$ rpki-client -vvf rpki.apnic.net/member_repository/A911BCDD/348AD8AC861311EEA8C95042C4F9AE02/nkKx9pFGDihG-nHwbcib8sdB25o.mft File: nkKx9pFGDihG-nHwbcib8sdB25o.mft (raw, json) Hash identifier: rcOeDX8xe4c1vKZ/gde/5VmaW8nVrWzAGpY78sxYJ+A= Subject key identifier: 37:89:BA:71:E2:D0:65:7C:D5:29:AF:C3:99:5A:AF:20:F8:04:A8:A1 Authority key identifier: 9E:42:B1:F6:91:46:0E:28:46:FA:71:F0:6D:C8:9B:F2:C7:41:DB:9A Certificate issuer: /CN=A911BCDD/serialNumber=9E42B1F691460E2846FA71F06DC89BF2C741DB9A Certificate serial: 0146 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nkKx9pFGDihG-nHwbcib8sdB25o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911BCDD/348AD8AC861311EEA8C95042C4F9AE02/nkKx9pFGDihG-nHwbcib8sdB25o.mft Manifest number: 0143 Signing time: Thu 07 Aug 2025 04:49:45 +0000 Manifest this update: Thu 07 Aug 2025 04:49:45 +0000 Manifest next update: Thu 14 Aug 2025 04:49:45 +0000 Files and hashes: 1: nkKx9pFGDihG-nHwbcib8sdB25o.crl (hash: w2WZZEF3oquPQSocpVpKA+yvNLqNZhl0Xkosggsk1sc=) 2: 5ED417AE869011EEA9011A36C4F9AE02.roa (hash: secqQJuczQrOBoLhJh1bWX70I59NSlP/4Mk301elvvU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911BCDD/348AD8AC861311EEA8C95042C4F9AE02/nkKx9pFGDihG-nHwbcib8sdB25o.crl rsync://rpki.apnic.net/member_repository/A911BCDD/348AD8AC861311EEA8C95042C4F9AE02/nkKx9pFGDihG-nHwbcib8sdB25o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nkKx9pFGDihG-nHwbcib8sdB25o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 04:49:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 326 (0x146) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911BCDD, serialNumber=9E42B1F691460E2846FA71F06DC89BF2C741DB9A Validity Not Before: Aug 7 04:49:45 2025 GMT Not After : Aug 14 04:49:45 2025 GMT Subject: CN=68943069-b377 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:5e:89:53:23:3e:83:cb:96:b0:34:a2:11:e1: 8c:46:41:66:26:ab:93:4c:dc:4a:a0:0e:b6:0d:04: b6:79:f8:42:77:7a:a7:f5:91:dd:19:8f:77:d6:3f: 90:ab:f2:35:d7:36:c8:06:12:9b:9c:5f:9b:f5:22: e2:8d:0a:bf:e0:a8:ec:06:d7:94:27:d4:94:60:87: 3c:97:16:6c:13:2b:9b:02:1c:95:73:8e:8d:14:6f: 93:be:55:ff:20:80:58:a0:48:f6:89:6e:ce:8b:e9: f8:4c:55:0e:c9:09:49:37:0e:6d:fd:b5:52:93:98: 46:6c:97:d0:e6:c5:15:86:fb:a5:9f:42:35:c5:90: 80:05:d8:da:2e:a1:95:b1:f5:4b:6b:98:c0:b4:84: c2:d3:26:57:77:6f:c6:93:0d:68:f4:c1:f3:5d:04: ae:33:0d:67:9e:b6:03:7d:79:5e:bf:22:29:12:c6: e6:10:f8:30:21:b5:49:b2:e8:9b:b6:57:e7:94:fd: b5:25:1d:58:b4:71:95:7f:ce:7a:57:be:19:65:2a: 55:b0:5a:73:ec:08:e2:46:5f:f3:25:08:67:cc:1c: bd:6f:75:7a:c1:ad:b8:86:95:ff:3a:62:ac:2b:21: f1:82:77:17:c9:59:f7:a6:e6:d1:64:08:71:e1:3c: 5d:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:89:BA:71:E2:D0:65:7C:D5:29:AF:C3:99:5A:AF:20:F8:04:A8:A1 X509v3 Authority Key Identifier: keyid:9E:42:B1:F6:91:46:0E:28:46:FA:71:F0:6D:C8:9B:F2:C7:41:DB:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911BCDD/348AD8AC861311EEA8C95042C4F9AE02/nkKx9pFGDihG-nHwbcib8sdB25o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nkKx9pFGDihG-nHwbcib8sdB25o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911BCDD/348AD8AC861311EEA8C95042C4F9AE02/nkKx9pFGDihG-nHwbcib8sdB25o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 51:0e:d1:89:b5:f4:94:cf:ba:1b:c2:d3:62:f0:fd:5c:ef:35: 53:54:65:5f:32:7e:01:a0:bd:bb:bb:6e:0d:bc:2f:d8:97:a8: a6:d6:cd:9d:3d:d4:e4:80:4d:8b:2d:e3:a5:2f:12:4e:0a:23: f4:8b:46:d2:f2:f6:01:3b:0a:55:da:02:c8:06:6e:4f:1c:65: 7f:5b:28:39:ab:01:8c:3f:d6:2d:e5:a9:f3:cd:9f:89:d3:83: 63:3a:80:92:7f:2a:cc:de:00:e9:33:99:2f:68:b6:79:63:49: 55:7b:0a:5f:71:58:a8:e2:4c:b9:12:e0:3b:28:12:9b:a6:09: d4:41:62:4f:62:c9:71:40:fc:a7:75:76:ae:ba:9c:19:93:21: 74:1a:14:ee:62:d1:0b:16:d8:ec:61:5c:e1:ce:68:7c:b4:29: cc:d7:1a:db:c0:bc:48:3b:6b:35:47:eb:ec:34:00:a7:fd:b1: 15:ff:13:c2:c6:72:92:37:53:de:3d:4b:69:32:77:5e:39:8a: 1c:c7:e7:cc:92:cb:81:d4:bd:b4:41:d7:32:dd:60:6d:a8:fe: 89:67:19:a2:c1:eb:95:73:ae:74:05:d5:ff:6c:ac:25:2d:8c: 4b:4d:09:a3:fa:a6:5d:3c:88:ce:98:cc:30:4e:e2:cd:fb:e7: ca:96:32:aa -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAUYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUJDREQxMTAvBgNVBAUTKDlFNDJCMUY2OTE0NjBFMjg0NkZBNzFGMDZEQzg5QkYy Qzc0MURCOUEwHhcNMjUwODA3MDQ0OTQ1WhcNMjUwODE0MDQ0OTQ1WjAYMRYwFAYD VQQDEw02ODk0MzA2OS1iMzc3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2V6JUyM+g8uWsDSiEeGMRkFmJquTTNxKoA62DQS2efhCd3qn9ZHdGY931j+Q q/I11zbIBhKbnF+b9SLijQq/4KjsBteUJ9SUYIc8lxZsEyubAhyVc46NFG+TvlX/ IIBYoEj2iW7Oi+n4TFUOyQlJNw5t/bVSk5hGbJfQ5sUVhvuln0I1xZCABdjaLqGV sfVLa5jAtITC0yZXd2/Gkw1o9MHzXQSuMw1nnrYDfXlevyIpEsbmEPgwIbVJsuib tlfnlP21JR1YtHGVf856V74ZZSpVsFpz7AjiRl/zJQhnzBy9b3V6wa24hpX/OmKs KyHxgncXyVn3pubRZAhx4Txd9wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDeJunHi 0GV81Smvw5laryD4BKihMB8GA1UdIwQYMBaAFJ5CsfaRRg4oRvpx8G3Im/LHQdua MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQkNERC8zNDhBRDhBQzg2 MTMxMUVFQThDOTUwNDJDNEY5QUUwMi9ua0t4OXBGR0RpaEctbkh3YmNpYjhzZEIy NW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25rS3g5cEZHRGloRy1uSHdiY2liOHNkQjI1by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QkNERC8zNDhBRDhBQzg2MTMxMUVFQThDOTUwNDJDNEY5QUUwMi9ua0t4OXBGR0Rp aEctbkh3YmNpYjhzZEIyNW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBRDtGJtfSUz7obwtNi8P1c7zVTVGVfMn4BoL27u24NvC/Yl6im1s2d PdTkgE2LLeOlLxJOCiP0i0bS8vYBOwpV2gLIBm5PHGV/Wyg5qwGMP9Yt5anzzZ+J 04NjOoCSfyrM3gDpM5kvaLZ5Y0lVewpfcVio4ky5EuA7KBKbpgnUQWJPYslxQPyn dXauupwZkyF0GhTuYtELFtjsYVzhzmh8tCnM1xrbwLxIO2s1R+vsNACn/bEV/xPC xnKSN1PePUtpMndeOYocx+fMksuB1L20Qdcy3WBtqP6JZxmiweuVc650BdX/bKwl LYxLTQmj+qZdPIjOmMwwTuLN++fKljKq -----END CERTIFICATE-----Generated at Sat Aug 9 01:22:40 2025 by rpki-client