$ rpki-client -vvf rpki.apnic.net/member_repository/A9186684/36B86ADCD89F11EBAB98C55AC4F9AE02/NKEjLqcYRp6tt628TNngDfaoUgY.mft File: NKEjLqcYRp6tt628TNngDfaoUgY.mft (raw, json) Hash identifier: UJMLpFKJZPE8MEpivzIaoQYmgVf+Dr3C9mDKTDjgFS8= Subject key identifier: 5A:4C:B1:E2:52:CC:F7:0C:C5:57:8B:66:A9:72:AA:30:78:10:3F:3D Authority key identifier: 34:A1:23:2E:A7:18:46:9E:AD:B7:AD:BC:4C:D9:E0:0D:F6:A8:52:06 Certificate issuer: /CN=A9186684/serialNumber=34A1232EA718469EADB7ADBC4CD9E00DF6A85206 Certificate serial: 05D2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NKEjLqcYRp6tt628TNngDfaoUgY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9186684/36B86ADCD89F11EBAB98C55AC4F9AE02/NKEjLqcYRp6tt628TNngDfaoUgY.mft Manifest number: 05C5 Signing time: Thu 18 Sep 2025 23:23:08 +0000 Manifest this update: Thu 18 Sep 2025 23:23:07 +0000 Manifest next update: Thu 25 Sep 2025 23:23:07 +0000 Files and hashes: 1: NKEjLqcYRp6tt628TNngDfaoUgY.crl (hash: Vnd+HMIvu6Z7CADuJw3R3OPJGnJj0syr5qTj+e/tSro=) 2: D737BB744B4111ECACAF3B6FC4F9AE02.roa (hash: 91y/zfPKe4toYeLlym6g8YBWRWa9in1N6/DuRedfMc4=) 3: 80D77ED8D8A811EB85D5E456C4F9AE02.roa (hash: OIkPyY1gexI0QB7Mc75F4AkfEDtSi4kbvtIlfRRk1O0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9186684/36B86ADCD89F11EBAB98C55AC4F9AE02/NKEjLqcYRp6tt628TNngDfaoUgY.crl rsync://rpki.apnic.net/member_repository/A9186684/36B86ADCD89F11EBAB98C55AC4F9AE02/NKEjLqcYRp6tt628TNngDfaoUgY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NKEjLqcYRp6tt628TNngDfaoUgY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Sep 2025 23:23:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1490 (0x5d2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9186684, serialNumber=34A1232EA718469EADB7ADBC4CD9E00DF6A85206 Validity Not Before: Sep 18 23:23:07 2025 GMT Not After : Sep 25 23:23:07 2025 GMT Subject: CN=68cc945c-cc9e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:dd:ea:f3:3e:46:e5:71:89:f6:2c:a5:e8:5e: 13:0f:4c:98:9b:84:ed:51:c4:34:e3:30:83:3f:cb: b8:d7:e5:73:52:8f:9d:50:8a:48:da:00:1a:c2:bb: e7:91:75:c5:2a:06:24:87:48:9e:62:dd:50:9f:ba: 79:87:50:cb:d4:73:95:67:bb:e5:55:56:13:34:64: 7b:49:83:c3:b6:9f:cb:ac:ae:2f:ec:43:2f:18:6e: 10:d5:ef:6a:05:67:f4:3c:30:59:8c:bc:62:ac:b7: 99:c5:f8:93:b0:ec:8a:11:a6:b7:2a:b9:51:8e:52: 8f:5e:08:dc:39:05:4f:42:5d:b8:9b:31:d8:ed:06: 65:87:d7:c8:0c:15:e9:59:f2:2d:b2:71:6a:f2:16: a2:b5:a3:7b:6d:37:06:49:c6:ef:3c:67:27:7b:b2: 9d:06:b8:6e:8c:06:99:2d:4d:72:b5:d1:0f:42:e6: a8:8f:d9:01:5a:11:fc:2b:2e:7a:b1:cf:d5:a2:49: f6:5d:59:64:be:7b:13:23:7c:ac:07:37:ca:fc:4a: 5f:f5:40:07:4d:4b:d4:0a:25:37:a9:a9:60:14:28: 45:ab:7b:0b:cc:eb:88:58:49:75:0b:0b:ed:9d:90: 39:65:a8:a2:8a:c2:c5:cd:ce:4e:6c:e2:9e:e1:aa: 39:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:4C:B1:E2:52:CC:F7:0C:C5:57:8B:66:A9:72:AA:30:78:10:3F:3D X509v3 Authority Key Identifier: keyid:34:A1:23:2E:A7:18:46:9E:AD:B7:AD:BC:4C:D9:E0:0D:F6:A8:52:06 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9186684/36B86ADCD89F11EBAB98C55AC4F9AE02/NKEjLqcYRp6tt628TNngDfaoUgY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NKEjLqcYRp6tt628TNngDfaoUgY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186684/36B86ADCD89F11EBAB98C55AC4F9AE02/NKEjLqcYRp6tt628TNngDfaoUgY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a8:13:a0:2e:a6:71:e6:ad:72:40:06:fa:25:80:9d:eb:94:de: 32:c6:e9:2f:2b:ea:4f:ab:a4:b6:cf:85:da:18:f3:5b:66:0e: 16:f4:b9:33:ff:1e:9b:46:62:98:64:fd:bc:ac:83:e2:44:64: a9:78:f5:18:d1:85:af:46:d6:98:35:eb:e8:b3:79:99:d8:a8: 5e:f3:4f:62:ba:8e:4f:f0:6d:ff:6b:5d:39:ac:c0:26:8f:24: 7f:45:e9:9d:94:9f:55:75:da:b4:99:2f:2b:5b:4a:0e:db:df: 2e:8b:9a:b7:22:28:c1:a4:d1:29:b7:c2:be:dd:fb:da:13:a9: 6e:88:3d:6f:36:5a:e6:f6:eb:13:aa:5a:56:92:ee:9a:b1:bf: 13:fd:dd:66:3c:ee:36:b9:9d:43:ab:9c:98:97:b6:63:8b:fa: 31:36:b8:41:28:c8:e3:c9:21:18:91:bd:c4:54:6f:fd:5e:50: 4a:c2:9d:4b:f9:ef:29:b5:48:60:d0:c2:7c:b7:3e:c0:db:71: 1c:e2:1f:9b:1e:bc:ab:73:43:8a:b1:86:7d:a5:92:b0:64:db: c2:a9:02:cb:01:a4:01:14:5e:d1:01:98:36:42:f2:97:c0:49: 07:b7:3b:c4:5b:c6:36:27:ce:be:c7:f4:2c:0b:6c:f6:c4:0b: 23:1e:fb:f7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBdIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODY2ODQxMTAvBgNVBAUTKDM0QTEyMzJFQTcxODQ2OUVBREI3QURCQzRDRDlFMDBE RjZBODUyMDYwHhcNMjUwOTE4MjMyMzA3WhcNMjUwOTI1MjMyMzA3WjAYMRYwFAYD VQQDEw02OGNjOTQ1Yy1jYzllMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs93q8z5G5XGJ9iyl6F4TD0yYm4TtUcQ04zCDP8u41+VzUo+dUIpI2gAawrvn kXXFKgYkh0ieYt1Qn7p5h1DL1HOVZ7vlVVYTNGR7SYPDtp/LrK4v7EMvGG4Q1e9q BWf0PDBZjLxirLeZxfiTsOyKEaa3KrlRjlKPXgjcOQVPQl24mzHY7QZlh9fIDBXp WfItsnFq8haitaN7bTcGScbvPGcne7KdBrhujAaZLU1ytdEPQuaoj9kBWhH8Ky56 sc/Vokn2XVlkvnsTI3ysBzfK/Epf9UAHTUvUCiU3qalgFChFq3sLzOuIWEl1Cwvt nZA5ZaiiisLFzc5ObOKe4ao5owIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFpMseJS zPcMxVeLZqlyqjB4ED89MB8GA1UdIwQYMBaAFDShIy6nGEaerbetvEzZ4A32qFIG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NjY4NC8zNkI4NkFEQ0Q4 OUYxMUVCQUI5OEM1NUFDNEY5QUUwMi9OS0VqTHFjWVJwNnR0NjI4VE5uZ0RmYW9V Z1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05LRWpMcWNZUnA2dHQ2MjhUTm5nRGZhb1VnWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NjY4NC8zNkI4NkFEQ0Q4OUYxMUVCQUI5OEM1NUFDNEY5QUUwMi9OS0VqTHFjWVJw NnR0NjI4VE5uZ0RmYW9VZ1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCoE6AupnHmrXJABvolgJ3rlN4yxukvK+pPq6S2z4XaGPNbZg4W9Lkz /x6bRmKYZP28rIPiRGSpePUY0YWvRtaYNevos3mZ2Khe809iuo5P8G3/a105rMAm jyR/RemdlJ9Vddq0mS8rW0oO298ui5q3IijBpNEpt8K+3fvaE6luiD1vNlrm9usT qlpWku6asb8T/d1mPO42uZ1Dq5yYl7Zji/oxNrhBKMjjySEYkb3EVG/9XlBKwp1L +e8ptUhg0MJ8tz7A23Ec4h+bHryrc0OKsYZ9pZKwZNvCqQLLAaQBFF7RAZg2QvKX wEkHtzvEW8Y2J86+x/QsC2z2xAsjHvv3 -----END CERTIFICATE-----Generated at Fri Sep 19 07:12:33 2025 by rpki-client