$ rpki-client -vvf rpki.apnic.net/member_repository/A91A56E7/7860F8BA11C111EA858EE682C4F9AE02/NHY28OmK-CSCaxvPlvPHdtgS9Vs.mft File: NHY28OmK-CSCaxvPlvPHdtgS9Vs.mft (raw, json) Hash identifier: vpwNawqvgNb3UYDSSggukAdiuDdUoQjqsxG+qzabPXc= Subject key identifier: 1B:A5:81:D4:60:30:DE:03:B1:05:EA:BC:8B:9C:C0:DA:F0:92:10:75 Authority key identifier: 34:76:36:F0:E9:8A:F8:24:82:6B:1B:CF:96:F3:C7:76:D8:12:F5:5B Certificate issuer: /CN=A91A56E7/serialNumber=347636F0E98AF824826B1BCF96F3C776D812F55B Certificate serial: 0C29 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NHY28OmK-CSCaxvPlvPHdtgS9Vs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A56E7/7860F8BA11C111EA858EE682C4F9AE02/NHY28OmK-CSCaxvPlvPHdtgS9Vs.mft Manifest number: 0C22 Signing time: Mon 04 Aug 2025 18:53:14 +0000 Manifest this update: Mon 04 Aug 2025 18:53:13 +0000 Manifest next update: Mon 11 Aug 2025 18:53:13 +0000 Files and hashes: 1: NHY28OmK-CSCaxvPlvPHdtgS9Vs.crl (hash: ZKQLPNNbWPyhreA0rR1fL2ITfg/TWALKsoKy7h/xXcg=) 2: 2157C3E011C211EA93417583C4F9AE02.roa (hash: Sb4C6SBlwbEgArJd0mwobbSvCSiB+bY80WW0ZbhEHoI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A56E7/7860F8BA11C111EA858EE682C4F9AE02/NHY28OmK-CSCaxvPlvPHdtgS9Vs.crl rsync://rpki.apnic.net/member_repository/A91A56E7/7860F8BA11C111EA858EE682C4F9AE02/NHY28OmK-CSCaxvPlvPHdtgS9Vs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NHY28OmK-CSCaxvPlvPHdtgS9Vs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 11 Aug 2025 18:53:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3113 (0xc29) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A56E7, serialNumber=347636F0E98AF824826B1BCF96F3C776D812F55B Validity Not Before: Aug 4 18:53:13 2025 GMT Not After : Aug 11 18:53:13 2025 GMT Subject: CN=68910199-cc7f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:2e:26:a3:1f:53:64:c6:c9:ff:84:c9:a4:ff: 3a:05:ed:5a:8e:47:49:c6:66:de:19:52:85:12:f6: 54:e0:8c:80:df:28:f8:c5:43:1a:e6:47:54:8d:a6: bf:16:4d:40:73:05:91:e5:fd:88:a5:97:97:27:03: 68:20:e3:80:22:98:7c:58:be:8c:c6:8b:47:88:2b: 4a:97:b1:bf:bc:eb:6d:ea:0b:1b:56:64:3f:d1:8b: ea:30:95:4b:6c:94:9a:b1:9f:5a:af:b4:11:a6:95: ab:57:97:a5:86:f1:96:8d:d1:58:2f:a0:91:ed:65: cc:42:d4:44:ea:41:44:f2:83:10:ff:30:16:f0:d8: dd:28:d0:37:59:a2:f7:17:ce:41:6e:78:87:ef:50: e5:27:98:ce:64:2b:03:01:c9:6b:17:ba:7d:de:48: 73:62:27:ab:fb:f5:e1:8c:a1:66:93:ab:35:88:c2: 95:e6:e6:5e:73:64:ba:b4:56:4d:64:6d:8f:0b:c1: 06:4b:cc:9d:80:1c:af:b2:83:06:d5:1c:57:61:81: 32:bc:fb:82:58:73:cb:1c:f4:92:63:59:c3:08:27: 51:dd:8c:4c:6c:c0:a8:c3:da:04:28:d3:59:a9:86: 54:45:56:c7:fa:e2:5f:77:c7:38:2d:ef:82:c4:81: a7:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:A5:81:D4:60:30:DE:03:B1:05:EA:BC:8B:9C:C0:DA:F0:92:10:75 X509v3 Authority Key Identifier: keyid:34:76:36:F0:E9:8A:F8:24:82:6B:1B:CF:96:F3:C7:76:D8:12:F5:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A56E7/7860F8BA11C111EA858EE682C4F9AE02/NHY28OmK-CSCaxvPlvPHdtgS9Vs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NHY28OmK-CSCaxvPlvPHdtgS9Vs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A56E7/7860F8BA11C111EA858EE682C4F9AE02/NHY28OmK-CSCaxvPlvPHdtgS9Vs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 42:12:70:98:32:7e:95:b9:bb:75:8b:80:49:1c:9e:27:14:f0: fe:8c:8e:27:84:2d:ae:f2:bb:0b:6e:04:e8:ec:1b:28:d9:c2: 2e:4e:48:e2:64:de:e8:e2:7c:49:c8:49:6a:f0:9c:3f:c2:be: 88:33:a9:18:75:c8:7f:f3:9d:43:d6:8c:0e:35:4a:50:f9:4c: dd:39:68:76:49:a7:aa:20:2d:5a:a0:c8:92:ef:40:20:79:86: 59:07:bd:14:2f:20:0a:b3:b0:5b:70:ef:7f:cb:d8:47:f9:d1: 76:c7:41:62:4b:43:82:6e:9c:fe:95:96:60:30:88:5b:03:42: 15:dc:03:2e:18:7a:c1:61:51:7f:7b:f3:4f:45:3f:2b:fd:5d: 86:32:ef:48:54:ef:32:e9:35:50:a4:2a:16:14:19:21:06:4f: 87:c7:7b:e7:a3:8a:8e:a8:b5:16:33:33:90:4a:7a:6e:ce:f9: ac:7b:fc:a4:a8:a8:c8:17:55:05:59:10:c7:55:c8:5a:2c:4c: 15:65:ba:26:d5:d7:a8:57:a2:59:ea:e8:2f:d7:f5:a2:8a:65: 52:49:cc:f2:a7:60:1c:d2:49:26:22:eb:35:f3:82:ab:9a:40: f3:5b:6b:39:77:96:92:20:26:f8:49:78:cd:a9:4f:b9:27:b2: 93:43:bf:73 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDCkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTU2RTcxMTAvBgNVBAUTKDM0NzYzNkYwRTk4QUY4MjQ4MjZCMUJDRjk2RjNDNzc2 RDgxMkY1NUIwHhcNMjUwODA0MTg1MzEzWhcNMjUwODExMTg1MzEzWjAYMRYwFAYD VQQDEw02ODkxMDE5OS1jYzdmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvy4mox9TZMbJ/4TJpP86Be1ajkdJxmbeGVKFEvZU4IyA3yj4xUMa5kdUjaa/ Fk1AcwWR5f2IpZeXJwNoIOOAIph8WL6MxotHiCtKl7G/vOtt6gsbVmQ/0YvqMJVL bJSasZ9ar7QRppWrV5elhvGWjdFYL6CR7WXMQtRE6kFE8oMQ/zAW8NjdKNA3WaL3 F85BbniH71DlJ5jOZCsDAclrF7p93khzYier+/XhjKFmk6s1iMKV5uZec2S6tFZN ZG2PC8EGS8ydgByvsoMG1RxXYYEyvPuCWHPLHPSSY1nDCCdR3YxMbMCow9oEKNNZ qYZURVbH+uJfd8c4Le+CxIGnbQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBulgdRg MN4DsQXqvIucwNrwkhB1MB8GA1UdIwQYMBaAFDR2NvDpivgkgmsbz5bzx3bYEvVb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTZFNy83ODYwRjhCQTEx QzExMUVBODU4RUU2ODJDNEY5QUUwMi9OSFkyOE9tSy1DU0NheHZQbHZQSGR0Z1M5 VnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05IWTI4T21LLUNTQ2F4dlBsdlBIZHRnUzlWcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NTZFNy83ODYwRjhCQTExQzExMUVBODU4RUU2ODJDNEY5QUUwMi9OSFkyOE9tSy1D U0NheHZQbHZQSGR0Z1M5VnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBCEnCYMn6Vubt1i4BJHJ4nFPD+jI4nhC2u8rsLbgTo7Bso2cIuTkji ZN7o4nxJyElq8Jw/wr6IM6kYdch/851D1owONUpQ+UzdOWh2SaeqIC1aoMiS70Ag eYZZB70ULyAKs7BbcO9/y9hH+dF2x0FiS0OCbpz+lZZgMIhbA0IV3AMuGHrBYVF/ e/NPRT8r/V2GMu9IVO8y6TVQpCoWFBkhBk+Hx3vno4qOqLUWMzOQSnpuzvmse/yk qKjIF1UFWRDHVchaLEwVZbom1deoV6JZ6ugv1/WiimVSSczyp2Ac0kkmIus184Kr mkDzW2s5d5aSICb4SXjNqU+5J7KTQ79z -----END CERTIFICATE-----Generated at Wed Aug 6 05:30:40 2025 by rpki-client