$ rpki-client -vvf rpki.apnic.net/member_repository/A91C6064/52FEF73A297011EB91E9DE54C4F9AE02/NFMkWvnnaQX2mpDxzs2F6og_6hY.mft File: NFMkWvnnaQX2mpDxzs2F6og_6hY.mft (raw, json) Hash identifier: ca6FVZBS56lnN/OrR7s9t20DNVP4Jz0hXvkJ07dyWos= Subject key identifier: AA:43:F7:93:BA:EE:75:76:FB:21:39:0B:85:F4:10:6C:AC:16:EE:A9 Authority key identifier: 34:53:24:5A:F9:E7:69:05:F6:9A:90:F1:CE:CD:85:EA:88:3F:EA:16 Certificate issuer: /CN=A91C6064/serialNumber=3453245AF9E76905F69A90F1CECD85EA883FEA16 Certificate serial: 077F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NFMkWvnnaQX2mpDxzs2F6og_6hY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C6064/52FEF73A297011EB91E9DE54C4F9AE02/NFMkWvnnaQX2mpDxzs2F6og_6hY.mft Manifest number: 0778 Signing time: Mon 08 Sep 2025 21:34:53 +0000 Manifest this update: Mon 08 Sep 2025 21:34:52 +0000 Manifest next update: Mon 15 Sep 2025 21:34:52 +0000 Files and hashes: 1: NFMkWvnnaQX2mpDxzs2F6og_6hY.crl (hash: 3elLcHjwTYkdXgv/3sElIuxFzdnargS1swLTOMyq4Zs=) 2: 0BAA4608297211EB99ECF956C4F9AE02.roa (hash: Pzy/lWlyEAOnnToKQdX1gv5KRRU1QsPgl9JiMWq4wxE=) 3: E9D321CEF2F611EE95E10935C4F9AE02.roa (hash: 0MDsliqtqRrojbtZYNkkZiieXi7syQdv9RVqPyRdcns=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C6064/52FEF73A297011EB91E9DE54C4F9AE02/NFMkWvnnaQX2mpDxzs2F6og_6hY.crl rsync://rpki.apnic.net/member_repository/A91C6064/52FEF73A297011EB91E9DE54C4F9AE02/NFMkWvnnaQX2mpDxzs2F6og_6hY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NFMkWvnnaQX2mpDxzs2F6og_6hY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 15 Sep 2025 21:34:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1919 (0x77f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C6064, serialNumber=3453245AF9E76905F69A90F1CECD85EA883FEA16 Validity Not Before: Sep 8 21:34:52 2025 GMT Not After : Sep 15 21:34:52 2025 GMT Subject: CN=68bf4bfd-1e39 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:51:13:86:3d:c7:db:a1:52:04:5e:c4:fb:f5: 66:5a:cd:4f:8b:9f:b9:34:75:c0:53:cc:72:e0:94: d3:4e:a4:80:5d:d8:a3:1d:0d:88:b9:65:aa:c1:e0: 0e:26:1c:a9:c9:f3:26:fa:09:b8:08:00:88:78:e2: 1b:2c:b9:67:96:87:e1:6d:06:06:25:46:eb:6d:a0: 5f:0a:4e:73:16:03:f9:35:35:71:dd:8e:dc:26:1f: f9:b2:c0:02:92:93:f8:2b:44:dc:4b:26:b7:a3:4f: 95:da:49:5a:46:63:9b:b1:3a:de:24:f4:2f:97:8e: dc:87:5f:19:32:fd:f2:8f:11:5f:0f:85:ba:59:4f: b5:ae:59:94:2b:f0:c5:e2:fa:bd:ac:b0:43:0d:1c: ad:11:96:17:8a:d0:8c:98:8d:8a:70:e9:16:5c:cf: 0d:b9:6a:1c:e0:c6:9f:d4:47:e2:e6:2c:3d:90:e7: 4b:a9:c3:ee:5e:f9:9f:e8:09:bd:e6:a1:7a:dc:96: 52:ef:50:72:56:a2:f4:a8:77:a4:4d:76:1c:02:77: 02:06:81:60:25:cd:3b:c0:2f:c3:0c:1a:61:cf:95: b2:9f:7c:fb:51:f1:f5:02:d6:49:0d:86:50:20:a7: 62:ab:d4:2a:0b:86:5b:ec:1f:20:a2:ef:95:f2:58: fb:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:43:F7:93:BA:EE:75:76:FB:21:39:0B:85:F4:10:6C:AC:16:EE:A9 X509v3 Authority Key Identifier: