$ rpki-client -vvf rpki.apnic.net/member_repository/A919D6BB/3AB0F76AFB6211E9A82B394AC4F9AE02/N1NyjlTwmkhRPf_S-nGARBH82yA.mft File: N1NyjlTwmkhRPf_S-nGARBH82yA.mft (raw, json) Hash identifier: suPvFl2S3jqkvHYsdm84Na5Xx2GXbuofksDufVVFKLI= Subject key identifier: AB:38:0C:04:C7:37:E3:42:45:BA:CD:21:E1:21:E8:9C:1D:7B:9D:D0 Authority key identifier: 37:53:72:8E:54:F0:9A:48:51:3D:FF:D2:FA:71:80:44:11:FC:DB:20 Certificate issuer: /CN=A919D6BB/serialNumber=3753728E54F09A48513DFFD2FA71804411FCDB20 Certificate serial: 0CB4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N1NyjlTwmkhRPf_S-nGARBH82yA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919D6BB/3AB0F76AFB6211E9A82B394AC4F9AE02/N1NyjlTwmkhRPf_S-nGARBH82yA.mft Manifest number: 0CA0 Signing time: Fri 08 Aug 2025 18:25:57 +0000 Manifest this update: Fri 08 Aug 2025 18:25:57 +0000 Manifest next update: Fri 15 Aug 2025 18:25:57 +0000 Files and hashes: 1: N1NyjlTwmkhRPf_S-nGARBH82yA.crl (hash: +fgUrxdGLqZp4c8q8khX6cCXwD6sNi074y+kn/dvLv8=) 2: CA39F7F0FB6311E999847F4DC4F9AE02.roa (hash: vr09dbtEy2Fgutt0NtzNOJlZbFaSyEOb3HlcebNKKlM=) 3: B647F704090C11EFB666C967C4F9AE02.roa (hash: C/GK3qZr1DIfgcq87pT0/h+xz6IT2+9Jo03Tvm4UR1g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919D6BB/3AB0F76AFB6211E9A82B394AC4F9AE02/N1NyjlTwmkhRPf_S-nGARBH82yA.crl rsync://rpki.apnic.net/member_repository/A919D6BB/3AB0F76AFB6211E9A82B394AC4F9AE02/N1NyjlTwmkhRPf_S-nGARBH82yA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N1NyjlTwmkhRPf_S-nGARBH82yA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3252 (0xcb4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919D6BB, serialNumber=3753728E54F09A48513DFFD2FA71804411FCDB20 Validity Not Before: Aug 8 18:25:57 2025 GMT Not After : Aug 15 18:25:57 2025 GMT Subject: CN=68964135-2f1e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:90:85:b8:c3:c5:4d:d7:f5:9b:6e:a5:8f:a1: cb:b2:7e:14:3a:8e:a3:85:ac:bd:61:4e:b3:fd:f6: e0:cf:1b:eb:21:5b:e0:1e:ad:0b:ec:f2:7b:24:9e: 57:a2:89:5d:6d:97:65:f3:c1:c5:11:c7:cf:dc:f2: fc:ee:75:9f:a9:53:b9:d7:ae:19:f4:16:b9:6b:30: ff:a9:eb:3a:68:d9:72:61:60:28:c5:4d:05:20:84: 40:ff:26:51:4a:8d:fa:94:62:b1:54:1a:83:4a:d6: 33:49:8a:6e:4c:22:e8:0c:20:93:00:0b:44:45:37: ba:f7:88:f5:4d:6d:de:0e:b6:c6:70:91:8d:1a:11: 3e:20:71:68:29:4c:27:39:97:cf:a7:6a:a4:2c:aa: 6c:1a:73:38:57:39:13:a1:f5:15:4b:64:a7:b0:40: de:a0:0f:ae:04:01:b6:7b:fd:8e:c0:2b:4f:91:51: 6d:15:1c:c4:10:b8:19:c5:34:79:eb:6d:56:9c:e8: 11:c8:e4:2a:de:84:f8:9b:a0:2b:3c:bc:d8:8b:8f: ab:93:8c:19:da:6f:2f:0a:be:81:99:d2:9c:dc:b6: fd:fd:87:0b:1d:9e:da:5c:91:16:ff:e2:5f:c1:38: 60:17:9c:2a:94:6f:58:28:a1:a7:b8:ad:7e:e4:42: 4e:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:38:0C:04:C7:37:E3:42:45:BA:CD:21:E1:21:E8:9C:1D:7B:9D:D0 X509v3 Authority Key Identifier: keyid:37:53:72:8E:54:F0:9A:48:51:3D:FF:D2:FA:71:80:44:11:FC:DB:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919D6BB/3AB0F76AFB6211E9A82B394AC4F9AE02/N1NyjlTwmkhRPf_S-nGARBH82yA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N1NyjlTwmkhRPf_S-nGARBH82yA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919D6BB/3AB0F76AFB6211E9A82B394AC4F9AE02/N1NyjlTwmkhRPf_S-nGARBH82yA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 08:79:28:24:60:c2:7e:d9:a8:c7:ce:c8:55:c9:72:44:c5:25: 11:2f:b3:b6:07:29:4c:0f:b2:53:4c:76:18:cb:de:41:04:af: a2:9f:76:93:49:6b:7a:88:4d:3c:c1:ba:c6:8c:4d:fc:a0:b4: a3:1e:93:bb:d4:cc:ba:92:8e:d6:73:94:48:6f:c5:82:7d:6a: 36:33:4b:d5:e1:c0:c5:d0:d7:97:73:3d:3c:ef:43:f5:12:e8: 9e:d0:e5:06:65:84:35:74:5e:15:40:65:fd:1b:9c:6e:d0:63: 5d:1b:5b:5f:ae:8e:d0:5b:c3:4e:09:cd:18:6b:88:f7:c9:d2: 02:23:b1:7d:74:dc:f3:4f:f3:95:4f:fd:a3:ad:d4:bb:58:20: 78:56:92:b0:13:0b:f6:af:f3:d8:2f:cc:c0:24:5d:37:0b:f2: 0b:09:4a:08:2c:80:50:63:eb:87:03:64:48:fc:2f:10:10:e7: a2:2c:10:98:d0:7e:ac:fb:18:df:a2:83:96:3d:db:61:78:eb: 8b:eb:43:8f:bb:30:d3:b5:76:90:17:0b:df:0a:9f:95:e3:cc: fb:8f:8e:ba:b6:14:be:1f:42:4a:29:f2:28:db:09:87:3a:17: 0d:26:74:ad:06:26:8b:0e:94:4b:0a:07:46:c7:38:c6:ae:b2: 01:3f:a1:bb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDLQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUQ2QkIxMTAvBgNVBAUTKDM3NTM3MjhFNTRGMDlBNDg1MTNERkZEMkZBNzE4MDQ0 MTFGQ0RCMjAwHhcNMjUwODA4MTgyNTU3WhcNMjUwODE1MTgyNTU3WjAYMRYwFAYD VQQDEw02ODk2NDEzNS0yZjFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5JCFuMPFTdf1m26lj6HLsn4UOo6jhay9YU6z/fbgzxvrIVvgHq0L7PJ7JJ5X ooldbZdl88HFEcfP3PL87nWfqVO5164Z9Ba5azD/qes6aNlyYWAoxU0FIIRA/yZR So36lGKxVBqDStYzSYpuTCLoDCCTAAtERTe694j1TW3eDrbGcJGNGhE+IHFoKUwn OZfPp2qkLKpsGnM4VzkTofUVS2SnsEDeoA+uBAG2e/2OwCtPkVFtFRzEELgZxTR5 621WnOgRyOQq3oT4m6ArPLzYi4+rk4wZ2m8vCr6BmdKc3Lb9/YcLHZ7aXJEW/+Jf wThgF5wqlG9YKKGnuK1+5EJOowIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKs4DATH N+NCRbrNIeEh6Jwde53QMB8GA1UdIwQYMBaAFDdTco5U8JpIUT3/0vpxgEQR/Nsg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RDZCQi8zQUIwRjc2QUZC NjIxMUU5QTgyQjM5NEFDNEY5QUUwMi9OMU55amxUd21raFJQZl9TLW5HQVJCSDgy eUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL04xTnlqbFR3bWtoUlBmX1MtbkdBUkJIODJ5QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RDZCQi8zQUIwRjc2QUZCNjIxMUU5QTgyQjM5NEFDNEY5QUUwMi9OMU55amxUd21r aFJQZl9TLW5HQVJCSDgyeUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAIeSgkYMJ+2ajHzshVyXJExSURL7O2BylMD7JTTHYYy95BBK+in3aT SWt6iE08wbrGjE38oLSjHpO71My6ko7Wc5RIb8WCfWo2M0vV4cDF0NeXcz0870P1 Euie0OUGZYQ1dF4VQGX9G5xu0GNdG1tfro7QW8NOCc0Ya4j3ydICI7F9dNzzT/OV T/2jrdS7WCB4VpKwEwv2r/PYL8zAJF03C/ILCUoILIBQY+uHA2RI/C8QEOeiLBCY 0H6s+xjfooOWPdtheOuL60OPuzDTtXaQFwvfCp+V48z7j466thS+H0JKKfIo2wmH OhcNJnStBiaLDpRLCgdGxzjGrrIBP6G7 -----END CERTIFICATE-----Generated at Sun Aug 10 18:26:47 2025 by rpki-client