$ rpki-client -vvf rpki.apnic.net/member_repository/A9187000/067D6FA2478911E889D5DB49C4F9AE02/npKCbPR9rsiFyZgQKH24bmlXaOo.mft File: npKCbPR9rsiFyZgQKH24bmlXaOo.mft (raw, json) Hash identifier: xXewZ6XYH2jESRd6wbfFiOEiMZV9spz9nnTUfPBxBwM= Subject key identifier: 47:FF:1B:24:5F:10:08:03:E6:79:CC:22:51:A1:F2:13:1F:03:C2:28 Authority key identifier: 9E:92:82:6C:F4:7D:AE:C8:85:C9:98:10:28:7D:B8:6E:69:57:68:EA Certificate issuer: /CN=A9187000/serialNumber=9E92826CF47DAEC885C99810287DB86E695768EA Certificate serial: 156E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/npKCbPR9rsiFyZgQKH24bmlXaOo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9187000/067D6FA2478911E889D5DB49C4F9AE02/npKCbPR9rsiFyZgQKH24bmlXaOo.mft Manifest number: 154A Signing time: Wed 02 Jul 2025 17:24:56 +0000 Manifest this update: Wed 02 Jul 2025 17:24:56 +0000 Manifest next update: Wed 09 Jul 2025 17:24:56 +0000 Files and hashes: 1: npKCbPR9rsiFyZgQKH24bmlXaOo.crl (hash: wvQBe5c1z+t3GSBC97eYcOIcKQf5pkqKDS/qz64s2m8=) 2: FC45B5BE63A911EF954C7983C4F9AE02.roa (hash: cv8lvb3oUvoIw5frHTF3QZisdjvnnFPkeuOUYzWdt+0=) 3: 08C486D0E47311EBB62C361EC4F9AE02.roa (hash: E6ZfJqWKl59ctqtC8pvHl8ZSeijGWf0fidXXivDnF8s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9187000/067D6FA2478911E889D5DB49C4F9AE02/npKCbPR9rsiFyZgQKH24bmlXaOo.crl rsync://rpki.apnic.net/member_repository/A9187000/067D6FA2478911E889D5DB49C4F9AE02/npKCbPR9rsiFyZgQKH24bmlXaOo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/npKCbPR9rsiFyZgQKH24bmlXaOo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 17:24:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5486 (0x156e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9187000, serialNumber=9E92826CF47DAEC885C99810287DB86E695768EA Validity Not Before: Jul 2 17:24:56 2025 GMT Not After : Jul 9 17:24:56 2025 GMT Subject: CN=68656b68-0205 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fb:c2:a1:33:3a:e0:b1:8d:56:03:5a:96:b0:89: 47:36:61:bb:67:49:34:32:7c:41:20:66:db:56:be: d4:d1:81:d2:3e:38:55:f3:e2:59:b1:f4:26:5d:5d: 83:37:2d:2f:48:e7:90:9c:56:9d:1b:e8:b3:31:c7: 68:2b:f6:e8:31:2c:d4:69:b7:1a:0a:42:96:14:45: c4:fb:5b:36:2d:d3:9b:3a:2c:80:5f:b7:0f:c5:fc: b3:ee:08:bc:a2:b5:7e:1d:82:da:39:aa:62:71:b4: ab:1d:d0:16:7b:68:ee:ea:64:38:0c:b0:de:9c:7c: 3f:d6:41:36:3e:e1:25:bd:f1:ed:49:06:4a:4a:43: 0a:55:f8:b3:bf:b8:94:16:d2:db:43:05:92:18:0e: 4f:25:2b:4c:50:37:a3:fb:3e:c6:af:25:b2:24:76: ac:83:1a:a0:23:8e:76:86:a6:93:0d:f7:1f:99:47: 71:f0:39:63:a4:aa:d0:b8:f9:45:f4:68:86:ad:a7: 75:2b:bd:fe:52:06:d4:fc:9d:5c:30:fc:26:44:78: aa:44:43:c0:fd:7a:c3:40:a2:aa:fd:b0:e2:bc:6c: a7:70:eb:07:7b:94:e5:8b:26:fa:8c:2b:bc:91:27: f7:16:de:26:32:21:2c:36:46:8b:37:38:8c:10:ad: e6:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:FF:1B:24:5F:10:08:03:E6:79:CC:22:51:A1:F2:13:1F:03:C2:28 X509v3 Authority Key Identifier: