$ rpki-client -vvf rpki.apnic.net/member_repository/A91DD112/DABAB5DCD78F11EC97B59E62C4F9AE02/NuTjWeIN2mUTPhIaktbWrLHlMSM.mft File: NuTjWeIN2mUTPhIaktbWrLHlMSM.mft (raw, json) Hash identifier: wsc3pAu28Xt1tMsTZ0Y67hlPCIgYNDxrWg/xf3S/wdM= Subject key identifier: 59:B7:9D:15:72:DF:27:CE:95:15:CA:7D:AB:14:A1:F0:98:2B:16:16 Authority key identifier: 36:E4:E3:59:E2:0D:DA:65:13:3E:12:1A:92:D6:D6:AC:B1:E5:31:23 Certificate issuer: /CN=A91DD112/serialNumber=36E4E359E20DDA65133E121A92D6D6ACB1E53123 Certificate serial: 0330 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NuTjWeIN2mUTPhIaktbWrLHlMSM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DD112/DABAB5DCD78F11EC97B59E62C4F9AE02/NuTjWeIN2mUTPhIaktbWrLHlMSM.mft Manifest number: 032C Signing time: Sat 23 Aug 2025 01:21:44 +0000 Manifest this update: Sat 23 Aug 2025 01:21:43 +0000 Manifest next update: Sat 30 Aug 2025 01:21:43 +0000 Files and hashes: 1: NuTjWeIN2mUTPhIaktbWrLHlMSM.crl (hash: lImhiCkqYHurcaRxsqPsCjHM9b4hjMZgSRiHcSXwpRs=) 2: 0D09EE14D79411EC955CCA68C4F9AE02.roa (hash: mRRgwNA+PP2GD4RfPaz1cyaWGNrkL/T4dyult2MIxPY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DD112/DABAB5DCD78F11EC97B59E62C4F9AE02/NuTjWeIN2mUTPhIaktbWrLHlMSM.crl rsync://rpki.apnic.net/member_repository/A91DD112/DABAB5DCD78F11EC97B59E62C4F9AE02/NuTjWeIN2mUTPhIaktbWrLHlMSM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NuTjWeIN2mUTPhIaktbWrLHlMSM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 01:21:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 816 (0x330) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DD112, serialNumber=36E4E359E20DDA65133E121A92D6D6ACB1E53123 Validity Not Before: Aug 23 01:21:43 2025 GMT Not After : Aug 30 01:21:43 2025 GMT Subject: CN=68a917a8-8c28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:e7:4f:31:26:55:49:23:7f:4a:9e:f5:19:66: 31:23:3c:e2:86:37:24:43:c8:18:cb:55:96:2d:0e: 0b:d0:5c:5d:13:72:60:d3:de:57:97:9b:88:2b:1e: 0d:ed:18:76:5a:a2:a1:4f:52:33:19:86:b2:28:0e: 25:bd:42:6e:0e:40:f0:5a:10:da:94:5b:68:c5:e3: 27:7a:a0:78:01:e1:d1:a5:8f:db:77:89:bc:67:8e: 95:33:04:2e:ad:50:59:a4:da:d4:b8:3f:88:4f:fa: 44:0f:a4:4d:9d:a4:18:7e:fa:95:16:58:f9:df:53: ec:ee:31:a1:3e:f9:8d:1c:38:bf:1d:33:c4:a1:39: 17:42:17:d3:35:da:b6:bb:ca:59:63:fb:6f:a5:b1: c9:a0:b5:72:4d:2d:a9:a3:98:8c:91:82:90:8c:8d: 33:14:9a:dd:8e:e7:18:a2:72:09:a8:d4:01:62:77: 88:32:03:71:bb:b8:a2:55:8d:5d:c1:07:74:b1:91: 71:e9:b0:1f:73:4e:f2:ba:2f:ab:b2:d8:95:69:57: b7:5d:e3:c6:f3:70:08:31:06:60:2b:93:8f:2b:a6: ad:95:eb:48:ed:e9:af:8f:dc:88:92:64:af:12:a5: f9:27:a2:50:4a:ed:51:eb:51:4c:ea:4c:09:92:1f: 22:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:B7:9D:15:72:DF:27:CE:95:15:CA:7D:AB:14:A1:F0:98:2B:16:16 X509v3 Authority Key Identifier: