$ rpki-client -vvf rpki.apnic.net/member_repository/A9113BE5/611C512CF0F311EC84B29C80C4F9AE02/NkbrHzcLfmPR823rNsJHbJbmuug.mft File: NkbrHzcLfmPR823rNsJHbJbmuug.mft (raw, json) Hash identifier: CdDGZY2O7wjGK3XYQxni6QFeYc1fN4YvJMMlW9IOo+o= Subject key identifier: 62:D4:9C:89:9E:C4:2C:50:88:29:51:60:F2:50:87:CF:3C:36:B3:34 Authority key identifier: 36:46:EB:1F:37:0B:7E:63:D1:F3:6D:EB:36:C2:47:6C:96:E6:BA:E8 Certificate issuer: /CN=A9113BE5/serialNumber=3646EB1F370B7E63D1F36DEB36C2476C96E6BAE8 Certificate serial: 030D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NkbrHzcLfmPR823rNsJHbJbmuug.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9113BE5/611C512CF0F311EC84B29C80C4F9AE02/NkbrHzcLfmPR823rNsJHbJbmuug.mft Manifest number: 0301 Signing time: Fri 19 Sep 2025 01:39:37 +0000 Manifest this update: Fri 19 Sep 2025 01:39:36 +0000 Manifest next update: Fri 26 Sep 2025 01:39:36 +0000 Files and hashes: 1: NkbrHzcLfmPR823rNsJHbJbmuug.crl (hash: v1ayZA8UeoXWKnGtG3F/4XVY+e1TrB3cSA3a1tDNHD0=) 2: 627A6758DF2A11EEBC440C5EC4F9AE02.roa (hash: q/TcJaaAitP3rzneDoOcxqjjnobWifgs1ChVJEG3jdI=) 3: F3B00CD2666C11EEB1B4711CC4F9AE02.roa (hash: NLX9iBQc5qpA5HiI79qnyQxZYjEiAaFpUSGQqEwDv14=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9113BE5/611C512CF0F311EC84B29C80C4F9AE02/NkbrHzcLfmPR823rNsJHbJbmuug.crl rsync://rpki.apnic.net/member_repository/A9113BE5/611C512CF0F311EC84B29C80C4F9AE02/NkbrHzcLfmPR823rNsJHbJbmuug.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NkbrHzcLfmPR823rNsJHbJbmuug.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Sep 2025 01:39:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 781 (0x30d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9113BE5, serialNumber=3646EB1F370B7E63D1F36DEB36C2476C96E6BAE8 Validity Not Before: Sep 19 01:39:36 2025 GMT Not After : Sep 26 01:39:36 2025 GMT Subject: CN=68ccb458-eeb3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:64:6b:07:db:13:9d:0d:84:87:a4:de:70:50: 93:a2:00:29:87:66:6d:d5:9c:78:93:39:cd:20:88: de:02:77:58:63:45:8c:65:b9:4e:fb:32:65:c4:e1: 4b:a6:fc:0f:98:aa:0f:3e:fb:50:0a:f8:4e:83:1b: e8:3e:ed:c3:72:94:ce:a6:e4:88:e5:95:9f:29:43: e6:78:24:f6:5f:a4:4e:70:e7:2b:81:84:a9:0e:ef: 84:36:a3:0a:46:ea:91:fb:8d:88:3c:9c:3a:ca:e7: 40:3f:a4:fb:ec:e8:23:68:51:24:5b:77:8c:e4:68: d3:e8:fb:ba:1a:19:d0:11:7c:0f:02:93:0f:40:26: 35:bc:f7:90:7b:a2:96:53:09:be:fc:96:11:c9:c0: c6:83:80:1d:ce:5e:74:a4:cc:f3:68:33:7e:0c:80: e6:2e:44:91:a0:53:88:bc:4e:61:a0:1e:8f:e6:fe: 4c:83:43:0e:0e:70:67:c2:2b:fe:67:03:9e:1e:b6: 64:01:6b:b1:f0:15:0a:af:63:cb:65:c4:3c:c6:20: ab:da:c5:6c:09:f2:a1:ca:0f:ae:2a:43:56:fb:9c: 27:b2:5a:f5:17:b3:24:ef:54:d5:26:be:50:ee:55: ef:00:bd:9f:cf:ab:e3:95:13:a2:f2:64:67:a5:1d: 6b:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:D4:9C:89:9E:C4:2C:50:88:29:51:60:F2:50:87:CF:3C:36:B3:34 X509v3 Authority Key Identifier: keyid:36:46:EB:1F:37:0B:7E:63:D1:F3:6D:EB:36:C2:47:6C:96:E6:BA:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9113BE5/611C512CF0F311EC84B29C80C4F9AE02/NkbrHzcLfmPR823rNsJHbJbmuug.