$ rpki-client -vvf rpki.apnic.net/member_repository/A91C6064/52FEF73A297011EB91E9DE54C4F9AE02/NFMkWvnnaQX2mpDxzs2F6og_6hY.mft File: NFMkWvnnaQX2mpDxzs2F6og_6hY.mft (raw, json) Hash identifier: YULmQ8vpP26+8n6C2eaV/XwaeZ55w9An6XPzLiyYmG0= Subject key identifier: 0A:5C:99:22:76:82:37:7A:53:E5:77:75:89:F3:25:3A:15:09:20:4A Authority key identifier: 34:53:24:5A:F9:E7:69:05:F6:9A:90:F1:CE:CD:85:EA:88:3F:EA:16 Certificate issuer: /CN=A91C6064/serialNumber=3453245AF9E76905F69A90F1CECD85EA883FEA16 Certificate serial: 0776 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NFMkWvnnaQX2mpDxzs2F6og_6hY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C6064/52FEF73A297011EB91E9DE54C4F9AE02/NFMkWvnnaQX2mpDxzs2F6og_6hY.mft Manifest number: 076F Signing time: Fri 22 Aug 2025 21:42:58 +0000 Manifest this update: Fri 22 Aug 2025 21:42:57 +0000 Manifest next update: Fri 29 Aug 2025 21:42:57 +0000 Files and hashes: 1: NFMkWvnnaQX2mpDxzs2F6og_6hY.crl (hash: BvjX2LGHjPbbKJttZSlvZ/MTJLRToXFeVR/uhtkHTUQ=) 2: 0BAA4608297211EB99ECF956C4F9AE02.roa (hash: Pzy/lWlyEAOnnToKQdX1gv5KRRU1QsPgl9JiMWq4wxE=) 3: E9D321CEF2F611EE95E10935C4F9AE02.roa (hash: 0MDsliqtqRrojbtZYNkkZiieXi7syQdv9RVqPyRdcns=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C6064/52FEF73A297011EB91E9DE54C4F9AE02/NFMkWvnnaQX2mpDxzs2F6og_6hY.crl rsync://rpki.apnic.net/member_repository/A91C6064/52FEF73A297011EB91E9DE54C4F9AE02/NFMkWvnnaQX2mpDxzs2F6og_6hY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NFMkWvnnaQX2mpDxzs2F6og_6hY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 21:42:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1910 (0x776) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C6064, serialNumber=3453245AF9E76905F69A90F1CECD85EA883FEA16 Validity Not Before: Aug 22 21:42:57 2025 GMT Not After : Aug 29 21:42:57 2025 GMT Subject: CN=68a8e462-5876 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:7f:55:cf:65:a8:72:eb:05:79:82:a9:a3:21: af:3d:6e:a6:ec:2d:d2:5e:ed:1a:ab:b5:7f:0d:38: 84:74:4d:2d:58:b4:0e:ff:2c:03:75:b5:f8:4a:5d: e5:96:82:0c:69:8f:1f:50:05:95:7f:dc:2c:52:c2: 46:14:29:57:f0:a1:a0:b6:20:e7:38:b3:86:b8:63: 43:d7:b4:f6:21:48:a5:db:9a:b6:44:bd:a4:6d:76: 9d:40:ad:e9:7f:21:39:1c:f3:3f:ec:3b:be:da:ac: 59:64:bb:ac:39:a7:83:9f:96:00:24:b1:07:00:62: b5:16:a6:e9:83:4e:34:db:15:5c:a2:eb:20:5f:84: 49:21:a0:da:26:e8:fd:dc:2f:5a:51:79:7b:4e:d9: 46:84:d1:87:2a:41:55:67:5e:65:ef:67:9c:47:a8: 04:5b:14:98:0d:38:d2:ae:1e:6f:50:9c:b2:42:e9: c3:2f:59:39:0d:61:37:f3:7d:10:66:be:a2:d5:28: 86:58:5f:fd:da:32:7f:bf:ae:9c:ef:6a:ca:be:55: 67:f7:a3:b4:4c:b0:ad:00:49:02:cd:70:13:b6:1a: f8:f7:1c:18:05:16:a7:1d:74:af:e9:c7:c7:8f:d9: 59:4c:f6:98:13:ef:64:b3:aa:4e:70:01:d9:ac:f2: 66:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:5C:99:22:76:82:37:7A:53:E5:77:75:89:F3:25:3A:15:09:20:4A X509v3 Authority Key Identifier: keyid:34:53:24:5A:F9:E7:69:05:F6:9A:90:F1:CE:CD:85:EA:88:3F:EA:16 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C6064/52FEF73A297011EB91E9DE54C4F9AE02/NFMkWvnnaQX2mpDxzs2F6og_6hY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NFMkWvnnaQX2mpDxzs2F6og_6hY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C6064/52FEF73A297011EB91E9DE54C4F9AE02/NFMkWvnnaQX2mpDxzs2F6og_6hY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 15:03:05:55:fa:e6:81:2b:59:f4:dc:e7:97:7b:0b:5f:2d:f7: 70:2a:b8:85:1b:b4:ad:46:eb:34:2d:a0:c0:d1:8a:28:ff:5e: 15:10:9f:45:f0:3a:43:76:be:2f:0b:51:cc:9f:0e:e4:b4:06: e9:47:82:3d:69:34:6e:79:ca:97:26:e1:b7:87:97:73:9d:47: 25:00:36:43:e2:db:85:83:4b:4a:f4:19:78:61:c5:8e:ec:43: ec:aa:94:5a:51:06:e1:3f:b5:ea:f3:8a:47:44:e0:67:cd:13: 3f:40:30:32:f1:7d:90:2d:ad:85:e2:44:9b:90:20:66:28:c4: 8b:b6:03:95:9b:53:dd:6e:27:ac:17:8d:1d:5c:c7:ed:84:fd: 10:72:2d:b2:e1:07:32:e1:d4:fa:e1:30:6e:36:86:a6:c2:74: 2f:5d:56:54:72:1c:48:a7:98:47:7a:4b:c5:9c:f5:28:f8:2d: aa:73:a7:70:69:78:6a:dd:a2:92:c5:3c:39:e7:3d:87:54:4f: 89:77:78:40:65:3d:b7:68:9f:8c:d4:9f:74:8e:6b:35:4e:d2: 5f:f3:16:36:18:d4:e5:e8:e6:2a:db:54:b5:c8:83:fa:a0:4c: d7:f6:19:a8:32:8c:6a:49:07:78:d3:8c:ec:6d:8c:bd:5b:f0: 0a:b8:39:83 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB3YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzYwNjQxMTAvBgNVBAUTKDM0NTMyNDVBRjlFNzY5MDVGNjlBOTBGMUNFQ0Q4NUVB ODgzRkVBMTYwHhcNMjUwODIyMjE0MjU3WhcNMjUwODI5MjE0MjU3WjAYMRYwFAYD VQQDEw02OGE4ZTQ2Mi01ODc2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApn9Vz2WocusFeYKpoyGvPW6m7C3SXu0aq7V/DTiEdE0tWLQO/ywDdbX4Sl3l loIMaY8fUAWVf9wsUsJGFClX8KGgtiDnOLOGuGND17T2IUil25q2RL2kbXadQK3p fyE5HPM/7Du+2qxZZLusOaeDn5YAJLEHAGK1Fqbpg0402xVcousgX4RJIaDaJuj9 3C9aUXl7TtlGhNGHKkFVZ15l72ecR6gEWxSYDTjSrh5vUJyyQunDL1k5DWE3830Q Zr6i1SiGWF/92jJ/v66c72rKvlVn96O0TLCtAEkCzXATthr49xwYBRanHXSv6cfH j9lZTPaYE+9ks6pOcAHZrPJmcwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFApcmSJ2 gjd6U+V3dYnzJToVCSBKMB8GA1UdIwQYMBaAFDRTJFr552kF9pqQ8c7NheqIP+oW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNjA2NC81MkZFRjczQTI5 NzAxMUVCOTFFOURFNTRDNEY5QUUwMi9ORk1rV3ZubmFRWDJtcER4enMyRjZvZ182 aFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05GTWtXdm5uYVFYMm1wRHh6czJGNm9nXzZoWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NjA2NC81MkZFRjczQTI5NzAxMUVCOTFFOURFNTRDNEY5QUUwMi9ORk1rV3ZubmFR WDJtcER4enMyRjZvZ182aFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAVAwVV+uaBK1n03OeXewtfLfdwKriFG7StRus0LaDA0Yoo/14VEJ9F 8DpDdr4vC1HMnw7ktAbpR4I9aTRuecqXJuG3h5dznUclADZD4tuFg0tK9Bl4YcWO 7EPsqpRaUQbhP7Xq84pHROBnzRM/QDAy8X2QLa2F4kSbkCBmKMSLtgOVm1Pdbies F40dXMfthP0Qci2y4Qcy4dT64TBuNoamwnQvXVZUchxIp5hHekvFnPUo+C2qc6dw aXhq3aKSxTw55z2HVE+Jd3hAZT23aJ+M1J90jms1TtJf8xY2GNTl6OYq21S1yIP6 oEzX9hmoMoxqSQd404zsbYy9W/AKuDmD -----END CERTIFICATE-----Generated at Sun Aug 24 04:49:05 2025 by rpki-client