$ rpki-client -vvf rpki.apnic.net/member_repository/A91C6515/84C4674A60C111F08BD5B82EC4F9AE02/NttE1MFZiGc4IVpWELEQwkSGylY.mft File: NttE1MFZiGc4IVpWELEQwkSGylY.mft (raw, json) Hash identifier: az/HkTKBDWdi/1KDnGM3wWZev4vptGWL0NB2X3SxcQE= Subject key identifier: 24:14:F9:AD:49:14:C5:3A:59:F0:68:9C:E8:F3:2D:1C:3A:95:0C:8C Authority key identifier: 36:DB:44:D4:C1:59:88:67:38:21:5A:56:10:B1:10:C2:44:86:CA:56 Certificate issuer: /CN=A91C6515/serialNumber=36DB44D4C159886738215A5610B110C24486CA56 Certificate serial: 07 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NttE1MFZiGc4IVpWELEQwkSGylY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C6515/84C4674A60C111F08BD5B82EC4F9AE02/NttE1MFZiGc4IVpWELEQwkSGylY.mft Manifest number: 06 Signing time: Wed 23 Jul 2025 08:33:30 +0000 Manifest this update: Wed 23 Jul 2025 08:33:30 +0000 Manifest next update: Wed 30 Jul 2025 08:33:30 +0000 Files and hashes: 1: NttE1MFZiGc4IVpWELEQwkSGylY.crl (hash: iLfbmbciK8vOM4UZXit/B10QiRV28iqazdxeE5aw4fM=) 2: E5723CA260C111F0A9EB0333C4F9AE02.roa (hash: dgVomHsPjy8dnzAeq1krltAgv8t1jsAsT7S8XSGxsvA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C6515/84C4674A60C111F08BD5B82EC4F9AE02/NttE1MFZiGc4IVpWELEQwkSGylY.crl rsync://rpki.apnic.net/member_repository/A91C6515/84C4674A60C111F08BD5B82EC4F9AE02/NttE1MFZiGc4IVpWELEQwkSGylY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NttE1MFZiGc4IVpWELEQwkSGylY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Jul 2025 08:33:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7 (0x7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C6515, serialNumber=36DB44D4C159886738215A5610B110C24486CA56 Validity Not Before: Jul 23 08:33:30 2025 GMT Not After : Jul 30 08:33:30 2025 GMT Subject: CN=68809e5a-5493 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:72:64:ed:1e:b1:df:37:19:24:4b:56:0b:12: 37:07:92:cd:2a:bd:0d:15:d2:8f:a7:37:bb:cc:20: 1a:9c:11:0c:cd:20:c2:5c:11:6d:fe:16:e5:7e:44: 49:ef:b9:7b:55:dd:ef:aa:f2:e6:9b:ae:b5:56:04: 8e:4d:29:28:4b:5d:07:f7:10:61:24:b4:75:ed:e0: 6c:0f:eb:0f:0b:55:07:15:58:a5:b0:87:e1:86:a0: 56:22:8b:ac:0b:d3:91:f3:bf:9c:93:33:0f:39:fd: a6:d3:b1:28:fb:95:f1:be:c5:ae:11:3a:22:34:47: 6b:fd:a9:0e:ac:b6:1b:0f:6a:35:0d:af:53:86:8c: 8f:4c:1f:05:d6:26:07:62:ce:86:f4:27:37:8d:93: db:5e:61:1a:69:01:27:72:07:f2:3b:3a:e0:5e:f1: 39:cf:6c:ea:b9:c6:89:a9:af:b3:8e:08:9a:db:28: 17:d9:d5:94:78:99:22:96:02:29:68:8b:96:a4:be: 36:a4:4c:59:6b:71:cb:a7:d2:5f:4b:0b:a2:6f:d4: 36:75:6d:5c:23:3b:19:45:75:66:74:45:e6:5e:c5: 69:55:86:5f:8b:3a:82:55:31:8e:9e:a6:35:b8:89: a3:f5:93:cd:e6:e5:9f:ca:d9:99:36:9f:d6:75:4b: 6b:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:14:F9:AD:49:14:C5:3A:59:F0:68:9C:E8:F3:2D:1C:3A:95:0C:8C X509v3 Authority Key Identifier: keyid:36:DB:44:D4:C1:59:88:67:38:21:5A:56:10:B1:10:C2:44:86:CA:56 