$ rpki-client -vvf rpki.apnic.net/member_repository/A91F473F/1D17EDB42B9011EE8B5DE470C4F9AE02/NcbYSDFsIdmTz25MBtYB3AXvxOE.mft File: NcbYSDFsIdmTz25MBtYB3AXvxOE.mft (raw, json) Hash identifier: TaGJHDYPQauf7J5FMRBeRMK09MfIOqp18zm33rY88D4= Subject key identifier: 4C:7C:58:18:B8:C1:ED:0B:FE:60:E2:C1:17:99:C7:0E:92:CB:59:30 Authority key identifier: 35:C6:D8:48:31:6C:21:D9:93:CF:6E:4C:06:D6:01:DC:05:EF:C4:E1 Certificate issuer: /CN=A91F473F/serialNumber=35C6D848316C21D993CF6E4C06D601DC05EFC4E1 Certificate serial: 018C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NcbYSDFsIdmTz25MBtYB3AXvxOE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F473F/1D17EDB42B9011EE8B5DE470C4F9AE02/NcbYSDFsIdmTz25MBtYB3AXvxOE.mft Manifest number: 0189 Signing time: Sat 23 Aug 2025 03:41:23 +0000 Manifest this update: Sat 23 Aug 2025 03:41:23 +0000 Manifest next update: Sat 30 Aug 2025 03:41:23 +0000 Files and hashes: 1: NcbYSDFsIdmTz25MBtYB3AXvxOE.crl (hash: G4fz/UZlkGltSEXwZrlBld/IJCwE/F4pHlv56XDybto=) 2: C416FBB02D6F11EEAC755B42C4F9AE02.roa (hash: Tq7rC2giNreq2mmMPPxtNpHrDUwHtrtyBLhfTo+mDLI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F473F/1D17EDB42B9011EE8B5DE470C4F9AE02/NcbYSDFsIdmTz25MBtYB3AXvxOE.crl rsync://rpki.apnic.net/member_repository/A91F473F/1D17EDB42B9011EE8B5DE470C4F9AE02/NcbYSDFsIdmTz25MBtYB3AXvxOE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NcbYSDFsIdmTz25MBtYB3AXvxOE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 03:41:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 396 (0x18c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F473F, serialNumber=35C6D848316C21D993CF6E4C06D601DC05EFC4E1 Validity Not Before: Aug 23 03:41:23 2025 GMT Not After : Aug 30 03:41:23 2025 GMT Subject: CN=68a93863-aa94 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:bd:0e:4b:fb:28:29:57:6a:c5:0c:08:ae:27: f7:6a:e8:d0:e2:6b:db:f9:3b:2c:11:cb:2d:7b:bd: 72:f5:17:ab:6d:77:f3:8d:f6:50:8a:82:67:c7:c9: 22:d7:cd:70:e4:71:84:17:62:48:fd:53:3c:2d:76: 3f:37:c4:a7:fc:05:6f:4b:da:25:6b:79:b4:2c:d6: 82:29:59:37:2a:50:eb:5a:53:51:ce:48:ac:cc:dc: cf:77:1c:4e:59:97:89:46:5b:b6:6e:9f:c6:d3:03: 3c:40:55:89:2e:5f:86:2f:a2:59:4c:96:a7:4a:23: 30:72:f2:64:8c:53:ad:f2:2d:d5:0e:8b:61:cc:4b: 7c:c5:09:b4:fa:7a:e9:88:96:2a:0f:18:bb:24:ad: c8:65:8b:a2:0e:4c:be:88:4c:21:e6:ed:2c:be:0f: 6b:fe:fc:73:7e:af:2f:7a:be:6e:d1:18:ed:51:0f: 4e:4e:be:a5:5c:e3:02:91:f1:3d:7e:7e:90:6f:ec: 54:a4:b0:27:41:ef:52:ee:77:12:a9:0a:f0:92:9f: c2:b9:ab:27:f2:a4:ce:5a:f4:e0:2e:c6:aa:97:8f: 96:d9:8e:bb:57:85:24:fb:a7:c6:84:0f:dc:6d:d2: 41:6a:7d:18:26:e5:6a:34:de:93:91:22:57:d4:c1: f6:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:7C:58:18:B8:C1:ED:0B:FE:60:E2:C1:17:99:C7:0E:92:CB:59:30 X509v3 Authority Key Identifier: keyid:35:C6:D8:48:31:6C:21:D9:93:CF:6E:4C:06:D6:01:DC:05:EF:C4:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F473F/1D17EDB42B9011EE8B5DE470C4F9AE02/NcbYSDFsIdmTz25MBtYB3AXvxOE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NcbYSDFsIdmTz25MBtYB3AXvxOE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F473F/1D17EDB42B9011EE8B5DE470C4F9AE02/NcbYSDFsIdmTz25MBtYB3AXvxOE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 65:ec:0b:fb:c7:4b:6a:5b:51:63:73:ee:4d:49:d5:cb:f5:cf: 08:9d:52:71:ea:b4:cb:4e:1d:22:c3:13:6e:42:6f:c6:10:55: fb:73:fd:29:52:f5:25:0e:2e:6b:13:30:76:d6:b6:4b:47:7e: 5b:25:aa:b2:af:12:19:9e:c8:fb:b1:ac:d3:c7:03:0a:e4:39: cd:24:0b:b8:6e:a6:19:31:a5:fb:8e:05:04:22:16:f6:aa:55: c2:bd:14:81:60:0b:01:4e:21:54:74:85:a1:f8:82:c6:22:07: 12:b6:83:38:fc:d0:e2:4b:ca:c6:c6:f9:91:1d:39:98:b7:bc: 66:28:91:ff:fd:7d:0d:37:a9:85:a5:ef:17:6c:2f:8b:b3:e8: ac:fe:d8:fa:a8:c2:e3:6a:a8:0f:63:ef:f8:40:87:87:65:63: 0e:0d:c9:6f:c1:1f:8a:89:ed:ce:d4:c5:20:a0:3a:f0:ca:6c: 81:3d:d3:89:7b:73:a7:4e:7a:4a:bf:5b:c6:91:ae:ae:5d:1e: 53:35:4c:f4:10:c9:aa:6e:a3:b7:68:d2:c4:96:42:05:e4:79: c4:4d:ee:37:e9:d6:06:d2:ea:4b:d3:e1:db:16:12:5a:03:4b: 12:48:d5:ac:28:cb:38:be:6e:78:83:6f:a8:fc:f0:0b:36:4f: 80:2c:ea:4b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAYwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjQ3M0YxMTAvBgNVBAUTKDM1QzZEODQ4MzE2QzIxRDk5M0NGNkU0QzA2RDYwMURD MDVFRkM0RTEwHhcNMjUwODIzMDM0MTIzWhcNMjUwODMwMDM0MTIzWjAYMRYwFAYD VQQDEw02OGE5Mzg2My1hYTk0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAn70OS/soKVdqxQwIrif3aujQ4mvb+TssEcste71y9RerbXfzjfZQioJnx8ki 181w5HGEF2JI/VM8LXY/N8Sn/AVvS9ola3m0LNaCKVk3KlDrWlNRzkiszNzPdxxO WZeJRlu2bp/G0wM8QFWJLl+GL6JZTJanSiMwcvJkjFOt8i3VDothzEt8xQm0+nrp iJYqDxi7JK3IZYuiDky+iEwh5u0svg9r/vxzfq8ver5u0RjtUQ9OTr6lXOMCkfE9 fn6Qb+xUpLAnQe9S7ncSqQrwkp/Cuasn8qTOWvTgLsaql4+W2Y67V4Uk+6fGhA/c bdJBan0YJuVqNN6TkSJX1MH2xwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEx8WBi4 we0L/mDiwReZxw6Sy1kwMB8GA1UdIwQYMBaAFDXG2EgxbCHZk89uTAbWAdwF78Th MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNDczRi8xRDE3RURCNDJC OTAxMUVFOEI1REU0NzBDNEY5QUUwMi9OY2JZU0RGc0lkbVR6MjVNQnRZQjNBWHZ4 T0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05jYllTREZzSWRtVHoyNU1CdFlCM0FYdnhPRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NDczRi8xRDE3RURCNDJCOTAxMUVFOEI1REU0NzBDNEY5QUUwMi9OY2JZU0RGc0lk bVR6MjVNQnRZQjNBWHZ4T0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBl7Av7x0tqW1Fjc+5NSdXL9c8InVJx6rTLTh0iwxNuQm/GEFX7c/0p UvUlDi5rEzB21rZLR35bJaqyrxIZnsj7sazTxwMK5DnNJAu4bqYZMaX7jgUEIhb2 qlXCvRSBYAsBTiFUdIWh+ILGIgcStoM4/NDiS8rGxvmRHTmYt7xmKJH//X0NN6mF pe8XbC+Ls+is/tj6qMLjaqgPY+/4QIeHZWMODclvwR+Kie3O1MUgoDrwymyBPdOJ e3OnTnpKv1vGka6uXR5TNUz0EMmqbqO3aNLElkIF5HnETe436dYG0upL0+HbFhJa A0sSSNWsKMs4vm54g2+o/PALNk+ALOpL -----END CERTIFICATE-----Generated at Sat Aug 23 17:07:03 2025 by rpki-client