$ rpki-client -vvf rpki.apnic.net/member_repository/A917D958/672DB048B39B11EF80F6435EC4F9AE02/n0kGwNTMlkXZv9kzZKI6WjPvWNs.mft File: n0kGwNTMlkXZv9kzZKI6WjPvWNs.mft (raw, json) Hash identifier: wjsVU25JshUS4w9v05smg0Yn/uoZn08O3Qw9AQ12VTE= Subject key identifier: 92:E0:9F:7D:9F:03:1F:F7:63:53:9D:81:E0:B7:A2:25:8B:3D:1F:3D Authority key identifier: 9F:49:06:C0:D4:CC:96:45:D9:BF:D9:33:64:A2:3A:5A:33:EF:58:DB Certificate issuer: /CN=A917D958/serialNumber=9F4906C0D4CC9645D9BFD93364A23A5A33EF58DB Certificate serial: 85 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/n0kGwNTMlkXZv9kzZKI6WjPvWNs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917D958/672DB048B39B11EF80F6435EC4F9AE02/n0kGwNTMlkXZv9kzZKI6WjPvWNs.mft Manifest number: 82 Signing time: Sat 09 Aug 2025 07:11:16 +0000 Manifest this update: Sat 09 Aug 2025 07:11:16 +0000 Manifest next update: Sat 16 Aug 2025 07:11:16 +0000 Files and hashes: 1: n0kGwNTMlkXZv9kzZKI6WjPvWNs.crl (hash: XYOEcN1OBY4qT/VKKI0vNjICmBwjw4er/fBXrQGI+Ts=) 2: 0AC8BB74B5E211EFBEF4BC5AC4F9AE02.roa (hash: oV9dv3enUEk5QI7ZEWYNcHlwdjoeFV6bdPfVFfihoSE=) 3: 0A581522B5E211EFBEF4BC5AC4F9AE02.roa (hash: PxzOBVWe5yWGLa4iNAyNqYyPaQ/eMXGqSREN7aFVLso=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917D958/672DB048B39B11EF80F6435EC4F9AE02/n0kGwNTMlkXZv9kzZKI6WjPvWNs.crl rsync://rpki.apnic.net/member_repository/A917D958/672DB048B39B11EF80F6435EC4F9AE02/n0kGwNTMlkXZv9kzZKI6WjPvWNs.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/n0kGwNTMlkXZv9kzZKI6WjPvWNs.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 133 (0x85) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917D958, serialNumber=9F4906C0D4CC9645D9BFD93364A23A5A33EF58DB Validity Not Before: Aug 9 07:11:16 2025 GMT Not After : Aug 16 07:11:16 2025 GMT Subject: CN=6896f494-650f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:8c:3d:46:07:30:dd:8b:55:42:01:49:36:f5: e0:4e:3c:c9:58:c0:db:a3:5e:ad:bb:92:75:b3:46: a9:c2:ca:2c:8d:da:8c:40:60:5d:eb:fd:d3:c6:f3: 7e:6f:07:52:6b:d6:2a:f9:2d:d2:b7:4c:b0:40:d3: 1d:2d:4d:16:bb:ed:36:7b:c2:43:f4:32:39:e3:9a: 67:fb:bc:e6:9f:01:43:b8:7d:a9:c8:f4:0e:6c:64: 52:3e:f5:e7:1b:b8:c4:ab:95:4e:91:71:c6:24:6f: 97:15:1d:1f:7d:c3:28:1b:85:11:66:46:ef:f1:48: 0c:e8:72:62:18:9f:79:11:82:d9:01:d2:2d:94:6a: 11:8a:94:8f:41:91:6d:2c:84:09:e6:fa:eb:42:2d: 24:10:08:cb:d2:f1:5b:89:90:35:f7:0b:fc:17:4e: dc:55:6d:69:36:cb:8d:b9:8f:68:19:2e:83:9b:fe: 72:1b:06:5e:8f:d1:24:20:f1:d1:98:bd:c1:cb:ba: b3:9c:73:99:00:71:8d:74:a8:38:3b:db:e0:7d:7c: e8:30:b0:90:6e:0e:63:3f:99:75:e8:fd:bc:4a:f4: b1:f3:e4:44:36:45:35:83:db:15:5f:f2:f2:2b:21: 97:5d:f5:93:48:cb:b9:97:ef:a4:82:d5:d3:fe:05: 57:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:E0:9F:7D:9F:03:1F:F7:63:53:9D:81:E0:B7:A2:25:8B:3D:1F:3D X509v3 Authority Key Identifier: keyid:9F:49:06:C0:D4:CC:96:45:D9:BF:D9:33:64:A2:3A:5A:33:EF:58:DB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917D958/672DB048B39B11EF80F6435EC4F9AE02/n0kGwNTMlkXZv9kzZKI6WjPvWNs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/n0kGwNTMlkXZv9kzZKI6WjPvWNs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917D958/672DB048B39B11EF80F6435EC4F9AE02/n0kGwNTMlkXZv9kzZKI6WjPvWNs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7f:45:ae:9d:c8:f4:3d:cd:46:54:12:2a:cb:8a:03:93:10:4d: 91:0d:16:b4:5f:df:17:fb:44:a5:42:13:3c:67:98:31:b3:ce: c1:dd:5e:60:0f:60:ad:f8:02:44:66:5e:ad:4f:ca:70:c2:9c: 90:87:da:e4:7b:18:5b:a9:6a:c6:d3:bd:33:27:e6:ad:ad:0f: a4:dc:1b:de:0a:33:bd:ec:bf:f8:5c:0c:ff:d9:bc:26:85:c6: 17:18:76:e3:11:69:a0:44:a1:32:9e:53:46:bf:92:6b:53:d2: 95:fb:10:e4:19:d8:6f:04:c5:f1:4f:c9:87:46:2d:fa:af:0b: 80:c6:2d:91:bb:15:3b:b7:01:98:3f:37:d4:7e:87:dd:d6:4b: b3:c5:a8:c8:68:ce:02:60:a3:a0:31:c8:1b:e0:58:58:de:f9: 05:02:e2:07:f4:14:9f:f5:61:96:ae:e2:d1:17:d0:ab:2e:f5: 8b:c1:ba:6e:51:0b:fd:3f:45:c1:13:a8:cf:53:81:dd:22:c8: 58:f2:0d:0c:65:5d:22:f3:2c:63:9e:8d:b9:f0:b8:76:46:05: 40:20:0c:97:6c:f2:d5:31:de:a6:d4:58:85:c4:45:0b:3b:50: 18:6f:a8:68:47:33:f9:45:d1:b4:48:d0:92:c8:32:2a:be:9f: 80:99:11:88 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0Q5NTgxMTAvBgNVBAUTKDlGNDkwNkMwRDRDQzk2NDVEOUJGRDkzMzY0QTIzQTVB MzNFRjU4REIwHhcNMjUwODA5MDcxMTE2WhcNMjUwODE2MDcxMTE2WjAYMRYwFAYD VQQDEw02ODk2ZjQ5NC02NTBmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnIw9Rgcw3YtVQgFJNvXgTjzJWMDbo16tu5J1s0apwsosjdqMQGBd6/3TxvN+ bwdSa9Yq+S3St0ywQNMdLU0Wu+02e8JD9DI545pn+7zmnwFDuH2pyPQObGRSPvXn G7jEq5VOkXHGJG+XFR0ffcMoG4URZkbv8UgM6HJiGJ95EYLZAdItlGoRipSPQZFt LIQJ5vrrQi0kEAjL0vFbiZA19wv8F07cVW1pNsuNuY9oGS6Dm/5yGwZej9EkIPHR mL3By7qznHOZAHGNdKg4O9vgfXzoMLCQbg5jP5l16P28SvSx8+RENkU1g9sVX/Ly KyGXXfWTSMu5l++kgtXT/gVXvQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJLgn32f Ax/3Y1OdgeC3oiWLPR89MB8GA1UdIwQYMBaAFJ9JBsDUzJZF2b/ZM2SiOloz71jb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RDk1OC82NzJEQjA0OEIz OUIxMUVGODBGNjQzNUVDNEY5QUUwMi9uMGtHd05UTWxrWFp2OWt6WktJNldqUHZX TnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL24wa0d3TlRNbGtYWnY5a3paS0k2V2pQdldOcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RDk1OC82NzJEQjA0OEIzOUIxMUVGODBGNjQzNUVDNEY5QUUwMi9uMGtHd05UTWxr WFp2OWt6WktJNldqUHZXTnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB/Ra6dyPQ9zUZUEirLigOTEE2RDRa0X98X+0SlQhM8Z5gxs87B3V5g D2Ct+AJEZl6tT8pwwpyQh9rkexhbqWrG070zJ+atrQ+k3BveCjO97L/4XAz/2bwm hcYXGHbjEWmgRKEynlNGv5JrU9KV+xDkGdhvBMXxT8mHRi36rwuAxi2RuxU7twGY PzfUfofd1kuzxajIaM4CYKOgMcgb4FhY3vkFAuIH9BSf9WGWruLRF9CrLvWLwbpu UQv9P0XBE6jPU4HdIshY8g0MZV0i8yxjno258Lh2RgVAIAyXbPLVMd6m1FiFxEUL O1AYb6hoRzP5RdG0SNCSyDIqvp+AmRGI -----END CERTIFICATE-----Generated at Sun Aug 10 18:22:42 2025 by rpki-client