keyid:34:53:24:5A:F9:E7:69:05:F6:9A:90:F1:CE:CD:85:EA:88:3F:EA:16 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C6064/52FEF73A297011EB91E9DE54C4F9AE02/NFMkWvnnaQX2mpDxzs2F6og_6hY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NFMkWvnnaQX2mpDxzs2F6og_6hY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C6064/52FEF73A297011EB91E9DE54C4F9AE02/NFMkWvnnaQX2mpDxzs2F6og_6hY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 49:e1:2e:f1:2d:21:46:e5:af:43:99:65:c9:8d:3d:01:e8:7e: c1:bb:6e:ea:5d:63:91:5e:66:da:c1:0e:9b:ff:32:97:33:a6: c4:91:2c:4d:eb:70:b2:e7:a4:e8:1b:73:2f:c4:b8:80:f6:ae: 16:8b:64:a7:9e:b1:a3:9f:e1:0e:85:af:96:c9:cf:be:87:35: aa:80:04:98:90:87:65:c7:46:67:64:fa:80:88:6d:1b:f7:ef: 13:40:bb:14:7f:f5:e6:f1:f6:d1:fa:f5:d1:f4:1f:23:40:f4: e2:e0:01:c0:09:0e:1a:2b:4a:5a:ad:a8:1d:65:de:51:35:d2: e8:ac:d8:91:9f:22:26:94:04:89:0f:88:42:94:4d:67:06:30: 1a:76:4c:24:28:15:37:21:3e:9c:20:ce:30:f6:90:53:c6:9e: 2a:89:3e:99:30:c9:a5:6e:e5:30:02:ea:d4:88:8b:86:3e:e7: 51:22:78:00:f0:1b:6b:b0:31:d9:eb:db:fb:17:fe:10:b1:bb: de:64:2e:b9:97:d2:76:04:c1:e9:e7:45:9d:ec:2f:de:d2:79: d2:a3:a9:cb:2c:db:2a:34:db:e5:fb:1a:8f:19:9f:68:06:05: b6:4b:6c:c8:55:23:eb:96:a1:2d:ea:6c:5d:92:a2:89:28:00: 6e:02:b2:dc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB38wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzYwNjQxMTAvBgNVBAUTKDM0NTMyNDVBRjlFNzY5MDVGNjlBOTBGMUNFQ0Q4NUVB ODgzRkVBMTYwHhcNMjUwOTA4MjEzNDUyWhcNMjUwOTE1MjEzNDUyWjAYMRYwFAYD VQQDEw02OGJmNGJmZC0xZTM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtVEThj3H26FSBF7E+/VmWs1Pi5+5NHXAU8xy4JTTTqSAXdijHQ2IuWWqweAO JhypyfMm+gm4CACIeOIbLLlnlofhbQYGJUbrbaBfCk5zFgP5NTVx3Y7cJh/5ssAC kpP4K0TcSya3o0+V2klaRmObsTreJPQvl47ch18ZMv3yjxFfD4W6WU+1rlmUK/DF 4vq9rLBDDRytEZYXitCMmI2KcOkWXM8NuWoc4Maf1Efi5iw9kOdLqcPuXvmf6Am9 5qF63JZS71ByVqL0qHekTXYcAncCBoFgJc07wC/DDBphz5Wyn3z7UfH1AtZJDYZQ IKdiq9QqC4Zb7B8gou+V8lj7KwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKpD95O6 7nV2+yE5C4X0EGysFu6pMB8GA1UdIwQYMBaAFDRTJFr552kF9pqQ8c7NheqIP+oW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNjA2NC81MkZFRjczQTI5 NzAxMUVCOTFFOURFNTRDNEY5QUUwMi9ORk1rV3ZubmFRWDJtcER4enMyRjZvZ182 aFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05GTWtXdm5uYVFYMm1wRHh6czJGNm9nXzZoWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NjA2NC81MkZFRjczQTI5NzAxMUVCOTFFOURFNTRDNEY5QUUwMi9ORk1rV3ZubmFR WDJtcER4enMyRjZvZ182aFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBJ4S7xLSFG5a9DmWXJjT0B6H7Bu27qXWORXmbawQ6b/zKXM6bEkSxN 63Cy56ToG3MvxLiA9q4Wi2SnnrGjn+EOha+Wyc++hzWqgASYkIdlx0ZnZPqAiG0b 9+8TQLsUf/Xm8fbR+vXR9B8jQPTi4AHACQ4aK0paragdZd5RNdLorNiRnyImlASJ D4hClE1nBjAadkwkKBU3IT6cIM4w9pBTxp4qiT6ZMMmlbuUwAurUiIuGPudRIngA 8BtrsDHZ69v7F/4QsbveZC65l9J2BMHp50Wd7C/e0nnSo6nLLNsqNNvl+xqPGZ9o BgW2S2zIVSPrlqEt6mxdkqKJKABuArLc -----END CERTIFICATE-----Generated at Tue Sep 9 13:24:30 2025 by rpki-client