$ rpki-client -vvf rpki.apnic.net/member_repository/A91925D2/6DF602D078BF11EE93FFB764C4F9AE02/NFF8wp90Fp_XNqLCQGGfizMP3Z0.mft File: NFF8wp90Fp_XNqLCQGGfizMP3Z0.mft (raw, json) Hash identifier: t9jB9CnjWHY/hsAq9UYJ2BwMIWcTsblxRJ4sIxlCgs8= Subject key identifier: AB:74:62:AC:5A:20:E6:9B:A9:91:66:FB:2F:38:54:EE:E1:FB:CC:65 Authority key identifier: 34:51:7C:C2:9F:74:16:9F:D7:36:A2:C2:40:61:9F:8B:33:0F:DD:9D Certificate issuer: /CN=A91925D2/serialNumber=34517CC29F74169FD736A2C240619F8B330FDD9D Certificate serial: 014C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NFF8wp90Fp_XNqLCQGGfizMP3Z0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91925D2/6DF602D078BF11EE93FFB764C4F9AE02/NFF8wp90Fp_XNqLCQGGfizMP3Z0.mft Manifest number: 0149 Signing time: Sun 03 Aug 2025 04:37:28 +0000 Manifest this update: Sun 03 Aug 2025 04:37:27 +0000 Manifest next update: Sun 10 Aug 2025 04:37:27 +0000 Files and hashes: 1: NFF8wp90Fp_XNqLCQGGfizMP3Z0.crl (hash: ftQqmY5XNOKEVuIo6JqeRMiltF73ndmd7rTGXR9qEFY=) 2: 2C4CD10078C011EE90D36F13C4F9AE02.roa (hash: OCKBcCjdkySUCtOriC+2k74TemAnMuuorEBugP8GmLw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91925D2/6DF602D078BF11EE93FFB764C4F9AE02/NFF8wp90Fp_XNqLCQGGfizMP3Z0.crl rsync://rpki.apnic.net/member_repository/A91925D2/6DF602D078BF11EE93FFB764C4F9AE02/NFF8wp90Fp_XNqLCQGGfizMP3Z0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NFF8wp90Fp_XNqLCQGGfizMP3Z0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 10 Aug 2025 04:37:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 332 (0x14c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91925D2, serialNumber=34517CC29F74169FD736A2C240619F8B330FDD9D Validity Not Before: Aug 3 04:37:27 2025 GMT Not After : Aug 10 04:37:27 2025 GMT Subject: CN=688ee788-a2c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:01:43:34:b8:d4:7b:b6:36:39:25:ce:b4:e4: ff:d0:91:c5:c5:ab:e2:45:35:4a:dc:94:25:5a:46: 10:ef:44:8a:5c:da:d4:cd:a5:ad:0a:19:46:2d:22: 5f:c7:ef:4d:ed:a1:1b:c0:bd:23:0f:c3:5e:47:06: 01:2f:d1:10:11:90:b5:21:b8:0e:b6:78:a4:26:65: 4a:ce:04:9e:d3:f5:73:31:49:4d:69:9e:a6:94:d2: bb:26:23:f7:53:60:9b:71:f2:53:dc:61:78:64:d4: 37:2a:d9:4a:a2:1a:c4:97:37:7b:9e:42:d7:92:92: 7c:90:37:ea:88:e8:ce:b9:05:47:c4:81:e2:4a:98: f6:f6:3d:2a:f9:42:01:f0:6d:0e:4d:74:f0:34:f7: 69:74:39:07:34:2c:a5:62:61:31:1d:22:64:25:8f: 5e:99:11:3a:ab:9f:99:25:c9:ce:44:1e:3c:be:27: d4:b0:e2:e0:a5:c4:1d:b2:b7:e5:e6:f4:45:0d:4c: a6:f8:75:6f:12:58:be:c7:fb:ea:23:81:00:49:36: da:ea:f2:8b:eb:f8:3f:ca:f4:42:29:30:7f:d6:0b: ff:87:d3:83:55:d5:81:28:96:6a:be:d0:b5:9f:9f: 7e:e7:74:59:d8:a4:3b:e8:79:a3:ae:f1:be:00:cd: 35:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:74:62:AC:5A:20:E6:9B:A9:91:66:FB:2F:38:54:EE:E1:FB:CC:65 X509v3 Authority Key Identifier: keyid:34:51:7C:C2:9F:74:16:9F:D7:36:A2:C2:40:61:9F:8B:33:0F:DD:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91925D2/6DF602D078BF11EE93FFB764C4F9AE02/NFF8wp90Fp_XNqLCQGGfizMP3Z0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NFF8wp90Fp_XNqLCQGGfizMP3Z0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91925D2/6DF602D078BF11EE93FFB764C4F9AE02/NFF8wp90Fp_XNqLCQGGfizMP3Z0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 27:f8:03:cd:7a:99:e5:1a:58:f5:be:23:68:bf:bf:12:1c:59: 1d:3e:12:09:e4:54:db:a4:42:d7:ea:37:11:11:80:d8:56:36: 67:fc:43:63:a9:7e:e2:82:98:c1:e6:ba:a5:a6:31:8f:03:35: 8a:c3:63:b6:d7:dc:dd:4b:41:f7:e7:10:89:0f:62:4f:a6:0f: c2:e1:c9:6a:f1:95:7f:c1:cf:47:5b:4c:e6:c8:96:f5:17:0b: 89:d9:1d:19:94:27:6e:4d:51:a7:cd:cb:c7:54:3e:00:8a:95: 85:9a:57:5b:89:f0:57:9f:90:65:b7:ad:be:c7:62:80:42:b4: 2b:36:62:a2:e0:24:3d:f3:9d:85:ce:02:97:ee:ef:1b:62:cf: 1d:ed:fc:f9:57:48:a9:be:f4:9f:86:54:e0:a8:ba:ea:58:88: f6:f3:3c:4f:5e:27:e5:7b:32:37:1b:d1:9f:64:44:c2:e5:18: 53:9a:3e:b9:08:6c:94:52:55:f8:ed:24:35:63:1a:43:dc:15: f3:d7:45:80:6c:1c:fe:53:61:a6:8d:96:bc:39:31:b1:ef:35: eb:b7:f0:5e:03:bd:41:24:2f:05:55:56:c0:e2:e4:ee:cf:63: 9b:a0:05:8f:7f:8c:92:e9:a9:83:4f:7c:39:cf:a1:3b:f3:86: 65:a5:28:fe -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAUwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTI1RDIxMTAvBgNVBAUTKDM0NTE3Q0MyOUY3NDE2OUZENzM2QTJDMjQwNjE5RjhC MzMwRkREOUQwHhcNMjUwODAzMDQzNzI3WhcNMjUwODEwMDQzNzI3WjAYMRYwFAYD VQQDEw02ODhlZTc4OC1hMmM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtQFDNLjUe7Y2OSXOtOT/0JHFxaviRTVK3JQlWkYQ70SKXNrUzaWtChlGLSJf x+9N7aEbwL0jD8NeRwYBL9EQEZC1IbgOtnikJmVKzgSe0/VzMUlNaZ6mlNK7JiP3 U2CbcfJT3GF4ZNQ3KtlKohrElzd7nkLXkpJ8kDfqiOjOuQVHxIHiSpj29j0q+UIB 8G0OTXTwNPdpdDkHNCylYmExHSJkJY9emRE6q5+ZJcnORB48vifUsOLgpcQdsrfl 5vRFDUym+HVvEli+x/vqI4EASTba6vKL6/g/yvRCKTB/1gv/h9ODVdWBKJZqvtC1 n59+53RZ2KQ76HmjrvG+AM01NwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKt0Yqxa IOabqZFm+y84VO7h+8xlMB8GA1UdIwQYMBaAFDRRfMKfdBaf1zaiwkBhn4szD92d MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MjVEMi82REY2MDJEMDc4 QkYxMUVFOTNGRkI3NjRDNEY5QUUwMi9ORkY4d3A5MEZwX1hOcUxDUUdHZml6TVAz WjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05GRjh3cDkwRnBfWE5xTENRR0dmaXpNUDNaMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MjVEMi82REY2MDJEMDc4QkYxMUVFOTNGRkI3NjRDNEY5QUUwMi9ORkY4d3A5MEZw X1hOcUxDUUdHZml6TVAzWjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAn+APNepnlGlj1viNov78SHFkdPhIJ5FTbpELX6jcREYDYVjZn/ENj qX7igpjB5rqlpjGPAzWKw2O219zdS0H35xCJD2JPpg/C4clq8ZV/wc9HW0zmyJb1 FwuJ2R0ZlCduTVGnzcvHVD4AipWFmldbifBXn5Blt62+x2KAQrQrNmKi4CQ9852F zgKX7u8bYs8d7fz5V0ipvvSfhlTgqLrqWIj28zxPXiflezI3G9GfZETC5RhTmj65 CGyUUlX47SQ1YxpD3BXz10WAbBz+U2GmjZa8OTGx7zXrt/BeA71BJC8FVVbA4uTu z2OboAWPf4yS6amDT3w5z6E784ZlpSj+ -----END CERTIFICATE-----Generated at Mon Aug 4 15:27:30 2025 by rpki-client