$ rpki-client -vvf rpki.apnic.net/member_repository/A912FAB9/938A70E495CD11E6BF4A8232C4F9AE02/NJwJ6ZyoBuM1kVc1z5cqG_hkpsM.mft File: NJwJ6ZyoBuM1kVc1z5cqG_hkpsM.mft (raw, json) Hash identifier: /I37rPeOUeS4KEqwsC+qGjk+j7FBJ52rUBXL+Rr298w= Subject key identifier: F6:61:66:03:E8:99:24:89:C4:96:25:42:64:72:6E:49:94:AF:CF:AE Authority key identifier: 34:9C:09:E9:9C:A8:06:E3:35:91:57:35:CF:97:2A:1B:F8:64:A6:C3 Certificate issuer: /CN=A912FAB9/serialNumber=349C09E99CA806E335915735CF972A1BF864A6C3 Certificate serial: 1DFA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NJwJ6ZyoBuM1kVc1z5cqG_hkpsM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912FAB9/938A70E495CD11E6BF4A8232C4F9AE02/NJwJ6ZyoBuM1kVc1z5cqG_hkpsM.mft Manifest number: 1DEC Signing time: Tue 12 Aug 2025 16:11:13 +0000 Manifest this update: Tue 12 Aug 2025 16:11:12 +0000 Manifest next update: Tue 19 Aug 2025 16:11:12 +0000 Files and hashes: 1: NJwJ6ZyoBuM1kVc1z5cqG_hkpsM.crl (hash: WPgeI2lgwr0f7HYXX8fQ9ovEP2HmB6qkmpLz7OuIN/M=) 2: AE5C97A8AFB711E79FACFF11C4F9AE02.roa (hash: UCPIk7PqTNU3ro9Psv5YDODZfhBpvATekxfIDIhqyNU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912FAB9/938A70E495CD11E6BF4A8232C4F9AE02/NJwJ6ZyoBuM1kVc1z5cqG_hkpsM.crl rsync://rpki.apnic.net/member_repository/A912FAB9/938A70E495CD11E6BF4A8232C4F9AE02/NJwJ6ZyoBuM1kVc1z5cqG_hkpsM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NJwJ6ZyoBuM1kVc1z5cqG_hkpsM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 Aug 2025 16:11:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7674 (0x1dfa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912FAB9, serialNumber=349C09E99CA806E335915735CF972A1BF864A6C3 Validity Not Before: Aug 12 16:11:12 2025 GMT Not After : Aug 19 16:11:12 2025 GMT Subject: CN=689b67a1-6f02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:85:9a:50:a6:1d:0e:77:5a:1c:4c:93:6e:75: 67:0e:fb:0b:77:43:98:df:27:6c:3d:6e:7a:1f:85: 93:7f:20:48:32:52:ce:f3:b8:bb:88:2d:6b:49:91: 94:53:f7:ff:13:a9:d3:51:8f:38:55:a9:ef:58:95: 81:5f:fc:75:56:64:4d:8b:14:c0:20:93:e8:c2:3f: 96:fd:63:3c:0e:8b:69:1d:28:5e:12:4a:54:5f:b6: e6:3b:c4:f6:05:39:b1:97:69:34:8a:f3:06:46:b1: 1d:21:2f:55:65:ec:04:4c:e5:8f:54:63:d0:80:ee: 24:b1:17:ec:07:e4:c6:5b:00:9e:ab:25:78:fa:2d: 6a:26:b7:d9:ea:09:00:c7:52:95:7b:b2:93:1d:d3: ab:e6:b8:fe:5f:ad:3f:42:f2:a6:a1:49:f2:d2:20: fc:51:7b:de:25:a0:4c:ae:37:b3:82:47:af:73:6f: f0:ff:7c:45:87:d8:c0:dc:a5:d8:01:0c:cc:f6:9e: be:7b:b4:24:ec:cb:60:41:97:96:ea:90:cf:cf:b3: 76:55:37:87:e2:58:e7:18:b8:a5:5d:9a:f9:9d:c4: a7:52:b1:f1:a6:c9:52:ab:52:da:19:dc:37:96:95: e3:fa:81:64:b2:59:92:8b:1b:da:e1:c6:b9:10:5f: 83:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:61:66:03:E8:99:24:89:C4:96:25:42:64:72:6E:49:94:AF:CF:AE X509v3 Authority Key Identifier: keyid:34:9C:09:E9:9C:A8:06:E3:35:91:57:35:CF:97:2A:1B:F8:64:A6:C3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912FAB9/938A70E495CD11E6BF4A8232C4F9AE02/NJwJ6ZyoBuM1kVc1z5cqG_hkpsM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NJwJ6ZyoBuM1kVc1z5cqG_hkpsM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912FAB9/938A70E495CD11E6BF4A8232C4F9AE02/NJwJ6ZyoBuM1kVc1z5cqG_hkpsM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 42:10:ec:d2:b9:30:02:90:a8:cb:1c:e0:45:cc:2c:c2:92:76: 43:04:bd:f7:50:e6:db:75:27:07:9e:37:1f:4b:db:3e:b5:cc: 03:7e:99:32:16:0b:94:06:57:0c:6d:60:f6:e3:03:47:9d:b0: 1f:aa:a5:82:fa:06:25:53:b4:04:d5:56:6d:ba:96:ac:af:b3: 5f:b7:28:89:df:67:12:7d:6f:c5:13:b3:ea:06:98:ef:ef:5f: 23:33:55:53:c8:e3:f6:f6:a1:e3:4b:9e:1b:7f:d9:a4:47:57: 6d:b3:21:90:b2:89:a8:cd:69:c1:23:a1:cd:29:af:28:af:79: ad:a3:b9:12:26:0e:59:88:5f:80:98:99:12:7b:da:43:f4:97: 71:e0:53:5c:2b:7b:59:99:97:fc:9e:1b:b9:32:9e:85:04:37: bb:0a:ec:7b:fd:16:d8:a9:41:c5:79:d6:73:24:23:b9:0d:6a: 2a:bc:cf:56:5b:50:3c:29:21:38:eb:3a:c2:58:41:1c:5e:ce: 1a:1d:1f:2c:8e:d1:b5:fa:f4:47:f6:e0:48:1d:a3:75:e4:00: 92:69:2e:46:a6:da:57:eb:9d:6d:b9:de:be:f7:31:02:17:16: ae:34:14:1a:76:5c:65:19:2c:47:7c:de:2a:ef:44:eb:f1:34: bc:5b:69:e4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHfowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkZBQjkxMTAvBgNVBAUTKDM0OUMwOUU5OUNBODA2RTMzNTkxNTczNUNGOTcyQTFC Rjg2NEE2QzMwHhcNMjUwODEyMTYxMTEyWhcNMjUwODE5MTYxMTEyWjAYMRYwFAYD VQQDEw02ODliNjdhMS02ZjAyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4YWaUKYdDndaHEyTbnVnDvsLd0OY3ydsPW56H4WTfyBIMlLO87i7iC1rSZGU U/f/E6nTUY84VanvWJWBX/x1VmRNixTAIJPowj+W/WM8DotpHSheEkpUX7bmO8T2 BTmxl2k0ivMGRrEdIS9VZewETOWPVGPQgO4ksRfsB+TGWwCeqyV4+i1qJrfZ6gkA x1KVe7KTHdOr5rj+X60/QvKmoUny0iD8UXveJaBMrjezgkevc2/w/3xFh9jA3KXY AQzM9p6+e7Qk7MtgQZeW6pDPz7N2VTeH4ljnGLilXZr5ncSnUrHxpslSq1LaGdw3 lpXj+oFkslmSixva4ca5EF+DHwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPZhZgPo mSSJxJYlQmRybkmUr8+uMB8GA1UdIwQYMBaAFDScCemcqAbjNZFXNc+XKhv4ZKbD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRkFCOS85MzhBNzBFNDk1 Q0QxMUU2QkY0QTgyMzJDNEY5QUUwMi9OSndKNlp5b0J1TTFrVmMxejVjcUdfaGtw c00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05Kd0o2WnlvQnVNMWtWYzF6NWNxR19oa3BzTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RkFCOS85MzhBNzBFNDk1Q0QxMUU2QkY0QTgyMzJDNEY5QUUwMi9OSndKNlp5b0J1 TTFrVmMxejVjcUdfaGtwc00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBCEOzSuTACkKjLHOBFzCzCknZDBL33UObbdScHnjcfS9s+tcwDfpky FguUBlcMbWD24wNHnbAfqqWC+gYlU7QE1VZtupasr7NftyiJ32cSfW/FE7PqBpjv 718jM1VTyOP29qHjS54bf9mkR1dtsyGQsomozWnBI6HNKa8or3mto7kSJg5ZiF+A mJkSe9pD9Jdx4FNcK3tZmZf8nhu5Mp6FBDe7Cux7/RbYqUHFedZzJCO5DWoqvM9W W1A8KSE46zrCWEEcXs4aHR8sjtG1+vRH9uBIHaN15ACSaS5GptpX651tud6+9zEC FxauNBQadlxlGSxHfN4q70Tr8TS8W2nk -----END CERTIFICATE-----Generated at Wed Aug 13 02:42:47 2025 by rpki-client