$ rpki-client -vvf rpki.apnic.net/member_repository/A91C6064/52FEF73A297011EB91E9DE54C4F9AE02/NFMkWvnnaQX2mpDxzs2F6og_6hY.mft File: NFMkWvnnaQX2mpDxzs2F6og_6hY.mft (raw, json) Hash identifier: n22LUSdA6vBScE+2qAzToGoUa6+YfmIbzs5/BwtDFdk= Subject key identifier: B2:14:EF:20:18:F6:ED:96:E5:3F:75:04:BF:4B:9D:E2:6E:A4:78:65 Authority key identifier: 34:53:24:5A:F9:E7:69:05:F6:9A:90:F1:CE:CD:85:EA:88:3F:EA:16 Certificate issuer: /CN=A91C6064/serialNumber=3453245AF9E76905F69A90F1CECD85EA883FEA16 Certificate serial: 075C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NFMkWvnnaQX2mpDxzs2F6og_6hY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C6064/52FEF73A297011EB91E9DE54C4F9AE02/NFMkWvnnaQX2mpDxzs2F6og_6hY.mft Manifest number: 0755 Signing time: Wed 02 Jul 2025 21:55:23 +0000 Manifest this update: Wed 02 Jul 2025 21:55:22 +0000 Manifest next update: Wed 09 Jul 2025 21:55:22 +0000 Files and hashes: 1: NFMkWvnnaQX2mpDxzs2F6og_6hY.crl (hash: 23hf343yzsOlm4MaWgG65A/pl9ocAt/1UNz85/3Q4mI=) 2: 0BAA4608297211EB99ECF956C4F9AE02.roa (hash: Pzy/lWlyEAOnnToKQdX1gv5KRRU1QsPgl9JiMWq4wxE=) 3: E9D321CEF2F611EE95E10935C4F9AE02.roa (hash: 0MDsliqtqRrojbtZYNkkZiieXi7syQdv9RVqPyRdcns=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C6064/52FEF73A297011EB91E9DE54C4F9AE02/NFMkWvnnaQX2mpDxzs2F6og_6hY.crl rsync://rpki.apnic.net/member_repository/A91C6064/52FEF73A297011EB91E9DE54C4F9AE02/NFMkWvnnaQX2mpDxzs2F6og_6hY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NFMkWvnnaQX2mpDxzs2F6og_6hY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 21:55:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1884 (0x75c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C6064, serialNumber=3453245AF9E76905F69A90F1CECD85EA883FEA16 Validity Not Before: Jul 2 21:55:22 2025 GMT Not After : Jul 9 21:55:22 2025 GMT Subject: CN=6865aaca-72a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:6e:61:cf:50:bc:9e:03:e6:1e:ed:af:c2:3b: 63:62:70:72:a7:4f:07:11:e3:8c:86:5a:f0:de:22: e5:82:b0:6c:33:88:85:20:93:26:34:04:3d:13:8a: 08:7b:7a:dd:86:04:13:27:d9:ea:a8:40:07:c1:c8: f3:4f:35:1a:86:9a:29:73:ff:24:78:00:1e:ed:8b: 10:91:47:1b:01:6d:64:a4:1c:ab:18:28:38:bc:63: 12:3c:1b:ae:22:d3:95:fd:0c:07:e5:24:b1:ad:14: 72:f6:75:c1:cd:1a:c7:62:c7:b5:20:77:46:c9:bb: 70:6e:f3:de:81:22:18:65:08:fe:d3:47:66:53:d5: 62:e3:07:84:16:67:a7:61:0a:a6:bd:26:c4:55:e1: 50:e9:a7:94:c3:4f:c6:c4:54:e9:9c:ce:20:ab:3b: 42:b8:92:db:5d:c2:a1:ee:8b:01:09:9e:6c:4d:23: 09:52:f1:e1:74:3c:96:11:cd:e0:bb:fc:0f:50:e6: 77:fd:37:a7:61:a2:d1:06:23:3f:49:a6:09:ae:45: 5b:b2:64:c7:29:1c:70:98:ae:1f:77:75:fa:04:78: 68:0c:c8:55:8b:42:37:d9:00:01:e8:a9:79:ea:cf: de:ea:d0:c3:f7:d6:ec:bb:31:0c:61:b9:f8:8e:a1: 1d:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:14:EF:20:18:F6:ED:96:E5:3F:75:04:BF:4B:9D:E2:6E:A4:78:65 X509v3 Authority Key Identifier: