$ rpki-client -vvf rpki.apnic.net/member_repository/A9142769/46BD55C24B8D11F0A3F4FF3FC4F9AE02/ntVkKdGun2AE-2-2eI6T-vYiV1k.mft File: ntVkKdGun2AE-2-2eI6T-vYiV1k.mft (raw, json) Hash identifier: sKaQko2r8byO9Rq+dTBYWNhhVWw+/1uy6ksrgFozo0g= Subject key identifier: 51:56:BF:32:23:7C:F0:A6:DB:2E:4A:1E:7A:35:04:E2:DD:A1:D9:9D Authority key identifier: 9E:D5:64:29:D1:AE:9F:60:04:FB:6F:B6:78:8E:93:FA:F6:22:57:59 Certificate issuer: /CN=A9142769/serialNumber=9ED56429D1AE9F6004FB6FB6788E93FAF6225759 Certificate serial: 25 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ntVkKdGun2AE-2-2eI6T-vYiV1k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9142769/46BD55C24B8D11F0A3F4FF3FC4F9AE02/ntVkKdGun2AE-2-2eI6T-vYiV1k.mft Manifest number: 23 Signing time: Thu 21 Aug 2025 08:03:26 +0000 Manifest this update: Thu 21 Aug 2025 08:03:25 +0000 Manifest next update: Thu 28 Aug 2025 08:03:25 +0000 Files and hashes: 1: ntVkKdGun2AE-2-2eI6T-vYiV1k.crl (hash: IpD0B8fu5aLq3RYOPJ6ftK+4SLuWb8XRMIYG2J88GOA=) 2: C8B7607C4B8D11F0B198C040C4F9AE02.roa (hash: i2BhMqJuRPJPw6EpQmAJmu0/MkHReXEBSLa+rZeCZ6I=) 3: C96601404B8D11F0B198C040C4F9AE02.roa (hash: T0dKTs8EMdDl2Inh3fwBdZE3Wa4Vfq9Mg4rvNVagedw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9142769/46BD55C24B8D11F0A3F4FF3FC4F9AE02/ntVkKdGun2AE-2-2eI6T-vYiV1k.crl rsync://rpki.apnic.net/member_repository/A9142769/46BD55C24B8D11F0A3F4FF3FC4F9AE02/ntVkKdGun2AE-2-2eI6T-vYiV1k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ntVkKdGun2AE-2-2eI6T-vYiV1k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Aug 2025 08:03:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37 (0x25) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9142769, serialNumber=9ED56429D1AE9F6004FB6FB6788E93FAF6225759 Validity Not Before: Aug 21 08:03:25 2025 GMT Not After : Aug 28 08:03:25 2025 GMT Subject: CN=68a6d2cd-2ccf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:c6:9f:44:7f:d9:59:5b:d1:e4:52:91:c0:4c: 2f:70:71:95:0b:4c:8f:b1:77:37:31:a5:96:86:1a: ca:a4:b0:09:a6:fb:19:c2:a1:15:d6:5e:a2:65:e8: b2:ae:7c:14:cf:ee:cd:cb:03:99:4f:c0:3c:6c:13: 55:8f:83:3d:15:b0:c8:90:0e:f9:7f:7a:49:c7:3c: 26:88:fc:53:cd:fb:e8:40:88:b8:9d:35:3a:88:57: 89:06:db:c9:d9:e0:e3:f2:12:da:b0:eb:f3:ff:37: c0:5c:60:1d:1d:72:9f:41:69:d5:f5:d0:09:c3:1a: 45:d2:98:be:f9:30:5a:e4:c9:75:f5:ef:09:75:8b: c2:e7:80:ab:8c:b7:0e:46:cd:48:87:cd:c1:45:67: e2:b1:4a:44:46:6d:44:21:75:85:11:98:4e:a8:53: d5:92:63:f0:fd:88:ff:33:ad:46:9c:84:b2:ff:9e: d7:63:0a:1f:bc:75:43:43:1e:dc:12:63:5d:c2:d6: 4f:a3:10:d8:8a:fe:0e:67:5c:2e:a2:24:1b:45:8f: 84:ec:11:aa:59:ca:5e:a4:2f:d3:e7:79:7d:98:c9: 95:40:5f:27:ec:19:e2:d9:cd:13:a1:59:51:bc:96: 19:3a:2d:72:ab:36:3c:23:9e:9d:74:ac:a8:9c:74: 9c:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:56:BF:32:23:7C:F0:A6:DB:2E:4A:1E:7A:35:04:E2:DD:A1:D9:9D X509v3 Authority Key Identifier: