$ rpki-client -vvf rpki.apnic.net/member_repository/A91C6515/84C4674A60C111F08BD5B82EC4F9AE02/NttE1MFZiGc4IVpWELEQwkSGylY.mft File: NttE1MFZiGc4IVpWELEQwkSGylY.mft (raw, json) Hash identifier: JMuM1jNEdjbZlj06yUq5rHyXcMNlU595e+E9RJuGuN4= Subject key identifier: F8:36:5E:E4:C6:05:E2:37:73:61:55:84:8B:7F:7C:12:88:10:2B:44 Authority key identifier: 36:DB:44:D4:C1:59:88:67:38:21:5A:56:10:B1:10:C2:44:86:CA:56 Certificate issuer: /CN=A91C6515/serialNumber=36DB44D4C159886738215A5610B110C24486CA56 Certificate serial: 17 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NttE1MFZiGc4IVpWELEQwkSGylY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C6515/84C4674A60C111F08BD5B82EC4F9AE02/NttE1MFZiGc4IVpWELEQwkSGylY.mft Manifest number: 16 Signing time: Sat 23 Aug 2025 08:13:39 +0000 Manifest this update: Sat 23 Aug 2025 08:13:38 +0000 Manifest next update: Sat 30 Aug 2025 08:13:38 +0000 Files and hashes: 1: NttE1MFZiGc4IVpWELEQwkSGylY.crl (hash: ncCm4W1nhhunXxwUmb7aBH2YfCRzJ0+yfk9dzkGCwUk=) 2: E5723CA260C111F0A9EB0333C4F9AE02.roa (hash: dgVomHsPjy8dnzAeq1krltAgv8t1jsAsT7S8XSGxsvA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C6515/84C4674A60C111F08BD5B82EC4F9AE02/NttE1MFZiGc4IVpWELEQwkSGylY.crl rsync://rpki.apnic.net/member_repository/A91C6515/84C4674A60C111F08BD5B82EC4F9AE02/NttE1MFZiGc4IVpWELEQwkSGylY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NttE1MFZiGc4IVpWELEQwkSGylY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 08:13:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23 (0x17) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C6515, serialNumber=36DB44D4C159886738215A5610B110C24486CA56 Validity Not Before: Aug 23 08:13:38 2025 GMT Not After : Aug 30 08:13:38 2025 GMT Subject: CN=68a97833-824d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:93:e7:71:a0:40:34:38:a0:30:50:91:57:66: 17:47:23:5d:d1:1a:51:22:5b:40:7f:76:bc:11:21: ed:53:85:9b:e3:a4:72:6a:7a:f7:93:b5:af:9e:c0: 42:23:67:b0:8f:9a:24:ab:ce:f6:d4:56:0b:7a:c5: 8a:c0:6d:1e:40:a5:fc:cb:c2:aa:91:02:9b:3f:dd: 4f:16:7f:21:43:92:23:eb:b9:cb:33:91:8d:b7:30: 6a:58:77:d0:48:c8:0f:b8:00:2e:fc:af:0a:8c:18: 61:1d:46:8f:ad:f9:9d:db:bb:f5:b5:69:14:25:ba: 68:36:99:e1:49:e7:f9:59:8e:8c:eb:65:b4:4b:b6: 75:dd:3f:7f:5a:cd:2e:09:2f:47:20:51:0d:99:c7: 9e:54:53:c2:53:f7:be:f1:51:d9:47:5f:40:ca:dc: 9d:9a:aa:7d:b8:e4:80:d6:9a:28:ef:04:cd:a7:44: 58:49:66:85:9a:90:33:dd:27:06:10:9c:e4:aa:62: a4:b6:59:d0:18:90:be:88:97:cf:ee:90:63:04:be: dd:6d:69:27:9a:8d:90:ae:65:86:a7:e3:d0:0d:ec: 48:f9:a8:0f:c5:c3:f0:26:a5:da:5d:32:e1:ce:67: 55:76:2c:44:b6:72:16:8c:6d:a9:0d:3a:a2:84:79: 3a:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:36:5E:E4:C6:05:E2:37:73:61:55:84:8B:7F:7C:12:88:10:2B:44 X509v3 Authority Key Identifier: keyid:36:DB:44:D4:C1:59:88:67:38:21:5A:56:10:B1:10:C2:44:86:CA:56 