$ rpki-client -vvf rpki.apnic.net/member_repository/A915517D/3D7A6286CF5611E7BF695510C4F9AE02/NEp3XiRcztCAx5UhWW4yyPBtiMg.mft File: NEp3XiRcztCAx5UhWW4yyPBtiMg.mft (raw, json) Hash identifier: 6uOxuj1EYYZdfpWMgkAwqxTkkNWGpHn19uLdBYH8YFo= Subject key identifier: 4A:3F:74:9B:3C:21:46:BD:B8:EC:7B:5C:E8:7E:F3:77:34:5B:52:05 Authority key identifier: 34:4A:77:5E:24:5C:CE:D0:80:C7:95:21:59:6E:32:C8:F0:6D:88:C8 Certificate issuer: /CN=A915517D/serialNumber=344A775E245CCED080C79521596E32C8F06D88C8 Certificate serial: 17CE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NEp3XiRcztCAx5UhWW4yyPBtiMg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915517D/3D7A6286CF5611E7BF695510C4F9AE02/NEp3XiRcztCAx5UhWW4yyPBtiMg.mft Manifest number: 17B9 Signing time: Fri 22 Aug 2025 16:40:48 +0000 Manifest this update: Fri 22 Aug 2025 16:40:48 +0000 Manifest next update: Fri 29 Aug 2025 16:40:48 +0000 Files and hashes: 1: NEp3XiRcztCAx5UhWW4yyPBtiMg.crl (hash: ojbFCvU8Kf1U+X2+/slrUnz4rlzayWuqxM2l/2wAWo0=) 2: 2F840DD2740911EDA7146F2DC4F9AE02.roa (hash: PKyy2enQZwJAPAGB65CItDAb1Yve/y7L5I1YK7Ph1yU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915517D/3D7A6286CF5611E7BF695510C4F9AE02/NEp3XiRcztCAx5UhWW4yyPBtiMg.crl rsync://rpki.apnic.net/member_repository/A915517D/3D7A6286CF5611E7BF695510C4F9AE02/NEp3XiRcztCAx5UhWW4yyPBtiMg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NEp3XiRcztCAx5UhWW4yyPBtiMg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 16:40:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6094 (0x17ce) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915517D, serialNumber=344A775E245CCED080C79521596E32C8F06D88C8 Validity Not Before: Aug 22 16:40:48 2025 GMT Not After : Aug 29 16:40:48 2025 GMT Subject: CN=68a89d90-805c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:b1:2f:3d:9b:ad:f1:30:69:84:05:e3:f6:5c: 5b:ca:47:2a:4f:5c:bf:3f:10:d5:b1:bc:ab:04:a8: 0f:50:4e:00:a5:b9:6b:95:20:34:8d:96:ac:95:77: f3:f9:ce:92:ab:ae:e7:90:a5:20:fb:16:10:b2:d1: 62:8f:7e:69:eb:4f:43:03:c6:fd:3d:f9:1f:9a:31: 61:62:ea:3d:d0:0f:c5:e3:86:68:1c:aa:35:31:c2: 9d:ab:8e:4b:4f:c3:e3:37:94:da:ee:b3:24:1e:81: a9:55:cd:38:43:74:d0:45:57:8d:85:49:7a:87:09: 06:70:14:0c:11:3a:11:b8:56:43:95:53:ef:5b:f3: 4f:07:ec:b2:6f:a9:35:bd:cf:f0:8a:5f:97:0e:42: 82:52:a1:be:69:81:19:6b:6a:4b:f7:e0:c2:e5:e5: bc:12:3d:74:01:2f:1a:b9:ea:a3:a3:00:2a:0a:fc: 15:00:eb:b3:21:86:72:b1:b3:69:7e:c0:57:9f:b6: 1c:68:b0:65:5d:ad:c8:30:55:60:05:17:1b:d1:31: 81:5f:ba:ba:87:9f:d9:3e:8c:f6:7a:e1:3d:65:05: 08:4c:9a:39:c8:25:fb:a4:6b:fe:71:0c:17:49:48: 28:07:ae:e8:fe:7e:c0:b0:b3:e8:82:67:32:d6:6a: cd:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:3F:74:9B:3C:21:46:BD:B8:EC:7B:5C:E8:7E:F3:77:34:5B:52:05 X509v3 Authority Key Identifier: keyid:34:4A:77:5E:24:5C:CE:D0:80:C7:95:21:59:6E:32:C8:F0:6D:88:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915517D/3D7A6286CF5611E7BF695510C4F9AE02/NEp3XiRcztCAx5UhWW4yyPBtiMg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NEp3XiRcztCAx5UhWW4yyPBtiMg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915517D/3D7A6286CF5611E7BF695510C4F9AE02/NEp3XiRcztCAx5UhWW4yyPBtiMg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 59:7c:e2:72:26:de:20:7b:4a:1f:aa:cf:b2:13:e1:59:19:21: 18:7f:e9:92:fc:cc:51:bd:b6:38:8a:ca:2e:5c:8d:02:bb:f9: f1:f5:3f:22:b3:89:4d:c2:f6:e0:4c:56:dd:2a:5f:40:99:5d: 4e:ae:a1:63:cf:f9:1c:63:de:78:72:10:20:15:a1:1e:f2:c2: e5:0e:6e:31:5f:9f:ff:52:af:31:ac:ea:3a:08:96:0b:26:b9: 09:4b:92:a7:cf:2a:b4:ab:5a:1d:fe:3f:1f:c3:62:4d:42:7e: 88:ed:d5:05:db:af:21:ed:ce:68:70:d0:86:fb:45:e8:f9:d4: 9b:f0:b3:bf:d0:e2:5c:d6:46:3b:36:2a:fc:fd:68:c4:c3:49: 90:7b:28:58:1b:02:fb:29:42:62:9c:13:60:90:b0:f7:13:5b: 9f:4d:11:35:d9:ee:91:0e:ae:f6:1b:9d:00:82:f1:b4:a8:e3: 84:b1:18:6a:d7:dc:ff:e1:86:6f:59:79:5a:07:39:a4:28:36: 87:84:ac:50:3b:08:ea:b7:13:dd:a7:98:a7:9c:08:8a:eb:4c: 80:f6:7a:99:aa:e1:a2:31:5d:b8:71:b2:d2:ef:52:68:a3:bc: f8:0c:1a:a2:e2:a5:a2:45:5a:2c:90:b8:84:da:2a:df:78:9c: 3a:45:4b:59 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICF84wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTUxN0QxMTAvBgNVBAUTKDM0NEE3NzVFMjQ1Q0NFRDA4MEM3OTUyMTU5NkUzMkM4 RjA2RDg4QzgwHhcNMjUwODIyMTY0MDQ4WhcNMjUwODI5MTY0MDQ4WjAYMRYwFAYD VQQDEw02OGE4OWQ5MC04MDVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwLEvPZut8TBphAXj9lxbykcqT1y/PxDVsbyrBKgPUE4ApblrlSA0jZaslXfz +c6Sq67nkKUg+xYQstFij35p609DA8b9PfkfmjFhYuo90A/F44ZoHKo1McKdq45L T8PjN5Ta7rMkHoGpVc04Q3TQRVeNhUl6hwkGcBQMEToRuFZDlVPvW/NPB+yyb6k1 vc/wil+XDkKCUqG+aYEZa2pL9+DC5eW8Ej10AS8aueqjowAqCvwVAOuzIYZysbNp fsBXn7YcaLBlXa3IMFVgBRcb0TGBX7q6h5/ZPoz2euE9ZQUITJo5yCX7pGv+cQwX SUgoB67o/n7AsLPogmcy1mrNbwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEo/dJs8 IUa9uOx7XOh+83c0W1IFMB8GA1UdIwQYMBaAFDRKd14kXM7QgMeVIVluMsjwbYjI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NTE3RC8zRDdBNjI4NkNG NTYxMUU3QkY2OTU1MTBDNEY5QUUwMi9ORXAzWGlSY3p0Q0F4NVVoV1c0eXlQQnRp TWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05FcDNYaVJjenRDQXg1VWhXVzR5eVBCdGlNZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NTE3RC8zRDdBNjI4NkNGNTYxMUU3QkY2OTU1MTBDNEY5QUUwMi9ORXAzWGlSY3p0 Q0F4NVVoV1c0eXlQQnRpTWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBZfOJyJt4ge0ofqs+yE+FZGSEYf+mS/MxRvbY4isouXI0Cu/nx9T8i s4lNwvbgTFbdKl9AmV1OrqFjz/kcY954chAgFaEe8sLlDm4xX5//Uq8xrOo6CJYL JrkJS5Knzyq0q1od/j8fw2JNQn6I7dUF268h7c5ocNCG+0Xo+dSb8LO/0OJc1kY7 Nir8/WjEw0mQeyhYGwL7KUJinBNgkLD3E1ufTRE12e6RDq72G50AgvG0qOOEsRhq 19z/4YZvWXlaBzmkKDaHhKxQOwjqtxPdp5innAiK60yA9nqZquGiMV24cbLS71Jo o7z4DBqi4qWiRVoskLiE2irfeJw6RUtZ -----END CERTIFICATE-----Generated at Sat Aug 23 19:33:43 2025 by rpki-client