$ rpki-client -vvf rpki.apnic.net/member_repository/A919DD44/D8E31E763A1E11EBAE4ED41AC4F9AE02/nwZsuF9biPgjeA1flmJfQ4VIG78.mft File: nwZsuF9biPgjeA1flmJfQ4VIG78.mft (raw, json) Hash identifier: opxsgHFKRTwUrQ2FY6PrrUC2rkjquTAeuoM0nnVChjA= Subject key identifier: AC:1C:8A:1B:3C:BA:8A:E2:EF:8B:61:D3:61:61:3A:52:D4:61:69:74 Authority key identifier: 9F:06:6C:B8:5F:5B:88:F8:23:78:0D:5F:96:62:5F:43:85:48:1B:BF Certificate issuer: /CN=A919DD44/serialNumber=9F066CB85F5B88F823780D5F96625F4385481BBF Certificate serial: 0758 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nwZsuF9biPgjeA1flmJfQ4VIG78.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919DD44/D8E31E763A1E11EBAE4ED41AC4F9AE02/nwZsuF9biPgjeA1flmJfQ4VIG78.mft Manifest number: 074B Signing time: Tue 12 Aug 2025 22:05:11 +0000 Manifest this update: Tue 12 Aug 2025 22:05:11 +0000 Manifest next update: Tue 19 Aug 2025 22:05:11 +0000 Files and hashes: 1: nwZsuF9biPgjeA1flmJfQ4VIG78.crl (hash: Pmc1S0LwbBV6pWqIhmAR3CbWlOXA9rH8IUL0uoDNah8=) 2: 788169BE3AAC11EBBEE1E81AC4F9AE02.roa (hash: t/R4fAlXQzy9ztNMWRdnB87GayGaEVACHRV/q2Z5jVE=) 3: 026A84FC4C3211ECB9639932C4F9AE02.roa (hash: uBkySuw/pyK9tvxApltYqkUVTPyi7oX70MF7KU+NjE0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919DD44/D8E31E763A1E11EBAE4ED41AC4F9AE02/nwZsuF9biPgjeA1flmJfQ4VIG78.crl rsync://rpki.apnic.net/member_repository/A919DD44/D8E31E763A1E11EBAE4ED41AC4F9AE02/nwZsuF9biPgjeA1flmJfQ4VIG78.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nwZsuF9biPgjeA1flmJfQ4VIG78.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 Aug 2025 22:05:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1880 (0x758) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919DD44, serialNumber=9F066CB85F5B88F823780D5F96625F4385481BBF Validity Not Before: Aug 12 22:05:11 2025 GMT Not After : Aug 19 22:05:11 2025 GMT Subject: CN=689bba97-a1e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:4d:88:21:00:aa:19:98:52:84:8d:25:22:fe: ed:a9:62:a6:b8:35:ce:72:41:b2:02:e7:cf:09:27: ce:39:e7:1b:b4:75:ed:1b:83:bc:bc:6f:c9:57:8a: 98:61:70:7d:58:64:c3:96:c7:99:5f:b4:06:66:c2: 0c:98:a2:f2:3c:2e:86:18:c0:17:26:1f:fd:d0:36: 30:32:00:b6:c9:91:7d:6d:80:99:0c:e2:c9:88:a5: 25:b3:e5:7e:bf:5f:26:61:72:f1:63:03:b6:4a:fc: 0e:6e:67:f1:16:56:fb:16:71:69:1f:6e:36:f9:33: 52:5d:7e:b4:af:a8:25:1f:23:e9:b3:c8:c1:70:85: d8:e9:35:e6:09:8d:51:51:31:23:b4:43:28:71:19: 03:0c:ab:fc:58:30:1a:b6:ff:ba:16:7f:0d:18:51: 15:83:56:ee:93:7e:31:bc:25:93:11:9f:94:38:fa: ec:3c:50:0e:50:94:1c:62:9e:7f:ef:de:5f:cd:bd: 9d:e5:d1:bb:2e:01:cd:21:43:8f:bc:c4:77:85:f4: 9e:cb:d0:a2:14:a9:f8:56:ab:0c:86:a2:9d:7b:f6: 8a:72:ea:f0:7e:97:2f:3f:5b:ca:18:44:08:ea:1a: b0:66:0e:4b:2f:56:c9:1e:fd:1c:bf:13:e7:09:74: 6d:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:1C:8A:1B:3C:BA:8A:E2:EF:8B:61:D3:61:61:3A:52:D4:61:69:74 X509v3 Authority Key Identifier: keyid:9F:06:6C:B8:5F:5B:88:F8:23:78:0D:5F:96:62:5F:43:85:48:1B:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919DD44/D8E31E763A1E11EBAE4ED41AC4F9AE02/nwZsuF9biPgjeA1flmJfQ4VIG78.