$ rpki-client -vvf rpki.apnic.net/member_repository/A918233C/E6491FE2621411ECB006712CC4F9AE02/_NTfjrSqZK9Wt9DHMm4pEEVDzFU.mft File: _NTfjrSqZK9Wt9DHMm4pEEVDzFU.mft (raw, json) Hash identifier: fO2KTvR7r5su7/tc+KVR/tjwa+ru/I38n9o6p07C9n4= Subject key identifier: 24:2F:41:82:E1:69:E9:B2:87:DB:0C:1F:F2:B6:88:05:F5:E9:BE:3C Authority key identifier: FC:D4:DF:8E:B4:AA:64:AF:56:B7:D0:C7:32:6E:29:10:45:43:CC:55 Certificate issuer: /CN=A918233C/serialNumber=FCD4DF8EB4AA64AF56B7D0C7326E29104543CC55 Certificate serial: 41 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_NTfjrSqZK9Wt9DHMm4pEEVDzFU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918233C/E6491FE2621411ECB006712CC4F9AE02/_NTfjrSqZK9Wt9DHMm4pEEVDzFU.mft Manifest number: 0494 Signing time: Sat 09 Aug 2025 00:44:40 +0000 Manifest this update: Sat 09 Aug 2025 00:44:40 +0000 Manifest next update: Sat 16 Aug 2025 00:44:40 +0000 Files and hashes: 1: _NTfjrSqZK9Wt9DHMm4pEEVDzFU.crl (hash: pMyen+1p+k6Qzm0FWEBqe4q5eTkLYlRlDqkd6kEJJZw=) 2: 34E594A215C511F09562D30FC4F9AE02.roa (hash: hO8cBpPkkXeK8WAFYmWHFGS1BpcqmFyN9GM5+DFTdqE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918233C/E6491FE2621411ECB006712CC4F9AE02/_NTfjrSqZK9Wt9DHMm4pEEVDzFU.crl rsync://rpki.apnic.net/member_repository/A918233C/E6491FE2621411ECB006712CC4F9AE02/_NTfjrSqZK9Wt9DHMm4pEEVDzFU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_NTfjrSqZK9Wt9DHMm4pEEVDzFU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65 (0x41) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918233C, serialNumber=FCD4DF8EB4AA64AF56B7D0C7326E29104543CC55 Validity Not Before: Aug 9 00:44:40 2025 GMT Not After : Aug 16 00:44:40 2025 GMT Subject: CN=689699f8-f72a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:e5:9d:3c:5d:71:30:bb:35:65:7e:c7:43:90: 37:c6:75:8d:a9:f0:91:eb:b0:fd:84:55:5c:50:0f: 04:89:c4:0b:74:00:6e:d0:a6:40:b6:04:c6:6c:3f: db:b7:ab:83:85:e1:b6:c2:7a:bd:4e:6f:60:bf:a4: 8c:9f:04:dc:95:00:84:05:0b:f6:48:8a:56:9c:be: 38:52:0b:ae:db:28:4e:42:20:2f:44:83:34:93:1a: 56:8b:ec:b6:0b:95:29:5e:24:ac:02:ea:a0:81:78: 71:2e:a6:90:aa:fe:08:c8:a2:2f:d1:94:ce:31:c1: b1:fd:8d:7c:5b:6e:8d:8e:4b:74:b2:b0:fe:80:26: 92:8c:ce:80:a7:ea:a8:6f:cf:f5:f0:b6:77:85:96: 43:79:f7:20:99:0b:b9:8f:68:0e:7a:54:84:24:7f: 5f:0c:ac:b8:29:76:65:42:fc:43:4d:71:1f:a5:f5: 00:a7:c7:2f:a6:41:15:87:dc:d9:55:6f:84:8a:82: a0:ed:24:11:31:dd:e0:e9:33:2b:22:f0:59:3a:56: 7d:74:05:ee:59:40:11:c9:27:99:40:8b:b2:3c:26: ca:c5:68:aa:50:4a:55:b4:5b:e2:8d:aa:05:bc:5f: 5b:fa:2f:b7:c2:de:a5:59:67:06:1e:5b:43:b3:11: 8a:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:2F:41:82:E1:69:E9:B2:87:DB:0C:1F:F2:B6:88:05:F5:E9:BE:3C X509v3 Authority Key Identifier: keyid:FC:D4:DF:8E:B4:AA:64:AF:56:B7:D0:C7:32:6E:29:10:45:43:CC:55 