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NkbrHzcLfmPR823rNsJHbJbmuug.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9113BE5/611C512CF0F311EC84B29C80C4F9AE02/NkbrHzcLfmPR823rNsJHbJbmuug.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 45:b4:c6:77:51:45:d0:22:a5:58:fb:fe:c2:d2:05:52:59:ed: 72:da:71:d4:6c:95:f3:dc:1b:4e:71:69:a7:31:69:a2:54:bb: 42:ed:f5:82:1d:c3:7f:b0:2c:6e:60:e8:98:b3:54:22:8e:b2: 52:18:98:a1:0a:af:fe:52:56:7f:1f:f7:57:da:93:cf:cd:49: fc:26:54:bf:cd:f6:77:2d:69:52:b3:ab:25:55:39:9b:9b:bc: 2d:18:3c:b7:ac:8b:17:ce:81:a1:8a:64:c9:5c:40:82:8c:8c: e2:97:53:d4:f8:43:93:76:9c:19:70:fe:f7:dc:21:39:8c:26: a3:74:0d:f2:d9:2f:9b:88:87:f1:21:22:31:2d:ac:17:c5:12: dd:f6:6e:d8:01:89:10:15:9d:84:6a:1a:87:87:2c:aa:07:8c: c1:15:f2:77:29:e8:99:e4:fb:af:09:00:8e:3c:11:da:26:4c: 89:7c:1d:63:3e:34:93:1b:a4:86:c8:d9:1b:cb:a3:48:2d:00: e9:68:04:40:56:94:33:7e:ae:71:83:df:9e:f1:79:75:a7:9a: 13:a7:d0:c1:1a:91:87:76:2f:1e:30:00:37:ee:40:df:4b:e0: a4:0f:c2:b3:c7:3e:61:60:ae:e1:a2:80:dc:bf:bc:13:20:0a: cc:f5:34:98 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAw0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTNCRTUxMTAvBgNVBAUTKDM2NDZFQjFGMzcwQjdFNjNEMUYzNkRFQjM2QzI0NzZD OTZFNkJBRTgwHhcNMjUwOTE5MDEzOTM2WhcNMjUwOTI2MDEzOTM2WjAYMRYwFAYD VQQDEw02OGNjYjQ1OC1lZWIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAumRrB9sTnQ2Eh6TecFCTogAph2Zt1Zx4kznNIIjeAndYY0WMZblO+zJlxOFL pvwPmKoPPvtQCvhOgxvoPu3DcpTOpuSI5ZWfKUPmeCT2X6ROcOcrgYSpDu+ENqMK RuqR+42IPJw6yudAP6T77OgjaFEkW3eM5GjT6Pu6GhnQEXwPApMPQCY1vPeQe6KW Uwm+/JYRycDGg4Adzl50pMzzaDN+DIDmLkSRoFOIvE5hoB6P5v5Mg0MODnBnwiv+ ZwOeHrZkAWux8BUKr2PLZcQ8xiCr2sVsCfKhyg+uKkNW+5wnslr1F7Mk71TVJr5Q 7lXvAL2fz6vjlROi8mRnpR1rEwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGLUnIme xCxQiClRYPJQh888NrM0MB8GA1UdIwQYMBaAFDZG6x83C35j0fNt6zbCR2yW5rro MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExM0JFNS82MTFDNTEyQ0Yw RjMxMUVDODRCMjlDODBDNEY5QUUwMi9Oa2JySHpjTGZtUFI4MjNyTnNKSGJKYm11 dWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05rYnJIemNMZm1QUjgyM3JOc0pIYkpibXV1Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx M0JFNS82MTFDNTEyQ0YwRjMxMUVDODRCMjlDODBDNEY5QUUwMi9Oa2JySHpjTGZt UFI4MjNyTnNKSGJKYm11dWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBFtMZ3UUXQIqVY+/7C0gVSWe1y2nHUbJXz3BtOcWmnMWmiVLtC7fWC HcN/sCxuYOiYs1QijrJSGJihCq/+UlZ/H/dX2pPPzUn8JlS/zfZ3LWlSs6slVTmb m7wtGDy3rIsXzoGhimTJXECCjIzil1PU+EOTdpwZcP733CE5jCajdA3y2S+biIfx ISIxLawXxRLd9m7YAYkQFZ2EahqHhyyqB4zBFfJ3KeiZ5PuvCQCOPBHaJkyJfB1j PjSTG6SGyNkby6NILQDpaARAVpQzfq5xg9+e8Xl1p5oTp9DBGpGHdi8eMAA37kDf S+CkD8Kzxz5hYK7hooDcv7wTIArM9TSY -----END CERTIFICATE-----Generated at Fri Sep 19 08:49:21 2025 by rpki-client