$ rpki-client -vvf rpki.apnic.net/member_repository/A9186684/36B86ADCD89F11EBAB98C55AC4F9AE02/NKEjLqcYRp6tt628TNngDfaoUgY.mft File: NKEjLqcYRp6tt628TNngDfaoUgY.mft (raw, json) Hash identifier: DzvRTFEXoy6FBj8t90Ns1EFr1oWdv4EBBAl4ylxXng8= Subject key identifier: 43:8D:91:B2:AF:51:44:58:DC:8B:DC:AE:90:45:D4:C2:29:6E:65:D1 Authority key identifier: 34:A1:23:2E:A7:18:46:9E:AD:B7:AD:BC:4C:D9:E0:0D:F6:A8:52:06 Certificate issuer: /CN=A9186684/serialNumber=34A1232EA718469EADB7ADBC4CD9E00DF6A85206 Certificate serial: 05BB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NKEjLqcYRp6tt628TNngDfaoUgY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9186684/36B86ADCD89F11EBAB98C55AC4F9AE02/NKEjLqcYRp6tt628TNngDfaoUgY.mft Manifest number: 05B0 Signing time: Tue 12 Aug 2025 23:32:38 +0000 Manifest this update: Tue 12 Aug 2025 23:32:38 +0000 Manifest next update: Tue 19 Aug 2025 23:32:38 +0000 Files and hashes: 1: NKEjLqcYRp6tt628TNngDfaoUgY.crl (hash: dsu/y+UVAIc7msw+M/IW56rv0qz3mA2LCbmvFHdTN+Q=) 2: D737BB744B4111ECACAF3B6FC4F9AE02.roa (hash: 78UGN0+7orQTcucSGGqLKKQdBZ/eBwdHdIbrun6HmgE=) 3: 80D77ED8D8A811EB85D5E456C4F9AE02.roa (hash: 5vdLLR7SsjyoWbJEWGx2u6gT4judyFxezvmtzE9hlfI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9186684/36B86ADCD89F11EBAB98C55AC4F9AE02/NKEjLqcYRp6tt628TNngDfaoUgY.crl rsync://rpki.apnic.net/member_repository/A9186684/36B86ADCD89F11EBAB98C55AC4F9AE02/NKEjLqcYRp6tt628TNngDfaoUgY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NKEjLqcYRp6tt628TNngDfaoUgY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 Aug 2025 23:32:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1467 (0x5bb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9186684, serialNumber=34A1232EA718469EADB7ADBC4CD9E00DF6A85206 Validity Not Before: Aug 12 23:32:38 2025 GMT Not After : Aug 19 23:32:38 2025 GMT Subject: CN=689bcf16-d01a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:ae:21:6f:76:77:ae:cb:2c:91:1c:27:b4:17: a6:4c:7a:22:7a:b9:ed:88:8b:30:5c:94:9e:ae:23: 71:68:aa:fa:3e:41:2b:81:93:19:11:ab:62:0c:a8: b3:66:89:d0:a0:58:ed:a6:d6:12:a0:bb:90:4c:df: 83:31:6d:a6:99:18:12:eb:c4:a5:88:8b:23:b1:5f: 43:be:04:42:d1:da:e9:c4:fd:f5:3f:d8:36:72:66: 48:41:fa:f4:34:53:b9:b7:49:31:04:5c:6d:22:47: 58:81:7d:1c:f2:9f:48:db:ef:1f:e4:47:0b:6a:b5: 26:77:f1:02:4a:96:c1:a7:db:09:9e:7b:2d:69:f6: ce:ef:b1:dc:35:ba:0c:ad:6a:a4:ea:71:5c:68:87: 39:35:d0:8d:58:04:a9:cb:7d:a1:dd:aa:b8:26:8c: 38:c4:1e:42:cf:77:7a:80:ba:43:9d:28:ff:28:b7: c6:db:23:d4:22:10:d7:77:a3:73:b1:f1:a7:6c:f7: dc:b9:e0:1b:b3:e9:c5:eb:4a:1d:83:e4:9c:41:3e: 0f:88:18:ef:50:3c:35:7c:a0:2b:5b:03:8b:c0:62: e3:96:36:ea:b3:a2:49:d0:fd:f2:ee:fb:29:2d:f7: de:7f:a0:30:ed:99:47:84:0c:48:65:63:c3:a8:43: 82:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:8D:91:B2:AF:51:44:58:DC:8B:DC:AE:90:45:D4:C2:29:6E:65:D1 X509v3 Authority Key Identifier: keyid:34:A1:23:2E:A7:18:46:9E:AD:B7:AD:BC:4C:D9:E0:0D:F6:A8:52:06 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9186684/36B86ADCD89F11EBAB98C55AC4F9AE02/NKEjLqcYRp6tt628TNngDfaoUgY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NKEjLqcYRp6tt628TNngDfaoUgY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186684/36B86ADCD89F11EBAB98C55AC4F9AE02/NKEjLqcYRp6tt628TNngDfaoUgY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 36:e3:5b:a1:09:b3:07:d4:84:40:e6:98:0a:99:ec:3c:f3:28: 8f:7a:7c:90:95:97:98:05:39:c4:4f:53:a4:28:e5:8d:d4:18: 9c:86:2d:69:84:64:3e:df:dd:0f:1f:5c:96:d3:56:0d:6f:e9: 6c:d0:bc:4a:2d:2e:24:fe:d1:58:3e:ba:d4:dc:78:b0:c2:d7: 66:00:07:9f:b4:8e:b2:20:16:33:e5:61:d2:92:28:9d:bc:91: 49:33:16:b5:e8:5b:93:ac:64:5f:40:6c:a7:24:23:21:3b:3c: 24:9d:4f:07:c7:04:04:72:a3:38:fc:ed:d7:0b:ed:8e:9b:17: d1:12:37:93:e0:25:a5:c1:37:2f:0f:4d:2b:89:16:c2:fb:ef: 9b:84:c0:4f:8b:4c:f4:84:48:f8:5d:3e:f6:56:76:5b:01:33: 1c:88:08:ba:66:7e:12:d8:d3:1e:b5:4b:16:fa:b0:58:b9:99: db:44:d4:0e:c2:72:7a:b1:74:b9:2a:7b:8f:2b:be:a5:50:74: 25:52:c2:e8:9b:44:1b:a2:01:50:6c:a8:a3:50:98:69:7f:01: 54:3c:cf:dd:f5:37:6c:b2:b6:0b:b8:cb:af:c7:f8:3a:a8:1c: b4:04:05:e5:2a:51:7f:69:ad:9b:2d:89:a3:ea:4a:02:7e:22: 54:6b:f6:40 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBbswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODY2ODQxMTAvBgNVBAUTKDM0QTEyMzJFQTcxODQ2OUVBREI3QURCQzRDRDlFMDBE RjZBODUyMDYwHhcNMjUwODEyMjMzMjM4WhcNMjUwODE5MjMzMjM4WjAYMRYwFAYD VQQDEw02ODliY2YxNi1kMDFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr64hb3Z3rssskRwntBemTHoierntiIswXJSeriNxaKr6PkErgZMZEatiDKiz ZonQoFjtptYSoLuQTN+DMW2mmRgS68SliIsjsV9DvgRC0drpxP31P9g2cmZIQfr0 NFO5t0kxBFxtIkdYgX0c8p9I2+8f5EcLarUmd/ECSpbBp9sJnnstafbO77HcNboM rWqk6nFcaIc5NdCNWASpy32h3aq4Jow4xB5Cz3d6gLpDnSj/KLfG2yPUIhDXd6Nz sfGnbPfcueAbs+nF60odg+ScQT4PiBjvUDw1fKArWwOLwGLjljbqs6JJ0P3y7vsp Lffef6Aw7ZlHhAxIZWPDqEOC0QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEONkbKv UURY3IvcrpBF1MIpbmXRMB8GA1UdIwQYMBaAFDShIy6nGEaerbetvEzZ4A32qFIG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NjY4NC8zNkI4NkFEQ0Q4 OUYxMUVCQUI5OEM1NUFDNEY5QUUwMi9OS0VqTHFjWVJwNnR0NjI4VE5uZ0RmYW9V Z1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05LRWpMcWNZUnA2dHQ2MjhUTm5nRGZhb1VnWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NjY4NC8zNkI4NkFEQ0Q4OUYxMUVCQUI5OEM1NUFDNEY5QUUwMi9OS0VqTHFjWVJw NnR0NjI4VE5uZ0RmYW9VZ1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA241uhCbMH1IRA5pgKmew88yiPenyQlZeYBTnET1OkKOWN1Bichi1p hGQ+390PH1yW01YNb+ls0LxKLS4k/tFYPrrU3HiwwtdmAAeftI6yIBYz5WHSkiid vJFJMxa16FuTrGRfQGynJCMhOzwknU8HxwQEcqM4/O3XC+2OmxfREjeT4CWlwTcv D00riRbC+++bhMBPi0z0hEj4XT72VnZbATMciAi6Zn4S2NMetUsW+rBYuZnbRNQO wnJ6sXS5KnuPK76lUHQlUsLom0QbogFQbKijUJhpfwFUPM/d9TdssrYLuMuvx/g6 qBy0BAXlKlF/aa2bLYmj6koCfiJUa/ZA -----END CERTIFICATE-----Generated at Wed Aug 13 04:27:53 2025 by rpki-client