$ rpki-client -vvf rpki.apnic.net/member_repository/A91FB8C8/C44C04528EC911EE9F8E447FC4F9AE02/Nps-m3tm6PW7l5puLy56rPUA0_E.mft File: Nps-m3tm6PW7l5puLy56rPUA0_E.mft (raw, json) Hash identifier: vZbOckCcPE9q5C7UNqjomKGrD2kZeZJvAwqwi7650Io= Subject key identifier: 67:3F:AA:A5:96:7B:AC:52:80:99:DA:31:46:41:D5:09:5D:7F:5A:7F Authority key identifier: 36:9B:3E:9B:7B:66:E8:F5:BB:97:9A:6E:2F:2E:7A:AC:F5:00:D3:F1 Certificate issuer: /CN=A91FB8C8/serialNumber=369B3E9B7B66E8F5BB979A6E2F2E7AACF500D3F1 Certificate serial: 0144 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nps-m3tm6PW7l5puLy56rPUA0_E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FB8C8/C44C04528EC911EE9F8E447FC4F9AE02/Nps-m3tm6PW7l5puLy56rPUA0_E.mft Manifest number: 0141 Signing time: Sat 09 Aug 2025 04:46:40 +0000 Manifest this update: Sat 09 Aug 2025 04:46:39 +0000 Manifest next update: Sat 16 Aug 2025 04:46:39 +0000 Files and hashes: 1: Nps-m3tm6PW7l5puLy56rPUA0_E.crl (hash: SVFm1ZBwmMnFhUi/MGu0c+YUT5bzVwZlObu8ErB7xa8=) 2: CA5B7DA48ECA11EEA3901581C4F9AE02.roa (hash: NP1KRG9waDvIQkw5KUdNc2k+dz2A2AWeqBvOhbZYwI8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FB8C8/C44C04528EC911EE9F8E447FC4F9AE02/Nps-m3tm6PW7l5puLy56rPUA0_E.crl rsync://rpki.apnic.net/member_repository/A91FB8C8/C44C04528EC911EE9F8E447FC4F9AE02/Nps-m3tm6PW7l5puLy56rPUA0_E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nps-m3tm6PW7l5puLy56rPUA0_E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 324 (0x144) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FB8C8, serialNumber=369B3E9B7B66E8F5BB979A6E2F2E7AACF500D3F1 Validity Not Before: Aug 9 04:46:39 2025 GMT Not After : Aug 16 04:46:39 2025 GMT Subject: CN=6896d2af-bc27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:49:fc:a9:f0:95:b2:c0:58:bd:d2:70:fa:c8: df:6b:a2:8d:4a:94:fd:d3:1f:f7:9d:f6:e5:24:3b: f1:c5:63:2c:49:39:d5:ce:02:14:50:36:57:bf:d8: c5:7a:3d:d1:8a:ae:8e:f9:2a:5b:3d:4a:f6:5e:af: 3c:c0:f7:d2:8f:87:49:32:10:51:04:4f:a9:61:9f: 97:4a:58:e1:8e:a8:ec:79:91:c2:8b:8d:52:a1:d8: 73:5f:db:15:12:7b:73:af:7c:22:23:3c:78:94:4d: a8:1e:d2:ae:23:15:6d:d2:4a:90:8e:a5:f1:4e:95: 83:5b:a9:63:a7:c1:2b:02:12:ad:f3:3c:4c:87:5f: 7d:73:3f:b5:95:9a:f2:18:dc:80:93:75:45:5d:8d: c2:26:95:61:96:12:05:e2:c9:47:c1:83:bb:35:f5: 91:58:43:83:89:35:03:ce:16:32:ba:63:92:ed:3c: 74:ff:86:c2:f8:46:16:5f:ae:65:e0:0f:da:a2:01: 36:62:16:67:74:8a:fe:cc:27:b7:46:d9:04:0c:a4: b5:46:e0:8c:2e:c0:0c:fd:d4:40:f3:13:64:ef:d5: 34:cf:c7:91:5c:fe:a6:8f:f6:8e:8f:ce:1b:ac:ff: 1c:02:22:7f:ed:c8:57:54:3a:b7:70:f6:2e:df:a0: c6:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:3F:AA:A5:96:7B:AC:52:80:99:DA:31:46:41:D5:09:5D:7F:5A:7F X509v3 Authority Key Identifier: keyid:36:9B:3E:9B:7B:66:E8:F5:BB:97:9A:6E:2F:2E:7A:AC:F5:00:D3:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FB8C8/C44C04528EC911EE9F8E447FC4F9AE02/Nps-m3tm6PW7l5puLy56rPUA0_E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nps-m3tm6PW7l5puLy56rPUA0_E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FB8C8/C44C04528EC911EE9F8E447FC4F9AE02/Nps-m3tm6PW7l5puLy56rPUA0_E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 48:16:fd:ed:12:21:5f:e5:a3:ab:13:cc:d5:8e:73:77:0f:b9: dd:22:a5:39:d5:9f:75:73:56:1b:54:00:f8:e0:10:82:7c:13: f5:28:91:b4:2d:89:f3:a7:9d:e6:ce:33:a7:ea:21:25:e2:a1: 9f:89:28:78:38:99:35:b1:10:9a:bb:dc:00:4f:db:aa:45:ab: 09:54:cc:f9:90:d1:08:d6:22:12:78:4c:a2:36:e9:87:5d:b8: 78:5f:a7:ec:6b:cc:74:49:e5:a2:56:aa:cd:f2:a0:3d:b0:28: 36:d0:23:e8:7a:18:75:48:fa:ce:73:54:e2:9e:f0:bd:39:25: 7b:df:38:f8:5a:56:fb:8a:47:32:71:b2:94:90:b1:76:a4:37: 84:df:e5:da:19:bf:8f:6d:1c:97:10:c6:a2:0a:66:21:98:10: e5:99:e6:60:26:46:4a:53:d8:dc:0c:03:79:ca:75:9b:8e:22: 83:2d:e2:81:1d:af:56:2d:c3:ee:85:09:05:6f:32:a4:8e:89: 65:c2:de:8b:4d:9b:a9:bd:86:3e:d7:fe:a8:43:8b:ed:61:d7: 04:b0:a3:e6:22:f8:47:4b:2e:cf:6a:8f:19:2c:eb:a3:e6:1c: a3:10:91:16:62:db:8a:84:6c:1c:f1:bd:67:dc:80:d8:8c:68: 2a:a7:1d:31 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAUQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkI4QzgxMTAvBgNVBAUTKDM2OUIzRTlCN0I2NkU4RjVCQjk3OUE2RTJGMkU3QUFD RjUwMEQzRjEwHhcNMjUwODA5MDQ0NjM5WhcNMjUwODE2MDQ0NjM5WjAYMRYwFAYD VQQDEw02ODk2ZDJhZi1iYzI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2kn8qfCVssBYvdJw+sjfa6KNSpT90x/3nfblJDvxxWMsSTnVzgIUUDZXv9jF ej3Riq6O+SpbPUr2Xq88wPfSj4dJMhBRBE+pYZ+XSljhjqjseZHCi41SodhzX9sV Entzr3wiIzx4lE2oHtKuIxVt0kqQjqXxTpWDW6ljp8ErAhKt8zxMh199cz+1lZry GNyAk3VFXY3CJpVhlhIF4slHwYO7NfWRWEODiTUDzhYyumOS7Tx0/4bC+EYWX65l 4A/aogE2YhZndIr+zCe3RtkEDKS1RuCMLsAM/dRA8xNk79U0z8eRXP6mj/aOj84b rP8cAiJ/7chXVDq3cPYu36DGwwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGc/qqWW e6xSgJnaMUZB1Qldf1p/MB8GA1UdIwQYMBaAFDabPpt7Zuj1u5eabi8ueqz1ANPx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQjhDOC9DNDRDMDQ1MjhF QzkxMUVFOUY4RTQ0N0ZDNEY5QUUwMi9OcHMtbTN0bTZQVzdsNXB1THk1NnJQVUEw X0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05wcy1tM3RtNlBXN2w1cHVMeTU2clBVQTBfRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QjhDOC9DNDRDMDQ1MjhFQzkxMUVFOUY4RTQ0N0ZDNEY5QUUwMi9OcHMtbTN0bTZQ VzdsNXB1THk1NnJQVUEwX0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBIFv3tEiFf5aOrE8zVjnN3D7ndIqU51Z91c1YbVAD44BCCfBP1KJG0 LYnzp53mzjOn6iEl4qGfiSh4OJk1sRCau9wAT9uqRasJVMz5kNEI1iISeEyiNumH Xbh4X6fsa8x0SeWiVqrN8qA9sCg20CPoehh1SPrOc1TinvC9OSV73zj4Wlb7ikcy cbKUkLF2pDeE3+XaGb+PbRyXEMaiCmYhmBDlmeZgJkZKU9jcDAN5ynWbjiKDLeKB Ha9WLcPuhQkFbzKkjollwt6LTZupvYY+1/6oQ4vtYdcEsKPmIvhHSy7Pao8ZLOuj 5hyjEJEWYtuKhGwc8b1n3IDYjGgqpx0x -----END CERTIFICATE-----Generated at Sun Aug 10 13:47:26 2025 by rpki-client