$ rpki-client -vvf rpki.apnic.net/member_repository/A91C6515/84C4674A60C111F08BD5B82EC4F9AE02/NttE1MFZiGc4IVpWELEQwkSGylY.mft File: NttE1MFZiGc4IVpWELEQwkSGylY.mft (raw, json) Hash identifier: m90T29p/LSXj2D+0uCT7sG28L6gM2o4b+jgcCE3vqvc= Subject key identifier: FF:D4:13:61:23:75:A6:59:52:0F:EC:60:C5:B7:4E:37:86:0A:E7:79 Authority key identifier: 36:DB:44:D4:C1:59:88:67:38:21:5A:56:10:B1:10:C2:44:86:CA:56 Certificate issuer: /CN=A91C6515/serialNumber=36DB44D4C159886738215A5610B110C24486CA56 Certificate serial: 0F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NttE1MFZiGc4IVpWELEQwkSGylY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C6515/84C4674A60C111F08BD5B82EC4F9AE02/NttE1MFZiGc4IVpWELEQwkSGylY.mft Manifest number: 0E Signing time: Thu 07 Aug 2025 08:44:43 +0000 Manifest this update: Thu 07 Aug 2025 08:44:43 +0000 Manifest next update: Thu 14 Aug 2025 08:44:43 +0000 Files and hashes: 1: NttE1MFZiGc4IVpWELEQwkSGylY.crl (hash: VzFYHuQRRPVY4gGJrcPOc2uCjZdg4jxC+bLvq+4+LQE=) 2: E5723CA260C111F0A9EB0333C4F9AE02.roa (hash: dgVomHsPjy8dnzAeq1krltAgv8t1jsAsT7S8XSGxsvA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C6515/84C4674A60C111F08BD5B82EC4F9AE02/NttE1MFZiGc4IVpWELEQwkSGylY.crl rsync://rpki.apnic.net/member_repository/A91C6515/84C4674A60C111F08BD5B82EC4F9AE02/NttE1MFZiGc4IVpWELEQwkSGylY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NttE1MFZiGc4IVpWELEQwkSGylY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15 (0xf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C6515, serialNumber=36DB44D4C159886738215A5610B110C24486CA56 Validity Not Before: Aug 7 08:44:43 2025 GMT Not After : Aug 14 08:44:43 2025 GMT Subject: CN=6894677b-fd82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:e1:ba:fd:c0:92:45:ef:fe:5e:c0:58:d6:67: b1:64:1d:53:9e:3c:7e:f2:a4:0e:2c:f9:37:83:07: 71:1d:68:5a:e7:8e:96:1e:05:35:67:de:60:01:21: cd:d9:3e:3c:6d:24:f7:61:70:21:df:ac:a2:17:a9: 9f:ca:02:68:62:18:f1:c9:09:6a:73:56:3a:bd:83: ed:29:ff:6e:ac:ba:55:b7:2c:9f:7b:67:fc:dc:65: d2:59:77:96:a9:37:cc:88:26:99:0a:42:d2:77:20: 1c:ea:1a:bd:04:98:e3:e8:d1:5a:81:06:df:ba:fa: 95:75:cc:30:3e:90:cb:14:a1:a9:ec:b9:43:da:05: 29:61:a9:36:d4:78:44:ef:c7:11:d7:3e:99:d8:ec: 3b:52:15:49:ec:2f:fd:9d:9a:2d:1d:33:fd:24:48: f0:40:37:73:44:3f:b6:a9:49:7d:80:14:f9:44:e5: db:83:ab:f3:4a:d5:e1:ee:ab:a4:1c:b6:84:19:6d: 4b:5b:23:87:84:83:0c:da:2f:96:27:ac:d0:6f:81: dd:8f:1a:5a:56:3c:24:49:80:11:c9:84:45:b8:63: 83:f5:97:b7:31:bd:48:3b:b1:d5:7d:31:68:7d:12: b2:d9:72:50:ff:03:25:b8:a1:2c:0b:1a:b8:ad:a0: 14:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:D4:13:61:23:75:A6:59:52:0F:EC:60:C5:B7:4E:37:86:0A:E7:79 X509v3 Authority Key Identifier: keyid:36:DB:44:D4:C1:59:88:67:38:21:5A:56:10:B1:10:C2:44:86:CA:56 