$ rpki-client -vvf rpki.apnic.net/member_repository/A9152D08/F9C333921D8711EAA9C5B170C4F9AE02/NNwgEp6tb0Gnyi2Zyb0-fmAzy4g.mft File: NNwgEp6tb0Gnyi2Zyb0-fmAzy4g.mft (raw, json) Hash identifier: da4PkWISfIPi9aEpNO/+tH0bVwr291ovphsgwsLuQkw= Subject key identifier: B9:B4:8E:83:3A:64:0B:9A:58:9E:18:9A:34:32:E8:20:72:26:64:03 Authority key identifier: 34:DC:20:12:9E:AD:6F:41:A7:CA:2D:99:C9:BD:3E:7E:60:33:CB:88 Certificate issuer: /CN=A9152D08/serialNumber=34DC20129EAD6F41A7CA2D99C9BD3E7E6033CB88 Certificate serial: 0CAF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NNwgEp6tb0Gnyi2Zyb0-fmAzy4g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9152D08/F9C333921D8711EAA9C5B170C4F9AE02/NNwgEp6tb0Gnyi2Zyb0-fmAzy4g.mft Manifest number: 0C4E Signing time: Sat 06 Sep 2025 18:58:12 +0000 Manifest this update: Sat 06 Sep 2025 18:58:12 +0000 Manifest next update: Sat 13 Sep 2025 18:58:12 +0000 Files and hashes: 1: NNwgEp6tb0Gnyi2Zyb0-fmAzy4g.crl (hash: jpUJaf/oPlAQjzj1gbTydjyTvyCG24KA9v2L4Aak0wc=) 2: D45F1712A8B311EFADA46649C4F9AE02.roa (hash: WVkxMnAPmYEx2pir9yJBj6S9Ri2HeWB84QrUcGBIgX0=) 3: 0592D90E02E111F0BFF53A15C4F9AE02.roa (hash: JKDdsewbmTds8DX8z5n44dixpiguXnj1mkHopckNnnI=) 4: 2F3FBD86F3E511EA871E451AC4F9AE02.roa (hash: yVyxrQ/XexxsyDCtzcGEooxv2C0cJKVEzNUoJUfFCpg=) 5: 30C3D4F81D8A11EA8ECDAA75C4F9AE02.roa (hash: mpanMW6E++IIJhwRfBokQkjYWR4BXeWQNkL+zlkPQk0=) 6: 31554CBC1D8A11EA8ECDAA75C4F9AE02.roa (hash: uM9esMnbJemVTDXSBi0eBdZiTFnt+Mq64Yuw7Vo5ff8=) 7: 9A8603FC93ED11ED931AB73CC4F9AE02.roa (hash: EXrq9SaZzH6ZvSPXc9dAkv/CRi57VwFICygbDK3FbAQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9152D08/F9C333921D8711EAA9C5B170C4F9AE02/NNwgEp6tb0Gnyi2Zyb0-fmAzy4g.crl rsync://rpki.apnic.net/member_repository/A9152D08/F9C333921D8711EAA9C5B170C4F9AE02/NNwgEp6tb0Gnyi2Zyb0-fmAzy4g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NNwgEp6tb0Gnyi2Zyb0-fmAzy4g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Sep 2025 18:58:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3247 (0xcaf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9152D08, serialNumber=34DC20129EAD6F41A7CA2D99C9BD3E7E6033CB88 Validity Not Before: Sep 6 18:58:12 2025 GMT Not After : Sep 13 18:58:12 2025 GMT Subject: CN=68bc8444-19d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:36:c4:2d:c6:2f:a6:5e:e7:49:ff:22:60:d6: 78:3d:5a:4a:85:01:23:c1:85:bf:1c:f4:0b:ed:ae: 34:af:db:a1:57:ca:31:86:46:b5:ee:17:1e:62:1c: c8:79:20:71:46:50:33:8d:29:e2:28:4a:f3:22:11: 44:20:aa:12:71:75:ce:39:90:ba:89:38:0c:e1:c6: a8:61:18:b7:f7:06:8a:4e:1c:ff:7d:89:83:7d:dd: 9a:ce:e8:8d:92:e6:d6:6e:65:e6:b9:bb:cb:d6:cc: 7a:d8:dc:6e:2a:6f:db:1e:51:02:37:b4:71:6e:68: 54:69:df:48:b3:81:ae:06:bc:55:73:f8:7f:d4:ec: 92:1d:33:2a:e0:ea:94:de:9f:2e:bb:97:ff:74:c5: 8e:94:90:cd:99:39:0e:6a:e2:e1:76:9f:6d:02:ef: e9:46:2b:85:eb:42:f4:12:58:9a:12:05:f6:c0:37: 31:9a:09:f5:74:44:39:11:0c:bd:97:cf:6d:f7:84: 2d:ce:d3:6b:ed:a5:97:c9:a7:74:a7:38:a0:aa:53: 21:2a:06:17:64:ce:2b:af:13:5f:32:31:89:33:60: 27:4b:b1:3c:b4:61:68:5f:36:9c:e1:9e:bb:79:21: 