$ rpki-client -vvf rpki.apnic.net/member_repository/A919C318/65B671B6A82211EAABAA2F19C4F9AE02/NAcoRkbqh4WDwlsPqefW7aCRMpg.mft File: NAcoRkbqh4WDwlsPqefW7aCRMpg.mft (raw, json) Hash identifier: SqiycKjfrS6bFAA2MaBbaKHxTzm6BfUfe2sbrKAnYxs= Subject key identifier: 52:34:8F:A2:03:89:DE:69:BA:1D:93:BE:BA:EC:FD:86:6F:1E:64:69 Authority key identifier: 34:07:28:46:46:EA:87:85:83:C2:5B:0F:A9:E7:D6:ED:A0:91:32:98 Certificate issuer: /CN=A919C318/serialNumber=3407284646EA878583C25B0FA9E7D6EDA0913298 Certificate serial: 0928 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NAcoRkbqh4WDwlsPqefW7aCRMpg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919C318/65B671B6A82211EAABAA2F19C4F9AE02/NAcoRkbqh4WDwlsPqefW7aCRMpg.mft Manifest number: 0921 Signing time: Fri 08 Aug 2025 20:35:22 +0000 Manifest this update: Fri 08 Aug 2025 20:35:21 +0000 Manifest next update: Fri 15 Aug 2025 20:35:21 +0000 Files and hashes: 1: NAcoRkbqh4WDwlsPqefW7aCRMpg.crl (hash: jXu5du5T1wR9fgXrZ2Y7lmcPhW6FSzHtPOIilL/fAGo=) 2: 9AA539E6A82411EA996D5F41C4F9AE02.roa (hash: pMMXr/lqWr+5GcVstLkkyd8gkDTgGy1DHQolAjMLixQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919C318/65B671B6A82211EAABAA2F19C4F9AE02/NAcoRkbqh4WDwlsPqefW7aCRMpg.crl rsync://rpki.apnic.net/member_repository/A919C318/65B671B6A82211EAABAA2F19C4F9AE02/NAcoRkbqh4WDwlsPqefW7aCRMpg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NAcoRkbqh4WDwlsPqefW7aCRMpg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2344 (0x928) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919C318, serialNumber=3407284646EA878583C25B0FA9E7D6EDA0913298 Validity Not Before: Aug 8 20:35:21 2025 GMT Not After : Aug 15 20:35:21 2025 GMT Subject: CN=68965f89-57f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:c9:b8:08:99:1a:46:66:3e:5b:97:d7:cf:93: 17:22:ae:83:ec:b2:35:7a:3f:34:ba:30:d1:5c:1f: 1a:5c:5c:51:89:e4:d2:23:d4:d0:5e:61:6b:f5:a5: 7a:71:54:6a:f7:cc:f6:b5:35:10:e8:c6:ac:fa:1d: 20:8f:64:6a:b1:85:0d:b3:57:22:83:21:ca:8c:ae: a4:92:d4:13:4f:fd:5c:70:04:c3:08:ac:63:b5:3b: 0e:58:fb:40:6c:bf:88:41:bf:5b:f4:39:30:35:f8: b1:bd:a8:56:9e:9b:0b:21:8d:82:51:0b:84:dd:6e: d1:f4:f5:e9:24:f6:21:1a:51:3e:c0:d5:28:2a:90: 64:e8:09:69:40:e6:57:70:8d:ed:72:59:0a:e6:7d: 48:07:45:28:2d:7f:9f:e7:16:99:b1:d0:37:e2:f3: 40:17:cc:b9:54:a5:08:92:52:ae:87:8d:c3:9e:1e: 05:d1:0c:ab:f1:da:d7:38:92:9a:5f:ea:70:be:7a: 46:20:85:4d:de:01:dd:9e:40:64:46:60:fb:18:30: 97:f5:89:a4:42:63:49:2a:07:66:ce:88:e8:75:ba: f1:07:b9:6a:58:9c:d1:1a:ca:26:77:03:97:7f:13: 32:d5:a4:96:77:df:a5:93:8e:be:d2:da:c9:b3:d1: 61:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:34:8F:A2:03:89:DE:69:BA:1D:93:BE:BA:EC:FD:86:6F:1E:64:69 X509v3 Authority Key Identifier: keyid:34:07:28:46:46:EA:87:85:83:C2:5B:0F:A9:E7:D6:ED:A0:91:32:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919C318/65B671B6A82211EAABAA2F19C4F9AE02/NAcoRkbqh4WDwlsPqefW7aCRMpg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NAcoRkbqh4WDwlsPqefW7aCRMpg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919C318/65B671B6A82211EAABAA2F19C4F9AE02/NAcoRkbqh4WDwlsPqefW7aCRMpg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 28:f9:59:e9:b7:d1:46:78:7b:f2:b1:14:13:e7:ab:bf:75:83: ce:1a:b8:e2:d4:ed:22:59:63:85:f4:77:63:94:74:f7:61:40: 9f:cb:bc:3d:5c:09:a2:72:0f:8a:82:83:ad:df:71:bb:b9:d7: e9:da:64:7b:1a:f9:b4:03:81:14:3c:31:ea:bc:bc:ee:60:72: 09:59:e1:fa:32:e5:99:a4:d7:6a:fc:4c:e5:cc:74:34:46:16: 4e:c3:86:2d:08:c3:b2:16:bb:af:c5:85:29:0d:74:08:ff:0e: e8:ef:11:73:ea:6b:69:48:fd:1f:9d:23:78:e1:79:7c:20:18: c7:36:6b:26:6e:fc:9f:23:16:19:8f:ea:93:f6:2e:ba:b8:ad: 4f:8b:15:c7:82:d5:f5:e6:2b:b5:ac:f7:4d:0e:60:90:16:10: 50:3c:2c:59:d6:d9:91:81:36:bb:3e:fb:a3:e8:e1:f3:39:52: 85:dd:47:fe:d6:72:dd:ed:35:e5:06:f0:49:9c:42:cb:65:53: e3:51:86:0f:67:37:9a:76:cc:88:49:d7:d4:6a:ad:0a:33:c6: cb:ad:7e:09:9d:f4:03:50:6b:26:f5:93:ef:39:3c:b1:34:9a: 0a:f8:c9:a1:61:4a:2d:a6:89:e3:0b:f7:81:7b:62:56:72:ce: 3a:37:f6:4f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCSgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUMzMTgxMTAvBgNVBAUTKDM0MDcyODQ2NDZFQTg3ODU4M0MyNUIwRkE5RTdENkVE QTA5MTMyOTgwHhcNMjUwODA4MjAzNTIxWhcNMjUwODE1MjAzNTIxWjAYMRYwFAYD VQQDEw02ODk2NWY4OS01N2Y1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxsm4CJkaRmY+W5fXz5MXIq6D7LI1ej80ujDRXB8aXFxRieTSI9TQXmFr9aV6 cVRq98z2tTUQ6Mas+h0gj2RqsYUNs1cigyHKjK6kktQTT/1ccATDCKxjtTsOWPtA bL+IQb9b9DkwNfixvahWnpsLIY2CUQuE3W7R9PXpJPYhGlE+wNUoKpBk6AlpQOZX cI3tclkK5n1IB0UoLX+f5xaZsdA34vNAF8y5VKUIklKuh43Dnh4F0Qyr8drXOJKa X+pwvnpGIIVN3gHdnkBkRmD7GDCX9YmkQmNJKgdmzojodbrxB7lqWJzRGsomdwOX fxMy1aSWd9+lk46+0trJs9FhBQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFI0j6ID id5puh2Tvrrs/YZvHmRpMB8GA1UdIwQYMBaAFDQHKEZG6oeFg8JbD6nn1u2gkTKY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QzMxOC82NUI2NzFCNkE4 MjIxMUVBQUJBQTJGMTlDNEY5QUUwMi9OQWNvUmticWg0V0R3bHNQcWVmVzdhQ1JN cGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05BY29Sa2JxaDRXRHdsc1BxZWZXN2FDUk1wZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 QzMxOC82NUI2NzFCNkE4MjIxMUVBQUJBQTJGMTlDNEY5QUUwMi9OQWNvUmticWg0 V0R3bHNQcWVmVzdhQ1JNcGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAo+Vnpt9FGeHvysRQT56u/dYPOGrji1O0iWWOF9HdjlHT3YUCfy7w9 XAmicg+KgoOt33G7udfp2mR7Gvm0A4EUPDHqvLzuYHIJWeH6MuWZpNdq/EzlzHQ0 RhZOw4YtCMOyFruvxYUpDXQI/w7o7xFz6mtpSP0fnSN44Xl8IBjHNmsmbvyfIxYZ j+qT9i66uK1PixXHgtX15iu1rPdNDmCQFhBQPCxZ1tmRgTa7Pvuj6OHzOVKF3Uf+ 1nLd7TXlBvBJnELLZVPjUYYPZzeadsyISdfUaq0KM8bLrX4JnfQDUGsm9ZPvOTyx NJoK+MmhYUotponjC/eBe2JWcs46N/ZP -----END CERTIFICATE-----Generated at Sat Aug 9 23:07:15 2025 by rpki-client