$ rpki-client -vvf rpki.apnic.net/member_repository/A916714C/3FED6608DFEC11EB8F704D12C4F9AE02/NT5Ih1N2xtuX40JjZcx_GMlFaHc.mft File: NT5Ih1N2xtuX40JjZcx_GMlFaHc.mft (raw, json) Hash identifier: iDCWYFyZTR8SXwm9iv8cm+nrI2YERrBAVXsqsmbu4o0= Subject key identifier: 6E:7A:7C:00:E8:6A:4E:52:13:20:26:26:30:4F:F1:E1:F7:D0:34:78 Authority key identifier: 35:3E:48:87:53:76:C6:DB:97:E3:42:63:65:CC:7F:18:C9:45:68:77 Certificate issuer: /CN=A916714C/serialNumber=353E48875376C6DB97E3426365CC7F18C9456877 Certificate serial: 0594 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NT5Ih1N2xtuX40JjZcx_GMlFaHc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916714C/3FED6608DFEC11EB8F704D12C4F9AE02/NT5Ih1N2xtuX40JjZcx_GMlFaHc.mft Manifest number: 058E Signing time: Fri 18 Jul 2025 23:35:26 +0000 Manifest this update: Fri 18 Jul 2025 23:35:26 +0000 Manifest next update: Fri 25 Jul 2025 23:35:26 +0000 Files and hashes: 1: NT5Ih1N2xtuX40JjZcx_GMlFaHc.crl (hash: NB47x5fl7EsG4e0I2r/eWoY53A3th4GR3nTpDWWnaS0=) 2: E50353FEDFED11EBA155C712C4F9AE02.roa (hash: IIVlt7G/+5szlJKKwOxccwy55c5N2K1rqxgqpnj4uFE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916714C/3FED6608DFEC11EB8F704D12C4F9AE02/NT5Ih1N2xtuX40JjZcx_GMlFaHc.crl rsync://rpki.apnic.net/member_repository/A916714C/3FED6608DFEC11EB8F704D12C4F9AE02/NT5Ih1N2xtuX40JjZcx_GMlFaHc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NT5Ih1N2xtuX40JjZcx_GMlFaHc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 23:35:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1428 (0x594) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916714C, serialNumber=353E48875376C6DB97E3426365CC7F18C9456877 Validity Not Before: Jul 18 23:35:26 2025 GMT Not After : Jul 25 23:35:26 2025 GMT Subject: CN=687ada3e-389a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:5e:3f:87:8a:bc:3c:d4:05:91:8d:67:1f:a8: 6b:e4:95:25:a7:5e:86:9f:08:f3:f0:ff:8f:c0:33: 4a:6c:0b:a6:28:e6:04:c9:e5:78:ef:2e:b7:8c:f4: 5f:91:ce:d7:d7:fa:2b:c3:8b:14:af:d4:5e:bb:93: 4b:1e:a3:6c:f9:7d:3a:e8:05:7e:e2:22:d5:1f:d0: 22:9a:30:1c:88:00:76:71:43:6b:d7:6f:e8:97:00: 20:73:6d:15:b5:de:9f:6f:b0:18:f0:f3:28:21:09: c5:00:76:07:40:37:ba:ad:02:4f:be:b0:de:8e:50: 34:23:39:91:cb:20:81:67:29:36:a5:43:43:df:e2: 6b:0f:82:8f:36:d3:fa:df:b3:93:b0:83:e1:74:27: 60:b6:18:26:3a:b6:39:39:62:79:b9:cc:f8:10:7f: d4:25:9f:80:73:c2:7a:6a:a1:38:0e:3c:cd:37:b0: 3d:43:4c:2f:1c:c0:64:4e:b0:16:88:8d:ce:e6:4d: 9b:c2:7f:c2:02:ef:cd:e0:97:af:81:7e:bb:df:87: 5a:19:af:38:5c:56:44:d6:83:14:3e:b2:e5:0f:26: 6d:90:f7:b5:f9:b1:78:ef:c2:06:a0:91:0e:ad:ea: 8c:3e:68:95:2a:44:ee:fd:5a:c4:f8:4a:a3:36:13: a5:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:7A:7C:00:E8:6A:4E:52:13:20:26:26:30:4F:F1:E1:F7:D0:34:78 X509v3 Authority Key Identifier: