$ rpki-client -vvf rpki.apnic.net/member_repository/A91C6064/52FEF73A297011EB91E9DE54C4F9AE02/NFMkWvnnaQX2mpDxzs2F6og_6hY.mft File: NFMkWvnnaQX2mpDxzs2F6og_6hY.mft (raw, json) Hash identifier: OQ6Zci2rBnXhcuAnMJJISWH0PkhQWpbr0PQjvs6nwF4= Subject key identifier: 3A:AA:24:08:E8:58:26:5C:98:61:91:C3:6B:31:13:28:CF:12:E2:69 Authority key identifier: 34:53:24:5A:F9:E7:69:05:F6:9A:90:F1:CE:CD:85:EA:88:3F:EA:16 Certificate issuer: /CN=A91C6064/serialNumber=3453245AF9E76905F69A90F1CECD85EA883FEA16 Certificate serial: 0770 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NFMkWvnnaQX2mpDxzs2F6og_6hY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C6064/52FEF73A297011EB91E9DE54C4F9AE02/NFMkWvnnaQX2mpDxzs2F6og_6hY.mft Manifest number: 0769 Signing time: Sun 10 Aug 2025 21:38:20 +0000 Manifest this update: Sun 10 Aug 2025 21:38:20 +0000 Manifest next update: Sun 17 Aug 2025 21:38:19 +0000 Files and hashes: 1: NFMkWvnnaQX2mpDxzs2F6og_6hY.crl (hash: SJ0sXuGHdyUsAxl+3Tz+Fr+ll3vFqJvO8XQV53hNqzY=) 2: 0BAA4608297211EB99ECF956C4F9AE02.roa (hash: Pzy/lWlyEAOnnToKQdX1gv5KRRU1QsPgl9JiMWq4wxE=) 3: E9D321CEF2F611EE95E10935C4F9AE02.roa (hash: 0MDsliqtqRrojbtZYNkkZiieXi7syQdv9RVqPyRdcns=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C6064/52FEF73A297011EB91E9DE54C4F9AE02/NFMkWvnnaQX2mpDxzs2F6og_6hY.crl rsync://rpki.apnic.net/member_repository/A91C6064/52FEF73A297011EB91E9DE54C4F9AE02/NFMkWvnnaQX2mpDxzs2F6og_6hY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NFMkWvnnaQX2mpDxzs2F6og_6hY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1904 (0x770) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C6064, serialNumber=3453245AF9E76905F69A90F1CECD85EA883FEA16 Validity Not Before: Aug 10 21:38:20 2025 GMT Not After : Aug 17 21:38:19 2025 GMT Subject: CN=6899114c-b9b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:a4:a6:f9:91:cc:e0:51:aa:f9:da:76:f1:dc: 2b:6e:78:a6:56:f1:d0:22:94:d7:aa:fe:05:3f:63: d2:dc:84:86:26:70:56:b6:99:37:1e:7d:5f:e3:ed: 1e:e8:4e:cc:37:30:81:33:49:17:6a:96:51:0f:0b: 95:4b:56:1e:7d:6c:48:92:7c:4c:be:c4:8b:5f:8d: be:c8:ba:e5:c5:9a:87:af:79:e2:71:7c:56:a9:51: 4e:5a:bb:60:80:03:88:d0:08:4f:91:59:35:c5:75: 4a:7b:68:8c:bd:76:3c:e5:76:d7:d6:69:ba:e5:33: 73:e7:87:90:38:f8:e7:cc:c0:d5:31:fc:b2:32:1d: f7:f5:86:46:c3:0f:eb:d8:3d:9c:c6:2f:c4:8e:83: 32:0b:01:01:80:cf:9f:42:d3:ac:ad:53:2c:7c:b6: 95:b5:92:54:14:cc:4e:e4:a4:7c:51:8e:37:d9:34: d0:0b:87:ae:c6:b3:21:91:81:b6:a7:67:c5:33:1b: bc:4f:da:cc:2c:4b:71:b1:8f:8b:db:43:cf:23:ba: 57:35:fa:01:c5:5f:a5:a6:0c:a1:57:3c:4c:24:81: 10:d1:6f:40:c1:eb:24:09:c2:cb:a9:db:30:d9:3f: 0f:74:45:47:bd:a2:29:94:6a:02:b7:c7:ed:43:70: ec:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:AA:24:08:E8:58:26:5C:98:61:91:C3:6B:31:13:28:CF:12:E2:69 X509v3 Authority Key Identifier: keyid:34:53:24:5A:F9:E7:69:05:F6:9A:90:F1:CE:CD:85:EA:88:3F:EA:16 