$ rpki-client -vvf rpki.apnic.net/member_repository/A91C6B27/82BF2BF4305411EAAFC9116EC4F9AE02/nssirN4JZ6BYN-WPxzHTV-N2N_g.mft File: nssirN4JZ6BYN-WPxzHTV-N2N_g.mft (raw, json) Hash identifier: yLi5RxiDfMKoCe7cU++jApi744QP+A751NOS7qLCHE4= Subject key identifier: 68:D7:C0:C1:2E:E5:E5:05:C4:79:57:65:68:DF:74:B3:34:BC:0F:21 Authority key identifier: 9E:CB:22:AC:DE:09:67:A0:58:37:E5:8F:C7:31:D3:57:E3:76:37:F8 Certificate issuer: /CN=A91C6B27/serialNumber=9ECB22ACDE0967A05837E58FC731D357E37637F8 Certificate serial: 0B93 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nssirN4JZ6BYN-WPxzHTV-N2N_g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C6B27/82BF2BF4305411EAAFC9116EC4F9AE02/nssirN4JZ6BYN-WPxzHTV-N2N_g.mft Manifest number: 0B7E Signing time: Sun 20 Jul 2025 19:06:36 +0000 Manifest this update: Sun 20 Jul 2025 19:06:35 +0000 Manifest next update: Sun 27 Jul 2025 19:06:35 +0000 Files and hashes: 1: nssirN4JZ6BYN-WPxzHTV-N2N_g.crl (hash: 0yrDmumypseD7YZd0zRscbTSgXfvtpSVAVvg6wYyzXo=) 2: 2B1D3BB2305811EA8D5B6479C4F9AE02.roa (hash: SccF8HRtnWqPr6dbqcwFHPaBm6ma5y4QuMfEodFq0x8=) 3: E4BB99E2336E11EA94623E18C4F9AE02.roa (hash: qucjAVGWpouOPQ3WeFCClp/39PYcY3aBfMI0Mahgzo8=) 4: E5675F48336E11EA94623E18C4F9AE02.roa (hash: SLgBz/egPkek4QY9s+goKoqiOELjoV2wU84pCw7L2Bw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C6B27/82BF2BF4305411EAAFC9116EC4F9AE02/nssirN4JZ6BYN-WPxzHTV-N2N_g.crl rsync://rpki.apnic.net/member_repository/A91C6B27/82BF2BF4305411EAAFC9116EC4F9AE02/nssirN4JZ6BYN-WPxzHTV-N2N_g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nssirN4JZ6BYN-WPxzHTV-N2N_g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Jul 2025 19:06:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2963 (0xb93) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C6B27, serialNumber=9ECB22ACDE0967A05837E58FC731D357E37637F8 Validity Not Before: Jul 20 19:06:35 2025 GMT Not After : Jul 27 19:06:35 2025 GMT Subject: CN=687d3e3c-cdd7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:40:be:27:7e:b5:98:5f:3f:5a:ce:c1:91:a9: 48:8b:ff:a7:31:92:83:b3:97:61:d4:47:7a:5e:89: 54:36:55:da:0b:d4:2e:3b:5b:26:85:53:96:2d:84: 7f:ff:92:15:27:9e:ee:39:aa:9f:03:0c:3d:87:fa: 71:80:26:12:b1:33:9a:f5:07:47:d6:13:d8:30:3f: f1:c9:f2:ec:55:ab:2b:66:4e:be:5c:48:b4:57:6d: 10:24:13:45:8c:43:20:cf:14:03:f7:09:3a:46:be: 78:fe:18:18:d9:ce:3e:60:dc:32:74:ae:b4:a6:c3: 63:a4:49:8a:a1:3b:04:7a:d3:aa:7f:2d:85:81:c5: b4:ca:2a:1f:41:9a:d1:66:34:df:3f:0d:a3:73:01: 51:97:06:88:ba:0f:f0:39:b9:b6:16:39:a9:c5:16: 2a:4c:5c:e1:1b:0e:57:6c:89:1a:91:f2:b9:f6:72: 5c:bf:3e:e4:d8:7d:dd:26:b5:f3:a0:9e:fc:60:31: da:22:ff:ca:e3:72:0f:ae:0c:e7:46:04:d3:ce:69: 1f:48:60:4a:44:5c:47:e4:f1:14:44:7f:4a:44:d2: 1a:f0:50:78:dc:1c:38:25:90:83:ca:18:0a:e6:e5: ac:1e:58:53:4f:3a:eb:77:a1:f2:c5:f9:1a:b1:98: 6b:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:D7:C0:C1:2E:E5:E5:05:C4:79:57:65:68:DF:74:B3:34:BC:0F:21 