keyid:35:3E:48:87:53:76:C6:DB:97:E3:42:63:65:CC:7F:18:C9:45:68:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916714C/3FED6608DFEC11EB8F704D12C4F9AE02/NT5Ih1N2xtuX40JjZcx_GMlFaHc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NT5Ih1N2xtuX40JjZcx_GMlFaHc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916714C/3FED6608DFEC11EB8F704D12C4F9AE02/NT5Ih1N2xtuX40JjZcx_GMlFaHc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 37:48:87:eb:ac:74:16:b3:dc:97:bd:78:f0:c4:37:24:e7:bf: 6f:89:e9:cc:2a:2f:6b:56:13:61:4e:19:5c:30:26:ab:b2:09: 5f:bc:ed:00:64:1c:55:dd:4e:a8:b8:12:a7:6b:57:15:90:b5: 70:87:1d:d0:c4:45:b0:e0:21:f0:85:39:0c:20:23:7b:27:ae: c7:02:e2:d5:c9:fc:b5:5e:36:07:b7:bd:07:af:47:ec:11:09: d4:bd:99:ea:7e:d9:c0:1f:0d:af:26:48:85:8d:01:78:a3:f8: 82:b9:7c:22:85:3f:8f:2b:f6:09:87:4b:1b:6a:aa:45:0d:5e: 0b:a1:ca:1d:da:5b:a4:79:68:be:25:3f:71:28:76:b9:fc:55: dd:67:89:21:fb:d8:98:cd:d8:66:47:96:34:60:bc:b6:54:0e: f9:3f:aa:2a:71:64:53:3d:0a:92:39:2b:2b:33:94:ec:f7:12: a8:5a:73:d2:cd:5f:bf:42:80:91:86:b4:59:b9:25:31:71:b8: f7:dc:88:e8:34:23:83:9b:63:5f:ff:97:5c:d5:cf:e1:fa:8e: 76:92:d2:cc:f9:e4:9c:c3:be:a2:9a:70:f4:48:fe:1c:3d:68: b1:0a:1d:93:55:53:0d:92:aa:43:4e:ef:3c:90:c3:b3:ae:d2: 09:28:6f:67 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBZQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjcxNEMxMTAvBgNVBAUTKDM1M0U0ODg3NTM3NkM2REI5N0UzNDI2MzY1Q0M3RjE4 Qzk0NTY4NzcwHhcNMjUwNzE4MjMzNTI2WhcNMjUwNzI1MjMzNTI2WjAYMRYwFAYD VQQDEw02ODdhZGEzZS0zODlhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAml4/h4q8PNQFkY1nH6hr5JUlp16Gnwjz8P+PwDNKbAumKOYEyeV47y63jPRf kc7X1/orw4sUr9Reu5NLHqNs+X066AV+4iLVH9AimjAciAB2cUNr12/olwAgc20V td6fb7AY8PMoIQnFAHYHQDe6rQJPvrDejlA0IzmRyyCBZyk2pUND3+JrD4KPNtP6 37OTsIPhdCdgthgmOrY5OWJ5ucz4EH/UJZ+Ac8J6aqE4DjzNN7A9Q0wvHMBkTrAW iI3O5k2bwn/CAu/N4JevgX6734daGa84XFZE1oMUPrLlDyZtkPe1+bF478IGoJEO reqMPmiVKkTu/VrE+EqjNhOl0QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG56fADo ak5SEyAmJjBP8eH30DR4MB8GA1UdIwQYMBaAFDU+SIdTdsbbl+NCY2XMfxjJRWh3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NzE0Qy8zRkVENjYwOERG RUMxMUVCOEY3MDREMTJDNEY5QUUwMi9OVDVJaDFOMnh0dVg0MEpqWmN4X0dNbEZh SGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05UNUloMU4yeHR1WDQwSmpaY3hfR01sRmFIYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NzE0Qy8zRkVENjYwOERGRUMxMUVCOEY3MDREMTJDNEY5QUUwMi9OVDVJaDFOMnh0 dVg0MEpqWmN4X0dNbEZhSGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA3SIfrrHQWs9yXvXjwxDck579vienMKi9rVhNhThlcMCarsglfvO0A ZBxV3U6ouBKna1cVkLVwhx3QxEWw4CHwhTkMICN7J67HAuLVyfy1XjYHt70Hr0fs EQnUvZnqftnAHw2vJkiFjQF4o/iCuXwihT+PK/YJh0sbaqpFDV4Locod2lukeWi+ JT9xKHa5/FXdZ4kh+9iYzdhmR5Y0YLy2VA75P6oqcWRTPQqSOSsrM5Ts9xKoWnPS zV+/QoCRhrRZuSUxcbj33IjoNCODm2Nf/5dc1c/h+o52ktLM+eScw76imnD0SP4c PWixCh2TVVMNkqpDTu88kMOzrtIJKG9n -----END CERTIFICATE-----Generated at Sun Jul 20 06:14:53 2025 by rpki-client