$ rpki-client -vvf rpki.apnic.net/member_repository/A9197501/99B58BB013DB11ED9304C582C4F9AE02/nwqvLgr6Pm-NrlpGp-WMz_o0wSc.mft File: nwqvLgr6Pm-NrlpGp-WMz_o0wSc.mft (raw, json) Hash identifier: 0Npki+bkkOeZRXiO6qU27Ggf+sWXeNy0gikkp8RwBgw= Subject key identifier: F8:25:33:A0:F9:DF:E9:C4:D9:4A:25:13:FB:12:8F:CC:BD:56:AB:72 Authority key identifier: 9F:0A:AF:2E:0A:FA:3E:6F:8D:AE:5A:46:A7:E5:8C:CF:FA:34:C1:27 Certificate issuer: /CN=A9197501/serialNumber=9F0AAF2E0AFA3E6F8DAE5A46A7E58CCFFA34C127 Certificate serial: 02B2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nwqvLgr6Pm-NrlpGp-WMz_o0wSc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9197501/99B58BB013DB11ED9304C582C4F9AE02/nwqvLgr6Pm-NrlpGp-WMz_o0wSc.mft Manifest number: 029E Signing time: Sat 09 Aug 2025 02:11:45 +0000 Manifest this update: Sat 09 Aug 2025 02:11:44 +0000 Manifest next update: Sat 16 Aug 2025 02:11:44 +0000 Files and hashes: 1: nwqvLgr6Pm-NrlpGp-WMz_o0wSc.crl (hash: 0AlwEDzOBYsJaCGADA8zfvBl74hazCbvPxZNt9V2El4=) 2: 4742083A534E11F08B7C2047C4F9AE02.roa (hash: b9dQAfi252XHiHpqx6+ZSBhpVRiVzjLuF9TZZF1YFe0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9197501/99B58BB013DB11ED9304C582C4F9AE02/nwqvLgr6Pm-NrlpGp-WMz_o0wSc.crl rsync://rpki.apnic.net/member_repository/A9197501/99B58BB013DB11ED9304C582C4F9AE02/nwqvLgr6Pm-NrlpGp-WMz_o0wSc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nwqvLgr6Pm-NrlpGp-WMz_o0wSc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 690 (0x2b2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9197501, serialNumber=9F0AAF2E0AFA3E6F8DAE5A46A7E58CCFFA34C127 Validity Not Before: Aug 9 02:11:44 2025 GMT Not After : Aug 16 02:11:44 2025 GMT Subject: CN=6896ae60-259a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:f2:aa:5e:8d:f5:5e:a9:92:34:d4:f0:f4:6b: 4d:04:a3:c1:bc:31:c5:a0:24:89:72:d6:ea:d6:bd: 5e:50:d2:bf:c0:7a:57:63:3d:f1:79:b4:d7:7a:50: 4a:6a:82:e0:da:b8:a5:9f:b2:13:69:6c:cf:40:d5: 9d:b6:e0:01:80:c7:79:51:19:f6:7e:b7:98:0b:5c: e0:d8:b0:27:0d:2a:0e:b7:60:47:7f:f0:bb:35:57: f1:b9:e1:67:7b:c4:30:e9:bb:f9:62:46:21:c7:f2: 05:35:38:36:5e:1e:54:55:50:6c:7d:2f:18:2b:34: 81:0d:3f:42:56:d4:7b:b4:9e:96:f3:4c:2b:3e:32: ef:f9:29:8d:7f:3e:b2:71:e3:bb:1c:5c:63:36:df: 68:c4:7c:24:7c:af:39:49:c0:7f:e6:5d:4d:1f:f7: b5:1e:8e:a6:5e:5e:18:94:cf:15:e6:09:10:f1:67: 55:cd:04:9a:94:39:3b:12:f8:b5:09:3d:06:43:d2: d1:5a:9b:96:07:ec:41:85:a9:39:6c:a6:8d:be:60: 37:4c:dc:21:db:91:6d:eb:be:ab:5b:95:da:f8:4c: 40:16:b1:08:78:6b:41:8a:13:c5:82:54:30:bf:07: b2:d8:01:85:56:73:04:02:e3:84:d3:ce:bb:ad:13: cc:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:25:33:A0:F9:DF:E9:C4:D9:4A:25:13:FB:12:8F:CC:BD:56:AB:72 X509v3 Authority Key Identifier: keyid:9F:0A:AF:2E:0A:FA:3E:6F:8D:AE:5A:46:A7:E5:8C:CF:FA:34:C1:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9197501/99B58BB013DB11ED9304C582C4F9AE02/nwqvLgr6Pm-NrlpGp-WMz_o0wSc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nwqvLgr6Pm-NrlpGp-WMz_o0wSc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9197501/99B58BB013DB11ED9304C582C4F9AE02/nwqvLgr6Pm-NrlpGp-WMz_o0wSc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 43:dc:12:06:14:2f:1c:c4:f0:5d:0f:71:06:b5:f6:ce:66:23: bc:ea:15:ea:e7:4e:86:cf:73:73:13:82:ea:03:fd:e7:df:85: e9:57:89:14:60:b5:5a:b9:0d:9c:42:fc:3d:01:b0:78:93:48: a6:b4:2b:65:fd:c4:87:79:bb:54:83:de:e5:5a:fb:03:6e:af: bc:49:5d:8e:1d:67:8b:2b:09:9d:da:37:3d:1f:f5:fe:bd:dc: 1e:93:5c:2d:d0:6b:11:36:2a:d1:f2:80:de:f6:ab:73:f4:af: 93:b1:c3:06:cb:a2:78:26:4a:9b:be:b5:02:98:ba:85:7f:46: 54:e5:54:a0:e1:c7:e7:f8:29:16:c7:26:cb:c1:bd:e0:8e:a2: b0:ef:a4:78:3b:d4:a2:cf:3c:2c:d1:b1:8d:bc:52:3e:2c:10: 27:c3:b7:e5:0b:50:96:f1:08:d5:73:84:66:92:ce:51:ac:80: 22:65:f0:07:c9:b8:48:e0:ab:56:a3:f8:4d:bb:c8:8f:a2:a5: 2a:fc:bb:c5:0a:8f:2a:be:0f:08:54:92:86:ab:6e:63:20:12: a3:20:d7:c7:ab:69:b7:f6:02:0b:be:10:bc:e6:34:8f:cf:b4: 9c:ed:27:98:90:9e:f1:78:a9:9c:db:31:f5:40:08:e1:34:fe: 65:43:c7:55 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICArIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTc1MDExMTAvBgNVBAUTKDlGMEFBRjJFMEFGQTNFNkY4REFFNUE0NkE3RTU4Q0NG RkEzNEMxMjcwHhcNMjUwODA5MDIxMTQ0WhcNMjUwODE2MDIxMTQ0WjAYMRYwFAYD VQQDEw02ODk2YWU2MC0yNTlhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2/KqXo31XqmSNNTw9GtNBKPBvDHFoCSJctbq1r1eUNK/wHpXYz3xebTXelBK aoLg2riln7ITaWzPQNWdtuABgMd5URn2freYC1zg2LAnDSoOt2BHf/C7NVfxueFn e8Qw6bv5YkYhx/IFNTg2Xh5UVVBsfS8YKzSBDT9CVtR7tJ6W80wrPjLv+SmNfz6y ceO7HFxjNt9oxHwkfK85ScB/5l1NH/e1Ho6mXl4YlM8V5gkQ8WdVzQSalDk7Evi1 CT0GQ9LRWpuWB+xBhak5bKaNvmA3TNwh25Ft676rW5Xa+ExAFrEIeGtBihPFglQw vwey2AGFVnMEAuOE0867rRPMBQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPglM6D5 3+nE2UolE/sSj8y9VqtyMB8GA1UdIwQYMBaAFJ8Kry4K+j5vja5aRqfljM/6NMEn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NzUwMS85OUI1OEJCMDEz REIxMUVEOTMwNEM1ODJDNEY5QUUwMi9ud3F2TGdyNlBtLU5ybHBHcC1XTXpfbzB3 U2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL253cXZMZ3I2UG0tTnJscEdwLVdNel9vMHdTYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NzUwMS85OUI1OEJCMDEzREIxMUVEOTMwNEM1ODJDNEY5QUUwMi9ud3F2TGdyNlBt LU5ybHBHcC1XTXpfbzB3U2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBD3BIGFC8cxPBdD3EGtfbOZiO86hXq506Gz3NzE4LqA/3n34XpV4kU YLVauQ2cQvw9AbB4k0imtCtl/cSHebtUg97lWvsDbq+8SV2OHWeLKwmd2jc9H/X+ vdwek1wt0GsRNirR8oDe9qtz9K+TscMGy6J4JkqbvrUCmLqFf0ZU5VSg4cfn+CkW xybLwb3gjqKw76R4O9Sizzws0bGNvFI+LBAnw7flC1CW8QjVc4Rmks5RrIAiZfAH ybhI4KtWo/hNu8iPoqUq/LvFCo8qvg8IVJKGq25jIBKjINfHq2m39gILvhC85jSP z7Sc7SeYkJ7xeKmc2zH1QAjhNP5lQ8dV -----END CERTIFICATE-----Generated at Sun Aug 10 21:08:16 2025 by rpki-client