keyid:36:E4:E3:59:E2:0D:DA:65:13:3E:12:1A:92:D6:D6:AC:B1:E5:31:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DD112/DABAB5DCD78F11EC97B59E62C4F9AE02/NuTjWeIN2mUTPhIaktbWrLHlMSM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NuTjWeIN2mUTPhIaktbWrLHlMSM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DD112/DABAB5DCD78F11EC97B59E62C4F9AE02/NuTjWeIN2mUTPhIaktbWrLHlMSM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d0:43:b5:78:60:d9:e2:ea:5a:6a:7c:c9:8c:b3:78:40:ea:b0: 53:6a:55:3d:34:29:72:aa:e4:0c:dd:63:4c:b6:1d:36:dc:6c: 00:b5:f0:6b:8a:54:38:f3:cb:5f:31:9f:4b:f7:7b:aa:13:7c: a8:7b:be:42:74:06:ab:c7:9b:68:c0:71:09:b8:e9:ca:a6:57: 87:7b:bd:b6:e4:86:3c:88:40:f1:23:60:2d:04:c7:67:f5:5d: cd:d1:32:22:3d:a2:fd:8b:15:ae:36:e1:19:6b:ea:00:85:8a: 35:98:a2:c2:0c:64:3b:9e:d7:7d:0a:de:f6:99:79:0c:af:5d: 44:e5:48:1f:83:ca:ad:2a:a6:27:14:8c:f1:9f:86:f1:2d:53: 98:55:af:7c:d3:33:9b:6f:f6:9b:22:b7:02:1e:6d:0f:67:a5: 4b:e5:b4:a6:8b:2d:f6:6a:a6:63:44:43:8f:f7:11:9b:d2:4b: b3:13:71:3d:9d:44:ee:74:ba:97:1d:4a:4d:4e:c0:32:1f:cd: a5:c7:5c:8e:8f:ef:b2:9b:71:ca:f0:ed:4d:ec:94:6a:9b:3f: f4:95:58:49:59:2f:82:c9:63:d4:b0:e2:71:c2:35:a6:2d:4c: 84:3b:43:5b:a4:3b:0a:e7:57:81:02:7f:05:a5:00:0b:c8:70: ce:21:c8:ac -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAzAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REQxMTIxMTAvBgNVBAUTKDM2RTRFMzU5RTIwRERBNjUxMzNFMTIxQTkyRDZENkFD QjFFNTMxMjMwHhcNMjUwODIzMDEyMTQzWhcNMjUwODMwMDEyMTQzWjAYMRYwFAYD VQQDEw02OGE5MTdhOC04YzI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwOdPMSZVSSN/Sp71GWYxIzzihjckQ8gYy1WWLQ4L0FxdE3Jg095Xl5uIKx4N 7Rh2WqKhT1IzGYayKA4lvUJuDkDwWhDalFtoxeMneqB4AeHRpY/bd4m8Z46VMwQu rVBZpNrUuD+IT/pED6RNnaQYfvqVFlj531Ps7jGhPvmNHDi/HTPEoTkXQhfTNdq2 u8pZY/tvpbHJoLVyTS2po5iMkYKQjI0zFJrdjucYonIJqNQBYneIMgNxu7iiVY1d wQd0sZFx6bAfc07yui+rstiVaVe3XePG83AIMQZgK5OPK6atletI7emvj9yIkmSv EqX5J6JQSu1R61FM6kwJkh8iXwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFm3nRVy 3yfOlRXKfasUofCYKxYWMB8GA1UdIwQYMBaAFDbk41niDdplEz4SGpLW1qyx5TEj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERDExMi9EQUJBQjVEQ0Q3 OEYxMUVDOTdCNTlFNjJDNEY5QUUwMi9OdVRqV2VJTjJtVVRQaElha3RiV3JMSGxN U00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL051VGpXZUlOMm1VVFBoSWFrdGJXckxIbE1TTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RDExMi9EQUJBQjVEQ0Q3OEYxMUVDOTdCNTlFNjJDNEY5QUUwMi9OdVRqV2VJTjJt VVRQaElha3RiV3JMSGxNU00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDQQ7V4YNni6lpqfMmMs3hA6rBTalU9NClyquQM3WNMth023GwAtfBr ilQ488tfMZ9L93uqE3yoe75CdAarx5towHEJuOnKpleHe7225IY8iEDxI2AtBMdn 9V3N0TIiPaL9ixWuNuEZa+oAhYo1mKLCDGQ7ntd9Ct72mXkMr11E5Ugfg8qtKqYn FIzxn4bxLVOYVa980zObb/abIrcCHm0PZ6VL5bSmiy32aqZjREOP9xGb0kuzE3E9 nUTudLqXHUpNTsAyH82lx1yOj++ym3HK8O1N7JRqmz/0lVhJWS+CyWPUsOJxwjWm LUyEO0NbpDsK51eBAn8FpQALyHDOIcis -----END CERTIFICATE-----Generated at Sat Aug 23 13:37:41 2025 by rpki-client