$ rpki-client -vvf rpki.apnic.net/member_repository/A9192C72/9D5B5156ECF911EF93A2A213C4F9AE02/NhbgHaMxfwnuypjnvHVMvJkNfWg.mft File: NhbgHaMxfwnuypjnvHVMvJkNfWg.mft (raw, json) Hash identifier: /PJCNSzgxIAfbbN3tAbUJYQ49fKZbXuEOZDTWWer/18= Subject key identifier: A5:CC:F0:69:32:00:10:6E:04:01:E4:1E:83:D1:F5:5A:63:BE:DD:15 Authority key identifier: 36:16:E0:1D:A3:31:7F:09:EE:CA:98:E7:BC:75:4C:BC:99:0D:7D:68 Certificate issuer: /CN=A9192C72/serialNumber=3616E01DA3317F09EECA98E7BC754CBC990D7D68 Certificate serial: 73 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NhbgHaMxfwnuypjnvHVMvJkNfWg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9192C72/9D5B5156ECF911EF93A2A213C4F9AE02/NhbgHaMxfwnuypjnvHVMvJkNfWg.mft Manifest number: 6E Signing time: Sun 07 Sep 2025 07:28:52 +0000 Manifest this update: Sun 07 Sep 2025 07:28:52 +0000 Manifest next update: Sun 14 Sep 2025 07:28:52 +0000 Files and hashes: 1: NhbgHaMxfwnuypjnvHVMvJkNfWg.crl (hash: h7ZYbwOqEIerdcBQoZXiD25Q3iWGAgdqon5DtSk9b5I=) 2: C2E1583EECFA11EFA881E216C4F9AE02.roa (hash: KZxky345FbSXUrOq6QK1EajrLW8GtjyV/j47aC9IQ2w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9192C72/9D5B5156ECF911EF93A2A213C4F9AE02/NhbgHaMxfwnuypjnvHVMvJkNfWg.crl rsync://rpki.apnic.net/member_repository/A9192C72/9D5B5156ECF911EF93A2A213C4F9AE02/NhbgHaMxfwnuypjnvHVMvJkNfWg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NhbgHaMxfwnuypjnvHVMvJkNfWg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Sep 2025 07:28:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 115 (0x73) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9192C72, serialNumber=3616E01DA3317F09EECA98E7BC754CBC990D7D68 Validity Not Before: Sep 7 07:28:52 2025 GMT Not After : Sep 14 07:28:52 2025 GMT Subject: CN=68bd3434-436d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:e1:c0:80:ef:19:af:5a:fa:d8:d9:c5:7b:95: df:95:cc:71:aa:78:af:f9:89:49:59:0a:ca:cc:c7: 08:0f:52:61:13:42:32:79:ec:5b:f2:bb:7a:1e:cc: e2:05:4f:87:a9:d7:89:b1:fe:cf:7e:f8:c0:fc:04: 02:52:81:1a:43:64:27:fc:d1:b3:dc:4b:01:5e:72: 51:70:1f:2e:d7:b6:0f:77:9e:95:1f:85:12:99:70: cc:39:cc:7f:98:db:d8:67:05:37:56:8a:32:26:c2: bb:1e:f2:95:64:40:65:91:67:19:07:21:84:90:06: 64:af:7f:bf:c4:4c:1d:7a:83:15:5d:95:28:45:0c: 04:49:34:e4:d7:60:e7:73:95:90:0c:c6:ef:ea:33: fa:9b:e0:ea:1c:e4:2d:c8:62:2f:8d:f7:e5:3a:1c: ba:ce:54:f3:d8:73:05:65:45:f7:82:5b:a4:fe:9c: 8c:0e:d3:27:90:71:18:1b:96:d0:1b:b6:70:19:31: f6:75:01:19:0f:85:e7:ac:11:6b:e1:3b:d4:c1:f5: e1:92:55:2b:e3:46:31:0e:4b:e6:e3:0b:43:d7:8b: 6f:bb:f8:af:39:a2:25:57:ab:8c:f4:02:01:b1:bd: 86:03:50:65:94:fd:ba:da:9f:81:61:f9:a5:44:f8: fa:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:CC:F0:69:32:00:10:6E:04:01:E4:1E:83:D1:F5:5A:63:BE:DD:15 X509v3 Authority Key Identifier: keyid:36:16:E0:1D:A3:31:7F:09:EE:CA:98:E7:BC:75:4C:BC:99:0D:7D:68 