$ rpki-client -vvf rpki.apnic.net/member_repository/A91B35BB/5789B1A43C0011EAB8179734C4F9AE02/NfWNhhxBvf6ka4xykLGqxnDnzBs.mft File: NfWNhhxBvf6ka4xykLGqxnDnzBs.mft (raw, json) Hash identifier: xbXAGoM+D9edUAjGMxuTu0z8hERurnQ5w0VCiWKfpB8= Subject key identifier: 7F:02:C6:58:51:7D:87:E5:B8:55:27:85:05:04:BE:16:6C:8E:A6:83 Authority key identifier: 35:F5:8D:86:1C:41:BD:FE:A4:6B:8C:72:90:B1:AA:C6:70:E7:CC:1B Certificate issuer: /CN=A91B35BB/serialNumber=35F58D861C41BDFEA46B8C7290B1AAC670E7CC1B Certificate serial: 0B64 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NfWNhhxBvf6ka4xykLGqxnDnzBs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B35BB/5789B1A43C0011EAB8179734C4F9AE02/NfWNhhxBvf6ka4xykLGqxnDnzBs.mft Manifest number: 0B55 Signing time: Fri 22 Aug 2025 19:14:43 +0000 Manifest this update: Fri 22 Aug 2025 19:14:43 +0000 Manifest next update: Fri 29 Aug 2025 19:14:43 +0000 Files and hashes: 1: NfWNhhxBvf6ka4xykLGqxnDnzBs.crl (hash: Zh5+y1OGB373d7yo1xdzB1BjNsb8K9TiGuaJ0OL7KWA=) 2: 902F47663C0111EAB6CB9936C4F9AE02.roa (hash: W5+kOWbZGS14ELyZcRgsnHDoDEprTMY6BAsrjTgD1lM=) 3: 8F9F2F823C0111EAB6CB9936C4F9AE02.roa (hash: IHsFYOv59LECoaCivBqfgQOGspVwczVXXfHkd/E13QQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B35BB/5789B1A43C0011EAB8179734C4F9AE02/NfWNhhxBvf6ka4xykLGqxnDnzBs.crl rsync://rpki.apnic.net/member_repository/A91B35BB/5789B1A43C0011EAB8179734C4F9AE02/NfWNhhxBvf6ka4xykLGqxnDnzBs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NfWNhhxBvf6ka4xykLGqxnDnzBs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 19:14:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2916 (0xb64) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B35BB, serialNumber=35F58D861C41BDFEA46B8C7290B1AAC670E7CC1B Validity Not Before: Aug 22 19:14:43 2025 GMT Not After : Aug 29 19:14:43 2025 GMT Subject: CN=68a8c1a3-10a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:76:78:54:1c:93:2a:38:20:b0:0e:81:b4:4f: 1d:1d:e0:08:04:51:6a:8a:a1:87:48:38:aa:cd:90: 29:5d:76:25:09:89:bf:25:12:db:5f:6d:3c:76:c3: f9:1b:fd:07:fb:16:4f:40:9a:c9:90:22:54:cc:cd: d9:b0:dc:db:60:05:d4:d6:1b:b5:db:7f:de:b8:95: 27:fe:38:a9:d3:e1:a6:0e:8d:7e:ea:9d:53:54:c1: 9c:47:36:fe:6d:62:e9:80:74:09:f3:03:28:4d:b6: ec:08:d8:86:d7:43:30:9e:df:b2:41:07:ea:1f:f1: e3:2e:f0:b0:60:54:e7:35:64:0e:a3:5a:b8:23:4b: 77:d1:f7:1e:1f:59:4d:55:32:85:d1:7a:32:b9:9f: 11:e0:eb:90:1f:25:36:f7:8e:6c:8a:46:0c:b2:ca: a9:08:5c:6f:dd:81:28:d9:15:ff:a8:d9:87:0f:1d: 33:14:ed:29:d7:af:1c:a8:48:30:fe:cf:18:04:3d: 69:7b:8d:a4:1a:4d:43:48:94:9e:61:80:8d:72:98: 04:0e:a3:9e:f2:8d:3e:40:02:e9:6b:cc:ef:cc:cc: 53:df:ed:51:4a:40:61:e9:1b:fd:0c:32:70:13:4d: 4b:8f:bb:80:c6:93:f6:8f:fb:cf:24:be:db:bc:f8: b4:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:02:C6:58:51:7D:87:E5:B8:55:27:85:05:04:BE:16:6C:8E:A6:83 X509v3 Authority Key Identifier: keyid:35:F5:8D:86:1C:41:BD:FE:A4:6B:8C:72:90:B1:AA:C6:70:E7:CC:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B35BB/5789B1A43C0011EAB8179734C4F9AE02/NfWNhhxBvf6ka4xykLGqxnDnzBs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NfWNhhxBvf6ka4xykLGqxnDnzBs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B35BB/5789B1A43C0011EAB8179734C4F9AE02/NfWNhhxBvf6ka4xykLGqxnDnzBs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6e:d8:0c:f8:09:36:67:c9:8c:38:18:83:96:09:ab:9c:57:88: 22:a6:16:66:e0:e9:45:c8:f6:a0:31:b5:9e:06:1e:7d:7e:4b: be:04:38:7e:f5:de:95:57:ec:1c:c0:8b:c8:f1:a1:26:2f:54: 2a:53:25:c9:e3:85:96:7c:6b:73:3e:9f:f9:cf:17:cc:7d:41: b9:cb:f5:77:dc:ce:d9:15:89:74:70:ce:59:bd:eb:8a:f4:07: d7:ea:2e:c7:e1:bb:7e:b3:7c:bd:95:cd:72:10:97:5b:4a:6d: 71:2e:23:83:36:2e:1d:1d:1a:67:2f:04:c8:42:95:1c:12:f6: 04:5a:13:71:27:d4:71:74:a0:b2:4c:af:9c:16:40:be:04:28: 23:6e:e5:b2:77:51:91:74:91:e9:4f:c1:ab:ef:e9:d2:b9:3c: 03:82:84:bc:57:c1:20:4e:f8:f7:07:26:57:4e:6b:41:dc:cd: 1e:90:c9:d7:cd:f8:13:28:fd:ac:43:aa:be:f5:ad:e0:ec:0b: 00:20:d0:00:2f:18:a4:bb:7a:57:7b:dc:c5:9a:ea:59:89:00: 1f:7d:53:4b:c4:e5:a3:a7:cf:b4:76:1b:c3:b3:a3:4f:90:35: 67:69:01:8b:c4:f6:2f:85:23:62:45:d5:26:91:35:77:8a:cc: ee:66:b7:a5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC2QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjM1QkIxMTAvBgNVBAUTKDM1RjU4RDg2MUM0MUJERkVBNDZCOEM3MjkwQjFBQUM2 NzBFN0NDMUIwHhcNMjUwODIyMTkxNDQzWhcNMjUwODI5MTkxNDQzWjAYMRYwFAYD VQQDEw02OGE4YzFhMy0xMGE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx3Z4VByTKjggsA6BtE8dHeAIBFFqiqGHSDiqzZApXXYlCYm/JRLbX208dsP5 G/0H+xZPQJrJkCJUzM3ZsNzbYAXU1hu123/euJUn/jip0+GmDo1+6p1TVMGcRzb+ bWLpgHQJ8wMoTbbsCNiG10Mwnt+yQQfqH/HjLvCwYFTnNWQOo1q4I0t30fceH1lN VTKF0XoyuZ8R4OuQHyU2945sikYMssqpCFxv3YEo2RX/qNmHDx0zFO0p168cqEgw /s8YBD1pe42kGk1DSJSeYYCNcpgEDqOe8o0+QALpa8zvzMxT3+1RSkBh6Rv9DDJw E01Lj7uAxpP2j/vPJL7bvPi0gwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH8CxlhR fYfluFUnhQUEvhZsjqaDMB8GA1UdIwQYMBaAFDX1jYYcQb3+pGuMcpCxqsZw58wb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMzVCQi81Nzg5QjFBNDND MDAxMUVBQjgxNzk3MzRDNEY5QUUwMi9OZldOaGh4QnZmNmthNHh5a0xHcXhuRG56 QnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05mV05oaHhCdmY2a2E0eHlrTEdxeG5EbnpCcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MzVCQi81Nzg5QjFBNDNDMDAxMUVBQjgxNzk3MzRDNEY5QUUwMi9OZldOaGh4QnZm NmthNHh5a0xHcXhuRG56QnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBu2Az4CTZnyYw4GIOWCaucV4giphZm4OlFyPagMbWeBh59fku+BDh+ 9d6VV+wcwIvI8aEmL1QqUyXJ44WWfGtzPp/5zxfMfUG5y/V33M7ZFYl0cM5ZveuK 9AfX6i7H4bt+s3y9lc1yEJdbSm1xLiODNi4dHRpnLwTIQpUcEvYEWhNxJ9RxdKCy TK+cFkC+BCgjbuWyd1GRdJHpT8Gr7+nSuTwDgoS8V8EgTvj3ByZXTmtB3M0ekMnX zfgTKP2sQ6q+9a3g7AsAINAALxiku3pXe9zFmupZiQAffVNLxOWjp8+0dhvDs6NP kDVnaQGLxPYvhSNiRdUmkTV3iszuZrel -----END CERTIFICATE-----Generated at Sat Aug 23 11:02:24 2025 by rpki-client