$ rpki-client -vvf rpki.apnic.net/member_repository/A912677F/C43D769663EC11EA97B72587C4F9AE02/NmQpLU_S3_HIhBdQ_IN58ZRaE34.mft File: NmQpLU_S3_HIhBdQ_IN58ZRaE34.mft (raw, json) Hash identifier: AOOdcgIKjmIKR+NM8+CWl18mSQgJ7Nr+RA479NzAVIw= Subject key identifier: 91:0D:46:26:DD:AD:05:88:04:5D:EF:D5:8F:33:15:59:44:98:4A:66 Authority key identifier: 36:64:29:2D:4F:D2:DF:F1:C8:84:17:50:FC:83:79:F1:94:5A:13:7E Certificate issuer: /CN=A912677F/serialNumber=3664292D4FD2DFF1C8841750FC8379F1945A137E Certificate serial: 0A8F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NmQpLU_S3_HIhBdQ_IN58ZRaE34.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912677F/C43D769663EC11EA97B72587C4F9AE02/NmQpLU_S3_HIhBdQ_IN58ZRaE34.mft Manifest number: 0A88 Signing time: Fri 22 Aug 2025 19:42:17 +0000 Manifest this update: Fri 22 Aug 2025 19:42:17 +0000 Manifest next update: Fri 29 Aug 2025 19:42:17 +0000 Files and hashes: 1: NmQpLU_S3_HIhBdQ_IN58ZRaE34.crl (hash: qRYSoZkPTwBokOeCAc6Yj/lpflQVFQwHUYiWnFBuErg=) 2: B82FA738111C11EBB805F52AC4F9AE02.roa (hash: EJ4VnRATjOO9ERUrQeU1qxPXlhkEMnZWEHJLCS7gQyQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912677F/C43D769663EC11EA97B72587C4F9AE02/NmQpLU_S3_HIhBdQ_IN58ZRaE34.crl rsync://rpki.apnic.net/member_repository/A912677F/C43D769663EC11EA97B72587C4F9AE02/NmQpLU_S3_HIhBdQ_IN58ZRaE34.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NmQpLU_S3_HIhBdQ_IN58ZRaE34.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 19:42:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2703 (0xa8f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912677F, serialNumber=3664292D4FD2DFF1C8841750FC8379F1945A137E Validity Not Before: Aug 22 19:42:17 2025 GMT Not After : Aug 29 19:42:17 2025 GMT Subject: CN=68a8c819-5c5a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:0b:cc:f9:27:be:d4:98:24:a7:78:cf:b1:80: 1d:ef:0a:c7:9e:d5:6a:fa:27:4a:5d:7c:70:23:d5: 6c:51:ce:c0:d1:21:20:6b:1f:a4:11:7c:1f:fb:5a: 7f:60:8c:f0:55:51:27:73:83:a2:62:cf:c8:02:f2: 9a:30:31:b9:f7:38:07:c8:fe:d8:7b:44:1b:a9:81: 16:98:fd:5f:fe:3d:a9:f9:ac:b0:7f:1c:31:5e:49: 9a:46:c9:1c:b9:9f:e5:ca:64:2b:63:7c:8c:b4:10: 45:d4:ae:99:3f:08:c4:ab:4c:de:4d:8a:81:39:ae: 46:b3:7d:5c:35:a6:c1:81:d5:91:e7:9c:80:14:c6: 17:b9:5c:a0:c6:8e:4a:b9:f8:c5:0f:e3:f9:f6:12: 28:95:ce:ba:bf:9b:dd:9e:f2:ea:db:4c:db:17:7a: cd:9a:62:75:85:56:b1:d4:69:2a:f3:2b:ef:43:9c: 7c:af:65:65:c1:30:14:c0:6c:9b:11:80:be:88:9f: e1:fc:c9:3a:69:c9:8b:e1:b8:62:4f:12:60:a6:fd: c2:ec:25:8c:bc:2b:ed:6a:7d:99:41:31:9c:c4:9d: c0:4e:a7:8c:b2:e7:bf:36:3a:09:c5:60:7a:e3:f6: fa:8e:61:99:1c:ac:34:b0:2a:c3:c7:62:fb:7e:bb: a8:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:0D:46:26:DD:AD:05:88:04:5D:EF:D5:8F:33:15:59:44:98:4A:66 X509v3 Authority Key Identifier: keyid:36:64:29:2D:4F:D2:DF:F1:C8:84:17:50:FC:83:79:F1:94:5A:13:7E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912677F/C43D769663EC11EA97B72587C4F9AE02/NmQpLU_S3_HIhBdQ_IN58ZRaE34.