$ rpki-client -vvf rpki.apnic.net/member_repository/A911BCDD/348AD8AC861311EEA8C95042C4F9AE02/nkKx9pFGDihG-nHwbcib8sdB25o.mft File: nkKx9pFGDihG-nHwbcib8sdB25o.mft (raw, json) Hash identifier: CD+OxGypzIHOy/4VzhQ33zOxy94eMlm7wTz/dOas04U= Subject key identifier: F5:F4:D8:70:15:7E:F6:69:50:3B:2D:52:12:97:28:36:79:F1:B8:20 Authority key identifier: 9E:42:B1:F6:91:46:0E:28:46:FA:71:F0:6D:C8:9B:F2:C7:41:DB:9A Certificate issuer: /CN=A911BCDD/serialNumber=9E42B1F691460E2846FA71F06DC89BF2C741DB9A Certificate serial: 014D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nkKx9pFGDihG-nHwbcib8sdB25o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911BCDD/348AD8AC861311EEA8C95042C4F9AE02/nkKx9pFGDihG-nHwbcib8sdB25o.mft Manifest number: 014A Signing time: Thu 21 Aug 2025 04:24:07 +0000 Manifest this update: Thu 21 Aug 2025 04:24:07 +0000 Manifest next update: Thu 28 Aug 2025 04:24:06 +0000 Files and hashes: 1: nkKx9pFGDihG-nHwbcib8sdB25o.crl (hash: brIRvnC8TYda6JkeJDfuc57mMvh8lsVtKQNltcHp4Ak=) 2: 5ED417AE869011EEA9011A36C4F9AE02.roa (hash: secqQJuczQrOBoLhJh1bWX70I59NSlP/4Mk301elvvU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911BCDD/348AD8AC861311EEA8C95042C4F9AE02/nkKx9pFGDihG-nHwbcib8sdB25o.crl rsync://rpki.apnic.net/member_repository/A911BCDD/348AD8AC861311EEA8C95042C4F9AE02/nkKx9pFGDihG-nHwbcib8sdB25o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nkKx9pFGDihG-nHwbcib8sdB25o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Aug 2025 04:24:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 333 (0x14d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911BCDD, serialNumber=9E42B1F691460E2846FA71F06DC89BF2C741DB9A Validity Not Before: Aug 21 04:24:07 2025 GMT Not After : Aug 28 04:24:06 2025 GMT Subject: CN=68a69f67-8bec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:c2:ee:f5:b3:9d:5f:2e:df:86:f7:10:c0:40: 61:ed:b5:de:50:f2:09:18:dc:3f:17:93:ca:dc:d2: f3:07:fc:bc:86:cf:ff:43:06:39:2d:7a:43:de:ec: 20:c6:45:d1:41:20:61:b4:b4:23:42:76:0b:06:f3: 77:0b:f4:b2:c8:4e:92:cb:a4:15:0b:f6:01:cc:b2: 22:c1:69:d5:11:31:1f:f3:20:86:45:2b:bc:4a:25: a1:fe:13:72:c6:9c:31:3b:0e:a3:69:8d:17:26:1a: 07:e9:1e:47:22:73:04:4f:d6:3c:2f:8c:8b:0e:41: a2:9c:d4:ee:0d:a6:b5:c8:70:29:2d:61:db:5d:48: e1:de:7e:e9:2b:cb:5e:98:09:e9:48:9e:05:bb:e6: 48:c0:bc:03:22:8e:7a:68:b0:06:7d:3e:79:13:3b: 5b:59:2c:c5:b5:d6:0a:d3:f5:cc:6e:67:12:ba:ee: 3a:e0:b9:f7:54:8c:b2:41:6b:92:7c:3b:ec:14:df: 24:ee:b0:65:af:1f:26:c6:77:a5:68:83:e8:a9:f3: 39:be:8f:59:16:81:3d:97:a8:44:b2:a1:a9:79:d3: 5b:69:36:92:72:d0:f2:ca:6e:5b:bd:d0:9f:66:cc: 1c:2b:f2:a1:44:28:80:48:ce:f9:38:9a:c5:eb:01: 6f:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:F4:D8:70:15:7E:F6:69:50:3B:2D:52:12:97:28:36:79:F1:B8:20 X509v3 Authority Key Identifier: