$ rpki-client -vvf rpki.apnic.net/member_repository/A9131690/15B41B8863F311E9A0854C47C4F9AE02/NHTJTDbo-aDToNIuHdoQjNNAqyg.mft File: NHTJTDbo-aDToNIuHdoQjNNAqyg.mft (raw, json) Hash identifier: S+wVtwXcSLJHfHlWEHCJk7S2VZciC9Miadp6KYF+A2I= Subject key identifier: 34:EC:70:1D:C3:B3:7E:2C:12:47:AA:5C:3C:8D:49:F1:C5:68:9C:6B Authority key identifier: 34:74:C9:4C:36:E8:F9:A0:D3:A0:D2:2E:1D:DA:10:8C:D3:40:AB:28 Certificate issuer: /CN=A9131690/serialNumber=3474C94C36E8F9A0D3A0D22E1DDA108CD340AB28 Certificate serial: 0FC6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NHTJTDbo-aDToNIuHdoQjNNAqyg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9131690/15B41B8863F311E9A0854C47C4F9AE02/NHTJTDbo-aDToNIuHdoQjNNAqyg.mft Manifest number: 0F9D Signing time: Fri 08 Aug 2025 17:43:45 +0000 Manifest this update: Fri 08 Aug 2025 17:43:45 +0000 Manifest next update: Fri 15 Aug 2025 17:43:45 +0000 Files and hashes: 1: NHTJTDbo-aDToNIuHdoQjNNAqyg.crl (hash: GroWc/db0qI/0LKGxIKWs4JpimIJd71TtxhmZQZrhW8=) 2: B2B24A4221D711EB9CFAC46EC4F9AE02.roa (hash: WopX8EPUj9ND6qcXFWft9CyuoZSX2+UxPu40b2aj+pc=) 3: B3682FEC21D711EB9CFAC46EC4F9AE02.roa (hash: 77t9c6veUMOt4XPOFIwWe8FztnDBdg3DuRHonRmM4pA=) 4: A7BDC50C7A4811EBA907BB5BC4F9AE02.roa (hash: 0RWvLgLQMfYKcMt6aIpCTG3MXhhitrR5pPiP2zQ4NcY=) 5: B47C278021D711EB9CFAC46EC4F9AE02.roa (hash: kt6+dcMSnt8HtFoNHoxve7SwNMn6XsQ5fmhhFuEOZOM=) 6: 5E0253B6232111EB9896B783C4F9AE02.roa (hash: S7XAN9hoPkMQD1dwIo9UheEK0CbHpWptDyxJHPNt49g=) 7: 08CD1510027011EB98FEC44BC4F9AE02.roa (hash: KmlW5cxQJtlnajXFs7j5PHn6wJjQG7ZZKRzUGo5l5KM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9131690/15B41B8863F311E9A0854C47C4F9AE02/NHTJTDbo-aDToNIuHdoQjNNAqyg.crl rsync://rpki.apnic.net/member_repository/A9131690/15B41B8863F311E9A0854C47C4F9AE02/NHTJTDbo-aDToNIuHdoQjNNAqyg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NHTJTDbo-aDToNIuHdoQjNNAqyg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4038 (0xfc6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9131690, serialNumber=3474C94C36E8F9A0D3A0D22E1DDA108CD340AB28 Validity Not Before: Aug 8 17:43:45 2025 GMT Not After : Aug 15 17:43:45 2025 GMT Subject: CN=68963751-042b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:a2:1a:dd:95:52:da:04:2f:3c:5b:07:bf:b7: e5:77:bf:c9:9f:1a:c6:08:f9:b0:5d:5e:67:49:31: 73:dc:4a:87:99:40:e2:5d:7c:f4:70:25:17:48:0b: 46:3b:20:40:7f:4a:69:83:3f:0b:d5:86:1a:7f:92: 03:53:56:8e:2e:8d:a1:dd:fa:05:ea:d9:23:78:26: 5c:e1:57:14:60:6e:3c:b1:34:1e:56:cc:fd:7e:d4: 77:40:c1:04:9b:fd:83:41:8f:80:70:df:25:bb:b5: f7:3c:7f:f4:af:24:f2:17:e0:7d:b4:a6:71:a9:14: 29:d8:64:88:57:63:be:0c:2a:b1:1b:2e:68:6f:6d: 54:3c:8a:cb:29:bf:17:f6:32:ee:24:f8:d4:d6:51: e3:3c:97:8d:07:d5:ce:aa:86:a9:c1:13:81:ae:35: b6:94:0a:a4:14:af:4d:93:cb:e0:a6:c2:a0:2a:54: 22:3a:e9:4f:47:86:a5:98:48:42:65:ad:56:18:d0: ec:95:c8:b5:3b:10:4f:28:6a:e2:a4:84:4e:78:7c: 91:f0:23:93:22:3b:ac:b3:90:1c:4d:28:ff:07:7b: 89:bb:86:63:05:5b:04:aa:a6:b7:c7:7c:52:01:27: aa:c6:2c:42:a4:2e:4f:b4:bb:e5:32:87:f5:31:f6: 55:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:EC:70:1D:C3:B3:7E:2C:12:47:AA:5C:3C:8D:49:F1:C5:68:9C:6B X509v3 Authority Key Identifier: keyid:34:74:C9:4C:36:E8:F9:A0:D3:A0:D2:2E:1D:DA:10:8C:D3:40:AB:28 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9131690/15B41B8863F311E9A0854C47C4F9AE02/NHTJTDbo-aDToNIuHdoQjNNAqyg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NHTJTDbo-aDToNIuHdoQjNNAqyg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9131690/15B41B8863F311E9A0854C47C4F9AE02/NHTJTDbo-aDToNIuHdoQjNNAqyg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 12:fb:80:56:de:9d:a3:55:26:9d:dd:7b:43:47:dd:2e:42:21: 28:06:d1:a3:e1:9b:3b:e2:8b:3f:19:0b:96:d6:e7:d6:55:04: 2c:3b:00:c6:ad:16:1e:bc:73:70:0c:81:da:a8:b6:f6:bb:6c: 7a:c7:7d:a9:dc:07:26:fb:a5:15:45:20:95:45:99:90:65:04: 69:44:f1:09:00:1c:c1:d3:28:26:09:4d:4b:4a:35:bc:90:8f: c5:b4:83:7a:9e:46:05:e5:ed:d6:df:a7:91:2f:54:a6:17:c9: c0:e0:be:6d:5b:ef:aa:5a:a5:5c:0b:b9:55:44:22:01:91:95: 00:45:33:5a:d7:18:c8:a2:37:7f:67:a2:7d:9e:30:3d:87:1d: 71:eb:ea:58:9e:2a:31:18:ff:25:11:56:68:27:65:0f:8b:55: 00:6d:99:2d:eb:b3:15:26:11:63:9e:ec:a6:1e:c4:a3:6a:73: cd:13:b2:2f:b9:68:4a:4b:9b:7b:e9:cd:73:0a:e7:d6:4f:16: c2:a5:6b:fd:6d:19:b7:8c:a0:f9:b1:ce:71:14:5e:48:56:0e: fa:ac:a1:b1:63:eb:ce:7a:9a:c8:31:18:fd:9c:24:d7:66:87: db:3e:e7:d3:b4:f6:9e:79:0b:a7:b2:0b:00:be:27:dd:02:cf: c1:05:82:ee -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICD8YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzE2OTAxMTAvBgNVBAUTKDM0NzRDOTRDMzZFOEY5QTBEM0EwRDIyRTFEREExMDhD RDM0MEFCMjgwHhcNMjUwODA4MTc0MzQ1WhcNMjUwODE1MTc0MzQ1WjAYMRYwFAYD VQQDEw02ODk2Mzc1MS0wNDJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoqIa3ZVS2gQvPFsHv7fld7/JnxrGCPmwXV5nSTFz3EqHmUDiXXz0cCUXSAtG OyBAf0ppgz8L1YYaf5IDU1aOLo2h3foF6tkjeCZc4VcUYG48sTQeVsz9ftR3QMEE m/2DQY+AcN8lu7X3PH/0ryTyF+B9tKZxqRQp2GSIV2O+DCqxGy5ob21UPIrLKb8X 9jLuJPjU1lHjPJeNB9XOqoapwROBrjW2lAqkFK9Nk8vgpsKgKlQiOulPR4almEhC Za1WGNDslci1OxBPKGripIROeHyR8COTIjuss5AcTSj/B3uJu4ZjBVsEqqa3x3xS ASeqxixCpC5PtLvlMof1MfZVmQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDTscB3D s34sEkeqXDyNSfHFaJxrMB8GA1UdIwQYMBaAFDR0yUw26Pmg06DSLh3aEIzTQKso MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMTY5MC8xNUI0MUI4ODYz RjMxMUU5QTA4NTRDNDdDNEY5QUUwMi9OSFRKVERiby1hRFRvTkl1SGRvUWpOTkFx eWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05IVEpURGJvLWFEVG9OSXVIZG9Rak5OQXF5Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MTY5MC8xNUI0MUI4ODYzRjMxMUU5QTA4NTRDNDdDNEY5QUUwMi9OSFRKVERiby1h RFRvTkl1SGRvUWpOTkFxeWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAS+4BW3p2jVSad3XtDR90uQiEoBtGj4Zs74os/GQuW1ufWVQQsOwDG rRYevHNwDIHaqLb2u2x6x32p3Acm+6UVRSCVRZmQZQRpRPEJABzB0ygmCU1LSjW8 kI/FtIN6nkYF5e3W36eRL1SmF8nA4L5tW++qWqVcC7lVRCIBkZUARTNa1xjIojd/ Z6J9njA9hx1x6+pYnioxGP8lEVZoJ2UPi1UAbZkt67MVJhFjnuymHsSjanPNE7Iv uWhKS5t76c1zCufWTxbCpWv9bRm3jKD5sc5xFF5IVg76rKGxY+vOeprIMRj9nCTX ZofbPufTtPaeeQunsgsAvifdAs/BBYLu -----END CERTIFICATE-----Generated at Sun Aug 10 18:20:34 2025 by rpki-client