94:ed:5c:44:91:66: 46:7f:f2:70:ee:df:73:42:65:d5:e0:03:30:7e:15: 28:71:85:3f:e9:88:57:28:e8:61:f1:61:6b:f3:e3: e2:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:5C:50:08:96:A7:FE:DD:39:66:63:E8:9C:1C:F1:D9:8C:CB:23:8C X509v3 Authority Key Identifier: keyid:34:DC:20:12:9E:AD:6F:41:A7:CA:2D:99:C9:BD:3E:7E:60:33:CB:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9152D08/F9C333921D8711EAA9C5B170C4F9AE02/NNwgEp6tb0Gnyi2Zyb0-fmAzy4g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NNwgEp6tb0Gnyi2Zyb0-fmAzy4g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9152D08/F9C333921D8711EAA9C5B170C4F9AE02/NNwgEp6tb0Gnyi2Zyb0-fmAzy4g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 06:c0:68:79:54:69:c1:c4:10:c2:33:ac:c1:dc:7e:b3:d5:7c: a3:50:3b:60:40:f6:3a:c9:bf:73:b9:27:49:61:83:fc:a0:7b: 23:81:bd:48:52:4f:63:bb:0c:26:8b:4c:14:1f:97:e3:4a:8b: c5:e3:fd:89:7e:02:22:46:f4:6b:a2:c6:49:9d:6e:23:fd:dd: b5:4d:6c:2e:79:08:26:99:7a:bd:d2:f9:74:2a:4f:ae:e7:a6: 07:08:0b:0e:0a:f4:26:0f:23:8a:89:f2:51:53:1e:da:1d:d8: ab:22:2c:a8:be:53:64:5f:31:9c:d9:11:92:d9:8c:24:fb:48: ad:df:f1:f7:6d:f4:6e:d4:2e:70:52:8d:3a:8d:2b:72:42:e5: 97:5b:85:e5:eb:35:e5:06:59:13:8a:37:01:83:f0:88:1d:67: 1e:ad:30:28:09:5e:11:ad:75:f1:37:b6:ca:7c:f9:45:7b:99: 82:db:99:20:58:4a:51:1f:9f:2d:93:1a:85:b1:49:89:62:dd: 4a:6d:18:55:6b:6f:25:b9:40:f6:9c:c9:e0:1d:53:fb:eb:23: be:2b:99:2c:cc:69:54:ac:4e:92:ea:9f:c5:ce:c4:56:cc:68: bb:da:0b:7f:d8:b0:a4:04:9f:56:aa:dc:6a:d0:a5:22:1d:3e: 76:90:32:2c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDJUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTJEMDgxMTAvBgNVBAUTKDM0REMyMDEyOUVBRDZGNDFBN0NBMkQ5OUM5QkQzRTdF NjAzM0NCODgwHhcNMjUwNzE4MTkwMTUwWhcNMjUwNzI1MTkwMTUwWjAYMRYwFAYD VQQDEw02ODdhOWExZS0wOWZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxmJ1kLGYHhXz2U4CcALRUkjE5KfUALO//ASNfnJoEYyKEjDNPOiXsmhS4FaF TPE+X2u9ESvo3ybTjO3Ko6SY+2kJ5gX6dgAjhNca/n9d/sqQJz0DpQQdfDTZ0/Ef /b/XLfJ8dqhyeW6XP2WfZJZDU9RhgTVm7EnyOHxZtVIfgghPziPHFBHpzy+YwYYl MeSuk8y78YUsGEvbxHMSxQm1QxAatRCq9nCdfM+uBItOMwT+hmqWJLmAl7Wvhq/t c0Valg6v8mZKmjkDvGPMZs4k2EOCH73gsP+6fl6U7VxEkWZGf/Jw7t9zQmXV4AMw fhUocYU/6YhXKOhh8WFr8+PiuQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC1cUAiW p/7dOWZj6Jwc8dmMyyOMMB8GA1UdIwQYMBaAFDTcIBKerW9Bp8otmcm9Pn5gM8uI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MkQwOC9GOUMzMzM5MjFE ODcxMUVBQTlDNUIxNzBDNEY5QUUwMi9OTndnRXA2dGIwR255aTJaeWIwLWZtQXp5 NGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05Od2dFcDZ0YjBHbnlpMlp5YjAtZm1Benk0Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MkQwOC9GOUMzMzM5MjFEODcxMUVBQTlDNUIxNzBDNEY5QUUwMi9OTndnRXA2dGIw R255aTJaeWIwLWZtQXp5NGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAGwGh5VGnBxBDCM6zB3H6z1XyjUDtgQPY6yb9zuSdJYYP8oHsjgb1I Uk9juwwmi0wUH5fjSovF4/2JfgIiRvRrosZJnW4j/d21TWwueQgmmXq90vl0Kk+u 56YHCAsOCvQmDyOKifJRUx7aHdirIiyovlNkXzGc2RGS2Ywk+0it3/H3bfRu1C5w Uo06jStyQuWXW4Xl6zXlBlkTijcBg/CIHWcerTAoCV4RrXXxN7bKfPlFe5mC25kg WEpRH58tkxqFsUmJYt1KbRhVa28luUD2nMngHVP76yO+K5kszGlUrE6S6p/FzsRW zGi72gt/2LCkBJ9Wqtxq0KUiHT52kDIs -----END CERTIFICATE-----Generated at Sun Jul 20 03:49:13 2025 by rpki-client