keyid:9E:42:B1:F6:91:46:0E:28:46:FA:71:F0:6D:C8:9B:F2:C7:41:DB:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911BCDD/348AD8AC861311EEA8C95042C4F9AE02/nkKx9pFGDihG-nHwbcib8sdB25o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nkKx9pFGDihG-nHwbcib8sdB25o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911BCDD/348AD8AC861311EEA8C95042C4F9AE02/nkKx9pFGDihG-nHwbcib8sdB25o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 57:da:8e:5a:42:cc:62:51:12:42:ad:d8:e2:b7:88:34:99:ed: d2:28:f4:e3:da:47:18:5c:2e:45:70:36:d6:b3:bb:a9:c5:36: b8:61:8b:8f:72:53:e1:2c:27:2e:d3:b0:f9:6a:8c:a6:86:54: 2e:ce:49:97:59:c5:54:1d:53:2a:ef:c0:42:c5:b4:e4:47:51: 10:80:c0:c0:fa:a4:f6:38:00:89:f8:d0:03:dd:ff:ca:bf:6d: 29:5e:c9:6d:42:6e:a2:b1:26:6b:a5:12:c5:42:fa:50:62:2a: 52:95:8c:e8:04:d0:1d:22:67:d8:92:71:13:63:b9:0b:ec:53: 6b:4b:13:1f:11:55:07:9b:85:bc:fd:cb:8a:06:97:30:a3:27: 0b:b7:eb:32:77:34:24:5c:3c:19:74:b1:6c:fc:2e:f1:69:34: a0:34:7f:f7:85:a4:75:96:5d:ed:23:53:a9:cc:8c:f2:ff:84: be:68:98:55:0d:08:3d:3b:04:9a:39:5a:06:5a:bd:3e:a4:a3: 96:0d:fa:ba:9f:d4:64:d6:6b:e0:58:64:9b:af:8c:f5:86:0c: 0e:9c:d8:60:ce:b2:64:83:59:c6:81:fb:8f:4f:1e:12:64:37: 97:9b:c2:fc:f5:cd:c9:1b:7c:30:69:82:05:a2:36:df:a4:77: a4:17:fd:69 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAU0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUJDREQxMTAvBgNVBAUTKDlFNDJCMUY2OTE0NjBFMjg0NkZBNzFGMDZEQzg5QkYy Qzc0MURCOUEwHhcNMjUwODIxMDQyNDA3WhcNMjUwODI4MDQyNDA2WjAYMRYwFAYD VQQDEw02OGE2OWY2Ny04YmVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqsLu9bOdXy7fhvcQwEBh7bXeUPIJGNw/F5PK3NLzB/y8hs//QwY5LXpD3uwg xkXRQSBhtLQjQnYLBvN3C/SyyE6Sy6QVC/YBzLIiwWnVETEf8yCGRSu8SiWh/hNy xpwxOw6jaY0XJhoH6R5HInMET9Y8L4yLDkGinNTuDaa1yHApLWHbXUjh3n7pK8te mAnpSJ4Fu+ZIwLwDIo56aLAGfT55EztbWSzFtdYK0/XMbmcSuu464Ln3VIyyQWuS fDvsFN8k7rBlrx8mxnelaIPoqfM5vo9ZFoE9l6hEsqGpedNbaTaSctDyym5bvdCf ZswcK/KhRCiASM75OJrF6wFv9wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPX02HAV fvZpUDstUhKXKDZ58bggMB8GA1UdIwQYMBaAFJ5CsfaRRg4oRvpx8G3Im/LHQdua MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQkNERC8zNDhBRDhBQzg2 MTMxMUVFQThDOTUwNDJDNEY5QUUwMi9ua0t4OXBGR0RpaEctbkh3YmNpYjhzZEIy NW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25rS3g5cEZHRGloRy1uSHdiY2liOHNkQjI1by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QkNERC8zNDhBRDhBQzg2MTMxMUVFQThDOTUwNDJDNEY5QUUwMi9ua0t4OXBGR0Rp aEctbkh3YmNpYjhzZEIyNW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBX2o5aQsxiURJCrdjit4g0me3SKPTj2kcYXC5FcDbWs7upxTa4YYuP clPhLCcu07D5aoymhlQuzkmXWcVUHVMq78BCxbTkR1EQgMDA+qT2OACJ+NAD3f/K v20pXsltQm6isSZrpRLFQvpQYipSlYzoBNAdImfYknETY7kL7FNrSxMfEVUHm4W8 /cuKBpcwoycLt+sydzQkXDwZdLFs/C7xaTSgNH/3haR1ll3tI1OpzIzy/4S+aJhV DQg9OwSaOVoGWr0+pKOWDfq6n9Rk1mvgWGSbr4z1hgwOnNhgzrJkg1nGgfuPTx4S ZDeXm8L89c3JG3wwaYIFojbfpHekF/1p -----END CERTIFICATE-----Generated at Fri Aug 22 16:16:44 2025 by rpki-client