$ rpki-client -vvf rpki.apnic.net/member_repository/A914DC56/CDBCF63A669311EE98CEAA50C4F9AE02/nmoKpDnP40ewT3RoQKbkNMUJsac.mft File: nmoKpDnP40ewT3RoQKbkNMUJsac.mft (raw, json) Hash identifier: wmfJ6pv2505oSUaes7lAFex46ktUsk4ZN1I+tsOVgH8= Subject key identifier: BB:CC:C7:53:55:CE:48:24:57:88:6A:35:5E:4F:1A:70:DD:F9:90:F0 Authority key identifier: 9E:6A:0A:A4:39:CF:E3:47:B0:4F:74:68:40:A6:E4:34:C5:09:B1:A7 Certificate issuer: /CN=A914DC56/serialNumber=9E6A0AA439CFE347B04F746840A6E434C509B1A7 Certificate serial: 015D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nmoKpDnP40ewT3RoQKbkNMUJsac.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914DC56/CDBCF63A669311EE98CEAA50C4F9AE02/nmoKpDnP40ewT3RoQKbkNMUJsac.mft Manifest number: 015A Signing time: Sat 09 Aug 2025 04:27:57 +0000 Manifest this update: Sat 09 Aug 2025 04:27:57 +0000 Manifest next update: Sat 16 Aug 2025 04:27:57 +0000 Files and hashes: 1: nmoKpDnP40ewT3RoQKbkNMUJsac.crl (hash: gByw5i4qI4soy5TRtsdFy9QQnG4BGpAkBcNSbhNzT+c=) 2: 11A843B467D811EEA0543B5CC4F9AE02.roa (hash: JGrxdfcTXN7WXmiB33mKDnWSPFdrh+A/TvrelqjBL5s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914DC56/CDBCF63A669311EE98CEAA50C4F9AE02/nmoKpDnP40ewT3RoQKbkNMUJsac.crl rsync://rpki.apnic.net/member_repository/A914DC56/CDBCF63A669311EE98CEAA50C4F9AE02/nmoKpDnP40ewT3RoQKbkNMUJsac.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nmoKpDnP40ewT3RoQKbkNMUJsac.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 349 (0x15d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914DC56, serialNumber=9E6A0AA439CFE347B04F746840A6E434C509B1A7 Validity Not Before: Aug 9 04:27:57 2025 GMT Not After : Aug 16 04:27:57 2025 GMT Subject: CN=6896ce4d-0251 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:99:10:f4:61:41:46:03:54:c4:62:a7:3e:2e: ab:dc:25:bc:4b:3e:bc:02:6c:15:37:62:15:92:4b: 65:71:71:4f:51:4c:e6:29:44:9c:65:08:fc:a6:15: 51:5b:c2:b1:84:b5:a6:2b:13:04:ac:c1:3e:28:c4: 8d:03:74:8e:40:32:09:a8:ec:9a:7e:ab:e0:c2:30: 13:98:4a:09:ad:84:79:5d:42:39:ab:bc:10:50:4c: 43:cf:6a:87:03:3a:4f:9c:6d:15:12:65:79:f3:97: d7:05:64:77:47:8f:34:4f:ae:aa:94:58:62:a4:d6: 7d:b0:22:5a:a5:7e:a0:d6:c6:cd:07:ad:24:6d:f7: b1:16:ce:65:a8:62:f9:88:e6:0c:1d:26:77:5e:d6: 20:5f:4a:ed:c2:09:e0:5f:61:b3:2b:8a:9d:6e:90: ff:04:59:66:79:9b:d3:57:10:d7:5d:3f:bf:3d:08: 4f:42:a4:e8:36:a5:e2:02:69:f8:a7:e9:c7:d2:ce: c5:c1:ab:93:c3:f9:86:4a:a9:d5:2e:fe:ba:4b:5e: df:fa:74:86:42:2d:2f:36:89:cc:7c:0d:e8:90:03: 32:5a:fa:92:9e:77:b7:ff:2b:31:86:2a:1d:47:31: b0:9d:2d:16:78:65:92:80:56:f6:6f:23:11:45:93: 45:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:CC:C7:53:55:CE:48:24:57:88:6A:35:5E:4F:1A:70:DD:F9:90:F0 X509v3 Authority Key Identifier: keyid:9E:6A:0A:A4:39:CF:E3:47:B0:4F:74:68:40:A6:E4:34:C5:09:B1:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914DC56/CDBCF63A669311EE98CEAA50C4F9AE02/nmoKpDnP40ewT3RoQKbkNMUJsac.