keyid:34:53:24:5A:F9:E7:69:05:F6:9A:90:F1:CE:CD:85:EA:88:3F:EA:16 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C6064/52FEF73A297011EB91E9DE54C4F9AE02/NFMkWvnnaQX2mpDxzs2F6og_6hY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NFMkWvnnaQX2mpDxzs2F6og_6hY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C6064/52FEF73A297011EB91E9DE54C4F9AE02/NFMkWvnnaQX2mpDxzs2F6og_6hY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 87:55:ee:92:c0:df:d3:c7:05:35:63:94:01:a8:28:bf:13:15: bb:7e:0e:11:96:cf:31:59:c9:04:5c:ac:a2:4f:97:e1:39:1e: ea:1a:3f:ee:5f:78:c3:d1:08:dd:3c:46:8c:72:8e:6b:5e:b4: 07:36:d3:1a:f5:75:e6:aa:af:c4:1d:0a:3f:f4:33:37:4f:a2: 84:5f:2f:3e:bb:32:6f:04:be:27:a7:dd:d5:c2:2c:fe:ab:80: fd:2e:00:34:45:81:69:00:27:f4:76:87:77:d0:e6:79:66:30: d7:0e:f6:ac:d5:8c:e5:10:9e:77:d3:9b:78:f4:6a:ed:22:d8: 8d:d5:11:81:1b:ad:21:fb:fe:4b:06:ef:11:ee:78:fc:08:4a: 26:8e:91:59:a8:62:62:39:43:5c:91:03:38:ae:9d:89:06:5b: 8e:8f:7a:bd:0c:ec:92:23:10:9f:16:20:c1:bd:27:ba:5c:dc: e0:2b:13:4d:c0:c7:13:f8:c8:76:6a:c2:24:37:c0:17:44:9a: f9:ec:f1:b4:78:12:ad:05:4b:4b:74:4c:c0:74:71:7f:96:e5: 12:61:2f:b3:7a:f6:33:6c:99:af:1a:16:07:2c:f2:40:30:ba: e3:a4:14:65:f8:e8:49:6d:1e:c4:b9:62:cd:ae:bc:a1:9e:76: 3e:a2:58:90 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB1wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzYwNjQxMTAvBgNVBAUTKDM0NTMyNDVBRjlFNzY5MDVGNjlBOTBGMUNFQ0Q4NUVB ODgzRkVBMTYwHhcNMjUwNzAyMjE1NTIyWhcNMjUwNzA5MjE1NTIyWjAYMRYwFAYD VQQDEw02ODY1YWFjYS03MmEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2W5hz1C8ngPmHu2vwjtjYnByp08HEeOMhlrw3iLlgrBsM4iFIJMmNAQ9E4oI e3rdhgQTJ9nqqEAHwcjzTzUahpopc/8keAAe7YsQkUcbAW1kpByrGCg4vGMSPBuu ItOV/QwH5SSxrRRy9nXBzRrHYse1IHdGybtwbvPegSIYZQj+00dmU9Vi4weEFmen YQqmvSbEVeFQ6aeUw0/GxFTpnM4gqztCuJLbXcKh7osBCZ5sTSMJUvHhdDyWEc3g u/wPUOZ3/TenYaLRBiM/SaYJrkVbsmTHKRxwmK4fd3X6BHhoDMhVi0I32QAB6Kl5 6s/e6tDD99bsuzEMYbn4jqEdOwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLIU7yAY 9u2W5T91BL9LneJupHhlMB8GA1UdIwQYMBaAFDRTJFr552kF9pqQ8c7NheqIP+oW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNjA2NC81MkZFRjczQTI5 NzAxMUVCOTFFOURFNTRDNEY5QUUwMi9ORk1rV3ZubmFRWDJtcER4enMyRjZvZ182 aFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05GTWtXdm5uYVFYMm1wRHh6czJGNm9nXzZoWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NjA2NC81MkZFRjczQTI5NzAxMUVCOTFFOURFNTRDNEY5QUUwMi9ORk1rV3ZubmFR WDJtcER4enMyRjZvZ182aFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCHVe6SwN/TxwU1Y5QBqCi/ExW7fg4Rls8xWckEXKyiT5fhOR7qGj/u X3jD0QjdPEaMco5rXrQHNtMa9XXmqq/EHQo/9DM3T6KEXy8+uzJvBL4np93Vwiz+ q4D9LgA0RYFpACf0dod30OZ5ZjDXDvas1YzlEJ5305t49GrtItiN1RGBG60h+/5L Bu8R7nj8CEomjpFZqGJiOUNckQM4rp2JBluOj3q9DOySIxCfFiDBvSe6XNzgKxNN wMcT+Mh2asIkN8AXRJr57PG0eBKtBUtLdEzAdHF/luUSYS+zevYzbJmvGhYHLPJA MLrjpBRl+OhJbR7EuWLNrryhnnY+oliQ -----END CERTIFICATE-----Generated at Thu Jul 3 15:00:39 2025 by rpki-client