$ rpki-client -vvf rpki.apnic.net/member_repository/A911403B/4AA74B7462DA11ECB371C767C4F9AE02/nzVmCVwLDAIx0LuWkl4DidHCbFc.mft File: nzVmCVwLDAIx0LuWkl4DidHCbFc.mft (raw, json) Hash identifier: 5iQ9S3O0AMVBvgwuNhRNngdbzUZ+yssAfX2jcd8hhj8= Subject key identifier: C7:CC:84:04:35:79:9E:51:E4:EA:0C:25:BA:14:C8:3C:20:83:70:DD Authority key identifier: 9F:35:66:09:5C:0B:0C:02:31:D0:BB:96:92:5E:03:89:D1:C2:6C:57 Certificate issuer: /CN=A911403B/serialNumber=9F3566095C0B0C0231D0BB96925E0389D1C26C57 Certificate serial: 045B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nzVmCVwLDAIx0LuWkl4DidHCbFc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911403B/4AA74B7462DA11ECB371C767C4F9AE02/nzVmCVwLDAIx0LuWkl4DidHCbFc.mft Manifest number: 0456 Signing time: Sat 23 Aug 2025 00:27:22 +0000 Manifest this update: Sat 23 Aug 2025 00:27:21 +0000 Manifest next update: Sat 30 Aug 2025 00:27:21 +0000 Files and hashes: 1: nzVmCVwLDAIx0LuWkl4DidHCbFc.crl (hash: vofs+mh4pcna878kjI1VLMPEvAZF6NCtXCUO/LiIRSI=) 2: 2D8428C662F511ECA1FC5A6CC4F9AE02.roa (hash: eK751E7R4LxxFW4h/LYCAzYwLSV3p/y1kJ/HUZuDz6s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911403B/4AA74B7462DA11ECB371C767C4F9AE02/nzVmCVwLDAIx0LuWkl4DidHCbFc.crl rsync://rpki.apnic.net/member_repository/A911403B/4AA74B7462DA11ECB371C767C4F9AE02/nzVmCVwLDAIx0LuWkl4DidHCbFc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nzVmCVwLDAIx0LuWkl4DidHCbFc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 00:27:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1115 (0x45b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911403B, serialNumber=9F3566095C0B0C0231D0BB96925E0389D1C26C57 Validity Not Before: Aug 23 00:27:21 2025 GMT Not After : Aug 30 00:27:21 2025 GMT Subject: CN=68a90aea-a7ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:25:01:7f:2a:c6:38:c0:c5:18:f9:cd:0c:87: 41:0c:78:4a:1f:65:c0:69:ce:15:17:12:3c:ad:b0: d4:a2:8f:2a:2d:59:78:4d:01:c2:bb:21:5b:b8:fe: 1f:18:28:0f:f5:a4:d0:98:db:a3:6a:ac:28:8a:8e: ae:58:2b:24:71:6b:5a:d3:c9:ac:d5:1c:4c:e4:37: f0:b0:d1:a5:61:98:d0:c8:d0:c2:ef:9b:3e:c1:35: a1:ec:5b:ce:c9:c1:18:f5:65:ce:6d:45:ca:e4:b3: 8d:5f:61:2e:39:6a:5b:31:d8:5d:9c:45:8e:a2:32: cd:c8:13:49:e1:99:83:67:f8:13:88:cb:e0:b5:2f: b4:81:e9:a0:62:13:c0:bc:c0:17:87:a1:84:57:f2: 72:8c:31:0b:83:cc:4a:ad:c3:e3:f3:47:87:ad:27: a2:cc:28:45:67:47:af:36:88:63:16:57:38:3c:a1: 6d:ed:58:43:e1:83:1c:89:a3:c3:49:1e:0d:18:3a: 31:6a:33:84:10:4e:06:c3:0a:31:ae:e0:af:6e:17: dc:5d:29:bb:df:e4:63:92:d1:0a:4d:69:ab:ed:16: 42:3f:f6:7d:f4:e5:2d:07:e0:c6:ee:66:41:03:5f: 74:28:9d:9c:95:27:6c:c1:01:b9:20:1d:4c:e2:22: d6:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:CC:84:04:35:79:9E:51:E4:EA:0C:25:BA:14:C8:3C:20:83:70:DD X509v3 Authority Key Identifier: keyid:9F:35:66:09:5C:0B:0C:02:31:D0:BB:96:92:5E:03:89:D1:C2:6C:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911403B/4AA74B7462DA11ECB371C767C4F9AE02/nzVmCVwLDAIx0LuWkl4DidHCbFc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nzVmCVwLDAIx0LuWkl4DidHCbFc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911403B/4AA74B7462DA11ECB371C767C4F9AE02/nzVmCVwLDAIx0LuWkl4DidHCbFc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 46:eb:f7:20:7c:25:fe:2a:55:b1:f5:8f:84:69:03:5b:df:2e: b5:ea:75:02:d1:e6:fb:61:00:23:02:3c:24:88:92:c5:ae:a4: 0c:ba:c4:bc:42:4a:3f:08:f2:09:c7:bd:f6:79:05:d0:26:3e: b7:d3:da:9f:cb:d9:4a:73:fa:9c:8b:68:ea:73:e8:01:2b:79: 8a:3a:0a:31:e4:28:9b:5f:7d:7d:84:f1:48:ab:2a:0b:c3:60: e1:7b:ea:df:a4:10:5a:79:dd:b2:b9:c7:30:bc:a6:88:55:1e: ea:eb:5f:64:fb:c7:14:1a:5b:d5:65:c6:1b:59:44:36:8e:47: c8:f9:ed:88:0e:81:1e:a4:8d:26:77:f0:d2:0a:3e:6b:96:b4: a3:cd:04:8d:6d:74:bc:42:61:6d:85:22:19:15:64:56:1e:a3: d6:2a:0e:e8:2b:88:ce:bf:1d:34:dc:49:20:cb:fa:38:2d:8b: 14:2d:35:39:8b:fb:95:f6:41:9a:ff:fc:9d:42:6e:6c:2a:c3: 79:aa:18:fe:44:35:fa:d1:45:4f:9f:84:4d:9c:32:ed:9f:c0: f1:99:70:18:51:83:27:dd:35:4b:e6:3f:ef:61:1f:b9:b1:79: cf:6e:2b:c4:5c:29:97:5e:95:09:58:6a:9c:9b:e5:60:de:19: 44:07:be:46 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBFswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTQwM0IxMTAvBgNVBAUTKDlGMzU2NjA5NUMwQjBDMDIzMUQwQkI5NjkyNUUwMzg5 RDFDMjZDNTcwHhcNMjUwODIzMDAyNzIxWhcNMjUwODMwMDAyNzIxWjAYMRYwFAYD VQQDEw02OGE5MGFlYS1hN2VlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvCUBfyrGOMDFGPnNDIdBDHhKH2XAac4VFxI8rbDUoo8qLVl4TQHCuyFbuP4f GCgP9aTQmNujaqwoio6uWCskcWta08ms1RxM5DfwsNGlYZjQyNDC75s+wTWh7FvO ycEY9WXObUXK5LONX2EuOWpbMdhdnEWOojLNyBNJ4ZmDZ/gTiMvgtS+0gemgYhPA vMAXh6GEV/JyjDELg8xKrcPj80eHrSeizChFZ0evNohjFlc4PKFt7VhD4YMciaPD SR4NGDoxajOEEE4GwwoxruCvbhfcXSm73+RjktEKTWmr7RZCP/Z99OUtB+DG7mZB A190KJ2clSdswQG5IB1M4iLWewIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMfMhAQ1 eZ5R5OoMJboUyDwgg3DdMB8GA1UdIwQYMBaAFJ81ZglcCwwCMdC7lpJeA4nRwmxX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNDAzQi80QUE3NEI3NDYy REExMUVDQjM3MUM3NjdDNEY5QUUwMi9uelZtQ1Z3TERBSXgwTHVXa2w0RGlkSENi RmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL256Vm1DVndMREFJeDBMdVdrbDREaWRIQ2JGYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NDAzQi80QUE3NEI3NDYyREExMUVDQjM3MUM3NjdDNEY5QUUwMi9uelZtQ1Z3TERB SXgwTHVXa2w0RGlkSENiRmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBG6/cgfCX+KlWx9Y+EaQNb3y616nUC0eb7YQAjAjwkiJLFrqQMusS8 Qko/CPIJx732eQXQJj6309qfy9lKc/qci2jqc+gBK3mKOgox5CibX319hPFIqyoL w2Dhe+rfpBBaed2yuccwvKaIVR7q619k+8cUGlvVZcYbWUQ2jkfI+e2IDoEepI0m d/DSCj5rlrSjzQSNbXS8QmFthSIZFWRWHqPWKg7oK4jOvx003Ekgy/o4LYsULTU5 i/uV9kGa//ydQm5sKsN5qhj+RDX60UVPn4RNnDLtn8DxmXAYUYMn3TVL5j/vYR+5 sXnPbivEXCmXXpUJWGqcm+Vg3hlEB75G -----END CERTIFICATE-----Generated at Sat Aug 23 13:53:08 2025 by rpki-client