$ rpki-client -vvf rpki.apnic.net/member_repository/A918233C/E6491FE2621411ECB006712CC4F9AE02/_NTfjrSqZK9Wt9DHMm4pEEVDzFU.mft File: _NTfjrSqZK9Wt9DHMm4pEEVDzFU.mft (raw, json) Hash identifier: 9xaj0wjiDxfqgGAOJlINFyN1LIEpleNUBSiLcGElTc4= Subject key identifier: B0:9D:22:4C:C4:83:61:A2:AD:12:E5:5A:14:F2:20:EC:83:0A:B2:BF Authority key identifier: FC:D4:DF:8E:B4:AA:64:AF:56:B7:D0:C7:32:6E:29:10:45:43:CC:55 Certificate issuer: /CN=A918233C/serialNumber=FCD4DF8EB4AA64AF56B7D0C7326E29104543CC55 Certificate serial: 48 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_NTfjrSqZK9Wt9DHMm4pEEVDzFU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918233C/E6491FE2621411ECB006712CC4F9AE02/_NTfjrSqZK9Wt9DHMm4pEEVDzFU.mft Manifest number: 04A2 Signing time: Sat 23 Aug 2025 00:26:44 +0000 Manifest this update: Sat 23 Aug 2025 00:26:43 +0000 Manifest next update: Sat 30 Aug 2025 00:26:43 +0000 Files and hashes: 1: _NTfjrSqZK9Wt9DHMm4pEEVDzFU.crl (hash: zUeYa7qDM7GPuZfr5om7k+VkiMyHPnBN0MZEmgnCtAg=) 2: 34E594A215C511F09562D30FC4F9AE02.roa (hash: hO8cBpPkkXeK8WAFYmWHFGS1BpcqmFyN9GM5+DFTdqE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918233C/E6491FE2621411ECB006712CC4F9AE02/_NTfjrSqZK9Wt9DHMm4pEEVDzFU.crl rsync://rpki.apnic.net/member_repository/A918233C/E6491FE2621411ECB006712CC4F9AE02/_NTfjrSqZK9Wt9DHMm4pEEVDzFU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_NTfjrSqZK9Wt9DHMm4pEEVDzFU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 00:26:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72 (0x48) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918233C, serialNumber=FCD4DF8EB4AA64AF56B7D0C7326E29104543CC55 Validity Not Before: Aug 23 00:26:43 2025 GMT Not After : Aug 30 00:26:43 2025 GMT Subject: CN=68a90ac4-3fbf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:36:d1:a8:a2:f6:cb:5a:ee:94:90:48:d8:23: ab:d1:8b:e4:a5:dc:57:b2:d0:ca:27:29:6e:23:30: 99:fd:94:e6:21:24:d3:d9:09:c7:b4:fd:dc:b2:49: 97:a6:ff:51:3e:14:a4:eb:31:c0:e4:1b:0b:af:06: 32:d5:52:97:1e:36:0d:7a:c2:78:ea:f2:7b:b4:63: 3e:b0:3b:06:96:02:45:34:8f:cb:49:d8:99:4e:2d: de:fb:c9:72:b3:95:b2:7b:55:25:61:8f:10:70:76: 1a:f6:76:ab:b4:7b:a3:d0:81:87:7c:29:42:a6:b4: a2:62:f1:c4:eb:8c:af:4c:9a:38:f1:10:83:42:36: 7f:7d:e8:46:cd:7c:96:8f:6a:b8:96:8f:6b:aa:1b: 1a:32:6f:12:2c:ac:5a:d8:bd:1b:ed:c5:d3:5c:ea: af:d4:63:28:90:9b:f6:14:2e:bf:44:18:08:08:a7: 7d:df:db:15:05:84:8c:73:a5:6a:23:26:45:6e:1c: 50:ef:b5:24:db:9d:5b:73:bf:ab:93:86:ce:ce:c9: ab:54:e3:2a:ce:9f:01:a4:d1:df:7f:d5:03:16:0d: fd:3c:7d:00:94:1a:5e:fd:8b:53:18:8b:be:6e:ee: 4b:0f:ce:e7:5b:bd:c0:4b:db:0b:55:21:06:d7:78: 8d:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:9D:22:4C:C4:83:61:A2:AD:12:E5:5A:14:F2:20:EC:83:0A:B2:BF X509v3 Authority Key Identifier: keyid:FC:D4:DF:8E:B4:AA:64:AF:56:B7:D0:C7:32:6E:29:10:45:43:CC:55 