$ rpki-client -vvf rpki.apnic.net/member_repository/A911B5B4/709F7A26B82911E993738A09C4F9AE02/nflMM9P2R649kTYeHxcsIGhvWYk.mft File: nflMM9P2R649kTYeHxcsIGhvWYk.mft (raw, json) Hash identifier: loW8KhFkXvQ6qZEk/b+4XnSEmEIUc7Abu4apWNsHni0= Subject key identifier: D9:F2:CF:0E:B5:21:1E:2D:9B:B4:67:B0:3B:8A:0C:2B:0C:13:8C:9B Authority key identifier: 9D:F9:4C:33:D3:F6:47:AE:3D:91:36:1E:1F:17:2C:20:68:6F:59:89 Certificate issuer: /CN=A911B5B4/serialNumber=9DF94C33D3F647AE3D91361E1F172C20686F5989 Certificate serial: 0E1E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nflMM9P2R649kTYeHxcsIGhvWYk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911B5B4/709F7A26B82911E993738A09C4F9AE02/nflMM9P2R649kTYeHxcsIGhvWYk.mft Manifest number: 0DFB Signing time: Fri 22 Aug 2025 17:58:44 +0000 Manifest this update: Fri 22 Aug 2025 17:58:43 +0000 Manifest next update: Fri 29 Aug 2025 17:58:43 +0000 Files and hashes: 1: nflMM9P2R649kTYeHxcsIGhvWYk.crl (hash: Zw75VPLdxTKr1LKwsQ8tfOLLZS28OrN3sQ3VSSnpuy4=) 2: 46B27CC6B82A11E9843DEE0AC4F9AE02.roa (hash: 8a6WJtEg8FJ5eHnpvgMwqod0UL5e0zTS0SwjCaK0jd4=) 3: 9E78AEC4C78E11EBB4983F5BC4F9AE02.roa (hash: kN9kZZVIv74yYHGXDsanuB3xPPBPu4OVgy2TpSGU+PU=) 4: 47E67066B82A11E9843DEE0AC4F9AE02.roa (hash: YggXfy20kvjf1iFOsIwuuVFkMi74/bpO/23VT4jrnTE=) 5: 9F8B79C2C78E11EBB4983F5BC4F9AE02.roa (hash: n/ZkcBxXbOU1wyzDS48DMJkcfdrM8k6k+BibFqk5ai8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911B5B4/709F7A26B82911E993738A09C4F9AE02/nflMM9P2R649kTYeHxcsIGhvWYk.crl rsync://rpki.apnic.net/member_repository/A911B5B4/709F7A26B82911E993738A09C4F9AE02/nflMM9P2R649kTYeHxcsIGhvWYk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nflMM9P2R649kTYeHxcsIGhvWYk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 17:58:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3614 (0xe1e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911B5B4, serialNumber=9DF94C33D3F647AE3D91361E1F172C20686F5989 Validity Not Before: Aug 22 17:58:43 2025 GMT Not After : Aug 29 17:58:43 2025 GMT Subject: CN=68a8afd3-0952 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:73:65:c1:6b:ee:e8:66:05:b1:0b:4a:7b:4d: 37:37:0b:50:e7:eb:76:a3:3a:57:09:aa:35:a8:75: 8c:f7:32:17:8d:91:75:af:80:a6:ed:25:4f:93:24: e2:e3:a7:cc:67:88:5c:15:7b:87:80:a3:a8:e6:6a: 40:f4:bc:d5:37:53:4a:6e:d8:86:73:48:e5:b8:54: b9:54:ef:98:c1:4d:64:7f:5a:ae:2d:26:fb:2c:83: 4d:1e:91:00:d0:13:d0:3f:46:23:28:ae:09:ef:f8: 70:81:3a:78:3e:96:ab:5c:01:b2:02:bd:f9:ae:50: 34:3f:4a:ac:13:dc:1d:bf:97:5a:13:49:59:9a:93: 47:f4:60:22:a8:06:1d:2d:cd:70:0d:e3:0e:09:c3: 7f:12:af:8f:00:2d:92:da:fd:f5:8f:a4:eb:ad:57: 9a:b6:21:90:c2:11:4a:53:f5:37:8b:06:c3:c9:72: 1a:6a:e4:c3:75:82:30:3b:9b:df:1c:dc:51:7c:a3: 17:16:21:e5:7d:61:0a:c6:31:38:18:f2:f1:91:fb: e7:32:bc:48:1a:6c:cc:84:e8:35:32:06:78:31:d8: e4:ef:48:f0:73:0c:ce:cb:2f:f2:fb:b6:08:98:d7: 32:84:58:8d:0f:b4:93:d6:7c:55:b7:c1:b3:0d:d5: 0a:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:F2:CF:0E:B5:21:1E:2D:9B:B4:67:B0:3B:8A:0C:2B:0C:13:8C:9B