keyid:9E:D5:64:29:D1:AE:9F:60:04:FB:6F:B6:78:8E:93:FA:F6:22:57:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9142769/46BD55C24B8D11F0A3F4FF3FC4F9AE02/ntVkKdGun2AE-2-2eI6T-vYiV1k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ntVkKdGun2AE-2-2eI6T-vYiV1k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142769/46BD55C24B8D11F0A3F4FF3FC4F9AE02/ntVkKdGun2AE-2-2eI6T-vYiV1k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 07:46:46:d9:c1:12:05:de:ce:fb:47:4e:4a:2f:a4:79:b1:46: e0:2e:21:43:dd:3e:33:8b:24:0d:ff:e4:e8:41:5e:46:34:06: 71:b3:19:85:91:3a:99:0c:e5:f5:29:ed:4b:21:0d:eb:6f:8d: 1a:23:0d:0d:e0:4a:31:d8:70:cb:ef:04:da:59:b0:bc:ef:4d: 6b:ab:51:5b:c1:36:95:04:5f:61:02:34:54:5f:4b:d3:94:5b: 53:08:94:f0:29:0d:e0:e7:00:68:4a:ac:92:61:e4:83:f7:65: 6a:e7:b1:3e:41:0e:40:5c:b9:52:62:d8:2c:88:dd:70:39:e5: 15:21:ac:f5:88:be:bc:aa:13:46:33:64:4e:f2:3f:81:1e:a4: 6f:93:ca:db:b2:7e:22:2d:39:73:2c:3c:1b:8f:95:c5:27:0b: 8f:7f:19:86:0d:5c:4c:fd:e5:07:e6:ba:f4:84:61:32:10:6e: dc:93:a5:28:f0:46:7a:56:ef:78:a2:38:57:05:5b:d9:f9:78: fa:bb:60:bb:f2:4e:18:2c:71:5c:bb:e4:68:3a:cb:89:8c:ab: 7b:2f:fb:d4:b0:7f:f3:26:36:0b:12:45:63:1b:eb:e3:23:79: 9a:9a:cc:6e:88:57:0d:75:03:0b:8b:99:a1:b4:a7:63:e5:ed: 0d:0c:f1:68 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBJTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 Mjc2OTExMC8GA1UEBRMoOUVENTY0MjlEMUFFOUY2MDA0RkI2RkI2Nzg4RTkzRkFG NjIyNTc1OTAeFw0yNTA4MjEwODAzMjVaFw0yNTA4MjgwODAzMjVaMBgxFjAUBgNV BAMTDTY4YTZkMmNkLTJjY2YwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDMxp9Ef9lZW9HkUpHATC9wcZULTI+xdzcxpZaGGsqksAmm+xnCoRXWXqJl6LKu fBTP7s3LA5lPwDxsE1WPgz0VsMiQDvl/eknHPCaI/FPN++hAiLidNTqIV4kG28nZ 4OPyEtqw6/P/N8BcYB0dcp9BadX10AnDGkXSmL75MFrkyXX17wl1i8LngKuMtw5G zUiHzcFFZ+KxSkRGbUQhdYURmE6oU9WSY/D9iP8zrUachLL/ntdjCh+8dUNDHtwS Y13C1k+jENiK/g5nXC6iJBtFj4TsEapZyl6kL9PneX2YyZVAXyfsGeLZzROhWVG8 lhk6LXKrNjwjnp10rKicdJwPAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUUVa/MiN8 8KbbLkoeejUE4t2h2Z0wHwYDVR0jBBgwFoAUntVkKdGun2AE+2+2eI6T+vYiV1kw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQyNzY5LzQ2QkQ1NUMyNEI4 RDExRjBBM0Y0RkYzRkM0RjlBRTAyL250VmtLZEd1bjJBRS0yLTJlSTZULXZZaVYx ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvbnRWa0tkR3VuMkFFLTItMmVJNlQtdllpVjFrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQy NzY5LzQ2QkQ1NUMyNEI4RDExRjBBM0Y0RkYzRkM0RjlBRTAyL250VmtLZEd1bjJB RS0yLTJlSTZULXZZaVYxay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAAdGRtnBEgXezvtHTkovpHmxRuAuIUPdPjOLJA3/5OhBXkY0BnGzGYWR OpkM5fUp7UshDetvjRojDQ3gSjHYcMvvBNpZsLzvTWurUVvBNpUEX2ECNFRfS9OU W1MIlPApDeDnAGhKrJJh5IP3ZWrnsT5BDkBcuVJi2CyI3XA55RUhrPWIvryqE0Yz ZE7yP4EepG+TytuyfiItOXMsPBuPlcUnC49/GYYNXEz95QfmuvSEYTIQbtyTpSjw RnpW73iiOFcFW9n5ePq7YLvyThgscVy75Gg6y4mMq3sv+9Swf/MmNgsSRWMb6+Mj eZqazG6IVw11AwuLmaG0p2Pl7Q0M8Wg= -----END CERTIFICATE-----Generated at Fri Aug 22 16:30:40 2025 by rpki-client