$ rpki-client -vvf rpki.apnic.net/member_repository/A915517D/3D7A6286CF5611E7BF695510C4F9AE02/NEp3XiRcztCAx5UhWW4yyPBtiMg.mft File: NEp3XiRcztCAx5UhWW4yyPBtiMg.mft (raw, json) Hash identifier: rmwE5WUWv5c5uS3QJ4emnsKVzEgTFqRqynUuUITNOwk= Subject key identifier: 2C:9A:D7:09:A8:4B:D2:20:EE:78:DB:81:26:AD:35:2A:31:9D:6E:EC Authority key identifier: 34:4A:77:5E:24:5C:CE:D0:80:C7:95:21:59:6E:32:C8:F0:6D:88:C8 Certificate issuer: /CN=A915517D/serialNumber=344A775E245CCED080C79521596E32C8F06D88C8 Certificate serial: 17C7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NEp3XiRcztCAx5UhWW4yyPBtiMg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915517D/3D7A6286CF5611E7BF695510C4F9AE02/NEp3XiRcztCAx5UhWW4yyPBtiMg.mft Manifest number: 17B2 Signing time: Fri 08 Aug 2025 16:44:33 +0000 Manifest this update: Fri 08 Aug 2025 16:44:33 +0000 Manifest next update: Fri 15 Aug 2025 16:44:33 +0000 Files and hashes: 1: NEp3XiRcztCAx5UhWW4yyPBtiMg.crl (hash: G6KC5RdC8lzxgzRfuD5HCh1S28W4wB5fi4r1sXRfhb0=) 2: 2F840DD2740911EDA7146F2DC4F9AE02.roa (hash: PKyy2enQZwJAPAGB65CItDAb1Yve/y7L5I1YK7Ph1yU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915517D/3D7A6286CF5611E7BF695510C4F9AE02/NEp3XiRcztCAx5UhWW4yyPBtiMg.crl rsync://rpki.apnic.net/member_repository/A915517D/3D7A6286CF5611E7BF695510C4F9AE02/NEp3XiRcztCAx5UhWW4yyPBtiMg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NEp3XiRcztCAx5UhWW4yyPBtiMg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6087 (0x17c7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915517D, serialNumber=344A775E245CCED080C79521596E32C8F06D88C8 Validity Not Before: Aug 8 16:44:33 2025 GMT Not After : Aug 15 16:44:33 2025 GMT Subject: CN=68962971-1e1b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:e3:fb:54:65:df:c7:73:90:5b:08:39:f5:1c: 1a:c5:cd:a6:41:e1:17:23:e9:7f:bf:22:ee:74:75: 6e:ca:d0:cb:da:ea:e7:14:a0:0e:6c:ca:3b:6f:ea: d2:ea:62:94:22:b9:bb:85:b1:a9:ba:cc:3b:3f:f0: c0:2b:d7:da:13:66:69:eb:ba:d8:f5:28:03:0f:4d: 8e:a4:36:74:de:31:ed:7f:58:78:18:8a:9c:91:10: 67:a8:d8:4a:19:50:f3:7d:ef:4a:d7:ed:00:60:18: 86:a4:24:9d:1f:62:8e:17:d0:31:fa:6f:ee:92:01: e2:d2:a5:7a:58:68:c3:7f:df:8f:f6:a9:88:cc:b7: fb:f4:bf:4b:ab:77:40:52:39:ce:98:6c:98:c2:eb: 55:1e:60:1c:a6:68:bb:bc:c0:4c:00:5f:e1:14:32: e4:6b:e2:21:38:73:93:07:cc:e0:bf:bf:54:8a:0c: ad:dc:39:56:8b:0c:23:fb:5b:1d:53:d4:93:ea:7a: 6c:6b:0b:b2:c1:0f:90:96:e8:6c:1e:4a:30:7f:c8: 5b:61:28:3f:64:cb:4e:51:ea:3e:25:41:8a:0e:ea: 1f:d6:2b:ed:14:c0:7d:38:b9:91:de:f9:2b:c7:42: 72:9a:8a:8d:f9:1e:6d:b9:ff:34:49:b6:08:90:dc: c3:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:9A:D7:09:A8:4B:D2:20:EE:78:DB:81:26:AD:35:2A:31:9D:6E:EC X509v3 Authority Key Identifier: keyid:34:4A:77:5E:24:5C:CE:D0:80:C7:95:21:59:6E:32:C8:F0:6D:88:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915517D/3D7A6286CF5611E7BF695510C4F9AE02/NEp3XiRcztCAx5UhWW4yyPBtiMg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NEp3XiRcztCAx5UhWW4yyPBtiMg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915517D/3D7A6286CF5611E7BF695510C4F9AE02/NEp3XiRcztCAx5UhWW4yyPBtiMg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 60:47:11:62:8e:ef:ff:34:6c:d0:69:5b:e4:7b:b7:89:92:80: 0f:50:cf:51:03:41:22:7b:00:6d:ea:3d:fa:87:bc:fb:fb:08: 90:0b:2d:be:6d:16:5c:c4:3f:c5:fc:60:eb:13:e1:8a:68:e8: 55:bb:c5:1b:cb:20:72:f2:77:a8:d5:2b:cd:7f:e1:6f:de:55: d9:ef:73:2f:20:d8:0b:36:b4:c1:b6:b2:43:22:b3:77:96:e7: 15:75:54:3c:46:80:f6:84:e8:3a:c2:2d:0d:bb:f9:1f:32:f8: 95:fe:db:c8:18:ed:63:1f:53:0c:88:3b:85:35:0f:24:54:b8: e7:a5:e3:2e:45:d0:d2:2c:91:b5:b7:1d:78:c8:b5:8c:04:3d: 0c:62:f4:96:87:9d:db:f8:0f:9f:dc:16:8a:4a:69:ae:46:8b: 60:32:e6:fc:63:1f:62:b9:68:74:09:c5:9f:32:36:5b:14:2d: b3:31:87:d1:c6:0b:da:e7:ff:9f:b2:36:f7:0b:2e:f0:b8:7c: 8b:c9:77:f0:1a:7b:6b:7f:e6:1c:3a:16:c8:a2:6d:b3:3e:e4: 88:7f:a4:ee:61:6d:b6:ce:28:89:da:7d:dd:75:ba:8e:66:ce: 1c:e6:a5:1f:f5:d1:21:5e:1b:a0:f0:83:cf:b1:5a:76:cc:81: b6:21:be:03 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICF8cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTUxN0QxMTAvBgNVBAUTKDM0NEE3NzVFMjQ1Q0NFRDA4MEM3OTUyMTU5NkUzMkM4 RjA2RDg4QzgwHhcNMjUwODA4MTY0NDMzWhcNMjUwODE1MTY0NDMzWjAYMRYwFAYD VQQDEw02ODk2Mjk3MS0xZTFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxeP7VGXfx3OQWwg59Rwaxc2mQeEXI+l/vyLudHVuytDL2urnFKAObMo7b+rS 6mKUIrm7hbGpusw7P/DAK9faE2Zp67rY9SgDD02OpDZ03jHtf1h4GIqckRBnqNhK GVDzfe9K1+0AYBiGpCSdH2KOF9Ax+m/ukgHi0qV6WGjDf9+P9qmIzLf79L9Lq3dA UjnOmGyYwutVHmAcpmi7vMBMAF/hFDLka+IhOHOTB8zgv79Uigyt3DlWiwwj+1sd U9ST6npsawuywQ+QluhsHkowf8hbYSg/ZMtOUeo+JUGKDuof1ivtFMB9OLmR3vkr x0JymoqN+R5tuf80SbYIkNzDQwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCya1wmo S9Ig7njbgSatNSoxnW7sMB8GA1UdIwQYMBaAFDRKd14kXM7QgMeVIVluMsjwbYjI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NTE3RC8zRDdBNjI4NkNG NTYxMUU3QkY2OTU1MTBDNEY5QUUwMi9ORXAzWGlSY3p0Q0F4NVVoV1c0eXlQQnRp TWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05FcDNYaVJjenRDQXg1VWhXVzR5eVBCdGlNZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NTE3RC8zRDdBNjI4NkNGNTYxMUU3QkY2OTU1MTBDNEY5QUUwMi9ORXAzWGlSY3p0 Q0F4NVVoV1c0eXlQQnRpTWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBgRxFiju//NGzQaVvke7eJkoAPUM9RA0EiewBt6j36h7z7+wiQCy2+ bRZcxD/F/GDrE+GKaOhVu8UbyyBy8neo1SvNf+Fv3lXZ73MvINgLNrTBtrJDIrN3 lucVdVQ8RoD2hOg6wi0Nu/kfMviV/tvIGO1jH1MMiDuFNQ8kVLjnpeMuRdDSLJG1 tx14yLWMBD0MYvSWh53b+A+f3BaKSmmuRotgMub8Yx9iuWh0CcWfMjZbFC2zMYfR xgva5/+fsjb3Cy7wuHyLyXfwGntrf+YcOhbIom2zPuSIf6TuYW22ziiJ2n3ddbqO Zs4c5qUf9dEhXhug8IPPsVp2zIG2Ib4D -----END CERTIFICATE-----Generated at Sun Aug 10 16:03:55 2025 by rpki-client