$ rpki-client -vvf rpki.apnic.net/member_repository/A919D656/93CB77AE6ACB11ED9B633B39C4F9AE02/Nhu6lAj6GbXpfYLN2_-y55u7oz8.mft File: Nhu6lAj6GbXpfYLN2_-y55u7oz8.mft (raw, json) Hash identifier: XIoVG5DuiNBJfnaDq3F3Pl1WZC9+rKXJpMmc17v7BJI= Subject key identifier: 37:67:1B:5C:85:66:38:04:F1:5D:AB:3B:76:C9:CB:27:97:87:99:BA Authority key identifier: 36:1B:BA:94:08:FA:19:B5:E9:7D:82:CD:DB:FF:B2:E7:9B:BB:A3:3F Certificate issuer: /CN=A919D656/serialNumber=361BBA9408FA19B5E97D82CDDBFFB2E79BBBA33F Certificate serial: 0203 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nhu6lAj6GbXpfYLN2_-y55u7oz8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919D656/93CB77AE6ACB11ED9B633B39C4F9AE02/Nhu6lAj6GbXpfYLN2_-y55u7oz8.mft Manifest number: 01FE Signing time: Mon 11 Aug 2025 02:27:56 +0000 Manifest this update: Mon 11 Aug 2025 02:27:56 +0000 Manifest next update: Mon 18 Aug 2025 02:27:56 +0000 Files and hashes: 1: Nhu6lAj6GbXpfYLN2_-y55u7oz8.crl (hash: euM2CYeU5HjuqHNaWlcTelsi8dwiRxq4nFxafgjFIAA=) 2: 00FFAB766ACF11EDBCC28E3CC4F9AE02.roa (hash: XpTSLigO4HKKd3j+0vvg/u/YVC83XW6OinlRQSFc3LQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919D656/93CB77AE6ACB11ED9B633B39C4F9AE02/Nhu6lAj6GbXpfYLN2_-y55u7oz8.crl rsync://rpki.apnic.net/member_repository/A919D656/93CB77AE6ACB11ED9B633B39C4F9AE02/Nhu6lAj6GbXpfYLN2_-y55u7oz8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nhu6lAj6GbXpfYLN2_-y55u7oz8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 18 Aug 2025 02:27:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 515 (0x203) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919D656, serialNumber=361BBA9408FA19B5E97D82CDDBFFB2E79BBBA33F Validity Not Before: Aug 11 02:27:56 2025 GMT Not After : Aug 18 02:27:56 2025 GMT Subject: CN=6899552c-75ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:5a:89:ee:c0:58:26:07:2d:95:ce:3e:bd:1e: c9:ce:ae:ef:53:ff:e7:22:37:ae:42:23:99:29:3c: 94:82:21:14:bb:62:11:e7:2e:57:1a:2a:ae:8b:9e: a4:8d:9e:5d:54:09:29:12:50:ef:ae:bd:6a:f4:1b: 3f:7f:af:d1:e7:b8:77:23:3e:00:e0:80:c5:7d:5e: 72:2b:85:a6:47:74:38:0e:47:58:ab:a7:37:00:de: a2:5b:c5:bc:df:f0:40:ab:6c:e9:d3:b2:d2:74:95: 11:21:23:4c:0d:f7:ed:8c:af:1c:7d:b1:06:14:eb: 0b:84:c3:a5:32:f2:c6:a2:f7:d3:a9:7c:df:a7:f2: 43:fc:ea:c1:e9:6c:82:8b:25:e5:2b:86:77:c8:87: cb:b6:a8:3d:76:5c:ca:67:1d:a2:7e:aa:4f:41:c6: 75:ea:d3:37:57:13:06:6b:25:49:1d:bd:25:1d:ae: eb:56:7d:f0:0d:fa:c8:2f:93:4d:ad:32:1f:d9:16: ab:54:08:cc:f6:63:f7:7a:f5:69:57:f3:69:4a:a7: fc:27:fd:c6:81:dd:de:27:b9:5f:63:75:f3:6d:c8: 27:c2:70:a1:c8:38:24:fa:ed:1b:4d:8a:d8:08:82: 5d:be:42:84:02:3e:b3:59:7c:b0:b8:b8:2b:c2:78: bc:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:67:1B:5C:85:66:38:04:F1:5D:AB:3B:76:C9:CB:27:97:87:99:BA X509v3 Authority Key Identifier: