$ rpki-client -vvf rpki.apnic.net/member_repository/A91CEAE0/AEF63760196811EF8FF7BE6FC4F9AE02/nfT-3_kqnn9uAr_AVK0zmFPZ3TI.mft File: nfT-3_kqnn9uAr_AVK0zmFPZ3TI.mft (raw, json) Hash identifier: ZREquUK0SmA8ki7kISk8BQsZTTXh7fwEiua8vFq7KTM= Subject key identifier: 7C:DD:6F:0C:25:33:10:0A:60:1A:C9:24:2B:50:4A:A6:D9:16:21:9F Authority key identifier: 9D:F4:FE:DF:F9:2A:9E:7F:6E:02:BF:C0:54:AD:33:98:53:D9:DD:32 Certificate issuer: /CN=A91CEAE0/serialNumber=9DF4FEDFF92A9E7F6E02BFC054AD339853D9DD32 Certificate serial: 0126 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nfT-3_kqnn9uAr_AVK0zmFPZ3TI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CEAE0/AEF63760196811EF8FF7BE6FC4F9AE02/nfT-3_kqnn9uAr_AVK0zmFPZ3TI.mft Manifest number: 010E Signing time: Wed 03 Sep 2025 05:45:35 +0000 Manifest this update: Wed 03 Sep 2025 05:45:34 +0000 Manifest next update: Wed 10 Sep 2025 05:45:34 +0000 Files and hashes: 1: nfT-3_kqnn9uAr_AVK0zmFPZ3TI.crl (hash: puRHdyPSMgu9RpF0sebGH0B9q8QLbT3cATPFNDx4cvY=) 2: FF233C70E62111EFACA87766C4F9AE02.roa (hash: 0dsUVKxnnglNpZZhhpBErhWI1oXUDVFF4BUubObFWiM=) 3: 77E54B78C45111EF9D399128C4F9AE02.roa (hash: StZAIMtKvc+DvwzgQ26IlnkW4j9VonIWzSJOuU7IXLU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CEAE0/AEF63760196811EF8FF7BE6FC4F9AE02/nfT-3_kqnn9uAr_AVK0zmFPZ3TI.crl rsync://rpki.apnic.net/member_repository/A91CEAE0/AEF63760196811EF8FF7BE6FC4F9AE02/nfT-3_kqnn9uAr_AVK0zmFPZ3TI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nfT-3_kqnn9uAr_AVK0zmFPZ3TI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Sep 2025 05:45:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 294 (0x126) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CEAE0, serialNumber=9DF4FEDFF92A9E7F6E02BFC054AD339853D9DD32 Validity Not Before: Sep 3 05:45:34 2025 GMT Not After : Sep 10 05:45:34 2025 GMT Subject: CN=68b7d5ff-41e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:04:b9:b5:49:ed:58:84:49:11:53:3b:47:8f: f3:37:dd:18:4c:11:c0:b8:81:90:ce:72:16:02:61: 6c:0b:90:e4:4c:ca:4a:38:45:5e:41:e2:77:ba:79: 7c:b1:5d:34:27:2d:6c:f8:30:44:77:b5:a3:8a:c5: 62:8a:1b:52:2e:f1:0d:15:8a:1a:16:b9:62:a0:80: 84:2f:e0:2b:26:fc:47:e6:ae:d7:13:38:33:8b:b6: 28:fe:d8:41:61:63:f8:58:2e:7c:6a:96:72:26:ec: c8:26:d2:52:e7:f9:27:2f:33:0e:6e:e5:dd:73:6f: f7:22:75:93:57:6a:5b:69:48:85:73:b6:62:b4:51: 12:b8:34:78:97:a1:2e:df:06:8d:ed:be:da:d1:d5: 07:c0:a7:c8:dd:23:1f:0a:01:fd:3f:93:90:ed:ec: e2:00:09:eb:df:15:2b:69:e8:74:dc:e8:8a:ce:0d: c7:4b:1a:d0:82:53:b0:4f:20:0b:3e:78:56:63:f8: 0b:69:38:d5:cb:7b:12:ac:f2:7d:d3:67:2c:2f:a3: 21:25:68:3a:6b:ff:02:13:8c:17:10:b7:55:3c:7a: 86:31:a4:3d:be:09:a6:38:cf:ee:36:7f:1a:b1:34: 3a:57:32:d7:53:9f:75:1d:a9:fe:d7:f4:68:14:ec: 67:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:DD:6F:0C:25:33:10:0A:60:1A:C9:24:2B:50:4A:A6:D9:16:21:9F X509v3 Authority