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nwZsuF9biPgjeA1flmJfQ4VIG78.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919DD44/D8E31E763A1E11EBAE4ED41AC4F9AE02/nwZsuF9biPgjeA1flmJfQ4VIG78.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d7:55:1a:f4:72:84:aa:74:dc:76:fc:3b:a6:4c:c3:09:b6:15: 22:b1:d3:03:e0:91:c3:7d:43:db:4b:c6:b3:52:2b:c2:a2:1d: c0:00:2f:3d:b9:34:1b:91:fd:28:0a:72:61:80:b6:11:64:6d: 24:3d:b0:a5:2f:4d:93:be:1a:60:3d:5c:e9:29:1b:3d:e6:b0: 28:dc:95:24:01:23:23:f4:47:5b:a4:42:53:ec:67:a4:ee:c7: 91:03:ef:ad:f7:92:27:02:eb:a4:40:f8:44:2d:3f:1d:d3:f0: 96:6d:03:c3:8e:0a:f0:95:64:40:22:86:45:4c:da:f9:49:d6: c4:7f:ec:71:7c:c2:90:a7:f3:0d:97:7b:e2:e9:87:53:5e:71: 64:7b:ca:46:0b:21:76:3d:7c:15:23:7e:c2:90:6d:85:7e:c3: 27:91:c4:32:bf:fc:4c:40:7a:32:f8:a6:46:7b:67:49:e5:b3: 36:fe:64:3a:1b:03:3f:ff:3d:a5:7e:a2:6d:b1:51:67:bb:a9: ce:7e:6e:49:83:a3:c9:56:fe:4d:53:dc:ec:2b:bb:7e:f1:77: b1:8f:68:73:73:1d:a4:09:19:2b:d4:a0:20:94:22:e7:6b:f0: 9c:1c:8d:36:7c:6e:de:03:bf:0a:0c:58:bc:c3:48:84:74:a0: f9:94:9a:07 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB1gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OURENDQxMTAvBgNVBAUTKDlGMDY2Q0I4NUY1Qjg4RjgyMzc4MEQ1Rjk2NjI1RjQz ODU0ODFCQkYwHhcNMjUwODEyMjIwNTExWhcNMjUwODE5MjIwNTExWjAYMRYwFAYD VQQDEw02ODliYmE5Ny1hMWU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu02IIQCqGZhShI0lIv7tqWKmuDXOckGyAufPCSfOOecbtHXtG4O8vG/JV4qY YXB9WGTDlseZX7QGZsIMmKLyPC6GGMAXJh/90DYwMgC2yZF9bYCZDOLJiKUls+V+ v18mYXLxYwO2SvwObmfxFlb7FnFpH242+TNSXX60r6glHyPps8jBcIXY6TXmCY1R UTEjtEMocRkDDKv8WDAatv+6Fn8NGFEVg1buk34xvCWTEZ+UOPrsPFAOUJQcYp5/ 795fzb2d5dG7LgHNIUOPvMR3hfSey9CiFKn4VqsMhqKde/aKcurwfpcvP1vKGEQI 6hqwZg5LL1bJHv0cvxPnCXRtzQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKwcihs8 uori74th02FhOlLUYWl0MB8GA1UdIwQYMBaAFJ8GbLhfW4j4I3gNX5ZiX0OFSBu/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5REQ0NC9EOEUzMUU3NjNB MUUxMUVCQUU0RUQ0MUFDNEY5QUUwMi9ud1pzdUY5YmlQZ2plQTFmbG1KZlE0VklH NzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL253WnN1RjliaVBnamVBMWZsbUpmUTRWSUc3OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 REQ0NC9EOEUzMUU3NjNBMUUxMUVCQUU0RUQ0MUFDNEY5QUUwMi9ud1pzdUY5YmlQ Z2plQTFmbG1KZlE0VklHNzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDXVRr0coSqdNx2/DumTMMJthUisdMD4JHDfUPbS8azUivCoh3AAC89 uTQbkf0oCnJhgLYRZG0kPbClL02TvhpgPVzpKRs95rAo3JUkASMj9EdbpEJT7Gek 7seRA++t95InAuukQPhELT8d0/CWbQPDjgrwlWRAIoZFTNr5SdbEf+xxfMKQp/MN l3vi6YdTXnFke8pGCyF2PXwVI37CkG2FfsMnkcQyv/xMQHoy+KZGe2dJ5bM2/mQ6 GwM//z2lfqJtsVFnu6nOfm5Jg6PJVv5NU9zsK7t+8Xexj2hzcx2kCRkr1KAglCLn a/CcHI02fG7eA78KDFi8w0iEdKD5lJoH -----END CERTIFICATE-----Generated at Wed Aug 13 02:59:45 2025 by rpki-client