$ rpki-client -vvf rpki.apnic.net/member_repository/A9187000/067D6FA2478911E889D5DB49C4F9AE02/npKCbPR9rsiFyZgQKH24bmlXaOo.mft File: npKCbPR9rsiFyZgQKH24bmlXaOo.mft (raw, json) Hash identifier: jTpqS9wVzE1OWB+LlDTZ79x9pdmu3TUXuiW5HnKhtOA= Subject key identifier: DC:DB:F9:49:8E:6C:A3:C0:30:13:DA:A7:E6:75:77:4B:09:B0:34:E8 Authority key identifier: 9E:92:82:6C:F4:7D:AE:C8:85:C9:98:10:28:7D:B8:6E:69:57:68:EA Certificate issuer: /CN=A9187000/serialNumber=9E92826CF47DAEC885C99810287DB86E695768EA Certificate serial: 1591 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/npKCbPR9rsiFyZgQKH24bmlXaOo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9187000/067D6FA2478911E889D5DB49C4F9AE02/npKCbPR9rsiFyZgQKH24bmlXaOo.mft Manifest number: 156B Signing time: Sun 24 Aug 2025 16:46:09 +0000 Manifest this update: Sun 24 Aug 2025 16:46:08 +0000 Manifest next update: Sun 31 Aug 2025 16:46:08 +0000 Files and hashes: 1: npKCbPR9rsiFyZgQKH24bmlXaOo.crl (hash: 0N2Oh+SKYGRAi+18w6vaQmxx2fSLMtxvJlBK3N9wVRg=) 2: 08C486D0E47311EBB62C361EC4F9AE02.roa (hash: E6ZfJqWKl59ctqtC8pvHl8ZSeijGWf0fidXXivDnF8s=) 3: 75417ABE781411F0BDF7A723C4F9AE02.roa (hash: +PM/BNSQ17ND+kO8gcl6/hex8B+MKYuBQPyA7XyFPXM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9187000/067D6FA2478911E889D5DB49C4F9AE02/npKCbPR9rsiFyZgQKH24bmlXaOo.crl rsync://rpki.apnic.net/member_repository/A9187000/067D6FA2478911E889D5DB49C4F9AE02/npKCbPR9rsiFyZgQKH24bmlXaOo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/npKCbPR9rsiFyZgQKH24bmlXaOo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 31 Aug 2025 16:46:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5521 (0x1591) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9187000, serialNumber=9E92826CF47DAEC885C99810287DB86E695768EA Validity Not Before: Aug 24 16:46:08 2025 GMT Not After : Aug 31 16:46:08 2025 GMT Subject: CN=68ab41d0-bcad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:f5:d7:a8:33:af:02:95:57:2d:6b:44:00:97: ad:0e:68:fb:16:f2:78:2c:20:41:6e:e3:c0:a2:2e: 3c:84:20:ce:8d:3d:5c:3c:a3:c4:8b:4f:4f:e6:55: 22:32:7b:cd:78:ae:8f:af:13:6e:b0:9c:ab:70:48: ab:bd:64:9c:1d:55:26:ed:c1:3a:3a:62:8b:2d:d6: 15:ca:9f:fa:eb:50:e1:41:cf:77:fe:02:4a:48:9d: 40:08:1b:a1:96:f4:d8:77:27:fb:ef:a0:81:8b:0f: c8:d4:cc:8d:bd:5a:47:16:f9:53:8e:64:44:a2:a1: 84:34:00:ad:bf:d2:45:c8:5e:e1:d4:20:7d:a2:37: b3:d3:99:20:80:b1:df:0b:aa:02:40:e9:11:c5:b8: 1f:23:b7:e1:02:29:ee:30:6f:18:14:29:cd:b8:ea: d9:ea:5b:fd:e2:d2:a1:4f:53:18:ab:37:d3:1e:da: 88:51:b9:fa:db:ef:42:57:22:6b:29:c0:06:35:e2: 26:cf:be:d3:36:3d:6b:94:f3:70:98:3d:b9:81:13: 08:3f:9c:d1:17:03:8c:62:1b:66:66:c5:29:11:87: 49:f6:ba:cf:5d:88:a1:63:51:35:48:9d:04:af:b3: 4a:ce:c6:cf:65:c3:b1:6b:be:b9:3b:9b:ce:59:73: 05:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:DB:F9:49:8E:6C:A3:C0:30:13:DA:A7:E6:75:77:4B:09:B0:34:E8 X509v3 Authority Key Identifier: keyid:9E:92:82:6C:F4:7D:AE:C8:85:C9:98:10:28:7D:B8:6E:69:57:68:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9187000/067D6FA2478911E889D5DB49C4F9AE02/npKCbPR9rsiFyZgQKH24bmlXaOo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/npKCbPR9rsiFyZgQKH24bmlXaOo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9187000/067D6FA2478911E889D5DB49C4F9AE02/npKCbPR9rsiFyZgQKH24bmlXaOo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8a:06:51:07:3a:ea:63:6b:c8:0f:db:62:6a:41:b2:2a:73:d6: c9:55:72:14:00:b1:f1:ce:80:4f:0b:cf:a5:9e:57:0d:ca:ab: 22:db:0a:fe:24:10:9a:73:9f:1e:6f:2a:cf:ba:b2:28:33:17: 8a:d1:cd:f3:13:ff:6f:f5:08:d3:7e:a9:1f:21:a1:b9:9c:7f: ef:39:3b:9c:f9:f6:cd:27:f1:00:a8:32:d5:37:33:e5:b6:f4: 6c:79:5a:64:3d:7d:58:ff:b7:aa:39:e0:41:7a:49:55:53:20: db:11:7f:3d:99:ec:5d:2a:96:88:5c:f9:b6:00:e0:ce:a0:72: 5a:f9:41:24:4f:4c:4c:56:50:1b:0b:41:b7:46:a3:09:8e:66: df:76:a7:4d:0c:96:4c:e9:18:a2:05:90:9a:c3:9f:0b:f5:3b: c0:94:6b:94:27:13:0c:42:f5:af:d5:7e:6e:08:f8:fb:b0:a1: 3e:75:b1:b3:a6:3d:18:51:dc:b8:33:3c:3d:a3:f7:89:85:87: 0c:54:44:b1:34:6e:b8:0a:5f:7b:1c:da:be:bb:ad:37:13:3f: 38:1f:59:35:bf:7d:0c:da:c8:6a:05:7c:f6:bb:16:26:d0:da: 9e:32:d6:45:6a:4f:48:63:90:5b:0c:d3:dd:a6:ad:bf:fe:83: 12:bc:84:12 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFZEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODcwMDAxMTAvBgNVBAUTKDlFOTI4MjZDRjQ3REFFQzg4NUM5OTgxMDI4N0RCODZF Njk1NzY4RUEwHhcNMjUwODI0MTY0NjA4WhcNMjUwODMxMTY0NjA4WjAYMRYwFAYD VQQDEw02OGFiNDFkMC1iY2FkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy/XXqDOvApVXLWtEAJetDmj7FvJ4LCBBbuPAoi48hCDOjT1cPKPEi09P5lUi MnvNeK6PrxNusJyrcEirvWScHVUm7cE6OmKLLdYVyp/661DhQc93/gJKSJ1ACBuh lvTYdyf776CBiw/I1MyNvVpHFvlTjmREoqGENACtv9JFyF7h1CB9ojez05kggLHf C6oCQOkRxbgfI7fhAinuMG8YFCnNuOrZ6lv94tKhT1MYqzfTHtqIUbn62+9CVyJr KcAGNeImz77TNj1rlPNwmD25gRMIP5zRFwOMYhtmZsUpEYdJ9rrPXYihY1E1SJ0E r7NKzsbPZcOxa765O5vOWXMF6QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNzb+UmO bKPAMBPap+Z1d0sJsDToMB8GA1UdIwQYMBaAFJ6Sgmz0fa7IhcmYECh9uG5pV2jq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NzAwMC8wNjdENkZBMjQ3 ODkxMUU4ODlENURCNDlDNEY5QUUwMi9ucEtDYlBSOXJzaUZ5WmdRS0gyNGJtbFhh T28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25wS0NiUFI5cnNpRnlaZ1FLSDI0Ym1sWGFPby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NzAwMC8wNjdENkZBMjQ3ODkxMUU4ODlENURCNDlDNEY5QUUwMi9ucEtDYlBSOXJz aUZ5WmdRS0gyNGJtbFhhT28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCKBlEHOupja8gP22JqQbIqc9bJVXIUALHxzoBPC8+lnlcNyqsi2wr+ JBCac58ebyrPurIoMxeK0c3zE/9v9QjTfqkfIaG5nH/vOTuc+fbNJ/EAqDLVNzPl tvRseVpkPX1Y/7eqOeBBeklVUyDbEX89mexdKpaIXPm2AODOoHJa+UEkT0xMVlAb C0G3RqMJjmbfdqdNDJZM6RiiBZCaw58L9TvAlGuUJxMMQvWv1X5uCPj7sKE+dbGz pj0YUdy4Mzw9o/eJhYcMVESxNG64Cl97HNq+u603Ez84H1k1v30M2shqBXz2uxYm 0NqeMtZFak9IY5BbDNPdpq2//oMSvIQS -----END CERTIFICATE-----Generated at Sun Aug 24 22:04:57 2025 by rpki-client