$ rpki-client -vvf rpki.apnic.net/member_repository/A911894F/963CF0CEEC5E11E48E7D0119C4F9AE02/NhKQaSiZCCzeI_UEU6QVXgqreXg.mft File: NhKQaSiZCCzeI_UEU6QVXgqreXg.mft (raw, json) Hash identifier: bRUvOP+c3R3PvQtPg7iKsOVu3uwAAf0VyvgnlXv9g+w= Subject key identifier: 9A:6E:3A:E0:F0:6B:8D:72:7D:DB:18:00:D2:54:4A:99:27:09:67:EE Authority key identifier: 36:12:90:69:28:99:08:2C:DE:23:F5:04:53:A4:15:5E:0A:AB:79:78 Certificate issuer: /CN=A911894F/serialNumber=361290692899082CDE23F50453A4155E0AAB7978 Certificate serial: 268A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NhKQaSiZCCzeI_UEU6QVXgqreXg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911894F/963CF0CEEC5E11E48E7D0119C4F9AE02/NhKQaSiZCCzeI_UEU6QVXgqreXg.mft Manifest number: 2677 Signing time: Fri 22 Aug 2025 15:44:08 +0000 Manifest this update: Fri 22 Aug 2025 15:44:07 +0000 Manifest next update: Fri 29 Aug 2025 15:44:07 +0000 Files and hashes: 1: NhKQaSiZCCzeI_UEU6QVXgqreXg.crl (hash: w2sezD8wHbx39gSN8vM0GUMv2scUL/h6BC5UxqnU1Xo=) 2: 802FBE707FEB11EB8B5E2817C4F9AE02.roa (hash: 7A1IMu+LIGDsrLSPFNBgTLonAK/3FwEXR3H+PIKYqo0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911894F/963CF0CEEC5E11E48E7D0119C4F9AE02/NhKQaSiZCCzeI_UEU6QVXgqreXg.crl rsync://rpki.apnic.net/member_repository/A911894F/963CF0CEEC5E11E48E7D0119C4F9AE02/NhKQaSiZCCzeI_UEU6QVXgqreXg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NhKQaSiZCCzeI_UEU6QVXgqreXg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 15:44:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9866 (0x268a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911894F, serialNumber=361290692899082CDE23F50453A4155E0AAB7978 Validity Not Before: Aug 22 15:44:07 2025 GMT Not After : Aug 29 15:44:07 2025 GMT Subject: CN=68a89047-6d98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:39:28:43:b2:43:1f:85:d9:49:3e:6e:33:f8: eb:42:18:50:87:5f:d6:00:2f:a0:8f:cd:47:16:d3: 22:c9:14:c0:89:d4:e9:af:0c:4f:ca:2c:10:da:07: a1:a1:c5:21:a9:c3:68:a9:1d:e5:d7:e8:1b:cb:89: de:8a:22:a6:f5:46:6f:a4:12:90:10:5f:3a:61:7c: 56:b6:91:e8:7f:06:09:dc:f0:93:9e:48:2f:70:8c: 85:01:56:39:0d:d2:29:41:98:a6:cb:88:65:af:66: 1e:64:9b:1e:5b:74:95:03:17:12:7e:d0:67:ee:92: 32:4f:ea:8a:5c:80:33:38:63:a0:47:71:c1:8e:71: d7:8d:34:a9:44:4c:3e:9d:cf:da:af:05:93:37:07: 01:4c:b1:ec:7d:ff:01:21:0a:ce:f3:40:ba:c3:32: 33:73:2f:a6:c2:35:8f:2e:4d:65:8a:19:7f:d5:be: 7d:d9:21:86:e6:41:7e:10:d6:13:62:38:af:e7:77: 08:4f:4c:7f:06:de:d2:e7:3b:6a:92:a7:b0:f5:1a: 4a:46:5c:a7:e2:46:e4:01:4a:6c:93:f3:78:0f:35: 16:94:62:c9:f4:9e:53:66:4b:57:ab:b8:0d:39:64: c1:a9:76:f4:e7:af:77:f8:58:64:08:35:36:90:43: dd:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:6E:3A:E0:F0:6B:8D:72:7D:DB:18:00:D2:54:4A:99:27:09:67:EE X509v3 Authority Key Identifier: keyid:36:12:90:69:28:99:08:2C:DE:23:F5:04:53:A4:15:5E:0A:AB:79:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911894F/963CF0CEEC5E11E48E7D0119C4F9AE02/NhKQaSiZCCzeI_UEU6QVXgqreXg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NhKQaSiZCCzeI_UEU6QVXgqreXg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911894F/963CF0CEEC5E11E48E7D0119C4F9AE02/NhKQaSiZCCzeI_UEU6QVXgqreXg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 40:e2:10:d8:e9:76:97:b3:de:9d:1e:6d:28:da:c5:91:75:c0: d8:c1:08:ff:03:4b:27:06:3e:30:44:92:15:7d:01:6a:c9:46: 11:3b:40:12:43:89:dc:1d:dd:87:70:d7:70:67:00:1d:09:89: 37:68:90:60:9c:ef:c0:4c:2c:ee:f2:6a:8c:f7:e5:0c:ab:f5: 4c:77:99:1c:34:33:d5:f7:94:25:f8:d1:c4:75:67:42:d8:74: 0b:ac:71:3c:3e:4f:28:28:67:a6:b6:6b:f2:09:f0:35:39:d0: 11:d2:ed:34:c0:2e:d5:f7:4e:69:81:46:72:c8:c6:37:12:63: 85:21:25:97:3f:b1:b7:bf:d2:aa:1b:1d:91:dc:0e:bc:79:70: 18:9c:24:bc:3c:a1:f9:1d:78:0c:c6:17:22:c9:3c:35:62:bf: 51:78:68:91:a3:4c:6b:5c:24:61:03:cb:7f:47:94:dd:a4:82: b9:3b:20:e6:0b:bf:9f:1a:8e:02:af:2d:3d:fb:1b:05:cf:78: dc:b0:7d:cb:89:3a:40:e8:25:ac:fd:c9:eb:43:a4:59:43:5f: ee:8a:e3:71:d4:71:1c:17:e0:84:2c:92:82:52:69:9e:25:c5: c3:7d:a9:13:76:82:f4:fc:ca:99:6b:20:2b:94:e5:eb:34:8d: e7:38:65:68 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJoowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTg5NEYxMTAvBgNVBAUTKDM2MTI5MDY5Mjg5OTA4MkNERTIzRjUwNDUzQTQxNTVF MEFBQjc5NzgwHhcNMjUwODIyMTU0NDA3WhcNMjUwODI5MTU0NDA3WjAYMRYwFAYD VQQDEw02OGE4OTA0Ny02ZDk4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoTkoQ7JDH4XZST5uM/jrQhhQh1/WAC+gj81HFtMiyRTAidTprwxPyiwQ2geh ocUhqcNoqR3l1+gby4neiiKm9UZvpBKQEF86YXxWtpHofwYJ3PCTnkgvcIyFAVY5 DdIpQZimy4hlr2YeZJseW3SVAxcSftBn7pIyT+qKXIAzOGOgR3HBjnHXjTSpREw+ nc/arwWTNwcBTLHsff8BIQrO80C6wzIzcy+mwjWPLk1lihl/1b592SGG5kF+ENYT Yjiv53cIT0x/Bt7S5ztqkqew9RpKRlyn4kbkAUpsk/N4DzUWlGLJ9J5TZktXq7gN OWTBqXb05693+FhkCDU2kEPdswIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJpuOuDw a41yfdsYANJUSpknCWfuMB8GA1UdIwQYMBaAFDYSkGkomQgs3iP1BFOkFV4Kq3l4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExODk0Ri85NjNDRjBDRUVD NUUxMUU0OEU3RDAxMTlDNEY5QUUwMi9OaEtRYVNpWkNDemVJX1VFVTZRVlhncXJl WGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05oS1FhU2laQ0N6ZUlfVUVVNlFWWGdxcmVYZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx ODk0Ri85NjNDRjBDRUVDNUUxMUU0OEU3RDAxMTlDNEY5QUUwMi9OaEtRYVNpWkND emVJX1VFVTZRVlhncXJlWGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBA4hDY6XaXs96dHm0o2sWRdcDYwQj/A0snBj4wRJIVfQFqyUYRO0AS Q4ncHd2HcNdwZwAdCYk3aJBgnO/ATCzu8mqM9+UMq/VMd5kcNDPV95Ql+NHEdWdC 2HQLrHE8Pk8oKGemtmvyCfA1OdAR0u00wC7V905pgUZyyMY3EmOFISWXP7G3v9Kq Gx2R3A68eXAYnCS8PKH5HXgMxhciyTw1Yr9ReGiRo0xrXCRhA8t/R5TdpIK5OyDm C7+fGo4Cry09+xsFz3jcsH3LiTpA6CWs/cnrQ6RZQ1/uiuNx1HEcF+CELJKCUmme JcXDfakTdoL0/MqZayArlOXrNI3nOGVo -----END CERTIFICATE-----Generated at Sun Aug 24 07:20:51 2025 by rpki-client