X509v3 Authority Key Identifier: keyid:9D:F9:4C:33:D3:F6:47:AE:3D:91:36:1E:1F:17:2C:20:68:6F:59:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911B5B4/709F7A26B82911E993738A09C4F9AE02/nflMM9P2R649kTYeHxcsIGhvWYk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nflMM9P2R649kTYeHxcsIGhvWYk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911B5B4/709F7A26B82911E993738A09C4F9AE02/nflMM9P2R649kTYeHxcsIGhvWYk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6e:80:5c:69:9e:c8:26:67:36:3d:b1:1e:7d:3c:1d:d3:19:61: 57:8c:2b:fe:eb:22:50:cd:33:3e:d6:e5:a1:bb:c9:44:1d:35: 94:a6:8b:8d:c1:5d:77:e4:76:b3:73:8a:a4:55:e0:f2:3c:f3: 65:2e:bc:20:12:85:be:09:e4:93:ec:56:04:52:4f:f0:45:67: ec:e8:8d:c1:ac:a2:cf:98:1a:ef:43:33:09:e9:f2:39:cc:3c: 79:0c:1a:cf:0e:b7:e4:97:68:17:40:d2:f6:f1:8d:66:db:77: b5:9f:92:84:ac:af:1e:6f:ef:4c:11:74:d8:c6:41:c7:26:cd: db:94:c8:d4:96:7a:90:43:47:9e:f2:ac:86:6c:c4:96:23:6d: d4:d4:1e:13:b1:43:04:58:e4:38:d5:f5:20:1e:ff:dc:32:c4: 4b:17:86:3c:d6:f5:16:e7:39:44:41:1b:93:06:2d:a1:c3:20: e7:d8:ee:56:50:e5:15:a8:09:61:02:e3:58:58:ad:b8:96:84: 39:2b:1c:15:69:94:d6:06:24:d2:53:d5:85:f2:ec:9b:25:e3: 97:7a:c1:57:8f:f2:3b:36:63:de:7c:5d:35:7d:10:90:24:2c: a7:2f:36:97:74:47:15:65:b1:82:86:82:49:8a:19:0a:05:9b: 81:cd:0e:5d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDh4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUI1QjQxMTAvBgNVBAUTKDlERjk0QzMzRDNGNjQ3QUUzRDkxMzYxRTFGMTcyQzIw Njg2RjU5ODkwHhcNMjUwODIyMTc1ODQzWhcNMjUwODI5MTc1ODQzWjAYMRYwFAYD VQQDEw02OGE4YWZkMy0wOTUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7HNlwWvu6GYFsQtKe003NwtQ5+t2ozpXCao1qHWM9zIXjZF1r4Cm7SVPkyTi 46fMZ4hcFXuHgKOo5mpA9LzVN1NKbtiGc0jluFS5VO+YwU1kf1quLSb7LINNHpEA 0BPQP0YjKK4J7/hwgTp4PparXAGyAr35rlA0P0qsE9wdv5daE0lZmpNH9GAiqAYd Lc1wDeMOCcN/Eq+PAC2S2v31j6TrrVeatiGQwhFKU/U3iwbDyXIaauTDdYIwO5vf HNxRfKMXFiHlfWEKxjE4GPLxkfvnMrxIGmzMhOg1MgZ4Mdjk70jwcwzOyy/y+7YI mNcyhFiND7ST1nxVt8GzDdUKSQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNnyzw61 IR4tm7RnsDuKDCsME4ybMB8GA1UdIwQYMBaAFJ35TDPT9keuPZE2Hh8XLCBob1mJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQjVCNC83MDlGN0EyNkI4 MjkxMUU5OTM3MzhBMDlDNEY5QUUwMi9uZmxNTTlQMlI2NDlrVFllSHhjc0lHaHZX WWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25mbE1NOVAyUjY0OWtUWWVIeGNzSUdodldZay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QjVCNC83MDlGN0EyNkI4MjkxMUU5OTM3MzhBMDlDNEY5QUUwMi9uZmxNTTlQMlI2 NDlrVFllSHhjc0lHaHZXWWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBugFxpnsgmZzY9sR59PB3TGWFXjCv+6yJQzTM+1uWhu8lEHTWUpouN wV135Hazc4qkVeDyPPNlLrwgEoW+CeST7FYEUk/wRWfs6I3BrKLPmBrvQzMJ6fI5 zDx5DBrPDrfkl2gXQNL28Y1m23e1n5KErK8eb+9MEXTYxkHHJs3blMjUlnqQQ0ee 8qyGbMSWI23U1B4TsUMEWOQ41fUgHv/cMsRLF4Y81vUW5zlEQRuTBi2hwyDn2O5W UOUVqAlhAuNYWK24loQ5KxwVaZTWBiTSU9WF8uybJeOXesFXj/I7NmPefF01fRCQ JCynLzaXdEcVZbGChoJJihkKBZuBzQ5d -----END CERTIFICATE-----Generated at Sun Aug 24 05:14:02 2025 by rpki-client