$ rpki-client -vvf rpki.apnic.net/member_repository/A913F333/DECB65A4239811ED9067226FC4F9AE02/NkCMEcVHK4Ikiv_r7tuyDj4Hps0.mft File: NkCMEcVHK4Ikiv_r7tuyDj4Hps0.mft (raw, json) Hash identifier: OU+5G2fBZW6+NE7ZyUx6KEIEUE6tApPO/ATh9WRq7Io= Subject key identifier: 91:4D:57:58:20:7A:3A:5F:2E:B5:ED:24:7A:31:C0:C5:9F:3F:98:5A Authority key identifier: 36:40:8C:11:C5:47:2B:82:24:8A:FF:EB:EE:DB:B2:0E:3E:07:A6:CD Certificate issuer: /CN=A913F333/serialNumber=36408C11C5472B82248AFFEBEEDBB20E3E07A6CD Certificate serial: 0294 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NkCMEcVHK4Ikiv_r7tuyDj4Hps0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913F333/DECB65A4239811ED9067226FC4F9AE02/NkCMEcVHK4Ikiv_r7tuyDj4Hps0.mft Manifest number: 0286 Signing time: Wed 17 Sep 2025 02:11:46 +0000 Manifest this update: Wed 17 Sep 2025 02:11:46 +0000 Manifest next update: Wed 24 Sep 2025 02:11:45 +0000 Files and hashes: 1: NkCMEcVHK4Ikiv_r7tuyDj4Hps0.crl (hash: PtwdzOT7rrZDp39Noff1NVetKk2aYsnGBXd3whXGzOY=) 2: 134B439A91B611ED8BA25C80C4F9AE02.roa (hash: jNBzv9AEhkETumwnZVmfkixYJ4ySA7uLCgYaGX6tsDU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913F333/DECB65A4239811ED9067226FC4F9AE02/NkCMEcVHK4Ikiv_r7tuyDj4Hps0.crl rsync://rpki.apnic.net/member_repository/A913F333/DECB65A4239811ED9067226FC4F9AE02/NkCMEcVHK4Ikiv_r7tuyDj4Hps0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NkCMEcVHK4Ikiv_r7tuyDj4Hps0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 24 Sep 2025 02:11:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 660 (0x294) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913F333, serialNumber=36408C11C5472B82248AFFEBEEDBB20E3E07A6CD Validity Not Before: Sep 17 02:11:46 2025 GMT Not After : Sep 24 02:11:45 2025 GMT Subject: CN=68ca18e2-d9df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:e7:30:2e:a2:27:1c:1d:09:97:ad:39:82:fd: c7:06:5f:d1:96:b1:e4:81:dd:ec:17:ae:af:cf:2f: 2a:c2:89:53:f1:a9:4e:3f:5b:54:e2:6b:ec:81:da: f0:71:06:21:59:4a:01:f7:43:bd:3e:39:4e:96:75: 5c:7b:d3:63:94:b7:f2:83:aa:f2:55:e6:26:54:61: cd:e9:9f:55:dd:11:f7:b0:42:71:f8:25:e3:7a:94: 72:ea:57:3d:d4:5c:ce:8b:f8:b3:61:72:d3:f6:a7: b8:c5:21:bf:a2:9f:56:5b:85:a5:75:71:b3:28:1b: fa:17:ce:f7:29:fa:a5:83:9d:0f:44:ca:65:99:ec: 4b:61:65:8b:80:70:a8:de:22:b0:f1:6a:5b:e6:34: 64:43:5d:6e:1b:8f:b1:c3:a3:b3:5a:77:e1:e0:b5: 2d:b0:71:53:be:22:57:0c:45:b6:ae:ac:ba:d9:68: 35:6c:15:f8:65:2c:14:33:50:e5:88:81:6c:ca:85: 54:12:ac:d0:a9:1a:63:c5:f5:9c:af:27:bf:fa:2d: 9a:5c:ff:29:f1:b4:cd:98:38:ac:06:27:5c:59:e8: 5e:52:23:38:4d:ae:63:89:ca:7e:b3:12:1f:e0:25: 0d:d5:75:69:e0:5d:05:5e:06:65:1d:c5:63:e7:9f: f0:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:4D:57:58:20:7A:3A:5F:2E:B5:ED:24:7A:31:C0:C5:9F:3F:98:5A X509v3 Authority Key Identifier: keyid:36:40:8C:11:C5:47:2B:82:24:8A:FF:EB:EE:DB:B2:0E:3E:07:A6:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913F333/DECB65A4239811ED9067226FC4F9AE02/NkCMEcVHK4Ikiv_r7tuyDj4Hps0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NkCMEcVHK4Ikiv_r7tuyDj4Hps0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913F333/DECB65A4239811ED9067226FC4F9AE02/NkCMEcVHK4Ikiv_r7tuyDj4Hps0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0d:57:1c:40:c3:a5:52:be:8f:b4:2c:14:9e:31:93:b7:9e:4a: 54:15:a1:7e:2d:f4:d0:5a:f9:b7:c8:0a:ac:e4:4d:34:2a:eb: 73:d6:24:ac:82:19:05:11:7a:13:7e:9d:95:84:01:f7:89:6b: 48:9f:20:6e:fe:59:2f:c7:a3:4d:eb:0d:fe:d4:1f:25:1a:51: 72:0d:31:e3:2b:c2:63:1e:e8:0d:d7:f1:d1:81:9b:02:f4:fb: a3:fc:05:de:24:c6:b8:f8:59:fc:7a:1a:b9:b6:d9:5f:52:fe: 4d:22:33:32:ce:24:c4:be:8a:4b:35:90:6e:be:58:3b:fc:9f: 76:4f:85:25:d5:d0:b8:78:ff:33:80:43:1c:2e:de:56:71:a2: 1c:3b:2c:c6:ac:59:2b:0b:af:e4:6d:e3:8b:b1:67:0b:27:ec: 1e:66:30:d6:6d:6d:35:8d:72:b2:82:ce:36:16:00:b0:04:c5: fb:22:91:5f:de:4f:f1:d9:c8:14:10:b3:eb:63:d2:6f:e9:4f: 9e:4e:c7:a1:b9:69:5d:08:64:5b:19:29:4e:35:6f:27:d2:06: 8d:d7:e8:6a:6d:b4:f6:33:79:31:28:72:b6:32:3b:11:0a:79: 2f:0a:43:ba:e6:3c:67:be:5b:20:cf:82:0f:79:6f:d3:01:73: d9:d9:a7:1f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICApQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0YzMzMxMTAvBgNVBAUTKDM2NDA4QzExQzU0NzJCODIyNDhBRkZFQkVFREJCMjBF M0UwN0E2Q0QwHhcNMjUwOTE3MDIxMTQ2WhcNMjUwOTI0MDIxMTQ1WjAYMRYwFAYD VQQDEw02OGNhMThlMi1kOWRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxOcwLqInHB0Jl605gv3HBl/RlrHkgd3sF66vzy8qwolT8alOP1tU4mvsgdrw cQYhWUoB90O9PjlOlnVce9NjlLfyg6ryVeYmVGHN6Z9V3RH3sEJx+CXjepRy6lc9 1FzOi/izYXLT9qe4xSG/op9WW4WldXGzKBv6F873Kfqlg50PRMplmexLYWWLgHCo 3iKw8Wpb5jRkQ11uG4+xw6OzWnfh4LUtsHFTviJXDEW2rqy62Wg1bBX4ZSwUM1Dl iIFsyoVUEqzQqRpjxfWcrye/+i2aXP8p8bTNmDisBidcWeheUiM4Ta5jicp+sxIf 4CUN1XVp4F0FXgZlHcVj55/wGQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJFNV1gg ejpfLrXtJHoxwMWfP5haMB8GA1UdIwQYMBaAFDZAjBHFRyuCJIr/6+7bsg4+B6bN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRjMzMy9ERUNCNjVBNDIz OTgxMUVEOTA2NzIyNkZDNEY5QUUwMi9Oa0NNRWNWSEs0SWtpdl9yN3R1eURqNEhw czAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05rQ01FY1ZISzRJa2l2X3I3dHV5RGo0SHBzMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RjMzMy9ERUNCNjVBNDIzOTgxMUVEOTA2NzIyNkZDNEY5QUUwMi9Oa0NNRWNWSEs0 SWtpdl9yN3R1eURqNEhwczAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQANVxxAw6VSvo+0LBSeMZO3nkpUFaF+LfTQWvm3yAqs5E00Kutz1iSs ghkFEXoTfp2VhAH3iWtInyBu/lkvx6NN6w3+1B8lGlFyDTHjK8JjHugN1/HRgZsC 9Puj/AXeJMa4+Fn8ehq5ttlfUv5NIjMyziTEvopLNZBuvlg7/J92T4Ul1dC4eP8z gEMcLt5WcaIcOyzGrFkrC6/kbeOLsWcLJ+weZjDWbW01jXKygs42FgCwBMX7IpFf 3k/x2cgUELPrY9Jv6U+eTsehuWldCGRbGSlONW8n0gaN1+hqbbT2M3kxKHK2MjsR CnkvCkO65jxnvlsgz4IPeW/TAXPZ2acf -----END CERTIFICATE-----Generated at Thu Sep 18 20:48:49 2025 by rpki-client