$ rpki-client -vvf rpki.apnic.net/member_repository/A91925D2/6DF602D078BF11EE93FFB764C4F9AE02/NFF8wp90Fp_XNqLCQGGfizMP3Z0.mft File: NFF8wp90Fp_XNqLCQGGfizMP3Z0.mft (raw, json) Hash identifier: trHpO//ZddQZ1PzpAx0hKIGX8EpQJSFQ2p64Wd7UNrk= Subject key identifier: 59:08:67:1C:60:38:B0:A3:44:CE:E7:CB:8C:F3:70:36:19:68:39:CA Authority key identifier: 34:51:7C:C2:9F:74:16:9F:D7:36:A2:C2:40:61:9F:8B:33:0F:DD:9D Certificate issuer: /CN=A91925D2/serialNumber=34517CC29F74169FD736A2C240619F8B330FDD9D Certificate serial: 0156 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NFF8wp90Fp_XNqLCQGGfizMP3Z0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91925D2/6DF602D078BF11EE93FFB764C4F9AE02/NFF8wp90Fp_XNqLCQGGfizMP3Z0.mft Manifest number: 0153 Signing time: Sat 23 Aug 2025 04:17:56 +0000 Manifest this update: Sat 23 Aug 2025 04:17:56 +0000 Manifest next update: Sat 30 Aug 2025 04:17:56 +0000 Files and hashes: 1: NFF8wp90Fp_XNqLCQGGfizMP3Z0.crl (hash: vuFI6LkSc9kbUFVIAWsqq6W3c7BuBpTqnnYGgYHHFcU=) 2: 2C4CD10078C011EE90D36F13C4F9AE02.roa (hash: OCKBcCjdkySUCtOriC+2k74TemAnMuuorEBugP8GmLw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91925D2/6DF602D078BF11EE93FFB764C4F9AE02/NFF8wp90Fp_XNqLCQGGfizMP3Z0.crl rsync://rpki.apnic.net/member_repository/A91925D2/6DF602D078BF11EE93FFB764C4F9AE02/NFF8wp90Fp_XNqLCQGGfizMP3Z0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NFF8wp90Fp_XNqLCQGGfizMP3Z0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 04:17:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 342 (0x156) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91925D2, serialNumber=34517CC29F74169FD736A2C240619F8B330FDD9D Validity Not Before: Aug 23 04:17:56 2025 GMT Not After : Aug 30 04:17:56 2025 GMT Subject: CN=68a940f4-9e93 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:41:a0:76:79:08:98:62:a7:b2:e4:47:1d:87: 2c:e1:9b:8f:16:06:3a:31:3b:22:d0:1c:e5:e0:6d: dd:d1:97:21:f5:78:aa:32:33:b1:45:c0:14:1b:c7: 29:07:26:da:ff:63:08:08:72:e7:19:85:c4:e1:1d: c1:23:88:8e:f1:90:e9:56:06:41:37:7c:3a:dd:6b: 9d:7a:a9:7b:7d:67:5d:8e:14:3a:7f:40:28:d0:01: 52:db:0c:20:8e:2b:4a:ff:a0:61:b0:bb:b3:10:11: c1:12:42:01:69:d3:e0:d2:bf:7f:f7:26:98:6e:61: 56:8c:55:66:3c:38:64:2e:9d:60:26:83:42:42:0f: 0e:6c:9f:b7:17:15:7b:cb:7b:ff:09:30:64:85:52: 2d:66:41:86:a6:83:8d:b2:37:8d:6a:f5:be:70:4c: 27:34:2f:56:f5:f6:06:64:0a:bb:bc:6e:a2:08:ce: 18:3b:3e:0b:af:ee:d9:b0:2b:75:59:35:4a:e1:78: 56:85:61:90:34:b8:7e:76:5b:45:37:06:31:15:3b: e5:16:4b:97:f1:4a:93:18:df:8b:04:7b:e0:ef:69: 05:81:ea:55:d4:d7:21:ff:c2:76:bb:e4:41:d3:63: 28:69:f4:fc:78:22:bf:34:eb:d7:02:ee:1a:53:52: e6:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:08:67:1C:60:38:B0:A3:44:CE:E7:CB:8C:F3:70:36:19:68:39:CA X509v3 Authority Key Identifier: keyid:34:51:7C:C2:9F:74:16:9F:D7:36:A2:C2:40:61:9F:8B:33:0F:DD:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91925D2/6DF602D078BF11EE93FFB764C4F9AE02/NFF8wp90Fp_XNqLCQGGfizMP3Z0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NFF8wp90Fp_XNqLCQGGfizMP3Z0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91925D2/6DF602D078BF11EE93FFB764C4F9AE02/NFF8wp90Fp_XNqLCQGGfizMP3Z0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 61:7d:4e:61:52:7b:55:ba:4c:5b:99:e2:e5:c3:b4:2e:55:c8: f2:dc:79:95:cd:d5:40:f8:fd:11:d8:03:85:be:4b:80:a8:d5: 67:e0:66:72:a3:da:ed:9b:89:ed:c8:7a:cf:28:92:2d:a3:66: 1e:5f:ab:28:00:bf:1d:f0:4f:33:0b:d4:7d:8c:b8:a2:f0:97: d3:fb:dd:87:8e:ac:77:de:20:94:0d:55:d4:7c:8b:61:95:19: 3f:5e:7a:5e:d7:d7:e6:2c:18:c9:21:1c:86:95:de:3f:a1:92: 36:eb:b6:1a:cd:83:76:43:94:0b:ab:dd:68:60:ac:9b:cf:2d: 59:eb:de:73:1c:d3:5c:0d:e4:1a:5d:e9:9c:9e:7f:da:46:df: 68:8e:58:74:e1:33:58:91:c9:18:e8:db:5f:58:47:ec:f8:e3: 5d:59:37:df:8a:56:9f:f9:74:53:34:1d:5f:02:8d:de:e0:ff: 94:28:02:df:67:d1:fd:4c:4d:fa:e3:1f:d6:53:4f:ae:ec:22: 51:26:f0:a9:58:38:b1:30:bd:2d:0f:66:d7:a1:da:61:73:76: 47:c8:16:6d:42:fc:24:4a:b5:94:ad:bd:ab:38:a4:84:72:09: 31:e2:23:35:ec:75:3a:b0:6f:19:57:35:48:60:ce:c5:57:60: d9:2b:42:6f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAVYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTI1RDIxMTAvBgNVBAUTKDM0NTE3Q0MyOUY3NDE2OUZENzM2QTJDMjQwNjE5RjhC MzMwRkREOUQwHhcNMjUwODIzMDQxNzU2WhcNMjUwODMwMDQxNzU2WjAYMRYwFAYD VQQDEw02OGE5NDBmNC05ZTkzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5EGgdnkImGKnsuRHHYcs4ZuPFgY6MTsi0Bzl4G3d0Zch9XiqMjOxRcAUG8cp Byba/2MICHLnGYXE4R3BI4iO8ZDpVgZBN3w63Wudeql7fWddjhQ6f0Ao0AFS2wwg jitK/6BhsLuzEBHBEkIBadPg0r9/9yaYbmFWjFVmPDhkLp1gJoNCQg8ObJ+3FxV7 y3v/CTBkhVItZkGGpoONsjeNavW+cEwnNC9W9fYGZAq7vG6iCM4YOz4Lr+7ZsCt1 WTVK4XhWhWGQNLh+dltFNwYxFTvlFkuX8UqTGN+LBHvg72kFgepV1Nch/8J2u+RB 02MoafT8eCK/NOvXAu4aU1LmLwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFkIZxxg OLCjRM7ny4zzcDYZaDnKMB8GA1UdIwQYMBaAFDRRfMKfdBaf1zaiwkBhn4szD92d MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MjVEMi82REY2MDJEMDc4 QkYxMUVFOTNGRkI3NjRDNEY5QUUwMi9ORkY4d3A5MEZwX1hOcUxDUUdHZml6TVAz WjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05GRjh3cDkwRnBfWE5xTENRR0dmaXpNUDNaMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MjVEMi82REY2MDJEMDc4QkYxMUVFOTNGRkI3NjRDNEY5QUUwMi9ORkY4d3A5MEZw X1hOcUxDUUdHZml6TVAzWjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBhfU5hUntVukxbmeLlw7QuVcjy3HmVzdVA+P0R2AOFvkuAqNVn4GZy o9rtm4ntyHrPKJIto2YeX6soAL8d8E8zC9R9jLii8JfT+92Hjqx33iCUDVXUfIth lRk/Xnpe19fmLBjJIRyGld4/oZI267YazYN2Q5QLq91oYKybzy1Z695zHNNcDeQa Xemcnn/aRt9ojlh04TNYkckY6NtfWEfs+ONdWTffilaf+XRTNB1fAo3e4P+UKALf Z9H9TE364x/WU0+u7CJRJvCpWDixML0tD2bXodphc3ZHyBZtQvwkSrWUrb2rOKSE cgkx4iM17HU6sG8ZVzVIYM7FV2DZK0Jv -----END CERTIFICATE-----Generated at Sat Aug 23 15:37:37 2025 by rpki-client