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918233C/E6491FE2621411ECB006712CC4F9AE02/_NTfjrSqZK9Wt9DHMm4pEEVDzFU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_NTfjrSqZK9Wt9DHMm4pEEVDzFU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918233C/E6491FE2621411ECB006712CC4F9AE02/_NTfjrSqZK9Wt9DHMm4pEEVDzFU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 41:fe:84:75:e0:0f:e2:f7:22:fb:5f:48:57:da:51:08:2f:b3: c7:58:d3:d5:a0:df:96:a7:70:75:ad:d7:eb:29:b4:34:11:c9: 20:2d:01:a8:c3:f8:2f:aa:eb:52:d2:85:50:a0:d2:a7:f3:1a: e0:58:cc:47:66:f1:04:7f:ee:ad:37:80:22:50:6c:79:fb:23: b1:b6:93:4d:d7:a4:d9:9d:a0:08:ca:7b:1c:1f:be:5d:f8:7d: ab:87:8a:9d:14:de:6c:fb:15:3e:3d:d0:b0:10:f9:57:b1:5d: e1:30:66:fc:17:04:5a:af:30:7c:df:d5:f4:01:f9:2b:ab:9f: 4e:17:87:41:b8:10:56:bd:ba:bc:13:53:a7:d4:98:7b:ff:0b: 1d:49:05:f9:8e:22:81:3d:65:f8:e0:74:8e:14:e0:ce:c9:13: e5:90:24:81:f6:bd:c9:e4:52:50:0e:16:43:89:3f:88:61:70: 38:f0:2b:80:90:d7:1b:ab:f6:f0:37:ea:7c:c6:b8:97:03:a3: 78:7c:10:a2:4a:ee:25:65:38:57:43:c2:5c:5b:00:c4:ac:70: b9:d7:f8:31:66:d3:f9:1a:f5:12:3a:9c:56:55:db:8d:2a:ba: 43:c3:bd:df:99:5d:82:a5:4f:68:03:4e:32:23:3a:91:dc:83: 4b:1d:fd:26 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBSDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 MjMzQzExMC8GA1UEBRMoRkNENERGOEVCNEFBNjRBRjU2QjdEMEM3MzI2RTI5MTA0 NTQzQ0M1NTAeFw0yNTA4MjMwMDI2NDNaFw0yNTA4MzAwMDI2NDNaMBgxFjAUBgNV BAMTDTY4YTkwYWM0LTNmYmYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDdNtGoovbLWu6UkEjYI6vRi+Sl3Fey0MonKW4jMJn9lOYhJNPZCce0/dyySZem /1E+FKTrMcDkGwuvBjLVUpceNg16wnjq8nu0Yz6wOwaWAkU0j8tJ2JlOLd77yXKz lbJ7VSVhjxBwdhr2dqu0e6PQgYd8KUKmtKJi8cTrjK9MmjjxEINCNn996EbNfJaP ariWj2uqGxoybxIsrFrYvRvtxdNc6q/UYyiQm/YULr9EGAgIp33f2xUFhIxzpWoj JkVuHFDvtSTbnVtzv6uThs7OyatU4yrOnwGk0d9/1QMWDf08fQCUGl79i1MYi75u 7ksPzudbvcBL2wtVIQbXeI3tAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUsJ0iTMSD YaKtEuVaFPIg7IMKsr8wHwYDVR0jBBgwFoAU/NTfjrSqZK9Wt9DHMm4pEEVDzFUw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTgyMzNDL0U2NDkxRkUyNjIx NDExRUNCMDA2NzEyQ0M0RjlBRTAyL19OVGZqclNxWks5V3Q5REhNbTRwRUVWRHpG VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvX05UZmpyU3FaSzlXdDlESE1tNHBFRVZEekZVLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTgy MzNDL0U2NDkxRkUyNjIxNDExRUNCMDA2NzEyQ0M0RjlBRTAyL19OVGZqclNxWks5 V3Q5REhNbTRwRUVWRHpGVS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAEH+hHXgD+L3IvtfSFfaUQgvs8dY09Wg35ancHWt1+sptDQRySAtAajD +C+q61LShVCg0qfzGuBYzEdm8QR/7q03gCJQbHn7I7G2k03XpNmdoAjKexwfvl34 fauHip0U3mz7FT490LAQ+VexXeEwZvwXBFqvMHzf1fQB+Surn04Xh0G4EFa9urwT U6fUmHv/Cx1JBfmOIoE9ZfjgdI4U4M7JE+WQJIH2vcnkUlAOFkOJP4hhcDjwK4CQ 1xur9vA36nzGuJcDo3h8EKJK7iVlOFdDwlxbAMSscLnX+DFm0/ka9RI6nFZV240q ukPDvd+ZXYKlT2gDTjIjOpHcg0sd/SY= -----END CERTIFICATE-----Generated at Sat Aug 23 19:38:10 2025 by rpki-client