$ rpki-client -vvf rpki.apnic.net/member_repository/A91C6515/84C4674A60C111F08BD5B82EC4F9AE02/NttE1MFZiGc4IVpWELEQwkSGylY.mft File: NttE1MFZiGc4IVpWELEQwkSGylY.mft (raw, json) Hash identifier: uNfhlIuUcF+e1T7Xa427eXl31gsTPoBHoRgEvgnxa4E= Subject key identifier: A7:2E:91:DD:7C:46:6A:1F:93:62:D6:5A:2B:D0:57:DC:C8:E3:F8:5D Authority key identifier: 36:DB:44:D4:C1:59:88:67:38:21:5A:56:10:B1:10:C2:44:86:CA:56 Certificate issuer: /CN=A91C6515/serialNumber=36DB44D4C159886738215A5610B110C24486CA56 Certificate serial: 20 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NttE1MFZiGc4IVpWELEQwkSGylY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C6515/84C4674A60C111F08BD5B82EC4F9AE02/NttE1MFZiGc4IVpWELEQwkSGylY.mft Manifest number: 1F Signing time: Tue 09 Sep 2025 08:01:30 +0000 Manifest this update: Tue 09 Sep 2025 08:01:29 +0000 Manifest next update: Tue 16 Sep 2025 08:01:29 +0000 Files and hashes: 1: NttE1MFZiGc4IVpWELEQwkSGylY.crl (hash: jE89obpayyBYA4EJ/JqEkewA4zsdWQUfhZrIQiRq6KE=) 2: E5723CA260C111F0A9EB0333C4F9AE02.roa (hash: dgVomHsPjy8dnzAeq1krltAgv8t1jsAsT7S8XSGxsvA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C6515/84C4674A60C111F08BD5B82EC4F9AE02/NttE1MFZiGc4IVpWELEQwkSGylY.crl rsync://rpki.apnic.net/member_repository/A91C6515/84C4674A60C111F08BD5B82EC4F9AE02/NttE1MFZiGc4IVpWELEQwkSGylY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NttE1MFZiGc4IVpWELEQwkSGylY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 16 Sep 2025 08:01:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32 (0x20) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C6515, serialNumber=36DB44D4C159886738215A5610B110C24486CA56 Validity Not Before: Sep 9 08:01:29 2025 GMT Not After : Sep 16 08:01:29 2025 GMT Subject: CN=68bfded9-64e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:9d:64:1e:44:7f:d7:59:86:68:39:c5:ee:cf: 26:e1:88:81:6f:0e:84:b0:9c:f7:f0:cd:e3:10:8b: 5d:ee:8a:04:be:80:f9:3e:f1:73:57:96:f9:75:4f: df:8f:83:93:d6:42:2b:18:40:2f:7e:24:fe:a8:e5: 81:7d:09:98:bc:7b:e3:d8:b2:f2:9a:2d:20:a5:85: 78:cc:04:d0:0e:b0:11:08:17:4a:8c:d1:4f:f2:8b: 1d:ec:ee:37:bf:92:70:7d:29:aa:a1:75:6c:ba:4e: e6:25:cf:4f:21:21:3f:9d:28:87:14:84:3d:b3:04: ce:90:af:2a:3d:ac:49:f0:e4:e9:3f:5d:1c:58:ac: 81:46:fb:86:e6:25:ae:1b:05:12:4d:3e:b2:49:3d: 62:65:13:47:3c:1d:31:2e:5a:f2:72:39:53:55:07: 09:39:e9:51:1a:5f:e8:70:05:7b:06:66:80:e4:fa: 73:f5:27:32:fa:f3:8f:cf:73:3a:d4:73:5d:a8:45: 11:9d:98:91:26:49:b9:dd:1e:31:86:02:6d:ba:2d: 92:f0:d1:1d:68:80:d9:78:fd:2d:6f:d8:c4:24:d3: 81:2d:87:b6:83:46:93:41:e6:23:04:5d:19:1b:0a: bc:79:c7:07:e4:34:60:e5:7f:7c:f0:f6:b6:3e:1b: 53:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:2E:91:DD:7C:46:6A:1F:93:62:D6:5A:2B:D0:57:DC:C8:E3:F8:5D X509v3 Authority Key Identifier: keyid:36:DB:44:D4:C1:59:88:67:38:21:5A:56:10:B1:10:C2:44:86:CA:56 