$ rpki-client -vvf rpki.apnic.net/member_repository/A91A2F88/4C7DA3C0E0A311EC8F9C0E58C4F9AE02/NpQoPSE6XlZ5WORs29gStcxynXE.mft File: NpQoPSE6XlZ5WORs29gStcxynXE.mft (raw, json) Hash identifier: b0QIITsw2ddd4MuxYvpUibP2QTYauX1/85V79r1Wm5c= Subject key identifier: 1C:58:B4:8F:18:64:9D:AE:62:D0:6E:C1:A9:61:A2:FC:E1:48:DE:EB Authority key identifier: 36:94:28:3D:21:3A:5E:56:79:58:E4:6C:DB:D8:12:B5:CC:72:9D:71 Certificate issuer: /CN=A91A2F88/serialNumber=3694283D213A5E567958E46CDBD812B5CC729D71 Certificate serial: 031E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NpQoPSE6XlZ5WORs29gStcxynXE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A2F88/4C7DA3C0E0A311EC8F9C0E58C4F9AE02/NpQoPSE6XlZ5WORs29gStcxynXE.mft Manifest number: 0319 Signing time: Thu 21 Aug 2025 01:20:55 +0000 Manifest this update: Thu 21 Aug 2025 01:20:55 +0000 Manifest next update: Thu 28 Aug 2025 01:20:55 +0000 Files and hashes: 1: NpQoPSE6XlZ5WORs29gStcxynXE.crl (hash: fZBAzczfVOArjaen4rTmd46v5jH+63AltapsmTnEsSA=) 2: 54467164E0A711EC8F4D5B5FC4F9AE02.roa (hash: HwkSTw7raizrXpljDXnHXfZQCr+VPlFOvS2ci48bY0A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A2F88/4C7DA3C0E0A311EC8F9C0E58C4F9AE02/NpQoPSE6XlZ5WORs29gStcxynXE.crl rsync://rpki.apnic.net/member_repository/A91A2F88/4C7DA3C0E0A311EC8F9C0E58C4F9AE02/NpQoPSE6XlZ5WORs29gStcxynXE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NpQoPSE6XlZ5WORs29gStcxynXE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Aug 2025 01:20:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 798 (0x31e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A2F88, serialNumber=3694283D213A5E567958E46CDBD812B5CC729D71 Validity Not Before: Aug 21 01:20:55 2025 GMT Not After : Aug 28 01:20:55 2025 GMT Subject: CN=68a67477-052d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:82:7d:f2:55:a4:ae:ed:78:87:a5:34:40:d0: 54:8c:f0:c6:69:3f:26:17:17:5d:81:ef:40:d0:cf: 0f:22:0f:e6:d8:c1:80:8f:ab:17:74:71:22:01:8c: ff:f6:21:c3:08:20:cc:70:32:2f:ef:4e:ff:89:07: a0:0b:2d:f1:2c:db:70:00:42:75:88:47:a8:b1:c4: 86:07:52:67:80:6c:73:a7:e3:d1:a6:f0:69:26:50: 73:93:08:d3:ad:71:4e:da:33:58:c4:04:64:7c:76: d9:d3:c2:bb:27:98:70:6b:6f:a5:af:8d:5a:a9:ef: 77:68:ea:ca:3e:63:90:c3:ab:fe:9c:72:c3:fe:1a: 06:91:21:9c:3b:7a:a5:7b:97:f7:41:34:3d:b3:bf: 90:d2:b1:2b:ea:74:3c:4a:8c:72:f7:8a:47:99:92: b2:81:20:64:b3:a4:54:5e:e6:e6:4b:6f:e1:ee:df: 48:44:af:8c:03:72:b3:7c:9a:84:fc:32:01:9e:ed: ae:6a:69:8d:44:51:f0:c5:6e:0a:82:36:e9:d0:ef: 0a:14:82:47:1d:50:90:37:64:55:32:da:eb:26:e8: d6:32:19:aa:e7:51:74:88:88:09:1b:f8:c9:40:88: d8:c2:05:90:34:a4:e9:8b:fe:5e:ee:ee:86:e1:18: ef:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:58:B4:8F:18:64:9D:AE:62:D0:6E:C1:A9:61:A2:FC:E1:48:DE:EB X509v3 Authority Key Identifier: keyid:36:94:28:3D:21:3A:5E:56:79:58:E4:6C:DB:D8:12:B5:CC:72:9D:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A2F88/4C7DA3C0E0A311EC8F9C0E58C4F9AE02/NpQoPSE6XlZ5WORs29gStcxynXE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NpQoPSE6XlZ5WORs29gStcxynXE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A2F88/4C7DA3C0E0A311EC8F9C0E58C4F9AE02/NpQoPSE6XlZ5WORs29gStcxynXE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 79:15:51:14:76:e5:a1:87:0a:04:c3:1b:cc:e7:3f:cf:fc:de: a0:97:87:4b:2e:f4:dd:92:d2:58:f9:8d:38:d6:56:6f:23:39: 57:4d:fd:85:7f:b1:9d:15:95:4e:0e:cc:98:1c:68:88:ab:1e: 11:8c:90:d5:62:ed:43:da:8b:e9:42:4e:9d:97:6e:ff:4c:8d: 1e:bc:49:12:73:da:ed:60:2d:67:82:aa:dc:1f:e1:04:a9:f2: 81:0b:97:7e:02:ea:d5:47:e7:99:d5:3d:4a:e9:12:05:d7:53: ed:b5:ef:8e:2b:ff:a9:a6:69:b7:3f:68:23:67:12:4d:c5:28: 48:78:f5:d4:74:3b:4f:6d:d5:9d:dd:0d:67:04:2a:1c:ea:52: b5:43:2c:fd:c7:71:53:03:36:41:05:4b:16:9e:95:7c:ad:2a: db:d8:c9:94:06:24:77:bc:20:ca:43:e4:ec:00:d6:88:1e:3d: 19:40:bb:c2:4a:e3:83:c5:0c:2e:ff:88:d3:db:53:5a:66:33: 94:a4:e2:e1:a8:90:83:b1:da:a8:97:1c:3f:8c:30:26:73:b4: cc:e4:74:51:cf:98:be:db:9b:07:06:65:5a:ce:2f:15:31:2b: e2:13:4c:dc:d6:2c:13:27:f1:c8:60:36:5e:66:fd:00:37:6b: e1:ec:da:41 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAx4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTJGODgxMTAvBgNVBAUTKDM2OTQyODNEMjEzQTVFNTY3OTU4RTQ2Q0RCRDgxMkI1 Q0M3MjlENzEwHhcNMjUwODIxMDEyMDU1WhcNMjUwODI4MDEyMDU1WjAYMRYwFAYD VQQDEw02OGE2NzQ3Ny0wNTJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6YJ98lWkru14h6U0QNBUjPDGaT8mFxddge9A0M8PIg/m2MGAj6sXdHEiAYz/ 9iHDCCDMcDIv707/iQegCy3xLNtwAEJ1iEeoscSGB1JngGxzp+PRpvBpJlBzkwjT rXFO2jNYxARkfHbZ08K7J5hwa2+lr41aqe93aOrKPmOQw6v+nHLD/hoGkSGcO3ql e5f3QTQ9s7+Q0rEr6nQ8Soxy94pHmZKygSBks6RUXubmS2/h7t9IRK+MA3KzfJqE /DIBnu2uammNRFHwxW4Kgjbp0O8KFIJHHVCQN2RVMtrrJujWMhmq51F0iIgJG/jJ QIjYwgWQNKTpi/5e7u6G4RjvlQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBxYtI8Y ZJ2uYtBuwalhovzhSN7rMB8GA1UdIwQYMBaAFDaUKD0hOl5WeVjkbNvYErXMcp1x MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMkY4OC80QzdEQTNDMEUw QTMxMUVDOEY5QzBFNThDNEY5QUUwMi9OcFFvUFNFNlhsWjVXT1JzMjlnU3RjeHlu WEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05wUW9QU0U2WGxaNVdPUnMyOWdTdGN4eW5YRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MkY4OC80QzdEQTNDMEUwQTMxMUVDOEY5QzBFNThDNEY5QUUwMi9OcFFvUFNFNlhs WjVXT1JzMjlnU3RjeHluWEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB5FVEUduWhhwoEwxvM5z/P/N6gl4dLLvTdktJY+Y041lZvIzlXTf2F f7GdFZVODsyYHGiIqx4RjJDVYu1D2ovpQk6dl27/TI0evEkSc9rtYC1ngqrcH+EE qfKBC5d+AurVR+eZ1T1K6RIF11Ptte+OK/+ppmm3P2gjZxJNxShIePXUdDtPbdWd 3Q1nBCoc6lK1Qyz9x3FTAzZBBUsWnpV8rSrb2MmUBiR3vCDKQ+TsANaIHj0ZQLvC SuODxQwu/4jT21NaZjOUpOLhqJCDsdqolxw/jDAmc7TM5HRRz5i+25sHBmVazi8V MSviE0zc1iwTJ/HIYDZeZv0AN2vh7NpB -----END CERTIFICATE-----Generated at Fri Aug 22 16:14:58 2025 by rpki-client