$ rpki-client -vvf rpki.apnic.net/member_repository/A91A56E7/7860F8BA11C111EA858EE682C4F9AE02/NHY28OmK-CSCaxvPlvPHdtgS9Vs.mft File: NHY28OmK-CSCaxvPlvPHdtgS9Vs.mft (raw, json) Hash identifier: xF1AZLXcj9KSbZL9blq2Ig246PeT5YRJATNzmZYE2zQ= Subject key identifier: 84:9A:3D:67:F0:AC:D6:2D:9A:68:82:3B:AD:DB:67:78:40:F7:7E:67 Authority key identifier: 34:76:36:F0:E9:8A:F8:24:82:6B:1B:CF:96:F3:C7:76:D8:12:F5:5B Certificate issuer: /CN=A91A56E7/serialNumber=347636F0E98AF824826B1BCF96F3C776D812F55B Certificate serial: 0C33 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NHY28OmK-CSCaxvPlvPHdtgS9Vs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A56E7/7860F8BA11C111EA858EE682C4F9AE02/NHY28OmK-CSCaxvPlvPHdtgS9Vs.mft Manifest number: 0C2C Signing time: Sun 24 Aug 2025 18:37:54 +0000 Manifest this update: Sun 24 Aug 2025 18:37:54 +0000 Manifest next update: Sun 31 Aug 2025 18:37:54 +0000 Files and hashes: 1: NHY28OmK-CSCaxvPlvPHdtgS9Vs.crl (hash: loNIcPQjkpuLsjlXBL5H4IrLxUV4QGJ9hOX8EnJTVRU=) 2: 2157C3E011C211EA93417583C4F9AE02.roa (hash: Sb4C6SBlwbEgArJd0mwobbSvCSiB+bY80WW0ZbhEHoI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A56E7/7860F8BA11C111EA858EE682C4F9AE02/NHY28OmK-CSCaxvPlvPHdtgS9Vs.crl rsync://rpki.apnic.net/member_repository/A91A56E7/7860F8BA11C111EA858EE682C4F9AE02/NHY28OmK-CSCaxvPlvPHdtgS9Vs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NHY28OmK-CSCaxvPlvPHdtgS9Vs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 31 Aug 2025 18:37:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3123 (0xc33) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A56E7, serialNumber=347636F0E98AF824826B1BCF96F3C776D812F55B Validity Not Before: Aug 24 18:37:54 2025 GMT Not After : Aug 31 18:37:54 2025 GMT Subject: CN=68ab5c02-3252 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:da:93:56:ec:bf:37:03:0a:7e:d7:62:f7:da: a2:63:c8:3d:86:d5:7f:9c:31:b3:f2:ad:7c:f7:8e: 06:6c:49:08:30:b7:24:9c:83:9a:23:27:1c:9f:ca: ef:62:bf:89:be:d2:44:44:ba:79:4a:ed:fb:f7:7d: aa:89:bd:11:a4:a2:72:ad:94:cd:a4:61:f3:0f:05: 08:bc:83:60:88:87:b5:fb:42:c3:c7:8a:27:e2:2f: 68:b9:22:d3:ce:f0:09:8d:d4:0c:fd:59:85:5b:95: b8:b8:d7:61:cc:fe:66:7c:6e:ec:33:ff:8f:85:d8: 6c:f9:4c:e5:7a:d2:e6:91:5b:3d:8f:64:99:92:77: db:bf:b7:d6:bc:b7:de:a4:8d:d7:fb:a5:87:81:de: e6:b5:9b:48:56:c5:b0:69:93:36:e6:2f:fb:11:e1: 27:b3:1b:a5:a7:56:27:59:f2:e2:1d:d9:f7:9c:22: 6b:58:fb:99:d1:1e:1f:40:0a:28:70:0c:f1:8c:5d: 1b:c1:51:e0:50:8b:ac:1d:b0:e5:42:c7:89:4d:f7: a1:12:66:f3:cb:e4:b8:cf:a3:fa:7c:2f:b1:32:2f: b4:a6:4f:a9:79:d5:81:2b:9a:e4:58:05:16:a2:5f: 59:bd:35:f9:bf:33:7f:47:b4:3d:bb:c3:b3:33:54: 5a:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:9A:3D:67:F0:AC:D6:2D:9A:68:82:3B:AD:DB:67:78:40:F7:7E:67 X509v3 Authority Key Identifier: keyid:34:76:36:F0:E9:8A:F8:24:82:6B:1B:CF:96:F3:C7:76:D8:12:F5:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A56E7/7860F8BA11C111EA858EE682C4F9AE02/NHY28OmK-CSCaxvPlvPHdtgS9Vs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NHY28OmK-CSCaxvPlvPHdtgS9Vs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A56E7/7860F8BA11C111EA858EE682C4F9AE02/NHY28OmK-CSCaxvPlvPHdtgS9Vs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 91:17:93:e9:98:25:6a:a5:bd:35:65:9d:e9:44:c4:a2:5b:62: 40:30:5d:43:e3:72:66:e6:d7:ee:4a:f1:ce:be:f8:e9:fa:88: cf:6d:bc:d1:ec:fa:24:0c:7e:62:6b:72:8b:35:1a:b5:65:11: 56:a6:77:d3:f3:e5:46:d7:6a:3b:7f:a5:45:57:59:10:49:c3: 2a:9d:c4:97:6c:f2:a4:9c:9d:b3:4e:8e:9b:a5:01:3b:98:4d: d3:21:a3:d6:5b:18:c6:37:39:32:0f:cd:ad:ac:b3:ff:c3:35: 34:77:26:bb:48:c0:16:c1:42:64:b1:b8:26:1a:d7:fa:bf:86: 46:2d:a2:2f:36:07:5b:93:ba:09:b6:ae:58:2f:97:b9:36:89: 25:3c:7a:5e:03:e4:f6:55:51:1e:04:13:1e:8e:94:63:61:77: 2e:06:14:bd:70:73:05:ff:c1:55:5f:12:33:3e:5f:9e:6d:6a: 9c:0e:76:35:85:35:2e:ce:a1:26:1f:c6:90:c0:6d:77:24:11: 47:4f:6c:01:6b:64:94:5c:1f:22:84:d7:2f:ec:c3:c6:0c:a3: 9f:78:5f:58:5f:33:5a:b0:7c:47:3e:b9:0d:e1:13:12:53:33: 2c:c5:bb:5a:8f:39:c6:65:74:9a:b1:a3:ca:50:45:22:a8:73: c2:bf:5f:01 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDDMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTU2RTcxMTAvBgNVBAUTKDM0NzYzNkYwRTk4QUY4MjQ4MjZCMUJDRjk2RjNDNzc2 RDgxMkY1NUIwHhcNMjUwODI0MTgzNzU0WhcNMjUwODMxMTgzNzU0WjAYMRYwFAYD VQQDEw02OGFiNWMwMi0zMjUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAutqTVuy/NwMKftdi99qiY8g9htV/nDGz8q18944GbEkIMLcknIOaIyccn8rv Yr+JvtJERLp5Su37932qib0RpKJyrZTNpGHzDwUIvINgiIe1+0LDx4on4i9ouSLT zvAJjdQM/VmFW5W4uNdhzP5mfG7sM/+Phdhs+UzletLmkVs9j2SZknfbv7fWvLfe pI3X+6WHgd7mtZtIVsWwaZM25i/7EeEnsxulp1YnWfLiHdn3nCJrWPuZ0R4fQAoo cAzxjF0bwVHgUIusHbDlQseJTfehEmbzy+S4z6P6fC+xMi+0pk+pedWBK5rkWAUW ol9ZvTX5vzN/R7Q9u8OzM1RafwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFISaPWfw rNYtmmiCO63bZ3hA935nMB8GA1UdIwQYMBaAFDR2NvDpivgkgmsbz5bzx3bYEvVb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTZFNy83ODYwRjhCQTEx QzExMUVBODU4RUU2ODJDNEY5QUUwMi9OSFkyOE9tSy1DU0NheHZQbHZQSGR0Z1M5 VnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05IWTI4T21LLUNTQ2F4dlBsdlBIZHRnUzlWcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NTZFNy83ODYwRjhCQTExQzExMUVBODU4RUU2ODJDNEY5QUUwMi9OSFkyOE9tSy1D U0NheHZQbHZQSGR0Z1M5VnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCRF5PpmCVqpb01ZZ3pRMSiW2JAMF1D43Jm5tfuSvHOvvjp+ojPbbzR 7PokDH5ia3KLNRq1ZRFWpnfT8+VG12o7f6VFV1kQScMqncSXbPKknJ2zTo6bpQE7 mE3TIaPWWxjGNzkyD82trLP/wzU0dya7SMAWwUJksbgmGtf6v4ZGLaIvNgdbk7oJ tq5YL5e5NoklPHpeA+T2VVEeBBMejpRjYXcuBhS9cHMF/8FVXxIzPl+ebWqcDnY1 hTUuzqEmH8aQwG13JBFHT2wBa2SUXB8ihNcv7MPGDKOfeF9YXzNasHxHPrkN4RMS UzMsxbtajznGZXSasaPKUEUiqHPCv18B -----END CERTIFICATE-----Generated at Sun Aug 24 21:33:14 2025 by rpki-client