$ rpki-client -vvf rpki.apnic.net/member_repository/A9134285/6F15B572928311EB80970420C4F9AE02/NxkwlLzz42Ui-tvxlU7l_51gHg4.mft File: NxkwlLzz42Ui-tvxlU7l_51gHg4.mft (raw, json) Hash identifier: +ga738c9vMy7juJkADkzPni1Xl6fA0tzm14cKclGxTI= Subject key identifier: A7:29:DA:74:64:6D:C7:79:6D:B2:A2:1B:ED:2F:08:6C:9F:ED:96:62 Authority key identifier: 37:19:30:94:BC:F3:E3:65:22:FA:DB:F1:95:4E:E5:FF:9D:60:1E:0E Certificate issuer: /CN=A9134285/serialNumber=37193094BCF3E36522FADBF1954EE5FF9D601E0E Certificate serial: 066B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NxkwlLzz42Ui-tvxlU7l_51gHg4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9134285/6F15B572928311EB80970420C4F9AE02/NxkwlLzz42Ui-tvxlU7l_51gHg4.mft Manifest number: 0665 Signing time: Fri 22 Aug 2025 22:42:21 +0000 Manifest this update: Fri 22 Aug 2025 22:42:21 +0000 Manifest next update: Fri 29 Aug 2025 22:42:21 +0000 Files and hashes: 1: NxkwlLzz42Ui-tvxlU7l_51gHg4.crl (hash: 63B6QWOfcgNHAYKiZk0lcbdwOvkwl0jZ8q4n0ZbjD2s=) 2: 3A00D342928511EB8B3AAC22C4F9AE02.roa (hash: aj64AT3Eg74eRiHek2DyIpF1DXkedRqzt0byGVydNm8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9134285/6F15B572928311EB80970420C4F9AE02/NxkwlLzz42Ui-tvxlU7l_51gHg4.crl rsync://rpki.apnic.net/member_repository/A9134285/6F15B572928311EB80970420C4F9AE02/NxkwlLzz42Ui-tvxlU7l_51gHg4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NxkwlLzz42Ui-tvxlU7l_51gHg4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 22:42:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1643 (0x66b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9134285, serialNumber=37193094BCF3E36522FADBF1954EE5FF9D601E0E Validity Not Before: Aug 22 22:42:21 2025 GMT Not After : Aug 29 22:42:21 2025 GMT Subject: CN=68a8f24d-975a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:cf:97:24:93:ba:34:de:95:cd:bb:fa:f6:47: d2:4b:6b:c2:6a:3e:69:d2:7f:13:ed:59:9a:29:1b: fb:26:1d:92:30:b3:9d:56:1f:06:18:bb:ef:99:22: dc:87:75:ed:bd:3a:96:ad:e7:f9:9f:b5:2a:41:1d: 3c:65:0c:7a:06:d2:29:19:e2:8f:0f:ef:23:d2:6f: 6c:b6:13:99:96:fb:a7:12:50:50:2d:91:b6:be:6e: c8:b1:6b:f4:e2:eb:23:b5:04:81:84:47:9c:7e:5b: 09:df:11:cf:4a:84:ef:05:15:28:3d:63:97:6a:f9: 8d:0f:3b:97:81:04:e5:71:2a:6c:f4:40:29:98:37: 18:b0:1f:e6:54:b0:30:b8:14:20:fa:10:22:64:37: 02:eb:03:89:36:45:36:c8:d0:c0:d2:c7:32:3d:dc: 6d:01:64:a7:78:d1:c6:af:a1:2d:af:6e:7e:e9:a5: 06:65:9b:95:e0:9c:15:95:d2:b8:ff:49:ab:90:61: 8d:3e:e3:bd:f5:01:89:1a:16:17:c9:08:90:47:0f: a0:7e:74:a7:16:c4:f4:f9:77:fb:2a:09:5f:ba:c5: e8:08:01:98:ac:61:87:71:5a:65:78:43:ec:4d:8d: 48:55:ad:f0:82:de:ad:95:f8:2d:06:99:12:0d:96: ce:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:29:DA:74:64:6D:C7:79:6D:B2:A2:1B:ED:2F:08:6C:9F:ED:96:62 X509v3 Authority Key Identifier: keyid:37:19:30:94:BC:F3:E3:65:22:FA:DB:F1:95:4E:E5:FF:9D:60:1E:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9134285/6F15B572928311EB80970420C4F9AE02/NxkwlLzz42Ui-tvxlU7l_51gHg4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NxkwlLzz42Ui-tvxlU7l_51gHg4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9134285/6F15B572928311EB80970420C4F9AE02/NxkwlLzz42Ui-tvxlU7l_51gHg4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3b:fe:16:ae:52:a1:8a:4d:17:81:cc:3d:22:7f:ff:9b:9b:b2: 51:2c:39:d9:e5:f2:68:be:81:8f:fd:a4:9e:87:b0:5b:4d:48: 1f:5a:41:b1:ac:77:c9:7c:55:8f:2b:78:f2:80:ea:30:c7:5e: 3d:40:0d:f9:b3:8c:d5:41:53:4f:06:63:af:87:c4:c7:db:cd: 38:51:3d:be:6b:bb:c0:b9:aa:be:7d:57:57:7f:dc:df:5c:c8: 51:c7:33:a6:4f:26:4f:85:6a:54:4a:42:2f:54:75:40:4b:20: 11:56:8b:65:c4:35:19:53:d1:fb:85:68:cf:5f:20:dc:57:44: 3c:23:ee:db:f6:d2:76:ab:83:ac:06:30:98:ff:bc:bb:3c:1a: a0:14:38:0e:8e:60:33:ab:9c:7f:2c:90:53:3e:b1:eb:79:16: fb:70:cf:d6:13:35:e0:d7:9e:06:24:e5:4b:bd:1d:72:36:98: 20:65:2e:72:9d:ed:66:df:33:7a:4e:52:73:52:19:65:e0:23: da:54:2e:d0:b7:39:6e:48:be:a3:27:56:d5:8a:3d:ec:9e:9d: 80:46:07:bb:0f:d9:56:04:07:6c:d3:b9:0e:0e:74:3c:6e:0c: 38:0e:d8:e0:e6:07:56:eb:56:f4:0c:d9:7c:59:cd:8a:4d:bb: 39:80:da:1b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBmswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzQyODUxMTAvBgNVBAUTKDM3MTkzMDk0QkNGM0UzNjUyMkZBREJGMTk1NEVFNUZG OUQ2MDFFMEUwHhcNMjUwODIyMjI0MjIxWhcNMjUwODI5MjI0MjIxWjAYMRYwFAYD VQQDEw02OGE4ZjI0ZC05NzVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz8+XJJO6NN6Vzbv69kfSS2vCaj5p0n8T7VmaKRv7Jh2SMLOdVh8GGLvvmSLc h3XtvTqWref5n7UqQR08ZQx6BtIpGeKPD+8j0m9sthOZlvunElBQLZG2vm7IsWv0 4usjtQSBhEecflsJ3xHPSoTvBRUoPWOXavmNDzuXgQTlcSps9EApmDcYsB/mVLAw uBQg+hAiZDcC6wOJNkU2yNDA0scyPdxtAWSneNHGr6Etr25+6aUGZZuV4JwVldK4 /0mrkGGNPuO99QGJGhYXyQiQRw+gfnSnFsT0+Xf7KglfusXoCAGYrGGHcVpleEPs TY1IVa3wgt6tlfgtBpkSDZbOtwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKcp2nRk bcd5bbKiG+0vCGyf7ZZiMB8GA1UdIwQYMBaAFDcZMJS88+NlIvrb8ZVO5f+dYB4O MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNDI4NS82RjE1QjU3Mjky ODMxMUVCODA5NzA0MjBDNEY5QUUwMi9OeGt3bEx6ejQyVWktdHZ4bFU3bF81MWdI ZzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL054a3dsTHp6NDJVaS10dnhsVTdsXzUxZ0hnNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NDI4NS82RjE1QjU3MjkyODMxMUVCODA5NzA0MjBDNEY5QUUwMi9OeGt3bEx6ejQy VWktdHZ4bFU3bF81MWdIZzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA7/hauUqGKTReBzD0if/+bm7JRLDnZ5fJovoGP/aSeh7BbTUgfWkGx rHfJfFWPK3jygOowx149QA35s4zVQVNPBmOvh8TH2804UT2+a7vAuaq+fVdXf9zf XMhRxzOmTyZPhWpUSkIvVHVASyARVotlxDUZU9H7hWjPXyDcV0Q8I+7b9tJ2q4Os BjCY/7y7PBqgFDgOjmAzq5x/LJBTPrHreRb7cM/WEzXg154GJOVLvR1yNpggZS5y ne1m3zN6TlJzUhll4CPaVC7QtzluSL6jJ1bVij3snp2ARge7D9lWBAds07kODnQ8 bgw4Dtjg5gdW61b0DNl8Wc2KTbs5gNob -----END CERTIFICATE-----Generated at Sun Aug 24 00:52:31 2025 by rpki-client