$ rpki-client -vvf rpki.apnic.net/member_repository/A911894F/963CF0CEEC5E11E48E7D0119C4F9AE02/NhKQaSiZCCzeI_UEU6QVXgqreXg.mft File: NhKQaSiZCCzeI_UEU6QVXgqreXg.mft (raw, json) Hash identifier: 6+NWrD9p1I95nhqKlNXz1e8UhXr1wpzgVkdA8WolJEM= Subject key identifier: D7:C1:B2:66:BA:A3:4C:F2:70:34:75:60:15:9E:A2:8C:81:51:E1:70 Authority key identifier: 36:12:90:69:28:99:08:2C:DE:23:F5:04:53:A4:15:5E:0A:AB:79:78 Certificate issuer: /CN=A911894F/serialNumber=361290692899082CDE23F50453A4155E0AAB7978 Certificate serial: 2684 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NhKQaSiZCCzeI_UEU6QVXgqreXg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911894F/963CF0CEEC5E11E48E7D0119C4F9AE02/NhKQaSiZCCzeI_UEU6QVXgqreXg.mft Manifest number: 2671 Signing time: Sun 10 Aug 2025 15:38:23 +0000 Manifest this update: Sun 10 Aug 2025 15:38:23 +0000 Manifest next update: Sun 17 Aug 2025 15:38:23 +0000 Files and hashes: 1: NhKQaSiZCCzeI_UEU6QVXgqreXg.crl (hash: Q3h+waQcDD7+pyE1ufRQOw5DaZKrO+QwAoV+jgjwEY0=) 2: 802FBE707FEB11EB8B5E2817C4F9AE02.roa (hash: 7A1IMu+LIGDsrLSPFNBgTLonAK/3FwEXR3H+PIKYqo0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911894F/963CF0CEEC5E11E48E7D0119C4F9AE02/NhKQaSiZCCzeI_UEU6QVXgqreXg.crl rsync://rpki.apnic.net/member_repository/A911894F/963CF0CEEC5E11E48E7D0119C4F9AE02/NhKQaSiZCCzeI_UEU6QVXgqreXg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NhKQaSiZCCzeI_UEU6QVXgqreXg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9860 (0x2684) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911894F, serialNumber=361290692899082CDE23F50453A4155E0AAB7978 Validity Not Before: Aug 10 15:38:23 2025 GMT Not After : Aug 17 15:38:23 2025 GMT Subject: CN=6898bcef-9aa1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:97:44:57:88:de:c3:40:2c:9c:ed:83:be:0b: 01:66:27:5e:60:c4:43:94:c5:25:58:e6:1c:e6:ef: 36:92:5b:d7:65:f7:5e:82:06:55:17:5a:fd:a4:75: 16:7b:69:ae:39:e7:56:53:1d:c0:7f:db:bd:7d:c5: a0:8a:d2:de:fb:9f:02:54:a0:3e:09:43:50:aa:bc: 64:85:24:e1:69:7f:35:69:ea:6f:67:e2:c1:69:1d: 4a:2f:da:9b:2e:e7:3b:3b:b6:76:36:58:a8:c6:ff: 4d:27:da:44:a2:2e:f0:d2:a1:7e:c3:1a:9d:c9:19: ad:99:f9:e2:05:65:89:03:dd:34:2c:91:95:d9:ba: d9:5e:6d:27:fa:87:81:cb:23:46:e4:13:6c:59:d7: 77:13:c0:21:0b:21:8f:84:41:47:56:f4:9f:36:c4: 25:51:d1:c4:ca:f5:72:a2:de:56:b7:a0:a5:5b:0a: 97:64:3c:cb:8a:9a:ff:15:03:dd:b3:fa:f4:d1:93: bd:33:0a:be:60:a4:8b:91:cb:42:4d:32:a7:b9:94: 94:1f:e6:b9:74:c0:b4:1e:85:47:25:be:d8:10:5a: b1:f0:39:f7:17:e7:cb:44:2a:12:85:dc:3a:d3:72: a8:b7:30:e0:a5:8a:67:da:fc:d9:f2:cd:85:1c:13: a3:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:C1:B2:66:BA:A3:4C:F2:70:34:75:60:15:9E:A2:8C:81:51:E1:70 X509v3 Authority Key Identifier: keyid:36:12:90:69:28:99:08:2C:DE:23:F5:04:53:A4:15:5E:0A:AB:79:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911894F/963CF0CEEC5E11E48E7D0119C4F9AE02/NhKQaSiZCCzeI_UEU6QVXgqreXg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NhKQaSiZCCzeI_UEU6QVXgqreXg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911894F/963CF0CEEC5E11E48E7D0119C4F9AE02/NhKQaSiZCCzeI_UEU6QVXgqreXg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d4:ce:79:0e:60:05:b5:ce:37:41:0f:88:22:14:6b:5b:33:74: 9b:2e:c8:70:d0:57:c9:c8:e1:2b:e7:0c:f5:17:37:fb:54:02: bf:a2:2d:d0:0c:df:5a:89:8a:ab:b5:30:d5:e4:fa:1b:dc:15: 0d:3a:53:b2:b3:4a:da:14:6f:a4:a6:21:44:71:7b:3f:49:b2: 0a:34:22:ba:74:d8:f0:19:1f:2b:44:35:06:81:26:03:25:42: ce:f9:32:93:ee:0a:71:2e:76:63:40:3a:ab:dd:aa:a6:10:ff: 9c:42:10:ba:4a:97:c8:13:a2:82:59:84:b8:35:72:ad:37:65: d6:5d:1a:fb:c2:96:c2:74:08:01:b9:67:8f:af:10:15:d9:bb: 8d:62:4c:53:d5:f4:bf:94:c1:84:5a:7a:e8:de:9e:fc:57:fd: e4:85:1b:b3:02:59:9b:6a:5b:c4:e9:5c:02:41:99:5e:07:24: fb:58:51:46:cd:68:8d:34:9d:20:90:35:8b:f2:85:8d:4e:4f: 09:e2:9c:76:09:9b:33:26:ef:9a:0f:b1:94:5e:3d:21:37:0d: 50:60:52:af:b7:e0:01:8d:40:9c:e5:b4:dd:fa:8e:6d:a3:0d: e9:b1:e2:07:d7:56:60:f9:cc:f6:c9:7e:33:b1:24:bc:a0:4f: 8d:92:80:cf -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJoQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTg5NEYxMTAvBgNVBAUTKDM2MTI5MDY5Mjg5OTA4MkNERTIzRjUwNDUzQTQxNTVF MEFBQjc5NzgwHhcNMjUwODEwMTUzODIzWhcNMjUwODE3MTUzODIzWjAYMRYwFAYD VQQDEw02ODk4YmNlZi05YWExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAypdEV4jew0AsnO2DvgsBZideYMRDlMUlWOYc5u82klvXZfdeggZVF1r9pHUW e2muOedWUx3Af9u9fcWgitLe+58CVKA+CUNQqrxkhSThaX81aepvZ+LBaR1KL9qb Luc7O7Z2Nlioxv9NJ9pEoi7w0qF+wxqdyRmtmfniBWWJA900LJGV2brZXm0n+oeB yyNG5BNsWdd3E8AhCyGPhEFHVvSfNsQlUdHEyvVyot5Wt6ClWwqXZDzLipr/FQPd s/r00ZO9Mwq+YKSLkctCTTKnuZSUH+a5dMC0HoVHJb7YEFqx8Dn3F+fLRCoShdw6 03KotzDgpYpn2vzZ8s2FHBOjOwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNfBsma6 o0zycDR1YBWeooyBUeFwMB8GA1UdIwQYMBaAFDYSkGkomQgs3iP1BFOkFV4Kq3l4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExODk0Ri85NjNDRjBDRUVD NUUxMUU0OEU3RDAxMTlDNEY5QUUwMi9OaEtRYVNpWkNDemVJX1VFVTZRVlhncXJl WGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05oS1FhU2laQ0N6ZUlfVUVVNlFWWGdxcmVYZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx ODk0Ri85NjNDRjBDRUVDNUUxMUU0OEU3RDAxMTlDNEY5QUUwMi9OaEtRYVNpWkND emVJX1VFVTZRVlhncXJlWGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDUznkOYAW1zjdBD4giFGtbM3SbLshw0FfJyOEr5wz1Fzf7VAK/oi3Q DN9aiYqrtTDV5Pob3BUNOlOys0raFG+kpiFEcXs/SbIKNCK6dNjwGR8rRDUGgSYD JULO+TKT7gpxLnZjQDqr3aqmEP+cQhC6SpfIE6KCWYS4NXKtN2XWXRr7wpbCdAgB uWePrxAV2buNYkxT1fS/lMGEWnro3p78V/3khRuzAlmbalvE6VwCQZleByT7WFFG zWiNNJ0gkDWL8oWNTk8J4px2CZszJu+aD7GUXj0hNw1QYFKvt+ABjUCc5bTd+o5t ow3pseIH11Zg+cz2yX4zsSS8oE+NkoDP -----END CERTIFICATE-----Generated at Mon Aug 11 10:51:57 2025 by rpki-client