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NmQpLU_S3_HIhBdQ_IN58ZRaE34.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912677F/C43D769663EC11EA97B72587C4F9AE02/NmQpLU_S3_HIhBdQ_IN58ZRaE34.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8c:fa:46:75:0f:eb:a1:b7:bd:e0:8e:e3:98:2f:78:e7:9a:be: 0d:62:a9:13:b6:a0:05:9c:76:af:f4:fd:08:22:68:66:d8:88: fc:e1:08:40:ba:05:50:94:0c:c1:2a:35:0b:f3:e0:ae:60:a7: 0d:ce:1f:16:f2:22:af:81:59:59:8a:c1:03:8b:77:6e:a0:94: e4:bb:10:07:5b:b8:bb:39:11:a9:1f:96:91:a8:c0:32:87:51: 65:c4:26:65:f4:1c:8d:58:d5:35:3f:6f:91:6d:30:40:5c:ac: 57:c9:a3:07:e9:a7:d4:c9:54:a8:45:15:98:d3:36:6f:01:b9: 2e:8f:21:60:fb:b6:e0:da:f9:7b:52:a5:aa:ef:a2:6b:a0:b3: a1:10:48:6e:00:c9:4b:de:3a:04:b7:33:96:1a:6a:64:4b:58: 6a:bf:55:85:11:ce:b5:cc:73:94:26:b6:18:fc:24:38:ff:95: 7c:25:96:76:8c:97:38:7c:91:de:69:19:fc:41:79:ba:c7:17: 66:4c:24:80:d8:af:6d:7e:03:c1:96:e7:77:c6:6a:61:05:d8: fa:fc:7b:7f:26:22:e5:1b:1b:0c:55:2a:e6:8c:0d:2b:2f:90: bc:e5:4b:d2:00:3c:ce:35:a4:3c:b6:8c:ae:1e:03:a8:f5:8d: 27:47:a4:c2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCo8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjY3N0YxMTAvBgNVBAUTKDM2NjQyOTJENEZEMkRGRjFDODg0MTc1MEZDODM3OUYx OTQ1QTEzN0UwHhcNMjUwODIyMTk0MjE3WhcNMjUwODI5MTk0MjE3WjAYMRYwFAYD VQQDEw02OGE4YzgxOS01YzVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoAvM+Se+1Jgkp3jPsYAd7wrHntVq+idKXXxwI9VsUc7A0SEgax+kEXwf+1p/ YIzwVVEnc4OiYs/IAvKaMDG59zgHyP7Ye0QbqYEWmP1f/j2p+aywfxwxXkmaRskc uZ/lymQrY3yMtBBF1K6ZPwjEq0zeTYqBOa5Gs31cNabBgdWR55yAFMYXuVygxo5K ufjFD+P59hIolc66v5vdnvLq20zbF3rNmmJ1hVax1Gkq8yvvQ5x8r2VlwTAUwGyb EYC+iJ/h/Mk6acmL4bhiTxJgpv3C7CWMvCvtan2ZQTGcxJ3ATqeMsue/NjoJxWB6 4/b6jmGZHKw0sCrDx2L7fruowQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJENRibd rQWIBF3v1Y8zFVlEmEpmMB8GA1UdIwQYMBaAFDZkKS1P0t/xyIQXUPyDefGUWhN+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNjc3Ri9DNDNENzY5NjYz RUMxMUVBOTdCNzI1ODdDNEY5QUUwMi9ObVFwTFVfUzNfSEloQmRRX0lONThaUmFF MzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05tUXBMVV9TM19ISWhCZFFfSU41OFpSYUUzNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy Njc3Ri9DNDNENzY5NjYzRUMxMUVBOTdCNzI1ODdDNEY5QUUwMi9ObVFwTFVfUzNf SEloQmRRX0lONThaUmFFMzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCM+kZ1D+uht73gjuOYL3jnmr4NYqkTtqAFnHav9P0IImhm2Ij84QhA ugVQlAzBKjUL8+CuYKcNzh8W8iKvgVlZisEDi3duoJTkuxAHW7i7ORGpH5aRqMAy h1FlxCZl9ByNWNU1P2+RbTBAXKxXyaMH6afUyVSoRRWY0zZvAbkujyFg+7bg2vl7 UqWq76JroLOhEEhuAMlL3joEtzOWGmpkS1hqv1WFEc61zHOUJrYY/CQ4/5V8JZZ2 jJc4fJHeaRn8QXm6xxdmTCSA2K9tfgPBlud3xmphBdj6/Ht/JiLlGxsMVSrmjA0r L5C85UvSADzONaQ8toyuHgOo9Y0nR6TC -----END CERTIFICATE-----Generated at Sun Aug 24 00:47:14 2025 by rpki-client