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C6515/84C4674A60C111F08BD5B82EC4F9AE02/NttE1MFZiGc4IVpWELEQwkSGylY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NttE1MFZiGc4IVpWELEQwkSGylY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C6515/84C4674A60C111F08BD5B82EC4F9AE02/NttE1MFZiGc4IVpWELEQwkSGylY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption aa:2f:39:e2:0e:07:00:7f:20:f5:7d:fa:d9:62:8b:e8:cc:04: 54:ae:6d:df:1c:28:3f:cf:e7:62:e2:6a:e2:a7:8f:34:31:2a: a5:f5:da:74:5f:2d:23:50:fc:ad:61:2d:63:ea:f0:95:c4:e6: 30:5a:81:06:59:23:ae:3f:6f:0c:84:20:9f:f1:2b:6c:24:9a: c1:b1:d5:9d:8d:3d:17:1b:f2:2b:c4:db:3d:98:a3:0d:a9:b0: 46:2f:3d:49:49:c9:ff:10:c5:d0:71:cc:b2:47:20:eb:a0:5f: 7b:61:2a:2f:51:b4:39:97:7e:39:cb:46:6a:70:f2:00:0f:95: 3b:94:d8:7b:60:7e:a0:cb:9b:e8:f8:52:76:13:85:55:13:f7: a1:81:ab:50:43:8d:72:5a:a9:d7:4b:1d:36:8e:14:06:fd:06: 98:7d:24:7f:ed:75:c6:55:24:f3:b6:d3:dd:af:4e:07:92:16: dc:3d:ab:cc:8e:9a:f0:65:bd:55:76:ee:46:56:a6:3b:b2:8b: e0:98:67:a6:aa:8b:7d:d8:4c:8e:af:4b:1f:2b:a7:d5:9b:58: 36:b9:aa:b1:25:3c:66:ab:ed:18:d3:3d:6e:e9:08:b1:0d:39: 78:00:7d:fd:39:e2:60:c8:3b:fe:f4:b6:03:55:56:8a:a4:65: 04:5a:d0:33 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBIDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD NjUxNTExMC8GA1UEBRMoMzZEQjQ0RDRDMTU5ODg2NzM4MjE1QTU2MTBCMTEwQzI0 NDg2Q0E1NjAeFw0yNTA5MDkwODAxMjlaFw0yNTA5MTYwODAxMjlaMBgxFjAUBgNV BAMTDTY4YmZkZWQ5LTY0ZTMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCnnWQeRH/XWYZoOcXuzybhiIFvDoSwnPfwzeMQi13uigS+gPk+8XNXlvl1T9+P g5PWQisYQC9+JP6o5YF9CZi8e+PYsvKaLSClhXjMBNAOsBEIF0qM0U/yix3s7je/ knB9KaqhdWy6TuYlz08hIT+dKIcUhD2zBM6Qryo9rEnw5Ok/XRxYrIFG+4bmJa4b BRJNPrJJPWJlE0c8HTEuWvJyOVNVBwk56VEaX+hwBXsGZoDk+nP1JzL684/PczrU c12oRRGdmJEmSbndHjGGAm26LZLw0R1ogNl4/S1v2MQk04Eth7aDRpNB5iMEXRkb Crx5xwfkNGDlf3zw9rY+G1OFAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUpy6R3XxG ah+TYtZaK9BX3Mjj+F0wHwYDVR0jBBgwFoAUNttE1MFZiGc4IVpWELEQwkSGylYw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM2NTE1Lzg0QzQ2NzRBNjBD MTExRjA4QkQ1QjgyRUM0RjlBRTAyL050dEUxTUZaaUdjNElWcFdFTEVRd2tTR3ls WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvTnR0RTFNRlppR2M0SVZwV0VMRVF3a1NHeWxZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM2 NTE1Lzg0QzQ2NzRBNjBDMTExRjA4QkQ1QjgyRUM0RjlBRTAyL050dEUxTUZaaUdj NElWcFdFTEVRd2tTR3lsWS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAKovOeIOBwB/IPV9+tlii+jMBFSubd8cKD/P52LiauKnjzQxKqX12nRf LSNQ/K1hLWPq8JXE5jBagQZZI64/bwyEIJ/xK2wkmsGx1Z2NPRcb8ivE2z2Yow2p sEYvPUlJyf8QxdBxzLJHIOugX3thKi9RtDmXfjnLRmpw8gAPlTuU2HtgfqDLm+j4 UnYThVUT96GBq1BDjXJaqddLHTaOFAb9Bph9JH/tdcZVJPO2092vTgeSFtw9q8yO mvBlvVV27kZWpjuyi+CYZ6aqi33YTI6vSx8rp9WbWDa5qrElPGar7RjTPW7pCLEN OXgAff054mDIO/70tgNVVoqkZQRa0DM= -----END CERTIFICATE-----Generated at Tue Sep 9 17:26:36 2025 by rpki-client