$ rpki-client -vvf rpki.apnic.net/member_repository/A911894F/963CF0CEEC5E11E48E7D0119C4F9AE02/NhKQaSiZCCzeI_UEU6QVXgqreXg.mft File: NhKQaSiZCCzeI_UEU6QVXgqreXg.mft (raw, json) Hash identifier: iVtUDBqRh6Z5vvF/Iq9mQJSlX///zWlvElr08MSHCH0= Subject key identifier: FD:7D:4F:43:7E:02:03:07:F4:6D:22:AA:C0:5D:C8:46:13:72:4C:02 Authority key identifier: 36:12:90:69:28:99:08:2C:DE:23:F5:04:53:A4:15:5E:0A:AB:79:78 Certificate issuer: /CN=A911894F/serialNumber=361290692899082CDE23F50453A4155E0AAB7978 Certificate serial: 268B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NhKQaSiZCCzeI_UEU6QVXgqreXg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911894F/963CF0CEEC5E11E48E7D0119C4F9AE02/NhKQaSiZCCzeI_UEU6QVXgqreXg.mft Manifest number: 2678 Signing time: Sun 24 Aug 2025 15:39:17 +0000 Manifest this update: Sun 24 Aug 2025 15:39:17 +0000 Manifest next update: Sun 31 Aug 2025 15:39:17 +0000 Files and hashes: 1: NhKQaSiZCCzeI_UEU6QVXgqreXg.crl (hash: 4TWC7xWLWyn2Ryoh/Ng6BSxvKkNJRUv8UJOxbC5HPOg=) 2: 802FBE707FEB11EB8B5E2817C4F9AE02.roa (hash: 7A1IMu+LIGDsrLSPFNBgTLonAK/3FwEXR3H+PIKYqo0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911894F/963CF0CEEC5E11E48E7D0119C4F9AE02/NhKQaSiZCCzeI_UEU6QVXgqreXg.crl rsync://rpki.apnic.net/member_repository/A911894F/963CF0CEEC5E11E48E7D0119C4F9AE02/NhKQaSiZCCzeI_UEU6QVXgqreXg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NhKQaSiZCCzeI_UEU6QVXgqreXg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 31 Aug 2025 15:39:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9867 (0x268b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911894F, serialNumber=361290692899082CDE23F50453A4155E0AAB7978 Validity Not Before: Aug 24 15:39:17 2025 GMT Not After : Aug 31 15:39:17 2025 GMT Subject: CN=68ab3225-3012 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:c7:3a:a4:f6:74:36:8d:f3:06:a6:23:3f:b5: 06:14:ec:e6:94:4d:b0:55:c7:67:95:f4:0f:ea:3a: 53:21:e6:3f:3f:21:30:70:be:96:4f:99:0d:00:f5: f7:ac:6f:50:dd:1e:d1:b8:75:f2:7c:2e:af:a2:3f: 5e:20:71:95:a8:35:01:f6:7f:b6:dd:33:da:4f:2b: 24:df:7a:3f:18:1d:0c:bb:8f:19:1a:13:30:b2:4f: ea:70:1b:88:68:81:dd:9a:82:ea:de:1b:29:66:62: a2:75:d8:c9:5e:a2:2f:ec:e6:cd:8e:34:2e:e7:8b: b0:ba:18:69:bd:21:b5:75:f5:34:9f:97:d0:70:13: 45:3d:91:76:4d:ec:cc:2b:68:b6:62:39:dc:a3:32: c5:a8:c6:e2:24:61:29:27:7d:c3:50:4a:4a:62:2a: 4c:ee:da:e9:b3:20:a9:e8:a1:1b:ac:f6:19:dc:85: dc:f2:82:81:0d:d8:93:16:9b:c4:d5:49:b7:1d:79: c4:bf:43:0a:70:a9:d4:ed:42:4e:b7:e0:2f:ea:1f: 26:cd:e9:b3:00:ef:35:f4:d1:69:c9:4f:0d:1b:84: 49:74:91:48:cf:cd:72:0e:17:e9:a7:6f:52:41:85: b1:dc:3e:43:90:c0:a3:fc:ed:47:db:db:7f:f1:cc: ad:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:7D:4F:43:7E:02:03:07:F4:6D:22:AA:C0:5D:C8:46:13:72:4C:02 X509v3 Authority Key Identifier: keyid:36:12:90:69:28:99:08:2C:DE:23:F5:04:53:A4:15:5E:0A:AB:79:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911894F/963CF0CEEC5E11E48E7D0119C4F9AE02/NhKQaSiZCCzeI_UEU6QVXgqreXg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NhKQaSiZCCzeI_UEU6QVXgqreXg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911894F/963CF0CEEC5E11E48E7D0119C4F9AE02/NhKQaSiZCCzeI_UEU6QVXgqreXg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1e:a3:1f:9b:36:d5:ac:aa:98:8e:11:5f:d7:15:4e:1b:ee:d6: 74:e6:f8:5b:9d:56:6b:85:27:bf:07:f6:9b:8b:79:fd:6c:94: 32:a4:63:d8:d7:6e:a8:c7:85:f1:8a:02:0e:4e:43:9f:a0:8c: 28:57:7d:43:28:ce:7c:2e:c0:11:62:49:bd:5b:6a:ef:d0:86: 6d:7d:a6:98:ad:da:be:37:c5:e6:17:53:f4:9b:7e:73:24:5e: 67:d5:88:e8:5b:33:8d:7e:f7:98:02:14:e8:e4:fa:c3:69:bd: ee:99:16:04:20:f8:a3:7c:24:cb:80:e7:b4:10:3d:3b:cc:a4: 93:65:1e:16:53:3e:5e:3c:39:66:79:2d:10:13:dc:89:2d:0f: 81:aa:0a:84:12:a7:99:4b:e1:ba:18:af:e4:11:bb:75:73:2e: 2a:d7:99:7a:55:6c:92:c1:66:85:f3:89:7e:68:d1:20:53:cc: eb:85:93:02:b0:f8:81:99:88:20:d6:83:99:92:43:e2:a2:f9: 82:ac:8a:69:4c:27:44:1b:ce:4d:22:7d:de:d0:d1:e9:56:41: cf:07:25:4c:82:89:be:77:d4:4c:f7:5c:79:2e:e6:d7:fb:b6: c2:9d:f0:54:b0:ab:e9:5b:8a:38:f1:dd:fc:49:14:85:79:56: 2d:b7:fa:f2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJoswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTg5NEYxMTAvBgNVBAUTKDM2MTI5MDY5Mjg5OTA4MkNERTIzRjUwNDUzQTQxNTVF MEFBQjc5NzgwHhcNMjUwODI0MTUzOTE3WhcNMjUwODMxMTUzOTE3WjAYMRYwFAYD VQQDEw02OGFiMzIyNS0zMDEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6cc6pPZ0No3zBqYjP7UGFOzmlE2wVcdnlfQP6jpTIeY/PyEwcL6WT5kNAPX3 rG9Q3R7RuHXyfC6voj9eIHGVqDUB9n+23TPaTysk33o/GB0Mu48ZGhMwsk/qcBuI aIHdmoLq3hspZmKiddjJXqIv7ObNjjQu54uwuhhpvSG1dfU0n5fQcBNFPZF2TezM K2i2YjncozLFqMbiJGEpJ33DUEpKYipM7trpsyCp6KEbrPYZ3IXc8oKBDdiTFpvE 1Um3HXnEv0MKcKnU7UJOt+Av6h8mzemzAO819NFpyU8NG4RJdJFIz81yDhfpp29S QYWx3D5DkMCj/O1H29t/8cytaQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP19T0N+ AgMH9G0iqsBdyEYTckwCMB8GA1UdIwQYMBaAFDYSkGkomQgs3iP1BFOkFV4Kq3l4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExODk0Ri85NjNDRjBDRUVD NUUxMUU0OEU3RDAxMTlDNEY5QUUwMi9OaEtRYVNpWkNDemVJX1VFVTZRVlhncXJl WGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05oS1FhU2laQ0N6ZUlfVUVVNlFWWGdxcmVYZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx ODk0Ri85NjNDRjBDRUVDNUUxMUU0OEU3RDAxMTlDNEY5QUUwMi9OaEtRYVNpWkND emVJX1VFVTZRVlhncXJlWGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAeox+bNtWsqpiOEV/XFU4b7tZ05vhbnVZrhSe/B/abi3n9bJQypGPY 126ox4XxigIOTkOfoIwoV31DKM58LsARYkm9W2rv0IZtfaaYrdq+N8XmF1P0m35z JF5n1YjoWzONfveYAhTo5PrDab3umRYEIPijfCTLgOe0ED07zKSTZR4WUz5ePDlm eS0QE9yJLQ+BqgqEEqeZS+G6GK/kEbt1cy4q15l6VWySwWaF84l+aNEgU8zrhZMC sPiBmYgg1oOZkkPiovmCrIppTCdEG85NIn3e0NHpVkHPByVMgom+d9RM91x5LubX +7bCnfBUsKvpW4o48d38SRSFeVYtt/ry -----END CERTIFICATE-----Generated at Sun Aug 24 22:05:00 2025 by rpki-client