$ rpki-client -vvf rpki.apnic.net/member_repository/A916DA1F/81A04448362711E8A2108F74C4F9AE02/N-Z4kuvCt8JBAuhSfpB8_q71yVA.mft File: N-Z4kuvCt8JBAuhSfpB8_q71yVA.mft (raw, json) Hash identifier: uK9GWBFHtPMgkVIzdKrz8MnBF+LlhD3qcVUx7z6VVIw= Subject key identifier: 64:54:66:CD:89:DC:D2:60:99:6D:58:4C:7A:D2:66:50:95:3E:58:A9 Authority key identifier: 37:E6:78:92:EB:C2:B7:C2:41:02:E8:52:7E:90:7C:FE:AE:F5:C9:50 Certificate issuer: /CN=A916DA1F/serialNumber=37E67892EBC2B7C24102E8527E907CFEAEF5C950 Certificate serial: 15A3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N-Z4kuvCt8JBAuhSfpB8_q71yVA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916DA1F/81A04448362711E8A2108F74C4F9AE02/N-Z4kuvCt8JBAuhSfpB8_q71yVA.mft Manifest number: 159B Signing time: Fri 08 Aug 2025 16:56:52 +0000 Manifest this update: Fri 08 Aug 2025 16:56:52 +0000 Manifest next update: Fri 15 Aug 2025 16:56:52 +0000 Files and hashes: 1: N-Z4kuvCt8JBAuhSfpB8_q71yVA.crl (hash: jOfuei0Ii5X3eZRJSEk7AQHVFjSRgCbwIHBhyzN4gQM=) 2: 2036C856362911E8B6C37C78C4F9AE02.roa (hash: VjPDMCTDAl0F+kUlLL83qcuxLts9GNlg09c0jF2guQg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916DA1F/81A04448362711E8A2108F74C4F9AE02/N-Z4kuvCt8JBAuhSfpB8_q71yVA.crl rsync://rpki.apnic.net/member_repository/A916DA1F/81A04448362711E8A2108F74C4F9AE02/N-Z4kuvCt8JBAuhSfpB8_q71yVA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N-Z4kuvCt8JBAuhSfpB8_q71yVA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5539 (0x15a3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916DA1F, serialNumber=37E67892EBC2B7C24102E8527E907CFEAEF5C950 Validity Not Before: Aug 8 16:56:52 2025 GMT Not After : Aug 15 16:56:52 2025 GMT Subject: CN=68962c54-b994 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:e0:b4:30:48:b4:2e:14:99:ca:3a:d3:d7:2f: 1e:90:eb:01:40:2b:62:fd:2d:f6:f0:bc:7b:b8:0c: d2:b1:5f:85:25:cc:f7:1f:fe:41:4f:22:6b:14:a5: 1b:a9:44:df:3a:f9:44:5f:08:9e:4d:24:0d:4e:37: f9:7b:f4:53:84:6c:10:00:b6:62:18:a2:63:6a:9d: 9d:b9:96:23:24:6d:de:74:eb:7f:a2:ba:14:35:aa: 68:a3:2a:44:4e:fa:c1:9a:08:77:72:6f:a1:c4:f7: 14:72:2f:c0:aa:c3:90:ea:fe:b5:38:40:c8:aa:f8: 34:92:92:a3:32:0b:71:cd:81:9c:58:3d:24:5c:00: 39:f0:cd:92:b7:b5:09:8d:aa:d8:41:b1:f7:04:0f: 04:25:28:93:c9:08:61:1f:1a:43:54:b7:a4:54:a0: 79:1d:a6:fb:39:49:d8:8e:8a:f2:ff:45:96:ad:f4: 6a:4a:7f:13:b5:5f:5d:2f:a3:26:ec:86:92:8a:6c: d1:4f:18:f0:29:3f:b0:e2:2e:f7:cd:73:e4:d2:57: 10:9d:34:df:f0:cf:ba:0e:71:8d:f0:87:f6:cb:31: 56:3b:c1:10:f3:9b:b2:f3:d2:29:9f:94:68:f8:b5: cb:d3:ea:41:ad:21:d1:fa:2a:f5:60:c4:f8:b7:13: c3:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:54:66:CD:89:DC:D2:60:99:6D:58:4C:7A:D2:66:50:95:3E:58:A9 X509v3 Authority Key Identifier: keyid:37:E6:78:92:EB:C2:B7:C2:41:02:E8:52:7E:90:7C:FE:AE:F5:C9:50 