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918233C/E6491FE2621411ECB006712CC4F9AE02/_NTfjrSqZK9Wt9DHMm4pEEVDzFU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_NTfjrSqZK9Wt9DHMm4pEEVDzFU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918233C/E6491FE2621411ECB006712CC4F9AE02/_NTfjrSqZK9Wt9DHMm4pEEVDzFU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 19:c0:7d:b7:5a:cf:3f:dc:29:bc:74:90:34:db:1c:15:9b:bb: f8:cd:b7:c5:03:aa:fa:dd:68:02:14:d9:6f:0b:33:b3:c3:9c: 60:df:66:14:50:b5:e0:8a:69:d5:7d:49:3f:52:35:67:ce:2c: 16:2b:5f:2a:6b:db:83:e3:13:1f:c2:76:83:bf:a5:28:62:93: ce:fb:e7:04:a7:1c:d8:71:83:b7:82:69:14:4d:8b:2c:64:e0: e1:34:7d:fa:ee:ab:3d:8e:30:91:21:c5:cf:ad:f4:14:f6:1c: 66:4b:18:20:87:61:f5:db:26:bc:85:d1:cf:e6:05:f7:4a:41: f8:7d:89:a2:51:f6:94:7e:69:fb:53:9c:16:29:a9:fd:5e:86: 48:e7:ae:a6:13:89:44:35:22:5a:4e:3d:26:1f:55:42:92:ba: ee:2d:db:ad:3a:e8:53:41:a2:0d:6b:6b:2b:78:eb:c5:77:05: 8c:b9:86:bd:a8:93:39:e3:f1:6c:b6:a5:ae:36:e5:e7:9b:7d: b1:97:56:13:2d:c1:7c:98:ff:d4:18:dc:ac:35:12:4e:52:e4: 51:eb:7f:dc:c9:b8:0e:17:c5:ec:13:fc:fe:60:6b:83:19:46: 6f:2e:3e:d0:6b:13:86:a9:e4:f0:0f:65:18:22:cb:d1:b8:b6: 49:3b:60:73 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBQTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 MjMzQzExMC8GA1UEBRMoRkNENERGOEVCNEFBNjRBRjU2QjdEMEM3MzI2RTI5MTA0 NTQzQ0M1NTAeFw0yNTA4MDkwMDQ0NDBaFw0yNTA4MTYwMDQ0NDBaMBgxFjAUBgNV BAMTDTY4OTY5OWY4LWY3MmEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC45Z08XXEwuzVlfsdDkDfGdY2p8JHrsP2EVVxQDwSJxAt0AG7QpkC2BMZsP9u3 q4OF4bbCer1Ob2C/pIyfBNyVAIQFC/ZIilacvjhSC67bKE5CIC9EgzSTGlaL7LYL lSleJKwC6qCBeHEuppCq/gjIoi/RlM4xwbH9jXxbbo2OS3SysP6AJpKMzoCn6qhv z/XwtneFlkN59yCZC7mPaA56VIQkf18MrLgpdmVC/ENNcR+l9QCnxy+mQRWH3NlV b4SKgqDtJBEx3eDpMysi8Fk6Vn10Be5ZQBHJJ5lAi7I8JsrFaKpQSlW0W+KNqgW8 X1v6L7fC3qVZZwYeW0OzEYqfAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUJC9BguFp 6bKH2wwf8raIBfXpvjwwHwYDVR0jBBgwFoAU/NTfjrSqZK9Wt9DHMm4pEEVDzFUw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTgyMzNDL0U2NDkxRkUyNjIx NDExRUNCMDA2NzEyQ0M0RjlBRTAyL19OVGZqclNxWks5V3Q5REhNbTRwRUVWRHpG VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvX05UZmpyU3FaSzlXdDlESE1tNHBFRVZEekZVLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTgy MzNDL0U2NDkxRkUyNjIxNDExRUNCMDA2NzEyQ0M0RjlBRTAyL19OVGZqclNxWks5 V3Q5REhNbTRwRUVWRHpGVS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBABnAfbdazz/cKbx0kDTbHBWbu/jNt8UDqvrdaAIU2W8LM7PDnGDfZhRQ teCKadV9ST9SNWfOLBYrXypr24PjEx/CdoO/pShik8775wSnHNhxg7eCaRRNiyxk 4OE0ffruqz2OMJEhxc+t9BT2HGZLGCCHYfXbJryF0c/mBfdKQfh9iaJR9pR+aftT nBYpqf1ehkjnrqYTiUQ1IlpOPSYfVUKSuu4t26066FNBog1rayt468V3BYy5hr2o kznj8Wy2pa425eebfbGXVhMtwXyY/9QY3Kw1Ek5S5FHrf9zJuA4XxewT/P5ga4MZ Rm8uPtBrE4ap5PAPZRgiy9G4tkk7YHM= -----END CERTIFICATE-----Generated at Sun Aug 10 04:55:13 2025 by rpki-client