$ rpki-client -vvf rpki.apnic.net/member_repository/A918779B/7CF59FAA4A7211E983912180C4F9AE02/NW_t_BUS-4gmB18NYmAOQK2Oeu0.mft File: NW_t_BUS-4gmB18NYmAOQK2Oeu0.mft (raw, json) Hash identifier: HTEtDz11addVukjNQDWNeF8IMZoGWBfz+hQSYjqZw7U= Subject key identifier: 00:FC:D5:CE:BC:75:C3:29:C4:0E:6C:11:7E:A6:96:66:F8:2A:6B:5B Authority key identifier: 35:6F:ED:FC:15:12:FB:88:26:07:5F:0D:62:60:0E:40:AD:8E:7A:ED Certificate issuer: /CN=A918779B/serialNumber=356FEDFC1512FB8826075F0D62600E40AD8E7AED Certificate serial: 0709 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NW_t_BUS-4gmB18NYmAOQK2Oeu0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918779B/7CF59FAA4A7211E983912180C4F9AE02/NW_t_BUS-4gmB18NYmAOQK2Oeu0.mft Manifest number: 171C Signing time: Fri 22 Aug 2025 17:33:20 +0000 Manifest this update: Fri 22 Aug 2025 17:33:19 +0000 Manifest next update: Fri 29 Aug 2025 17:33:19 +0000 Files and hashes: 1: NW_t_BUS-4gmB18NYmAOQK2Oeu0.crl (hash: 0VOH0gqYe+kYMOrWRjbvSyGM9w2/zG5wwTp+f2hPXuE=) 2: 8C6A656045C211EE9E812B5BC4F9AE02.roa (hash: fwCgeha710zBVc9DVKrvgjPkENsseqZ6o3NwfIiCntM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918779B/7CF59FAA4A7211E983912180C4F9AE02/NW_t_BUS-4gmB18NYmAOQK2Oeu0.crl rsync://rpki.apnic.net/member_repository/A918779B/7CF59FAA4A7211E983912180C4F9AE02/NW_t_BUS-4gmB18NYmAOQK2Oeu0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NW_t_BUS-4gmB18NYmAOQK2Oeu0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 17:33:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1801 (0x709) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918779B, serialNumber=356FEDFC1512FB8826075F0D62600E40AD8E7AED Validity Not Before: Aug 22 17:33:19 2025 GMT Not After : Aug 29 17:33:19 2025 GMT Subject: CN=68a8a9e0-74ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:06:a8:ab:d4:58:a8:f2:43:56:ad:6a:07:ba: 59:73:07:bf:37:36:23:f8:95:65:46:ee:ba:a6:ab: 23:86:74:6b:03:c8:3b:bb:53:41:d8:c5:ad:a7:43: 45:15:6b:f8:7b:56:85:e6:7f:29:a0:c4:79:e3:8b: 32:f8:5b:81:62:3e:82:31:89:e0:0a:d4:8a:1e:fa: 4c:13:ea:88:60:ab:c5:e8:f9:91:38:05:f5:e5:12: 22:94:0b:44:a3:fe:0b:1a:08:50:16:72:ce:76:3d: 3c:a3:89:2f:a3:93:14:49:d7:b2:10:31:52:fb:6a: d3:94:67:e6:b7:fd:43:b3:ab:6c:ab:ca:f1:92:22: 52:c1:d4:51:e6:85:8c:1a:a1:82:e2:2b:1f:20:1f: e4:64:89:14:6e:91:00:86:d8:e5:8e:6e:1e:0a:39: ba:41:f4:7d:2e:8e:0b:bd:59:c4:6e:f0:31:87:48: 84:f7:f3:0e:da:54:2c:c8:ca:09:67:6b:c4:f1:34: 04:ac:ba:5b:54:cd:28:c5:49:d2:8d:19:02:e4:c0: ca:c0:fa:af:e3:d5:76:43:41:f3:ac:9f:2a:52:1e: f4:68:c1:1a:c7:dc:86:5f:ef:3e:6d:85:f7:bc:31: bd:f7:98:c9:c0:5f:76:87:ad:76:1d:fd:40:89:b1: 30:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:FC:D5:CE:BC:75:C3:29:C4:0E:6C:11:7E:A6:96:66:F8:2A:6B:5B X509v3 Authority Key Identifier: keyid:35:6F:ED:FC:15:12:FB:88:26:07:5F:0D:62:60:0E:40:AD:8E:7A:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918779B/7CF59FAA4A7211E983912180C4F9AE02/NW_t_BUS-4gmB18NYmAOQK2Oeu0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NW_t_BUS-4gmB18NYmAOQK2Oeu0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918779B/7CF59FAA4A7211E983912180C4F9AE02/NW_t_BUS-4gmB18NYmAOQK2Oeu0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4f:02:38:77:e0:f6:f2:ef:36:02:56:9a:c1:c9:9f:49:37:ca: 64:32:60:c1:5b:e8:ae:7f:7a:b5:9b:43:d5:b3:16:71:cf:70: 3e:c7:66:08:f5:8f:56:89:70:d0:41:f5:1b:a3:3c:1f:0d:8b: f8:e5:49:99:38:c4:b9:e8:a9:fc:83:c5:54:42:85:02:f9:a4: 0a:db:c8:2f:83:57:4f:85:9c:da:19:36:e3:5e:ca:54:d3:76: 07:fb:f9:e6:e8:10:db:d9:e7:39:6f:06:a1:ff:92:06:73:c7: 7a:da:d6:51:01:05:25:8d:45:da:e0:a4:39:c6:d3:e8:fe:36: a4:2f:9e:6e:a1:ec:59:e6:24:3d:64:14:4e:15:b7:b9:c0:6a: 10:02:9a:14:62:d9:f4:ab:b3:e6:c3:ac:7e:af:52:d7:1b:9b: 20:7e:e4:d7:61:dd:3f:66:1b:61:3c:c2:0d:bc:d5:0f:c7:78: f2:de:53:37:8c:d3:69:b1:d6:6d:74:ae:60:3e:f5:40:20:e2: 10:bf:24:f3:69:5b:b9:0f:41:93:3e:8e:62:89:15:31:50:f7: 66:97:1e:e0:cb:2a:17:48:d5:93:a1:24:b9:04:fc:1e:8a:92: bf:8e:e2:8d:a1:3d:a8:d5:f6:fa:ec:e3:97:0f:1a:00:bf:78: a1:ba:e0:72 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBwkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODc3OUIxMTAvBgNVBAUTKDM1NkZFREZDMTUxMkZCODgyNjA3NUYwRDYyNjAwRTQw QUQ4RTdBRUQwHhcNMjUwODIyMTczMzE5WhcNMjUwODI5MTczMzE5WjAYMRYwFAYD VQQDEw02OGE4YTllMC03NGVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1Qaoq9RYqPJDVq1qB7pZcwe/NzYj+JVlRu66pqsjhnRrA8g7u1NB2MWtp0NF FWv4e1aF5n8poMR544sy+FuBYj6CMYngCtSKHvpME+qIYKvF6PmROAX15RIilAtE o/4LGghQFnLOdj08o4kvo5MUSdeyEDFS+2rTlGfmt/1Ds6tsq8rxkiJSwdRR5oWM GqGC4isfIB/kZIkUbpEAhtjljm4eCjm6QfR9Lo4LvVnEbvAxh0iE9/MO2lQsyMoJ Z2vE8TQErLpbVM0oxUnSjRkC5MDKwPqv49V2Q0HzrJ8qUh70aMEax9yGX+8+bYX3 vDG995jJwF92h612Hf1AibEwLwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAD81c68 dcMpxA5sEX6mlmb4KmtbMB8GA1UdIwQYMBaAFDVv7fwVEvuIJgdfDWJgDkCtjnrt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4Nzc5Qi83Q0Y1OUZBQTRB NzIxMUU5ODM5MTIxODBDNEY5QUUwMi9OV190X0JVUy00Z21CMThOWW1BT1FLMk9l dTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05XX3RfQlVTLTRnbUIxOE5ZbUFPUUsyT2V1MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 Nzc5Qi83Q0Y1OUZBQTRBNzIxMUU5ODM5MTIxODBDNEY5QUUwMi9OV190X0JVUy00 Z21CMThOWW1BT1FLMk9ldTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBPAjh34Pby7zYCVprByZ9JN8pkMmDBW+iuf3q1m0PVsxZxz3A+x2YI 9Y9WiXDQQfUbozwfDYv45UmZOMS56Kn8g8VUQoUC+aQK28gvg1dPhZzaGTbjXspU 03YH+/nm6BDb2ec5bwah/5IGc8d62tZRAQUljUXa4KQ5xtPo/jakL55uoexZ5iQ9 ZBROFbe5wGoQApoUYtn0q7Pmw6x+r1LXG5sgfuTXYd0/ZhthPMINvNUPx3jy3lM3 jNNpsdZtdK5gPvVAIOIQvyTzaVu5D0GTPo5iiRUxUPdmlx7gyyoXSNWToSS5BPwe ipK/juKNoT2o1fb67OOXDxoAv3ihuuBy -----END CERTIFICATE-----Generated at Sat Aug 23 19:09:32 2025 by rpki-client