$ rpki-client -vvf rpki.apnic.net/member_repository/A917C422/3E745368ED5511E38072C57E5911EA32/NUOeC_NciIu4TRsk7N5wYM90TpE.mft File: NUOeC_NciIu4TRsk7N5wYM90TpE.mft (raw, json) Hash identifier: BOaZl6S26V2S4DIz29ADW76SZ4QJwWtgVbWRFXTBnvs= Subject key identifier: E4:83:D6:D8:B8:F4:7B:28:E4:F3:3C:42:02:09:03:3C:D6:05:F3:2F Authority key identifier: 35:43:9E:0B:F3:5C:88:8B:B8:4D:1B:24:EC:DE:70:60:CF:74:4E:91 Certificate issuer: /CN=A917C422/serialNumber=35439E0BF35C888BB84D1B24ECDE7060CF744E91 Certificate serial: 2B93 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/NUOeC_NciIu4TRsk7N5wYM90TpE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917C422/3E745368ED5511E38072C57E5911EA32/NUOeC_NciIu4TRsk7N5wYM90TpE.mft Manifest number: 2B7F Signing time: Sun 10 Aug 2025 14:25:38 +0000 Manifest this update: Sun 10 Aug 2025 14:25:37 +0000 Manifest next update: Sun 17 Aug 2025 14:25:37 +0000 Files and hashes: 1: NUOeC_NciIu4TRsk7N5wYM90TpE.crl (hash: 2LtE4xzQnxN415dlUmq5rfb6VsYzc7451xFXa6XEUFY=) 2: F645F318500C11EBA2295426C4F9AE02.roa (hash: cs/JN2roMF9559frpHSU57kLMdZZdt/kq/+fgPXNaTg=) 3: 6313DADA500011EBB74A2C2AC4F9AE02.roa (hash: kOKMH7bC+n+8o1xcllbA3RXGetoc8aW0IIWJBu8P/uI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917C422/3E745368ED5511E38072C57E5911EA32/NUOeC_NciIu4TRsk7N5wYM90TpE.crl rsync://rpki.apnic.net/member_repository/A917C422/3E745368ED5511E38072C57E5911EA32/NUOeC_NciIu4TRsk7N5wYM90TpE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/NUOeC_NciIu4TRsk7N5wYM90TpE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11155 (0x2b93) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917C422, serialNumber=35439E0BF35C888BB84D1B24ECDE7060CF744E91 Validity Not Before: Aug 10 14:25:37 2025 GMT Not After : Aug 17 14:25:37 2025 GMT Subject: CN=6898abe1-57f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:06:15:77:2c:97:ed:9a:64:c9:eb:b2:e2:43: 10:30:35:41:20:dd:f5:92:7a:f5:1d:99:a0:ca:9a: 34:e4:f8:9c:0c:6e:b4:56:33:f0:bf:ce:ac:4b:cb: 2f:48:ba:5d:0e:06:0e:c1:3d:66:25:ff:4e:fd:6b: 84:1e:41:1c:e3:00:04:0f:d3:a0:2e:f6:f2:9d:0c: 06:4f:f0:f2:ff:dd:c3:bb:3c:1c:4e:7b:a5:ae:df: 5b:74:2b:6d:5e:ec:68:a9:11:35:bb:ce:9d:fa:56: 14:1a:66:77:02:d5:c1:ea:6c:75:1d:6f:16:e1:f0: 5a:01:97:08:57:69:96:c5:84:14:c4:5b:a6:46:30: 66:1c:ec:16:e0:8e:08:cc:90:94:b8:9c:b7:e2:77: 9a:41:9b:87:eb:70:d4:10:0f:92:59:ef:a6:ab:25: dd:af:63:b0:4d:30:e5:53:32:ad:fa:6c:e4:3f:2e: 77:09:4a:d1:a1:a1:5e:90:7a:89:ff:ee:5b:24:a1: f8:65:06:18:21:d6:c1:38:07:97:67:33:26:17:f7: 69:29:67:89:38:50:98:3c:fd:d0:39:79:4c:66:52: 48:4c:bb:b2:88:23:23:64:9c:c2:e2:ae:b3:93:66: 87:fe:9f:a0:83:83:0e:0f:fa:2c:bf:21:cc:b4:3f: e5:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:83:D6:D8:B8:F4:7B:28:E4:F3:3C:42:02:09:03:3C:D6:05:F3:2F X509v3 Authority Key Identifier: keyid:35:43:9E:0B:F3:5C:88:8B:B8:4D:1B:24:EC:DE:70:60:CF:74:4E:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917C422/3E745368ED5511E38072C57E5911EA32/NUOeC_NciIu4TRsk7N5wYM90TpE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/NUOeC_NciIu4TRsk7N5wYM90TpE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C422/3E745368ED5511E38072C57E5911EA32/NUOeC_NciIu4TRsk7N5wYM90TpE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bb:05:b3:07:22:f9:8e:cd:c6:52:68:fd:e9:e0:6f:d4:a2:33: b8:a0:87:d0:85:52:9b:0c:98:91:5a:78:c6:60:42:52:1b:da: 28:86:fc:9b:11:6d:ea:c5:e5:6e:bc:1c:2a:5f:26:79:78:21: 79:79:28:4a:e6:93:57:ce:bf:0d:c1:c2:1a:4a:fb:49:11:98: 30:5d:be:f0:44:be:ac:ca:1e:ac:b9:f8:d2:ba:e9:10:77:39: 69:3b:08:14:83:ec:4b:42:59:1d:36:fb:72:a3:66:e3:99:35: fa:cf:c0:40:10:84:4e:c7:ac:0f:f3:06:14:07:2a:2a:5d:27: f1:06:b0:9b:b8:87:d5:76:4c:e4:d5:f7:71:9b:eb:42:79:98: 47:6d:da:45:11:55:db:b2:b6:b0:5a:04:28:94:3c:fa:e6:39: 51:e5:a0:78:fe:37:94:1d:1e:a8:be:91:90:af:dc:63:3b:78: 23:b3:5e:e9:a5:f8:d3:fe:9c:6e:c3:b4:98:f6:06:e2:5b:39: 5b:15:78:fd:53:db:ab:09:e0:9f:67:cb:48:d1:8f:3c:d3:3e: 97:b8:28:9a:68:79:91:88:2c:17:9d:63:08:59:49:3f:44:d1: d8:e1:e6:36:98:99:64:01:9e:0f:41:78:4b:dd:e8:db:be:3d: ca:e7:9b:f2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICK5MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0M0MjIxMTAvBgNVBAUTKDM1NDM5RTBCRjM1Qzg4OEJCODREMUIyNEVDREU3MDYw Q0Y3NDRFOTEwHhcNMjUwODEwMTQyNTM3WhcNMjUwODE3MTQyNTM3WjAYMRYwFAYD VQQDEw02ODk4YWJlMS01N2Y1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuQYVdyyX7Zpkyeuy4kMQMDVBIN31knr1HZmgypo05PicDG60VjPwv86sS8sv SLpdDgYOwT1mJf9O/WuEHkEc4wAED9OgLvbynQwGT/Dy/93DuzwcTnulrt9bdCtt XuxoqRE1u86d+lYUGmZ3AtXB6mx1HW8W4fBaAZcIV2mWxYQUxFumRjBmHOwW4I4I zJCUuJy34neaQZuH63DUEA+SWe+mqyXdr2OwTTDlUzKt+mzkPy53CUrRoaFekHqJ /+5bJKH4ZQYYIdbBOAeXZzMmF/dpKWeJOFCYPP3QOXlMZlJITLuyiCMjZJzC4q6z k2aH/p+gg4MOD/osvyHMtD/l6wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOSD1ti4 9Hso5PM8QgIJAzzWBfMvMB8GA1UdIwQYMBaAFDVDngvzXIiLuE0bJOzecGDPdE6R MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QzQyMi8zRTc0NTM2OEVE NTUxMUUzODA3MkM1N0U1OTExRUEzMi9OVU9lQ19OY2lJdTRUUnNrN041d1lNOTBU cEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL05VT2VDX05jaUl1NFRSc2s3TjV3WU05MFRwRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QzQyMi8zRTc0NTM2OEVENTUxMUUzODA3MkM1N0U1OTExRUEzMi9OVU9lQ19OY2lJ dTRUUnNrN041d1lNOTBUcEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC7BbMHIvmOzcZSaP3p4G/UojO4oIfQhVKbDJiRWnjGYEJSG9oohvyb EW3qxeVuvBwqXyZ5eCF5eShK5pNXzr8NwcIaSvtJEZgwXb7wRL6syh6sufjSuukQ dzlpOwgUg+xLQlkdNvtyo2bjmTX6z8BAEIROx6wP8wYUByoqXSfxBrCbuIfVdkzk 1fdxm+tCeZhHbdpFEVXbsrawWgQolDz65jlR5aB4/jeUHR6ovpGQr9xjO3gjs17p pfjT/pxuw7SY9gbiWzlbFXj9U9urCeCfZ8tI0Y880z6XuCiaaHmRiCwXnWMIWUk/ RNHY4eY2mJlkAZ4PQXhL3ejbvj3K55vy -----END CERTIFICATE-----Generated at Mon Aug 11 04:30:32 2025 by rpki-client