Key Identifier: keyid:9D:F4:FE:DF:F9:2A:9E:7F:6E:02:BF:C0:54:AD:33:98:53:D9:DD:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CEAE0/AEF63760196811EF8FF7BE6FC4F9AE02/nfT-3_kqnn9uAr_AVK0zmFPZ3TI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nfT-3_kqnn9uAr_AVK0zmFPZ3TI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CEAE0/AEF63760196811EF8FF7BE6FC4F9AE02/nfT-3_kqnn9uAr_AVK0zmFPZ3TI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 80:48:7c:b9:0e:4f:eb:ae:4f:95:7b:3c:81:04:e4:82:39:47: 67:ae:01:04:1f:4a:f7:dc:e4:e0:0f:f4:9c:0c:89:c3:3e:0e: c4:87:a5:c5:a2:85:ed:d6:10:6d:47:84:83:82:2d:ef:0f:09: d3:d2:3c:92:74:60:66:5e:24:d4:cc:82:b5:ea:88:65:bb:96: f3:39:95:7a:11:c3:04:b0:d5:1c:03:5b:27:34:8b:14:7c:90: 34:07:de:b5:6f:93:58:ca:65:82:02:36:2c:35:8a:36:0a:b0: 5d:57:f1:d9:e3:37:bb:c5:f0:07:8c:f7:77:f4:e3:e4:32:eb: 60:51:e7:75:2a:c7:f1:34:82:64:45:a3:e4:1f:91:96:d4:24: a4:3b:b9:d0:49:d9:fa:43:bb:a3:80:fe:a1:3b:b0:db:3f:6b: ec:61:48:54:1a:c3:3f:65:89:fa:dc:4f:72:ce:42:ea:fb:58: 45:d3:3f:65:81:d9:5a:95:4f:e2:c5:a2:99:e2:98:18:31:6c: d3:62:07:a4:58:7e:0a:c7:30:4d:a1:fd:6f:01:a6:ad:34:ca: 2a:3e:90:69:6b:cc:b1:f3:6b:f3:a8:33:f0:1f:de:18:a7:1d: b3:c4:6a:a7:fd:ab:20:c6:0c:d6:26:29:0b:de:be:bf:6b:c7: d2:91:3f:72 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0VBRTAxMTAvBgNVBAUTKDlERjRGRURGRjkyQTlFN0Y2RTAyQkZDMDU0QUQzMzk4 NTNEOUREMzIwHhcNMjUwOTAzMDU0NTM0WhcNMjUwOTEwMDU0NTM0WjAYMRYwFAYD VQQDEw02OGI3ZDVmZi00MWU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAygS5tUntWIRJEVM7R4/zN90YTBHAuIGQznIWAmFsC5DkTMpKOEVeQeJ3unl8 sV00Jy1s+DBEd7WjisViihtSLvENFYoaFrlioICEL+ArJvxH5q7XEzgzi7Yo/thB YWP4WC58apZyJuzIJtJS5/knLzMObuXdc2/3InWTV2pbaUiFc7ZitFESuDR4l6Eu 3waN7b7a0dUHwKfI3SMfCgH9P5OQ7eziAAnr3xUraeh03OiKzg3HSxrQglOwTyAL PnhWY/gLaTjVy3sSrPJ902csL6MhJWg6a/8CE4wXELdVPHqGMaQ9vgmmOM/uNn8a sTQ6VzLXU591Han+1/RoFOxnkwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHzdbwwl MxAKYBrJJCtQSqbZFiGfMB8GA1UdIwQYMBaAFJ30/t/5Kp5/bgK/wFStM5hT2d0y MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRUFFMC9BRUY2Mzc2MDE5 NjgxMUVGOEZGN0JFNkZDNEY5QUUwMi9uZlQtM19rcW5uOXVBcl9BVkswem1GUFoz VEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL25mVC0zX2txbm45dUFyX0FWSzB6bUZQWjNUSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RUFFMC9BRUY2Mzc2MDE5NjgxMUVGOEZGN0JFNkZDNEY5QUUwMi9uZlQtM19rcW5u OXVBcl9BVkswem1GUFozVEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCASHy5Dk/rrk+VezyBBOSCOUdnrgEEH0r33OTgD/ScDInDPg7Eh6XF ooXt1hBtR4SDgi3vDwnT0jySdGBmXiTUzIK16ohlu5bzOZV6EcMEsNUcA1snNIsU fJA0B961b5NYymWCAjYsNYo2CrBdV/HZ4ze7xfAHjPd39OPkMutgUed1KsfxNIJk RaPkH5GW1CSkO7nQSdn6Q7ujgP6hO7DbP2vsYUhUGsM/ZYn63E9yzkLq+1hF0z9l gdlalU/ixaKZ4pgYMWzTYgekWH4KxzBNof1vAaatNMoqPpBpa8yx82vzqDPwH94Y px2zxGqn/asgxgzWJikL3r6/a8fSkT9y -----END CERTIFICATE-----Generated at Thu Sep 4 13:58:36 2025 by rpki-client