$ rpki-client -vvf rpki.apnic.net/member_repository/A916714C/3FED6608DFEC11EB8F704D12C4F9AE02/NT5Ih1N2xtuX40JjZcx_GMlFaHc.mft File: NT5Ih1N2xtuX40JjZcx_GMlFaHc.mft (raw, json) Hash identifier: w1NT4KVp+uR3NICuTXmHS26aTc0CnzsVWn7LoEWGyAU= Subject key identifier: 5C:63:D7:12:02:06:3F:61:C8:57:68:22:36:EC:3A:AF:5F:9A:FA:F7 Authority key identifier: 35:3E:48:87:53:76:C6:DB:97:E3:42:63:65:CC:7F:18:C9:45:68:77 Certificate issuer: /CN=A916714C/serialNumber=353E48875376C6DB97E3426365CC7F18C9456877 Certificate serial: 059F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NT5Ih1N2xtuX40JjZcx_GMlFaHc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916714C/3FED6608DFEC11EB8F704D12C4F9AE02/NT5Ih1N2xtuX40JjZcx_GMlFaHc.mft Manifest number: 0599 Signing time: Fri 08 Aug 2025 23:39:56 +0000 Manifest this update: Fri 08 Aug 2025 23:39:55 +0000 Manifest next update: Fri 15 Aug 2025 23:39:55 +0000 Files and hashes: 1: NT5Ih1N2xtuX40JjZcx_GMlFaHc.crl (hash: HkXJoAjMYCx4+Cq06Z4fGD4CsoZirKpcDdRN/2uZ9aE=) 2: E50353FEDFED11EBA155C712C4F9AE02.roa (hash: IIVlt7G/+5szlJKKwOxccwy55c5N2K1rqxgqpnj4uFE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916714C/3FED6608DFEC11EB8F704D12C4F9AE02/NT5Ih1N2xtuX40JjZcx_GMlFaHc.crl rsync://rpki.apnic.net/member_repository/A916714C/3FED6608DFEC11EB8F704D12C4F9AE02/NT5Ih1N2xtuX40JjZcx_GMlFaHc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NT5Ih1N2xtuX40JjZcx_GMlFaHc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1439 (0x59f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916714C, serialNumber=353E48875376C6DB97E3426365CC7F18C9456877 Validity Not Before: Aug 8 23:39:55 2025 GMT Not After : Aug 15 23:39:55 2025 GMT Subject: CN=68968acb-6262 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:4a:ed:7d:f7:67:3e:1b:d6:f3:9a:02:d5:7d: f7:18:15:d8:2e:de:f4:f5:69:50:ec:41:72:55:a8: aa:4d:a3:ad:1b:c9:8f:5b:c9:3d:61:31:7d:f1:98: 62:80:bf:2a:2d:32:8d:08:72:df:d2:59:e7:12:50: be:a1:f8:e3:06:60:c9:11:13:e0:88:85:4e:c7:63: ed:fc:2d:3b:d9:5b:ca:bb:c1:0c:aa:27:61:2e:26: 4d:14:8d:91:c9:8e:30:97:45:50:17:ad:a2:d3:26: f0:0a:b7:67:1b:e2:fd:4e:52:da:8f:9d:65:83:1b: 6a:d0:19:dd:c3:81:a5:8a:1a:98:a7:bd:2c:bb:7a: c0:69:94:e4:9f:31:6e:9f:f2:9a:de:ae:1f:c0:de: 9a:f6:38:74:4c:5e:22:f5:9b:5a:96:6a:3f:54:df: 7d:fd:1b:eb:e2:da:00:06:45:87:cb:9f:a2:15:f1: be:64:5e:f8:89:90:78:f5:fe:66:99:ac:43:f2:90: 4c:56:b7:1a:d9:2d:54:7f:d4:a4:b2:32:9f:0b:46: 81:bd:c9:1b:a0:8e:6a:56:f6:ca:13:27:6e:18:fb: 33:f6:da:6b:68:10:84:37:72:ac:f8:8d:da:c4:a5: 4b:2d:f6:91:2c:f0:7e:a0:72:72:10:15:f9:59:90: 28:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:63:D7:12:02:06:3F:61:C8:57:68:22:36:EC:3A:AF:5F:9A:FA:F7 X509v3 Authority Key Identifier: keyid:35:3E:48:87:53:76:C6:DB:97:E3:42:63:65:CC:7F:18:C9:45:68:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916714C/3FED6608DFEC11EB8F704D12C4F9AE02/NT5Ih1N2xtuX40JjZcx_GMlFaHc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NT5Ih1N2xtuX40JjZcx_GMlFaHc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916714C/3FED6608DFEC11EB8F704D12C4F9AE02/NT5Ih1N2xtuX40JjZcx_GMlFaHc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 45:bd:3c:f4:15:c1:4e:b7:d7:dc:04:37:0f:bc:a3:35:2c:f1: 09:ac:bd:c6:d6:9f:91:bd:2a:d5:36:46:63:71:47:2b:65:f1: bc:9b:1e:47:e6:41:6a:43:f0:e2:41:e9:f1:9e:10:f3:9d:c8: 4e:63:b1:85:e7:68:27:90:fe:71:97:f8:ae:1a:4c:dc:dd:fa: 9d:a2:77:44:1a:d3:fb:96:66:73:30:d3:4b:4c:0e:66:aa:8e: 44:67:38:1d:56:b7:ba:d9:76:75:29:e4:ae:7c:b4:d6:fd:ed: 02:a7:26:b7:8b:78:b7:85:c6:d2:d2:01:05:55:ee:71:6d:12: 3d:3b:c6:ea:bd:c9:3a:1c:bd:99:8b:9e:60:96:45:14:b7:37: a0:c8:c4:fd:bd:37:d1:de:a3:40:a4:2c:41:91:35:2c:e1:b3: a8:72:86:e1:67:f1:ee:59:36:99:9b:d3:8e:b9:df:66:e3:38: 56:d6:cf:33:22:fe:f6:ba:71:e8:ce:c0:7a:ce:71:01:fe:b7: ef:a3:bd:85:2a:cc:73:2e:a3:d0:16:d7:4a:2e:f6:81:76:74: 51:43:49:cf:40:c8:b0:4e:60:84:b0:de:81:3e:63:cf:fc:2c: 3a:18:ad:37:b2:ea:11:24:c3:99:11:83:30:4d:20:24:e7:85: 0d:3d:b9:fc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBZ8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjcxNEMxMTAvBgNVBAUTKDM1M0U0ODg3NTM3NkM2REI5N0UzNDI2MzY1Q0M3RjE4 Qzk0NTY4NzcwHhcNMjUwODA4MjMzOTU1WhcNMjUwODE1MjMzOTU1WjAYMRYwFAYD VQQDEw02ODk2OGFjYi02MjYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz0rtffdnPhvW85oC1X33GBXYLt709WlQ7EFyVaiqTaOtG8mPW8k9YTF98Zhi gL8qLTKNCHLf0lnnElC+ofjjBmDJERPgiIVOx2Pt/C072VvKu8EMqidhLiZNFI2R yY4wl0VQF62i0ybwCrdnG+L9TlLaj51lgxtq0Bndw4GlihqYp70su3rAaZTknzFu n/Ka3q4fwN6a9jh0TF4i9Ztalmo/VN99/Rvr4toABkWHy5+iFfG+ZF74iZB49f5m maxD8pBMVrca2S1Uf9SksjKfC0aBvckboI5qVvbKEyduGPsz9tpraBCEN3Ks+I3a xKVLLfaRLPB+oHJyEBX5WZAocQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFxj1xIC Bj9hyFdoIjbsOq9fmvr3MB8GA1UdIwQYMBaAFDU+SIdTdsbbl+NCY2XMfxjJRWh3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NzE0Qy8zRkVENjYwOERG RUMxMUVCOEY3MDREMTJDNEY5QUUwMi9OVDVJaDFOMnh0dVg0MEpqWmN4X0dNbEZh SGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05UNUloMU4yeHR1WDQwSmpaY3hfR01sRmFIYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NzE0Qy8zRkVENjYwOERGRUMxMUVCOEY3MDREMTJDNEY5QUUwMi9OVDVJaDFOMnh0 dVg0MEpqWmN4X0dNbEZhSGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBFvTz0FcFOt9fcBDcPvKM1LPEJrL3G1p+RvSrVNkZjcUcrZfG8mx5H 5kFqQ/DiQenxnhDznchOY7GF52gnkP5xl/iuGkzc3fqdondEGtP7lmZzMNNLTA5m qo5EZzgdVre62XZ1KeSufLTW/e0Cpya3i3i3hcbS0gEFVe5xbRI9O8bqvck6HL2Z i55glkUUtzegyMT9vTfR3qNApCxBkTUs4bOocobhZ/HuWTaZm9OOud9m4zhW1s8z Iv72unHozsB6znEB/rfvo72FKsxzLqPQFtdKLvaBdnRRQ0nPQMiwTmCEsN6BPmPP /Cw6GK03suoRJMOZEYMwTSAk54UNPbn8 -----END CERTIFICATE-----Generated at Sat Aug 9 05:51:59 2025 by rpki-client