$ rpki-client -vvf rpki.apnic.net/member_repository/A911E351/5BCF88A6784E11EC8A44450EC4F9AE02/NdqtT3Wuk43GUzSEzejIF93Csig.mft File: NdqtT3Wuk43GUzSEzejIF93Csig.mft (raw, json) Hash identifier: zgR9TMBBN4DSs+uKQ2xIxBLaRI6Hj+XbrQeLpI5hj6s= Subject key identifier: 31:32:4F:A4:6D:19:C0:B0:9C:42:8F:AB:BB:93:A3:6A:D3:DB:DD:F1 Authority key identifier: 35:DA:AD:4F:75:AE:93:8D:C6:53:34:84:CD:E8:C8:17:DD:C2:B2:28 Certificate issuer: /CN=A911E351/serialNumber=35DAAD4F75AE938DC6533484CDE8C817DDC2B228 Certificate serial: 041D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NdqtT3Wuk43GUzSEzejIF93Csig.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911E351/5BCF88A6784E11EC8A44450EC4F9AE02/NdqtT3Wuk43GUzSEzejIF93Csig.mft Manifest number: 0419 Signing time: Sat 09 Aug 2025 00:52:24 +0000 Manifest this update: Sat 09 Aug 2025 00:52:24 +0000 Manifest next update: Sat 16 Aug 2025 00:52:24 +0000 Files and hashes: 1: NdqtT3Wuk43GUzSEzejIF93Csig.crl (hash: 4DC7/Jr9XrDoM0Exa/IdFAIRdrQS2yeqizg8W6ZJ00w=) 2: E9ED080A785011ECBD2B6A10C4F9AE02.roa (hash: iYM80ZUZv11SjTkmdUWv3G7CQp9g2JbkQfuMruAgJ5Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911E351/5BCF88A6784E11EC8A44450EC4F9AE02/NdqtT3Wuk43GUzSEzejIF93Csig.crl rsync://rpki.apnic.net/member_repository/A911E351/5BCF88A6784E11EC8A44450EC4F9AE02/NdqtT3Wuk43GUzSEzejIF93Csig.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NdqtT3Wuk43GUzSEzejIF93Csig.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1053 (0x41d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911E351, serialNumber=35DAAD4F75AE938DC6533484CDE8C817DDC2B228 Validity Not Before: Aug 9 00:52:24 2025 GMT Not After : Aug 16 00:52:24 2025 GMT Subject: CN=68969bc8-dcbe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:ee:14:56:d8:e0:58:eb:ac:90:87:fb:00:b6: 1c:6b:cf:98:1d:20:50:81:f7:94:53:7c:c5:ae:31: 3c:78:c6:48:1f:c3:55:62:c7:24:51:44:59:3b:12: 64:0d:89:ff:de:70:ea:5e:1f:d9:e6:ec:b9:f0:15: 51:78:d8:35:6e:7e:52:eb:6f:88:c3:91:01:9f:53: d3:70:15:85:51:9e:90:8c:23:41:1f:c7:5c:3c:15: 31:26:cd:3a:5c:4f:ec:05:e4:6b:4b:91:ea:11:96: 01:06:b0:20:21:90:df:4e:c2:71:5c:09:fb:14:e0: 18:ec:f1:6e:fb:f4:1e:86:80:d5:47:65:4f:82:80: 56:9d:5d:2c:c6:91:b7:55:8d:2e:90:fd:86:26:9d: 52:f0:1e:4e:85:d5:80:81:5e:07:89:a7:06:f7:52: 84:a6:d0:b9:14:07:37:61:cd:74:e8:a0:fe:6b:cd: 2d:25:c8:0c:47:c0:57:cb:5a:43:6a:3d:a2:15:25: 9b:a9:b5:3b:15:00:7c:b4:8b:78:25:05:18:bc:05: 0f:00:9b:2b:04:e0:6e:4c:0d:e7:ba:1c:b3:be:bc: 04:8e:27:9a:8f:e7:ef:40:6e:ad:fd:94:d1:24:8d: 03:f4:54:64:44:a4:26:fd:13:b4:43:4b:58:1c:16: f2:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:32:4F:A4:6D:19:C0:B0:9C:42:8F:AB:BB:93:A3:6A:D3:DB:DD:F1 X509v3 Authority Key Identifier: keyid:35:DA:AD:4F:75:AE:93:8D:C6:53:34:84:CD:E8:C8:17:DD:C2:B2:28 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911E351/5BCF88A6784E11EC8A44450EC4F9AE02/NdqtT3Wuk43GUzSEzejIF93Csig.