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9192C72/9D5B5156ECF911EF93A2A213C4F9AE02/NhbgHaMxfwnuypjnvHVMvJkNfWg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NhbgHaMxfwnuypjnvHVMvJkNfWg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9192C72/9D5B5156ECF911EF93A2A213C4F9AE02/NhbgHaMxfwnuypjnvHVMvJkNfWg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3b:67:1a:88:56:f0:c5:a6:55:1e:44:69:4b:c4:17:aa:34:22: c3:0d:00:cb:ac:5f:2f:11:87:45:22:8b:06:b6:50:5f:a2:f6: b7:e8:d7:0c:82:a3:c0:69:3e:ba:53:12:49:c0:ab:c3:a1:b2: df:42:dc:44:2c:68:fb:8f:a3:94:c7:78:30:8a:67:c1:5b:23: 1c:73:64:3c:6a:91:c9:28:2b:17:19:b2:54:32:81:14:84:29: d4:03:0a:64:37:59:81:3d:e6:e4:56:0b:80:b2:1a:1d:04:06: fe:3b:e5:3e:d7:15:ad:7f:4b:75:38:7c:06:e0:2c:3d:09:84: 7f:fd:25:87:c9:85:5f:1c:66:6e:03:b6:c3:bb:53:0c:af:7f: c0:bf:ba:7a:cc:45:0a:a7:1c:f2:3b:29:4e:45:be:3b:d2:7d: 9b:73:01:77:21:65:60:ca:2a:7e:23:51:7d:1d:64:fb:9a:fa: 07:fb:af:6a:8f:2a:59:06:be:c0:64:22:ae:bf:f7:fe:7b:42: db:08:96:81:6f:64:26:7e:ca:e8:6b:c2:c7:10:d7:ea:f1:45: fd:19:0d:3a:2f:60:d9:bc:7d:46:15:3e:a8:20:a7:e0:d3:fb: a1:19:4f:40:50:32:d3:59:27:6a:44:e0:3a:e7:6a:97:dc:6f: 1f:50:a2:e9 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBczANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 MkM3MjExMC8GA1UEBRMoMzYxNkUwMURBMzMxN0YwOUVFQ0E5OEU3QkM3NTRDQkM5 OTBEN0Q2ODAeFw0yNTA5MDcwNzI4NTJaFw0yNTA5MTQwNzI4NTJaMBgxFjAUBgNV BAMTDTY4YmQzNDM0LTQzNmQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDX4cCA7xmvWvrY2cV7ld+VzHGqeK/5iUlZCsrMxwgPUmETQjJ57Fvyu3oezOIF T4ep14mx/s9++MD8BAJSgRpDZCf80bPcSwFeclFwHy7Xtg93npUfhRKZcMw5zH+Y 29hnBTdWijImwrse8pVkQGWRZxkHIYSQBmSvf7/ETB16gxVdlShFDARJNOTXYOdz lZAMxu/qM/qb4Ooc5C3IYi+N9+U6HLrOVPPYcwVlRfeCW6T+nIwO0yeQcRgbltAb tnAZMfZ1ARkPheesEWvhO9TB9eGSVSvjRjEOS+bjC0PXi2+7+K85oiVXq4z0AgGx vYYDUGWU/bran4Fh+aVE+PpPAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUpczwaTIA EG4EAeQeg9H1WmO+3RUwHwYDVR0jBBgwFoAUNhbgHaMxfwnuypjnvHVMvJkNfWgw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTkyQzcyLzlENUI1MTU2RUNG OTExRUY5M0EyQTIxM0M0RjlBRTAyL05oYmdIYU14ZndudXlwam52SFZNdkprTmZX Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvTmhiZ0hhTXhmd251eXBqbnZIVk12SmtOZldnLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTky QzcyLzlENUI1MTU2RUNGOTExRUY5M0EyQTIxM0M0RjlBRTAyL05oYmdIYU14Zndu dXlwam52SFZNdkprTmZXZy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBADtnGohW8MWmVR5EaUvEF6o0IsMNAMusXy8Rh0Uiiwa2UF+i9rfo1wyC o8BpPrpTEknAq8Ohst9C3EQsaPuPo5THeDCKZ8FbIxxzZDxqkckoKxcZslQygRSE KdQDCmQ3WYE95uRWC4CyGh0EBv475T7XFa1/S3U4fAbgLD0JhH/9JYfJhV8cZm4D tsO7Uwyvf8C/unrMRQqnHPI7KU5FvjvSfZtzAXchZWDKKn4jUX0dZPua+gf7r2qP KlkGvsBkIq6/9/57QtsIloFvZCZ+yuhrwscQ1+rxRf0ZDTovYNm8fUYVPqggp+DT +6EZT0BQMtNZJ2pE4Drnapfcbx9Qouk= -----END CERTIFICATE-----Generated at Tue Sep 9 07:14:16 2025 by rpki-client