$ rpki-client -vvf rpki.apnic.net/member_repository/A9152D08/F9C333921D8711EAA9C5B170C4F9AE02/NNwgEp6tb0Gnyi2Zyb0-fmAzy4g.mft File: NNwgEp6tb0Gnyi2Zyb0-fmAzy4g.mft (raw, json) Hash identifier: oq56fPHDr4ArIn/O+V7eLiFDjpWIJ41c9F85F5mALog= Subject key identifier: D9:C2:AE:57:A4:D3:48:DE:7D:F5:14:FC:37:AA:8F:1B:BB:C7:64:18 Authority key identifier: 34:DC:20:12:9E:AD:6F:41:A7:CA:2D:99:C9:BD:3E:7E:60:33:CB:88 Certificate issuer: /CN=A9152D08/serialNumber=34DC20129EAD6F41A7CA2D99C9BD3E7E6033CB88 Certificate serial: 0CA7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NNwgEp6tb0Gnyi2Zyb0-fmAzy4g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9152D08/F9C333921D8711EAA9C5B170C4F9AE02/NNwgEp6tb0Gnyi2Zyb0-fmAzy4g.mft Manifest number: 0C46 Signing time: Fri 22 Aug 2025 18:57:02 +0000 Manifest this update: Fri 22 Aug 2025 18:57:01 +0000 Manifest next update: Fri 29 Aug 2025 18:57:01 +0000 Files and hashes: 1: NNwgEp6tb0Gnyi2Zyb0-fmAzy4g.crl (hash: 2ovTNRE2DnkTpKyRSyLnvHatxFaPCgoiA1GHEizlpS8=) 2: D45F1712A8B311EFADA46649C4F9AE02.roa (hash: WVkxMnAPmYEx2pir9yJBj6S9Ri2HeWB84QrUcGBIgX0=) 3: 0592D90E02E111F0BFF53A15C4F9AE02.roa (hash: JKDdsewbmTds8DX8z5n44dixpiguXnj1mkHopckNnnI=) 4: 2F3FBD86F3E511EA871E451AC4F9AE02.roa (hash: yVyxrQ/XexxsyDCtzcGEooxv2C0cJKVEzNUoJUfFCpg=) 5: 30C3D4F81D8A11EA8ECDAA75C4F9AE02.roa (hash: mpanMW6E++IIJhwRfBokQkjYWR4BXeWQNkL+zlkPQk0=) 6: 31554CBC1D8A11EA8ECDAA75C4F9AE02.roa (hash: uM9esMnbJemVTDXSBi0eBdZiTFnt+Mq64Yuw7Vo5ff8=) 7: 9A8603FC93ED11ED931AB73CC4F9AE02.roa (hash: EXrq9SaZzH6ZvSPXc9dAkv/CRi57VwFICygbDK3FbAQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9152D08/F9C333921D8711EAA9C5B170C4F9AE02/NNwgEp6tb0Gnyi2Zyb0-fmAzy4g.crl rsync://rpki.apnic.net/member_repository/A9152D08/F9C333921D8711EAA9C5B170C4F9AE02/NNwgEp6tb0Gnyi2Zyb0-fmAzy4g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NNwgEp6tb0Gnyi2Zyb0-fmAzy4g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 18:57:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3239 (0xca7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9152D08, serialNumber=34DC20129EAD6F41A7CA2D99C9BD3E7E6033CB88 Validity Not Before: Aug 22 18:57:01 2025 GMT Not After : Aug 29 18:57:01 2025 GMT Subject: CN=68a8bd7e-2be5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:f8:97:31:5c:40:e8:b4:10:25:a6:26:72:45: 44:b0:07:da:85:92:4e:02:ef:3c:71:6a:5b:97:07: c0:83:51:58:88:1d:3b:65:d0:49:62:06:9c:e8:fc: 21:5d:60:ff:d5:d0:e2:9d:34:93:a0:ab:b7:e0:90: e5:40:67:7f:39:46:cc:14:66:7c:dc:84:10:e2:b8: 54:54:53:e5:a5:92:5a:6d:43:27:3c:52:ea:b3:fe: 2c:bc:f8:db:1b:77:02:92:e9:9c:b3:10:13:fa:da: 67:57:2b:c0:55:9c:7c:34:d1:90:8d:8b:fc:2b:57: 88:bb:c6:e3:48:fc:3b:da:c0:64:0a:d9:ca:0c:f2: 32:74:d2:77:c2:4d:9d:d2:aa:35:6f:41:79:2b:44: ed:1a:d3:5e:5d:55:c1:7f:fc:bf:2a:df:e6:82:71: c9:6d:51:f9:68:58:ae:81:6a:4e:59:01:c1:b5:a8: 38:27:bc:a1:a2:16:e0:a8:29:3c:fb:41:2a:27:6b: 90:5e:6a:4a:00:c5:17:6f:e0:b2:f8:9f:01:e2:29: cd:0d:4c:84:81:0a:40:58:12:04:68:26:c4:d6:e2: db:b9:0d:fd:91:a2:12:c9:02:74:79:a2:c0:b9:9c: b0:3b:2b:ed:a1:93:c5:12:b6:3b:7b:c4:c7:ab:df: d8:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:C2:AE:57:A4:D3:48:DE:7D:F5:14:FC:37:AA:8F:1B:BB:C7:64:18 X509v3 Authority Key Identifier: keyid:34:DC:20:12:9E:AD:6F:41:A7:CA:2D:99:C9:BD:3E:7E:60:33:CB:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9152D08/F9C333921D8711EAA9C5B170C4F9AE02/NNwgEp6tb0Gnyi2Zyb0-fmAzy4g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NNwgEp6tb0Gnyi2Zyb0-fmAzy4g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9152D08/F9C333921D8711EAA9C5B170C4F9AE02/NNwgEp6tb0Gnyi2Zyb0-fmAzy4g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3a:1e:9e:30:83:f6:cd:a9:3a:40:16:de:59:c3:3b:06:61:b5: 39:50:96:7a:52:1b:87:19:26:1f:57:8a:a4:29:8d:50:50:b4: a5:ec:be:e7:27:6d:17:b1:5c:da:9f:80:8e:e5:cd:ab:44:10: e5:0d:30:99:49:7a:6f:96:f4:17:d6:f6:12:72:ef:f9:92:fd: bb:5a:30:9b:bc:c9:1a:cf:a2:86:6a:04:68:07:a6:aa:a9:e8: 8c:a5:99:93:65:0f:70:8b:3c:48:71:e8:58:0b:71:b0:18:ad: 96:6d:57:0f:7e:cc:43:82:25:3c:14:2d:e2:bf:ba:22:00:79: a8:b4:6d:6e:be:17:90:c5:f0:cd:7e:38:08:d4:a1:84:26:51: e7:1e:4d:1b:ba:80:0c:f3:b0:4e:ab:db:eb:67:85:14:bd:38: 42:83:2c:5c:84:56:0a:67:0c:3a:0b:23:40:f5:bc:5b:7e:03: 22:cb:b8:49:23:68:0b:88:25:ea:51:74:d5:10:f1:c6:68:c9: 5f:7d:19:f8:ef:93:e5:66:06:e1:09:0d:80:f7:47:c6:b2:86: 61:86:1f:a9:49:08:d3:ed:bd:95:4a:78:f3:fe:2a:2b:9f:7b: d7:a0:a2:d8:7a:d4:b7:29:7a:82:46:10:62:fa:06:ef:84:b0: 11:35:db:3e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDKcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTJEMDgxMTAvBgNVBAUTKDM0REMyMDEyOUVBRDZGNDFBN0NBMkQ5OUM5QkQzRTdF NjAzM0NCODgwHhcNMjUwODIyMTg1NzAxWhcNMjUwODI5MTg1NzAxWjAYMRYwFAYD VQQDEw02OGE4YmQ3ZS0yYmU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7viXMVxA6LQQJaYmckVEsAfahZJOAu88cWpblwfAg1FYiB07ZdBJYgac6Pwh XWD/1dDinTSToKu34JDlQGd/OUbMFGZ83IQQ4rhUVFPlpZJabUMnPFLqs/4svPjb G3cCkumcsxAT+tpnVyvAVZx8NNGQjYv8K1eIu8bjSPw72sBkCtnKDPIydNJ3wk2d 0qo1b0F5K0TtGtNeXVXBf/y/Kt/mgnHJbVH5aFiugWpOWQHBtag4J7yhohbgqCk8 +0EqJ2uQXmpKAMUXb+Cy+J8B4inNDUyEgQpAWBIEaCbE1uLbuQ39kaISyQJ0eaLA uZywOyvtoZPFErY7e8THq9/Y3wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNnCrlek 00jeffUU/Deqjxu7x2QYMB8GA1UdIwQYMBaAFDTcIBKerW9Bp8otmcm9Pn5gM8uI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MkQwOC9GOUMzMzM5MjFE ODcxMUVBQTlDNUIxNzBDNEY5QUUwMi9OTndnRXA2dGIwR255aTJaeWIwLWZtQXp5 NGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05Od2dFcDZ0YjBHbnlpMlp5YjAtZm1Benk0Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MkQwOC9GOUMzMzM5MjFEODcxMUVBQTlDNUIxNzBDNEY5QUUwMi9OTndnRXA2dGIw R255aTJaeWIwLWZtQXp5NGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA6Hp4wg/bNqTpAFt5ZwzsGYbU5UJZ6UhuHGSYfV4qkKY1QULSl7L7n J20XsVzan4CO5c2rRBDlDTCZSXpvlvQX1vYScu/5kv27WjCbvMkaz6KGagRoB6aq qeiMpZmTZQ9wizxIcehYC3GwGK2WbVcPfsxDgiU8FC3iv7oiAHmotG1uvheQxfDN fjgI1KGEJlHnHk0buoAM87BOq9vrZ4UUvThCgyxchFYKZww6CyNA9bxbfgMiy7hJ I2gLiCXqUXTVEPHGaMlffRn475PlZgbhCQ2A90fGsoZhhh+pSQjT7b2VSnjz/ior n3vXoKLYetS3KXqCRhBi+gbvhLARNds+ -----END CERTIFICATE-----Generated at Sat Aug 23 17:14:39 2025 by rpki-client