5d:74:82:12:b6:51:65:a3:7b:4a:14:90:78:69:cf: 77:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:B4:8E:83:3A:64:0B:9A:58:9E:18:9A:34:32:E8:20:72:26:64:03 X509v3 Authority Key Identifier: keyid:34:DC:20:12:9E:AD:6F:41:A7:CA:2D:99:C9:BD:3E:7E:60:33:CB:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9152D08/F9C333921D8711EAA9C5B170C4F9AE02/NNwgEp6tb0Gnyi2Zyb0-fmAzy4g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NNwgEp6tb0Gnyi2Zyb0-fmAzy4g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9152D08/F9C333921D8711EAA9C5B170C4F9AE02/NNwgEp6tb0Gnyi2Zyb0-fmAzy4g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 83:1a:43:fa:ec:0f:ba:83:5f:a7:bf:19:dd:1d:38:ff:aa:5b: 22:b3:b1:83:61:b1:41:93:ce:c2:af:a3:86:80:07:b7:0c:45: f0:2d:6b:87:42:82:ba:c2:72:ea:a6:6b:45:22:7f:5a:6f:fb: e4:70:a7:57:88:23:e3:e1:1e:3c:3b:77:59:23:b4:c3:97:48: c1:dc:6b:d8:ce:4c:29:b5:cc:4b:a9:b5:da:86:85:35:b2:50: e9:7f:b3:42:53:56:6e:75:21:59:8c:98:37:8c:76:1b:a0:81: b2:01:c5:56:62:f7:79:18:b2:88:90:6c:7f:07:2f:80:60:f4: c8:e1:78:18:49:83:85:18:a8:99:34:e9:84:a7:47:21:37:80: b8:67:8e:05:ff:ed:14:b9:38:f6:9f:a5:7e:19:c6:10:a5:2d: d3:e5:a9:5d:92:bb:e8:22:8f:79:8c:59:c9:c6:25:99:d0:2d: f0:13:c0:3e:3b:6e:18:fa:d1:98:87:14:be:d8:37:04:81:c7: 42:25:aa:2d:6d:c3:70:b8:df:66:de:71:41:22:76:12:58:6f: a0:8c:65:0e:5e:a3:fd:fe:2b:b9:74:e2:28:62:fb:0c:94:6a: 24:ba:99:3e:77:79:29:0b:00:1e:8c:f7:15:af:c5:04:52:80: 24:d9:40:81 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDK8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTJEMDgxMTAvBgNVBAUTKDM0REMyMDEyOUVBRDZGNDFBN0NBMkQ5OUM5QkQzRTdF NjAzM0NCODgwHhcNMjUwOTA2MTg1ODEyWhcNMjUwOTEzMTg1ODEyWjAYMRYwFAYD VQQDEw02OGJjODQ0NC0xOWQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwTbELcYvpl7nSf8iYNZ4PVpKhQEjwYW/HPQL7a40r9uhV8oxhka17hceYhzI eSBxRlAzjSniKErzIhFEIKoScXXOOZC6iTgM4caoYRi39waKThz/fYmDfd2azuiN kubWbmXmubvL1sx62NxuKm/bHlECN7RxbmhUad9Is4GuBrxVc/h/1OySHTMq4OqU 3p8uu5f/dMWOlJDNmTkOauLhdp9tAu/pRiuF60L0EliaEgX2wDcxmgn1dEQ5EQy9 l89t94QtztNr7aWXyad0pzigqlMhKgYXZM4rrxNfMjGJM2AnS7E8tGFoXzac4Z67 eSFddIIStlFlo3tKFJB4ac93mQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLm0joM6 ZAuaWJ4YmjQy6CByJmQDMB8GA1UdIwQYMBaAFDTcIBKerW9Bp8otmcm9Pn5gM8uI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MkQwOC9GOUMzMzM5MjFE ODcxMUVBQTlDNUIxNzBDNEY5QUUwMi9OTndnRXA2dGIwR255aTJaeWIwLWZtQXp5 NGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05Od2dFcDZ0YjBHbnlpMlp5YjAtZm1Benk0Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MkQwOC9GOUMzMzM5MjFEODcxMUVBQTlDNUIxNzBDNEY5QUUwMi9OTndnRXA2dGIw R255aTJaeWIwLWZtQXp5NGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCDGkP67A+6g1+nvxndHTj/qlsis7GDYbFBk87Cr6OGgAe3DEXwLWuH QoK6wnLqpmtFIn9ab/vkcKdXiCPj4R48O3dZI7TDl0jB3GvYzkwptcxLqbXahoU1 slDpf7NCU1ZudSFZjJg3jHYboIGyAcVWYvd5GLKIkGx/By+AYPTI4XgYSYOFGKiZ NOmEp0chN4C4Z44F/+0UuTj2n6V+GcYQpS3T5aldkrvoIo95jFnJxiWZ0C3wE8A+ O24Y+tGYhxS+2DcEgcdCJaotbcNwuN9m3nFBInYSWG+gjGUOXqP9/iu5dOIoYvsM lGokupk+d3kpCwAejPcVr8UEUoAk2UCB -----END CERTIFICATE-----Generated at Mon Sep 8 00:31:31 2025 by rpki-client