$ rpki-client -vvf rpki.apnic.net/member_repository/A91DC46A/00500164943211E68C1B824AC4F9AE02/-NSmMtBplkxhoz5B1iQ9U1sAfVQ.mft File: -NSmMtBplkxhoz5B1iQ9U1sAfVQ.mft (raw, json) Hash identifier: 1qM+QC1+uBUM195U++UlcbFIyH49UllRosvlNTAdDl8= Subject key identifier: 39:DF:8C:F1:E7:27:AD:95:1C:99:23:5E:F9:41:BD:77:DA:62:E0:F3 Authority key identifier: F8:D4:A6:32:D0:69:96:4C:61:A3:3E:41:D6:24:3D:53:5B:00:7D:54 Certificate issuer: /CN=A91DC46A/serialNumber=F8D4A632D069964C61A33E41D6243D535B007D54 Certificate serial: 1E4A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-NSmMtBplkxhoz5B1iQ9U1sAfVQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DC46A/00500164943211E68C1B824AC4F9AE02/-NSmMtBplkxhoz5B1iQ9U1sAfVQ.mft Manifest number: 1E0D Signing time: Sun 20 Jul 2025 16:07:51 +0000 Manifest this update: Sun 20 Jul 2025 16:07:51 +0000 Manifest next update: Sun 27 Jul 2025 16:07:51 +0000 Files and hashes: 1: -NSmMtBplkxhoz5B1iQ9U1sAfVQ.crl (hash: SDXDArTu++upucm6WmlWoshGpOJVWTCn3AZyJ1Z2Xj4=) 2: 527AA5C69F4F11EAA7970484C4F9AE02.roa (hash: zuUsKZCcjPOj5pM09o9z0mAoFhewcmu+fcIGUoGJ1jw=) 3: BD6571EEC0AC11EF8F832C34C4F9AE02.roa (hash: G/Ubv3z+VEdcNFiGQpNHf2mTf7Lsh6KdDEju5wCmKbw=) 4: C86831A80CB311EDB2750F60C4F9AE02.roa (hash: lSszTQ1c+gMLFVw7Gk7VDvJy/TEZ74hKfBC2kdiByE0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DC46A/00500164943211E68C1B824AC4F9AE02/-NSmMtBplkxhoz5B1iQ9U1sAfVQ.crl rsync://rpki.apnic.net/member_repository/A91DC46A/00500164943211E68C1B824AC4F9AE02/-NSmMtBplkxhoz5B1iQ9U1sAfVQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-NSmMtBplkxhoz5B1iQ9U1sAfVQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Jul 2025 16:07:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7754 (0x1e4a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DC46A, serialNumber=F8D4A632D069964C61A33E41D6243D535B007D54 Validity Not Before: Jul 20 16:07:51 2025 GMT Not After : Jul 27 16:07:51 2025 GMT Subject: CN=687d1457-577b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:73:8f:2f:e1:45:cf:95:a2:69:6b:20:4f:8f: f3:2b:39:46:3c:b4:0d:fd:5e:5c:98:24:9d:df:00: a9:f8:88:94:ba:73:07:8b:39:d6:cf:a1:42:d0:d3: 7f:0e:ec:21:2e:6c:bf:9e:07:a0:54:26:55:fd:01: d1:93:c2:33:b6:c3:89:6a:d4:03:69:88:6c:53:36: a6:1f:2f:3c:be:7c:17:6a:a8:f0:22:5c:eb:81:af: 46:a1:55:26:1d:20:8a:35:31:ea:12:24:00:af:f8: cb:ad:d2:c0:e8:1f:b6:3d:40:19:dd:68:96:db:54: 79:b4:7b:94:aa:7a:ce:9c:7e:8b:d6:2f:be:ae:d8: 2e:84:1d:cf:fd:e8:48:06:80:14:6e:95:74:33:d1: ec:e6:aa:d0:25:04:b7:8a:22:6a:4c:06:df:31:2d: b9:48:98:da:1e:3f:21:b6:e4:d7:b3:b1:c3:47:44: 83:e9:13:b5:b5:97:db:fa:40:2d:4a:a0:48:8c:5d: 42:0b:d3:3b:57:a1:42:13:f4:ab:6e:ef:71:77:cf: 4b:a7:ea:31:d4:80:c2:22:30:0b:60:3e:20:ec:ca: b3:d3:cd:e3:fa:70:c3:83:4b:80:4c:e8:5a:86:a7: 74:33:52:f2:8b:fe:0a:0b:e2:3f:ff:4b:64:3c:28: 71:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:DF:8C:F1:E7:27:AD:95:1C:99:23:5E:F9:41:BD:77:DA:62:E0:F3 