$ rpki-client -vvf rpki.apnic.net/member_repository/A9196780/EF17C3D6525B11F0A8362240C4F9AE02/m0_NHtBqHkuhxL6fHRCylF6SjBk.mft File: m0_NHtBqHkuhxL6fHRCylF6SjBk.mft (raw, json) Hash identifier: enI+qwyaCVhq/rbj+Dfg+Rvymhp2OFNHMqJkz5AH8hk= Subject key identifier: AD:98:C7:64:82:64:1E:6E:1E:D3:E9:62:F1:AB:D1:B2:F3:61:D9:BE Authority key identifier: 9B:4F:CD:1E:D0:6A:1E:4B:A1:C4:BE:9F:1D:10:B2:94:5E:92:8C:19 Certificate issuer: /CN=A9196780/serialNumber=9B4FCD1ED06A1E4BA1C4BE9F1D10B2945E928C19 Certificate serial: 19 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m0_NHtBqHkuhxL6fHRCylF6SjBk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9196780/EF17C3D6525B11F0A8362240C4F9AE02/m0_NHtBqHkuhxL6fHRCylF6SjBk.mft Manifest number: 19 Signing time: Sat 09 Aug 2025 08:27:47 +0000 Manifest this update: Sat 09 Aug 2025 08:27:47 +0000 Manifest next update: Sat 16 Aug 2025 08:27:47 +0000 Files and hashes: 1: m0_NHtBqHkuhxL6fHRCylF6SjBk.crl (hash: Jms6ugGFPlYx+pL2gLgAbEyCxibM5Bf5KEZVOUxLbQc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9196780/EF17C3D6525B11F0A8362240C4F9AE02/m0_NHtBqHkuhxL6fHRCylF6SjBk.crl rsync://rpki.apnic.net/member_repository/A9196780/EF17C3D6525B11F0A8362240C4F9AE02/m0_NHtBqHkuhxL6fHRCylF6SjBk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m0_NHtBqHkuhxL6fHRCylF6SjBk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25 (0x19) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9196780, serialNumber=9B4FCD1ED06A1E4BA1C4BE9F1D10B2945E928C19 Validity Not Before: Aug 9 08:27:47 2025 GMT Not After : Aug 16 08:27:47 2025 GMT Subject: CN=68970683-5e9b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:fa:66:b6:0e:a0:c6:74:d1:4b:11:ba:f2:2a: 6f:67:13:8a:a9:bd:b6:7e:60:9b:1f:71:30:2b:8e: f0:09:9c:a3:33:72:55:61:4e:d4:9d:38:be:d5:1c: e1:18:85:0b:6f:53:1e:4d:3c:5c:5c:4d:d3:bd:ca: 40:0d:ec:cc:f3:0d:c8:e0:fd:29:56:03:44:23:47: f1:2d:82:34:c6:2b:d7:de:a2:a2:c0:d6:16:6a:35: 90:c1:15:be:91:e5:cc:6d:19:5a:f7:97:9a:9b:83: 3c:cf:aa:e4:0b:e7:de:98:50:e1:da:35:22:73:bd: 9b:0f:f7:46:a2:ca:0b:ba:7d:c1:19:4c:6d:6f:48: fa:f5:fa:f6:c8:c2:45:fa:b7:2c:82:bf:59:0f:ec: 86:65:0b:04:f6:14:e4:e9:d4:d8:af:cd:79:93:cc: fd:4e:1d:db:8e:6a:97:ed:64:29:23:ad:ef:4f:b0: 99:bb:11:21:b8:19:0c:72:e8:33:67:58:30:6e:42: 15:38:b4:53:79:66:3d:8a:4f:a0:47:91:e8:58:dc: 1d:ff:85:35:d2:c9:c8:43:a4:c6:6b:6f:7c:ca:84: 3b:14:4a:35:cc:6e:99:48:da:78:fa:68:56:fa:0e: bf:f1:4a:71:7a:b9:5e:c8:2e:bd:35:f4:88:79:bb: 70:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:98:C7:64:82:64:1E:6E:1E:D3:E9:62:F1:AB:D1:B2:F3:61:D9:BE X509v3 Authority Key Identifier: keyid:9B:4F:CD:1E:D0:6A:1E:4B:A1:C4:BE:9F:1D:10:B2:94:5E:92:8C:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9196780/EF17C3D6525B11F0A8362240C4F9AE02/m0_NHtBqHkuhxL6fHRCylF6SjBk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m0_NHtBqHkuhxL6fHRCylF6SjBk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9196780/EF17C3D6525B11F0A8362240C4F9AE02/m0_NHtBqHkuhxL6fHRCylF6SjBk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 83:30:20:03:89:61:36:a4:e4:4c:7e:29:df:11:91:83:b3:f8: 3f:a3:a0:d7:3f:73:af:b0:10:d0:e9:ce:b5:f7:36:35:72:26: 0e:f8:26:4a:f2:59:d7:47:25:ab:46:e1:9b:cf:f0:c5:5c:b0: d7:37:37:f1:3d:ae:a7:a7:63:8f:be:3d:61:c0:40:cd:ff:6d: 72:7e:b0:51:45:9a:e0:6b:39:12:36:c5:72:c3:ba:86:1d:e1: 79:79:2c:4b:40:e4:b6:ee:60:1d:70:81:d1:4e:02:50:b0:9e: 9c:a5:63:87:f1:82:28:45:38:69:50:cf:eb:fc:b8:ce:ca:01: ef:9d:04:7f:f4:fa:93:72:ca:9f:de:71:96:b3:33:72:27:a7: 79:41:c3:b1:08:8d:a8:4f:8a:b8:f1:65:71:cf:e6:32:0f:a7: c3:8b:8f:98:20:af:10:e5:44:1d:f0:33:83:01:3c:06:93:e4: 8e:e0:a6:ac:bc:6c:dc:15:2c:dc:da:fe:17:3e:46:bc:2a:60: a7:c3:40:71:7d:12:76:59:7b:ec:29:c7:d8:81:6a:f7:52:48: 31:2e:57:db:89:5d:da:10:ce:00:fa:f4:32:c2:24:73:fb:63: e0:e5:69:f0:e9:c1:8d:8f:26:e3:6c:e2:72:ca:56:57:c3:2e: 69:21:45:2f -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBGTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 Njc4MDExMC8GA1UEBRMoOUI0RkNEMUVEMDZBMUU0QkExQzRCRTlGMUQxMEIyOTQ1 RTkyOEMxOTAeFw0yNTA4MDkwODI3NDdaFw0yNTA4MTYwODI3NDdaMBgxFjAUBgNV BAMTDTY4OTcwNjgzLTVlOWIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC4+ma2DqDGdNFLEbryKm9nE4qpvbZ+YJsfcTArjvAJnKMzclVhTtSdOL7VHOEY hQtvUx5NPFxcTdO9ykAN7MzzDcjg/SlWA0QjR/EtgjTGK9feoqLA1hZqNZDBFb6R 5cxtGVr3l5qbgzzPquQL596YUOHaNSJzvZsP90aiygu6fcEZTG1vSPr1+vbIwkX6 tyyCv1kP7IZlCwT2FOTp1NivzXmTzP1OHduOapftZCkjre9PsJm7ESG4GQxy6DNn WDBuQhU4tFN5Zj2KT6BHkehY3B3/hTXSychDpMZrb3zKhDsUSjXMbplI2nj6aFb6 Dr/xSnF6uV7ILr019Ih5u3DNAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUrZjHZIJk Hm4e0+li8avRsvNh2b4wHwYDVR0jBBgwFoAUm0/NHtBqHkuhxL6fHRCylF6SjBkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk2NzgwL0VGMTdDM0Q2NTI1 QjExRjBBODM2MjI0MEM0RjlBRTAyL20wX05IdEJxSGt1aHhMNmZIUkN5bEY2U2pC ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvbTBfTkh0QnFIa3VoeEw2ZkhSQ3lsRjZTakJrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk2 NzgwL0VGMTdDM0Q2NTI1QjExRjBBODM2MjI0MEM0RjlBRTAyL20wX05IdEJxSGt1 aHhMNmZIUkN5bEY2U2pCay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAIMwIAOJYTak5Ex+Kd8RkYOz+D+joNc/c6+wENDpzrX3NjVyJg74Jkry WddHJatG4ZvP8MVcsNc3N/E9rqenY4++PWHAQM3/bXJ+sFFFmuBrORI2xXLDuoYd 4Xl5LEtA5LbuYB1wgdFOAlCwnpylY4fxgihFOGlQz+v8uM7KAe+dBH/0+pNyyp/e cZazM3Inp3lBw7EIjahPirjxZXHP5jIPp8OLj5ggrxDlRB3wM4MBPAaT5I7gpqy8 bNwVLNza/hc+RrwqYKfDQHF9EnZZe+wpx9iBavdSSDEuV9uJXdoQzgD69DLCJHP7 Y+DlafDpwY2PJuNs4nLKVlfDLmkhRS8= -----END CERTIFICATE-----Generated at Sun Aug 10 18:22:16 2025 by rpki-client