$ rpki-client -vvf rpki.apnic.net/member_repository/A91CA3CD/26453FA0905711EE86493613C4F9AE02/NctCHFV3F3WBziSzai9syTGEYFI.mft File: NctCHFV3F3WBziSzai9syTGEYFI.mft (raw, json) Hash identifier: ORH1/CQ3ypoJxdw28QCXLIJLH75T8hDG+hzctA6izRk= Subject key identifier: A3:4C:A1:71:65:E0:4C:FB:B3:F1:B6:7B:19:7E:9E:FD:A0:F0:00:4D Authority key identifier: 35:CB:42:1C:55:77:17:75:81:CE:24:B3:6A:2F:6C:C9:31:84:60:52 Certificate issuer: /CN=A91CA3CD/serialNumber=35CB421C5577177581CE24B36A2F6CC931846052 Certificate serial: 0138 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NctCHFV3F3WBziSzai9syTGEYFI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CA3CD/26453FA0905711EE86493613C4F9AE02/NctCHFV3F3WBziSzai9syTGEYFI.mft Manifest number: 0134 Signing time: Sat 19 Jul 2025 04:44:01 +0000 Manifest this update: Sat 19 Jul 2025 04:44:00 +0000 Manifest next update: Sat 26 Jul 2025 04:44:00 +0000 Files and hashes: 1: NctCHFV3F3WBziSzai9syTGEYFI.crl (hash: uJchfKAI9tf0pbsFxc8MWqQ6s9xcPVPBd4ax+5q2Dug=) 2: F5121FB090CF11EE8036815AC4F9AE02.roa (hash: cuDY334MkIVtRBq3o3ujGRQ6jR/z000CC0KgPqw5K+Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CA3CD/26453FA0905711EE86493613C4F9AE02/NctCHFV3F3WBziSzai9syTGEYFI.crl rsync://rpki.apnic.net/member_repository/A91CA3CD/26453FA0905711EE86493613C4F9AE02/NctCHFV3F3WBziSzai9syTGEYFI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NctCHFV3F3WBziSzai9syTGEYFI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 04:44:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 312 (0x138) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CA3CD, serialNumber=35CB421C5577177581CE24B36A2F6CC931846052 Validity Not Before: Jul 19 04:44:00 2025 GMT Not After : Jul 26 04:44:00 2025 GMT Subject: CN=687b2291-48f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:ed:25:58:d0:cb:76:41:e6:ef:0f:34:9b:99: ee:04:35:a2:9a:bf:e9:d5:71:a1:ff:41:ca:b0:25: 99:56:42:89:18:88:38:f1:5f:27:54:b3:35:8e:5b: 7a:81:3a:07:e1:dd:47:65:e3:7a:e3:33:fe:b0:e7: 85:c2:f5:3a:f5:95:c2:ed:a8:79:e2:1a:ea:f9:22: b3:f5:bd:90:ac:27:45:5b:b2:02:19:a3:6f:f4:ac: 85:c2:9b:4b:cb:33:11:f0:2a:32:63:08:77:01:a3: 4a:80:75:e5:e0:1a:98:68:ea:ef:8b:9e:fb:af:12: 35:68:73:a3:81:d0:28:35:8b:92:a2:4d:cb:1c:90: 4e:f4:9b:e8:96:92:41:8e:65:79:d7:ee:25:8f:b2: e4:31:e8:78:1e:52:7a:ec:45:ff:f7:9c:ce:5d:38: fc:2f:b3:12:d1:c6:2b:8c:ec:71:4c:75:7c:73:39: 06:42:23:e1:77:e9:11:0e:89:15:56:5a:f8:11:5e: 40:9d:8d:c6:31:86:95:ee:c0:77:40:7b:d3:57:98: 19:29:bf:0e:bb:8f:1b:90:e3:79:53:2d:6e:38:19: 90:c4:e5:7b:82:ec:1b:56:19:c6:a2:5d:26:9c:17: 82:74:a3:2d:b5:89:14:6e:62:b5:02:9c:85:40:4d: 88:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:4C:A1:71:65:E0:4C:FB:B3:F1:B6:7B:19:7E:9E:FD:A0:F0:00:4D X509v3 Authority Key Identifier: keyid:35:CB:42:1C:55:77:17:75:81:CE:24:B3:6A:2F:6C:C9:31:84:60:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CA3CD/26453FA0905711EE86493613C4F9AE02/NctCHFV3F3WBziSzai9syTGEYFI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NctCHFV3F3WBziSzai9syTGEYFI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CA3CD/26453FA0905711EE86493613C4F9AE02/NctCHFV3F3WBziSzai9syTGEYFI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 33:be:3d:ea:3b:a7:38:36:46:fd:72:45:d6:79:3a:78:04:49: 37:9f:51:be:da:b7:7e:0b:04:60:d2:75:67:dd:f4:5b:10:9a: 47:a6:23:5d:ac:c8:38:9b:8f:2d:be:de:be:8f:76:27:02:e3: 54:0d:4d:72:ae:0c:a6:8f:9b:6a:61:81:21:78:ab:0f:e6:b4: d0:ae:46:dd:82:36:d9:1f:c1:68:bf:ef:21:15:bf:a9:7f:8a: 23:a7:17:7a:1a:0f:6b:36:30:b7:de:21:12:a5:10:6b:ec:0f: 52:3e:24:23:e0:11:48:19:bd:ec:7b:0f:39:91:1c:7e:db:ef: a7:fb:be:bb:0a:bf:0e:35:a6:72:81:a1:95:e1:fe:ea:92:ef: 58:f1:f2:e7:04:1c:ab:c6:0f:4c:48:cf:ed:2a:ef:08:21:76: 65:ec:c9:4b:11:d0:d7:ad:68:8e:7b:88:92:fd:78:25:79:ef: ac:3f:94:97:24:1f:69:92:50:d9:e5:2c:9e:a3:18:04:37:ab: 0f:6b:60:35:27:07:a5:43:09:c5:f1:bd:20:a7:2e:e1:78:2a: ab:34:ce:7e:dc:47:9b:3b:63:57:07:4a:e0:0d:a9:b2:9f:66: 10:82:e3:79:36:08:04:8e:74:38:e9:0a:d2:b4:2c:de:81:46: 54:15:00:83 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICATgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0EzQ0QxMTAvBgNVBAUTKDM1Q0I0MjFDNTU3NzE3NzU4MUNFMjRCMzZBMkY2Q0M5 MzE4NDYwNTIwHhcNMjUwNzE5MDQ0NDAwWhcNMjUwNzI2MDQ0NDAwWjAYMRYwFAYD VQQDEw02ODdiMjI5MS00OGYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwu0lWNDLdkHm7w80m5nuBDWimr/p1XGh/0HKsCWZVkKJGIg48V8nVLM1jlt6 gToH4d1HZeN64zP+sOeFwvU69ZXC7ah54hrq+SKz9b2QrCdFW7ICGaNv9KyFwptL yzMR8CoyYwh3AaNKgHXl4BqYaOrvi577rxI1aHOjgdAoNYuSok3LHJBO9JvolpJB jmV51+4lj7LkMeh4HlJ67EX/95zOXTj8L7MS0cYrjOxxTHV8czkGQiPhd+kRDokV Vlr4EV5AnY3GMYaV7sB3QHvTV5gZKb8Ou48bkON5Uy1uOBmQxOV7guwbVhnGol0m nBeCdKMttYkUbmK1ApyFQE2IqQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKNMoXFl 4Ez7s/G2exl+nv2g8ABNMB8GA1UdIwQYMBaAFDXLQhxVdxd1gc4ks2ovbMkxhGBS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQTNDRC8yNjQ1M0ZBMDkw NTcxMUVFODY0OTM2MTNDNEY5QUUwMi9OY3RDSEZWM0YzV0J6aVN6YWk5c3lUR0VZ RkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05jdENIRlYzRjNXQnppU3phaTlzeVRHRVlGSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QTNDRC8yNjQ1M0ZBMDkwNTcxMUVFODY0OTM2MTNDNEY5QUUwMi9OY3RDSEZWM0Yz V0J6aVN6YWk5c3lUR0VZRkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAzvj3qO6c4Nkb9ckXWeTp4BEk3n1G+2rd+CwRg0nVn3fRbEJpHpiNd rMg4m48tvt6+j3YnAuNUDU1yrgymj5tqYYEheKsP5rTQrkbdgjbZH8Fov+8hFb+p f4ojpxd6Gg9rNjC33iESpRBr7A9SPiQj4BFIGb3sew85kRx+2++n+767Cr8ONaZy gaGV4f7qku9Y8fLnBByrxg9MSM/tKu8IIXZl7MlLEdDXrWiOe4iS/Xglee+sP5SX JB9pklDZ5SyeoxgEN6sPa2A1JwelQwnF8b0gpy7heCqrNM5+3EebO2NXB0rgDamy n2YQguN5NggEjnQ46QrStCzegUZUFQCD -----END CERTIFICATE-----Generated at Sun Jul 20 19:07:44 2025 by rpki-client