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916DA1F/81A04448362711E8A2108F74C4F9AE02/N-Z4kuvCt8JBAuhSfpB8_q71yVA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N-Z4kuvCt8JBAuhSfpB8_q71yVA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916DA1F/81A04448362711E8A2108F74C4F9AE02/N-Z4kuvCt8JBAuhSfpB8_q71yVA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6f:93:36:c7:85:2c:9c:1f:4c:9d:71:9f:1b:b6:6d:1f:8b:a5: 90:f2:5b:5a:72:b2:4d:ad:9d:b3:1e:80:e5:73:d8:ec:9a:2f: f8:dc:93:41:5e:69:b3:4d:1c:6c:49:ab:14:c5:91:d4:51:e8: d1:42:39:0f:3e:67:df:3a:70:60:11:13:b5:2e:9f:9a:12:bd: 78:a5:88:a4:4e:3c:0c:4b:03:c1:e9:3b:65:f3:00:ba:3d:38: ef:0f:3c:a9:3a:90:e5:38:94:a7:b7:41:92:0f:1c:18:21:a8: 5b:46:30:35:d1:5b:44:c2:0f:a2:95:bc:fb:36:86:ce:4d:75: 0b:21:fc:73:71:77:c1:4e:27:6c:dd:b9:c9:3d:3c:b8:f5:4d: 7f:41:c1:0d:31:8b:b1:cd:2f:4e:bd:d9:e9:bf:3b:58:6d:b2: b0:d9:f6:62:1b:5a:c5:5e:e8:da:35:07:ec:3d:7f:ae:ba:42: 92:ae:7f:c7:eb:1d:0f:03:b6:7d:37:21:29:d8:df:d7:89:c5: 5e:76:74:f6:09:97:ee:0d:aa:12:a2:30:46:65:97:8e:bf:a7: df:64:90:ea:a5:dc:5c:cf:74:3e:41:b8:ac:ad:f9:8e:d8:bf: 78:0a:9d:52:c1:bc:02:5a:79:74:62:e9:7e:8d:ae:60:8d:ab: 0a:79:b1:4b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFaMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkRBMUYxMTAvBgNVBAUTKDM3RTY3ODkyRUJDMkI3QzI0MTAyRTg1MjdFOTA3Q0ZF QUVGNUM5NTAwHhcNMjUwODA4MTY1NjUyWhcNMjUwODE1MTY1NjUyWjAYMRYwFAYD VQQDEw02ODk2MmM1NC1iOTk0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsuC0MEi0LhSZyjrT1y8ekOsBQCti/S328Lx7uAzSsV+FJcz3H/5BTyJrFKUb qUTfOvlEXwieTSQNTjf5e/RThGwQALZiGKJjap2duZYjJG3edOt/oroUNapooypE TvrBmgh3cm+hxPcUci/AqsOQ6v61OEDIqvg0kpKjMgtxzYGcWD0kXAA58M2St7UJ jarYQbH3BA8EJSiTyQhhHxpDVLekVKB5Hab7OUnYjory/0WWrfRqSn8TtV9dL6Mm 7IaSimzRTxjwKT+w4i73zXPk0lcQnTTf8M+6DnGN8If2yzFWO8EQ85uy89Ipn5Ro +LXL0+pBrSHR+ir1YMT4txPD8wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGRUZs2J 3NJgmW1YTHrSZlCVPlipMB8GA1UdIwQYMBaAFDfmeJLrwrfCQQLoUn6QfP6u9clQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2REExRi84MUEwNDQ0ODM2 MjcxMUU4QTIxMDhGNzRDNEY5QUUwMi9OLVo0a3V2Q3Q4SkJBdWhTZnBCOF9xNzF5 VkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL04tWjRrdXZDdDhKQkF1aFNmcEI4X3E3MXlWQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 REExRi84MUEwNDQ0ODM2MjcxMUU4QTIxMDhGNzRDNEY5QUUwMi9OLVo0a3V2Q3Q4 SkJBdWhTZnBCOF9xNzF5VkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBvkzbHhSycH0ydcZ8btm0fi6WQ8ltacrJNrZ2zHoDlc9jsmi/43JNB XmmzTRxsSasUxZHUUejRQjkPPmffOnBgERO1Lp+aEr14pYikTjwMSwPB6Ttl8wC6 PTjvDzypOpDlOJSnt0GSDxwYIahbRjA10VtEwg+ilbz7NobOTXULIfxzcXfBTids 3bnJPTy49U1/QcENMYuxzS9OvdnpvztYbbKw2fZiG1rFXujaNQfsPX+uukKSrn/H 6x0PA7Z9NyEp2N/XicVednT2CZfuDaoSojBGZZeOv6ffZJDqpdxcz3Q+QbisrfmO 2L94Cp1SwbwCWnl0Yul+ja5gjasKebFL -----END CERTIFICATE-----Generated at Sun Aug 10 10:38:34 2025 by rpki-client