$ rpki-client -vvf rpki.apnic.net/member_repository/A916BC76/6136A172FC1511EB9E50BC0AC4F9AE02/NAlJ7LhXg2NX8QJTxpQnIggZex0.mft File: NAlJ7LhXg2NX8QJTxpQnIggZex0.mft (raw, json) Hash identifier: j4OZksnJ+oVRMmzZYvW7QZUro8F2XQIXE3eNq9SM1to= Subject key identifier: FB:61:32:42:B3:74:0F:C9:86:FD:05:18:98:F8:60:0E:12:C2:0F:F2 Authority key identifier: 34:09:49:EC:B8:57:83:63:57:F1:02:53:C6:94:27:22:08:19:7B:1D Certificate issuer: /CN=A916BC76/serialNumber=340949ECB857836357F10253C694272208197B1D Certificate serial: 054D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NAlJ7LhXg2NX8QJTxpQnIggZex0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916BC76/6136A172FC1511EB9E50BC0AC4F9AE02/NAlJ7LhXg2NX8QJTxpQnIggZex0.mft Manifest number: 0548 Signing time: Thu 24 Jul 2025 23:46:46 +0000 Manifest this update: Thu 24 Jul 2025 23:46:46 +0000 Manifest next update: Thu 31 Jul 2025 23:46:46 +0000 Files and hashes: 1: NAlJ7LhXg2NX8QJTxpQnIggZex0.crl (hash: rr2mcCa5fhNoiNRrXwh1ImtkSCuqKn4W3x1J4MH7P7I=) 2: F44B1F40FC1711EBA835010DC4F9AE02.roa (hash: Y4KIW6waXy9by1Ft4XI4IDDdWRGAFQ3T1gtKYgu91qw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916BC76/6136A172FC1511EB9E50BC0AC4F9AE02/NAlJ7LhXg2NX8QJTxpQnIggZex0.crl rsync://rpki.apnic.net/member_repository/A916BC76/6136A172FC1511EB9E50BC0AC4F9AE02/NAlJ7LhXg2NX8QJTxpQnIggZex0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NAlJ7LhXg2NX8QJTxpQnIggZex0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 31 Jul 2025 23:46:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1357 (0x54d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916BC76, serialNumber=340949ECB857836357F10253C694272208197B1D Validity Not Before: Jul 24 23:46:46 2025 GMT Not After : Jul 31 23:46:46 2025 GMT Subject: CN=6882c5e6-3e7a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:7c:47:88:59:c1:66:d5:55:b0:b7:29:a8:d8: 18:b9:da:8a:c1:b9:70:7b:8e:6c:87:b3:04:1b:61: 1a:5e:b5:43:15:db:eb:0f:29:fb:ec:68:bb:9e:42: f4:2d:c3:ab:87:10:5d:05:49:77:0c:52:ab:47:88: 07:0f:ea:7a:37:f0:97:12:b4:7a:b3:de:20:fa:81: 04:d0:ad:e2:58:3e:81:db:cb:3e:7f:7f:95:51:2b: 7e:f1:83:32:ff:dc:9f:dc:62:ae:e1:8d:b6:bc:c4: b3:de:e5:fc:54:ac:17:f6:c9:23:56:f7:b7:8f:b9: 06:44:e2:2d:d8:c6:a0:ea:7f:4d:68:35:73:4a:d3: fa:ce:02:12:6c:a0:02:c4:2f:ee:9d:c0:1d:51:ed: 26:9d:f3:d0:d8:d7:e1:d5:37:b8:7f:41:7d:66:a8: f2:b6:c2:63:92:5b:1e:b2:06:76:d5:df:c6:67:6a: 91:78:7e:8d:e7:70:8f:49:9e:67:1d:28:b8:00:ef: 55:34:91:06:77:0e:36:9c:a6:93:4b:00:0b:43:a3: 53:89:55:ce:04:b9:54:0f:08:14:de:2e:8d:9e:1d: e3:b4:b0:95:80:c6:cc:0b:1b:00:9d:15:c1:ec:18: c4:11:1c:2f:f4:eb:c3:3a:fa:fc:eb:52:37:4b:78: b4:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:61:32:42:B3:74:0F:C9:86:FD:05:18:98:F8:60:0E:12:C2:0F:F2 X509v3 Authority Key Identifier: keyid:34:09:49:EC:B8:57:83:63:57:F1:02:53:C6:94:27:22:08:19:7B:1D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916BC76/6136A172FC1511EB9E50BC0AC4F9AE02/NAlJ7LhXg2NX8QJTxpQnIggZex0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NAlJ7LhXg2NX8QJTxpQnIggZex0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916BC76/6136A172FC1511EB9E50BC0AC4F9AE02/NAlJ7LhXg2NX8QJTxpQnIggZex0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b7:da:c3:81:5b:ad:a5:48:14:bc:14:7d:82:4b:02:eb:8f:32: bf:01:1f:b0:4f:01:e6:1d:6a:ce:27:ec:a1:55:bc:40:3d:60: f5:31:c4:5b:f2:72:93:3c:77:36:c5:fc:b9:cf:af:ed:9c:64: 02:da:b6:3c:ab:80:d7:13:96:ce:7f:59:c4:b5:dd:92:cf:97: 9a:44:3c:8b:87:8e:c1:46:00:02:29:6b:91:73:14:f0:80:f1: cc:5e:f8:c2:2b:60:94:58:bb:3d:9a:2a:9f:08:10:55:9b:9f: d9:19:c5:e9:06:5b:d9:4f:f9:6e:7f:9f:5a:5a:e1:22:ef:6e: a2:5d:b0:a6:cd:81:05:ed:bb:73:de:a7:96:0d:f8:54:60:37: f1:62:1e:16:b3:47:54:8b:d4:88:f4:a8:38:4b:fd:cc:aa:88: c7:f9:f7:a1:9f:f1:2b:98:1e:bc:8c:aa:ad:97:6c:e1:cf:27: 8c:95:24:7a:d7:d5:d7:04:90:26:78:9e:52:7c:2d:a5:5e:6e: 03:26:af:72:14:a8:78:d4:f8:a9:c2:54:b4:01:cd:01:7c:2c: 3b:41:40:a8:b1:68:31:ca:93:a5:03:b4:ce:f2:2f:30:95:0a: 50:6f:9a:0b:35:f8:12:31:f3:2a:03:1f:6b:33:37:f4:29:db: a4:dc:a8:f7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBU0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkJDNzYxMTAvBgNVBAUTKDM0MDk0OUVDQjg1NzgzNjM1N0YxMDI1M0M2OTQyNzIy MDgxOTdCMUQwHhcNMjUwNzI0MjM0NjQ2WhcNMjUwNzMxMjM0NjQ2WjAYMRYwFAYD VQQDEw02ODgyYzVlNi0zZTdhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyXxHiFnBZtVVsLcpqNgYudqKwblwe45sh7MEG2EaXrVDFdvrDyn77Gi7nkL0 LcOrhxBdBUl3DFKrR4gHD+p6N/CXErR6s94g+oEE0K3iWD6B28s+f3+VUSt+8YMy /9yf3GKu4Y22vMSz3uX8VKwX9skjVve3j7kGROIt2Mag6n9NaDVzStP6zgISbKAC xC/uncAdUe0mnfPQ2Nfh1Te4f0F9ZqjytsJjklsesgZ21d/GZ2qReH6N53CPSZ5n HSi4AO9VNJEGdw42nKaTSwALQ6NTiVXOBLlUDwgU3i6Nnh3jtLCVgMbMCxsAnRXB 7BjEERwv9OvDOvr861I3S3i0kQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPthMkKz dA/Jhv0FGJj4YA4Swg/yMB8GA1UdIwQYMBaAFDQJSey4V4NjV/ECU8aUJyIIGXsd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QkM3Ni82MTM2QTE3MkZD MTUxMUVCOUU1MEJDMEFDNEY5QUUwMi9OQWxKN0xoWGcyTlg4UUpUeHBRbklnZ1pl eDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05BbEo3TGhYZzJOWDhRSlR4cFFuSWdnWmV4MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QkM3Ni82MTM2QTE3MkZDMTUxMUVCOUU1MEJDMEFDNEY5QUUwMi9OQWxKN0xoWGcy Tlg4UUpUeHBRbklnZ1pleDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC32sOBW62lSBS8FH2CSwLrjzK/AR+wTwHmHWrOJ+yhVbxAPWD1McRb 8nKTPHc2xfy5z6/tnGQC2rY8q4DXE5bOf1nEtd2Sz5eaRDyLh47BRgACKWuRcxTw gPHMXvjCK2CUWLs9miqfCBBVm5/ZGcXpBlvZT/luf59aWuEi726iXbCmzYEF7btz 3qeWDfhUYDfxYh4Ws0dUi9SI9Kg4S/3MqojH+fehn/ErmB68jKqtl2zhzyeMlSR6 19XXBJAmeJ5SfC2lXm4DJq9yFKh41PipwlS0Ac0BfCw7QUCosWgxypOlA7TO8i8w lQpQb5oLNfgSMfMqAx9rMzf0Kduk3Kj3 -----END CERTIFICATE-----Generated at Sat Jul 26 12:32:06 2025 by rpki-client