$ rpki-client -vvf rpki.apnic.net/member_repository/A9178297/4B1F748487B411EB8EF3321AC4F9AE02/nhuiMnN6PQDX-qC03Dg02arwbfg.mft File: nhuiMnN6PQDX-qC03Dg02arwbfg.mft (raw, json) Hash identifier: 1wG6rmYH3Xio4iycrFlfCap9tR15C3b4OJOOAUKyFbE= Subject key identifier: 94:07:35:74:FF:1B:E7:D9:6A:AB:CE:4A:63:17:2A:66:C3:54:1E:A5 Authority key identifier: 9E:1B:A2:32:73:7A:3D:00:D7:FA:A0:B4:DC:38:34:D9:AA:F0:6D:F8 Certificate issuer: /CN=A9178297/serialNumber=9E1BA232737A3D00D7FAA0B4DC3834D9AAF06DF8 Certificate serial: 0694 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nhuiMnN6PQDX-qC03Dg02arwbfg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9178297/4B1F748487B411EB8EF3321AC4F9AE02/nhuiMnN6PQDX-qC03Dg02arwbfg.mft Manifest number: 0683 Signing time: Fri 08 Aug 2025 22:49:49 +0000 Manifest this update: Fri 08 Aug 2025 22:49:49 +0000 Manifest next update: Fri 15 Aug 2025 22:49:49 +0000 Files and hashes: 1: nhuiMnN6PQDX-qC03Dg02arwbfg.crl (hash: ORmPVuyn40UwR2ZmB7cdzInXKWWaiWMPJF+/1xEMvjI=) 2: 3B3D9AA4162211F0AE684383C4F9AE02.roa (hash: XamxWQNFXzVAky34dKuvGM9L/Xfu1Wl8RSwCxVZ6CUg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9178297/4B1F748487B411EB8EF3321AC4F9AE02/nhuiMnN6PQDX-qC03Dg02arwbfg.crl rsync://rpki.apnic.net/member_repository/A9178297/4B1F748487B411EB8EF3321AC4F9AE02/nhuiMnN6PQDX-qC03Dg02arwbfg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nhuiMnN6PQDX-qC03Dg02arwbfg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1684 (0x694) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9178297, serialNumber=9E1BA232737A3D00D7FAA0B4DC3834D9AAF06DF8 Validity Not Before: Aug 8 22:49:49 2025 GMT Not After : Aug 15 22:49:49 2025 GMT Subject: CN=68967f0d-a9be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:65:a1:70:c1:07:27:9c:75:b9:f8:cd:97:ab: fb:d3:79:0d:67:c7:c8:af:40:e5:85:3c:7a:a1:91: 41:a2:5c:c1:b1:47:23:c9:b7:ed:d2:ba:61:fb:c6: a5:c3:b4:13:07:a3:50:cb:c2:6a:36:8c:28:1d:94: b2:45:66:c9:c9:3b:34:1c:cf:bf:17:d7:a0:e2:22: 51:a2:a0:69:fc:09:f1:ec:9a:c9:0b:d1:31:eb:12: 5b:ff:8e:8c:c8:ab:d3:3d:7f:33:49:e6:e7:2e:63: 69:11:93:2d:4d:b7:50:20:f8:a5:e9:80:f6:74:9d: 68:a4:e9:71:57:92:96:83:4c:84:c0:81:cb:81:8f: 1e:27:ce:a9:81:f3:f3:55:ac:13:87:f9:7f:f4:bb: 2b:7a:22:63:11:bb:84:0c:50:12:2f:79:3e:c6:d2: ae:f2:2d:af:21:89:2e:73:19:b4:43:a7:63:70:f9: f1:3d:25:a4:60:83:91:e6:25:ef:02:80:fc:85:e0: 3d:c9:6f:48:f4:dd:bf:e2:f7:fb:e8:38:45:be:2b: 3d:86:0c:5c:ec:48:bc:be:a4:c1:c0:60:37:35:94: 25:03:17:8f:cf:ec:f0:24:3a:69:e1:ed:0a:cc:59: 2a:e1:8b:62:4b:fb:74:96:b5:46:e2:db:0b:42:63: 45:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:07:35:74:FF:1B:E7:D9:6A:AB:CE:4A:63:17:2A:66:C3:54:1E:A5 X509v3 Authority Key Identifier: keyid:9E:1B:A2:32:73:7A:3D:00:D7:FA:A0:B4:DC:38:34:D9:AA:F0:6D:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9178297/4B1F748487B411EB8EF3321AC4F9AE02/nhuiMnN6PQDX-qC03Dg02arwbfg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nhuiMnN6PQDX-qC03Dg02arwbfg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9178297/4B1F748487B411EB8EF3321AC4F9AE02/nhuiMnN6PQDX-qC03Dg02arwbfg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 91:e9:a3:7e:17:9e:a0:84:2a:8d:21:5c:c8:8f:b1:a7:05:56: 9a:e2:e6:80:a2:70:2b:87:5e:26:9e:60:2e:98:4e:93:3d:5e: 32:8b:c3:26:94:c8:a0:fe:a1:d0:df:ee:d0:03:a3:c9:c8:8c: 11:c7:2a:19:49:91:09:f8:14:45:ff:0e:5f:38:82:ae:b7:9e: fa:e5:09:7e:83:60:f3:34:51:05:8c:40:2d:52:ee:29:b8:7b: 90:c8:82:d4:32:77:86:fc:b1:ee:37:89:69:31:91:be:cd:9d: 7c:c7:80:e8:2a:cd:a9:ea:5b:98:85:34:a2:5c:e2:24:e1:34: c1:57:06:77:77:39:99:df:22:cf:ed:89:21:3e:d7:a4:db:62: 7a:45:6f:52:5b:13:00:d8:f1:78:4c:f0:85:62:71:b9:cf:52: 3e:d2:1d:99:55:ec:36:86:c1:cc:31:ba:61:d8:aa:72:9e:c5: fe:df:66:dc:00:68:51:de:de:f1:4d:78:b5:a1:c8:36:be:6a: 15:a7:9e:22:8b:b6:86:04:7a:0b:2a:97:3f:90:a4:6c:a7:a5: 2f:20:42:7d:3e:83:0a:ec:ff:75:ed:87:38:9d:b9:1c:06:92: 3f:a2:6e:67:12:84:44:10:22:4c:e1:0e:2b:60:28:21:be:cb: 83:41:40:13 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBpQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzgyOTcxMTAvBgNVBAUTKDlFMUJBMjMyNzM3QTNEMDBEN0ZBQTBCNERDMzgzNEQ5 QUFGMDZERjgwHhcNMjUwODA4MjI0OTQ5WhcNMjUwODE1MjI0OTQ5WjAYMRYwFAYD VQQDEw02ODk2N2YwZC1hOWJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwWWhcMEHJ5x1ufjNl6v703kNZ8fIr0DlhTx6oZFBolzBsUcjybft0rph+8al w7QTB6NQy8JqNowoHZSyRWbJyTs0HM+/F9eg4iJRoqBp/Anx7JrJC9Ex6xJb/46M yKvTPX8zSebnLmNpEZMtTbdQIPil6YD2dJ1opOlxV5KWg0yEwIHLgY8eJ86pgfPz VawTh/l/9LsreiJjEbuEDFASL3k+xtKu8i2vIYkucxm0Q6djcPnxPSWkYIOR5iXv AoD8heA9yW9I9N2/4vf76DhFvis9hgxc7Ei8vqTBwGA3NZQlAxePz+zwJDpp4e0K zFkq4YtiS/t0lrVG4tsLQmNF4wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJQHNXT/ G+fZaqvOSmMXKmbDVB6lMB8GA1UdIwQYMBaAFJ4bojJzej0A1/qgtNw4NNmq8G34 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3ODI5Ny80QjFGNzQ4NDg3 QjQxMUVCOEVGMzMyMUFDNEY5QUUwMi9uaHVpTW5ONlBRRFgtcUMwM0RnMDJhcndi ZmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25odWlNbk42UFFEWC1xQzAzRGcwMmFyd2JmZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 ODI5Ny80QjFGNzQ4NDg3QjQxMUVCOEVGMzMyMUFDNEY5QUUwMi9uaHVpTW5ONlBR RFgtcUMwM0RnMDJhcndiZmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCR6aN+F56ghCqNIVzIj7GnBVaa4uaAonArh14mnmAumE6TPV4yi8Mm lMig/qHQ3+7QA6PJyIwRxyoZSZEJ+BRF/w5fOIKut5765Ql+g2DzNFEFjEAtUu4p uHuQyILUMneG/LHuN4lpMZG+zZ18x4DoKs2p6luYhTSiXOIk4TTBVwZ3dzmZ3yLP 7YkhPtek22J6RW9SWxMA2PF4TPCFYnG5z1I+0h2ZVew2hsHMMbph2KpynsX+32bc AGhR3t7xTXi1ocg2vmoVp54ii7aGBHoLKpc/kKRsp6UvIEJ9PoMK7P917Yc4nbkc BpI/om5nEoREECJM4Q4rYCghvsuDQUAT -----END CERTIFICATE-----Generated at Sat Aug 9 01:19:12 2025 by rpki-client