keyid:9E:92:82:6C:F4:7D:AE:C8:85:C9:98:10:28:7D:B8:6E:69:57:68:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9187000/067D6FA2478911E889D5DB49C4F9AE02/npKCbPR9rsiFyZgQKH24bmlXaOo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/npKCbPR9rsiFyZgQKH24bmlXaOo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9187000/067D6FA2478911E889D5DB49C4F9AE02/npKCbPR9rsiFyZgQKH24bmlXaOo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 77:fe:bc:95:10:f0:2f:93:15:69:86:08:09:f0:06:05:ce:28: 0c:7d:5c:65:d1:f6:c4:96:67:f6:f6:b0:8a:48:81:22:22:0f: 6c:4a:59:de:2b:59:09:4c:4e:a5:61:dd:72:cc:80:f1:92:e8: 84:30:bc:20:db:d4:92:dc:19:e4:bc:be:02:a7:1d:b2:0a:01: c1:f9:01:c4:c0:75:30:12:cb:67:65:f6:b3:f4:fe:27:25:c5: 8f:1d:1e:2c:57:da:97:71:2e:72:4f:b7:85:0e:7d:d6:2f:a0: fd:a9:c2:ea:5a:a5:2f:ab:24:2f:92:d4:11:cc:6e:74:7a:0e: fe:21:9f:90:68:ee:81:1a:87:56:b5:0d:5e:2d:f2:76:97:6c: f3:a4:fe:e0:85:52:d5:2f:11:25:8d:c0:e5:3f:0d:a3:b9:57: 75:45:32:b1:9b:48:a0:0f:0d:ab:1e:19:08:c1:61:42:e9:03: 8c:86:4c:64:ec:62:b9:c8:6f:8a:42:f5:b1:0d:74:d6:47:01: e6:ba:b9:75:98:45:47:a8:da:87:1b:87:be:bc:42:79:fe:af: 70:71:d2:ab:a6:d5:c0:88:2c:a0:16:c7:f9:fd:66:76:e4:6e: e0:fe:26:e0:a0:52:66:95:e5:a5:05:ce:44:ce:12:3a:1f:5a: e9:bc:b6:4a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFW4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODcwMDAxMTAvBgNVBAUTKDlFOTI4MjZDRjQ3REFFQzg4NUM5OTgxMDI4N0RCODZF Njk1NzY4RUEwHhcNMjUwNzAyMTcyNDU2WhcNMjUwNzA5MTcyNDU2WjAYMRYwFAYD VQQDEw02ODY1NmI2OC0wMjA1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA+8KhMzrgsY1WA1qWsIlHNmG7Z0k0MnxBIGbbVr7U0YHSPjhV8+JZsfQmXV2D Ny0vSOeQnFadG+izMcdoK/boMSzUabcaCkKWFEXE+1s2LdObOiyAX7cPxfyz7gi8 orV+HYLaOapicbSrHdAWe2ju6mQ4DLDenHw/1kE2PuElvfHtSQZKSkMKVfizv7iU FtLbQwWSGA5PJStMUDej+z7GryWyJHasgxqgI452hqaTDfcfmUdx8DljpKrQuPlF 9GiGrad1K73+UgbU/J1cMPwmRHiqREPA/XrDQKKq/bDivGyncOsHe5Tliyb6jCu8 kSf3Ft4mMiEsNkaLNziMEK3mVwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEf/GyRf EAgD5nnMIlGh8hMfA8IoMB8GA1UdIwQYMBaAFJ6Sgmz0fa7IhcmYECh9uG5pV2jq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NzAwMC8wNjdENkZBMjQ3 ODkxMUU4ODlENURCNDlDNEY5QUUwMi9ucEtDYlBSOXJzaUZ5WmdRS0gyNGJtbFhh T28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25wS0NiUFI5cnNpRnlaZ1FLSDI0Ym1sWGFPby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NzAwMC8wNjdENkZBMjQ3ODkxMUU4ODlENURCNDlDNEY5QUUwMi9ucEtDYlBSOXJz aUZ5WmdRS0gyNGJtbFhhT28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB3/ryVEPAvkxVphggJ8AYFzigMfVxl0fbElmf29rCKSIEiIg9sSlne K1kJTE6lYd1yzIDxkuiEMLwg29SS3BnkvL4Cpx2yCgHB+QHEwHUwEstnZfaz9P4n JcWPHR4sV9qXcS5yT7eFDn3WL6D9qcLqWqUvqyQvktQRzG50eg7+IZ+QaO6BGodW tQ1eLfJ2l2zzpP7ghVLVLxEljcDlPw2juVd1RTKxm0igDw2rHhkIwWFC6QOMhkxk 7GK5yG+KQvWxDXTWRwHmurl1mEVHqNqHG4e+vEJ5/q9wcdKrptXAiCygFsf5/WZ2 5G7g/ibgoFJmleWlBc5EzhI6H1rpvLZK -----END CERTIFICATE-----Generated at Wed Jul 2 19:39:17 2025 by rpki-client