X509v3 Authority Key Identifier: keyid:F8:D4:A6:32:D0:69:96:4C:61:A3:3E:41:D6:24:3D:53:5B:00:7D:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DC46A/00500164943211E68C1B824AC4F9AE02/-NSmMtBplkxhoz5B1iQ9U1sAfVQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-NSmMtBplkxhoz5B1iQ9U1sAfVQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC46A/00500164943211E68C1B824AC4F9AE02/-NSmMtBplkxhoz5B1iQ9U1sAfVQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 64:c3:bd:61:12:51:20:67:2b:82:ce:e0:b1:51:dd:29:21:3f: a0:b7:98:fd:40:88:40:34:0e:4d:9e:9e:ce:1e:e9:f3:99:6f: c9:cf:bd:c0:ad:4d:1e:e4:e2:d3:94:10:b8:cb:c2:98:bf:33: 84:3e:59:48:e3:47:6e:ea:45:50:b2:bc:22:9e:c5:74:b1:36: 83:82:8e:0f:55:ab:69:71:49:5f:b1:38:e6:27:fb:f5:6b:be: 29:40:f5:87:d7:c6:21:f1:5a:c6:b1:45:7f:30:e8:15:ca:73: 3a:c8:59:8f:ed:9a:69:78:34:90:42:4d:eb:72:00:3a:5f:3a: 87:8d:ca:ae:a5:dc:88:ca:6b:af:2f:42:11:d6:3d:76:9a:a9: 99:e9:6c:83:ec:10:bd:50:d8:95:2b:b9:ce:24:11:dd:97:54: 21:a8:9b:bf:b2:8a:29:43:62:78:8a:7a:5f:55:bb:97:27:60: 04:53:f8:ed:d1:2c:33:2d:99:8b:17:c5:3c:d7:d5:32:c4:2d: 01:53:54:b6:d2:ab:db:27:72:af:f2:eb:41:2b:8e:42:b6:54: 6d:e5:63:2b:dc:a2:12:d2:4d:cd:a1:9a:a2:7d:33:c7:81:a8: 2b:e1:71:d1:84:68:66:57:8d:ca:7f:7f:8a:9e:0a:32:01:7c: c1:c3:cc:6d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHkowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REM0NkExMTAvBgNVBAUTKEY4RDRBNjMyRDA2OTk2NEM2MUEzM0U0MUQ2MjQzRDUz NUIwMDdENTQwHhcNMjUwNzIwMTYwNzUxWhcNMjUwNzI3MTYwNzUxWjAYMRYwFAYD VQQDEw02ODdkMTQ1Ny01NzdiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3XOPL+FFz5WiaWsgT4/zKzlGPLQN/V5cmCSd3wCp+IiUunMHiznWz6FC0NN/ DuwhLmy/ngegVCZV/QHRk8IztsOJatQDaYhsUzamHy88vnwXaqjwIlzrga9GoVUm HSCKNTHqEiQAr/jLrdLA6B+2PUAZ3WiW21R5tHuUqnrOnH6L1i++rtguhB3P/ehI BoAUbpV0M9Hs5qrQJQS3iiJqTAbfMS25SJjaHj8htuTXs7HDR0SD6RO1tZfb+kAt SqBIjF1CC9M7V6FCE/Srbu9xd89Lp+ox1IDCIjALYD4g7Mqz083j+nDDg0uATOha hqd0M1Lyi/4KC+I//0tkPChxBwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDnfjPHn J62VHJkjXvlBvXfaYuDzMB8GA1UdIwQYMBaAFPjUpjLQaZZMYaM+QdYkPVNbAH1U MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQzQ2QS8wMDUwMDE2NDk0 MzIxMUU2OEMxQjgyNEFDNEY5QUUwMi8tTlNtTXRCcGxreGhvejVCMWlROVUxc0Fm VlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1OU21NdEJwbGt4aG96NUIxaVE5VTFzQWZWUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QzQ2QS8wMDUwMDE2NDk0MzIxMUU2OEMxQjgyNEFDNEY5QUUwMi8tTlNtTXRCcGxr eGhvejVCMWlROVUxc0FmVlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBkw71hElEgZyuCzuCxUd0pIT+gt5j9QIhANA5Nnp7OHunzmW/Jz73A rU0e5OLTlBC4y8KYvzOEPllI40du6kVQsrwinsV0sTaDgo4PVatpcUlfsTjmJ/v1 a74pQPWH18Yh8VrGsUV/MOgVynM6yFmP7ZppeDSQQk3rcgA6XzqHjcqupdyIymuv L0IR1j12mqmZ6WyD7BC9UNiVK7nOJBHdl1QhqJu/soopQ2J4inpfVbuXJ2AEU/jt 0SwzLZmLF8U819UyxC0BU1S20qvbJ3Kv8utBK45CtlRt5WMr3KIS0k3NoZqifTPH gagr4XHRhGhmV43Kf3+KngoyAXzBw8xt -----END CERTIFICATE-----Generated at Mon Jul 21 07:20:25 2025 by rpki-client