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NdqtT3Wuk43GUzSEzejIF93Csig.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911E351/5BCF88A6784E11EC8A44450EC4F9AE02/NdqtT3Wuk43GUzSEzejIF93Csig.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b7:cd:ad:f0:35:53:dc:4e:fd:b1:87:ef:31:fe:91:65:74:fb: e3:73:f0:dd:2f:12:02:bd:f1:a7:59:37:d5:f5:66:cb:d1:d0: 9c:d3:b0:17:93:9d:b2:0e:a8:91:a5:0d:16:ca:fa:e5:06:09: fa:bf:0a:55:46:cf:6a:f1:2e:92:cf:0d:d1:24:30:b6:36:0f: 01:4f:24:15:0b:3b:78:34:59:25:f0:7f:bc:22:47:fe:e4:85: f5:7a:fd:f6:03:43:f0:65:49:25:69:5b:d4:32:66:41:1e:a8: fe:3c:e9:7e:36:66:77:d9:df:3f:f5:d2:df:7c:2c:3d:7c:58: c2:b7:ba:79:a2:62:05:30:7b:cd:e7:4f:57:d0:75:53:64:86: f2:7d:02:1f:8c:6b:cc:8d:5e:a8:40:86:95:90:b0:60:96:e3: 72:32:65:8c:d3:9a:a7:3b:01:3f:df:5e:1f:51:f1:43:40:2b: c1:b6:eb:ba:fd:51:a7:42:34:10:ea:91:b5:78:5e:c7:bf:57: f5:5a:28:e5:ce:0a:26:00:d5:e1:8e:ae:51:2d:a9:50:b0:44: 71:dd:61:1d:1d:d7:55:ee:2f:c2:00:53:ff:ef:05:cd:9c:fc: b0:0c:79:32:04:20:d2:37:6d:71:97:cc:c2:03:ec:b1:ff:60: 8f:c2:33:30 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBB0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUUzNTExMTAvBgNVBAUTKDM1REFBRDRGNzVBRTkzOERDNjUzMzQ4NENERThDODE3 RERDMkIyMjgwHhcNMjUwODA5MDA1MjI0WhcNMjUwODE2MDA1MjI0WjAYMRYwFAYD VQQDEw02ODk2OWJjOC1kY2JlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAze4UVtjgWOuskIf7ALYca8+YHSBQgfeUU3zFrjE8eMZIH8NVYsckUURZOxJk DYn/3nDqXh/Z5uy58BVReNg1bn5S62+Iw5EBn1PTcBWFUZ6QjCNBH8dcPBUxJs06 XE/sBeRrS5HqEZYBBrAgIZDfTsJxXAn7FOAY7PFu+/QehoDVR2VPgoBWnV0sxpG3 VY0ukP2GJp1S8B5OhdWAgV4HiacG91KEptC5FAc3Yc106KD+a80tJcgMR8BXy1pD aj2iFSWbqbU7FQB8tIt4JQUYvAUPAJsrBOBuTA3nuhyzvrwEjieaj+fvQG6t/ZTR JI0D9FRkRKQm/RO0Q0tYHBbyXQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDEyT6Rt GcCwnEKPq7uTo2rT293xMB8GA1UdIwQYMBaAFDXarU91rpONxlM0hM3oyBfdwrIo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRTM1MS81QkNGODhBNjc4 NEUxMUVDOEE0NDQ1MEVDNEY5QUUwMi9OZHF0VDNXdWs0M0dVelNFemVqSUY5M0Nz aWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05kcXRUM1d1azQzR1V6U0V6ZWpJRjkzQ3NpZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RTM1MS81QkNGODhBNjc4NEUxMUVDOEE0NDQ1MEVDNEY5QUUwMi9OZHF0VDNXdWs0 M0dVelNFemVqSUY5M0NzaWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC3za3wNVPcTv2xh+8x/pFldPvjc/DdLxICvfGnWTfV9WbL0dCc07AX k52yDqiRpQ0WyvrlBgn6vwpVRs9q8S6Szw3RJDC2Ng8BTyQVCzt4NFkl8H+8Ikf+ 5IX1ev32A0PwZUklaVvUMmZBHqj+POl+NmZ32d8/9dLffCw9fFjCt7p5omIFMHvN 509X0HVTZIbyfQIfjGvMjV6oQIaVkLBgluNyMmWM05qnOwE/314fUfFDQCvBtuu6 /VGnQjQQ6pG1eF7Hv1f1WijlzgomANXhjq5RLalQsERx3WEdHddV7i/CAFP/7wXN nPywDHkyBCDSN21xl8zCA+yx/2CPwjMw -----END CERTIFICATE-----Generated at Sat Aug 9 23:18:16 2025 by rpki-client