$ rpki-client -vvf rpki.apnic.net/member_repository/A9198FD0/20B4BD803DD511ECB7266464C4F9AE02/nWBHd6Cse-aqCBCwJetJPqbdNGM.mft File: nWBHd6Cse-aqCBCwJetJPqbdNGM.mft (raw, json) Hash identifier: 6aY0i/7m4AnfTjHuPS0NXZP4ejWuUv6xf2SFhXgD6WY= Subject key identifier: 59:07:CC:78:0C:E4:BC:E8:02:C3:76:34:5F:6A:5B:D5:61:34:FE:5A Authority key identifier: 9D:60:47:77:A0:AC:7B:E6:AA:08:10:B0:25:EB:49:3E:A6:DD:34:63 Certificate issuer: /CN=A9198FD0/serialNumber=9D604777A0AC7BE6AA0810B025EB493EA6DD3463 Certificate serial: 04B9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nWBHd6Cse-aqCBCwJetJPqbdNGM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9198FD0/20B4BD803DD511ECB7266464C4F9AE02/nWBHd6Cse-aqCBCwJetJPqbdNGM.mft Manifest number: 04B2 Signing time: Sat 09 Aug 2025 00:24:22 +0000 Manifest this update: Sat 09 Aug 2025 00:24:21 +0000 Manifest next update: Sat 16 Aug 2025 00:24:21 +0000 Files and hashes: 1: nWBHd6Cse-aqCBCwJetJPqbdNGM.crl (hash: fHMIoaS39q+AycpXEGaCFfjs3xjmU8HwJhVlvJJGVYc=) 2: 8327C2403DE011ECAB508171C4F9AE02.roa (hash: nj3zL8oObjV8NLXqj4IbNKya+FtBjMvRptjlINscrUo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9198FD0/20B4BD803DD511ECB7266464C4F9AE02/nWBHd6Cse-aqCBCwJetJPqbdNGM.crl rsync://rpki.apnic.net/member_repository/A9198FD0/20B4BD803DD511ECB7266464C4F9AE02/nWBHd6Cse-aqCBCwJetJPqbdNGM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nWBHd6Cse-aqCBCwJetJPqbdNGM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1209 (0x4b9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9198FD0, serialNumber=9D604777A0AC7BE6AA0810B025EB493EA6DD3463 Validity Not Before: Aug 9 00:24:21 2025 GMT Not After : Aug 16 00:24:21 2025 GMT Subject: CN=68969535-dfdb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:5f:9e:4d:50:18:44:02:7f:82:23:80:b1:c2: 5b:c1:a2:86:d7:d1:e6:a6:2d:cd:9a:6d:3a:a6:ec: bc:05:9d:c0:fa:93:3e:fb:e0:dc:07:fc:67:8f:b2: a0:31:32:d0:b9:78:f7:cf:9e:8d:22:3b:67:34:a5: bc:80:d8:b2:c6:c1:ce:72:5d:11:6d:e0:c6:4f:12: da:e8:de:d7:f4:a0:a8:34:7a:c9:bb:8d:6e:7a:84: 41:1a:2e:2b:c2:0f:20:95:68:ac:3c:f4:f4:c5:bb: d1:33:39:1c:c3:40:0f:8a:ad:4b:28:f6:9a:d2:cf: fc:43:53:43:e7:50:e1:cf:e1:ed:20:cf:8c:69:2e: 62:d6:a5:61:66:0a:9c:4f:af:74:77:16:bf:58:0c: ea:6e:51:c7:6c:04:be:e0:53:b1:b6:d5:ec:8e:ae: e1:d0:f1:c6:e6:fb:d9:26:5b:60:17:7c:1e:f5:75: c5:96:31:bc:e7:52:d8:6c:e6:55:95:f8:b1:58:2e: 03:fa:fb:28:af:45:8a:ba:45:96:3b:3c:3b:1f:48: 54:cf:b6:a0:90:19:bc:d6:c2:5e:05:16:ff:ed:a6: 88:44:ec:60:e8:43:c3:5a:e9:3c:53:15:f6:4d:8f: d2:e5:2c:14:5d:92:af:e3:31:45:66:a2:dd:f6:e2: 2c:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:07:CC:78:0C:E4:BC:E8:02:C3:76:34:5F:6A:5B:D5:61:34:FE:5A X509v3 Authority Key Identifier: keyid:9D:60:47:77:A0:AC:7B:E6:AA:08:10:B0:25:EB:49:3E:A6:DD:34:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9198FD0/20B4BD803DD511ECB7266464C4F9AE02/nWBHd6Cse-aqCBCwJetJPqbdNGM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nWBHd6Cse-aqCBCwJetJPqbdNGM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9198FD0/20B4BD803DD511ECB7266464C4F9AE02/nWBHd6Cse-aqCBCwJetJPqbdNGM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 70:55:d2:7f:08:36:1a:79:7a:a6:8a:90:50:ca:28:f5:ef:0e: ee:f5:99:2b:36:17:f2:34:6d:1b:74:49:79:47:99:af:3f:98: a1:6f:54:45:a5:64:49:6e:e9:a6:2f:8d:e5:07:52:e5:b2:73: 06:e3:e2:9a:11:3d:2e:a5:39:00:d2:18:57:b8:37:96:67:3c: a6:3d:86:76:01:3f:16:0b:4b:8c:f8:03:9a:e6:35:d7:2a:9f: 7f:4f:42:2a:43:55:a4:90:f1:8c:06:45:ff:30:9a:ea:ee:38: 18:c7:70:bc:1c:6e:74:46:93:21:99:e8:25:7b:58:ce:37:a7: 48:e2:b1:bb:9e:43:2c:94:b1:ae:bc:ea:4f:b0:8d:89:14:ca: d5:09:04:c2:18:de:6e:10:5f:e0:84:38:eb:1e:dc:e1:f4:e5: d9:ef:a5:dd:d2:78:be:4f:35:53:9e:4d:e1:82:c2:1d:62:08: 36:57:67:ad:1d:a3:04:59:fc:93:28:5f:78:72:33:ad:12:04: 9f:f2:4a:75:d7:de:ba:f3:64:12:50:74:20:36:65:08:ad:ce: e9:68:7a:02:b3:9c:87:4a:58:7d:18:c2:e7:f0:03:92:40:7d: e5:b5:64:5d:94:d2:46:5a:77:f4:a3:bd:df:63:95:75:a1:11: fd:91:85:92 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBLkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OThGRDAxMTAvBgNVBAUTKDlENjA0Nzc3QTBBQzdCRTZBQTA4MTBCMDI1RUI0OTNF QTZERDM0NjMwHhcNMjUwODA5MDAyNDIxWhcNMjUwODE2MDAyNDIxWjAYMRYwFAYD VQQDEw02ODk2OTUzNS1kZmRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyl+eTVAYRAJ/giOAscJbwaKG19Hmpi3Nmm06puy8BZ3A+pM+++DcB/xnj7Kg MTLQuXj3z56NIjtnNKW8gNiyxsHOcl0RbeDGTxLa6N7X9KCoNHrJu41ueoRBGi4r wg8glWisPPT0xbvRMzkcw0APiq1LKPaa0s/8Q1ND51Dhz+HtIM+MaS5i1qVhZgqc T690dxa/WAzqblHHbAS+4FOxttXsjq7h0PHG5vvZJltgF3we9XXFljG851LYbOZV lfixWC4D+vsor0WKukWWOzw7H0hUz7agkBm81sJeBRb/7aaIROxg6EPDWuk8UxX2 TY/S5SwUXZKv4zFFZqLd9uIscQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFkHzHgM 5LzoAsN2NF9qW9VhNP5aMB8GA1UdIwQYMBaAFJ1gR3egrHvmqggQsCXrST6m3TRj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OEZEMC8yMEI0QkQ4MDNE RDUxMUVDQjcyNjY0NjRDNEY5QUUwMi9uV0JIZDZDc2UtYXFDQkN3SmV0SlBxYmRO R00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25XQkhkNkNzZS1hcUNCQ3dKZXRKUHFiZE5HTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 OEZEMC8yMEI0QkQ4MDNERDUxMUVDQjcyNjY0NjRDNEY5QUUwMi9uV0JIZDZDc2Ut YXFDQkN3SmV0SlBxYmROR00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBwVdJ/CDYaeXqmipBQyij17w7u9ZkrNhfyNG0bdEl5R5mvP5ihb1RF pWRJbummL43lB1LlsnMG4+KaET0upTkA0hhXuDeWZzymPYZ2AT8WC0uM+AOa5jXX Kp9/T0IqQ1WkkPGMBkX/MJrq7jgYx3C8HG50RpMhmegle1jON6dI4rG7nkMslLGu vOpPsI2JFMrVCQTCGN5uEF/ghDjrHtzh9OXZ76Xd0ni+TzVTnk3hgsIdYgg2V2et HaMEWfyTKF94cjOtEgSf8kp1196682QSUHQgNmUIrc7paHoCs5yHSlh9GMLn8AOS QH3ltWRdlNJGWnf0o73fY5V1oRH9kYWS -----END CERTIFICATE-----Generated at Sat Aug 9 02:59:48 2025 by rpki-client