$ rpki-client -vvf rpki.apnic.net/member_repository/A91D63AF/4DFE6824B6B711EEA9D7FC3AC4F9AE02/NHTCU5hhEAr9ljoWPIAtAmT47H0.mft File: NHTCU5hhEAr9ljoWPIAtAmT47H0.mft (raw, json) Hash identifier: bufCfVw+PVs+jrQuvQPh1kqiGVJRmkPGfhv78j7lCTY= Subject key identifier: 66:89:6C:78:F4:F8:CE:B7:F6:2D:06:E1:E6:AA:20:7B:96:B6:71:47 Authority key identifier: 34:74:C2:53:98:61:10:0A:FD:96:3A:16:3C:80:2D:02:64:F8:EC:7D Certificate issuer: /CN=A91D63AF/serialNumber=3474C2539861100AFD963A163C802D0264F8EC7D Certificate serial: 0138 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/NHTCU5hhEAr9ljoWPIAtAmT47H0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D63AF/4DFE6824B6B711EEA9D7FC3AC4F9AE02/NHTCU5hhEAr9ljoWPIAtAmT47H0.mft Manifest number: 0131 Signing time: Sat 23 Aug 2025 04:46:11 +0000 Manifest this update: Sat 23 Aug 2025 04:46:11 +0000 Manifest next update: Sat 30 Aug 2025 04:46:11 +0000 Files and hashes: 1: NHTCU5hhEAr9ljoWPIAtAmT47H0.crl (hash: D2G+gba+hyMlMfxTKH3JLA/ggW507c03QiqrJGQKiFk=) 2: 6241069011E111EFBBB70B32C4F9AE02.roa (hash: 1oT/iS9d2Pt0zquYaFCDfGNU++P67uGYK/ZfWm8Kv/g=) 3: 8C508DC055F711EFA5200828C4F9AE02.roa (hash: ihNWokHlCtMazUN4Q0S1jw6bRWJLab7FqUZHdXu5av8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D63AF/4DFE6824B6B711EEA9D7FC3AC4F9AE02/NHTCU5hhEAr9ljoWPIAtAmT47H0.crl rsync://rpki.apnic.net/member_repository/A91D63AF/4DFE6824B6B711EEA9D7FC3AC4F9AE02/NHTCU5hhEAr9ljoWPIAtAmT47H0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/NHTCU5hhEAr9ljoWPIAtAmT47H0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 04:46:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 312 (0x138) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D63AF, serialNumber=3474C2539861100AFD963A163C802D0264F8EC7D Validity Not Before: Aug 23 04:46:11 2025 GMT Not After : Aug 30 04:46:11 2025 GMT Subject: CN=68a94793-8d1e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:fd:9e:c9:7f:89:31:ec:c3:4d:3f:8b:b2:03: fc:5b:0b:89:dd:30:94:5e:56:18:f9:7b:6f:cf:d5: 40:df:8f:95:dd:38:8b:b3:a4:54:cd:f7:90:29:b9: 78:52:d3:cf:2b:a5:ef:a3:84:c9:3e:74:d5:12:8f: a8:79:58:42:d9:80:9c:b6:11:5a:da:c2:4e:04:e9: f1:37:ab:98:3c:d9:75:5a:55:d9:11:7a:ac:65:de: 0f:d1:a4:0a:2f:f4:a6:80:c7:cf:42:70:5f:f6:a9: 28:50:f2:f8:41:d9:84:aa:a1:ce:55:e7:c4:3d:31: 08:bf:fb:6c:3b:e3:4f:bf:36:a8:31:2a:5b:b8:e7: 40:7b:10:6e:36:03:8b:dc:09:75:c1:fe:a0:e6:53: 66:24:b4:b6:1a:11:9d:d7:95:1a:18:58:2d:ce:7d: 16:7b:f7:cd:da:33:1a:8c:4c:38:eb:14:dd:2e:fc: aa:71:27:b7:73:8a:1c:00:bd:d7:d9:80:96:67:01: 5f:66:bc:e6:6e:1c:44:ee:ad:70:09:b5:28:d2:70: 51:0c:2e:41:d4:20:8f:b3:85:c6:f8:f2:5f:67:a5: 45:b9:07:fe:70:f7:01:e0:77:58:55:af:21:81:17: 33:2f:a8:68:65:96:1d:f3:c8:fb:a1:2d:85:7e:c3: 9b:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:89:6C:78:F4:F8:CE:B7:F6:2D:06:E1:E6:AA:20:7B:96:B6:71:47 X509v3 Authority Key Identifier: keyid:34:74:C2:53:98:61:10:0A:FD:96:3A:16:3C:80:2D:02:64:F8:EC:7D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D63AF/4DFE6824B6B711EEA9D7FC3AC4F9AE02/NHTCU5hhEAr9ljoWPIAtAmT47H0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/NHTCU5hhEAr9ljoWPIAtAmT47H0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D63AF/4DFE6824B6B711EEA9D7FC3AC4F9AE02/NHTCU5hhEAr9ljoWPIAtAmT47H0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c3:5b:e0:6c:2e:8e:5d:47:3a:47:88:31:72:85:f7:35:f5:52: c8:c6:d8:7f:be:44:07:95:33:21:10:be:7b:f2:ba:dd:aa:46: 3d:a1:32:99:f9:e9:b4:f3:b3:ad:61:ae:42:1c:4d:31:2f:f0: 18:08:c7:42:21:1f:9a:05:40:e6:fb:c2:40:7d:37:3b:fb:5f: 52:ea:8c:f5:eb:3f:29:68:86:5c:19:ac:41:8c:47:63:18:63: 48:2a:0e:6e:9e:83:c0:c4:8d:1e:c0:99:2a:71:4d:21:27:91: 73:90:19:e1:05:26:2a:a8:7b:86:2d:5a:fe:69:b0:e0:c7:37: 25:ec:ef:65:53:a8:df:bc:3e:a9:ec:f5:f0:54:36:71:06:c3: 42:d4:01:b2:94:b4:0f:2a:49:b5:57:9e:50:6f:b8:93:35:c7: a0:c8:0c:a8:cb:df:0b:42:84:e4:89:94:1f:e3:5c:70:c5:28: d6:74:2d:73:73:f9:cc:9f:00:22:f1:0e:d5:74:a4:e0:5c:50: 7f:b7:5c:5b:8a:96:b7:ad:2d:57:b7:10:0b:ab:b4:b6:18:a8: 53:fd:67:46:8f:fd:74:98:3d:fe:6f:97:71:d4:ae:7e:11:4e: 80:6e:a3:99:c2:ed:31:06:59:d3:98:fb:fb:c8:cd:b5:c2:e3: f2:a2:82:5d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICATgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDYzQUYxMTAvBgNVBAUTKDM0NzRDMjUzOTg2MTEwMEFGRDk2M0ExNjNDODAyRDAy NjRGOEVDN0QwHhcNMjUwODIzMDQ0NjExWhcNMjUwODMwMDQ0NjExWjAYMRYwFAYD VQQDEw02OGE5NDc5My04ZDFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4f2eyX+JMezDTT+LsgP8WwuJ3TCUXlYY+Xtvz9VA34+V3TiLs6RUzfeQKbl4 UtPPK6Xvo4TJPnTVEo+oeVhC2YCcthFa2sJOBOnxN6uYPNl1WlXZEXqsZd4P0aQK L/SmgMfPQnBf9qkoUPL4QdmEqqHOVefEPTEIv/tsO+NPvzaoMSpbuOdAexBuNgOL 3Al1wf6g5lNmJLS2GhGd15UaGFgtzn0We/fN2jMajEw46xTdLvyqcSe3c4ocAL3X 2YCWZwFfZrzmbhxE7q1wCbUo0nBRDC5B1CCPs4XG+PJfZ6VFuQf+cPcB4HdYVa8h gRczL6hoZZYd88j7oS2FfsObcwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGaJbHj0 +M639i0G4eaqIHuWtnFHMB8GA1UdIwQYMBaAFDR0wlOYYRAK/ZY6FjyALQJk+Ox9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENjNBRi80REZFNjgyNEI2 QjcxMUVFQTlEN0ZDM0FDNEY5QUUwMi9OSFRDVTVoaEVBcjlsam9XUElBdEFtVDQ3 SDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL05IVENVNWhoRUFyOWxqb1dQSUF0QW1UNDdIMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NjNBRi80REZFNjgyNEI2QjcxMUVFQTlEN0ZDM0FDNEY5QUUwMi9OSFRDVTVoaEVB cjlsam9XUElBdEFtVDQ3SDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDDW+BsLo5dRzpHiDFyhfc19VLIxth/vkQHlTMhEL578rrdqkY9oTKZ +em087OtYa5CHE0xL/AYCMdCIR+aBUDm+8JAfTc7+19S6oz16z8paIZcGaxBjEdj GGNIKg5unoPAxI0ewJkqcU0hJ5FzkBnhBSYqqHuGLVr+abDgxzcl7O9lU6jfvD6p 7PXwVDZxBsNC1AGylLQPKkm1V55Qb7iTNcegyAyoy98LQoTkiZQf41xwxSjWdC1z c/nMnwAi8Q7VdKTgXFB/t1xbipa3rS1XtxALq7S2GKhT/WdGj/10mD3+b5dx1K5+ EU6AbqOZwu0xBlnTmPv7yM21wuPyooJd -----END CERTIFICATE-----Generated at Sat Aug 23 10:12:41 2025 by rpki-client