$ rpki-client -vvf rpki.apnic.net/member_repository/A91BBBA5/E6484ACE9B2D11E8B465D80FC4F9AE02/NZYOHhaeA_Rvr5H04_8TUUamMTo.mft File: NZYOHhaeA_Rvr5H04_8TUUamMTo.mft (raw, json) Hash identifier: H1CK2PH5bMh5otMRVB8IIW2rURTWZy1aZ5TAKuXThxI= Subject key identifier: 04:ED:CC:9C:2A:98:A6:05:60:E3:C7:43:25:02:E0:88:12:DB:DC:85 Authority key identifier: 35:96:0E:1E:16:9E:03:F4:6F:AF:91:F4:E3:FF:13:51:46:A6:31:3A Certificate issuer: /CN=A91BBBA5/serialNumber=35960E1E169E03F46FAF91F4E3FF135146A6313A Certificate serial: 13A2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NZYOHhaeA_Rvr5H04_8TUUamMTo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BBBA5/E6484ACE9B2D11E8B465D80FC4F9AE02/NZYOHhaeA_Rvr5H04_8TUUamMTo.mft Manifest number: 139B Signing time: Fri 22 Aug 2025 17:05:31 +0000 Manifest this update: Fri 22 Aug 2025 17:05:31 +0000 Manifest next update: Fri 29 Aug 2025 17:05:31 +0000 Files and hashes: 1: NZYOHhaeA_Rvr5H04_8TUUamMTo.crl (hash: w5PPyzGAkmZjJyzPG3XMoBT90XCQr3MbHQBfcURl5mo=) 2: 21333DA69B2E11E8908CC50FC4F9AE02.roa (hash: +1SNSIFs+P7lOAKW1zIJPA5+xtDNMIC4L/Fb0Zo2lHo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BBBA5/E6484ACE9B2D11E8B465D80FC4F9AE02/NZYOHhaeA_Rvr5H04_8TUUamMTo.crl rsync://rpki.apnic.net/member_repository/A91BBBA5/E6484ACE9B2D11E8B465D80FC4F9AE02/NZYOHhaeA_Rvr5H04_8TUUamMTo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NZYOHhaeA_Rvr5H04_8TUUamMTo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 17:05:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5026 (0x13a2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BBBA5, serialNumber=35960E1E169E03F46FAF91F4E3FF135146A6313A Validity Not Before: Aug 22 17:05:31 2025 GMT Not After : Aug 29 17:05:31 2025 GMT Subject: CN=68a8a35b-8080 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:d5:c9:3d:e5:db:5f:cb:bb:39:33:08:05:06: ab:09:ac:30:55:7e:e7:99:43:6b:4b:92:7f:7d:55: 2c:4e:c8:58:ec:61:48:bb:8b:84:97:08:e9:27:20: 68:17:2b:2b:cf:c6:b6:4d:7f:ee:9b:ae:31:9c:ce: c4:4c:f3:b8:53:b1:bc:41:36:6f:d7:b3:08:66:d3: 3a:6e:8e:25:38:98:b0:e0:e6:73:91:92:af:d1:a2: 0c:52:f2:ee:00:65:ab:70:6c:13:47:a1:cb:39:f6: 3d:df:11:7b:68:94:04:b1:eb:d9:a0:f1:70:dd:a9: ce:8c:fd:b4:06:6a:3b:fe:78:b0:cd:46:29:80:2b: ea:96:ae:e4:4f:14:11:e3:ef:20:bd:77:c7:4f:73: ad:b9:b8:5a:88:92:a1:c5:0b:ce:c6:8e:eb:c0:78: 1a:9b:8c:c2:c9:c2:0e:f4:a3:b6:6d:2a:9d:93:25: 04:cc:a4:9e:8e:36:06:77:0d:be:aa:7f:6b:84:a1: 5f:45:ff:a1:b0:f5:70:14:dd:86:66:f7:93:69:58: b8:e1:bd:d7:38:a6:cf:4f:76:d3:f1:ad:0d:74:20: 0e:24:11:1c:94:3d:54:76:f7:a1:ff:45:ef:7c:76: 0c:d4:ab:98:32:c6:e5:de:ca:e7:80:87:5a:b9:36: ba:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:ED:CC:9C:2A:98:A6:05:60:E3:C7:43:25:02:E0:88:12:DB:DC:85 X509v3 Authority Key Identifier: keyid:35:96:0E:1E:16:9E:03:F4:6F:AF:91:F4:E3:FF:13:51:46:A6:31:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BBBA5/E6484ACE9B2D11E8B465D80FC4F9AE02/NZYOHhaeA_Rvr5H04_8TUUamMTo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NZYOHhaeA_Rvr5H04_8TUUamMTo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BBBA5/E6484ACE9B2D11E8B465D80FC4F9AE02/NZYOHhaeA_Rvr5H04_8TUUamMTo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 01:e9:56:d2:16:ef:7c:43:fa:9d:9c:b2:24:c6:49:ba:f9:a2: ff:25:88:6c:1b:db:b6:b6:e0:1f:71:5e:92:e1:1c:2b:e7:cd: 70:df:03:20:7e:57:37:b4:07:28:71:7e:d7:f3:ba:a0:12:e0: d4:2e:d4:73:43:d5:92:31:a6:87:38:c1:ce:79:9a:75:6f:d6: 96:c3:15:d1:91:21:5a:a0:e2:c3:c2:3d:b4:bb:95:a7:13:13: ad:eb:51:6c:a8:32:dd:b7:63:0e:c3:55:97:f8:12:4d:49:03: 43:29:af:92:59:ad:56:03:79:3a:1c:bd:a9:08:e0:2d:67:e7: 8f:28:9d:38:85:9d:12:7a:52:a2:69:50:c6:16:38:88:6b:d5: fb:4e:bc:98:1a:7d:98:1b:cb:6e:ba:74:d8:9e:3d:87:e2:58: 61:2b:43:4d:55:0b:ed:72:4b:02:31:bc:a6:87:26:c3:a3:b7: f5:c4:13:68:4b:5c:93:27:92:2c:31:02:af:2e:50:32:93:f1: 46:c4:13:cb:48:fc:22:96:b1:68:d0:18:e7:e7:57:73:63:6f: 64:7e:82:d8:f9:65:83:e4:be:df:7f:ff:72:8a:5b:12:f9:52: 15:b8:13:d9:82:6f:f0:f6:35:ce:ed:f7:be:33:a7:65:55:54: 31:65:14:90 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICE6IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkJCQTUxMTAvBgNVBAUTKDM1OTYwRTFFMTY5RTAzRjQ2RkFGOTFGNEUzRkYxMzUx NDZBNjMxM0EwHhcNMjUwODIyMTcwNTMxWhcNMjUwODI5MTcwNTMxWjAYMRYwFAYD VQQDEw02OGE4YTM1Yi04MDgwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxtXJPeXbX8u7OTMIBQarCawwVX7nmUNrS5J/fVUsTshY7GFIu4uElwjpJyBo Fysrz8a2TX/um64xnM7ETPO4U7G8QTZv17MIZtM6bo4lOJiw4OZzkZKv0aIMUvLu AGWrcGwTR6HLOfY93xF7aJQEsevZoPFw3anOjP20Bmo7/niwzUYpgCvqlq7kTxQR 4+8gvXfHT3OtubhaiJKhxQvOxo7rwHgam4zCycIO9KO2bSqdkyUEzKSejjYGdw2+ qn9rhKFfRf+hsPVwFN2GZveTaVi44b3XOKbPT3bT8a0NdCAOJBEclD1Udveh/0Xv fHYM1KuYMsbl3srngIdauTa6YwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFATtzJwq mKYFYOPHQyUC4IgS29yFMB8GA1UdIwQYMBaAFDWWDh4WngP0b6+R9OP/E1FGpjE6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQkJBNS9FNjQ4NEFDRTlC MkQxMUU4QjQ2NUQ4MEZDNEY5QUUwMi9OWllPSGhhZUFfUnZyNUgwNF84VFVVYW1N VG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05aWU9IaGFlQV9SdnI1SDA0XzhUVVVhbU1Uby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QkJBNS9FNjQ4NEFDRTlCMkQxMUU4QjQ2NUQ4MEZDNEY5QUUwMi9OWllPSGhhZUFf UnZyNUgwNF84VFVVYW1NVG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAB6VbSFu98Q/qdnLIkxkm6+aL/JYhsG9u2tuAfcV6S4Rwr581w3wMg flc3tAcocX7X87qgEuDULtRzQ9WSMaaHOMHOeZp1b9aWwxXRkSFaoOLDwj20u5Wn ExOt61FsqDLdt2MOw1WX+BJNSQNDKa+SWa1WA3k6HL2pCOAtZ+ePKJ04hZ0SelKi aVDGFjiIa9X7TryYGn2YG8tuunTYnj2H4lhhK0NNVQvtcksCMbymhybDo7f1xBNo S1yTJ5IsMQKvLlAyk/FGxBPLSPwilrFo0Bjn51dzY29kfoLY+WWD5L7ff/9yilsS +VIVuBPZgm/w9jXO7fe+M6dlVVQxZRSQ -----END CERTIFICATE-----Generated at Sat Aug 23 15:16:10 2025 by rpki-client