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C6515/84C4674A60C111F08BD5B82EC4F9AE02/NttE1MFZiGc4IVpWELEQwkSGylY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NttE1MFZiGc4IVpWELEQwkSGylY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C6515/84C4674A60C111F08BD5B82EC4F9AE02/NttE1MFZiGc4IVpWELEQwkSGylY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a4:cb:73:62:88:54:61:d7:58:b4:11:1d:bd:45:7b:a2:f9:a3: 04:f6:7a:bc:85:e7:07:a8:67:29:9e:0a:60:43:26:2b:58:29: 35:8d:6c:3b:d6:92:88:50:9e:70:ed:3f:89:12:03:da:fa:af: 63:f0:bb:c6:62:8e:8d:4f:11:4d:5e:5b:12:81:bf:26:83:b8: fe:3a:2c:59:46:b3:cc:48:12:cf:e0:fb:b4:12:14:f9:78:95: 05:1a:cc:4c:fb:06:b9:71:02:34:31:b5:46:bd:16:f8:63:f6: 25:96:23:ad:d3:40:bd:bd:8d:c7:45:2c:d7:da:2b:8d:f8:64: 37:82:97:bf:4a:b2:87:5f:50:a8:a3:ab:03:cf:7a:50:4d:a1: b7:e4:9e:7c:58:08:7d:76:8d:8f:b3:8a:c3:2e:ef:d5:44:66: 91:bf:76:98:95:72:4a:41:a5:d4:e5:54:3b:5b:07:eb:ce:c4: 04:fa:f9:56:47:c7:88:d4:69:92:8e:8a:bd:60:38:9e:cc:16: 76:69:9f:d8:99:a2:b0:f4:3e:e1:33:9b:3b:bf:35:92:87:c1: 27:70:62:3d:ef:9a:15:a5:9b:8f:b5:77:3c:66:b1:7b:dc:d9: c9:eb:9a:cf:db:2a:fd:89:6e:3a:41:1c:da:62:b8:26:76:20: e5:4e:58:82 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBFzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD NjUxNTExMC8GA1UEBRMoMzZEQjQ0RDRDMTU5ODg2NzM4MjE1QTU2MTBCMTEwQzI0 NDg2Q0E1NjAeFw0yNTA4MjMwODEzMzhaFw0yNTA4MzAwODEzMzhaMBgxFjAUBgNV BAMTDTY4YTk3ODMzLTgyNGQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDWk+dxoEA0OKAwUJFXZhdHI13RGlEiW0B/drwRIe1ThZvjpHJqeveTta+ewEIj Z7CPmiSrzvbUVgt6xYrAbR5ApfzLwqqRAps/3U8WfyFDkiPrucszkY23MGpYd9BI yA+4AC78rwqMGGEdRo+t+Z3bu/W1aRQlumg2meFJ5/lZjozrZbRLtnXdP39azS4J L0cgUQ2Zx55UU8JT977xUdlHX0DK3J2aqn245IDWmijvBM2nRFhJZoWakDPdJwYQ nOSqYqS2WdAYkL6Il8/ukGMEvt1taSeajZCuZYan49AN7Ej5qA/Fw/AmpdpdMuHO Z1V2LES2chaMbakNOqKEeTotAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU+DZe5MYF 4jdzYVWEi398EogQK0QwHwYDVR0jBBgwFoAUNttE1MFZiGc4IVpWELEQwkSGylYw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM2NTE1Lzg0QzQ2NzRBNjBD MTExRjA4QkQ1QjgyRUM0RjlBRTAyL050dEUxTUZaaUdjNElWcFdFTEVRd2tTR3ls WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvTnR0RTFNRlppR2M0SVZwV0VMRVF3a1NHeWxZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM2 NTE1Lzg0QzQ2NzRBNjBDMTExRjA4QkQ1QjgyRUM0RjlBRTAyL050dEUxTUZaaUdj NElWcFdFTEVRd2tTR3lsWS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAKTLc2KIVGHXWLQRHb1Fe6L5owT2eryF5weoZymeCmBDJitYKTWNbDvW kohQnnDtP4kSA9r6r2Pwu8Zijo1PEU1eWxKBvyaDuP46LFlGs8xIEs/g+7QSFPl4 lQUazEz7BrlxAjQxtUa9Fvhj9iWWI63TQL29jcdFLNfaK434ZDeCl79KsodfUKij qwPPelBNobfknnxYCH12jY+zisMu79VEZpG/dpiVckpBpdTlVDtbB+vOxAT6+VZH x4jUaZKOir1gOJ7MFnZpn9iZorD0PuEzmzu/NZKHwSdwYj3vmhWlm4+1dzxmsXvc 2cnrms/bKv2JbjpBHNpiuCZ2IOVOWII= -----END CERTIFICATE-----Generated at Sat Aug 23 17:06:55 2025 by rpki-client