$ rpki-client -vvf rpki.apnic.net/member_repository/A9192491/D0626D92AD2F11E98FF8D77FC4F9AE02/NMONZkm5DWjTzmwJ8euU0-V5_J0.mft File: NMONZkm5DWjTzmwJ8euU0-V5_J0.mft (raw, json) Hash identifier: YR/EXLuiCGBxih9avzPc5XdjiJSB7gBArI29Jkza5RQ= Subject key identifier: A9:88:3D:DA:10:B9:8F:0C:5B:10:AF:AD:A9:DD:8E:A3:22:7A:43:02 Authority key identifier: 34:C3:8D:66:49:B9:0D:68:D3:CE:6C:09:F1:EB:94:D3:E5:79:FC:9D Certificate issuer: /CN=A9192491/serialNumber=34C38D6649B90D68D3CE6C09F1EB94D3E579FC9D Certificate serial: 0E2A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NMONZkm5DWjTzmwJ8euU0-V5_J0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9192491/D0626D92AD2F11E98FF8D77FC4F9AE02/NMONZkm5DWjTzmwJ8euU0-V5_J0.mft Manifest number: 0E21 Signing time: Fri 08 Aug 2025 18:00:42 +0000 Manifest this update: Fri 08 Aug 2025 18:00:42 +0000 Manifest next update: Fri 15 Aug 2025 18:00:42 +0000 Files and hashes: 1: NMONZkm5DWjTzmwJ8euU0-V5_J0.crl (hash: yF0BUf8twMy331w7vbvkGdESlZR6cRTzUUywcVbbui8=) 2: 54AE11C6AD3211E9B3BC7385C4F9AE02.roa (hash: a2Zz+SuX3DCfdSuIf8QT+Sa+cHmZnSxsIqO80zeBe3c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9192491/D0626D92AD2F11E98FF8D77FC4F9AE02/NMONZkm5DWjTzmwJ8euU0-V5_J0.crl rsync://rpki.apnic.net/member_repository/A9192491/D0626D92AD2F11E98FF8D77FC4F9AE02/NMONZkm5DWjTzmwJ8euU0-V5_J0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NMONZkm5DWjTzmwJ8euU0-V5_J0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3626 (0xe2a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9192491, serialNumber=34C38D6649B90D68D3CE6C09F1EB94D3E579FC9D Validity Not Before: Aug 8 18:00:42 2025 GMT Not After : Aug 15 18:00:42 2025 GMT Subject: CN=68963b4a-1766 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:5d:e7:b8:b0:25:8b:26:7a:f3:3e:2b:85:01: 36:eb:57:62:b5:bc:37:5e:11:ac:58:51:16:53:fa: 79:e1:66:38:f7:83:87:20:84:1c:64:c3:5c:d2:2c: 23:6d:fe:60:79:e3:a5:91:4a:03:62:ba:16:6e:40: 5c:85:b9:06:a2:f4:95:50:22:0a:d0:19:01:d5:76: 8e:a9:35:cb:31:74:55:1e:f1:49:67:ee:78:12:35: 70:a3:79:d2:57:22:69:5f:6f:c4:a5:40:28:40:42: 40:b9:ce:2f:57:5f:b5:bf:43:44:2e:e4:6d:1e:c2: fc:94:6b:16:fd:9c:35:84:fb:31:b6:2e:1a:2d:a3: 06:88:33:a1:43:7f:83:7e:8a:70:26:27:30:a1:fc: 6e:bc:e7:1c:2c:fe:91:f8:12:1a:cc:9f:2f:8c:f3: b7:32:80:a6:64:c1:a7:35:73:49:fc:be:d2:8e:e1: a4:31:be:6c:04:36:fa:9f:6b:35:58:93:66:2a:9e: 49:8f:4f:37:1c:3f:29:e8:38:96:61:e1:e1:a5:c8: 7b:54:af:cb:bd:5b:3e:f7:e8:da:00:e2:7c:e9:93: b7:52:52:88:46:12:1a:94:a4:b4:70:02:c9:4f:d6: 23:ff:dc:7b:65:a6:00:0f:29:c7:ca:c6:5d:b2:fc: fc:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:88:3D:DA:10:B9:8F:0C:5B:10:AF:AD:A9:DD:8E:A3:22:7A:43:02 X509v3 Authority Key Identifier: keyid:34:C3:8D:66:49:B9:0D:68:D3:CE:6C:09:F1:EB:94:D3:E5:79:FC:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9192491/D0626D92AD2F11E98FF8D77FC4F9AE02/NMONZkm5DWjTzmwJ8euU0-V5_J0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NMONZkm5DWjTzmwJ8euU0-V5_J0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9192491/D0626D92AD2F11E98FF8D77FC4F9AE02/NMONZkm5DWjTzmwJ8euU0-V5_J0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 10:b1:96:4e:2a:2a:16:11:f7:c3:69:30:03:e2:0f:14:45:60: d6:1d:db:1a:5b:d6:c8:74:e3:be:9f:64:b0:32:a7:bd:e2:f2: 13:83:3c:3b:d5:97:18:93:2a:f3:e3:e1:3f:23:2f:ff:e5:03: 9f:12:13:a2:4a:f6:92:5b:85:44:71:fc:6a:65:df:60:82:40: 49:4b:9f:6b:e8:2f:f5:f5:d2:53:d3:e1:dd:62:a0:fb:2c:91: 08:57:6a:03:8d:91:9c:74:e5:29:f7:3a:6d:3c:d9:43:23:38: 6d:63:d6:e9:de:0b:b2:b4:ef:4c:e0:13:68:f6:4f:25:6b:69: 62:c4:15:30:3e:4a:4c:6a:ff:bc:55:d7:ec:21:45:34:54:e6: 91:39:8d:d6:56:9e:4f:98:82:6b:fa:47:4a:d5:50:e3:a6:cd: f4:f5:15:3f:05:69:d0:8e:f2:76:d0:d0:7d:51:1c:e0:f7:17: 4f:26:53:57:a7:b9:ee:ad:5a:1f:6a:bb:b1:d4:2d:80:82:c3: dd:b2:9f:99:52:8c:e3:c4:04:0a:43:22:b5:21:77:74:af:6c: f8:6c:3b:5a:0a:cb:2d:5b:35:c0:ff:83:da:66:96:d8:87:2c: fc:e5:43:7d:03:41:50:64:28:82:0b:f1:9e:8b:0c:68:18:b6: 8b:f4:8c:19 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDiowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTI0OTExMTAvBgNVBAUTKDM0QzM4RDY2NDlCOTBENjhEM0NFNkMwOUYxRUI5NEQz RTU3OUZDOUQwHhcNMjUwODA4MTgwMDQyWhcNMjUwODE1MTgwMDQyWjAYMRYwFAYD VQQDEw02ODk2M2I0YS0xNzY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzl3nuLAliyZ68z4rhQE261ditbw3XhGsWFEWU/p54WY494OHIIQcZMNc0iwj bf5geeOlkUoDYroWbkBchbkGovSVUCIK0BkB1XaOqTXLMXRVHvFJZ+54EjVwo3nS VyJpX2/EpUAoQEJAuc4vV1+1v0NELuRtHsL8lGsW/Zw1hPsxti4aLaMGiDOhQ3+D fopwJicwofxuvOccLP6R+BIazJ8vjPO3MoCmZMGnNXNJ/L7SjuGkMb5sBDb6n2s1 WJNmKp5Jj083HD8p6DiWYeHhpch7VK/LvVs+9+jaAOJ86ZO3UlKIRhIalKS0cALJ T9Yj/9x7ZaYADynHysZdsvz8FwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKmIPdoQ uY8MWxCvrandjqMiekMCMB8GA1UdIwQYMBaAFDTDjWZJuQ1o085sCfHrlNPlefyd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MjQ5MS9EMDYyNkQ5MkFE MkYxMUU5OEZGOEQ3N0ZDNEY5QUUwMi9OTU9OWmttNURXalR6bXdKOGV1VTAtVjVf SjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05NT05aa201RFdqVHptd0o4ZXVVMC1WNV9KMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MjQ5MS9EMDYyNkQ5MkFEMkYxMUU5OEZGOEQ3N0ZDNEY5QUUwMi9OTU9OWmttNURX alR6bXdKOGV1VTAtVjVfSjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAQsZZOKioWEffDaTAD4g8URWDWHdsaW9bIdOO+n2SwMqe94vITgzw7 1ZcYkyrz4+E/Iy//5QOfEhOiSvaSW4VEcfxqZd9ggkBJS59r6C/19dJT0+HdYqD7 LJEIV2oDjZGcdOUp9zptPNlDIzhtY9bp3guytO9M4BNo9k8la2lixBUwPkpMav+8 VdfsIUU0VOaROY3WVp5PmIJr+kdK1VDjps309RU/BWnQjvJ20NB9URzg9xdPJlNX p7nurVofarux1C2AgsPdsp+ZUozjxAQKQyK1IXd0r2z4bDtaCsstWzXA/4PaZpbY hyz85UN9A0FQZCiCC/GeiwxoGLaL9IwZ -----END CERTIFICATE-----Generated at Sat Aug 9 02:46:02 2025 by rpki-client