$ rpki-client -vvf rpki.apnic.net/member_repository/A91A7B36/72E6FA26408F11F0B34AEF47C4F9AE02/NPD4zYe4jE9SDkb7ldLbhPoEM2I.mft File: NPD4zYe4jE9SDkb7ldLbhPoEM2I.mft (raw, json) Hash identifier: t8d5LqwebWZrFcpYs7MLvWRQaxF1LyvvJ80rBjsWOts= Subject key identifier: 37:D4:48:5F:0A:CA:1F:3F:60:ED:AB:6F:59:68:72:EE:F6:92:92:53 Authority key identifier: 34:F0:F8:CD:87:B8:8C:4F:52:0E:46:FB:95:D2:DB:84:FA:04:33:62 Certificate issuer: /CN=A91A7B36/serialNumber=34F0F8CD87B88C4F520E46FB95D2DB84FA043362 Certificate serial: 26 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NPD4zYe4jE9SDkb7ldLbhPoEM2I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A7B36/72E6FA26408F11F0B34AEF47C4F9AE02/NPD4zYe4jE9SDkb7ldLbhPoEM2I.mft Manifest number: 24 Signing time: Tue 05 Aug 2025 08:31:39 +0000 Manifest this update: Tue 05 Aug 2025 08:31:39 +0000 Manifest next update: Tue 12 Aug 2025 08:31:39 +0000 Files and hashes: 1: NPD4zYe4jE9SDkb7ldLbhPoEM2I.crl (hash: 8DeYp6lG3WRzXYGbiqdJxpxdhhZ3WoqtTXJinzqLuwQ=) 2: 5E4EF73E409011F0986B1F68C4F9AE02.roa (hash: zzVlxhn6+jvA03mHN2RlJJu0S5vEXRz/2+gZ9LS069Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A7B36/72E6FA26408F11F0B34AEF47C4F9AE02/NPD4zYe4jE9SDkb7ldLbhPoEM2I.crl rsync://rpki.apnic.net/member_repository/A91A7B36/72E6FA26408F11F0B34AEF47C4F9AE02/NPD4zYe4jE9SDkb7ldLbhPoEM2I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NPD4zYe4jE9SDkb7ldLbhPoEM2I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 12 Aug 2025 08:31:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38 (0x26) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A7B36, serialNumber=34F0F8CD87B88C4F520E46FB95D2DB84FA043362 Validity Not Before: Aug 5 08:31:39 2025 GMT Not After : Aug 12 08:31:39 2025 GMT Subject: CN=6891c16b-e7ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:47:6f:6f:76:a0:73:0b:ca:b2:8d:0a:dd:cd: 06:00:e4:1b:67:53:6f:c8:1f:4b:b3:5c:6f:85:2b: 0d:ee:f6:df:00:19:06:b3:e6:7f:1e:92:d5:d1:e1: 08:5f:3f:c4:e9:01:42:91:d0:e6:29:b2:3e:74:64: 3d:18:e1:ea:01:88:bc:e7:91:a6:2e:17:f2:7d:70: b9:1a:22:50:7e:ea:ed:cb:2b:51:5a:5d:a1:4f:76: ba:0a:7f:de:ca:b9:37:ff:05:a4:a9:89:fe:67:e5: 14:6f:23:69:bf:94:ff:3c:6c:aa:d5:dd:44:4d:ad: 54:10:3c:96:3f:ab:b9:48:08:78:b7:a5:5c:76:2b: 2e:97:92:41:c8:40:89:4e:69:ac:b1:a3:df:8b:33: 8a:34:c7:ee:8f:c0:0e:3d:aa:88:e5:dc:a1:d8:6e: 95:2a:46:05:45:34:1c:32:05:8d:d3:52:21:bd:3d: aa:b1:fa:e6:df:30:76:17:24:57:d4:39:52:98:df: 84:b0:ae:45:0c:06:4e:0f:10:72:b5:99:b0:c1:6d: a3:88:c3:82:96:d5:7d:14:35:ff:37:0c:72:3a:b2: 3b:e7:82:b6:b8:69:23:40:4e:ad:12:8e:da:5a:81: 27:94:e2:ab:d9:ef:bc:30:0b:79:0f:3d:d1:21:10: 58:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:D4:48:5F:0A:CA:1F:3F:60:ED:AB:6F:59:68:72:EE:F6:92:92:53 X509v3 Authority Key Identifier: