$ rpki-client -vvf rpki.apnic.net/member_repository/A91F9749/99D17D96BF9B11ECAD3C0A30C4F9AE02/NebIf2uhtlE6EnD23BNt23ETZFc.mft File: NebIf2uhtlE6EnD23BNt23ETZFc.mft (raw, json) Hash identifier: /b5IrTDr9oUvD5hSMUvVkaLeuQ4p5/c6W6gf+ooYKPw= Subject key identifier: 3A:75:4F:CC:67:84:54:61:22:FF:E4:93:FA:B0:88:D7:97:58:41:DF Authority key identifier: 35:E6:C8:7F:6B:A1:B6:51:3A:12:70:F6:DC:13:6D:DB:71:13:64:57 Certificate issuer: /CN=A91F9749/serialNumber=35E6C87F6BA1B6513A1270F6DC136DDB71136457 Certificate serial: 0363 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NebIf2uhtlE6EnD23BNt23ETZFc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F9749/99D17D96BF9B11ECAD3C0A30C4F9AE02/NebIf2uhtlE6EnD23BNt23ETZFc.mft Manifest number: 035F Signing time: Thu 07 Aug 2025 01:31:08 +0000 Manifest this update: Thu 07 Aug 2025 01:31:08 +0000 Manifest next update: Thu 14 Aug 2025 01:31:08 +0000 Files and hashes: 1: NebIf2uhtlE6EnD23BNt23ETZFc.crl (hash: NU3E1nAu8XJMEtIP8R635epDlR7n7gRB8uZcfT5YYEo=) 2: 97B81DD6BF9F11ECAB5B1239C4F9AE02.roa (hash: WBPEzwrRJmEQao59jsv0p03EV57EGiVD2LS1uQaSE9s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F9749/99D17D96BF9B11ECAD3C0A30C4F9AE02/NebIf2uhtlE6EnD23BNt23ETZFc.crl rsync://rpki.apnic.net/member_repository/A91F9749/99D17D96BF9B11ECAD3C0A30C4F9AE02/NebIf2uhtlE6EnD23BNt23ETZFc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NebIf2uhtlE6EnD23BNt23ETZFc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 01:31:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 867 (0x363) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F9749, serialNumber=35E6C87F6BA1B6513A1270F6DC136DDB71136457 Validity Not Before: Aug 7 01:31:08 2025 GMT Not After : Aug 14 01:31:08 2025 GMT Subject: CN=689401dc-1a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:9d:05:cf:a8:a5:2f:54:49:b1:93:71:66:af: 2e:58:87:d1:f5:86:9f:11:a8:2d:db:77:52:ac:a9: 23:53:da:77:99:6f:2e:13:43:95:8c:e7:62:1e:01: b9:5c:a4:ca:7a:ab:ea:38:d9:e8:d4:01:4a:7f:a7: 11:fc:ac:f5:d3:35:4a:c8:91:2b:be:9e:49:b4:72: cc:30:8d:96:2f:c7:bb:27:67:58:7d:bc:9e:f2:2d: 48:a4:c8:66:ab:96:a2:f7:50:1c:92:bf:89:33:8c: e7:18:08:50:d3:82:3b:23:d5:f0:89:1e:c5:ed:e2: b4:a7:13:1c:fe:2a:0e:a5:29:ee:f0:96:b8:49:03: 9f:f0:b3:8a:13:1d:4a:c4:80:39:d8:7a:70:0c:82: 5c:5e:b3:83:a5:ac:5c:b8:89:4a:0d:35:09:6f:fc: f6:19:85:c4:9a:35:3c:d4:0e:7e:66:d9:a5:4e:73: 3b:17:32:ee:bc:77:64:48:c1:cf:26:86:f0:de:5c: f4:58:ba:f0:a4:71:ef:2a:34:62:c3:b8:a3:73:99: 22:5c:e2:ab:0f:d9:51:b9:7e:38:00:78:35:66:09: f5:c1:d4:67:23:50:b8:e8:80:9f:64:43:21:7f:be: 85:a4:0b:1d:fe:ca:e2:a0:c0:0a:1f:7f:2b:15:c0: 99:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:75:4F:CC:67:84:54:61:22:FF:E4:93:FA:B0:88:D7:97:58:41:DF X509v3 Authority Key Identifier: keyid:35:E6:C8:7F:6B:A1:B6:51:3A:12:70:F6:DC:13:6D:DB:71:13:64:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F9749/99D17D96BF9B11ECAD3C0A30C4F9AE02/NebIf2uhtlE6EnD23BNt23ETZFc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NebIf2uhtlE6EnD23BNt23ETZFc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F9749/99D17D96BF9B11ECAD3C0A30C4F9AE02/NebIf2uhtlE6EnD23BNt23ETZFc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 99:39:94:b6:c1:4c:3c:cf:35:95:be:a5:54:46:43:05:95:90: 2b:2a:f2:d4:da:84:f3:e4:23:b2:80:1e:41:4f:01:04:9d:53: 01:1c:c1:4b:d0:8e:43:f4:a4:0d:17:8e:2f:09:87:45:19:73: c1:86:27:3f:34:a5:b9:a6:09:4d:70:38:87:7b:02:44:fc:42: b8:69:28:3a:1d:79:93:4a:a4:5a:9a:1f:6a:6b:4c:e3:b6:b8: 49:ce:59:a2:bb:66:dd:35:fc:e4:7b:d9:4e:a1:df:91:b4:71: 2d:93:83:d4:cc:b1:d9:82:92:5a:aa:21:3f:13:94:2d:35:5f: 00:33:67:a1:91:e2:49:b4:f1:d6:d4:a8:7e:80:50:d9:e4:5b: 6f:60:21:0a:ba:30:3c:48:d7:8c:79:c0:00:75:a2:19:a3:ec: 69:6f:03:c7:5e:82:d7:85:06:69:0c:71:f2:1b:c5:d9:71:20: 42:3c:15:46:83:5d:8f:6c:06:de:51:41:31:46:8e:7a:04:ad: f9:9d:e6:7a:23:fc:22:d9:27:87:92:8c:08:2b:51:99:12:70: ee:6f:1a:29:29:c9:9a:2b:31:d2:1d:7c:b0:70:01:05:55:19: e1:cf:02:d5:5c:9e:a8:88:7f:ff:06:38:62:12:84:66:51:96: 87:68:d6:4b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA2MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Rjk3NDkxMTAvBgNVBAUTKDM1RTZDODdGNkJBMUI2NTEzQTEyNzBGNkRDMTM2RERC NzExMzY0NTcwHhcNMjUwODA3MDEzMTA4WhcNMjUwODE0MDEzMTA4WjAYMRYwFAYD VQQDEw02ODk0MDFkYy0xYTgxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtp0Fz6ilL1RJsZNxZq8uWIfR9YafEagt23dSrKkjU9p3mW8uE0OVjOdiHgG5 XKTKeqvqONno1AFKf6cR/Kz10zVKyJErvp5JtHLMMI2WL8e7J2dYfbye8i1IpMhm q5ai91Ackr+JM4znGAhQ04I7I9XwiR7F7eK0pxMc/ioOpSnu8Ja4SQOf8LOKEx1K xIA52HpwDIJcXrODpaxcuIlKDTUJb/z2GYXEmjU81A5+ZtmlTnM7FzLuvHdkSMHP Jobw3lz0WLrwpHHvKjRiw7ijc5kiXOKrD9lRuX44AHg1Zgn1wdRnI1C46ICfZEMh f76FpAsd/srioMAKH38rFcCZBQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDp1T8xn hFRhIv/kk/qwiNeXWEHfMB8GA1UdIwQYMBaAFDXmyH9robZROhJw9twTbdtxE2RX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGOTc0OS85OUQxN0Q5NkJG OUIxMUVDQUQzQzBBMzBDNEY5QUUwMi9OZWJJZjJ1aHRsRTZFbkQyM0JOdDIzRVRa RmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05lYklmMnVodGxFNkVuRDIzQk50MjNFVFpGYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG OTc0OS85OUQxN0Q5NkJGOUIxMUVDQUQzQzBBMzBDNEY5QUUwMi9OZWJJZjJ1aHRs RTZFbkQyM0JOdDIzRVRaRmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCZOZS2wUw8zzWVvqVURkMFlZArKvLU2oTz5COygB5BTwEEnVMBHMFL 0I5D9KQNF44vCYdFGXPBhic/NKW5pglNcDiHewJE/EK4aSg6HXmTSqRamh9qa0zj trhJzlmiu2bdNfzke9lOod+RtHEtk4PUzLHZgpJaqiE/E5QtNV8AM2ehkeJJtPHW 1Kh+gFDZ5FtvYCEKujA8SNeMecAAdaIZo+xpbwPHXoLXhQZpDHHyG8XZcSBCPBVG g12PbAbeUUExRo56BK35neZ6I/wi2SeHkowIK1GZEnDubxopKcmaKzHSHXywcAEF VRnhzwLVXJ6oiH//BjhiEoRmUZaHaNZL -----END CERTIFICATE-----Generated at Fri Aug 8 00:15:52 2025 by rpki-client