$ rpki-client -vvf rpki.apnic.net/member_repository/A918D5CF/98D0B4F87B1A11E88F3D0C14C4F9AE02/NwOTvGRg5S0PXgIdVS9YF0M-suc.mft File: NwOTvGRg5S0PXgIdVS9YF0M-suc.mft (raw, json) Hash identifier: YrxmrLpGnKtZFSo5N5/qYU6Gw49Q969+hnUeEurwO7s= Subject key identifier: 80:50:BF:3E:3C:E7:25:03:59:F2:6B:7F:0E:7C:AB:FA:2F:F9:B8:54 Authority key identifier: 37:03:93:BC:64:60:E5:2D:0F:5E:02:1D:55:2F:58:17:43:3E:B2:E7 Certificate issuer: /CN=A918D5CF/serialNumber=370393BC6460E52D0F5E021D552F5817433EB2E7 Certificate serial: 1444 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NwOTvGRg5S0PXgIdVS9YF0M-suc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918D5CF/98D0B4F87B1A11E88F3D0C14C4F9AE02/NwOTvGRg5S0PXgIdVS9YF0M-suc.mft Manifest number: 143C Signing time: Sun 10 Aug 2025 16:54:08 +0000 Manifest this update: Sun 10 Aug 2025 16:54:08 +0000 Manifest next update: Sun 17 Aug 2025 16:54:08 +0000 Files and hashes: 1: NwOTvGRg5S0PXgIdVS9YF0M-suc.crl (hash: my9oFAS7byW+3eyFL/11jTiIGA57ZZcRK2NM+WWFJGQ=) 2: 0802DFC67B1C11E8BC732C17C4F9AE02.roa (hash: IY1KR2STRHWACxUYvedIZffoCYQxTjZXanC5kAZHVDk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918D5CF/98D0B4F87B1A11E88F3D0C14C4F9AE02/NwOTvGRg5S0PXgIdVS9YF0M-suc.crl rsync://rpki.apnic.net/member_repository/A918D5CF/98D0B4F87B1A11E88F3D0C14C4F9AE02/NwOTvGRg5S0PXgIdVS9YF0M-suc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NwOTvGRg5S0PXgIdVS9YF0M-suc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5188 (0x1444) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918D5CF, serialNumber=370393BC6460E52D0F5E021D552F5817433EB2E7 Validity Not Before: Aug 10 16:54:08 2025 GMT Not After : Aug 17 16:54:08 2025 GMT Subject: CN=6898ceb0-00a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:67:af:c2:98:37:63:97:2d:5c:6a:33:ad:f5: 7e:8d:f8:8d:f6:ec:78:82:9a:8b:0e:5e:8a:d1:d0: e7:f7:10:f6:d9:89:09:2e:c0:c6:18:03:94:c9:22: 85:9e:e8:9b:c5:fb:02:46:6f:22:95:50:9d:cb:98: ad:77:2f:13:e7:71:f5:43:40:fd:2f:8a:02:7b:61: e5:67:9d:dd:de:a1:77:4a:f0:e6:13:d9:e9:49:0a: 25:ac:e7:ef:09:af:41:3f:77:f4:c1:21:bb:e7:57: 81:4d:9c:31:ba:db:47:d0:e1:f1:e4:e6:c4:7c:d9: 6d:18:05:1c:3f:40:c6:6b:3c:ce:1d:6f:c0:b9:8a: bb:b6:c8:b4:38:69:2a:59:11:cb:46:bd:d5:c5:61: 50:f8:1a:40:c1:58:a6:16:a5:d9:21:ff:8d:e3:18: 4e:bc:27:5e:9a:26:cf:96:e3:c6:47:7c:68:8a:da: 4d:2d:c8:a3:43:e9:51:1d:57:83:ea:66:f0:1e:11: 7b:aa:e9:e0:40:2f:f9:52:da:67:26:48:9b:ec:c7: b5:c7:c9:3b:a6:0e:49:f6:a6:76:21:4f:79:b6:1e: 73:f6:05:79:5f:cb:e2:e1:7e:82:31:49:f4:df:a5: ff:c2:cb:a8:70:8d:b4:5b:5b:00:99:31:dc:5c:5d: 43:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:50:BF:3E:3C:E7:25:03:59:F2:6B:7F:0E:7C:AB:FA:2F:F9:B8:54 X509v3 Authority Key Identifier: keyid:37:03:93:BC:64:60:E5:2D:0F:5E:02:1D:55:2F:58:17:43:3E:B2:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918D5CF/98D0B4F87B1A11E88F3D0C14C4F9AE02/NwOTvGRg5S0PXgIdVS9YF0M-suc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NwOTvGRg5S0PXgIdVS9YF0M-suc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D5CF/98D0B4F87B1A11E88F3D0C14C4F9AE02/NwOTvGRg5S0PXgIdVS9YF0M-suc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 99:e4:60:54:e8:44:22:83:7d:2b:3f:fe:a5:ad:dd:e4:88:e8: bf:0a:8d:6a:13:34:cc:ac:d4:9a:c6:ff:5a:7c:be:c5:73:1f: 5c:95:84:d7:1c:0e:90:c4:45:5d:db:88:8d:2d:21:be:a2:15: 3e:4f:2f:c8:a9:e2:1f:7f:5b:a2:c0:fc:a0:ad:5e:00:f3:a8: 40:cc:cb:0b:7b:00:8a:53:34:46:db:13:aa:19:c9:44:09:90: 7e:b4:64:b8:8f:f8:49:89:b3:d7:44:a7:71:7b:44:d1:d2:ea: 70:3e:3d:f8:dc:23:1a:16:d4:23:cf:04:ed:63:f8:66:cc:83: cd:d3:d2:5b:ef:07:87:0d:0e:56:7e:c7:c4:b2:27:fe:ee:70: cf:38:ba:00:e8:52:f7:05:37:3c:91:55:cc:ca:7e:1a:de:72: 96:fe:74:3d:07:90:39:8e:f5:1e:d7:0d:b9:41:b4:a0:10:9f: 0a:ff:ed:2c:6e:48:da:e8:3e:0e:9b:aa:7e:32:59:39:66:ec: 36:9b:cb:bd:5a:e3:5d:27:a6:e5:1a:fd:63:7a:09:c1:da:05: 88:64:1c:97:8a:0a:2c:9d:85:22:1e:a2:4e:9b:e2:7f:5f:c8: 92:0a:be:3b:ee:6f:98:65:9e:8c:7e:fc:b4:fe:0d:71:5f:a1: b8:9d:19:d2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFEQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEQ1Q0YxMTAvBgNVBAUTKDM3MDM5M0JDNjQ2MEU1MkQwRjVFMDIxRDU1MkY1ODE3 NDMzRUIyRTcwHhcNMjUwODEwMTY1NDA4WhcNMjUwODE3MTY1NDA4WjAYMRYwFAYD VQQDEw02ODk4Y2ViMC0wMGE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu2evwpg3Y5ctXGozrfV+jfiN9ux4gpqLDl6K0dDn9xD22YkJLsDGGAOUySKF nuibxfsCRm8ilVCdy5itdy8T53H1Q0D9L4oCe2HlZ53d3qF3SvDmE9npSQolrOfv Ca9BP3f0wSG751eBTZwxuttH0OHx5ObEfNltGAUcP0DGazzOHW/AuYq7tsi0OGkq WRHLRr3VxWFQ+BpAwVimFqXZIf+N4xhOvCdemibPluPGR3xoitpNLcijQ+lRHVeD 6mbwHhF7qungQC/5UtpnJkib7Me1x8k7pg5J9qZ2IU95th5z9gV5X8vi4X6CMUn0 36X/wsuocI20W1sAmTHcXF1DkQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIBQvz48 5yUDWfJrfw58q/ov+bhUMB8GA1UdIwQYMBaAFDcDk7xkYOUtD14CHVUvWBdDPrLn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RDVDRi85OEQwQjRGODdC MUExMUU4OEYzRDBDMTRDNEY5QUUwMi9Od09UdkdSZzVTMFBYZ0lkVlM5WUYwTS1z dWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL053T1R2R1JnNVMwUFhnSWRWUzlZRjBNLXN1Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RDVDRi85OEQwQjRGODdCMUExMUU4OEYzRDBDMTRDNEY5QUUwMi9Od09UdkdSZzVT MFBYZ0lkVlM5WUYwTS1zdWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCZ5GBU6EQig30rP/6lrd3kiOi/Co1qEzTMrNSaxv9afL7Fcx9clYTX HA6QxEVd24iNLSG+ohU+Ty/IqeIff1uiwPygrV4A86hAzMsLewCKUzRG2xOqGclE CZB+tGS4j/hJibPXRKdxe0TR0upwPj343CMaFtQjzwTtY/hmzIPN09Jb7weHDQ5W fsfEsif+7nDPOLoA6FL3BTc8kVXMyn4a3nKW/nQ9B5A5jvUe1w25QbSgEJ8K/+0s bkja6D4Om6p+Mlk5Zuw2m8u9WuNdJ6blGv1jegnB2gWIZByXigosnYUiHqJOm+J/ X8iSCr477m+YZZ6Mfvy0/g1xX6G4nRnS -----END CERTIFICATE-----Generated at Mon Aug 11 04:40:20 2025 by rpki-client