keyid:34:F0:F8:CD:87:B8:8C:4F:52:0E:46:FB:95:D2:DB:84:FA:04:33:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A7B36/72E6FA26408F11F0B34AEF47C4F9AE02/NPD4zYe4jE9SDkb7ldLbhPoEM2I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NPD4zYe4jE9SDkb7ldLbhPoEM2I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A7B36/72E6FA26408F11F0B34AEF47C4F9AE02/NPD4zYe4jE9SDkb7ldLbhPoEM2I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5f:35:66:4e:17:20:f9:ed:37:e0:5d:54:0b:1b:90:5b:62:fe: 7e:6c:fc:d1:95:5a:86:e7:a8:5d:f8:e6:10:15:bf:77:7c:14: 3c:e1:dd:f9:ac:a1:b0:ab:d5:a4:2f:8e:81:76:02:6b:21:aa: 52:fd:7b:5f:89:f8:23:1f:a0:58:4e:2b:98:58:46:5a:ca:09: de:ed:c8:eb:70:89:86:b8:97:89:46:60:e8:ad:83:da:d6:1a: a9:0f:62:89:73:98:5b:29:c5:05:7c:59:eb:cd:d5:48:7c:81: 87:ba:26:1e:68:3f:97:51:6e:a3:50:90:bf:8a:63:6a:75:f7: 23:b0:57:c0:55:32:1e:04:fa:52:19:49:79:1c:69:ad:70:f6: 88:27:e1:ea:0e:46:cc:84:d5:5d:49:f8:29:09:89:32:ca:1e: ad:1c:01:25:1d:06:16:94:41:69:f9:b9:1c:44:af:aa:47:2d: e8:18:1c:6d:64:e5:16:26:80:ed:d7:8d:66:f6:cd:b5:86:32: c1:74:8e:6a:a6:ed:4c:92:55:e2:a5:ac:86:bf:6c:1f:63:30: eb:ff:11:7f:ed:19:68:4b:a3:89:2d:29:ef:92:f2:12:57:10: 39:d0:53:7b:73:23:ed:a8:ad:97:ec:39:9e:f4:11:51:02:4f: be:cf:c1:e2 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBJjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB N0IzNjExMC8GA1UEBRMoMzRGMEY4Q0Q4N0I4OEM0RjUyMEU0NkZCOTVEMkRCODRG QTA0MzM2MjAeFw0yNTA4MDUwODMxMzlaFw0yNTA4MTIwODMxMzlaMBgxFjAUBgNV BAMTDTY4OTFjMTZiLWU3YmEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDFR29vdqBzC8qyjQrdzQYA5BtnU2/IH0uzXG+FKw3u9t8AGQaz5n8ektXR4Qhf P8TpAUKR0OYpsj50ZD0Y4eoBiLznkaYuF/J9cLkaIlB+6u3LK1FaXaFPdroKf97K uTf/BaSpif5n5RRvI2m/lP88bKrV3URNrVQQPJY/q7lICHi3pVx2Ky6XkkHIQIlO aayxo9+LM4o0x+6PwA49qojl3KHYbpUqRgVFNBwyBY3TUiG9Paqx+ubfMHYXJFfU OVKY34SwrkUMBk4PEHK1mbDBbaOIw4KW1X0UNf83DHI6sjvngra4aSNATq0Sjtpa gSeU4qvZ77wwC3kPPdEhEFgdAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUN9RIXwrK Hz9g7atvWWhy7vaSklMwHwYDVR0jBBgwFoAUNPD4zYe4jE9SDkb7ldLbhPoEM2Iw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE3QjM2LzcyRTZGQTI2NDA4 RjExRjBCMzRBRUY0N0M0RjlBRTAyL05QRDR6WWU0akU5U0RrYjdsZExiaFBvRU0y SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvTlBENHpZZTRqRTlTRGtiN2xkTGJoUG9FTTJJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE3 QjM2LzcyRTZGQTI2NDA4RjExRjBCMzRBRUY0N0M0RjlBRTAyL05QRDR6WWU0akU5 U0RrYjdsZExiaFBvRU0ySS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAF81Zk4XIPntN+BdVAsbkFti/n5s/NGVWobnqF345hAVv3d8FDzh3fms obCr1aQvjoF2AmshqlL9e1+J+CMfoFhOK5hYRlrKCd7tyOtwiYa4l4lGYOitg9rW GqkPYolzmFspxQV8WevN1Uh8gYe6Jh5oP5dRbqNQkL+KY2p19yOwV8BVMh4E+lIZ SXkcaa1w9ogn4eoORsyE1V1J+CkJiTLKHq0cASUdBhaUQWn5uRxEr6pHLegYHG1k 5RYmgO3XjWb2zbWGMsF0jmqm7UySVeKlrIa/bB9jMOv/EX/tGWhLo4ktKe+S8hJX EDnQU3tzI+2orZfsOZ70EVECT77PweI= -----END CERTIFICATE-----Generated at Wed Aug 6 10:16:15 2025 by rpki-client