$ rpki-client -vvf rpki.apnic.net/member_repository/A91889A4/27A25A5604FA11EE8D46E245C4F9AE02/_nQHcdbqABLeOHBW-Iy-3TbEqGA.mft File: _nQHcdbqABLeOHBW-Iy-3TbEqGA.mft (raw, json) Hash identifier: NbyzRy1eQjjld90VURUfWSoQlMCHv8XR4EibM5D6td8= Subject key identifier: 19:10:5F:7A:CA:DE:27:FD:24:27:4D:11:B3:80:F3:B5:FE:31:91:E9 Authority key identifier: FE:74:07:71:D6:EA:00:12:DE:38:70:56:F8:8C:BE:DD:36:C4:A8:60 Certificate issuer: /CN=A91889A4/serialNumber=FE740771D6EA0012DE387056F88CBEDD36C4A860 Certificate serial: 019D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_nQHcdbqABLeOHBW-Iy-3TbEqGA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91889A4/27A25A5604FA11EE8D46E245C4F9AE02/_nQHcdbqABLeOHBW-Iy-3TbEqGA.mft Manifest number: 0199 Signing time: Sat 09 Aug 2025 03:44:41 +0000 Manifest this update: Sat 09 Aug 2025 03:44:41 +0000 Manifest next update: Sat 16 Aug 2025 03:44:41 +0000 Files and hashes: 1: _nQHcdbqABLeOHBW-Iy-3TbEqGA.crl (hash: cl/oqWe2FzW9OsljmnecUf2ZgPrgRUbT27LrZyeaC/Q=) 2: 37B318C0050111EEAFBCAE7EC4F9AE02.roa (hash: eMm1aATtYTxr8yulbbTqFy3KIRD0+Hc1f6QKDsCg/8Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91889A4/27A25A5604FA11EE8D46E245C4F9AE02/_nQHcdbqABLeOHBW-Iy-3TbEqGA.crl rsync://rpki.apnic.net/member_repository/A91889A4/27A25A5604FA11EE8D46E245C4F9AE02/_nQHcdbqABLeOHBW-Iy-3TbEqGA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_nQHcdbqABLeOHBW-Iy-3TbEqGA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 413 (0x19d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91889A4, serialNumber=FE740771D6EA0012DE387056F88CBEDD36C4A860 Validity Not Before: Aug 9 03:44:41 2025 GMT Not After : Aug 16 03:44:41 2025 GMT Subject: CN=6896c429-9770 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:27:ad:9e:f5:c5:cd:46:dc:30:7d:f7:ed:de: b2:12:73:b7:c7:d3:17:c2:f3:90:f6:dc:09:cd:3a: 25:39:66:4c:54:da:c1:de:31:15:a5:a6:d3:72:f9: b1:c2:6b:7e:03:53:52:73:12:c7:76:a6:36:df:15: 72:3f:7e:f6:65:ed:85:89:bb:2e:6f:90:4e:c4:54: 3e:51:ab:10:2c:d6:c8:b7:35:13:8e:0b:ee:af:9e: c1:0c:ce:54:05:8b:ef:20:57:5b:d8:dd:ea:8a:ea: fd:af:0f:01:b0:4a:20:24:a2:0d:32:6d:d9:da:ff: 1c:ba:14:7f:c4:fb:f0:5b:23:8c:d4:97:4d:9e:80: 44:b7:31:03:ff:30:9b:c4:8f:55:0c:82:32:70:13: 81:fd:4b:c2:c3:4e:4c:34:84:47:ce:ab:b6:be:6e: 56:0e:dd:7d:cb:b0:04:d9:0e:98:4a:cf:a1:ba:cc: 34:d9:63:e7:6a:d0:34:2d:9f:77:57:5b:a4:35:68: 0e:41:65:c0:61:a8:0c:01:78:d2:41:e0:d6:47:96: b2:b5:43:31:1a:37:5a:3c:c2:5e:9f:84:98:9a:eb: 27:57:0a:67:82:b6:b7:b8:bb:5e:ef:c1:2d:cb:9d: 83:20:73:2f:ac:a5:66:19:eb:d8:2a:89:46:19:61: 9a:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:10:5F:7A:CA:DE:27:FD:24:27:4D:11:B3:80:F3:B5:FE:31:91:E9 X509v3 Authority Key Identifier: keyid:FE:74:07:71:D6:EA:00:12:DE:38:70:56:F8:8C:BE:DD:36:C4:A8:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91889A4/27A25A5604FA11EE8D46E245C4F9AE02/_nQHcdbqABLeOHBW-Iy-3TbEqGA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_nQHcdbqABLeOHBW-Iy-3TbEqGA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91889A4/27A25A5604FA11EE8D46E245C4F9AE02/_nQHcdbqABLeOHBW-Iy-3TbEqGA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 50:c0:7b:9a:6b:21:ba:98:72:74:fc:ee:d8:f5:f4:87:60:64: 3b:eb:65:95:85:33:28:a8:a4:f3:40:e3:b3:3d:8a:62:c9:bb: 0b:5f:e6:05:6c:6b:34:30:d4:cd:23:e6:59:1b:df:78:bc:89: 6b:ae:ea:57:7e:8b:16:45:e8:1c:24:2a:4a:8e:79:fc:61:0c: 7f:75:cf:68:af:26:eb:16:d4:ed:b9:19:71:66:eb:ff:9b:1e: da:4a:70:77:8d:eb:35:61:18:35:ef:84:a5:38:79:20:1e:20: 43:56:16:cb:24:ae:f8:a4:57:00:b2:2c:24:e5:f6:99:67:25: 9a:80:0f:38:fc:89:ec:c7:5a:a7:f1:48:63:69:71:1d:f3:8a: f5:f9:ea:41:eb:1d:a9:de:91:9d:dc:0b:92:f1:01:48:00:0f: 16:5c:10:68:8c:c5:2e:d1:a5:09:9f:a9:15:ef:73:c7:68:1f: 08:4c:20:fc:43:ac:e6:ff:38:f4:71:98:fb:55:81:fb:cf:d7: ac:e7:b5:4a:1b:d8:51:f5:70:8d:23:cd:75:5d:19:68:22:02: b5:7b:ab:c8:da:54:89:c3:ff:7d:25:30:75:6f:d1:71:c7:6a: 93:08:d9:b5:fc:20:cb:32:72:f7:0b:65:99:4e:67:db:93:04: e7:72:53:34 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAZ0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODg5QTQxMTAvBgNVBAUTKEZFNzQwNzcxRDZFQTAwMTJERTM4NzA1NkY4OENCRURE MzZDNEE4NjAwHhcNMjUwODA5MDM0NDQxWhcNMjUwODE2MDM0NDQxWjAYMRYwFAYD VQQDEw02ODk2YzQyOS05NzcwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsCetnvXFzUbcMH337d6yEnO3x9MXwvOQ9twJzTolOWZMVNrB3jEVpabTcvmx wmt+A1NScxLHdqY23xVyP372Ze2Fibsub5BOxFQ+UasQLNbItzUTjgvur57BDM5U BYvvIFdb2N3qiur9rw8BsEogJKINMm3Z2v8cuhR/xPvwWyOM1JdNnoBEtzED/zCb xI9VDIIycBOB/UvCw05MNIRHzqu2vm5WDt19y7AE2Q6YSs+husw02WPnatA0LZ93 V1ukNWgOQWXAYagMAXjSQeDWR5aytUMxGjdaPMJen4SYmusnVwpngra3uLte78Et y52DIHMvrKVmGevYKolGGWGaowIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBkQX3rK 3if9JCdNEbOA87X+MZHpMB8GA1UdIwQYMBaAFP50B3HW6gAS3jhwVviMvt02xKhg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4ODlBNC8yN0EyNUE1NjA0 RkExMUVFOEQ0NkUyNDVDNEY5QUUwMi9fblFIY2RicUFCTGVPSEJXLUl5LTNUYkVx R0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19uUUhjZGJxQUJMZU9IQlctSXktM1RiRXFHQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 ODlBNC8yN0EyNUE1NjA0RkExMUVFOEQ0NkUyNDVDNEY5QUUwMi9fblFIY2RicUFC TGVPSEJXLUl5LTNUYkVxR0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBQwHuaayG6mHJ0/O7Y9fSHYGQ762WVhTMoqKTzQOOzPYpiybsLX+YF bGs0MNTNI+ZZG994vIlrrupXfosWRegcJCpKjnn8YQx/dc9orybrFtTtuRlxZuv/ mx7aSnB3jes1YRg174SlOHkgHiBDVhbLJK74pFcAsiwk5faZZyWagA84/Insx1qn 8UhjaXEd84r1+epB6x2p3pGd3AuS8QFIAA8WXBBojMUu0aUJn6kV73PHaB8ITCD8 Q6zm/zj0cZj7VYH7z9es57VKG9hR9XCNI811XRloIgK1e6vI2lSJw/99JTB1b9Fx x2qTCNm1/CDLMnL3C2WZTmfbkwTnclM0 -----END CERTIFICATE-----Generated at Sun Aug 10 21:15:40 2025 by rpki-client