$ rpki-client -vvf rpki.apnic.net/member_repository/A914E01E/C5C6F05E9EA611EC8FB03654C4F9AE02/nlcX9fFLsp9ntXrX2dXweRWunEM.mft File: nlcX9fFLsp9ntXrX2dXweRWunEM.mft (raw, json) Hash identifier: 36H5C2Z0QoT5WKdagpx+jL5MCfVZ1h4cU24UAX6gC0k= Subject key identifier: BC:5E:D6:03:9C:DE:A8:69:ED:2C:F6:14:7F:DC:CC:20:0A:BB:64:68 Authority key identifier: 9E:57:17:F5:F1:4B:B2:9F:67:B5:7A:D7:D9:D5:F0:79:15:AE:9C:43 Certificate issuer: /CN=A914E01E/serialNumber=9E5717F5F14BB29F67B57AD7D9D5F07915AE9C43 Certificate serial: 03BC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nlcX9fFLsp9ntXrX2dXweRWunEM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914E01E/C5C6F05E9EA611EC8FB03654C4F9AE02/nlcX9fFLsp9ntXrX2dXweRWunEM.mft Manifest number: 03B7 Signing time: Sat 09 Aug 2025 01:12:27 +0000 Manifest this update: Sat 09 Aug 2025 01:12:26 +0000 Manifest next update: Sat 16 Aug 2025 01:12:26 +0000 Files and hashes: 1: nlcX9fFLsp9ntXrX2dXweRWunEM.crl (hash: OvZNr1t9eNtEb71GKw7zqxtOMgvtMJYxzQ4x3IbNUYg=) 2: B775BD7A9EA911EC95EBD87CC4F9AE02.roa (hash: l5UPW8luctznfhC7jBJpvRQP7pkTfMgJK+ognjXHfwk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914E01E/C5C6F05E9EA611EC8FB03654C4F9AE02/nlcX9fFLsp9ntXrX2dXweRWunEM.crl rsync://rpki.apnic.net/member_repository/A914E01E/C5C6F05E9EA611EC8FB03654C4F9AE02/nlcX9fFLsp9ntXrX2dXweRWunEM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nlcX9fFLsp9ntXrX2dXweRWunEM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 956 (0x3bc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914E01E, serialNumber=9E5717F5F14BB29F67B57AD7D9D5F07915AE9C43 Validity Not Before: Aug 9 01:12:26 2025 GMT Not After : Aug 16 01:12:26 2025 GMT Subject: CN=6896a07a-b8d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:f1:11:3a:1d:9b:3c:17:37:b6:94:33:22:e3: 2f:29:77:84:41:0b:46:29:48:52:86:89:4a:72:28: 18:ec:1a:8d:63:70:e4:01:4e:85:22:d1:87:d0:e0: cd:9f:45:7a:74:34:53:b0:16:00:3b:b3:50:85:f6: ce:c9:d5:5f:5b:47:dc:da:94:ad:72:6c:8b:9d:16: ab:57:ee:e6:be:44:dd:9b:2e:44:9e:75:cc:39:7c: 07:05:61:52:5e:2d:fa:6d:fd:d0:16:9b:7c:4b:91: 6d:a3:c7:fa:83:81:d4:29:32:9a:e0:b1:8d:b3:41: bb:0a:6d:4e:cf:38:97:6b:d1:6f:94:f3:ca:63:48: 58:ca:44:7a:5f:c8:6e:43:79:d5:94:12:5b:7c:82: 25:49:f3:8e:bc:38:f5:63:c6:e5:77:af:47:6b:2d: 90:d7:93:f8:eb:5a:e7:cf:67:74:ca:7d:03:7c:ef: f2:b3:12:17:2a:34:94:6b:f4:07:3b:d8:39:38:0e: 32:55:9c:c9:be:e6:e7:70:76:01:61:f1:ad:a0:2a: 1c:71:45:ee:24:6f:29:07:d3:51:43:53:dc:5c:8f: 29:d6:ef:2c:ce:19:da:ca:3e:56:6b:51:cd:60:ed: 5b:87:70:42:69:db:38:7d:ca:11:0f:59:af:75:3e: 08:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:5E:D6:03:9C:DE:A8:69:ED:2C:F6:14:7F:DC:CC:20:0A:BB:64:68 X509v3 Authority Key Identifier: keyid:9E:57:17:F5:F1:4B:B2:9F:67:B5:7A:D7:D9:D5:F0:79:15:AE:9C:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914E01E/C5C6F05E9EA611EC8FB03654C4F9AE02/nlcX9fFLsp9ntXrX2dXweRWunEM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nlcX9fFLsp9ntXrX2dXweRWunEM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E01E/C5C6F05E9EA611EC8FB03654C4F9AE02/nlcX9fFLsp9ntXrX2dXweRWunEM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7c:b3:df:af:9e:8f:c0:05:02:fd:e9:f5:44:b0:9c:ed:6d:5c: 6c:1c:81:08:6b:6d:38:33:a8:1a:38:2d:ab:1d:36:8e:fe:2f: ce:a0:29:c9:bf:f9:61:5d:d7:ef:cc:f7:48:e2:61:c4:61:a8: f4:a5:9e:c7:75:51:56:87:f8:18:76:eb:1a:71:67:09:c6:9c: bf:e2:65:6b:f8:43:ab:86:76:22:33:f6:40:bd:4d:17:b9:5d: ae:9a:7a:50:3d:10:87:d3:0a:58:80:12:db:83:5e:1a:24:1f: 70:79:24:58:1a:1a:85:8b:e4:37:27:19:19:df:fa:53:69:f9: 2c:68:1d:39:9b:db:22:01:c0:b9:b6:59:fe:7e:4b:5f:60:9e: a8:a8:a3:a3:2c:49:d7:c9:a9:06:66:20:2c:d7:90:fd:b8:24: 9f:a5:a4:e4:e6:19:fe:88:50:a6:ff:94:b4:b6:40:16:bf:d4: 2a:12:ea:d5:39:cb:36:e9:2c:6c:43:e2:dc:ce:35:85:5a:56: dd:0c:f3:f3:79:25:3c:fd:e5:92:ec:5d:d8:dd:06:5b:a9:f9: 0a:ed:94:c3:23:12:da:58:b4:6e:7a:ca:68:76:4e:ba:56:1c: 54:5a:d8:78:50:a3:86:8b:d6:40:f8:8f:de:66:05:23:f9:d5: 03:ab:cd:51 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA7wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEUwMUUxMTAvBgNVBAUTKDlFNTcxN0Y1RjE0QkIyOUY2N0I1N0FEN0Q5RDVGMDc5 MTVBRTlDNDMwHhcNMjUwODA5MDExMjI2WhcNMjUwODE2MDExMjI2WjAYMRYwFAYD VQQDEw02ODk2YTA3YS1iOGQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzPEROh2bPBc3tpQzIuMvKXeEQQtGKUhSholKcigY7BqNY3DkAU6FItGH0ODN n0V6dDRTsBYAO7NQhfbOydVfW0fc2pStcmyLnRarV+7mvkTdmy5EnnXMOXwHBWFS Xi36bf3QFpt8S5Fto8f6g4HUKTKa4LGNs0G7Cm1OzziXa9FvlPPKY0hYykR6X8hu Q3nVlBJbfIIlSfOOvDj1Y8bld69Hay2Q15P461rnz2d0yn0DfO/ysxIXKjSUa/QH O9g5OA4yVZzJvubncHYBYfGtoCoccUXuJG8pB9NRQ1PcXI8p1u8szhnayj5Wa1HN YO1bh3BCads4fcoRD1mvdT4I2wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLxe1gOc 3qhp7Sz2FH/czCAKu2RoMB8GA1UdIwQYMBaAFJ5XF/XxS7KfZ7V619nV8HkVrpxD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RTAxRS9DNUM2RjA1RTlF QTYxMUVDOEZCMDM2NTRDNEY5QUUwMi9ubGNYOWZGTHNwOW50WHJYMmRYd2VSV3Vu RU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25sY1g5ZkZMc3A5bnRYclgyZFh3ZVJXdW5FTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RTAxRS9DNUM2RjA1RTlFQTYxMUVDOEZCMDM2NTRDNEY5QUUwMi9ubGNYOWZGTHNw OW50WHJYMmRYd2VSV3VuRU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB8s9+vno/ABQL96fVEsJztbVxsHIEIa204M6gaOC2rHTaO/i/OoCnJ v/lhXdfvzPdI4mHEYaj0pZ7HdVFWh/gYdusacWcJxpy/4mVr+EOrhnYiM/ZAvU0X uV2umnpQPRCH0wpYgBLbg14aJB9weSRYGhqFi+Q3JxkZ3/pTafksaB05m9siAcC5 tln+fktfYJ6oqKOjLEnXyakGZiAs15D9uCSfpaTk5hn+iFCm/5S0tkAWv9QqEurV Ocs26SxsQ+LczjWFWlbdDPPzeSU8/eWS7F3Y3QZbqfkK7ZTDIxLaWLRuespodk66 VhxUWth4UKOGi9ZA+I/eZgUj+dUDq81R -----END CERTIFICATE-----Generated at Sat Aug 9 23:18:01 2025 by rpki-client