X509v3 Authority Key Identifier: keyid:9E:CB:22:AC:DE:09:67:A0:58:37:E5:8F:C7:31:D3:57:E3:76:37:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C6B27/82BF2BF4305411EAAFC9116EC4F9AE02/nssirN4JZ6BYN-WPxzHTV-N2N_g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nssirN4JZ6BYN-WPxzHTV-N2N_g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C6B27/82BF2BF4305411EAAFC9116EC4F9AE02/nssirN4JZ6BYN-WPxzHTV-N2N_g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 12:0a:d0:24:b8:55:80:19:08:51:7b:2e:03:6c:e9:22:68:02: 48:b3:6f:a5:56:78:62:34:db:57:b8:c1:81:9b:d9:2f:32:d7: 2f:63:e2:2d:cc:7a:e3:90:9d:b9:d4:eb:29:4a:8b:5e:ff:d9: 17:b2:ae:25:80:2d:1e:be:2e:71:a1:45:c8:df:14:8b:7c:00: 7d:1b:48:66:27:f7:35:d3:65:d7:33:09:e2:8c:53:67:6b:bc: d4:2a:c3:2b:2e:c8:58:25:6a:d9:46:8e:a8:24:a0:d8:dd:5a: 19:21:39:d6:7f:87:49:cf:ca:c6:e0:9d:b9:a6:11:14:30:5d: d4:8f:3a:01:08:3d:37:8c:7d:4f:d0:74:0d:a9:15:90:63:59: a6:0d:c9:83:67:4b:73:88:be:a5:4d:1b:bd:e3:1e:37:2b:6f: 34:3f:67:f6:e5:70:ee:35:3e:b2:f8:b3:ad:f8:40:25:02:f8: fa:3f:15:d0:cf:be:d1:71:08:e1:ea:3f:3e:e7:e2:fb:9b:1e: cb:5e:1a:de:a6:23:3b:18:d2:2c:fc:9a:73:10:ca:05:1d:cb: c8:fb:65:ee:e8:5d:8f:4a:ff:27:24:36:64:99:23:2d:c6:b9: ef:a9:ac:56:00:d9:6d:d1:64:b7:88:c6:50:f0:5e:a0:c2:2d: c5:f1:f6:14 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC5MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzZCMjcxMTAvBgNVBAUTKDlFQ0IyMkFDREUwOTY3QTA1ODM3RTU4RkM3MzFEMzU3 RTM3NjM3RjgwHhcNMjUwNzIwMTkwNjM1WhcNMjUwNzI3MTkwNjM1WjAYMRYwFAYD VQQDEw02ODdkM2UzYy1jZGQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3kC+J361mF8/Ws7BkalIi/+nMZKDs5dh1Ed6XolUNlXaC9QuO1smhVOWLYR/ /5IVJ57uOaqfAww9h/pxgCYSsTOa9QdH1hPYMD/xyfLsVasrZk6+XEi0V20QJBNF jEMgzxQD9wk6Rr54/hgY2c4+YNwydK60psNjpEmKoTsEetOqfy2FgcW0yiofQZrR ZjTfPw2jcwFRlwaIug/wObm2FjmpxRYqTFzhGw5XbIkakfK59nJcvz7k2H3dJrXz oJ78YDHaIv/K43IPrgznRgTTzmkfSGBKRFxH5PEURH9KRNIa8FB43Bw4JZCDyhgK 5uWsHlhTTzrrd6HyxfkasZhrMQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGjXwMEu 5eUFxHlXZWjfdLM0vA8hMB8GA1UdIwQYMBaAFJ7LIqzeCWegWDflj8cx01fjdjf4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNkIyNy84MkJGMkJGNDMw NTQxMUVBQUZDOTExNkVDNEY5QUUwMi9uc3Npck40Slo2QllOLVdQeHpIVFYtTjJO X2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25zc2lyTjRKWjZCWU4tV1B4ekhUVi1OMk5fZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NkIyNy84MkJGMkJGNDMwNTQxMUVBQUZDOTExNkVDNEY5QUUwMi9uc3Npck40Slo2 QllOLVdQeHpIVFYtTjJOX2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQASCtAkuFWAGQhRey4DbOkiaAJIs2+lVnhiNNtXuMGBm9kvMtcvY+It zHrjkJ251OspSote/9kXsq4lgC0evi5xoUXI3xSLfAB9G0hmJ/c102XXMwnijFNn a7zUKsMrLshYJWrZRo6oJKDY3VoZITnWf4dJz8rG4J25phEUMF3UjzoBCD03jH1P 0HQNqRWQY1mmDcmDZ0tziL6lTRu94x43K280P2f25XDuNT6y+LOt+EAlAvj6PxXQ z77RcQjh6j8+5+L7mx7LXhrepiM7GNIs/JpzEMoFHcvI+2Xu6F2PSv8nJDZkmSMt xrnvqaxWANlt0WS3iMZQ8F6gwi3F8fYU -----END CERTIFICATE-----Generated at Mon Jul 21 06:52:34 2025 by rpki-client