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C6064/52FEF73A297011EB91E9DE54C4F9AE02/NFMkWvnnaQX2mpDxzs2F6og_6hY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NFMkWvnnaQX2mpDxzs2F6og_6hY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C6064/52FEF73A297011EB91E9DE54C4F9AE02/NFMkWvnnaQX2mpDxzs2F6og_6hY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0d:22:26:6c:d9:7e:a0:9f:00:fa:3b:3c:86:e0:ea:5b:57:2f: 46:75:a3:5a:cb:9a:03:cd:43:89:5f:a2:d6:31:79:5a:78:6a: 2a:a9:50:84:f0:94:d8:5b:ec:7f:0e:54:2e:6f:91:0d:81:7e: bb:c0:a0:20:bf:19:e7:ba:af:cb:5e:a3:8d:1b:7f:73:e2:7f: 57:86:ff:89:46:ee:a6:f8:0d:53:a8:7d:31:b7:96:0f:77:70: bf:1e:b0:73:b0:a1:77:2d:b2:08:c9:3f:b9:e5:14:ec:e6:c5: ff:f6:b8:f0:65:fe:87:e8:81:fb:49:ac:a2:4f:83:af:33:26: c0:c2:9f:c3:49:ab:4d:c4:36:de:00:14:d3:32:8c:7e:5f:90: 5b:f5:cc:61:da:0f:da:4d:07:56:f4:01:2c:73:c8:c3:62:7b: ea:33:c9:df:a4:47:8f:f4:53:72:aa:9e:f4:f3:2a:af:28:79: af:18:24:f0:7c:d0:c7:78:2b:bf:14:e7:3a:a6:78:b6:5d:73: e3:0f:8f:47:a5:b3:d4:53:8c:1d:1f:8c:fb:4d:88:d9:e8:b3: 11:e1:c3:05:0a:c6:30:77:18:54:74:ec:c4:25:b0:73:de:29: ab:da:3a:2a:07:91:99:81:0a:0a:2e:d5:0a:41:8f:e2:e6:f9: ef:3b:af:33 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB3AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzYwNjQxMTAvBgNVBAUTKDM0NTMyNDVBRjlFNzY5MDVGNjlBOTBGMUNFQ0Q4NUVB ODgzRkVBMTYwHhcNMjUwODEwMjEzODIwWhcNMjUwODE3MjEzODE5WjAYMRYwFAYD VQQDEw02ODk5MTE0Yy1iOWI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuaSm+ZHM4FGq+dp28dwrbnimVvHQIpTXqv4FP2PS3ISGJnBWtpk3Hn1f4+0e 6E7MNzCBM0kXapZRDwuVS1YefWxIknxMvsSLX42+yLrlxZqHr3nicXxWqVFOWrtg gAOI0AhPkVk1xXVKe2iMvXY85XbX1mm65TNz54eQOPjnzMDVMfyyMh339YZGww/r 2D2cxi/EjoMyCwEBgM+fQtOsrVMsfLaVtZJUFMxO5KR8UY432TTQC4euxrMhkYG2 p2fFMxu8T9rMLEtxsY+L20PPI7pXNfoBxV+lpgyhVzxMJIEQ0W9AweskCcLLqdsw 2T8PdEVHvaIplGoCt8ftQ3DsXwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDqqJAjo WCZcmGGRw2sxEyjPEuJpMB8GA1UdIwQYMBaAFDRTJFr552kF9pqQ8c7NheqIP+oW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNjA2NC81MkZFRjczQTI5 NzAxMUVCOTFFOURFNTRDNEY5QUUwMi9ORk1rV3ZubmFRWDJtcER4enMyRjZvZ182 aFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05GTWtXdm5uYVFYMm1wRHh6czJGNm9nXzZoWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NjA2NC81MkZFRjczQTI5NzAxMUVCOTFFOURFNTRDNEY5QUUwMi9ORk1rV3ZubmFR WDJtcER4enMyRjZvZ182aFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQANIiZs2X6gnwD6OzyG4OpbVy9GdaNay5oDzUOJX6LWMXlaeGoqqVCE 8JTYW+x/DlQub5ENgX67wKAgvxnnuq/LXqONG39z4n9Xhv+JRu6m+A1TqH0xt5YP d3C/HrBzsKF3LbIIyT+55RTs5sX/9rjwZf6H6IH7SayiT4OvMybAwp/DSatNxDbe ABTTMox+X5Bb9cxh2g/aTQdW9AEsc8jDYnvqM8nfpEeP9FNyqp708yqvKHmvGCTw fNDHeCu/FOc6pni2XXPjD49HpbPUU4wdH4z7TYjZ6LMR4cMFCsYwdxhUdOzEJbBz 3imr2joqB5GZgQoKLtUKQY/i5vnvO68z -----END CERTIFICATE-----Generated at Mon Aug 11 07:29:58 2025 by rpki-client