$ rpki-client -vvf rpki.apnic.net/member_repository/A918404E/BC030C76F1DA11EAAFC6C70AC4F9AE02/nHx3b2v2ADKD8Mq0Pi3GFJSZcWI.mft File: nHx3b2v2ADKD8Mq0Pi3GFJSZcWI.mft (raw, json) Hash identifier: YLcHdHGKAWtmp2JK/ewDUg26Zp9kPDEIGrhsU5O7sS4= Subject key identifier: 66:2F:80:25:B3:83:17:33:5C:EA:B6:5B:81:32:31:3A:22:73:8E:C2 Authority key identifier: 9C:7C:77:6F:6B:F6:00:32:83:F0:CA:B4:3E:2D:C6:14:94:99:71:62 Certificate issuer: /CN=A918404E/serialNumber=9C7C776F6BF6003283F0CAB43E2DC61494997162 Certificate serial: 093B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nHx3b2v2ADKD8Mq0Pi3GFJSZcWI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918404E/BC030C76F1DA11EAAFC6C70AC4F9AE02/nHx3b2v2ADKD8Mq0Pi3GFJSZcWI.mft Manifest number: 08A5 Signing time: Sat 02 Aug 2025 21:18:01 +0000 Manifest this update: Sat 02 Aug 2025 21:18:00 +0000 Manifest next update: Sat 09 Aug 2025 21:18:00 +0000 Files and hashes: 1: nHx3b2v2ADKD8Mq0Pi3GFJSZcWI.crl (hash: XmnKwlRRKKXSlTlIaRz1YX5EHnykez3gJiePDpbOUl0=) 2: 8C2F4DBA8D3111EFA61E9282C4F9AE02.roa (hash: rGSaf9r5NHWNkGd2dlgWyn72IpJZOpkzcKbp3O1O8bg=) 3: 287F42E4018011EF92ADDC7FC4F9AE02.roa (hash: FEK8EzXCQ/8MiufhcQyCAnkfxapHFXjscSrsdrF8TfA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918404E/BC030C76F1DA11EAAFC6C70AC4F9AE02/nHx3b2v2ADKD8Mq0Pi3GFJSZcWI.crl rsync://rpki.apnic.net/member_repository/A918404E/BC030C76F1DA11EAAFC6C70AC4F9AE02/nHx3b2v2ADKD8Mq0Pi3GFJSZcWI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nHx3b2v2ADKD8Mq0Pi3GFJSZcWI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 09 Aug 2025 21:18:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2363 (0x93b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918404E, serialNumber=9C7C776F6BF6003283F0CAB43E2DC61494997162 Validity Not Before: Aug 2 21:18:00 2025 GMT Not After : Aug 9 21:18:00 2025 GMT Subject: CN=688e8089-1af8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:99:55:23:be:4b:64:2e:78:8c:7f:12:f6:90: 89:2e:43:d1:2b:3f:a2:51:a1:85:eb:9d:37:d8:bc: 29:67:ec:ed:f8:7d:9d:77:a9:16:47:a6:9e:9c:ac: 10:49:48:b2:bf:92:2c:a8:30:8f:27:a1:11:c1:82: 95:f7:60:7a:a6:85:24:ae:42:1d:76:2c:56:19:2c: 43:a4:6a:df:68:60:42:b1:87:15:42:6f:d5:76:8a: d9:30:0f:60:b1:e2:37:db:bd:b2:0b:92:b4:84:24: e5:6d:e7:ac:b0:9c:11:0e:36:44:ba:ee:05:e0:81: ed:d7:ab:d2:08:83:eb:b1:55:df:63:0c:42:74:e5: 45:fe:ef:1e:e3:ad:9e:ad:8b:b7:ab:46:7a:a1:9d: 08:3d:04:12:83:13:8b:86:0c:bb:70:7c:16:a9:77: 0f:3f:0a:38:f1:24:e4:70:2a:59:09:ee:0b:e7:46: ba:59:27:bb:96:b6:2e:c7:ac:f9:ea:5c:f0:a3:d5: 55:87:f5:59:17:ef:60:a7:f0:ac:11:9e:c0:9e:92: b2:bd:3a:f4:bf:17:b5:93:3c:98:b4:98:c6:6a:6b: 81:11:33:f1:bc:b4:13:32:07:fc:e2:65:df:01:0a: bd:57:94:9e:9f:06:fa:00:20:ad:1b:29:58:8a:76: 11:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:2F:80:25:B3:83:17:33:5C:EA:B6:5B:81:32:31:3A:22:73:8E:C2 X509v3 Authority Key Identifier: keyid:9C:7C:77:6F:6B:F6:00:32:83:F0:CA:B4:3E:2D:C6:14:94:99:71:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918404E/BC030C76F1DA11EAAFC6C70AC4F9AE02/nHx3b2v2ADKD8Mq0Pi3GFJSZcWI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nHx3b2v2ADKD8Mq0Pi3GFJSZcWI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918404E/BC030C76F1DA11EAAFC6C70AC4F9AE02/nHx3b2v2ADKD8Mq0Pi3GFJSZcWI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 01:4a:a5:dc:c3:55:6f:6e:54:99:1b:86:2c:24:cd:49:2f:31: 10:d8:0b:a4:f2:44:53:21:68:9a:a2:cc:45:19:92:16:a4:0a: ba:32:19:39:5d:57:43:49:68:1f:96:8a:b7:06:30:2a:a7:ea: 06:94:db:f3:ee:3e:ec:09:30:bf:f4:63:86:fb:b5:e4:4d:21: 13:09:17:db:c6:86:99:7e:9f:3d:60:f0:02:48:fa:6d:90:57: 53:42:8d:15:e5:62:84:fd:3d:b0:b8:0d:78:e6:d8:e6:89:4a: cd:84:1c:34:21:8e:6f:c3:93:1c:6a:d2:0b:bf:06:03:a9:f5: 8c:9e:93:b2:a3:cf:55:a4:c2:bc:8a:43:7a:a9:f2:15:ab:50: b4:ef:ef:b5:39:87:68:9e:2b:b2:5a:da:bc:0c:c1:83:dc:d1: c3:89:a1:eb:ee:0a:9d:54:c1:f0:32:0c:4f:b6:9c:b7:59:46: 65:89:2f:1f:bf:31:c6:28:34:33:21:3a:59:56:6b:0f:5b:58: d4:8f:6d:61:13:8c:fa:73:6b:d5:58:ed:c9:23:99:f5:27:7a: ff:f9:a8:8d:e7:c3:fb:ea:64:59:e4:c1:31:42:83:0f:b2:78: 9a:c3:8b:cb:55:2e:95:09:e4:41:f2:a9:cf:d9:aa:3b:02:69: e7:94:50:43 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCTswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODQwNEUxMTAvBgNVBAUTKDlDN0M3NzZGNkJGNjAwMzI4M0YwQ0FCNDNFMkRDNjE0 OTQ5OTcxNjIwHhcNMjUwODAyMjExODAwWhcNMjUwODA5MjExODAwWjAYMRYwFAYD VQQDEw02ODhlODA4OS0xYWY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAm5lVI75LZC54jH8S9pCJLkPRKz+iUaGF65032LwpZ+zt+H2dd6kWR6aenKwQ SUiyv5IsqDCPJ6ERwYKV92B6poUkrkIddixWGSxDpGrfaGBCsYcVQm/VdorZMA9g seI3272yC5K0hCTlbeessJwRDjZEuu4F4IHt16vSCIPrsVXfYwxCdOVF/u8e462e rYu3q0Z6oZ0IPQQSgxOLhgy7cHwWqXcPPwo48STkcCpZCe4L50a6WSe7lrYux6z5 6lzwo9VVh/VZF+9gp/CsEZ7AnpKyvTr0vxe1kzyYtJjGamuBETPxvLQTMgf84mXf AQq9V5Senwb6ACCtGylYinYRwQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGYvgCWz gxczXOq2W4EyMToic47CMB8GA1UdIwQYMBaAFJx8d29r9gAyg/DKtD4txhSUmXFi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NDA0RS9CQzAzMEM3NkYx REExMUVBQUZDNkM3MEFDNEY5QUUwMi9uSHgzYjJ2MkFES0Q4TXEwUGkzR0ZKU1pj V0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25IeDNiMnYyQURLRDhNcTBQaTNHRkpTWmNXSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NDA0RS9CQzAzMEM3NkYxREExMUVBQUZDNkM3MEFDNEY5QUUwMi9uSHgzYjJ2MkFE S0Q4TXEwUGkzR0ZKU1pjV0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQABSqXcw1VvblSZG4YsJM1JLzEQ2Auk8kRTIWiaosxFGZIWpAq6Mhk5 XVdDSWgfloq3BjAqp+oGlNvz7j7sCTC/9GOG+7XkTSETCRfbxoaZfp89YPACSPpt kFdTQo0V5WKE/T2wuA145tjmiUrNhBw0IY5vw5McatILvwYDqfWMnpOyo89VpMK8 ikN6qfIVq1C07++1OYdoniuyWtq8DMGD3NHDiaHr7gqdVMHwMgxPtpy3WUZliS8f vzHGKDQzITpZVmsPW1jUj21hE4z6c2vVWO3JI5n1J3r/+aiN58P76mRZ5MExQoMP sniaw4vLVS6VCeRB8qnP2ao7AmnnlFBD -----END CERTIFICATE-----Generated at Mon Aug 4 11:16:10 2025 by rpki-client