$ rpki-client -vvf rpki.apnic.net/member_repository/A91925D2/6DF602D078BF11EE93FFB764C4F9AE02/NFF8wp90Fp_XNqLCQGGfizMP3Z0.mft File: NFF8wp90Fp_XNqLCQGGfizMP3Z0.mft (raw, json) Hash identifier: brDpIQfZetfilW1W7udiU5T+nqP8J2efrBc/7xR6cyU= Subject key identifier: 06:23:2E:17:05:04:05:46:D7:41:D4:E3:47:B5:50:1A:38:DE:1B:CC Authority key identifier: 34:51:7C:C2:9F:74:16:9F:D7:36:A2:C2:40:61:9F:8B:33:0F:DD:9D Certificate issuer: /CN=A91925D2/serialNumber=34517CC29F74169FD736A2C240619F8B330FDD9D Certificate serial: 0137 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NFF8wp90Fp_XNqLCQGGfizMP3Z0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91925D2/6DF602D078BF11EE93FFB764C4F9AE02/NFF8wp90Fp_XNqLCQGGfizMP3Z0.mft Manifest number: 0135 Signing time: Sun 29 Jun 2025 03:34:46 +0000 Manifest this update: Sun 29 Jun 2025 03:34:45 +0000 Manifest next update: Sun 06 Jul 2025 03:34:45 +0000 Files and hashes: 1: NFF8wp90Fp_XNqLCQGGfizMP3Z0.crl (hash: xm5ti24NM/Rwn3/YYGIcprzu1QSRdWlg8S1lXgpfHMM=) 2: 2C4CD10078C011EE90D36F13C4F9AE02.roa (hash: +7GFnP4vXiPay7vN6IrJFOHX1SU8MW5paTRJSWnqDFI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91925D2/6DF602D078BF11EE93FFB764C4F9AE02/NFF8wp90Fp_XNqLCQGGfizMP3Z0.crl rsync://rpki.apnic.net/member_repository/A91925D2/6DF602D078BF11EE93FFB764C4F9AE02/NFF8wp90Fp_XNqLCQGGfizMP3Z0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NFF8wp90Fp_XNqLCQGGfizMP3Z0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 06 Jul 2025 03:34:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 311 (0x137) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91925D2, serialNumber=34517CC29F74169FD736A2C240619F8B330FDD9D Validity Not Before: Jun 29 03:34:45 2025 GMT Not After : Jul 6 03:34:45 2025 GMT Subject: CN=6860b455-8adf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:b6:68:17:4a:c4:b2:c6:2f:bc:ce:45:43:20: 8e:cd:d7:5a:f8:a1:55:89:66:2a:ba:11:a8:56:05: 7d:aa:7f:92:31:de:d5:a0:dc:0b:b0:81:b9:af:8e: 66:9e:00:8a:8c:2f:52:db:8f:3c:49:0b:78:45:4f: 4d:c8:ae:e6:3d:f2:f6:cc:c6:02:b0:53:01:e7:8c: 44:e4:85:ee:17:dd:cb:fb:28:dd:13:38:97:ed:3f: bc:50:f0:64:4d:91:2c:ba:50:73:a8:73:0d:e2:54: 18:b2:d1:57:ef:a7:90:58:1c:a0:1a:ff:b8:5e:75: c4:be:20:89:6b:f7:7d:6f:45:86:a8:c6:67:dd:1a: eb:95:0c:44:a6:19:8a:3d:49:59:d8:d8:31:b8:11: da:65:dc:d9:c3:c1:e5:ea:65:68:9b:0c:54:c4:47: 66:42:f3:07:09:ae:95:14:21:0a:e4:fd:cf:c5:1b: e1:2d:59:26:22:b6:ef:31:e1:b1:29:3d:23:27:dc: 55:1e:60:24:a4:78:82:0c:ff:31:ba:06:53:c6:b7: 2d:23:21:bb:d9:fa:c9:b7:d2:07:80:ef:78:58:b1: 5e:0e:1b:e4:0c:26:48:7c:8e:32:4b:09:5d:5e:5c: dc:77:72:d4:b4:ce:83:89:e8:29:73:f2:cd:3e:80: b7:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:23:2E:17:05:04:05:46:D7:41:D4:E3:47:B5:50:1A:38:DE:1B:CC X509v3 Authority Key Identifier: keyid:34:51:7C:C2:9F:74:16:9F:D7:36:A2:C2:40:61:9F:8B:33:0F:DD:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91925D2/6DF602D078BF11EE93FFB764C4F9AE02/NFF8wp90Fp_XNqLCQGGfizMP3Z0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NFF8wp90Fp_XNqLCQGGfizMP3Z0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91925D2/6DF602D078BF11EE93FFB764C4F9AE02/NFF8wp90Fp_XNqLCQGGfizMP3Z0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5c:20:61:4d:e5:20:01:65:9a:3e:a8:7e:54:74:6c:95:59:78: 07:68:64:5a:22:91:f5:3d:be:ac:83:73:0e:8c:c2:d6:09:0c: f3:c2:d4:93:55:9a:1f:56:1f:ea:9d:fd:b6:c3:1f:fc:8b:7c: 66:4a:c0:c7:9d:42:38:d3:b0:1a:c4:d2:47:04:e0:8d:62:9d: ad:78:78:65:dd:9d:89:5b:2f:ae:14:f0:86:c4:77:b8:1e:4e: 88:bb:99:f5:4c:4b:1b:09:a9:fc:8e:f9:93:d0:58:14:ca:e9: 0d:27:e5:db:2b:75:eb:0d:69:28:8c:b5:bf:99:b6:d4:c3:11: c3:bb:9b:be:88:34:29:d7:f3:bb:29:df:b6:56:fd:5f:a0:0a: cb:30:f6:3d:f5:c2:76:a1:eb:22:23:08:58:06:71:f2:ee:49: 51:66:eb:66:64:b2:d2:39:82:1b:9e:ba:44:04:6d:38:8f:05: ca:7c:98:07:92:7a:a3:18:59:90:93:f7:97:8b:ad:23:4f:c2: 33:9e:f2:d0:bf:63:2a:1b:bf:91:3f:a4:00:30:63:16:6d:3c: 3c:62:2c:06:ea:6b:53:a2:45:53:6a:95:3f:90:71:39:d3:ac: 37:45:93:13:04:3d:f4:86:fe:55:3d:a8:58:6e:6f:23:85:99: 36:09:58:09 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICATcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTI1RDIxMTAvBgNVBAUTKDM0NTE3Q0MyOUY3NDE2OUZENzM2QTJDMjQwNjE5RjhC MzMwRkREOUQwHhcNMjUwNjI5MDMzNDQ1WhcNMjUwNzA2MDMzNDQ1WjAYMRYwFAYD VQQDEw02ODYwYjQ1NS04YWRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmbZoF0rEssYvvM5FQyCOzdda+KFViWYquhGoVgV9qn+SMd7VoNwLsIG5r45m ngCKjC9S2488SQt4RU9NyK7mPfL2zMYCsFMB54xE5IXuF93L+yjdEziX7T+8UPBk TZEsulBzqHMN4lQYstFX76eQWBygGv+4XnXEviCJa/d9b0WGqMZn3RrrlQxEphmK PUlZ2NgxuBHaZdzZw8Hl6mVomwxUxEdmQvMHCa6VFCEK5P3PxRvhLVkmIrbvMeGx KT0jJ9xVHmAkpHiCDP8xugZTxrctIyG72frJt9IHgO94WLFeDhvkDCZIfI4ySwld Xlzcd3LUtM6Diegpc/LNPoC3hQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAYjLhcF BAVG10HU40e1UBo43hvMMB8GA1UdIwQYMBaAFDRRfMKfdBaf1zaiwkBhn4szD92d MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MjVEMi82REY2MDJEMDc4 QkYxMUVFOTNGRkI3NjRDNEY5QUUwMi9ORkY4d3A5MEZwX1hOcUxDUUdHZml6TVAz WjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05GRjh3cDkwRnBfWE5xTENRR0dmaXpNUDNaMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MjVEMi82REY2MDJEMDc4QkYxMUVFOTNGRkI3NjRDNEY5QUUwMi9ORkY4d3A5MEZw X1hOcUxDUUdHZml6TVAzWjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBcIGFN5SABZZo+qH5UdGyVWXgHaGRaIpH1Pb6sg3MOjMLWCQzzwtST VZofVh/qnf22wx/8i3xmSsDHnUI407AaxNJHBOCNYp2teHhl3Z2JWy+uFPCGxHe4 Hk6Iu5n1TEsbCan8jvmT0FgUyukNJ+XbK3XrDWkojLW/mbbUwxHDu5u+iDQp1/O7 Kd+2Vv1foArLMPY99cJ2oesiIwhYBnHy7klRZutmZLLSOYIbnrpEBG04jwXKfJgH knqjGFmQk/eXi60jT8IznvLQv2MqG7+RP6QAMGMWbTw8YiwG6mtTokVTapU/kHE5 06w3RZMTBD30hv5VPahYbm8jhZk2CVgJ -----END CERTIFICATE-----Generated at Sun Jun 29 19:19:28 2025 by rpki-client