$ rpki-client -vvf rpki.apnic.net/member_repository/A91577A2/8BC15C407B0411EA9DAAD432C4F9AE02/NtqOcqrHflUzc5DvTGHJVAtFldc.mft File: NtqOcqrHflUzc5DvTGHJVAtFldc.mft (raw, json) Hash identifier: WIyPUHRO3ZAJ0XdwW9Kjb1qZMUIHCvpu4tzHulKdwAA= Subject key identifier: 43:5D:4A:90:B8:69:34:F1:8B:CE:50:F0:10:DD:B0:89:23:6A:15:C7 Authority key identifier: 36:DA:8E:72:AA:C7:7E:55:33:73:90:EF:4C:61:C9:54:0B:45:95:D7 Certificate issuer: /CN=A91577A2/serialNumber=36DA8E72AAC77E55337390EF4C61C9540B4595D7 Certificate serial: 0A40 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NtqOcqrHflUzc5DvTGHJVAtFldc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91577A2/8BC15C407B0411EA9DAAD432C4F9AE02/NtqOcqrHflUzc5DvTGHJVAtFldc.mft Manifest number: 0A2A Signing time: Fri 22 Aug 2025 19:56:33 +0000 Manifest this update: Fri 22 Aug 2025 19:56:32 +0000 Manifest next update: Fri 29 Aug 2025 19:56:32 +0000 Files and hashes: 1: NtqOcqrHflUzc5DvTGHJVAtFldc.crl (hash: CKrvwG1qxnU+RoLTMKHzAhiqnnVSVo5+vF7T727eWoE=) 2: 6A23E166499211ED879F2D11C4F9AE02.roa (hash: MzXzYE5MrqHvRoe17AJmK7I+zMsNRRFLd5oWGTmAVM0=) 3: 6B5765BC499211ED879F2D11C4F9AE02.roa (hash: 9GaBS9IbS88to+9kkQ6jxibXk5BWsO+3f5H1a6SCfEE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91577A2/8BC15C407B0411EA9DAAD432C4F9AE02/NtqOcqrHflUzc5DvTGHJVAtFldc.crl rsync://rpki.apnic.net/member_repository/A91577A2/8BC15C407B0411EA9DAAD432C4F9AE02/NtqOcqrHflUzc5DvTGHJVAtFldc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NtqOcqrHflUzc5DvTGHJVAtFldc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 19:56:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2624 (0xa40) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91577A2, serialNumber=36DA8E72AAC77E55337390EF4C61C9540B4595D7 Validity Not Before: Aug 22 19:56:32 2025 GMT Not After : Aug 29 19:56:32 2025 GMT Subject: CN=68a8cb70-b6d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:27:8e:2f:ec:b5:48:50:a3:53:02:a3:bb:da: 2d:9b:fe:a8:0f:45:60:dc:db:1c:5e:73:38:45:95: 75:8e:f1:24:01:32:e2:a9:6a:cd:91:26:bd:03:d3: dd:41:0d:e8:4a:76:99:ce:cb:79:bf:1a:15:f4:0a: e3:b5:84:6b:79:ad:02:d1:e8:b5:cc:55:e8:c0:db: a9:51:8e:34:16:1b:d4:4e:42:45:73:45:64:27:4e: 82:5a:bc:8e:12:b7:57:b6:eb:2d:70:a5:f5:05:e8: 51:7e:34:dd:ae:2d:e5:28:43:d1:ce:f5:e7:7c:9c: ab:e1:10:10:3d:dc:92:0b:de:1c:ad:ec:80:10:7f: 90:22:56:42:c7:69:7a:e5:65:e9:c7:4d:43:4b:5a: 25:e2:f1:53:26:b5:e7:eb:e0:48:13:43:f5:f1:55: fb:29:5f:d5:a7:f0:ec:03:01:35:c1:aa:63:24:2e: f2:f8:1c:2a:46:a9:04:2d:49:23:9a:a1:b3:18:55: 90:73:cc:6d:8f:90:24:1c:bb:3a:fd:02:ff:15:4c: 19:ed:cd:66:50:9d:6a:a8:e7:f6:9e:0e:73:88:5b: 79:3a:de:4a:9d:9c:3b:0f:52:1b:51:eb:48:7f:ee: 39:35:c5:b0:c1:52:71:38:19:07:65:75:f4:af:d8: 7e:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:5D:4A:90:B8:69:34:F1:8B:CE:50:F0:10:DD:B0:89:23:6A:15:C7 X509v3 Authority Key Identifier: keyid:36:DA:8E:72:AA:C7:7E:55:33:73:90:EF:4C:61:C9:54:0B:45:95:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91577A2/8BC15C407B0411EA9DAAD432C4F9AE02/NtqOcqrHflUzc5DvTGHJVAtFldc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NtqOcqrHflUzc5DvTGHJVAtFldc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91577A2/8BC15C407B0411EA9DAAD432C4F9AE02/NtqOcqrHflUzc5DvTGHJVAtFldc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8b:1c:e9:84:1a:67:d3:7a:74:d2:9c:cd:8e:2a:ed:63:92:37: ec:de:51:a3:c9:94:d9:61:6d:09:70:eb:e7:43:e5:5f:1f:5d: c6:19:8e:6c:fb:cc:c6:d6:d2:83:59:67:a7:f6:62:0a:d6:2c: c4:bc:9d:d5:b7:91:ec:18:d4:44:82:c7:7f:0f:d2:22:1d:b9: 6f:4c:ed:c8:06:9f:a6:40:e3:a9:8d:b4:d1:ad:45:7e:1c:8f: 62:96:a9:85:55:36:ef:99:f2:41:e3:ae:de:2d:15:96:21:9a: 2b:2b:3f:b3:c4:2e:41:f3:4f:b3:5b:90:21:22:2d:cc:16:59: bf:86:5f:f5:a1:28:7a:32:26:b4:18:ee:e3:3e:2f:86:58:94: bf:29:19:5b:7e:86:e5:34:0f:15:da:d8:67:39:4e:5e:66:06: c0:ba:9c:0b:0e:e9:4c:64:24:5a:4d:69:e0:a1:33:e3:45:85: ab:48:9d:7c:17:11:fc:c1:66:35:d2:26:08:b0:ee:98:86:13: 3f:f6:08:16:30:01:9c:45:f5:9a:ef:69:c7:e7:2d:7a:31:d5: 12:ad:d0:40:ea:05:27:98:ef:41:0f:07:be:45:71:24:62:1e: c9:0a:88:5f:90:eb:22:2c:cb:5b:44:49:6d:6f:dc:a3:d4:51: a1:ff:c4:35 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCkAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTc3QTIxMTAvBgNVBAUTKDM2REE4RTcyQUFDNzdFNTUzMzczOTBFRjRDNjFDOTU0 MEI0NTk1RDcwHhcNMjUwODIyMTk1NjMyWhcNMjUwODI5MTk1NjMyWjAYMRYwFAYD VQQDEw02OGE4Y2I3MC1iNmQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxCeOL+y1SFCjUwKju9otm/6oD0Vg3NscXnM4RZV1jvEkATLiqWrNkSa9A9Pd QQ3oSnaZzst5vxoV9ArjtYRrea0C0ei1zFXowNupUY40FhvUTkJFc0VkJ06CWryO ErdXtustcKX1BehRfjTdri3lKEPRzvXnfJyr4RAQPdySC94creyAEH+QIlZCx2l6 5WXpx01DS1ol4vFTJrXn6+BIE0P18VX7KV/Vp/DsAwE1wapjJC7y+BwqRqkELUkj mqGzGFWQc8xtj5AkHLs6/QL/FUwZ7c1mUJ1qqOf2ng5ziFt5Ot5KnZw7D1IbUetI f+45NcWwwVJxOBkHZXX0r9h+SQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFENdSpC4 aTTxi85Q8BDdsIkjahXHMB8GA1UdIwQYMBaAFDbajnKqx35VM3OQ70xhyVQLRZXX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NzdBMi84QkMxNUM0MDdC MDQxMUVBOURBQUQ0MzJDNEY5QUUwMi9OdHFPY3FySGZsVXpjNUR2VEdISlZBdEZs ZGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL050cU9jcXJIZmxVemM1RHZUR0hKVkF0RmxkYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NzdBMi84QkMxNUM0MDdCMDQxMUVBOURBQUQ0MzJDNEY5QUUwMi9OdHFPY3FySGZs VXpjNUR2VEdISlZBdEZsZGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCLHOmEGmfTenTSnM2OKu1jkjfs3lGjyZTZYW0JcOvnQ+VfH13GGY5s +8zG1tKDWWen9mIK1izEvJ3Vt5HsGNREgsd/D9IiHblvTO3IBp+mQOOpjbTRrUV+ HI9ilqmFVTbvmfJB467eLRWWIZorKz+zxC5B80+zW5AhIi3MFlm/hl/1oSh6Mia0 GO7jPi+GWJS/KRlbfoblNA8V2thnOU5eZgbAupwLDulMZCRaTWngoTPjRYWrSJ18 FxH8wWY10iYIsO6YhhM/9ggWMAGcRfWa72nH5y16MdUSrdBA6gUnmO9BDwe+RXEk Yh7JCohfkOsiLMtbREltb9yj1FGh/8Q1 -----END CERTIFICATE-----Generated at Sat Aug 23 18:16:33 2025 by rpki-client