$ rpki-client -vvf rpki.apnic.net/member_repository/A918ACDD/2A2CFC464DCF11EDBF05FA53C4F9AE02/NpFTMwCsweAQXuAxcGNQf4e0AS0.mft File: NpFTMwCsweAQXuAxcGNQf4e0AS0.mft (raw, json) Hash identifier: txGNbjYUnjVhNKku1UbZu2XzlaPpMJiDEe+F/0LelhE= Subject key identifier: 75:0A:ED:F4:C2:FC:13:26:9F:49:EE:92:20:92:12:05:95:89:21:2E Authority key identifier: 36:91:53:33:00:AC:C1:E0:10:5E:E0:31:70:63:50:7F:87:B4:01:2D Certificate issuer: /CN=A918ACDD/serialNumber=3691533300ACC1E0105EE0317063507F87B4012D Certificate serial: 0219 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NpFTMwCsweAQXuAxcGNQf4e0AS0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918ACDD/2A2CFC464DCF11EDBF05FA53C4F9AE02/NpFTMwCsweAQXuAxcGNQf4e0AS0.mft Manifest number: 0214 Signing time: Sat 09 Aug 2025 02:34:20 +0000 Manifest this update: Sat 09 Aug 2025 02:34:20 +0000 Manifest next update: Sat 16 Aug 2025 02:34:20 +0000 Files and hashes: 1: NpFTMwCsweAQXuAxcGNQf4e0AS0.crl (hash: vbXeFkH4Dim0gCoLrjQccq2xbqC/jmqTUGvR3FX0oAs=) 2: 397504CA4DD211ED8314A659C4F9AE02.roa (hash: 4Pojvoz6pQz0drU/suSB3Qk2A6ZI24l6azJQWIsOLc4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918ACDD/2A2CFC464DCF11EDBF05FA53C4F9AE02/NpFTMwCsweAQXuAxcGNQf4e0AS0.crl rsync://rpki.apnic.net/member_repository/A918ACDD/2A2CFC464DCF11EDBF05FA53C4F9AE02/NpFTMwCsweAQXuAxcGNQf4e0AS0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NpFTMwCsweAQXuAxcGNQf4e0AS0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 537 (0x219) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918ACDD, serialNumber=3691533300ACC1E0105EE0317063507F87B4012D Validity Not Before: Aug 9 02:34:20 2025 GMT Not After : Aug 16 02:34:20 2025 GMT Subject: CN=6896b3ac-3599 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:92:79:88:b4:de:b3:cf:7c:89:85:81:b5:e8: 3d:a6:76:4f:a0:fd:62:b1:98:ef:0e:d3:06:ff:9b: 00:87:8e:5f:5d:03:24:ce:b4:6e:7a:da:25:a3:48: 96:f7:a2:84:77:83:9e:2a:8e:e8:d9:4d:0f:87:9b: 36:84:12:ea:09:93:73:29:ea:b5:9d:19:d4:0e:29: 42:a3:79:71:68:de:d8:b0:ce:6c:a9:71:02:ca:2b: 9c:7e:41:a6:0d:d5:c9:9f:cb:d0:80:1b:c6:c1:1d: bb:19:ab:78:f0:7b:51:e8:25:b0:50:6d:10:a5:b6: 16:83:df:a7:ce:ad:11:a5:4d:a2:0b:0a:03:39:a6: 46:a4:58:d1:19:bc:02:32:40:3f:74:fe:55:10:4a: 63:37:eb:23:d3:0c:c1:da:68:fb:dd:1c:30:45:24: 76:33:36:77:66:61:ef:a5:b4:e1:f8:25:d4:0e:29: 5a:91:06:23:ae:34:86:aa:91:35:45:4f:df:8a:08: 9c:b8:1b:f4:3c:2b:b0:eb:4d:8e:1b:b9:1a:62:af: 2c:ac:49:81:3b:44:53:d1:4b:a3:6c:3b:0d:f0:f7: 04:bf:43:81:59:09:b3:ab:38:0b:1f:39:15:7a:41: c1:1c:90:5c:d2:4b:05:aa:72:da:ad:6c:eb:f5:fe: 99:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:0A:ED:F4:C2:FC:13:26:9F:49:EE:92:20:92:12:05:95:89:21:2E X509v3 Authority Key Identifier: keyid:36:91:53:33:00:AC:C1:E0:10:5E:E0:31:70:63:50:7F:87:B4:01:2D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918ACDD/2A2CFC464DCF11EDBF05FA53C4F9AE02/NpFTMwCsweAQXuAxcGNQf4e0AS0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NpFTMwCsweAQXuAxcGNQf4e0AS0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918ACDD/2A2CFC464DCF11EDBF05FA53C4F9AE02/NpFTMwCsweAQXuAxcGNQf4e0AS0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2f:eb:0e:5b:1f:8f:7e:20:cf:58:3f:70:bc:41:80:09:04:46: 7e:6b:36:c4:a9:4a:ff:d8:f5:03:96:b5:a4:38:fb:1a:ae:83: 37:5a:db:54:1c:b5:2b:36:25:fa:de:df:86:29:83:6b:e4:b3: 98:a0:12:64:79:fc:30:66:26:e8:58:bd:82:0f:9d:43:e3:c9: 6b:53:87:40:80:47:13:3a:96:05:95:0c:47:54:10:15:c4:76: 65:4c:da:e6:15:fd:43:b9:f0:aa:f5:6b:12:80:f1:11:3b:42: 40:b4:98:0f:df:30:1a:e1:d7:b9:bf:20:98:e1:39:c4:ea:db: 17:da:9c:8a:80:e3:00:d4:b9:82:28:2b:25:cc:bf:8f:38:07: 4d:90:27:19:86:bc:99:52:38:fe:78:46:b3:f0:58:6f:20:4e: 17:2a:90:1d:54:39:f2:6e:5c:cc:82:a4:28:82:ad:94:69:e5: bf:f2:a2:01:0b:05:af:ef:6f:85:41:16:8f:6d:b2:6d:23:c5: b2:26:f6:61:d9:ad:64:cf:df:a8:9c:04:c9:20:75:e2:6c:5f: 9e:e2:14:91:02:ad:e4:18:1d:a0:23:bf:b1:e8:05:1d:29:60: a2:de:de:0b:36:2e:fe:f0:3b:d0:a8:33:54:48:b7:c4:ef:44: da:e2:4c:9e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAhkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEFDREQxMTAvBgNVBAUTKDM2OTE1MzMzMDBBQ0MxRTAxMDVFRTAzMTcwNjM1MDdG ODdCNDAxMkQwHhcNMjUwODA5MDIzNDIwWhcNMjUwODE2MDIzNDIwWjAYMRYwFAYD VQQDEw02ODk2YjNhYy0zNTk5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAn5J5iLTes898iYWBteg9pnZPoP1isZjvDtMG/5sAh45fXQMkzrRuetolo0iW 96KEd4OeKo7o2U0Ph5s2hBLqCZNzKeq1nRnUDilCo3lxaN7YsM5sqXECyiucfkGm DdXJn8vQgBvGwR27Gat48HtR6CWwUG0QpbYWg9+nzq0RpU2iCwoDOaZGpFjRGbwC MkA/dP5VEEpjN+sj0wzB2mj73RwwRSR2MzZ3ZmHvpbTh+CXUDilakQYjrjSGqpE1 RU/figicuBv0PCuw602OG7kaYq8srEmBO0RT0UujbDsN8PcEv0OBWQmzqzgLHzkV ekHBHJBc0ksFqnLarWzr9f6ZPQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHUK7fTC /BMmn0nukiCSEgWViSEuMB8GA1UdIwQYMBaAFDaRUzMArMHgEF7gMXBjUH+HtAEt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QUNERC8yQTJDRkM0NjRE Q0YxMUVEQkYwNUZBNTNDNEY5QUUwMi9OcEZUTXdDc3dlQVFYdUF4Y0dOUWY0ZTBB UzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05wRlRNd0Nzd2VBUVh1QXhjR05RZjRlMEFTMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QUNERC8yQTJDRkM0NjREQ0YxMUVEQkYwNUZBNTNDNEY5QUUwMi9OcEZUTXdDc3dl QVFYdUF4Y0dOUWY0ZTBBUzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAv6w5bH49+IM9YP3C8QYAJBEZ+azbEqUr/2PUDlrWkOPsaroM3WttU HLUrNiX63t+GKYNr5LOYoBJkefwwZiboWL2CD51D48lrU4dAgEcTOpYFlQxHVBAV xHZlTNrmFf1DufCq9WsSgPERO0JAtJgP3zAa4de5vyCY4TnE6tsX2pyKgOMA1LmC KCslzL+POAdNkCcZhryZUjj+eEaz8FhvIE4XKpAdVDnyblzMgqQogq2UaeW/8qIB CwWv72+FQRaPbbJtI8WyJvZh2a1kz9+onATJIHXibF+e4hSRAq3kGB2gI7+x6AUd KWCi3t4LNi7+8DvQqDNUSLfE70Ta4kye -----END CERTIFICATE-----Generated at Sat Aug 9 10:52:23 2025 by rpki-client