$ rpki-client -vvf rpki.apnic.net/member_repository/A91A56E7/7860F8BA11C111EA858EE682C4F9AE02/NHY28OmK-CSCaxvPlvPHdtgS9Vs.mft File: NHY28OmK-CSCaxvPlvPHdtgS9Vs.mft (raw, json) Hash identifier: lOEQba3h7vnTSWgmWh/Qlk/jrBIjjk/5zHVvrbS18lo= Subject key identifier: 33:89:AA:8F:75:10:5E:07:D0:24:7F:90:9C:DA:A7:83:EC:35:CE:6A Authority key identifier: 34:76:36:F0:E9:8A:F8:24:82:6B:1B:CF:96:F3:C7:76:D8:12:F5:5B Certificate issuer: /CN=A91A56E7/serialNumber=347636F0E98AF824826B1BCF96F3C776D812F55B Certificate serial: 0C32 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NHY28OmK-CSCaxvPlvPHdtgS9Vs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A56E7/7860F8BA11C111EA858EE682C4F9AE02/NHY28OmK-CSCaxvPlvPHdtgS9Vs.mft Manifest number: 0C2B Signing time: Fri 22 Aug 2025 18:46:30 +0000 Manifest this update: Fri 22 Aug 2025 18:46:30 +0000 Manifest next update: Fri 29 Aug 2025 18:46:30 +0000 Files and hashes: 1: NHY28OmK-CSCaxvPlvPHdtgS9Vs.crl (hash: d15mmiDx0+mI4AErnwhJFZ68qN+zRBIOQOQzM9a2uzA=) 2: 2157C3E011C211EA93417583C4F9AE02.roa (hash: Sb4C6SBlwbEgArJd0mwobbSvCSiB+bY80WW0ZbhEHoI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A56E7/7860F8BA11C111EA858EE682C4F9AE02/NHY28OmK-CSCaxvPlvPHdtgS9Vs.crl rsync://rpki.apnic.net/member_repository/A91A56E7/7860F8BA11C111EA858EE682C4F9AE02/NHY28OmK-CSCaxvPlvPHdtgS9Vs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NHY28OmK-CSCaxvPlvPHdtgS9Vs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 18:46:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3122 (0xc32) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A56E7, serialNumber=347636F0E98AF824826B1BCF96F3C776D812F55B Validity Not Before: Aug 22 18:46:30 2025 GMT Not After : Aug 29 18:46:30 2025 GMT Subject: CN=68a8bb06-616c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:e0:59:28:2f:dc:2e:43:bc:71:40:dd:ef:49: cb:db:41:63:07:d8:b7:39:45:e8:7d:18:3c:b0:44: 93:82:71:9d:63:fc:01:69:38:c0:08:33:9a:5d:8a: 83:c5:ba:c8:f0:31:88:ad:d7:09:19:b6:eb:9b:77: ec:46:2b:1c:3d:0f:20:8e:63:63:3f:59:23:ce:98: 0f:ee:5a:90:68:38:9a:e8:95:43:02:8b:1c:76:0b: ac:9a:63:32:60:52:1b:d0:09:73:31:2d:57:61:3e: 36:39:3b:f3:0f:ba:d8:a1:72:c4:c3:b3:83:f8:16: 91:98:1d:19:fd:ba:ad:da:2f:c6:57:33:89:af:df: 37:11:59:07:0c:77:e9:d5:94:8c:4b:e7:aa:36:6c: 22:06:b3:ab:71:34:de:a8:07:30:3d:4b:f5:e1:85: c5:ea:32:d4:f7:d0:b2:6c:72:6f:e7:9f:f3:c7:58: 8a:89:5f:c2:00:c7:d0:e4:cf:9b:1c:da:62:88:b4: f8:59:80:d0:c5:01:6d:6c:04:53:09:5f:08:55:76: 8b:1f:2c:d4:c9:d3:aa:0a:f4:22:1c:7b:fc:c8:a6: d0:24:27:c9:ec:93:ae:64:22:8d:d4:56:55:9e:e2: e2:d9:38:ce:d8:99:ec:d3:69:61:fe:c4:c1:6e:0d: 0d:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:89:AA:8F:75:10:5E:07:D0:24:7F:90:9C:DA:A7:83:EC:35:CE:6A X509v3 Authority Key Identifier: keyid:34:76:36:F0:E9:8A:F8:24:82:6B:1B:CF:96:F3:C7:76:D8:12:F5:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A56E7/7860F8BA11C111EA858EE682C4F9AE02/NHY28OmK-CSCaxvPlvPHdtgS9Vs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NHY28OmK-CSCaxvPlvPHdtgS9Vs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A56E7/7860F8BA11C111EA858EE682C4F9AE02/NHY28OmK-CSCaxvPlvPHdtgS9Vs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3c:92:64:e2:58:87:dc:94:4b:cb:84:bf:5f:3b:c5:2d:80:2d: 12:c8:76:7f:1e:86:f1:3a:86:b2:85:52:c9:9c:7d:2e:a3:75: a5:c2:87:3c:4d:52:cf:f5:a9:97:16:fa:24:5d:5e:bc:28:7a: 87:a5:5c:52:40:e7:3a:38:a4:f0:fb:e8:e2:ad:f6:37:63:14: 0b:21:8c:81:06:1a:6c:86:e3:c4:46:87:92:b4:78:8a:bc:5a: 9a:8b:4a:d7:4c:14:e5:e8:23:93:cb:36:95:98:75:55:99:f4: d1:d9:85:6d:d8:71:e3:7d:93:18:16:af:6b:20:a7:f0:6f:d9: b0:ef:84:a0:cf:9b:fc:84:9b:55:fb:f9:6c:57:28:63:9a:2e: 7a:28:34:fb:59:52:e2:fd:89:e5:1d:a4:20:1f:c3:ec:0b:b8: 66:8a:d6:a3:b0:7d:c5:41:8f:e4:99:b7:ee:42:c8:8f:c7:36: 9c:b1:d7:99:43:2e:64:1a:8c:83:81:63:54:44:67:45:51:5a: 02:7f:d4:e1:86:dc:ab:41:b4:44:51:e5:01:10:46:ae:68:09: ca:f2:0e:e9:31:d2:2d:a8:90:a0:ae:b5:e2:5e:d4:89:ec:45: d4:44:37:89:82:b9:e7:2c:fd:de:61:60:27:3c:97:b0:d1:d9: b4:d3:fe:4e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDDIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTU2RTcxMTAvBgNVBAUTKDM0NzYzNkYwRTk4QUY4MjQ4MjZCMUJDRjk2RjNDNzc2 RDgxMkY1NUIwHhcNMjUwODIyMTg0NjMwWhcNMjUwODI5MTg0NjMwWjAYMRYwFAYD VQQDEw02OGE4YmIwNi02MTZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAn+BZKC/cLkO8cUDd70nL20FjB9i3OUXofRg8sESTgnGdY/wBaTjACDOaXYqD xbrI8DGIrdcJGbbrm3fsRiscPQ8gjmNjP1kjzpgP7lqQaDia6JVDAoscdgusmmMy YFIb0AlzMS1XYT42OTvzD7rYoXLEw7OD+BaRmB0Z/bqt2i/GVzOJr983EVkHDHfp 1ZSMS+eqNmwiBrOrcTTeqAcwPUv14YXF6jLU99CybHJv55/zx1iKiV/CAMfQ5M+b HNpiiLT4WYDQxQFtbARTCV8IVXaLHyzUydOqCvQiHHv8yKbQJCfJ7JOuZCKN1FZV nuLi2TjO2Jns02lh/sTBbg0NsQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDOJqo91 EF4H0CR/kJzap4PsNc5qMB8GA1UdIwQYMBaAFDR2NvDpivgkgmsbz5bzx3bYEvVb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTZFNy83ODYwRjhCQTEx QzExMUVBODU4RUU2ODJDNEY5QUUwMi9OSFkyOE9tSy1DU0NheHZQbHZQSGR0Z1M5 VnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05IWTI4T21LLUNTQ2F4dlBsdlBIZHRnUzlWcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NTZFNy83ODYwRjhCQTExQzExMUVBODU4RUU2ODJDNEY5QUUwMi9OSFkyOE9tSy1D U0NheHZQbHZQSGR0Z1M5VnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA8kmTiWIfclEvLhL9fO8UtgC0SyHZ/HobxOoayhVLJnH0uo3Wlwoc8 TVLP9amXFvokXV68KHqHpVxSQOc6OKTw++jirfY3YxQLIYyBBhpshuPERoeStHiK vFqai0rXTBTl6COTyzaVmHVVmfTR2YVt2HHjfZMYFq9rIKfwb9mw74Sgz5v8hJtV +/lsVyhjmi56KDT7WVLi/YnlHaQgH8PsC7hmitajsH3FQY/kmbfuQsiPxzacsdeZ Qy5kGoyDgWNURGdFUVoCf9ThhtyrQbREUeUBEEauaAnK8g7pMdItqJCgrrXiXtSJ 7EXURDeJgrnnLP3eYWAnPJew0dm00/5O -----END CERTIFICATE-----Generated at Sat Aug 23 13:53:14 2025 by rpki-client