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C6515/84C4674A60C111F08BD5B82EC4F9AE02/NttE1MFZiGc4IVpWELEQwkSGylY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NttE1MFZiGc4IVpWELEQwkSGylY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C6515/84C4674A60C111F08BD5B82EC4F9AE02/NttE1MFZiGc4IVpWELEQwkSGylY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 75:6b:65:57:3c:82:66:32:bd:9d:24:87:b5:5c:5c:d4:eb:d3: d2:a2:21:12:e0:24:45:12:98:fc:5a:47:d3:96:e0:1c:24:3d: 9d:d9:13:37:b8:32:c2:43:a2:50:28:9e:e3:4b:f9:6c:b5:e6: 9e:d8:bd:2d:ac:80:e9:f4:d2:06:15:34:a9:a8:45:39:0b:5d: 1a:d4:82:18:0a:3d:f9:18:48:41:5d:3d:3a:91:d2:ee:93:bc: 32:1d:69:c5:d0:b0:d2:15:06:6a:82:5c:12:5e:b0:f4:8a:72: 04:7b:35:51:10:31:3f:cc:39:47:a3:da:f2:a7:23:21:f9:31: 11:6c:2c:cf:06:b1:f5:59:db:67:5e:6c:3e:52:a2:0d:8e:9b: dc:90:74:f0:e1:c0:97:28:04:53:a7:82:01:63:9d:24:4c:0c: 1b:5e:ae:1c:4b:78:80:25:aa:92:9b:ad:ac:80:5c:52:23:b8: 4e:41:b7:9e:22:b9:86:40:d1:a4:4c:a3:3d:61:b6:73:55:de: f8:b3:62:3b:f2:11:be:99:4e:b5:ca:a6:d2:74:e9:52:bc:3b: 20:12:aa:19:1d:bd:43:4b:f2:dd:81:3b:47:89:22:00:63:17: 35:aa:e3:9b:50:93:d6:0a:41:9e:f1:ad:6e:63:cb:d7:54:4a: 9c:8e:4d:79 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBDzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD NjUxNTExMC8GA1UEBRMoMzZEQjQ0RDRDMTU5ODg2NzM4MjE1QTU2MTBCMTEwQzI0 NDg2Q0E1NjAeFw0yNTA4MDcwODQ0NDNaFw0yNTA4MTQwODQ0NDNaMBgxFjAUBgNV BAMTDTY4OTQ2NzdiLWZkODIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC94br9wJJF7/5ewFjWZ7FkHVOePH7ypA4s+TeDB3EdaFrnjpYeBTVn3mABIc3Z PjxtJPdhcCHfrKIXqZ/KAmhiGPHJCWpzVjq9g+0p/26sulW3LJ97Z/zcZdJZd5ap N8yIJpkKQtJ3IBzqGr0EmOPo0VqBBt+6+pV1zDA+kMsUoansuUPaBSlhqTbUeETv xxHXPpnY7DtSFUnsL/2dmi0dM/0kSPBAN3NEP7apSX2AFPlE5duDq/NK1eHuq6Qc toQZbUtbI4eEgwzaL5YnrNBvgd2PGlpWPCRJgBHJhEW4Y4P1l7cxvUg7sdV9MWh9 ErLZclD/AyW4oSwLGritoBTbAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU/9QTYSN1 pllSD+xgxbdON4YK53kwHwYDVR0jBBgwFoAUNttE1MFZiGc4IVpWELEQwkSGylYw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM2NTE1Lzg0QzQ2NzRBNjBD MTExRjA4QkQ1QjgyRUM0RjlBRTAyL050dEUxTUZaaUdjNElWcFdFTEVRd2tTR3ls WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvTnR0RTFNRlppR2M0SVZwV0VMRVF3a1NHeWxZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM2 NTE1Lzg0QzQ2NzRBNjBDMTExRjA4QkQ1QjgyRUM0RjlBRTAyL050dEUxTUZaaUdj NElWcFdFTEVRd2tTR3lsWS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAHVrZVc8gmYyvZ0kh7VcXNTr09KiIRLgJEUSmPxaR9OW4BwkPZ3ZEze4 MsJDolAonuNL+Wy15p7YvS2sgOn00gYVNKmoRTkLXRrUghgKPfkYSEFdPTqR0u6T vDIdacXQsNIVBmqCXBJesPSKcgR7NVEQMT/MOUej2vKnIyH5MRFsLM8GsfVZ22de bD5Sog2Om9yQdPDhwJcoBFOnggFjnSRMDBterhxLeIAlqpKbrayAXFIjuE5Bt54i uYZA0aRMoz1htnNV3vizYjvyEb6ZTrXKptJ06VK8OyASqhkdvUNL8t2BO0eJIgBj FzWq45tQk9YKQZ7xrW5jy9dUSpyOTXk= -----END CERTIFICATE-----Generated at Sat Aug 9 03:00:57 2025 by rpki-client