keyid:36:1B:BA:94:08:FA:19:B5:E9:7D:82:CD:DB:FF:B2:E7:9B:BB:A3:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919D656/93CB77AE6ACB11ED9B633B39C4F9AE02/Nhu6lAj6GbXpfYLN2_-y55u7oz8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nhu6lAj6GbXpfYLN2_-y55u7oz8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919D656/93CB77AE6ACB11ED9B633B39C4F9AE02/Nhu6lAj6GbXpfYLN2_-y55u7oz8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 95:51:74:91:1f:ef:e5:96:4d:34:98:d6:40:6a:64:d8:f7:26: 4a:91:f9:69:fa:5e:81:b1:9b:1c:75:7c:0d:a0:76:2c:9b:e9: 1b:aa:a2:24:69:9e:6d:5c:ca:25:03:31:21:77:3c:9e:bc:b6: 23:82:c2:5f:db:d1:f1:2e:93:e0:c8:87:1a:f6:f1:cf:ec:de: 91:06:51:4c:2c:ee:df:64:6d:b2:95:7f:a4:da:c0:ad:c2:2d: 33:cb:b0:3c:d0:32:b8:5d:31:6a:f4:ac:ab:cc:ec:af:9f:90: 18:b6:a7:e0:1e:f3:e2:b7:02:14:4c:f6:e8:86:5b:28:21:49: 90:ae:0f:ae:de:39:5f:54:6d:2d:da:be:9f:f4:4f:72:9d:7c: b2:75:d3:17:9e:86:b5:17:46:6d:55:bf:6a:ba:43:ee:6d:94: 72:43:47:54:d9:e1:d0:a3:4d:3c:b7:3b:bd:8d:b7:e7:ac:4f: 1a:bb:84:4f:91:68:eb:ba:f7:6c:b0:09:0e:c7:0b:99:07:e3: 87:67:77:f1:8f:9f:9a:5f:02:f1:e0:a2:3a:5c:69:8a:b6:43: 19:d1:f2:15:92:a4:28:98:a1:96:49:21:c1:b6:d7:81:e2:6f: cb:21:35:81:6e:67:7a:92:3d:c1:dd:e4:e5:ca:76:22:19:bd: 24:fb:08:27 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAgMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUQ2NTYxMTAvBgNVBAUTKDM2MUJCQTk0MDhGQTE5QjVFOTdEODJDRERCRkZCMkU3 OUJCQkEzM0YwHhcNMjUwODExMDIyNzU2WhcNMjUwODE4MDIyNzU2WjAYMRYwFAYD VQQDEw02ODk5NTUyYy03NWVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuVqJ7sBYJgctlc4+vR7Jzq7vU//nIjeuQiOZKTyUgiEUu2IR5y5XGiqui56k jZ5dVAkpElDvrr1q9Bs/f6/R57h3Iz4A4IDFfV5yK4WmR3Q4DkdYq6c3AN6iW8W8 3/BAq2zp07LSdJURISNMDfftjK8cfbEGFOsLhMOlMvLGovfTqXzfp/JD/OrB6WyC iyXlK4Z3yIfLtqg9dlzKZx2ifqpPQcZ16tM3VxMGayVJHb0lHa7rVn3wDfrIL5NN rTIf2RarVAjM9mP3evVpV/NpSqf8J/3Ggd3eJ7lfY3XzbcgnwnChyDgk+u0bTYrY CIJdvkKEAj6zWXywuLgrwni8pQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDdnG1yF ZjgE8V2rO3bJyyeXh5m6MB8GA1UdIwQYMBaAFDYbupQI+hm16X2Czdv/suebu6M/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RDY1Ni85M0NCNzdBRTZB Q0IxMUVEOUI2MzNCMzlDNEY5QUUwMi9OaHU2bEFqNkdiWHBmWUxOMl8teTU1dTdv ejguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05odTZsQWo2R2JYcGZZTE4yXy15NTV1N296OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RDY1Ni85M0NCNzdBRTZBQ0IxMUVEOUI2MzNCMzlDNEY5QUUwMi9OaHU2bEFqNkdi WHBmWUxOMl8teTU1dTdvejgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCVUXSRH+/llk00mNZAamTY9yZKkflp+l6BsZscdXwNoHYsm+kbqqIk aZ5tXMolAzEhdzyevLYjgsJf29HxLpPgyIca9vHP7N6RBlFMLO7fZG2ylX+k2sCt wi0zy7A80DK4XTFq9KyrzOyvn5AYtqfgHvPitwIUTPbohlsoIUmQrg+u3jlfVG0t 2r6f9E9ynXyyddMXnoa1F0ZtVb9qukPubZRyQ0dU2eHQo008tzu9jbfnrE8au4RP kWjruvdssAkOxwuZB+OHZ3fxj5+aXwLx4KI6XGmKtkMZ0fIVkqQomKGWSSHBtteB 4m/LITWBbmd6kj3B3eTlynYiGb0k+wgn -----END CERTIFICATE-----Generated at Tue Aug 12 14:04:16 2025 by rpki-client