$ rpki-client -vvf rpki.apnic.net/member_repository/A91FB8C8/C44C04528EC911EE9F8E447FC4F9AE02/Nps-m3tm6PW7l5puLy56rPUA0_E.mft File: Nps-m3tm6PW7l5puLy56rPUA0_E.mft (raw, json) Hash identifier: REEnW9D/8hWxezpAaQK4drQFg195aZN9s+De9Kcsa3g= Subject key identifier: 2F:70:AF:03:D3:22:AC:9F:BE:90:34:DA:50:E1:64:13:F7:F7:43:D4 Authority key identifier: 36:9B:3E:9B:7B:66:E8:F5:BB:97:9A:6E:2F:2E:7A:AC:F5:00:D3:F1 Certificate issuer: /CN=A91FB8C8/serialNumber=369B3E9B7B66E8F5BB979A6E2F2E7AACF500D3F1 Certificate serial: 014B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nps-m3tm6PW7l5puLy56rPUA0_E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FB8C8/C44C04528EC911EE9F8E447FC4F9AE02/Nps-m3tm6PW7l5puLy56rPUA0_E.mft Manifest number: 0148 Signing time: Sat 23 Aug 2025 04:27:09 +0000 Manifest this update: Sat 23 Aug 2025 04:27:08 +0000 Manifest next update: Sat 30 Aug 2025 04:27:08 +0000 Files and hashes: 1: Nps-m3tm6PW7l5puLy56rPUA0_E.crl (hash: KGiEsi6s1xUmyIJhypCu0zRpua5SzGfTgKEYu7yILBw=) 2: CA5B7DA48ECA11EEA3901581C4F9AE02.roa (hash: NP1KRG9waDvIQkw5KUdNc2k+dz2A2AWeqBvOhbZYwI8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FB8C8/C44C04528EC911EE9F8E447FC4F9AE02/Nps-m3tm6PW7l5puLy56rPUA0_E.crl rsync://rpki.apnic.net/member_repository/A91FB8C8/C44C04528EC911EE9F8E447FC4F9AE02/Nps-m3tm6PW7l5puLy56rPUA0_E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nps-m3tm6PW7l5puLy56rPUA0_E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 04:27:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 331 (0x14b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FB8C8, serialNumber=369B3E9B7B66E8F5BB979A6E2F2E7AACF500D3F1 Validity Not Before: Aug 23 04:27:08 2025 GMT Not After : Aug 30 04:27:08 2025 GMT Subject: CN=68a9431c-3cb5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:64:fd:41:4e:5b:06:ce:61:23:a4:05:07:18: e3:35:85:3c:18:b2:45:73:fa:6b:fb:00:e5:4a:16: 49:0e:00:0a:d9:95:2c:5f:1a:fe:22:91:47:bc:27: 0c:71:77:7a:dc:f7:cf:88:bc:73:c8:47:7b:6f:2d: 7e:f2:a6:de:31:63:b8:b6:82:2c:89:1a:bd:f5:83: 1b:21:aa:dc:85:57:26:70:5e:7e:e9:a6:c3:14:14: 30:62:b1:37:ed:0b:0d:a5:30:28:b1:52:b2:ea:e4: e8:63:57:5a:38:01:ed:bd:f3:47:c8:68:ed:5c:32: b1:6f:02:39:67:8d:1b:8a:9b:f0:3c:7d:a1:12:69: 2a:e2:b6:1e:9b:e2:1f:c6:4b:8e:de:28:7c:d6:3c: 43:6c:8b:08:5a:8f:a0:7b:4e:44:7c:b3:2e:e4:46: eb:d3:0d:fc:d0:68:c8:b1:a8:07:75:88:2f:ec:ef: 17:59:f7:50:0e:1f:dd:ce:e1:4a:31:8d:14:27:f2: 47:44:db:49:9e:5b:fe:c8:94:91:fc:2d:4b:8a:1b: ca:b9:47:47:f3:5c:75:e4:e8:75:76:f9:8c:80:ed: 29:a0:90:3c:a5:b0:fa:98:58:f0:a7:64:e6:fb:06: 78:82:1e:fa:84:d3:4f:6a:b6:57:9e:57:05:b8:6d: ef:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:70:AF:03:D3:22:AC:9F:BE:90:34:DA:50:E1:64:13:F7:F7:43:D4 X509v3 Authority Key Identifier: keyid:36:9B:3E:9B:7B:66:E8:F5:BB:97:9A:6E:2F:2E:7A:AC:F5:00:D3:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FB8C8/C44C04528EC911EE9F8E447FC4F9AE02/Nps-m3tm6PW7l5puLy56rPUA0_E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nps-m3tm6PW7l5puLy56rPUA0_E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FB8C8/C44C04528EC911EE9F8E447FC4F9AE02/Nps-m3tm6PW7l5puLy56rPUA0_E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 21:b5:c6:79:58:6f:a6:b8:04:a1:28:c6:40:4d:0d:98:4e:cd: 13:f9:ea:0e:b8:4f:99:5f:dc:f7:7f:2d:b4:5a:06:27:aa:a2: f1:aa:3f:73:c4:c4:53:9a:38:1a:e7:b3:08:44:18:da:f3:32: 3a:f1:5c:c1:6d:f6:42:dd:72:5f:47:3b:1f:e9:88:e8:7a:16: 15:e1:82:22:d6:91:5d:b4:f3:f5:fe:69:8c:55:d5:64:8c:f4: a3:a9:2d:a9:8f:80:e3:4e:af:57:e3:9b:4f:72:b5:64:68:72: da:03:06:0d:c1:1e:5d:32:c9:64:f2:d0:43:a8:9a:61:c6:98: e3:d9:ae:17:78:69:a8:b4:d9:0c:a8:a2:72:0b:f7:17:7a:55: 9c:9c:45:ea:2e:f2:82:00:93:d4:0a:cb:16:e8:33:f6:a2:3d: da:27:e5:64:c4:96:1c:df:35:4c:e5:5d:36:02:de:af:b5:79: 83:98:1c:43:79:fd:d6:d3:1c:7c:f8:69:c8:99:b7:c0:2c:b5: 09:88:8b:cc:49:95:ee:14:0c:1b:22:81:ad:30:0e:88:bc:f4: a0:8e:f6:95:59:7b:4e:5e:29:9c:d7:d1:8c:07:0f:5d:be:b8: e8:9a:1e:1b:3f:84:56:f2:b1:14:4e:30:e3:fb:a8:e9:9e:e8: 8e:0b:0c:e0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAUswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkI4QzgxMTAvBgNVBAUTKDM2OUIzRTlCN0I2NkU4RjVCQjk3OUE2RTJGMkU3QUFD RjUwMEQzRjEwHhcNMjUwODIzMDQyNzA4WhcNMjUwODMwMDQyNzA4WjAYMRYwFAYD VQQDEw02OGE5NDMxYy0zY2I1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxGT9QU5bBs5hI6QFBxjjNYU8GLJFc/pr+wDlShZJDgAK2ZUsXxr+IpFHvCcM cXd63PfPiLxzyEd7by1+8qbeMWO4toIsiRq99YMbIarchVcmcF5+6abDFBQwYrE3 7QsNpTAosVKy6uToY1daOAHtvfNHyGjtXDKxbwI5Z40bipvwPH2hEmkq4rYem+If xkuO3ih81jxDbIsIWo+ge05EfLMu5Ebr0w380GjIsagHdYgv7O8XWfdQDh/dzuFK MY0UJ/JHRNtJnlv+yJSR/C1LihvKuUdH81x15Oh1dvmMgO0poJA8pbD6mFjwp2Tm +wZ4gh76hNNParZXnlcFuG3vPwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC9wrwPT IqyfvpA02lDhZBP390PUMB8GA1UdIwQYMBaAFDabPpt7Zuj1u5eabi8ueqz1ANPx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQjhDOC9DNDRDMDQ1MjhF QzkxMUVFOUY4RTQ0N0ZDNEY5QUUwMi9OcHMtbTN0bTZQVzdsNXB1THk1NnJQVUEw X0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05wcy1tM3RtNlBXN2w1cHVMeTU2clBVQTBfRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QjhDOC9DNDRDMDQ1MjhFQzkxMUVFOUY4RTQ0N0ZDNEY5QUUwMi9OcHMtbTN0bTZQ VzdsNXB1THk1NnJQVUEwX0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAhtcZ5WG+muAShKMZATQ2YTs0T+eoOuE+ZX9z3fy20WgYnqqLxqj9z xMRTmjga57MIRBja8zI68VzBbfZC3XJfRzsf6YjoehYV4YIi1pFdtPP1/mmMVdVk jPSjqS2pj4DjTq9X45tPcrVkaHLaAwYNwR5dMslk8tBDqJphxpjj2a4XeGmotNkM qKJyC/cXelWcnEXqLvKCAJPUCssW6DP2oj3aJ+VkxJYc3zVM5V02At6vtXmDmBxD ef3W0xx8+GnImbfALLUJiIvMSZXuFAwbIoGtMA6IvPSgjvaVWXtOXimc19GMBw9d vrjomh4bP4RW8rEUTjDj+6jpnuiOCwzg -----END CERTIFICATE-----Generated at Sat Aug 23 15:19:35 2025 by rpki-client