$ rpki-client -vvf rpki.apnic.net/member_repository/A9142769/46BD55C24B8D11F0A3F4FF3FC4F9AE02/ntVkKdGun2AE-2-2eI6T-vYiV1k.mft File: ntVkKdGun2AE-2-2eI6T-vYiV1k.mft (raw, json) Hash identifier: NfBI6nzQO9vr6wuKZKn9IqislY89TZUAmSFPYnCgJxQ= Subject key identifier: C7:D5:AD:D8:2A:CF:6A:B4:45:86:43:C3:03:91:ED:59:A7:59:6C:5A Authority key identifier: 9E:D5:64:29:D1:AE:9F:60:04:FB:6F:B6:78:8E:93:FA:F6:22:57:59 Certificate issuer: /CN=A9142769/serialNumber=9ED56429D1AE9F6004FB6FB6788E93FAF6225759 Certificate serial: 1F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ntVkKdGun2AE-2-2eI6T-vYiV1k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9142769/46BD55C24B8D11F0A3F4FF3FC4F9AE02/ntVkKdGun2AE-2-2eI6T-vYiV1k.mft Manifest number: 1D Signing time: Sat 09 Aug 2025 08:25:39 +0000 Manifest this update: Sat 09 Aug 2025 08:25:38 +0000 Manifest next update: Sat 16 Aug 2025 08:25:38 +0000 Files and hashes: 1: ntVkKdGun2AE-2-2eI6T-vYiV1k.crl (hash: B40NuKEhIoSKphYYnTRuFCEXokFFI+MMFeY7Rl7SD50=) 2: C8B7607C4B8D11F0B198C040C4F9AE02.roa (hash: i2BhMqJuRPJPw6EpQmAJmu0/MkHReXEBSLa+rZeCZ6I=) 3: C96601404B8D11F0B198C040C4F9AE02.roa (hash: T0dKTs8EMdDl2Inh3fwBdZE3Wa4Vfq9Mg4rvNVagedw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9142769/46BD55C24B8D11F0A3F4FF3FC4F9AE02/ntVkKdGun2AE-2-2eI6T-vYiV1k.crl rsync://rpki.apnic.net/member_repository/A9142769/46BD55C24B8D11F0A3F4FF3FC4F9AE02/ntVkKdGun2AE-2-2eI6T-vYiV1k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ntVkKdGun2AE-2-2eI6T-vYiV1k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31 (0x1f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9142769, serialNumber=9ED56429D1AE9F6004FB6FB6788E93FAF6225759 Validity Not Before: Aug 9 08:25:38 2025 GMT Not After : Aug 16 08:25:38 2025 GMT Subject: CN=68970602-c301 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:d2:9d:61:ec:18:27:98:f7:a0:30:03:50:44: 0e:bf:5b:4d:85:74:25:c7:b4:3c:b3:a6:a2:3d:c9: 31:98:8c:8d:5a:b0:50:6c:24:41:b2:28:12:20:1a: a5:23:28:8a:56:33:65:18:a0:99:01:a0:ef:fb:8b: 5b:4c:cc:04:f6:a6:3c:c0:8a:8c:0a:c1:da:d0:7d: fd:1b:47:67:48:00:b4:ef:e9:5b:c2:eb:7d:88:89: 5d:ab:b0:d6:4d:21:d7:ec:e5:f1:dd:e1:bd:67:93: 91:7c:a0:9e:e1:98:d7:93:e5:61:0a:88:97:62:16: 4a:6f:28:84:a5:37:55:0f:72:9d:7e:40:25:58:83: bb:a8:7f:ba:3a:ea:38:82:d5:b8:0f:9b:9f:bb:7f: 9c:7f:6d:d7:db:ea:f8:d2:b6:44:f8:c0:57:d4:5a: df:7f:bf:ed:bb:0f:d1:ea:23:66:59:35:8b:81:32: 9e:5a:8f:54:81:93:b7:af:24:e1:d2:da:76:af:c8: c8:25:be:d2:5f:03:51:09:86:3d:4b:ab:48:72:42: 75:04:78:b5:4c:20:ce:f4:c0:e0:22:9d:9c:cd:4d: c6:c4:85:dd:70:17:79:35:c0:52:b6:5a:85:cd:58: 9c:a1:82:94:b6:6a:3e:80:5a:1e:15:64:c0:75:92: 49:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:D5:AD:D8:2A:CF:6A:B4:45:86:43:C3:03:91:ED:59:A7:59:6C:5A X509v3 Authority Key Identifier: keyid:9E:D5:64:29:D1:AE:9F:60:04:FB:6F:B6:78:8E:93:FA:F6:22:57:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9142769/46BD55C24B8D11F0A3F4FF3FC4F9AE02/ntVkKdGun2AE-2-2eI6T-vYiV1k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ntVkKdGun2AE-2-2eI6T-vYiV1k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142769/46BD55C24B8D11F0A3F4FF3FC4F9AE02/ntVkKdGun2AE-2-2eI6T-vYiV1k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8d:13:a5:39:31:0b:dd:71:ab:0d:e5:6e:0f:66:fe:e1:8d:1b: ab:7b:ac:09:52:5d:5d:c7:c9:8a:7b:96:e5:fe:5d:13:26:7b: 86:0d:5f:f8:c5:a5:d7:cb:59:1a:94:43:08:7c:64:9d:95:40: 6e:f3:94:9b:7f:fa:7e:c3:93:b4:22:b4:16:2a:95:67:a1:f3: 73:54:80:0a:7c:60:aa:09:d3:1a:d7:15:cf:5a:7f:9e:c0:e3: a0:dd:37:c1:7b:06:4f:dc:1f:5e:38:4c:74:29:63:cc:ea:4c: d2:17:ab:44:27:e4:8e:00:1f:14:1b:4f:3e:ca:f3:19:75:13: ec:10:21:26:d4:8a:38:72:b8:d7:c4:f2:15:89:78:bc:15:20: bd:d3:9b:32:5d:60:c0:4e:ce:a2:65:65:f1:cc:49:3d:15:d0: 5c:d1:88:d8:da:5a:42:03:bd:fb:38:58:85:99:c2:4a:0f:7a: 00:2a:3f:7f:2f:85:67:52:b6:57:d2:c0:35:01:21:00:d7:86: fe:b4:2f:99:ca:93:20:9d:9d:f1:66:eb:4a:3d:49:3b:76:9c: 7f:b9:11:e4:71:2e:5a:eb:cb:65:10:19:9a:47:13:da:17:ea: 8c:31:39:54:3f:a9:52:1e:58:da:9b:4a:22:5a:24:65:a3:a7: 6f:46:2c:17 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBHzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 Mjc2OTExMC8GA1UEBRMoOUVENTY0MjlEMUFFOUY2MDA0RkI2RkI2Nzg4RTkzRkFG NjIyNTc1OTAeFw0yNTA4MDkwODI1MzhaFw0yNTA4MTYwODI1MzhaMBgxFjAUBgNV BAMTDTY4OTcwNjAyLWMzMDEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDD0p1h7BgnmPegMANQRA6/W02FdCXHtDyzpqI9yTGYjI1asFBsJEGyKBIgGqUj KIpWM2UYoJkBoO/7i1tMzAT2pjzAiowKwdrQff0bR2dIALTv6VvC632IiV2rsNZN Idfs5fHd4b1nk5F8oJ7hmNeT5WEKiJdiFkpvKISlN1UPcp1+QCVYg7uof7o66jiC 1bgPm5+7f5x/bdfb6vjStkT4wFfUWt9/v+27D9HqI2ZZNYuBMp5aj1SBk7evJOHS 2navyMglvtJfA1EJhj1Lq0hyQnUEeLVMIM70wOAinZzNTcbEhd1wF3k1wFK2WoXN WJyhgpS2aj6AWh4VZMB1kkndAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUx9Wt2CrP arRFhkPDA5HtWadZbFowHwYDVR0jBBgwFoAUntVkKdGun2AE+2+2eI6T+vYiV1kw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQyNzY5LzQ2QkQ1NUMyNEI4 RDExRjBBM0Y0RkYzRkM0RjlBRTAyL250VmtLZEd1bjJBRS0yLTJlSTZULXZZaVYx ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvbnRWa0tkR3VuMkFFLTItMmVJNlQtdllpVjFrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQy NzY5LzQ2QkQ1NUMyNEI4RDExRjBBM0Y0RkYzRkM0RjlBRTAyL250VmtLZEd1bjJB RS0yLTJlSTZULXZZaVYxay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAI0TpTkxC91xqw3lbg9m/uGNG6t7rAlSXV3HyYp7luX+XRMme4YNX/jF pdfLWRqUQwh8ZJ2VQG7zlJt/+n7Dk7QitBYqlWeh83NUgAp8YKoJ0xrXFc9af57A 46DdN8F7Bk/cH144THQpY8zqTNIXq0Qn5I4AHxQbTz7K8xl1E+wQISbUijhyuNfE 8hWJeLwVIL3TmzJdYMBOzqJlZfHMST0V0FzRiNjaWkIDvfs4WIWZwkoPegAqP38v hWdStlfSwDUBIQDXhv60L5nKkyCdnfFm60o9STt2nH+5EeRxLlrry2UQGZpHE9oX 6owxOVQ/qVIeWNqbSiJaJGWjp29GLBc= -----END CERTIFICATE-----Generated at Sun Aug 10 16:00:41 2025 by rpki-client