$ rpki-client -vvf rpki.apnic.net/member_repository/A916714C/3FED6608DFEC11EB8F704D12C4F9AE02/NT5Ih1N2xtuX40JjZcx_GMlFaHc.mft File: NT5Ih1N2xtuX40JjZcx_GMlFaHc.mft (raw, json) Hash identifier: Xgs165ffyTLumqPZC9/bVotrv7WFYpvuPlztuMDGy4U= Subject key identifier: F7:CB:11:1A:3F:3F:2D:CB:E9:19:AC:E2:E7:93:97:20:5D:D3:8C:DC Authority key identifier: 35:3E:48:87:53:76:C6:DB:97:E3:42:63:65:CC:7F:18:C9:45:68:77 Certificate issuer: /CN=A916714C/serialNumber=353E48875376C6DB97E3426365CC7F18C9456877 Certificate serial: 05A6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NT5Ih1N2xtuX40JjZcx_GMlFaHc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916714C/3FED6608DFEC11EB8F704D12C4F9AE02/NT5Ih1N2xtuX40JjZcx_GMlFaHc.mft Manifest number: 05A0 Signing time: Fri 22 Aug 2025 23:23:01 +0000 Manifest this update: Fri 22 Aug 2025 23:23:00 +0000 Manifest next update: Fri 29 Aug 2025 23:23:00 +0000 Files and hashes: 1: NT5Ih1N2xtuX40JjZcx_GMlFaHc.crl (hash: M2/K85uXZgTEXDbZCCpAzsLVO1ObrLRa98E8imVTPt8=) 2: E50353FEDFED11EBA155C712C4F9AE02.roa (hash: IIVlt7G/+5szlJKKwOxccwy55c5N2K1rqxgqpnj4uFE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916714C/3FED6608DFEC11EB8F704D12C4F9AE02/NT5Ih1N2xtuX40JjZcx_GMlFaHc.crl rsync://rpki.apnic.net/member_repository/A916714C/3FED6608DFEC11EB8F704D12C4F9AE02/NT5Ih1N2xtuX40JjZcx_GMlFaHc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NT5Ih1N2xtuX40JjZcx_GMlFaHc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 23:23:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1446 (0x5a6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916714C, serialNumber=353E48875376C6DB97E3426365CC7F18C9456877 Validity Not Before: Aug 22 23:23:00 2025 GMT Not After : Aug 29 23:23:00 2025 GMT Subject: CN=68a8fbd5-5728 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:4d:4f:ae:c0:59:e4:2a:15:6b:61:c3:91:40: 05:4d:c9:22:cc:42:be:bf:fa:1e:b7:37:df:07:f1: 4f:94:dd:e6:1d:05:5d:d1:2a:62:c0:28:25:3f:b1: 12:78:f0:89:f3:a5:96:7e:a9:b0:df:bd:05:c3:20: 41:05:a3:a8:f9:f7:a7:1d:67:e8:fb:40:7e:2c:6e: 0b:44:05:9d:0a:f4:4b:2e:54:63:1e:ab:58:03:4a: 3d:0e:82:0a:73:08:13:aa:b9:7b:b5:c5:61:8d:b8: 33:92:85:57:27:ce:29:80:49:94:f1:51:a9:77:6b: 0c:ea:35:62:d6:93:ec:06:69:57:a2:43:27:7a:7b: 03:72:87:95:01:11:a7:74:c9:43:15:bd:0c:8d:f5: b7:a3:36:0c:60:4b:ff:b3:a6:97:ba:55:6b:a2:b4: ed:34:8a:83:89:0c:72:e3:4f:f9:3c:69:23:a8:a8: 1a:34:30:2f:ca:ef:92:ae:10:ae:7c:98:00:7a:03: ed:c9:fc:28:f0:07:1a:13:d2:e3:77:ee:84:70:a9: 0a:1c:b9:a7:7f:79:ee:b8:53:8e:18:59:81:c8:39: b7:9b:f6:67:fb:1c:85:70:a7:a1:7c:13:e1:e5:be: 81:94:dd:e8:44:a5:61:ba:1a:c2:fe:93:48:db:9a: db:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:CB:11:1A:3F:3F:2D:CB:E9:19:AC:E2:E7:93:97:20:5D:D3:8C:DC X509v3 Authority Key Identifier: keyid:35:3E:48:87:53:76:C6:DB:97:E3:42:63:65:CC:7F:18:C9:45:68:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916714C/3FED6608DFEC11EB8F704D12C4F9AE02/NT5Ih1N2xtuX40JjZcx_GMlFaHc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NT5Ih1N2xtuX40JjZcx_GMlFaHc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916714C/3FED6608DFEC11EB8F704D12C4F9AE02/NT5Ih1N2xtuX40JjZcx_GMlFaHc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b0:d5:cc:08:6b:58:23:da:f8:76:d0:f2:10:88:0c:e4:f1:e8: a5:4c:5f:4a:98:a7:76:13:09:cd:92:08:bb:f8:5b:31:77:a6: c1:40:93:5a:69:fe:45:19:0e:a8:72:06:87:cc:07:b5:d4:f6: c7:05:e2:20:a1:a3:47:b5:92:30:4b:6c:3c:05:a7:c9:f1:47: e3:af:1b:a8:ed:c6:74:21:e5:16:4e:72:ad:0a:ff:ca:35:d2: 00:4f:a1:ac:ae:f8:e4:2d:16:92:83:18:96:a5:84:0b:fe:a3: 01:0e:5c:b8:8e:f2:89:ef:cf:a9:56:04:73:76:86:ce:51:72: 02:f7:35:e0:cf:0f:d4:10:21:a8:de:29:df:a0:f8:bd:29:38: 07:3e:be:26:87:31:97:66:ae:23:4a:d9:eb:42:03:63:15:58: 58:78:c2:f0:4a:16:1d:60:98:66:f3:2c:24:f4:9c:06:68:96: 85:90:99:ab:31:5d:f3:17:a9:f4:8c:00:c1:48:06:48:aa:07: 4b:ce:31:7d:ed:71:1b:7a:c5:00:0e:10:9a:ed:5a:6b:9e:90: 36:e9:1e:b9:b2:cd:08:e0:be:a5:90:cc:0d:00:b6:67:58:f3: 25:78:82:7e:1a:d6:f9:db:49:34:49:c1:b9:20:70:d6:99:41: 80:28:14:c7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBaYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjcxNEMxMTAvBgNVBAUTKDM1M0U0ODg3NTM3NkM2REI5N0UzNDI2MzY1Q0M3RjE4 Qzk0NTY4NzcwHhcNMjUwODIyMjMyMzAwWhcNMjUwODI5MjMyMzAwWjAYMRYwFAYD VQQDEw02OGE4ZmJkNS01NzI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtE1PrsBZ5CoVa2HDkUAFTckizEK+v/oetzffB/FPlN3mHQVd0SpiwCglP7ES ePCJ86WWfqmw370FwyBBBaOo+fenHWfo+0B+LG4LRAWdCvRLLlRjHqtYA0o9DoIK cwgTqrl7tcVhjbgzkoVXJ84pgEmU8VGpd2sM6jVi1pPsBmlXokMnensDcoeVARGn dMlDFb0MjfW3ozYMYEv/s6aXulVrorTtNIqDiQxy40/5PGkjqKgaNDAvyu+SrhCu fJgAegPtyfwo8AcaE9Ljd+6EcKkKHLmnf3nuuFOOGFmByDm3m/Zn+xyFcKehfBPh 5b6BlN3oRKVhuhrC/pNI25rbBwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPfLERo/ Py3L6Rms4ueTlyBd04zcMB8GA1UdIwQYMBaAFDU+SIdTdsbbl+NCY2XMfxjJRWh3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NzE0Qy8zRkVENjYwOERG RUMxMUVCOEY3MDREMTJDNEY5QUUwMi9OVDVJaDFOMnh0dVg0MEpqWmN4X0dNbEZh SGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05UNUloMU4yeHR1WDQwSmpaY3hfR01sRmFIYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NzE0Qy8zRkVENjYwOERGRUMxMUVCOEY3MDREMTJDNEY5QUUwMi9OVDVJaDFOMnh0 dVg0MEpqWmN4X0dNbEZhSGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCw1cwIa1gj2vh20PIQiAzk8eilTF9KmKd2EwnNkgi7+Fsxd6bBQJNa af5FGQ6ocgaHzAe11PbHBeIgoaNHtZIwS2w8BafJ8Ufjrxuo7cZ0IeUWTnKtCv/K NdIAT6GsrvjkLRaSgxiWpYQL/qMBDly4jvKJ78+pVgRzdobOUXIC9zXgzw/UECGo 3infoPi9KTgHPr4mhzGXZq4jStnrQgNjFVhYeMLwShYdYJhm8ywk9JwGaJaFkJmr MV3zF6n0jADBSAZIqgdLzjF97XEbesUADhCa7VprnpA26R65ss0I4L6lkMwNALZn WPMleIJ+Gtb520k0ScG5IHDWmUGAKBTH -----END CERTIFICATE-----Generated at Sun Aug 24 04:27:57 2025 by rpki-client