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C6515/84C4674A60C111F08BD5B82EC4F9AE02/NttE1MFZiGc4IVpWELEQwkSGylY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NttE1MFZiGc4IVpWELEQwkSGylY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C6515/84C4674A60C111F08BD5B82EC4F9AE02/NttE1MFZiGc4IVpWELEQwkSGylY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b0:0a:73:e9:1d:f5:20:81:3a:f8:68:5d:6e:ed:af:b7:d1:41: e5:2a:b3:a7:ed:5f:d2:2f:59:a2:2d:31:1c:6b:d4:52:ab:0c: a8:f0:d1:2d:7a:84:53:5a:22:b4:06:2c:5a:cd:fb:29:d7:7d: 84:c6:bd:26:ce:56:74:4e:f3:36:6c:a7:94:c9:93:54:94:f8: 72:b1:f0:d2:db:90:a4:a6:fd:35:d6:ba:cc:ce:e0:22:4e:6d: 49:12:44:92:23:74:ec:b4:8b:72:da:df:25:56:99:ca:d0:56: 2d:ee:d2:ae:37:fe:c4:30:ef:8b:79:93:a9:36:db:7e:8b:2b: ab:de:57:d0:62:35:0c:e3:29:b3:f4:84:99:18:e9:fa:0f:48: 7f:86:2b:98:8c:f4:33:fa:17:fb:38:d8:b6:36:b5:87:b9:20: 65:9c:24:dd:cb:f6:14:21:60:53:1e:63:c4:7c:d0:df:45:1b: 8e:40:0e:c8:a5:d1:85:42:55:32:2c:13:88:86:2b:6d:78:1f: de:dc:05:95:fc:c3:38:8c:c7:db:dd:ba:f5:ba:78:a9:a3:17: 9d:93:a2:e3:09:30:ef:c5:68:0a:62:a5:b5:10:91:ee:f0:43: 72:6d:98:54:14:1c:99:20:50:b4:48:a1:8e:5f:9e:99:0f:f4: 45:b7:c9:34 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBBzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD NjUxNTExMC8GA1UEBRMoMzZEQjQ0RDRDMTU5ODg2NzM4MjE1QTU2MTBCMTEwQzI0 NDg2Q0E1NjAeFw0yNTA3MjMwODMzMzBaFw0yNTA3MzAwODMzMzBaMBgxFjAUBgNV BAMTDTY4ODA5ZTVhLTU0OTMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCacmTtHrHfNxkkS1YLEjcHks0qvQ0V0o+nN7vMIBqcEQzNIMJcEW3+FuV+REnv uXtV3e+q8uabrrVWBI5NKShLXQf3EGEktHXt4GwP6w8LVQcVWKWwh+GGoFYii6wL 05Hzv5yTMw85/abTsSj7lfG+xa4ROiI0R2v9qQ6sthsPajUNr1OGjI9MHwXWJgdi zob0JzeNk9teYRppASdyB/I7OuBe8TnPbOq5xompr7OOCJrbKBfZ1ZR4mSKWAilo i5akvjakTFlrccun0l9LC6Jv1DZ1bVwjOxlFdWZ0ReZexWlVhl+LOoJVMY6epjW4 iaP1k83m5Z/K2Zk2n9Z1S2u7AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUJBT5rUkU xTpZ8Gic6PMtHDqVDIwwHwYDVR0jBBgwFoAUNttE1MFZiGc4IVpWELEQwkSGylYw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM2NTE1Lzg0QzQ2NzRBNjBD MTExRjA4QkQ1QjgyRUM0RjlBRTAyL050dEUxTUZaaUdjNElWcFdFTEVRd2tTR3ls WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvTnR0RTFNRlppR2M0SVZwV0VMRVF3a1NHeWxZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM2 NTE1Lzg0QzQ2NzRBNjBDMTExRjA4QkQ1QjgyRUM0RjlBRTAyL050dEUxTUZaaUdj NElWcFdFTEVRd2tTR3lsWS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBALAKc+kd9SCBOvhoXW7tr7fRQeUqs6ftX9IvWaItMRxr1FKrDKjw0S16 hFNaIrQGLFrN+ynXfYTGvSbOVnRO8zZsp5TJk1SU+HKx8NLbkKSm/TXWuszO4CJO bUkSRJIjdOy0i3La3yVWmcrQVi3u0q43/sQw74t5k6k2236LK6veV9BiNQzjKbP0 hJkY6foPSH+GK5iM9DP6F/s42LY2tYe5IGWcJN3L9hQhYFMeY8R80N9FG45ADsil 0YVCVTIsE4iGK214H97cBZX8wziMx9vduvW6eKmjF52TouMJMO/FaApipbUQke7w Q3JtmFQUHJkgULRIoY5fnpkP9EW3yTQ= -----END CERTIFICATE-----Generated at Thu Jul 24 21:12:27 2025 by rpki-client