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nmoKpDnP40ewT3RoQKbkNMUJsac.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914DC56/CDBCF63A669311EE98CEAA50C4F9AE02/nmoKpDnP40ewT3RoQKbkNMUJsac.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 92:dd:65:6f:14:fe:94:1d:40:cf:e8:e5:38:0c:5d:2e:53:be: ae:36:7e:ea:26:89:c6:72:59:de:86:9b:62:ee:ad:1b:3b:38: b7:8f:d0:a3:fe:ea:ac:be:84:10:b6:d8:01:4b:e9:58:6d:1a: d2:be:e5:46:ea:5d:ce:f5:0d:9d:8e:e0:37:38:5d:1f:bc:98: 53:64:34:82:73:19:0c:0f:81:41:38:c5:bb:ea:09:b4:8e:ee: 66:4a:41:b7:ae:e9:7b:36:fd:30:b8:8e:c3:d5:53:21:ce:e5: ff:2c:55:84:de:c2:59:bf:e2:10:80:60:12:60:23:d0:de:1c: 34:f3:ce:a5:f1:c0:ec:d4:38:0e:05:ad:5a:2b:ba:bc:8b:f8: 66:a3:89:54:fc:6d:2f:16:08:1d:62:88:57:85:90:ec:70:fd: cd:4d:90:db:4a:da:84:49:e2:95:32:2a:ae:15:f6:88:69:c3: 62:a4:11:6a:22:e2:6e:42:e8:05:58:b3:89:d6:04:58:89:ab: ad:f5:be:da:5b:0e:a7:3d:d4:87:45:0a:f6:b8:f3:19:81:fa: ee:b0:fe:42:50:5b:9f:e4:82:aa:1f:c1:bc:af:a4:63:84:1c: da:9e:c7:cb:a3:d2:fc:9f:08:80:5a:74:01:9e:1b:46:6d:b8: a2:81:01:79 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAV0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NERDNTYxMTAvBgNVBAUTKDlFNkEwQUE0MzlDRkUzNDdCMDRGNzQ2ODQwQTZFNDM0 QzUwOUIxQTcwHhcNMjUwODA5MDQyNzU3WhcNMjUwODE2MDQyNzU3WjAYMRYwFAYD VQQDEw02ODk2Y2U0ZC0wMjUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0pkQ9GFBRgNUxGKnPi6r3CW8Sz68AmwVN2IVkktlcXFPUUzmKUScZQj8phVR W8KxhLWmKxMErME+KMSNA3SOQDIJqOyafqvgwjATmEoJrYR5XUI5q7wQUExDz2qH AzpPnG0VEmV585fXBWR3R480T66qlFhipNZ9sCJapX6g1sbNB60kbfexFs5lqGL5 iOYMHSZ3XtYgX0rtwgngX2GzK4qdbpD/BFlmeZvTVxDXXT+/PQhPQqToNqXiAmn4 p+nH0s7FwauTw/mGSqnVLv66S17f+nSGQi0vNonMfA3okAMyWvqSnne3/ysxhiod RzGwnS0WeGWSgFb2byMRRZNFgwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLvMx1NV zkgkV4hqNV5PGnDd+ZDwMB8GA1UdIwQYMBaAFJ5qCqQ5z+NHsE90aECm5DTFCbGn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0REM1Ni9DREJDRjYzQTY2 OTMxMUVFOThDRUFBNTBDNEY5QUUwMi9ubW9LcERuUDQwZXdUM1JvUUtia05NVUpz YWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25tb0twRG5QNDBld1QzUm9RS2JrTk1VSnNhYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 REM1Ni9DREJDRjYzQTY2OTMxMUVFOThDRUFBNTBDNEY5QUUwMi9ubW9LcERuUDQw ZXdUM1JvUUtia05NVUpzYWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCS3WVvFP6UHUDP6OU4DF0uU76uNn7qJonGclnehpti7q0bOzi3j9Cj /uqsvoQQttgBS+lYbRrSvuVG6l3O9Q2djuA3OF0fvJhTZDSCcxkMD4FBOMW76gm0 ju5mSkG3rul7Nv0wuI7D1VMhzuX/LFWE3sJZv+IQgGASYCPQ3hw0886l8cDs1DgO Ba1aK7q8i/hmo4lU/G0vFggdYohXhZDscP3NTZDbStqESeKVMiquFfaIacNipBFq IuJuQugFWLOJ1gRYiaut9b7aWw6nPdSHRQr2uPMZgfrusP5CUFuf5IKqH8G8r6Rj hBzansfLo9L8nwiAWnQBnhtGbbiigQF5 -----END CERTIFICATE-----Generated at Sat Aug 9 23:16:51 2025 by rpki-client